Your IP : 172.28.240.42

Current Path : /home/striker/
Upload File :
Current File : //home/striker/tcpdump.log

11:06:19.102955 IP 104.21.0.177.https > 172.28.240.3.49783: Flags [.], seq 1627902073:1627903521, ack 2134222385, win 8, options [nop,nop,TS val 2279856776 ecr 1396871], length 1448
11:06:19.102971 IP 172.28.240.3.49783 > 104.21.0.177.https: Flags [.], ack 1448, win 500, options [nop,nop,TS val 1396913 ecr 2279856776,nop,nop,sack 2 {2896:5592}{34552:36000}], length 0
11:06:19.103072 IP 104.21.0.177.https > 172.28.240.3.49783: Flags [P.], seq 1448:2896, ack 1, win 8, options [nop,nop,TS val 2279856776 ecr 1396871], length 1448
11:06:19.103078 IP 172.28.240.3.49783 > 104.21.0.177.https: Flags [.], ack 5592, win 523, options [nop,nop,TS val 1396913 ecr 2279856776,nop,nop,sack 1 {34552:36000}], length 0
11:06:19.103921 IP 172.28.240.3.ssh > 172.30.237.120.64092: Flags [P.], seq 1518835194:1518835402, ack 4280323947, win 3103, length 208
11:06:19.104194 IP 172.28.240.3.47304 > web-server.e-nk.ru.domain: 5094+ PTR? 3.240.28.172.in-addr.arpa. (43)
11:06:19.104533 IP web-server.e-nk.ru.domain > 172.28.240.3.47304: 5094 NXDomain* 0/1/0 (97)
11:06:20.409949 IP 172.28.240.3.48055 > web-server.e-nk.ru.domain: 10842+ PTR? 120.237.30.172.in-addr.arpa. (45)
11:06:20.410049 IP 185.166.22.181.http > 172.28.240.3.36828: Flags [.], seq 2667536237:2667537667, ack 1931410950, win 1135, options [nop,nop,TS val 833796536 ecr 1397200], length 1430: HTTP
11:06:20.410055 IP 172.28.240.3.36828 > 185.166.22.181.http: Flags [.], ack 4294965866, win 523, options [nop,nop,TS val 1397239 ecr 833796393,nop,nop,sack 2 {0:1430}{10011:11441}], length 0
11:06:20.410280 IP web-server.e-nk.ru.domain > 172.28.240.3.48055: 10842 NXDomain* 0/1/0 (99)
11:06:20.410388 IP 172.28.240.3.39539 > web-server.e-nk.ru.domain: 7421+ PTR? 181.22.166.185.in-addr.arpa. (45)
11:06:20.410862 IP 172.28.240.3.51679 > 212.227.110.147.https: Flags [P.], seq 3675241632:3675241976, ack 2193352605, win 319, options [nop,nop,TS val 1397240 ecr 1971000157], length 344
11:06:20.411540 IP webserver.kremer-its.de.http > 172.28.240.3.34407: Flags [.], seq 1612792311:1612793759, ack 381480805, win 235, options [nop,nop,TS val 531213759 ecr 1396956], length 1448: HTTP
11:06:20.411545 IP 172.28.240.3.34407 > webserver.kremer-its.de.http: Flags [.], ack 2896, win 1386, options [nop,nop,TS val 1397240 ecr 531213759,nop,nop,sack 1 {4344:7240}], length 0
11:06:21.081203 IP core1.bikeonet.hu.http > 172.28.240.3.38982: Flags [.], ack 3288286121, win 507, options [nop,nop,TS val 729496957 ecr 1397375], length 0
11:06:21.081214 IP 172.28.240.3.45605 > web-server.e-nk.ru.domain: 56955+ PTR? 147.110.227.212.in-addr.arpa. (46)
11:06:21.081268 IP redirect.cpserver.net.http > 172.28.240.3.40456: Flags [S.], seq 2572745052, ack 2927369689, win 28960, options [mss 1460,sackOK,TS val 2893146369 ecr 1397375,nop,wscale 7], length 0
11:06:21.081276 IP 172.28.240.3.40456 > redirect.cpserver.net.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1397407 ecr 2893146369], length 0
11:06:22.490088 IP 172.28.240.3.39518 > web-server.e-nk.ru.domain: 25736+ PTR? 197.167.70.217.in-addr.arpa. (45)
11:06:23.012268 IP 172.28.240.3.44381 > web-server.e-nk.ru.domain: 65187+ PTR? 64.199.181.213.in-addr.arpa. (45)
11:06:23.012292 IP web-server.e-nk.ru.domain > 172.28.240.3.44790: 19947 NXDomain* 0/1/0 (82)
11:06:24.505078 IP 172.28.240.3.46684 > web-server.e-nk.ru.domain: 38302+ PTR? 205.252.172.79.in-addr.arpa. (45)
11:06:24.505226 IP 203.0.153.160.host.secureserver.net.https > 172.28.240.3.44951: Flags [.], seq 2763389922:2763391370, ack 1353962183, win 8, options [nop,nop,TS val 3235626986 ecr 1398198], length 1448
11:06:24.888224 IP web36.alfahosting-server.de.https > 172.28.240.3.44878: Flags [.], seq 2219713892:2219715340, ack 285411809, win 16, options [nop,nop,TS val 2356710915 ecr 1398225], length 1448
11:06:24.888232 IP 172.28.240.3.44878 > web36.alfahosting-server.de.https: Flags [.], ack 2896, win 681, options [nop,nop,TS val 1398359 ecr 2356710915], length 0
11:06:24.888261 IP 172.28.240.3.37897 > web-server.e-nk.ru.domain: 50925+ PTR? 203.0.153.160.in-addr.arpa. (44)
11:06:24.889288 IP 104.21.54.132.http > 172.28.240.3.37796: Flags [.], ack 1317982268, win 8, options [nop,nop,TS val 2889845426 ecr 1398312], length 0
11:06:24.889317 IP 104.21.54.132.http > 172.28.240.3.37795: Flags [.], ack 2052500935, win 7, options [nop,nop,TS val 3245999987 ecr 1398312], length 0
11:06:24.889389 IP 104.21.54.132.http > 172.28.240.3.37794: Flags [.], ack 4278760516, win 8, options [nop,nop,TS val 468017842 ecr 1398312], length 0
11:06:25.051813 IP webcluster2.webpod14-cph3.one.com.http > 172.28.240.3.46717: Flags [P.], seq 3454876301:3454877749, ack 894980936, win 33, options [nop,nop,TS val 1564959208 ecr 1398367], length 1448: HTTP
11:06:25.248088 IP 172.28.240.3.46256 > web-server.e-nk.ru.domain: 1795+ PTR? 132.54.21.104.in-addr.arpa. (44)
11:06:25.248267 IP be3.netangels.ru.http > 172.28.240.3.47747: Flags [.], seq 846783044:846784492, ack 999630758, win 235, options [nop,nop,TS val 3740232893 ecr 1398421], length 1448: HTTP
11:06:25.248273 IP 172.28.240.3.47747 > be3.netangels.ru.http: Flags [.], ack 4294962952, win 817, options [nop,nop,TS val 1398449 ecr 3740232785,nop,nop,sack 1 {4294964400:1448}], length 0
11:06:25.474741 IP web-server.e-nk.ru.domain > 172.28.240.3.46261: 48652 1/6/10 A 151.236.33.81 (401)
11:06:25.474760 IP 172.28.240.3.40220 > web-server.e-nk.ru.domain: 23291+ PTR? 181.213.30.46.in-addr.arpa. (44)
11:06:25.474830 IP 172.28.240.3.38587 > ied-sa.fr.http: Flags [S], seq 2078068865, win 29200, options [mss 1460,sackOK,TS val 1398505 ecr 0,nop,wscale 7], length 0
11:06:26.965690 IP 172.28.240.3.50499 > web-server.e-nk.ru.domain: 62481+ PTR? 49.52.201.91.in-addr.arpa. (43)
11:06:26.965791 IP web-server.e-nk.ru.domain > 172.28.240.3.60319: 64560 0/1/0 (102)
11:06:27.227892 IP 172.28.240.3.53049 > web-server.e-nk.ru.domain: 11623+ PTR? 81.33.236.151.in-addr.arpa. (44)
11:06:27.227967 IP 172.28.240.3.44098 > server.hopeofharvest2021.org.http: Flags [S], seq 554439853, win 29200, options [mss 1460,sackOK,TS val 1398944 ecr 0,nop,wscale 7], length 0
11:06:27.228005 IP 172.28.240.3.44099 > server.hopeofharvest2021.org.http: Flags [S], seq 646872204, win 29200, options [mss 1460,sackOK,TS val 1398944 ecr 0,nop,wscale 7], length 0
11:06:27.228035 IP 172.28.240.3.44100 > server.hopeofharvest2021.org.http: Flags [S], seq 2845059206, win 29200, options [mss 1460,sackOK,TS val 1398944 ecr 0,nop,wscale 7], length 0
11:06:27.758346 IP 104.21.0.177.https > 172.28.240.3.49784: Flags [.], seq 1551557695:1551559103, ack 2079484280, win 8, options [nop,nop,TS val 808860280 ecr 1398920], length 1408
11:06:27.758351 IP 172.28.240.3.49784 > 104.21.0.177.https: Flags [.], ack 4294958654, win 1035, options [nop,nop,TS val 1399076 ecr 808859624,nop,nop,sack 3 {0:1408}{4294964414:4294965848}{4294960150:4294961518}], length 0
11:06:27.758426 IP 172.28.240.3.51824 > web-server.e-nk.ru.domain: 46294+ PTR? 126.175.90.157.in-addr.arpa. (45)
11:06:27.758473 IP 172.28.240.3.34923 > uvn-234-14.ams01.zonevs.eu.https: Flags [P.], seq 1936280178:1936280209, ack 661056064, win 319, options [nop,nop,TS val 1399076 ecr 871954072], length 31
11:06:29.052280 IP 172.28.240.3.52888 > web-server.e-nk.ru.domain: 58021+ PTR? 14.234.222.85.in-addr.arpa. (44)
11:06:29.053582 IP server216.campusspeicher.de.http > 172.28.240.3.57057: Flags [.], seq 3792723705:3792725153, ack 2820919928, win 15, options [nop,nop,TS val 3643025387 ecr 1399286], length 1448: HTTP
11:06:29.053589 IP 172.28.240.3.57057 > server216.campusspeicher.de.http: Flags [.], ack 4294964400, win 1313, options [nop,nop,TS val 1399400 ecr 3643024957,nop,nop,sack 1 {0:1448}], length 0
11:06:29.054482 IP static-ab12.rev.smarthost.pl.https > 172.28.240.3.48533: Flags [.], seq 338182982:338184430, ack 3891187665, win 61, options [nop,nop,TS val 199425294 ecr 1399318], length 1448
11:06:29.054495 IP 172.28.240.3.48533 > static-ab12.rev.smarthost.pl.https: Flags [.], ack 4294957160, win 387, options [nop,nop,TS val 1399400 ecr 199424965,nop,nop,sack 3 {0:1448}{4294964400:4294965848}{4294961504:4294962952}], length 0
11:06:29.054861 IP 172.28.240.3.34218 > pageperfect.cloud.tilaa.com.http: Flags [S], seq 3061316493, win 29200, options [mss 1460,sackOK,TS val 1399401 ecr 0,nop,wscale 7], length 0
11:06:30.366184 IP 172.28.240.3.34426 > web-server.e-nk.ru.domain: 61840+ PTR? 180.168.137.185.in-addr.arpa. (46)
11:06:30.366783 IP web227.controlepaneel.net.http > 172.28.240.3.37862: Flags [.], seq 2482825060:2482826508, ack 4264022293, win 235, options [nop,nop,TS val 1554632415 ecr 1399570], length 1448: HTTP
11:06:31.039222 IP 172.28.240.3.33633 > web-server.e-nk.ru.domain: 26941+ PTR? 12.221.211.91.in-addr.arpa. (44)
