admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/open_conns/open/dns.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

43 lines
7.2 KiB
Plaintext
Raw Permalink Blame History

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path dns
#open 2019-02-28-12-07-01
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto trans_id rtt query qclass qclass_name qtype qtype_name rcode rcode_name AA TC RD RA Z answers TTLs rejected
#types time string addr port addr port enum count interval string count string count string count string bool bool bool bool count vector[string] vector[interval] bool
1517336042.279652 CVvreZ2AGtqjnP3nnl 192.168.88.2 55638 165.227.88.15 53 udp 42937 0.069982 6dde0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 302f017537c68f5169 60.000000 T
1517336043.354471 C4zL1G2q2YhuW5hCh6 192.168.88.2 28736 165.227.88.15 53 udp 16556 0.078779 0b320175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 c27a017537c68f5169 60.000000 F
1517336044.438943 CeV48h4Dxmx9mh7qd3 192.168.88.2 42647 165.227.88.15 53 udp 7845 0.073451 344b0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 67f2017537c68f5169 60.000000 F
1517336045.517672 CKkRMy2TfxbV02Mfc8 192.168.88.2 20440 165.227.88.15 53 udp 39375 0.064032 0f370175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 8759017537c68f5169 60.000000 F
1517336046.587421 CST5jL2LDLfx36aDJ3 192.168.88.2 39912 165.227.88.15 53 udp 65170 0.071484 251e0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 cf5d017537c68f5169 60.000000 F
1517336047.665136 CChTJ93fyBjt9vTNsb 192.168.88.2 42658 165.227.88.15 53 udp 739 0.072499 31610175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 4a42017537c68f5169 60.000000 F
1517336048.741779 Ck5tpC22orODC7RkA8 192.168.88.2 16271 165.227.88.15 53 udp 13013 0.066540 1a600175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 50fa017537c68f5169 60.000000 F
1517336049.812569 Cggxxq0D12CRFXhgj 192.168.88.2 9373 165.227.88.15 53 udp 17102 0.065963 69a60175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 a7be017537c68f5169 60.000000 F
1517336050.883618 CQXLB24yHbuHS8jP0g 192.168.88.2 56067 165.227.88.15 53 udp 27469 0.060626 06540175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 6d55017537c68f5169 60.000000 F
1517336051.948532 C1XdcZbhbijgg6ybc 192.168.88.2 56908 165.227.88.15 53 udp 64823 0.093769 4bff0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 414c017537c68f5169 60.000000 F
1517336052.042311 CImOfO15K4i2P7bJda 192.168.88.2 22670 165.227.88.15 53 udp 42341 0.056198 4bff0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 7dcd017537c68f5169 60.000000 F
1517336053.003657 C07bu62dzbWtrebr5 192.168.88.2 65341 165.227.88.15 53 udp 8546 0.056776 295a0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 8b9c017537c68f5169 60.000000 F
1517336054.065845 Ckc42T3EMy3KU38Og 192.168.88.2 45908 165.227.88.15 53 udp 20051 0.060806 0d6b0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 7b30017537c68f5169 60.000000 F
1517336055.131700 CNbRBhFKGQHzpanij 192.168.88.2 13003 165.227.88.15 53 udp 63975 0.068884 5f130175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 3a79017537c68f5169 60.000000 F
1517336056.206734 CnirC52h9MYy2PFrzc 192.168.88.2 15220 165.227.88.15 53 udp 39758 0.061912 5a360175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 24b4017537c68f5169 60.000000 F
1517336057.272803 CUqXoW3IVWpNHIJd8 192.168.88.2 37749 165.227.88.15 53 udp 42732 0.055722 46c60175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 efc3017537c68f5169 60.000000 F
