when,ip,message 2018-10-22 09:21:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=35666 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 10:25:20,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56368 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 11:06:07,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=43911 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 11:52:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=44139 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 13:00:21,71.6.232.7,SRC=71.6.232.7 DST=23.92.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=57079 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 14:43:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=34136 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 15:28:21,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56635 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 16:52:21,71.6.232.7,SRC=71.6.232.7 DST=162.213.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=58442 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 17:09:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=49571 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 17:42:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=50148 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 17:54:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=33240 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 18:57:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=49889 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 19:37:22,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=33787 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-22 20:55:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=49828 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 00:18:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=50573 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 00:23:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=39156 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 03:52:22,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=57096 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 04:16:18,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=46801 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 04:45:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54687 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 05:00:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=55474 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 07:11:18,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=52025 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 10:14:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=43614 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 10:38:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=40403 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 11:31:23,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56005 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 13:49:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=36506 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 14:01:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=49584 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 15:36:24,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54969 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 15:43:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=47423 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 16:22:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=53007 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 16:36:25,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=35435 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 17:21:24,71.6.232.7,SRC=71.6.232.7 DST=104.251.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=45916 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 19:14:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=58155 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 20:42:23,71.6.232.7,SRC=71.6.232.7 DST=192.211.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=45974 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-23 22:33:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=58716 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 00:29:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=55958 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 00:36:08,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54496 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 01:03:36,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=33654 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 02:04:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=44931 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 02:52:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60628 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 03:03:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56949 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-24 04:29:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=49407 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-25 19:07:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=57502 DPT=53 LEN=44 2018-10-25 19:16:07,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=38850 DPT=53 LEN=44 2018-10-25 19:34:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=38140 DPT=53 LEN=44 2018-10-25 19:37:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=56939 DPT=53 LEN=44 2018-10-25 19:57:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=52763 DPT=53 LEN=44 2018-10-25 19:59:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=37669 DPT=53 LEN=44 2018-10-25 20:30:07,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=39831 DPT=53 LEN=44 2018-10-25 20:42:27,71.6.232.7,SRC=71.6.232.7 DST=23.29.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=47129 DPT=53 LEN=44 2018-10-25 20:47:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=36266 DPT=53 LEN=44 2018-10-25 20:48:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=45946 DPT=53 LEN=44 2018-10-25 21:11:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=43576 DPT=53 LEN=44 2018-10-25 21:29:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=58067 DPT=53 LEN=44 2018-10-25 21:34:26,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=33191 DPT=53 LEN=44 2018-10-25 21:36:07,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=49143 DPT=53 LEN=44 2018-10-25 21:52:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=34224 DPT=53 LEN=44 2018-10-25 22:30:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=34414 DPT=53 LEN=44 2018-10-25 22:44:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=50420 DPT=53 LEN=44 2018-10-25 22:45:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=53120 DPT=53 LEN=44 2018-10-25 22:54:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=33551 DPT=53 LEN=44 2018-10-25 23:33:26,71.6.232.7,SRC=71.6.232.7 DST=162.213.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=51045 DPT=53 LEN=44 2018-10-25 23:42:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=51220 DPT=53 LEN=44 2018-10-26 00:02:27,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=52799 DPT=53 LEN=44 2018-10-26 00:21:30,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=41434 DPT=53 LEN=44 2018-10-26 00:42:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=48208 DPT=53 LEN=44 2018-10-26 00:47:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=35495 DPT=53 LEN=44 2018-10-26 01:12:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=53610 DPT=53 LEN=44 2018-10-26 01:21:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=38045 DPT=53 LEN=44 2018-10-26 01:24:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=36428 DPT=53 LEN=44 2018-10-26 01:24:26,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=32896 DPT=53 LEN=44 2018-10-26 01:34:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=46276 DPT=53 LEN=44 2018-10-26 01:35:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=58887 DPT=53 LEN=44 2018-10-26 01:45:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=57983 DPT=53 LEN=44 2018-10-26 01:55:11,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=35147 DPT=53 LEN=44 2018-10-26 01:58:27,71.6.232.7,SRC=71.6.232.7 DST=23.92.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=44509 DPT=53 LEN=44 2018-10-26 02:00:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=40833 DPT=53 LEN=44 2018-10-26 02:08:26,71.6.232.7,SRC=71.6.232.7 DST=23.29.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=56276 DPT=53 LEN=44 2018-10-26 02:19:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=51035 DPT=53 LEN=44 2018-10-26 02:28:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=39355 DPT=53 LEN=44 2018-10-26 02:34:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=53607 DPT=53 LEN=44 2018-10-26 03:03:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=56553 DPT=53 LEN=44 2018-10-26 03:04:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=38917 DPT=53 LEN=44 2018-10-26 03:34:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=38105 DPT=53 LEN=44 2018-10-26 03:38:27,71.6.232.7,SRC=71.6.232.7 DST=23.92.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=60354 DPT=53 LEN=44 2018-10-26 03:45:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=33248 DPT=53 LEN=44 2018-10-26 03:50:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=33474 DPT=53 LEN=44 2018-10-26 04:10:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=47733 DPT=53 LEN=44 2018-10-26 04:25:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=58423 DPT=53 LEN=44 2018-10-26 05:04:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=45558 DPT=53 LEN=44 2018-10-26 05:06:07,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=48827 DPT=53 LEN=44 2018-10-26 05:19:27,71.6.232.7,SRC=71.6.232.7 DST=23.92.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=49503 DPT=53 LEN=44 2018-10-26 05:24:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=37977 DPT=53 LEN=44 2018-10-26 05:30:07,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=64 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=50162 DPT=53 LEN=44 2018-10-26 09:59:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=55426 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 10:16:08,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=39615 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 10:24:27,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=50549 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 10:44:27,71.6.232.7,SRC=71.6.232.7 DST=192.211.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=59775 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 11:20:28,71.6.232.7,SRC=71.6.232.7 DST=144.168.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=50906 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 11:38:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=50812 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 11:57:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=51840 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:06:06,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=58018 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:12:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=37675 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:15:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=51098 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:18:05,71.6.232.7,SRC=71.6.232.7 DST=107.155.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=58587 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:20:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56497 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:32:05,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=52481 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 2018-10-26 12:38:06,71.6.232.7,SRC=71.6.232.7 DST=23.227.*.* LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=51497 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0