11:06:31.039297 IP 217-160-0-241.elastic-ssl.ui-r.com.https > 172.28.240.3.56703: Flags [.], seq 3162770862:3162772310, ack 2082256170, win 17, options [nop,nop,TS val 1868352718 ecr 1399816], length 1448
11:06:31.437607 IP 172.28.240.3.43771 > web-server.e-nk.ru.domain: 33956+ PTR? 46.115.22.84.in-addr.arpa. (43)
11:06:31.437912 IP web-server.e-nk.ru.domain > 172.28.240.3.42125: 39077 ServFail 0/0/0 (30)
11:06:33.907563 IP 172.28.240.3.59223 > web-server.e-nk.ru.domain: 9403+ PTR? 88.164.116.185.in-addr.arpa. (45)
11:06:33.907609 IP s171.sureserver.com.http > 172.28.240.3.35220: Flags [.], seq 2833152064:2833153512, ack 3251629250, win 508, options [nop,nop,TS val 4275503638 ecr 1400443], length 1448: HTTP
11:06:35.250033 IP 172.28.240.3.38384 > web-server.e-nk.ru.domain: 44691+ PTR? 241.0.160.217.in-addr.arpa. (44)
11:06:35.250546 IP lodwar.jijini.com.https > 172.28.240.3.50589: Flags [.], seq 833882366:833883814, ack 1036518014, win 252, options [nop,nop,TS val 508060344 ecr 1399953], length 1448
11:06:35.562502 IP 172.28.240.3.40988 > web-server.e-nk.ru.domain: 1314+ PTR? 147.204.251.116.in-addr.arpa. (46)
11:06:35.562655 IP 172.28.240.3.60325 > 104.17.139.104.http: Flags [S], seq 1117597760, win 29200, options [mss 1460,sackOK,TS val 1401027 ecr 0,nop,wscale 7], length 0
11:06:35.562724 IP 172.28.240.3.42828 > a4ec4c6ea1c92e2e6.awsglobalaccelerator.com.http: Flags [F.], seq 970389505, ack 3060577827, win 237, options [nop,nop,TS val 1401027 ecr 1087129830], length 0
11:06:35.562736 IP 172.28.240.3.42829 > a4ec4c6ea1c92e2e6.awsglobalaccelerator.com.http: Flags [F.], seq 3577833438, ack 1765948061, win 237, options [nop,nop,TS val 1401027 ecr 1089854016], length 0
11:06:35.848280 IP 172.28.240.3.49821 > web-server.e-nk.ru.domain: 30761+ PTR? 228.50.217.95.in-addr.arpa. (44)
11:06:35.848400 IP static.36.54.201.138.clients.your-server.de.https > 172.28.240.3.51110: Flags [.], seq 916093704:916095152, ack 553639168, win 243, options [nop,nop,TS val 3830160119 ecr 1400962], length 1448
11:06:36.130357 IP 172.28.240.3.34414 > web-server.e-nk.ru.domain: 29799+ PTR? 104.139.17.104.in-addr.arpa. (45)
11:06:36.130456 IP 109.234.162.200.https > 172.28.240.3.36451: Flags [.], seq 2613867258:2613868706, ack 3272495361, win 243, options [nop,nop,TS val 1334706144 ecr 1401128], length 1448
11:06:36.286618 IP 172.28.240.3.35287 > web-server.e-nk.ru.domain: 23551+ PTR? 147.152.33.3.in-addr.arpa. (43)
11:06:36.306809 IP 172.28.240.3.60803 > web-server.e-nk.ru.domain: 38986+ PTR? 36.54.201.138.in-addr.arpa. (44)
11:06:36.306857 IP 172.28.240.3.38064 > static.231.252.201.138.clients.your-server.de.https: Flags [.], ack 1836866473, win 319, options [nop,nop,TS val 1401214 ecr 4114062158], length 0
11:06:36.306866 IP 172.28.240.3.49613 > nano18.talahost.com.http: Flags [.], ack 1522765769, win 237, options [nop,nop,TS val 1401214 ecr 139594951], length 0
11:06:36.598324 IP 172.28.240.3.46619 > web-server.e-nk.ru.domain: 41905+ PTR? 200.162.234.109.in-addr.arpa. (46)
11:06:36.598378 IP xb2.serverdomain.org.http > 172.28.240.3.56740: Flags [S.], seq 3888083738, ack 3482942404, win 65160, options [mss 1460,sackOK,TS val 2800635507 ecr 1401247,nop,wscale 7], length 0
11:06:37.002032 IP 172.28.240.3.50374 > web-server.e-nk.ru.domain: 35252+ PTR? 231.252.201.138.in-addr.arpa. (46)
11:06:37.002043 IP 109.234.162.200.https > 172.28.240.3.36453: Flags [.], seq 2506957313:2506958761, ack 468437915, win 243, options [nop,nop,TS val 1334707007 ecr 1401344], length 1448
11:06:37.002057 IP 172.28.240.3.36453 > 109.234.162.200.https: Flags [.], ack 2896, win 723, options [nop,nop,TS val 1401387 ecr 1334707007], length 0
11:06:37.283545 IP 172.28.240.3.50925 > web-server.e-nk.ru.domain: 61235+ PTR? 5.205.207.91.in-addr.arpa. (43)
11:06:37.567363 IP d01ili-prismi7.sphostserver.com.https > 172.28.240.3.41213: Flags [.], seq 3352755484:3352756932, ack 2869641436, win 252, options [nop,nop,TS val 3031267568 ecr 1401484], length 1448
11:06:37.567370 IP 172.28.240.3.41213 > d01ili-prismi7.sphostserver.com.https: Flags [.], ack 1448, win 531, options [nop,nop,TS val 1401529 ecr 3031267568], length 0
11:06:39.138530 IP hosting.iskolanoverek.hu.http > 172.28.240.3.45496: Flags [.], ack 1840607491, win 507, options [nop,nop,TS val 2402658377 ecr 1401886], length 0
11:06:39.138603 IP hosting.iskolanoverek.hu.https > 172.28.240.3.50554: Flags [S.], seq 2404277650, ack 2607556843, win 65160, options [mss 1460,sackOK,TS val 2402658376 ecr 1401886,nop,wscale 7], length 0
11:06:39.138613 IP 172.28.240.3.50554 > hosting.iskolanoverek.hu.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 1401921 ecr 2402658376], length 0
11:06:39.138616 IP 172.28.240.3.43958 > web-server.e-nk.ru.domain: 2394+ PTR? 138.34.254.46.in-addr.arpa. (44)
11:06:39.138686 IP 185.221.105.78.https > 172.28.240.3.36416: Flags [F.], seq 169528643, ack 1476475764, win 1505, options [nop,nop,TS val 833815514 ecr 1401635], length 0
11:06:39.430319 IP 172.28.240.3.49687 > web-server.e-nk.ru.domain: 17697+ PTR? 123.194.224.193.in-addr.arpa. (46)
11:06:39.430358 IP s171.sureserver.com.http > 172.28.240.3.35220: Flags [P.], seq 41992:42941, ack 1, win 508, options [nop,nop,TS val 4275509183 ecr 1401790], length 949: HTTP
11:06:41.104649 IP 172.28.240.3.50728 > web-server.e-nk.ru.domain: 6365+ PTR? 78.105.221.185.in-addr.arpa. (45)
11:06:41.105196 IP 74-208-236-233.elastic-ssl.ui-r.com.http > 172.28.240.3.54487: Flags [P.], seq 3796438093:3796438608, ack 987113056, win 17, options [nop,nop,TS val 2792551714 ecr 1402160], length 515: HTTP: HTTP/1.1 302 Found
11:06:41.105200 IP 172.28.240.3.54487 > 74-208-236-233.elastic-ssl.ui-r.com.http: Flags [.], ack 515, win 237, options [nop,nop,TS val 1402413 ecr 2792551714], length 0
11:06:41.106104 IP 31.205.130.94.ipapaki.gr.https > 172.28.240.3.56053: Flags [.], seq 937403085:937404533, ack 1661785160, win 252, options [nop,nop,TS val 3158862345 ecr 1402374], length 1448
11:06:42.501950 IP 172.28.240.3.40223 > web-server.e-nk.ru.domain: 46039+ PTR? 233.236.208.74.in-addr.arpa. (45)
11:06:42.502095 IP web-server.e-nk.ru.domain > 172.28.240.3.59982: 26805 NXDomain* 0/1/0 (93)
11:06:42.502122 IP 172.28.240.3.45450 > web-server.e-nk.ru.domain: 54298+ A? nsbc.memberclicks.net. (39)
11:06:42.502399 IP web-server.e-nk.ru.domain > 172.28.240.3.45450: 54298 NXDomain 0/1/0 (101)
11:06:42.771705 IP 198.185.159.145.https > 172.28.240.3.45001: Flags [.], seq 4123136121:4123137385, ack 3228577243, win 32140, options [nop,nop,TS val 3426820229 ecr 1402694], length 1264
11:06:42.771713 IP 172.28.240.3.45001 > 198.185.159.145.https: Flags [.], ack 1264, win 837, options [nop,nop,TS val 1402830 ecr 3426820229], length 0
11:06:45.327136 IP 172.28.240.3.57473 > web-server.e-nk.ru.domain: 33480+ PTR? 145.159.185.198.in-addr.arpa. (46)
11:06:45.327496 IP 172.28.240.254.46996 > 172.28.240.3.https: Flags [.], ack 966260973, win 2535, options [nop,nop,TS val 53095853 ecr 1403467], length 0
11:06:45.327499 IP 172.28.240.3.https > 172.28.240.254.46996: Flags [.], seq 30409:34753, ack 0, win 724, options [nop,nop,TS val 1403469 ecr 53095853], length 4344
11:06:45.327504 IP s1029.use1.mysecurecloudhost.com.http > 172.28.240.3.37668: Flags [.], seq 2798608874:2798610322, ack 3027196, win 235, options [nop,nop,TS val 3907490623 ecr 1403401], length 1448: HTTP: HTTP/1.1 200 OK
11:06:45.327510 IP 172.28.240.3.37668 > s1029.use1.mysecurecloudhost.com.http: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1403469 ecr 3907490623,nop,nop,sack 1 {14480:15928}], length 0
11:06:47.328818 IP 172.28.240.3.44943 > web-server.e-nk.ru.domain: 32197+ PTR? 254.240.28.172.in-addr.arpa. (45)
11:06:47.329324 IP web-server.e-nk.ru.domain > 172.28.240.3.44943: 32197 NXDomain* 0/1/0 (99)
11:06:47.329389 IP 172.28.240.3.35511 > web-server.e-nk.ru.domain: 16316+ PTR? 134.111.181.65.in-addr.arpa. (45)
11:06:47.329957 IP web-server.e-nk.ru.domain > 172.28.240.3.54535: 19908 NXDomain 0/1/0 (110)
11:06:47.329992 IP 172.28.240.3.60895 > web-server.e-nk.ru.domain: 33222+ AAAA? debtproblemsadvice.co.uk.e-nk.ru. (50)
11:06:47.599793 IP 217-160-0-254.elastic-ssl.ui-r.com.http > 172.28.240.3.55106: Flags [.], seq 4080665850:4080667298, ack 1285337955, win 17, options [nop,nop,TS val 2904760812 ecr 1403860], length 1448: HTTP
11:06:47.599805 IP 172.28.240.3.55106 > 217-160-0-254.elastic-ssl.ui-r.com.http: Flags [.], ack 5792, win 1043, options [nop,nop,TS val 1404037 ecr 2904760812], length 0
11:06:47.599929 IP 172.28.240.3.55782 > web-server.e-nk.ru.domain: 10029+ PTR? 254.0.160.217.in-addr.arpa. (44)
11:06:47.601117 IP 172.28.240.3.58826 > rssg-cp1.readyspace.com.http: Flags [R.], seq 925968506, ack 537962176, win 568, options [nop,nop,TS val 1404037 ecr 3646567581], length 0
11:06:47.601320 IP host-195-191-148-123.superhosting.bg.http > 172.28.240.3.40399: Flags [.], seq 2726997667:2726999115, ack 3486428104, win 235, options [nop,nop,TS val 1694765505 ecr 1403649], length 1448: HTTP: HTTP/1.1 404 Component not found.