1517336058.336124 C2WiYf2v08VITAPvHc 192.168.88.2 27831 165.227.88.15 53 udp 4368 0.066987 617b0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 8c56017537c68f5169 60.000000 F
1517336059.407630 CKIDau4SCr4wYsAae2 192.168.88.2 12507 165.227.88.15 53 udp 22179 0.052250 4b030175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 8748017537c68f5169 60.000000 F
1517336060.465648 C9rzJq2MTvoVIK044d 192.168.88.2 11932 165.227.88.15 53 udp 49437 0.071437 39e80175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 e0ad017537c68f5169 60.000000 F
1517336061.541029 Cp5HYU1w1fB1xfIrN2 192.168.88.2 17558 165.227.88.15 53 udp 43733 0.072925 4c860175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 e00f017537c68f5169 60.000000 F
1517336062.619770 CFRoEy4FM9B8QNSKN5 192.168.88.2 34986 165.227.88.15 53 udp 34785 0.056565 03c10175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 fa08017537c68f5169 60.000000 F
1517336063.681801 Cybr0E1QoT8OUtCNhd 192.168.88.2 17811 165.227.88.15 53 udp 22981 0.062599 745d0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 297d017537c68f5169 60.000000 F
1517336064.747716 CVwA0O1Nz6efGzEGw1 192.168.88.2 7776 165.227.88.15 53 udp 252 0.059161 6c270175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 2787017537c68f5169 60.000000 F
1517336065.811656 Cbw4I32Pi1B7HLp6ol 192.168.88.2 5341 165.227.88.15 53 udp 40146 0.062729 714e0175375169c68f.dnsc.r-1x.com 1 C_INTERNET 16 TXT 0 NOERROR F F T T 0 TXT 18 b1a7017537c68f5169 60.000000 F
1517336146.323324 CnXKrS2sy24xI9KUF8 10.55.200.11 57744 23.61.199.131 53 udp 65164 0.056640 v10-win.vortex.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 geo.vortex.data.microsoft.com.akadns.net 300.000000 F
1517336150.770251 CnRAIf4ree9ClHA6F5 10.55.200.10 54231 193.108.88.128 53 udp 63392 0.052476 v10-win.vortex.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 geo.vortex.data.microsoft.com.akadns.net 300.000000 F
1517336146.135124 CvwD4F3NpL8IsWsnqb 10.55.200.10 54593 172.16.200.11 53 udp 36024 - v10-win.vortex.data.microsoft.com.akadns.net 1 C_INTERNET 1 A - - F F T F 0 - - F
1517336150.823078 C7Vbi33iXM6TIe7eu6 10.55.200.10 53547 172.16.200.11 53 udp 39337 - geo.vortex.data.microsoft.com.akadns.net 1 C_INTERNET 1 A - - F F T F 0 - - F
1517336166.260298 Cybgm9sxnCSxPcWti 192.168.88.2 52744 184.85.248.66 53 udp 53962 0.154592 wildcard.weather.microsoft.com.edgekey.net 1 C_INTERNET 1 A 0 NOERROR T F F F 1 e7070.g.akamaiedge.net 900.000000 F
1517336181.839221 CB6AkG1BNRtZJREXy 10.55.200.11 56288 193.108.88.128 53 udp 16180 0.050808 asimov-win.settings.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 geo.settings.data.microsoft.com.akadns.net 300.000000 F
1517336181.890555 CY0AZ44F59fWL6jxtk 10.55.200.11 55405 193.108.88.128 53 udp 22343 0.051254 geo.settings.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 cy2.settings.data.microsoft.com.akadns.net 300.000000 F
1517336181.942124 Cw6iPz2RDR2qag9Zgg 10.55.200.11 56213 193.108.88.128 53 udp 46205 0.047415 cy2.settings.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 5 NOERROR T F F F 123 64.4.54.253 300.000000 F
1517336185.208478 CT2SKx374HJpKYfAbg 10.55.200.10 54419 193.108.88.128 53 udp 19662 0.048605 asimov-win.settings.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 geo.settings.data.microsoft.com.akadns.net 300.000000 F
1517336189.739584 CpgVJ82nIQdWTY8UGa 10.55.200.10 53268 184.85.248.128 53 udp 55204 0.156410 geo.settings.data.microsoft.com.akadns.net 1 C_INTERNET 1 A 0 NOERROR T F F F 0 cy2.settings.data.microsoft.com.akadns.net 300.000000 F
Reference in New Issue View Git Blame Copy Permalink