11:06:47.601327 IP 172.28.240.3.40399 > host-195-191-148-123.superhosting.bg.http: Flags [.], ack 1448, win 251, options [nop,nop,TS val 1404037 ecr 1694765505], length 0
11:06:47.601441 IP host-195-191-148-123.superhosting.bg.http > 172.28.240.3.40399: Flags [.], seq 1448:2896, ack 1, win 235, options [nop,nop,TS val 1694765505 ecr 1403649], length 1448: HTTP
11:06:47.866533 IP mail.filipposfurs.com.https > 172.28.240.3.49477: Flags [.], seq 2480216457:2480217905, ack 1428123709, win 260, options [nop,nop,TS val 995120880 ecr 1404066], length 1448
11:06:47.866539 IP 172.28.240.3.49477 > mail.filipposfurs.com.https: Flags [.], ack 1448, win 986, options [nop,nop,TS val 1404103 ecr 995120880], length 0
11:06:47.866542 IP 172.28.240.3.56330 > web-server.e-nk.ru.domain: 31340+ PTR? 16.164.3.103.in-addr.arpa. (43)
11:06:49.054661 IP serv68-26.hostland.ru.http > 172.28.240.3.49960: Flags [.], seq 1071684654:1071686102, ack 60906810, win 235, options [nop,nop,TS val 455658971 ecr 1404344], length 1448: HTTP
11:06:49.449769 IP srv1.anyservers.com.https > 172.28.240.3.34301: Flags [.], seq 4075314939:4075316387, ack 3759305776, win 243, options [nop,nop,TS val 2658378643 ecr 1404454], length 1448
11:06:49.449774 IP 172.28.240.3.34301 > srv1.anyservers.com.https: Flags [.], ack 4294965848, win 806, options [nop,nop,TS val 1404499 ecr 2658378474,nop,nop,sack 1 {0:1448}], length 0
11:06:49.449814 IP 172.28.240.3.33641 > web-server.e-nk.ru.domain: 9762+ PTR? 68.112.46.78.in-addr.arpa. (43)
11:06:49.714258 IP 172.28.240.3.40297 > web-server.e-nk.ru.domain: 2247+ PTR? 68.122.26.185.in-addr.arpa. (44)
11:06:49.714825 IP 198.185.159.145.https > 172.28.240.3.46148: Flags [.], seq 2247753832:2247755096, ack 2924420966, win 32140, options [nop,nop,TS val 3772555337 ecr 1404526], length 1264
11:06:49.714833 IP 172.28.240.3.46148 > 198.185.159.145.https: Flags [.], ack 4294966032, win 497, options [nop,nop,TS val 1404565 ecr 3772555158], length 0
11:06:49.878653 IP web78.extendcp.co.uk.http > 172.28.240.3.33839: Flags [.], seq 4079736492:4079737940, ack 3432273498, win 235, options [nop,nop,TS val 3180306386 ecr 1404485], length 1448: HTTP
11:06:51.169754 IP 172.28.240.3.41532 > web-server.e-nk.ru.domain: 12173+ PTR? 78.44.170.79.in-addr.arpa. (43)
11:06:51.169923 IP hosting.24.ie.https > 172.28.240.3.38798: Flags [.], seq 41826404:41827852, ack 1757001552, win 122, options [nop,nop,TS val 2269128992 ecr 1404893], length 1448
11:06:51.169930 IP 172.28.240.3.38798 > hosting.24.ie.https: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1404929 ecr 2269128992], length 0
11:06:51.169966 IP hosting.24.ie.https > 172.28.240.3.38798: Flags [P.], seq 1448:1918, ack 1, win 122, options [nop,nop,TS val 2269128992 ecr 1404893], length 470
11:06:51.169968 IP 172.28.240.3.38798 > hosting.24.ie.https: Flags [.], ack 1918, win 296, options [nop,nop,TS val 1404929 ecr 2269128992], length 0
11:06:51.171907 IP cp4.names.co.uk.http > 172.28.240.3.34776: Flags [.], seq 825422821:825424269, ack 2444211715, win 4649, options [nop,nop,TS val 833827307 ecr 1404892], length 1448: HTTP
11:06:51.526091 IP 172.28.240.3.33774 > web-server.e-nk.ru.domain: 57397+ PTR? 204.25.76.144.in-addr.arpa. (44)
11:06:51.526128 IP 172.28.240.3.51228 > server-07.dependentmedia.com.https: Flags [P.], seq 584386022:584386216, ack 3305202818, win 282, options [nop,nop,TS val 1405018 ecr 1772845751], length 194
11:06:54.025831 IP 172.28.240.3.59437 > web-server.e-nk.ru.domain: 40389+ PTR? 141.160.233.85.in-addr.arpa. (45)
11:06:54.028545 IP shared71.cloud86-host.nl.http > 172.28.240.3.40522: Flags [.], seq 1903532490:1903533938, ack 2702346433, win 235, options [nop,nop,TS val 2508170 ecr 1405467], length 1448: HTTP
11:06:54.028551 IP 172.28.240.3.40522 > shared71.cloud86-host.nl.http: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1405644 ecr 2508170], length 0
11:06:54.030065 IP hosting.iskolanoverek.hu.https > 172.28.240.3.50555: Flags [.], seq 855382764:855384212, ack 551091229, win 503, options [nop,nop,TS val 2402673264 ecr 1405608], length 1448
11:06:54.292264 IP 198.185.159.145.https > 172.28.240.3.45037: Flags [.], seq 2005755891:2005757155, ack 4096824137, win 32140, options [nop,nop,TS val 150902617 ecr 1405671], length 1264
11:06:54.292269 IP 172.28.240.3.45037 > 198.185.159.145.https: Flags [.], ack 4294964768, win 1214, options [nop,nop,TS val 1405710 ecr 150902257], length 0
11:06:54.531766 IP 185.15.192.141.https > 172.28.240.3.60129: Flags [.], seq 2644254687:2644256135, ack 800877478, win 5034, options [nop,nop,TS val 833830890 ecr 1405729], length 1448
11:06:54.531773 IP 172.28.240.3.60129 > 185.15.192.141.https: Flags [.], ack 1448, win 65160, options [nop,nop,TS val 1405770 ecr 833830890,nop,nop,sack 1 {2896:6936}], length 0
11:06:54.889994 IP 172.28.240.3.48996 > web-server.e-nk.ru.domain: 35847+ PTR? 141.192.15.185.in-addr.arpa. (45)
11:06:54.890035 IP rsllinux.hostingperte.it.https > 172.28.240.3.45878: Flags [.], seq 3223187620:3223189068, ack 3983025143, win 235, options [nop,nop,TS val 1504823358 ecr 1405816], length 1448
11:06:54.890043 IP 172.28.240.3.45878 > rsllinux.hostingperte.it.https: Flags [.], ack 1448, win 260, options [nop,nop,TS val 1405859 ecr 1504823358,nop,nop,sack 1 {4096:4407}], length 0
11:06:54.890859 IP 172.28.240.3.44486 > serv2.domainsnow.org.http: Flags [S], seq 2818481389, win 29200, options [mss 1460,sackOK,TS val 1405860 ecr 0,nop,wscale 7], length 0
11:06:54.890864 IP 172.28.240.3.44487 > serv2.domainsnow.org.http: Flags [S], seq 785737760, win 29200, options [mss 1460,sackOK,TS val 1405860 ecr 0,nop,wscale 7], length 0
11:06:55.157177 IP 172.28.240.3.41820 > web-server.e-nk.ru.domain: 59028+ PTR? 46.124.134.5.in-addr.arpa. (43)
11:06:55.157212 IP 172.28.240.3.59146 > 217-160-0-164.elastic-ssl.ui-r.com.http: Flags [P.], seq 3252745500:3252745749, ack 2642157027, win 229, options [nop,nop,TS val 1405926 ecr 1146615753], length 249: HTTP: GET /language/en-GB/en-GB.com_jce.ini HTTP/1.1
11:06:55.157229 IP 172.28.240.3.59147 > 217-160-0-164.elastic-ssl.ui-r.com.http: Flags [P.], seq 898948246:898948477, ack 2706146512, win 229, options [nop,nop,TS val 1405926 ecr 743610222], length 231: HTTP: GET /administrator/language/en-GB/en-GB.com_jce.ini HTTP/1.1
11:06:55.465681 IP 172.28.240.3.https > 172.28.240.254.47012: Flags [P.], seq 3078012032:3078012252, ack 1967161400, win 739, options [nop,nop,TS val 1406003 ecr 53098387], length 220
11:06:55.465684 IP 172.28.240.3.53844 > web-server.e-nk.ru.domain: 21749+ PTR? 66.60.200.91.in-addr.arpa. (43)
11:06:57.191850 IP 172.28.240.3.49418 > web-server.e-nk.ru.domain: 51264+ PTR? 164.0.160.217.in-addr.arpa. (44)
11:06:57.192034 IP web-server.e-nk.ru.domain > 172.28.240.3.41526: 48787 NXDomain 0/1/0 (111)
11:06:57.192068 IP 172.28.240.3.39976 > web-server.e-nk.ru.domain: 57348+ AAAA? caserdc.org.e-nk.ru. (37)
11:06:58.680488 IP mail.webface.hu.http > 172.28.240.3.57269: Flags [.], seq 3706603684:3706605132, ack 1142796918, win 235, options [nop,nop,TS val 2372638210 ecr 1406767], length 1448: HTTP
11:06:58.680499 IP 172.28.240.3.57269 > mail.webface.hu.http: Flags [.], ack 2896, win 432, options [nop,nop,TS val 1406807 ecr 2372638210,nop,nop,sack 1 {5792:7240}], length 0
11:06:58.680644 IP 172.28.240.3.46679 > web-server.e-nk.ru.domain: 23399+ PTR? 47.224.208.185.in-addr.arpa. (45)
11:06:58.682214 IP web-server.e-nk.ru.domain > 172.28.240.3.33069: 28358 1/6/12 A 85.13.155.160 (427)
11:06:58.682286 IP 172.28.240.3.46140 > dd23702.kasserver.com.http: Flags [S], seq 2267032310, win 29200, options [mss 1460,sackOK,TS val 1406807 ecr 0,nop,wscale 7], length 0
11:06:58.682366 IP 198.185.159.145.https > 172.28.240.3.46149: Flags [.], seq 3172950814:3172952078, ack 2263655822, win 32140, options [nop,nop,TS val 3772564284 ecr 1406762], length 1264
11:06:58.682373 IP 172.28.240.3.46149 > 198.185.159.145.https: Flags [.], ack 4294966032, win 497, options [nop,nop,TS val 1406807 ecr 3772564124], length 0
11:06:58.860317 IP 172.28.240.3.43981 > web-server.e-nk.ru.domain: 1836+ PTR? 160.155.13.85.in-addr.arpa. (44)
11:06:58.860711 IP vs6181.dekuipers.nl.http > 172.28.240.3.51121: Flags [.], seq 630519583:630521031, ack 1599345669, win 235, options [nop,nop,TS val 1821625886 ecr 1406818], length 1448: HTTP
11:06:58.860718 IP 172.28.240.3.51121 > vs6181.dekuipers.nl.http: Flags [.], ack 4344, win 1074, options [nop,nop,TS val 1406852 ecr 1821625886], length 0
11:06:58.862235 IP 37.0.15.3.https > 172.28.240.3.39082: Flags [.], seq 1629035891:1629037339, ack 2030932459, win 243, options [nop,nop,TS val 1256768659 ecr 1406817], length 1448
11:06:59.272783 IP 172.28.240.3.34849 > web-server.e-nk.ru.domain: 63882+ PTR? 118.67.126.94.in-addr.arpa. (44)
11:06:59.272991 IP 107.154.255.43.host.secureserver.net.http > 172.28.240.3.46048: Flags [P.], seq 2186844438:2186844886, ack 3796791689, win 31, options [nop,nop,TS val 2365136118 ecr 1406734], length 448: HTTP: HTTP/1.1 500 Internal Server Error
11:06:59.272997 IP 172.28.240.3.46048 > 107.154.255.43.host.secureserver.net.http: Flags [.], ack 448, win 237, options [nop,nop,TS val 1406955 ecr 2365136118], length 0
11:06:59.273858 IP mc21460.ispgateway.de.https > 172.28.240.3.38992: Flags [.], seq 2345554407:2345555855, ack 1831376668, win 252, options [nop,nop,TS val 1523585290 ecr 1406920], length 1448
11:06:59.534033 IP 172.28.240.3.35918 > web-server.e-nk.ru.domain: 3618+ PTR? 3.15.0.37.in-addr.arpa. (40)
11:06:59.534077 IP webcluster1.webpod12-cph3.one.com.http > 172.28.240.3.59392: Flags [.], seq 604436354:604437802, ack 748040899, win 33, options [nop,nop,TS val 2214565376 ecr 1406988], length 1448: HTTP
11:07:00.022042 IP 172.28.240.3.49243 > web-server.e-nk.ru.domain: 4379+ PTR? 107.154.255.43.in-addr.arpa. (45)
11:07:00.022172 IP goliat.datatrans.hu.http > 172.28.240.3.42305: Flags [.], seq 4074733031:4074734479, ack 1328349937, win 509, options [nop,nop,TS val 3355209938 ecr 1407100], length 1448: HTTP
11:07:01.614753 IP 172.28.240.3.51142 > web-server.e-nk.ru.domain: 837+ PTR? 52.245.119.134.in-addr.arpa. (45)
11:07:01.614800 IP s162.webhostingserver.nl.https > 172.28.240.3.35394: Flags [FP.], seq 1356917809:1356918921, ack 1588569808, win 243, options [nop,nop,TS val 3119928607 ecr 1407474], length 1112
11:07:01.890891 IP 172.28.240.3.39394 > web-server.e-nk.ru.domain: 37188+ PTR? 18.213.30.46.in-addr.arpa. (43)
11:07:01.891362 IP lo-in-f197.1e100.net.http > 172.28.240.3.44145: Flags [.], seq 1573344325:1573345725, ack 2842681346, win 261, options [nop,nop,TS val 1767074338 ecr 1407534], length 1400: HTTP
11:07:02.065683 IP 172.28.240.3.58264 > web-server.e-nk.ru.domain: 14122+ PTR? 5.193.93.81.in-addr.arpa. (42)
11:07:02.065733 IP wa5.rzone.de.http > 172.28.240.3.55716: Flags [P.], seq 2795298483:2795299931, ack 109776666, win 14848, options [nop,nop,TS val 833838677 ecr 1407614], length 1448: HTTP
11:07:03.355034 IP 172.28.240.3.33073 > web-server.e-nk.ru.domain: 50084+ PTR? 107.168.138.141.in-addr.arpa. (46)
11:07:03.355285 IP s162.webhostingserver.nl.https > 172.28.240.3.36016: Flags [.], seq 1330872835:1330874283, ack 1359293029, win 243, options [nop,nop,TS val 3119930461 ecr 1407937], length 1448
11:07:03.633448 IP 172.28.240.3.39115 > web-server.e-nk.ru.domain: 25056+ PTR? 197.222.194.173.in-addr.arpa. (46)
11:07:03.633496 IP sh10277.ispgateway.de.https > 172.28.240.3.50320: Flags [.], seq 2703162461:2703163909, ack 3291307601, win 252, options [nop,nop,TS val 3643552145 ecr 1407916], length 1448
11:07:03.799122 IP 172.28.240.3.34952 > web-server.e-nk.ru.domain: 6629+ PTR? 165.145.169.81.in-addr.arpa. (45)
11:07:03.799199 IP static.174.197.235.167.clients.your-server.de.https > 172.28.240.3.58038: Flags [.], seq 20535160:20536608, ack 2112854870, win 505, options [nop,nop,TS val 3747648961 ecr 1408049], length 1448
11:07:03.951018 IP 172.28.240.3.51434 > web-server.e-nk.ru.domain: 967+ PTR? 73.55.204.92.in-addr.arpa. (43)
11:07:03.951029 IP glh40.airodns.com.http > 172.28.240.3.34340: Flags [.], seq 1301539256:1301540704, ack 363532149, win 235, options [nop,nop,TS val 1433390272 ecr 1408089], length 1448: HTTP
11:07:03.951034 IP 172.28.240.3.34340 > glh40.airodns.com.http: Flags [.], ack 4294964400, win 336, options [nop,nop,TS val 1408125 ecr 1433390125,nop,nop,sack 2 {0:1448}{4344:4670}], length 0
11:07:03.951083 IP web-server.e-nk.ru.domain > 172.28.240.3.38021: 3907 NXDomain* 0/1/0 (103)
11:07:05.330529 IP vps-738977f8.vps.ovh.net.https > 172.28.240.3.42064: Flags [.], seq 3637703384:3637704832, ack 2935408117, win 252, options [nop,nop,TS val 1528742286 ecr 1408350], length 1448
11:07:05.330535 IP 172.28.240.3.42064 > vps-738977f8.vps.ovh.net.https: Flags [.], ack 4294962952, win 1020, options [nop,nop,TS val 1408469 ecr 1528741747,nop,nop,sack 1 {0:1448}], length 0
11:07:05.601077 IP 172.28.240.3.58781 > web-server.e-nk.ru.domain: 32238+ PTR? 195.87.251.148.in-addr.arpa. (45)
11:07:05.601089 IP web-server.e-nk.ru.domain > 172.28.240.3.51776: 28483 NXDomain* 0/1/0 (86)
11:07:05.738704 IP 172.28.240.3.36461 > web-server.e-nk.ru.domain: 55165+ PTR? 18.100.36.54.in-addr.arpa. (43)
11:07:05.738762 IP 68.66.254.22.static.a2webhosting.com.http > 172.28.240.3.59759: Flags [.], seq 2561661127:2561662551, ack 2770871317, win 231, options [nop,nop,TS val 4001148305 ecr 1408534], length 1424: HTTP
11:07:05.738767 IP 172.28.240.3.59759 > 68.66.254.22.static.a2webhosting.com.http: Flags [.], ack 2848, win 500, options [nop,nop,TS val 1408571 ecr 4001148305], length 0
11:07:05.990314 IP 172.28.240.3.52325 > web-server.e-nk.ru.domain: 20720+ PTR? 22.254.66.68.in-addr.arpa. (43)
11:07:05.990455 IP 172.28.240.254.47016 > 172.28.240.3.https: Flags [P.], seq 778503657:778504064, ack 1559227827, win 166, options [nop,nop,TS val 53101019 ecr 1408523], length 407
11:07:05.991394 IP 45.87.149.34.bc.googleusercontent.com.https > 172.28.240.3.40760: Flags [.], seq 9588676:9590076, ack 2353514826, win 265, options [nop,nop,TS val 3795874466 ecr 1408567], length 1400
11:07:05.991399 IP 172.28.240.3.40760 > 45.87.149.34.bc.googleusercontent.com.https: Flags [.], ack 4294965896, win 772, options [nop,nop,TS val 1408635 ecr 3795874300,nop,nop,sack 1 {0:1400}], length 0
11:07:05.992868 IP 178.33.133.146.http > 172.28.240.3.39798: Flags [.], seq 2836934592:2836936040, ack 236467487, win 59, options [nop,nop,TS val 1997354570 ecr 1408605], length 1448: HTTP
11:07:06.382676 IP 172.28.240.3.38598 > web-server.e-nk.ru.domain: 14889+ PTR? 45.87.149.34.in-addr.arpa. (43)
11:07:06.383138 IP 217-160-0-24.elastic-ssl.ui-r.com.http > 172.28.240.3.48018: Flags [P.], seq 138019633:138020270, ack 8873043, win 17, options [nop,nop,TS val 1516943396 ecr 1408490], length 637: HTTP: HTTP/1.1 301 Moved Permanently
11:07:06.383145 IP 172.28.240.3.48018 > 217-160-0-24.elastic-ssl.ui-r.com.http: Flags [.], ack 637, win 239, options [nop,nop,TS val 1408733 ecr 1516943396], length 0
11:07:06.383589 IP web-server.e-nk.ru.domain > 172.28.240.3.50798: 52591 NXDomain 0/1/0 (101)
11:07:06.552778 IP 172.28.240.3.36236 > web-server.e-nk.ru.domain: 53133+ PTR? 146.133.33.178.in-addr.arpa. (45)
11:07:06.552901 IP 68.66.254.22.static.a2webhosting.com.http > 172.28.240.3.59759: Flags [.], seq 2848:4272, ack 1, win 231, options [nop,nop,TS val 4001149094 ecr 1408615], length 1424: HTTP
11:07:06.935845 IP static.174.197.235.167.clients.your-server.de.https > 172.28.240.3.58040: Flags [.], seq 2201292712:2201294160, ack 3834508986, win 505, options [nop,nop,TS val 3747652098 ecr 1408834], length 1448
11:07:06.935853 IP 172.28.240.3.58040 > static.174.197.235.167.clients.your-server.de.https: Flags [.], ack 1448, win 1239, options [nop,nop,TS val 1408871 ecr 3747652098], length 0
11:07:07.222787 IP 185.60.251.251.https > 172.28.240.3.47239: Flags [.], seq 1870218001:1870219449, ack 1283952483, win 85, options [nop,nop,TS val 3606637739 ecr 1408906], length 1448
11:07:07.222795 IP 172.28.240.3.47239 > 185.60.251.251.https: Flags [.], ack 2896, win 568, options [nop,nop,TS val 1408942 ecr 3606637739], length 0
11:07:07.222902 IP 172.28.240.3.58047 > web-server.e-nk.ru.domain: 26145+ PTR? 251.251.60.185.in-addr.arpa. (45)
11:07:07.223989 IP 50-116-113-71.unifiedlayer.com.http > 172.28.240.3.58619: Flags [.], ack 2801199957, win 504, options [nop,nop,TS val 3890787345 ecr 1408881,nop,nop,sack 1 {4294967049:1}], length 0
11:07:07.224341 IP web-server.e-nk.ru.domain > 172.28.240.3.46530: 40103 2/13/10 A 76.223.54.146, A 13.248.169.48 (508)
11:07:07.224446 IP 172.28.240.3.46180 > a904c694c05102f30.awsglobalaccelerator.com.http: Flags [S], seq 454074041, win 29200, options [mss 1460,sackOK,TS val 1408943 ecr 0,nop,wscale 7], length 0
11:07:07.224500 IP ip-192-6.rackh.co.id.http > 172.28.240.3.59667: Flags [.], seq 2034389595:2034391043, ack 4181426835, win 260, options [nop,nop,TS val 33584511 ecr 1408855], length 1448: HTTP
11:07:08.143778 IP p001.dro.ispnoc.eu.http > 172.28.240.3.53839: Flags [S.], seq 957953058, ack 4288340258, win 28960, options [mss 1460,sackOK,TS val 1464493683 ecr 1409143,nop,wscale 7], length 0
11:07:08.143787 IP 172.28.240.3.53839 > p001.dro.ispnoc.eu.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1409173 ecr 1464493683], length 0
11:07:08.143810 IP 172.28.240.3.42869 > web-server.e-nk.ru.domain: 48120+ PTR? 71.113.116.50.in-addr.arpa. (44)
11:07:09.465201 IP a2f75.netcup.net.https > 172.28.240.3.40441: Flags [.], seq 3972683578:3972685026, ack 2824789072, win 506, options [nop,nop,TS val 1088506781 ecr 1409461], length 1448
11:07:09.477458 IP web-server.e-nk.ru.domain > 172.28.240.3.47458: 61171 1/3/6 A 145.131.10.225 (285)
11:07:12.595022 IP vps-e75f3c3c.vps.ovh.net.http > 172.28.240.3.58124: Flags [P.], seq 730530303:730530690, ack 1631259873, win 508, options [nop,nop,TS val 344230259 ecr 1408383], length 387: HTTP: HTTP/1.1 301 Moved Permanently
11:07:13.186551 IP 172.28.240.3.32882 > web-server.e-nk.ru.domain: 55109+ PTR? 170.37.249.46.in-addr.arpa. (44)
11:07:13.808273 IP 172.28.240.3.58698 > web-server.e-nk.ru.domain: 13695+ PTR? 117.47.68.188.in-addr.arpa. (44)
11:07:13.808423 IP 217.114.85.175.https > 172.28.240.3.44977: Flags [P.], seq 1176891981:1176893429, ack 4237767074, win 5090, options [nop,nop,TS val 833849938 ecr 1410554], length 1448
11:07:13.808430 IP 172.28.240.3.44977 > 217.114.85.175.https: Flags [.], ack 4294961504, win 65160, options [nop,nop,TS val 1410589 ecr 833849449,nop,nop,sack 1 {4294964400:1448}], length 0
11:07:14.095683 IP 172.28.240.3.38847 > web-server.e-nk.ru.domain: 13038+ PTR? 142.37.38.51.in-addr.arpa. (43)
11:07:14.095735 IP 172.28.240.3.48904 > web-server.e-nk.ru.domain: 12733+ A? matturro.it. (29)
11:07:14.290835 IP 172.28.240.3.45308 > web-server.e-nk.ru.domain: 47508+ PTR? 175.85.114.217.in-addr.arpa. (45)
11:07:14.290858 IP 172.28.240.3.44424 > 166.110.205.92.host.secureserver.net.http: Flags [P.], seq 2058880234:2058880468, ack 2940470658, win 229, options [nop,nop,TS val 1410710 ecr 684306353], length 234: HTTP: GET /language/en-GB/en-GB.com_jce.ini HTTP/1.1
11:07:14.290862 IP 172.28.240.3.60950 > server.topnameserver.gr.https: Flags [.], ack 767912072, win 704, options [nop,nop,TS val 1410710 ecr 3092321434], length 0
11:07:14.625009 IP 172.28.240.3.44001 > web-server.e-nk.ru.domain: 2794+ PTR? 166.110.205.92.in-addr.arpa. (45)
11:07:14.625691 IP 45.87.149.34.bc.googleusercontent.com.https > 172.28.240.3.40761: Flags [.], seq 71476715:71478115, ack 1366241875, win 265, options [nop,nop,TS val 1238142902 ecr 1410723], length 1400
11:07:14.625700 IP 172.28.240.3.40761 > 45.87.149.34.bc.googleusercontent.com.https: Flags [R], seq 1366241875, win 0, length 0
11:07:14.627180 IP 104.17.141.104.https > 172.28.240.3.38342: Flags [.], seq 2147006919:2147008367, ack 507744208, win 8, options [nop,nop,TS val 2213585606 ecr 1410766], length 1448
11:07:14.627186 IP 172.28.240.3.38342 > 104.17.141.104.https: Flags [.], ack 1448, win 260, options [nop,nop,TS val 1410794 ecr 2213585606,nop,nop,sack 1 {4344:4422}], length 0
11:07:14.884872 IP 172.28.240.3.37885 > web-server.e-nk.ru.domain: 22751+ PTR? 116.67.251.148.in-addr.arpa. (45)
11:07:15.163536 IP 172.28.240.3.35263 > web-server.e-nk.ru.domain: 48228+ PTR? 104.141.17.104.in-addr.arpa. (45)
11:07:15.163868 IP clienthosting.eu.http > 172.28.240.3.45435: Flags [P.], seq 1705952986:1705953407, ack 743711557, win 17, options [nop,nop,TS val 2791466807 ecr 1410871], length 421: HTTP: HTTP/1.1 302 Found
11:07:15.163873 IP 172.28.240.3.45435 > clienthosting.eu.http: Flags [.], ack 421, win 237, options [nop,nop,TS val 1410928 ecr 2791466807], length 0
11:07:15.164558 IP web-server.e-nk.ru.domain > 172.28.240.3.38124: 45490 0/1/0 (93)
11:07:15.398541 IP 217-160-0-24.elastic-ssl.ui-r.com.http > 172.28.240.3.48547: Flags [.], ack 2103501371, win 17, options [nop,nop,TS val 1516952509 ecr 1410971], length 0
11:07:15.398544 IP 172.28.240.3.60852 > web-server.e-nk.ru.domain: 34150+ PTR? 46.247.227.212.in-addr.arpa. (45)
11:07:15.398609 IP server.maurihosting.com.https > 172.28.240.3.54878: Flags [.], ack 31097606, win 126, options [nop,nop,TS val 3252193746 ecr 1410919], length 0
11:07:15.399187 IP 212.227.192.60.https > 172.28.240.3.59502: Flags [.], seq 2708514724:2708516172, ack 2840581327, win 252, options [nop,nop,TS val 1375489950 ecr 1410937], length 1448
11:07:15.627587 IP a904c694c05102f30.awsglobalaccelerator.com.http > 172.28.240.3.46453: Flags [P.], seq 1411632655:1411632915, ack 2582516885, win 261, options [nop,nop,TS val 1087170185 ecr 1410986], length 260: HTTP: HTTP/1.1 301 Moved Permanently
11:07:15.627595 IP 172.28.240.3.46453 > a904c694c05102f30.awsglobalaccelerator.com.http: Flags [.], ack 260, win 237, options [nop,nop,TS val 1411044 ecr 1087170185], length 0
11:07:15.627673 IP 172.28.240.3.60032 > web-server.e-nk.ru.domain: 14367+ PTR? 71.178.137.216.in-addr.arpa. (45)
11:07:15.628445 IP 212.227.192.60.https > 172.28.240.3.59644: Flags [.], seq 609430118:609431566, ack 2021746722, win 252, options [nop,nop,TS val 1375490230 ecr 1411007], length 1448
11:07:15.628463 IP 172.28.240.3.59644 > 212.227.192.60.https: Flags [.], ack 1448, win 1152, options [nop,nop,TS val 1411044 ecr 1375490230], length 0
11:07:16.002361 IP 172.28.240.3.53572 > web-server.e-nk.ru.domain: 58037+ PTR? 60.192.227.212.in-addr.arpa. (45)
11:07:16.213770 IP w96.rzone.de.http > 172.28.240.3.58331: Flags [P.], seq 2772207661:2772209109, ack 991990118, win 14903, options [nop,nop,TS val 833852735 ecr 1411130], length 1448: HTTP
11:07:16.213789 IP 172.28.240.3.58331 > w96.rzone.de.http: Flags [.], ack 4294964400, win 839, options [nop,nop,TS val 1411190 ecr 833852588,nop,nop,sack 1 {4294965848:1448}], length 0
11:07:16.213979 IP 172.28.240.3.33803 > web-server.e-nk.ru.domain: 34829+ PTR? 150.145.169.81.in-addr.arpa. (45)
11:07:16.214793 IP a4ec4c6ea1c92e2e6.awsglobalaccelerator.com.http > 172.28.240.3.46185: Flags [F.], seq 3489121533, ack 2643927218, win 261, options [nop,nop,TS val 1089894730 ecr 1403805], length 0
11:07:16.215379 IP server191.hosting.reg.ru.https > 172.28.240.3.60461: Flags [.], seq 2632740711:2632742159, ack 3508474104, win 252, options [nop,nop,TS val 661491208 ecr 1411138], length 1448
11:07:16.215397 IP 172.28.240.3.60461 > server191.hosting.reg.ru.https: Flags [.], ack 1448, win 1057, options [nop,nop,TS val 1411191 ecr 661491208,nop,nop,sack 1 {2896:5792}], length 0
11:07:16.216846 IP web-server.e-nk.ru.domain > 172.28.240.3.40450: 36402 1/6/11 A 94.152.166.34 (401)
11:07:16.288035 IP 217-160-0-110.elastic-ssl.ui-r.com.http > 172.28.240.3.43429: Flags [.], seq 2590000309:2590000469, ack 1174763393, win 17, options [nop,nop,TS val 4107072142 ecr 1411135], length 160: HTTP
11:07:16.288045 IP 172.28.240.3.43429 > 217-160-0-110.elastic-ssl.ui-r.com.http: Flags [.], ack 4294966976, win 915, options [nop,nop,TS val 1411209 ecr 4107071859,nop,nop,sack 1 {4294967136:160}], length 0
11:07:16.288066 IP 172.28.240.3.37580 > web-server.e-nk.ru.domain: 14017+ PTR? 193.196.31.31.in-addr.arpa. (44)
11:07:16.288546 IP host35.kei.pl.https > 172.28.240.3.33357: Flags [.], seq 804082929:804083953, ack 518932359, win 254, length 1024
11:07:16.319192 IP 172.28.240.3.45053 > web-server.e-nk.ru.domain: 13394+ PTR? 110.0.160.217.in-addr.arpa. (44)
11:07:16.319387 IP web-server.e-nk.ru.domain > 172.28.240.3.46178: 63315 0/1/0 (105)
11:07:16.319448 IP 172.28.240.3.39539 > web-server.e-nk.ru.domain: 48354+ AAAA? arredamentidomus.it.e-nk.ru. (45)
11:07:16.527159 IP w96.rzone.de.http > 172.28.240.3.58331: Flags [.], seq 4294964400:4294965848, ack 1, win 14903, options [nop,nop,TS val 833853134 ecr 1411230], length 1448: HTTP
11:07:16.527173 IP 172.28.240.3.58331 > w96.rzone.de.http: Flags [.], ack 2896, win 885, options [nop,nop,TS val 1411269 ecr 833853134], length 0
11:07:16.527254 IP 172.28.240.3.47099 > web-server.e-nk.ru.domain: 23146+ PTR? 35.8.152.94.in-addr.arpa. (42)
11:07:16.718927 IP 172.28.240.3.59562 > web-server.e-nk.ru.domain: 62890+ AAAA? cediamedical.net. (34)
11:07:16.719274 IP s140.servername.online.http > 172.28.240.3.59941: Flags [.], seq 4264750753:4264752201, ack 2252313350, win 235, options [nop,nop,TS val 673878968 ecr 1411243], length 1448: HTTP
11:07:16.719284 IP 172.28.240.3.59941 > s140.servername.online.http: Flags [.], ack 4294965848, win 296, options [nop,nop,TS val 1411317 ecr 673878683,nop,nop,sack 2 {0:1448}{11584:13032}], length 0
11:07:16.719407 IP 172.28.240.3.38843 > web-server.e-nk.ru.domain: 21621+ PTR? 55.192.44.204.in-addr.arpa. (44)
11:07:16.720333 IP v242.c9.dhosting.pl.https > 172.28.240.3.33231: Flags [.], seq 2304187052:2304187100, ack 3690028659, win 62, length 48
11:07:16.720338 IP 172.28.240.3.33231 > v242.c9.dhosting.pl.https: Flags [.], ack 4294967056, win 1077, options [nop,nop,sack 1 {4294967104:48}], length 0
11:07:16.720421 IP 153.98.209.35.bc.googleusercontent.com.http > 172.28.240.3.51282: Flags [S.], seq 1866106980, ack 2658988706, win 64768, options [mss 1420,sackOK,TS val 2027747425 ecr 1411252,nop,wscale 7], length 0
11:07:16.720439 IP 172.28.240.3.51282 > 153.98.209.35.bc.googleusercontent.com.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1411317 ecr 2027747425], length 0
11:07:16.963986 IP server-18-165-140-92.hel51.r.cloudfront.net.https > 172.28.240.3.33369: Flags [.], seq 3879976151:3879977579, ack 1292494442, win 133, options [nop,nop,TS val 3496402372 ecr 1411346], length 1428
11:07:16.963992 IP 172.28.240.3.33369 > server-18-165-140-92.hel51.r.cloudfront.net.https: Flags [.], ack 1428, win 444, options [nop,nop,TS val 1411378 ecr 3496402372,nop,nop,sack 2 {4284:5712}{29988:31416}], length 0
11:07:16.964046 IP 172.28.240.3.47966 > web-server.e-nk.ru.domain: 64287+ PTR? 242.158.95.109.in-addr.arpa. (45)
11:07:17.311745 IP 172.28.240.3.33146 > web-server.e-nk.ru.domain: 39095+ PTR? 153.98.209.35.in-addr.arpa. (44)
11:07:17.311794 IP server21.hosting.reg.ru.http > 172.28.240.3.60342: Flags [.], seq 2831838097:2831839545, ack 4138640027, win 235, options [nop,nop,TS val 457527370 ecr 1411410], length 1448: HTTP
11:07:18.681120 IP 172.28.240.3.40189 > web-server.e-nk.ru.domain: 48154+ PTR? 92.140.165.18.in-addr.arpa. (44)
11:07:18.681543 IP nlsrc1.supercp.com.http > 172.28.240.3.49589: Flags [.], seq 1539040223:1539041671, ack 3412476103, win 122, options [nop,nop,TS val 3746576468 ecr 1411764], length 1448: HTTP
11:07:18.893180 IP 172.28.240.3.36210 > web-server.e-nk.ru.domain: 55448+ PTR? 123.198.31.31.in-addr.arpa. (44)
11:07:18.893197 IP 172.28.240.3.60311 > s4653efde.fastvps-server.com.http: Flags [F.], seq 291031816, ack 3677127797, win 237, options [nop,nop,TS val 1411860 ecr 3478999692], length 0
11:07:18.893264 IP 172.28.240.3.60312 > s4653efde.fastvps-server.com.http: Flags [F.], seq 3144531726, ack 3538850440, win 237, options [nop,nop,TS val 1411860 ecr 3478999692], length 0
11:07:18.893275 IP 172.28.240.3.60313 > s4653efde.fastvps-server.com.http: Flags [F.], seq 681326807, ack 3633660651, win 237, options [nop,nop,TS val 1411860 ecr 3478999692], length 0
11:07:19.017648 IP 172.28.240.3.44379 > web-server.e-nk.ru.domain: 41925+ PTR? 7.66.124.209.in-addr.arpa. (43)
11:07:19.017857 IP web108.shared.host.it.http > 172.28.240.3.45670: Flags [.], seq 3323713612:3323715048, ack 707586468, win 60, length 1436: HTTP
11:07:20.327641 IP 172.28.240.3.58474 > web-server.e-nk.ru.domain: 11558+ PTR? 207.21.253.159.in-addr.arpa. (45)
11:07:20.327739 IP cl13.webspacecontrol.com.http > 172.28.240.3.59880: Flags [.], seq 1394736789:1394738237, ack 2541566751, win 59, options [nop,nop,TS val 3602485186 ecr 1412176], length 1448: HTTP
11:07:20.614646 IP 172.28.240.3.42639 > web-server.e-nk.ru.domain: 4028+ PTR? 19.158.31.81.in-addr.arpa. (43)
11:07:20.614688 IP server.villanuevaencasa.com.http > 172.28.240.3.52383: Flags [.], seq 1441529684:1441531132, ack 3304532383, win 122, options [nop,nop,TS val 4217727693 ecr 1412245], length 1448: HTTP
11:07:20.614694 IP 172.28.240.3.52383 > server.villanuevaencasa.com.http: Flags [.], ack 4294965848, win 387, options [nop,nop,TS val 1412290 ecr 4217727501,nop,nop,sack 2 {0:1448}{5792:7240}], length 0
11:07:20.616218 IP 46.183.138.100.https > 172.28.240.3.53235: Flags [.], seq 135318443:135319891, ack 842703929, win 506, options [nop,nop,TS val 3767657484 ecr 1412254], length 1448
11:07:20.942780 IP 172.28.240.3.55819 > web-server.e-nk.ru.domain: 55910+ PTR? 13.54.33.185.in-addr.arpa. (43)
11:07:20.942921 IP ms10680.ispgateway.de.https > 172.28.240.3.52999: Flags [.], seq 2679121123:2679122571, ack 1723020948, win 252, options [nop,nop,TS val 3637351125 ecr 1412336], length 1448
11:07:21.352980 IP 172.28.240.3.42866 > web-server.e-nk.ru.domain: 46740+ PTR? 105.74.223.82.in-addr.arpa. (44)
11:07:21.354032 IP server-18-165-140-92.hel51.r.cloudfront.net.https > 172.28.240.3.33369: Flags [.], seq 47124:48552, ack 1, win 133, options [nop,nop,TS val 3496406747 ecr 1412403], length 1428
11:07:21.729986 IP 172.28.240.3.46239 > web-server.e-nk.ru.domain: 50018+ PTR? 100.138.183.46.in-addr.arpa. (45)
11:07:21.730891 IP 172.28.240.3.43378 > ec2-35-180-238-216.eu-west-3.compute.amazonaws.com.http: Flags [S], seq 3152622452, win 29200, options [mss 1460,sackOK,TS val 1412570 ecr 0,nop,wscale 7], length 0
11:07:22.111537 IP 172.28.240.3.43909 > web-server.e-nk.ru.domain: 48388+ PTR? 96.0.119.134.in-addr.arpa. (43)
11:07:22.112038 IP ec2-3-234-189-133.compute-1.amazonaws.com.https > 172.28.240.3.53341: Flags [.], seq 921481374:921482822, ack 3523000321, win 484, options [nop,nop,TS val 3211800104 ecr 1412602], length 1448
11:07:22.386660 IP 172.28.240.3.38878 > web-server.e-nk.ru.domain: 15542+ PTR? 216.238.180.35.in-addr.arpa. (45)
11:07:22.386724 IP hostingweb78-182.netsons.net.http > 172.28.240.3.36103: Flags [.], seq 1857001506:1857002954, ack 310738669, win 235, options [nop,nop,TS val 2798507970 ecr 1412694], length 1448: HTTP: HTTP/1.1 200 OK
11:07:22.386734 IP 172.28.240.3.36103 > hostingweb78-182.netsons.net.http: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1412733 ecr 2798507970,nop,nop,sack 1 {14480:15928}], length 0
11:07:22.386809 IP hostingweb78-182.netsons.net.http > 172.28.240.3.36103: Flags [.], seq 1448:2896, ack 1, win 235, options [nop,nop,TS val 2798507970 ecr 1412694], length 1448: HTTP
11:07:22.597690 IP 172.28.240.3.50636 > web-server.e-nk.ru.domain: 41942+ PTR? 133.189.234.3.in-addr.arpa. (44)
11:07:22.597855 IP shared-amy145.rev.nazwa.pl.http > 172.28.240.3.44266: Flags [.], seq 2416986986:2416988434, ack 716120035, win 66, options [nop,nop,TS val 2677321536 ecr 1412714], length 1448: HTTP
11:07:22.865239 IP 172.28.240.3.60780 > web-server.e-nk.ru.domain: 22893+ PTR? 182.150.252.46.in-addr.arpa. (45)
11:07:22.865419 IP 109.237.140.86.http > 172.28.240.3.42857: Flags [.], seq 2349817357:2349818805, ack 3989645414, win 32, options [nop,nop,TS val 194644807 ecr 1412809], length 1448: HTTP
11:07:23.279133 IP 172.28.240.3.40043 > web-server.e-nk.ru.domain: 10075+ PTR? 145.208.128.85.in-addr.arpa. (45)
11:07:23.279142 IP cl13.webspacecontrol.com.http > 172.28.240.3.59879: Flags [.], seq 4020387939:4020389387, ack 3872209150, win 59, options [nop,nop,TS val 3602488123 ecr 1412910], length 1448: HTTP
11:07:23.279149 IP 172.28.240.3.59879 > cl13.webspacecontrol.com.http: Flags [.], ack 1448, win 1132, options [nop,nop,TS val 1412957 ecr 3602488123,nop,nop,sack 1 {2896:4344}], length 0
11:07:23.280645 IP 45.87.149.34.bc.googleusercontent.com.https > 172.28.240.3.42043: Flags [.], seq 3852439187:3852440587, ack 1269111110, win 265, options [nop,nop,TS val 1184170208 ecr 1412919], length 1400
11:07:23.579638 IP 172.28.240.3.56475 > web-server.e-nk.ru.domain: 21977+ PTR? 86.140.237.109.in-addr.arpa. (45)
11:07:23.580737 IP 45.87.149.34.bc.googleusercontent.com.https > 172.28.240.3.42390: Flags [.], seq 1631312879:1631314279, ack 3402309149, win 265, options [nop,nop,TS val 674704847 ecr 1412950], length 1400
11:07:24.002783 IP web-server.e-nk.ru.domain > 172.28.240.3.50403: 56484 NXDomain 0/1/0 (117)
11:07:24.002866 IP 172.28.240.3.55213 > web-server.e-nk.ru.domain: 42716+ AAAA? cattletracker.org.e-nk.ru. (43)
11:07:24.003192 IP web-server.e-nk.ru.domain > 172.28.240.3.55213: 42716 NXDomain* 0/1/0 (89)
11:07:24.003245 IP 172.28.240.3.54735 > web-server.e-nk.ru.domain: 18664+ A? cattletracker.org. (35)
11:07:24.003564 IP web-server.e-nk.ru.domain > 172.28.240.3.54735: 18664 NXDomain 0/1/0 (117)
11:07:24.003596 IP 172.28.240.3.57883 > web-server.e-nk.ru.domain: 20177+ A? cattletracker.org.e-nk.ru. (43)
11:07:24.003679 IP 46.183.138.100.https > 172.28.240.3.53235: Flags [.], seq 26064:27512, ack 1, win 506, options [nop,nop,TS val 3767660841 ecr 1413093], length 1448
11:07:24.003691 IP 172.28.240.3.53235 > 46.183.138.100.https: Flags [.], ack 27512, win 970, options [nop,nop,TS val 1413138 ecr 3767660841,nop,nop,sack 1 {28960:30408}], length 0
11:07:24.003866 IP web-server.e-nk.ru.domain > 172.28.240.3.57883: 20177 NXDomain* 0/1/0 (89)
11:07:24.003998 IP 172.28.240.3.44741 > web-server.e-nk.ru.domain: 6224+ AAAA? cattletracker.org. (35)
11:07:24.004265 IP web-server.e-nk.ru.domain > 172.28.240.3.44741: 6224 NXDomain 0/1/0 (117)
11:07:24.004312 IP 172.28.240.3.56287 > web-server.e-nk.ru.domain: 18020+ AAAA? cattletracker.org.e-nk.ru. (43)
11:07:24.004576 IP web-server.e-nk.ru.domain > 172.28.240.3.56287: 18020 NXDomain* 0/1/0 (89)
11:07:24.004609 IP 172.28.240.3.48692 > web-server.e-nk.ru.domain: 33877+ A? cattletracker.org. (35)
11:07:24.004861 IP web-server.e-nk.ru.domain > 172.28.240.3.48692: 33877 NXDomain 0/1/0 (117)
11:07:24.004902 IP 172.28.240.3.40066 > web-server.e-nk.ru.domain: 53764+ A? cattletracker.org.e-nk.ru. (43)
11:07:24.005167 IP web-server.e-nk.ru.domain > 172.28.240.3.40066: 53764 NXDomain* 0/1/0 (89)
11:07:24.005170 IP ms10680.ispgateway.de.https > 172.28.240.3.53000: Flags [.], seq 181892268:181893716, ack 246996226, win 260, options [nop,nop,TS val 3637354153 ecr 1413093], length 1448
11:07:24.005179 IP 172.28.240.3.53000 > ms10680.ispgateway.de.https: Flags [.], ack 4294965848, win 803, options [nop,nop,TS val 1413138 ecr 3637353988,nop,nop,sack 1 {0:1448}], length 0
11:07:24.005286 IP 172.28.240.3.44253 > web-server.e-nk.ru.domain: 14486+ AAAA? cattletracker.org. (35)
11:07:24.005524 IP web-server.e-nk.ru.domain > 172.28.240.3.44253: 14486 NXDomain 0/1/0 (117)
11:07:24.005556 IP 172.28.240.3.42512 > web-server.e-nk.ru.domain: 8742+ AAAA? cattletracker.org.e-nk.ru. (43)
11:07:24.005821 IP web-server.e-nk.ru.domain > 172.28.240.3.42512: 8742 NXDomain* 0/1/0 (89)
11:07:24.005853 IP 172.28.240.3.50957 > web-server.e-nk.ru.domain: 50322+ A? cattletracker.org. (35)
11:07:24.006061 IP web-server.e-nk.ru.domain > 172.28.240.3.50957: 50322 NXDomain 0/1/0 (117)
11:07:24.006094 IP 172.28.240.3.48953 > web-server.e-nk.ru.domain: 1729+ A? cattletracker.org.e-nk.ru. (43)
11:07:24.006359 IP web-server.e-nk.ru.domain > 172.28.240.3.48953: 1729 NXDomain* 0/1/0 (89)
11:07:24.006452 IP 172.28.240.3.40705 > web-server.e-nk.ru.domain: 19695+ AAAA? cattletracker.org. (35)
11:07:24.006667 IP web-server.e-nk.ru.domain > 172.28.240.3.40705: 19695 NXDomain 0/1/0 (117)
11:07:24.006699 IP 172.28.240.3.38311 > web-server.e-nk.ru.domain: 41536+ AAAA? cattletracker.org.e-nk.ru. (43)
11:07:24.006945 IP web-server.e-nk.ru.domain > 172.28.240.3.38311: 41536 NXDomain* 0/1/0 (89)
11:07:24.006982 IP 172.28.240.3.51043 > web-server.e-nk.ru.domain: 39135+ A? cattletracker.org. (35)
11:07:24.007065 IP ec2-18-119-23-171.us-east-2.compute.amazonaws.com.http > 172.28.240.3.34552: Flags [P.], seq 4290290370:4290291080, ack 393278758, win 110, options [nop,nop,TS val 1336387855 ecr 1412884], length 710: HTTP: HTTP/1.1 404 Not Found
11:07:24.007071 IP 172.28.240.3.34552 > ec2-18-119-23-171.us-east-2.compute.amazonaws.com.http: Flags [.], ack 710, win 240, options [nop,nop,TS val 1413139 ecr 1336387855], length 0
11:07:24.007158 IP 172.28.240.3.43799 > web-server.e-nk.ru.domain: 25542+ PTR? 171.23.119.18.in-addr.arpa. (44)
11:07:24.007261 IP web-server.e-nk.ru.domain > 172.28.240.3.51043: 39135 NXDomain 0/1/0 (117)
11:07:24.007287 IP 172.28.240.3.40913 > web-server.e-nk.ru.domain: 28337+ A? cattletracker.org.e-nk.ru. (43)
11:07:24.007606 IP cl13.webspacecontrol.com.http > 172.28.240.3.59880: Flags [.], seq 40544:41992, ack 1, win 59, options [nop,nop,TS val 3602488839 ecr 1413089], length 1448: HTTP
11:07:24.007612 IP 172.28.240.3.59880 > cl13.webspacecontrol.com.http: Flags [.], ack 39096, win 1065, options [nop,nop,TS val 1413139 ecr 3602488620,nop,nop,sack 1 {40544:41992}], length 0
11:07:24.344832 IP web1.redhost.dk.http > 172.28.240.3.53986: Flags [.], seq 786955486:786956934, ack 3004990647, win 508, options [nop,nop,TS val 2195530886 ecr 1413180], length 1448: HTTP
11:07:24.344840 IP 172.28.240.3.53986 > web1.redhost.dk.http: Flags [.], ack 1448, win 1089, options [nop,nop,TS val 1413223 ecr 2195530886], length 0
11:07:24.344914 IP 172.28.240.3.58416 > web-server.e-nk.ru.domain: 47422+ PTR? 101.124.66.77.in-addr.arpa. (44)
11:07:24.345926 IP 217-160-0-110.elastic-ssl.ui-r.com.http > 172.28.240.3.43429: Flags [.], seq 8720:8880, ack 1, win 17, options [nop,nop,TS val 4107080080 ecr 1413112], length 160: HTTP
11:07:24.345933 IP 172.28.240.3.43429 > 217-160-0-110.elastic-ssl.ui-r.com.http: Flags [.], ack 8560, win 1050, options [nop,nop,TS val 1413223 ecr 4107079831,nop,nop,sack 1 {8720:8880}], length 0
11:07:24.346592 IP wcarp.hosting.nic.ru.http > 172.28.240.3.47598: Flags [.], seq 900875492:900876940, ack 2687978283, win 30, options [nop,nop,TS val 4170173886 ecr 1413186], length 1448: HTTP
11:07:24.346598 IP 172.28.240.3.47598 > wcarp.hosting.nic.ru.http: Flags [.], ack 1448, win 817, options [nop,nop,TS val 1413223 ecr 4170173886], length 0
11:07:24.723457 IP 172.28.240.3.42709 > web-server.e-nk.ru.domain: 3962+ PTR? 14.68.24.195.in-addr.arpa. (43)
11:07:24.724890 IP host1.starlab.md.http > 172.28.240.3.51208: Flags [.], seq 1085258632:1085260080, ack 3421822946, win 235, options [nop,nop,TS val 1539414472 ecr 1413274], length 1448: HTTP: HTTP/1.1 200 OK
11:07:24.724897 IP 172.28.240.3.51208 > host1.starlab.md.http: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1413318 ecr 1539414472,nop,nop,sack 1 {14480:15928}], length 0
11:07:24.724989 IP host1.starlab.md.http > 172.28.240.3.51208: Flags [.], seq 1448:2896, ack 1, win 235, options [nop,nop,TS val 1539414472 ecr 1413274], length 1448: HTTP
11:07:24.724991 IP 172.28.240.3.51208 > host1.starlab.md.http: Flags [.], ack 2896, win 296, options [nop,nop,TS val 1413318 ecr 1539414472,nop,nop,sack 1 {14480:15928}], length 0
11:07:24.960250 IP any-in-2415.1e100.net.http > 172.28.240.3.56687: Flags [F.], seq 3070863235, ack 2187300653, win 261, options [nop,nop,TS val 3034611101 ecr 1353484], length 0
11:07:24.960255 IP 172.28.240.3.37948 > web-server.e-nk.ru.domain: 24729+ PTR? 14.190.70.185.in-addr.arpa. (44)
11:07:24.960790 IP seth64.seeweb.it.http > 172.28.240.3.37463: Flags [.], seq 557190314:557191762, ack 2340510083, win 508, options [nop,nop,TS val 1917848871 ecr 1413316], length 1448: HTTP
11:07:25.261533 IP 172.28.240.3.48532 > web-server.e-nk.ru.domain: 49299+ PTR? 21.36.239.216.in-addr.arpa. (44)
11:07:25.261594 IP server-18-165-140-92.hel51.r.cloudfront.net.https > 172.28.240.3.33369: Flags [.], seq 88536:89964, ack 1, win 133, options [nop,nop,TS val 3496410667 ecr 1413363], length 1428
11:07:25.261601 IP 172.28.240.3.33369 > server-18-165-140-92.hel51.r.cloudfront.net.https: Flags [.], ack 91392, win 910, options [nop,nop,TS val 1413452 ecr 3496410667,nop,nop,sack 1 {92820:94248}], length 0
11:07:25.262861 IP 172.28.240.3.57057 > server216.campusspeicher.de.http: Flags [.], ack 33550, win 1405, options [nop,nop,TS val 1413453 ecr 3643081546], length 0
11:07:25.360217 IP 172.28.240.3.53547 > web-server.e-nk.ru.domain: 50454+ PTR? 205.3.174.95.in-addr.arpa. (43)
11:07:25.360245 IP e6257.nerion.com.http > 172.28.240.3.45641: Flags [.], seq 3662833789:3662835237, ack 3508539959, win 235, options [nop,nop,TS val 1778269849 ecr 1413430], length 1448: HTTP
11:07:25.690972 IP 172.28.240.3.56597 > web-server.e-nk.ru.domain: 55149+ PTR? 171.116.5.195.in-addr.arpa. (44)
11:07:25.691095 IP vs891.mymanaged.host.https > 172.28.240.3.51920: Flags [.], seq 2863591826:2863593274, ack 4158684154, win 252, options [nop,nop,TS val 1102473107 ecr 1413538], length 1448
11:07:25.691101 IP 172.28.240.3.51920 > vs891.mymanaged.host.https: Flags [.], ack 4294962952, win 1209, options [nop,nop,TS val 1413560 ecr 1102472786,nop,nop,sack 1 {4294965848:1448}], length 0
11:07:25.692136 IP host07.loswebos.de.https > 172.28.240.3.45524: Flags [R], seq 3465042684, win 0, length 0
11:07:25.692184 IP w86.rzone.de.http > 172.28.240.3.55446: Flags [.], ack 50260607, win 14796, options [nop,nop,TS val 833862363 ecr 1413538], length 0
11:07:25.692250 IP host07.loswebos.de.https > 172.28.240.3.45525: Flags [R], seq 1212593002, win 0, length 0
11:07:26.080982 IP 172.28.240.3.54490 > web-server.e-nk.ru.domain: 65178+ PTR? 153.50.83.212.in-addr.arpa. (44)
11:07:26.081020 IP server107251.serverkeliweb.it.https > 172.28.240.3.47903: Flags [.], seq 237259187:237260627, ack 3023753193, win 234, options [nop,nop,TS val 3161704223 ecr 1413613], length 1440
11:07:26.600040 IP 217-160-0-72.elastic-ssl.ui-r.com.https > 172.28.240.3.43899: Flags [.], seq 1259909402:1259910850, ack 2688343311, win 17, options [nop,nop,TS val 2455137382 ecr 1413750], length 1448
11:07:26.600047 IP 172.28.240.3.43899 > 217-160-0-72.elastic-ssl.ui-r.com.https: Flags [.], ack 1448, win 418, options [nop,nop,TS val 1413787 ecr 2455137382,nop,nop,sack 1 {18824:20432}], length 0
11:07:26.908795 IP 172.28.240.3.40711 > web-server.e-nk.ru.domain: 55425+ PTR? 86.145.169.81.in-addr.arpa. (44)
11:07:27.107233 IP 172.28.240.3.46809 > web-server.e-nk.ru.domain: 62941+ PTR? 215.174.221.185.in-addr.arpa. (46)
11:07:27.107449 IP 116.204.249.43.https > 172.28.240.3.38768: Flags [.], seq 3356201632:3356203080, ack 2489116380, win 504, options [nop,nop,TS val 2913003442 ecr 1413834], length 1448
11:07:27.107455 IP 172.28.240.3.38768 > 116.204.249.43.https: Flags [.], ack 1448, win 1148, options [nop,nop,TS val 1413914 ecr 2913003442], length 0
11:07:27.520283 IP 172.28.240.3.55917 > web-server.e-nk.ru.domain: 23994+ PTR? 72.0.160.217.in-addr.arpa. (43)
11:07:28.939901 IP 217-160-0-72.elastic-ssl.ui-r.com.http > 172.28.240.3.33376: Flags [F.], seq 2710542970, ack 362145455, win 17, options [nop,nop,TS val 12042012 ecr 1410753], length 0
11:07:28.939922 IP 172.28.240.3.36411 > web-server.e-nk.ru.domain: 44929+ PTR? 43.249.204.116.in-addr.arpa. (45)
11:07:28.940463 IP s156.goserver.host.https > 172.28.240.3.50560: Flags [.], seq 2222154387:2222155835, ack 1308982080, win 505, options [nop,nop,TS val 3300949069 ecr 1414331], length 1448
11:07:28.940470 IP 172.28.240.3.50560 > s156.goserver.host.https: Flags [.], ack 2896, win 1104, options [nop,nop,TS val 1414372 ecr 3300949069], length 0
11:07:29.497499 IP 194.247.56.29.https > 172.28.240.3.51193: Flags [P.], seq 2500920278:2500921726, ack 2290735915, win 14909, options [nop,nop,TS val 833865608 ecr 1414368], length 1448
11:07:29.497507 IP 172.28.240.3.51193 > 194.247.56.29.https: Flags [.], ack 4294965165, win 251, options [nop,nop,TS val 1414511 ecr 833865206,nop,nop,sack 1 {0:1448}], length 0
11:07:29.497544 IP 172.28.240.3.51305 > web-server.e-nk.ru.domain: 9594+ PTR? 156.32.30.185.in-addr.arpa. (44)
11:07:29.498610 IP s165.cyber-folks.pl.http > 172.28.240.3.54189: Flags [.], seq 1973806533:1973807981, ack 3252829036, win 235, options [nop,nop,TS val 1226684976 ecr 1414365], length 1448: HTTP
11:07:29.498616 IP 172.28.240.3.54189 > s165.cyber-folks.pl.http: Flags [.], ack 1448, win 999, options [nop,nop,TS val 1414511 ecr 1226684976], length 0
11:07:29.880708 IP 172.28.240.3.35890 > web-server.e-nk.ru.domain: 12594+ PTR? 29.56.247.194.in-addr.arpa. (44)
11:07:29.880879 IP web0153.zxcs.nl.http > 172.28.240.3.40869: Flags [.], seq 266292408:266293856, ack 3753220970, win 235, options [nop,nop,TS val 556815505 ecr 1414083], length 1448: HTTP: HTTP/1.1 404 Not Found
11:07:30.194755 IP 172.28.240.3.53568 > web-server.e-nk.ru.domain: 32593+ PTR? 43.67.78.195.in-addr.arpa. (43)
11:07:30.194855 IP 172.28.240.3.45146 > shared-ala120.rev.nazwa.pl.http: Flags [.], ack 445579902, win 239, options [nop,nop,TS val 1414686 ecr 1100973957], length 0
11:07:30.194888 IP web-server.e-nk.ru.domain > 172.28.240.3.56956: 16775 1/10/13 A 192.71.125.87 (492)
11:07:30.498440 IP 172.28.240.3.46893 > web-server.e-nk.ru.domain: 58941+ PTR? 142.29.104.185.in-addr.arpa. (45)
11:07:30.498543 IP web-server.e-nk.ru.domain > 172.28.240.3.54465: 54291 1/6/12 AAAA 2a00:1c98:1000:1234:0:3:28c7:eb9a (423)
11:07:30.498580 IP 172.28.240.3.44087 > web-server.e-nk.ru.domain: 16440+ A? broodfok.be. (29)
11:07:30.660447 IP 172.28.240.3.37151 > web-server.e-nk.ru.domain: 22619+ PTR? 120.158.128.85.in-addr.arpa. (45)
11:07:30.660458 IP ing.r103.websupport.se.https > 172.28.240.3.33245: Flags [.], seq 3241023236:3241024684, ack 2207005421, win 504, options [nop,nop,TS val 2773148166 ecr 1414686], length 1448
11:07:30.994704 IP 88.151.96.8.http > 172.28.240.3.57454: Flags [.], seq 3143855789:3143857237, ack 811119024, win 235, options [nop,nop,TS val 2000449152 ecr 1414840], length 1448: HTTP
11:07:30.994710 IP 172.28.240.3.57454 > 88.151.96.8.http: Flags [.], ack 4294962952, win 387, options [nop,nop,TS val 1414885 ecr 2000448912,nop,nop,sack 2 {0:1448}{2896:4344}], length 0
11:07:30.994767 IP 172.28.240.3.51658 > web-server.e-nk.ru.domain: 30252+ PTR? 19.174.235.109.in-addr.arpa. (45)
11:07:30.994872 IP 172.28.240.3.56014 > main14.lh.pl.http: Flags [.], ack 2626337031, win 274, options [nop,nop,TS val 1414886 ecr 3717163649], length 0
11:07:30.996291 IP shared-akf249.rev.nazwa.pl.http > 172.28.240.3.40837: Flags [.], seq 1395040246:1395041694, ack 3483305873, win 66, options [nop,nop,TS val 3219928784 ecr 1414838], length 1448: HTTP
11:07:30.996305 IP 172.28.240.3.40837 > shared-akf249.rev.nazwa.pl.http: Flags [.], ack 4294965848, win 568, options [nop,nop,TS val 1414886 ecr 3219928548,nop,nop,sack 3 {0:1448}{2896:5792}{14480:17376}], length 0
11:07:31.361484 IP web-server.e-nk.ru.domain > 172.28.240.3.46356: 25904 NXDomain* 0/1/0 (95)
11:07:31.652945 IP 172.28.240.3.51334 > web-server.e-nk.ru.domain: 25338+ PTR? 125.91.135.185.in-addr.arpa. (45)
11:07:31.653108 IP 88.151.96.8.http > 172.28.240.3.57454: Flags [.], seq 4344:5792, ack 1, win 235, options [nop,nop,TS val 2000449831 ecr 1415010], length 1448: HTTP
11:07:31.653115 IP 172.28.240.3.57454 > 88.151.96.8.http: Flags [.], ack 1448, win 477, options [nop,nop,TS val 1415050 ecr 2000449673,nop,nop,sack 1 {2896:5792}], length 0
11:07:31.950551 IP 172.28.240.3.32839 > web-server.e-nk.ru.domain: 20614+ PTR? 249.137.128.85.in-addr.arpa. (45)
11:07:32.371813 IP main14.lh.pl.http > 172.28.240.3.56016: Flags [.], seq 2794039693:2794041141, ack 3655562156, win 127, options [nop,nop,TS val 3717165061 ecr 1415184], length 1448: HTTP: HTTP/1.1 200 OK
11:07:32.371836 IP 172.28.240.3.56016 > main14.lh.pl.http: Flags [.], ack 1448, win 274, options [nop,nop,TS val 1415230 ecr 3717165061,nop,nop,sack 1 {14480:15928}], length 0
11:07:32.373286 IP h26.seohost.pl.http > 172.28.240.3.51656: Flags [.], seq 3188689096:3188690544, ack 446773100, win 59, options [nop,nop,TS val 1954056227 ecr 1415179], length 1448: HTTP
11:07:32.373295 IP 172.28.240.3.51656 > h26.seohost.pl.http: Flags [.], ack 1448, win 296, options [nop,nop,TS val 1415230 ecr 1954056227,nop,nop,sack 1 {13032:14480}], length 0
11:07:32.373362 IP 172.28.240.3.49996 > web-server.e-nk.ru.domain: 54877+ PTR? 86.221.210.188.in-addr.arpa. (45)
11:07:32.374810 IP 217-160-0-33.elastic-ssl.ui-r.com.http > 172.28.240.3.54491: Flags [.], seq 208063836:208065284, ack 887093044, win 17, options [nop,nop,TS val 2127125266 ecr 1415116], length 1448: HTTP
11:07:32.374817 IP 172.28.240.3.54491 > 217-160-0-33.elastic-ssl.ui-r.com.http: Flags [.], ack 1448, win 849, options [nop,nop,TS val 1415230 ecr 2127125266], length 0
11:07:32.375855 IP 71.72.153.160.host.secureserver.net.http > 172.28.240.3.41487: Flags [S.], seq 4217667038, ack 4294164655, win 14480, options [mss 1460,sackOK,TS val 2264388080 ecr 1415155,nop,wscale 9], length 0
11:07:32.375863 IP 172.28.240.3.41487 > 71.72.153.160.host.secureserver.net.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1415231 ecr 2264388080], length 0
11:07:32.557337 IP 50-116-113-71.unifiedlayer.com.http > 172.28.240.3.60573: Flags [.], seq 4141816325:4141817673, ack 1528536668, win 504, options [nop,nop,TS val 3890812662 ecr 1415210], length 1348: HTTP
11:07:32.557341 IP 172.28.240.3.38547 > web-server.e-nk.ru.domain: 65348+ PTR? 33.0.160.217.in-addr.arpa. (43)
11:07:32.557346 IP 172.28.240.3.60573 > 50-116-113-71.unifiedlayer.com.http: Flags [.], ack 1348, win 1201, options [nop,nop,TS val 1415276 ecr 3890812662], length 0
11:07:32.767350 IP 172.28.240.3.40688 > web-server.e-nk.ru.domain: 30550+ PTR? 71.72.153.160.in-addr.arpa. (44)
11:07:32.767405 IP 172.28.240.3.51193 > 194.247.56.29.https: Flags [P.], seq 349:380, ack 2045, win 319, options [nop,nop,TS val 1415329 ecr 833868876], length 31
11:07:32.985630 IP cl13.webspacecontrol.com.http > 172.28.240.3.59881: Flags [.], seq 1454269861:1454271309, ack 1560988027, win 59, options [nop,nop,TS val 3602497834 ecr 1415335], length 1448: HTTP
11:07:32.985639 IP 172.28.240.3.59881 > cl13.webspacecontrol.com.http: Flags [.], ack 4344, win 803, options [nop,nop,TS val 1415383 ecr 3602497834], length 0
11:07:32.986866 IP 172.28.240.3.37147 > unalocated.63.wixsite.com.http: Flags [F.], seq 4233736303, ack 2730716069, win 229, options [nop,nop,TS val 1415384 ecr 833799105], length 0
11:07:32.986951 IP 172.28.240.3.57370 > web-server.e-nk.ru.domain: 34541+ PTR? 171.63.230.185.in-addr.arpa. (45)
11:07:32.987151 IP shared-amw120.rev.nazwa.pl.https > 172.28.240.3.35560: Flags [.], seq 1378642827:1378644275, ack 4255607992, win 68, options [nop,nop,TS val 447235192 ecr 1415315], length 1448
11:07:32.987172 IP 172.28.240.3.35560 > shared-amw120.rev.nazwa.pl.https: Flags [.], ack 1448, win 1152, options [nop,nop,TS val 1415384 ecr 447235192], length 0
11:07:32.988610 IP solitary-pear.aeza.network.http > 172.28.240.3.39684: Flags [.], seq 4173779156:4173780444, ack 711919952, win 509, options [nop,nop,TS val 2917309113 ecr 1415337], length 1288: HTTP
11:07:32.988615 IP 172.28.240.3.39684 > solitary-pear.aeza.network.http: Flags [.], ack 7728, win 500, options [nop,nop,TS val 1415384 ecr 2917309113], length 0
11:07:32.990020 IP ec2-18-193-36-153.eu-central-1.compute.amazonaws.com.https > 172.28.240.3.49900: Flags [.], seq 3892137068:3892138516, ack 1363192538, win 133, options [nop,nop,TS val 340850625 ecr 1415342], length 1448
11:07:33.287875 IP 172.28.240.3.36216 > web-server.e-nk.ru.domain: 9047+ PTR? 120.206.128.85.in-addr.arpa. (45)
11:07:33.287893 IP web74.keliweb.com.http > 172.28.240.3.41368: Flags [.], seq 2975640581:2975642021, ack 1340526871, win 235, options [nop,nop,TS val 3703400682 ecr 1415244], length 1440: HTTP: HTTP/1.1 200 OK
11:07:33.560984 IP web108.shared.host.it.http > 172.28.240.3.45671: Flags [.], seq 3082340068:3082341504, ack 2864000541, win 60, length 1436: HTTP
11:07:33.560988 IP 172.28.240.3.45671 > web108.shared.host.it.http: Flags [.], ack 4294965860, win 571, length 0
11:07:33.654166 IP web-server.e-nk.ru.domain > 172.28.240.3.48285: 39570 0/1/0 (100)
11:07:33.654170 IP web-server.e-nk.ru.domain > 172.28.240.3.40219: 58371 NXDomain* 0/1/0 (81)
11:07:33.902871 IP 172.28.240.3.40242 > web-server.e-nk.ru.domain: 47816+ PTR? 14.174.221.185.in-addr.arpa. (45)
11:07:33.903605 IP webcluster1.webpod15-cph3.one.com.http > 172.28.240.3.56969: Flags [.], seq 3639698823:3639700271, ack 934022231, win 508, options [nop,nop,TS val 2005021065 ecr 1415270], length 1448: HTTP
11:07:34.177794 IP 172.28.240.3.49096 > web-server.e-nk.ru.domain: 30884+ PTR? 27.215.30.46.in-addr.arpa. (43)
11:07:34.178247 IP shared-amw120.rev.nazwa.pl.https > 172.28.240.3.35557: Flags [.], seq 1303601316:1303602764, ack 1316133786, win 67, options [nop,nop,TS val 447236390 ecr 1415615], length 1448
11:07:34.178257 IP 172.28.240.3.35557 > shared-amw120.rev.nazwa.pl.https: Flags [.], ack 1448, win 1109, options [nop,nop,TS val 1415681 ecr 447236390], length 0
11:07:34.179732 IP angry-fermat.162-222-204-75.plesk.page.http > 172.28.240.3.46546: Flags [.], seq 675702407:675703855, ack 4138881645, win 508, options [nop,nop,TS val 3664780121 ecr 1415483], length 1448: HTTP
11:07:34.179740 IP 172.28.240.3.46546 > angry-fermat.162-222-204-75.plesk.page.http: Flags [.], ack 4294952816, win 251, options [nop,nop,TS val 1415682 ecr 3664777135,nop,nop,sack 1 {0:1448}], length 0
11:07:34.180972 IP angry-fermat.162-222-204-75.plesk.page.http > 172.28.240.3.46548: Flags [.], seq 1198573148:1198574596, ack 1170117983, win 507, options [nop,nop,TS val 3664780121 ecr 1415483], length 1448: HTTP
11:07:34.417542 IP web-server.e-nk.ru.domain > 172.28.240.3.55441: 10347 NXDomain* 0/1/0 (83)
11:07:34.417571 IP 172.28.240.3.45445 > web-server.e-nk.ru.domain: 11953+ PTR? 75.204.222.162.in-addr.arpa. (45)
11:07:34.417637 IP 172.28.240.3.58060 > web-server.e-nk.ru.domain: 36598+ A? elgroup.pro. (29)
11:07:34.418687 IP webhost.intermedia.com.gr.http > 172.28.240.3.35903: Flags [.], seq 100797097:100798545, ack 2871957970, win 235, options [nop,nop,TS val 1807967879 ecr 1415551], length 1448: HTTP: HTTP/1.1 500 Plugin not found!
11:07:35.954285 IP 172.28.240.3.36940 > web-server.e-nk.ru.domain: 19411+ PTR? 91.121.174.93.in-addr.arpa. (44)
11:07:35.954644 IP server21.hosting.reg.ru.http > 172.28.240.3.60343: Flags [.], seq 734933119:734934567, ack 3550908957, win 235, options [nop,nop,TS val 457545970 ecr 1416094], length 1448: HTTP
11:07:35.954650 IP 172.28.240.3.60343 > server21.hosting.reg.ru.http: Flags [.], ack 4294964400, win 794, options [nop,nop,TS val 1416125 ecr 457545723,nop,nop,sack 1 {0:1448}], length 0
11:07:35.954858 IP 172.28.240.3.59880 > cl13.webspacecontrol.com.http: Flags [.], ack 130320, win 654, options [nop,nop,TS val 1416126 ecr 3602500771], length 0
11:07:35.956166 IP web0153.zxcs.nl.http > 172.28.240.3.40870: Flags [.], seq 2630069405:2630070853, ack 2092985647, win 235, options [nop,nop,TS val 556821498 ecr 1416070], length 1448: HTTP
11:07:35.956173 IP 172.28.240.3.40870 > web0153.zxcs.nl.http: Flags [.], ack 4294962952, win 726, options [nop,nop,TS val 1416126 ecr 556821136,nop,nop,sack 1 {4294964400:1448}], length 0
11:07:36.496250 IP server21.hosting.reg.ru.http > 172.28.240.3.60342: Flags [.], seq 154936:156384, ack 1, win 235, options [nop,nop,TS val 457546495 ecr 1416206], length 1448: HTTP
11:07:36.496260 IP 172.28.240.3.60342 > server21.hosting.reg.ru.http: Flags [.], ack 156384, win 668, options [nop,nop,TS val 1416261 ecr 457546495,nop,nop,sack 1 {157832:160728}], length 0
11:07:36.496289 IP 172.28.240.3.49193 > web-server.e-nk.ru.domain: 53213+ AAAA? bora.poodo.site. (33)
11:07:36.496532 IP web-server.e-nk.ru.domain > 172.28.240.3.49193: 53213 0/1/0 (100)
11:07:36.496585 IP 172.28.240.3.54575 > web-server.e-nk.ru.domain: 46121+ AAAA? bora.poodo.site.e-nk.ru. (41)
11:07:36.496856 IP web-server.e-nk.ru.domain > 172.28.240.3.54575: 46121 NXDomain* 0/1/0 (87)
11:07:36.496892 IP 172.28.240.3.44949 > web-server.e-nk.ru.domain: 61627+ A? bora.poodo.site. (33)
11:07:36.497153 IP web-server.e-nk.ru.domain > 172.28.240.3.44949: 61627 1/4/8 A 79.137.207.224 (293)
11:07:36.497211 IP 172.28.240.3.40075 > solitary-pear.aeza.network.http: Flags [S], seq 1636672903, win 29200, options [mss 1460,sackOK,TS val 1416261 ecr 0,nop,wscale 7], length 0
11:07:36.498257 IP web-server.e-nk.ru.domain > 172.28.240.3.50728: 9636 1/2/4 AAAA 2a02:2350:5:108:d5:b84c:d731:f5f7 (196)
11:07:36.498335 IP 172.28.240.3.53361 > web-server.e-nk.ru.domain: 22686+ A? www.boseindrun.be. (35)
11:07:36.498547 IP server21.hosting.reg.ru.http > 172.28.240.3.60343: Flags [.], seq 4344:5792, ack 1, win 235, options [nop,nop,TS val 457546428 ecr 1416209], length 1448: HTTP
11:07:36.498555 IP 172.28.240.3.60343 > server21.hosting.reg.ru.http: Flags [.], ack 5792, win 748, options [nop,nop,TS val 1416261 ecr 457546428], length 0
11:07:36.499587 IP web215.shellrent.com.http > 172.28.240.3.58762: Flags [.], ack 2200905118, win 508, options [nop,nop,TS val 2485700060 ecr 1416221], length 0
11:07:36.499740 IP web.gedeon.hu.http > 172.28.240.3.47521: Flags [P.], seq 1050447316:1050447557, ack 3595018530, win 118, options [nop,nop,TS val 2298881751 ecr 1416226], length 241: HTTP: HTTP/1.1 401 Unauthorized
11:07:36.499744 IP 172.28.240.3.50281 > web-server.e-nk.ru.domain: 24894+ PTR? 196.139.32.178.in-addr.arpa. (45)
11:07:36.499748 IP 172.28.240.3.47521 > web.gedeon.hu.http: Flags [.], ack 241, win 237, options [nop,nop,TS val 1416262 ecr 2298881751], length 0
11:07:36.500499 IP parham.mrservers.net.http > 172.28.240.3.50592: Flags [.], seq 1797609279:1797610727, ack 2836691685, win 235, options [nop,nop,TS val 80281758 ecr 1416212], length 1448: HTTP
11:07:36.500508 IP 172.28.240.3.50592 > parham.mrservers.net.http: Flags [.], ack 1448, win 296, options [nop,nop,TS val 1416262 ecr 80281758,nop,nop,sack 1 {13032:14480}], length 0
11:07:36.501481 IP web215.shellrent.com.http > 172.28.240.3.58764: Flags [.], ack 3252265831, win 508, options [nop,nop,TS val 2485700060 ecr 1416221], length 0
11:07:36.776753 IP 172.28.240.3.38218 > web-server.e-nk.ru.domain: 5350+ PTR? 160.52.199.94.in-addr.arpa. (44)
11:07:37.064430 IP 172.28.240.3.59227 > web-server.e-nk.ru.domain: 34901+ PTR? 11.145.74.94.in-addr.arpa. (43)
11:07:37.065856 IP cl13.webspacecontrol.com.https > 172.28.240.3.42462: Flags [.], seq 2824870059:2824871507, ack 2858275718, win 61, options [nop,nop,TS val 3602501927 ecr 1416361], length 1448
11:07:37.065863 IP 172.28.240.3.42462 > cl13.webspacecontrol.com.https: Flags [.], ack 2896, win 833, options [nop,nop,TS val 1416403 ecr 3602501927], length 0
11:07:37.242561 IP cl13.webspacecontrol.com.http > 172.28.240.3.59881: Flags [.], seq 39096:40544, ack 1, win 59, options [nop,nop,TS val 3602502107 ecr 1416404], length 1448: HTTP
11:07:37.242571 IP 172.28.240.3.59881 > cl13.webspacecontrol.com.http: Flags [.], ack 34752, win 638, options [nop,nop,TS val 1416447 ecr 3602501904,nop,nop,sack 1 {36200:40544}], length 0
11:07:37.242654 IP web-server.e-nk.ru.domain > 172.28.240.3.59727: 38261 NXDomain* 0/1/0 (101)
11:07:37.242697 IP 172.28.240.3.60960 > web-server.e-nk.ru.domain: 18537+ A? jasmine-apartments-rovinj.com. (47)
11:07:37.242991 IP web-server.e-nk.ru.domain > 172.28.240.3.60960: 18537 NXDomain 0/1/0 (120)
11:07:37.243027 IP 172.28.240.3.48488 > web-server.e-nk.ru.domain: 39802+ A? jasmine-apartments-rovinj.com.e-nk.ru. (55)
11:07:37.243330 IP web-server.e-nk.ru.domain > 172.28.240.3.48488: 39802 NXDomain* 0/1/0 (101)
11:07:37.243446 IP 172.28.240.3.33833 > web-server.e-nk.ru.domain: 62657+ AAAA? jasapajaksidoarjo.com. (39)
11:07:37.244081 IP static.7.245.90.157.clients.your-server.de.https > 172.28.240.3.59850: Flags [.], seq 1267966041:1267967489, ack 1293792236, win 260, options [nop,nop,TS val 464362784 ecr 1416397], length 1448
11:07:37.244089 IP 172.28.240.3.59850 > static.7.245.90.157.clients.your-server.de.https: Flags [.], ack 4294965848, win 1013, options [nop,nop,TS val 1416448 ecr 464362669,nop,nop,sack 1 {0:1448}], length 0
11:07:37.244192 IP 172.28.240.3.42776 > web-server.e-nk.ru.domain: 45483+ PTR? 7.245.90.157.in-addr.arpa. (43)
11:07:37.245129 IP solitary-pear.aeza.network.http > 172.28.240.3.40092: Flags [.], ack 1182047889, win 508, options [nop,nop,TS val 2917313380 ecr 1416406], length 0
11:07:37.245426 IP 172.28.240.3.https > 172.28.240.254.47037: Flags [P.], seq 616491418:616492226, ack 1988724206, win 559, options [nop,nop,TS val 1416448 ecr 53108678], length 808
11:07:37.245609 IP solitary-pear.aeza.network.http > 172.28.240.3.40075: Flags [.], seq 54141633:54142921, ack 1636672972, win 509, options [nop,nop,TS val 2917313383 ecr 1416407], length 1288: HTTP: HTTP/1.1 200 OK
11:07:37.245627 IP 172.28.240.3.40075 > solitary-pear.aeza.network.http: Flags [.], ack 1288, win 354, options [nop,nop,TS val 1416448 ecr 2917313383,nop,nop,sack 3 {2576:5152}{12880:13650}{7728:10304}], length 0
11:07:37.662011 IP cl13.webspacecontrol.com.http > 172.28.240.3.59879: Flags [.], seq 118736:120184, ack 1, win 59, options [nop,nop,TS val 3602502530 ecr 1416512], length 1448: HTTP
11:07:37.662871 IP 172.28.240.3.58331 > w96.rzone.de.http: Flags [.], ack 164248, win 753, options [nop,nop,TS val 1416553 ecr 833874205], length 0
11:07:37.663638 IP web-server.e-nk.ru.domain > 172.28.240.3.37201: 6229 1/2/4 A 81.19.145.66 (194)
11:07:37.663704 IP 172.28.240.3.43994 > www46.world4you.com.http: Flags [S], seq 1391977539, win 29200, options [mss 1460,sackOK,TS val 1416553 ecr 0,nop,wscale 7], length 0
11:07:37.663791 IP 172.28.240.3.58781 > web-server.e-nk.ru.domain: 56588+ PTR? 66.145.19.81.in-addr.arpa. (43)
11:07:37.663912 IP 172.28.240.3.39536 > w8a.rzone.de.http: Flags [P.], seq 2064748914:2064749191, ack 2799727882, win 229, options [nop,nop,TS val 1416553 ecr 833873053], length 277: HTTP: GET /components/com_jce/editor/tiny_mce/plugins/upload/editor_plugin.js HTTP/1.1
11:07:37.663938 IP 172.28.240.3.39537 > w8a.rzone.de.http: Flags [P.], seq 3802970731:3802970950, ack 2795057392, win 229, options [nop,nop,TS val 1416553 ecr 833873049], length 219: HTTP: GET /language/en-GB/en-GB.com_jce.ini HTTP/1.1
11:07:37.663954 IP 172.28.240.3.39538 > w8a.rzone.de.http: Flags [P.], seq 3908425026:3908425273, ack 2805013654, win 229, options [nop,nop,TS val 1416553 ecr 833874184], length 247: HTTP: GET /administrator/language/en-GB/en-GB.com_jce.ini HTTP/1.1
11:07:37.663973 IP 172.28.240.3.39539 > w8a.rzone.de.http: Flags [P.], seq 1512136867:1512137120, ack 2809463837, win 229, options [nop,nop,TS val 1416553 ecr 833873056], length 253: HTTP: GET /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&action=upload HTTP/1.1
11:07:37.663990 IP 172.28.240.3.33180 > gw.deer.lev3.com.http: Flags [P.], seq 3219057349:3219057620, ack 2477790404, win 229, options [nop,nop,TS val 1416553 ecr 376122811], length 271: HTTP: GET /components/com_jce/editor/tiny_mce/plugins/upload/editor_plugin.js HTTP/1.1
11:07:38.047471 IP 172.28.240.3.46254 > web-server.e-nk.ru.domain: 55773+ PTR? 90.145.169.81.in-addr.arpa. (44)
11:07:38.047871 IP web31.dominiofaidate.com.http > 172.28.240.3.51100: Flags [.], seq 648317843:648319303, ack 1053750226, win 1025, length 1460: HTTP
11:07:38.191379 IP 172.28.240.3.42056 > web-server.e-nk.ru.domain: 49066+ PTR? 230.63.249.104.in-addr.arpa. (45)
11:07:38.191400 IP static-200-69-103-20.static.etb.net.co.http > 172.28.240.3.36866: Flags [.], seq 3251713909:3251715357, ack 314668393, win 54, options [nop,nop,TS val 386253021 ecr 1416606], length 1448: HTTP
11:07:38.191405 IP 172.28.240.3.36866 > static-200-69-103-20.static.etb.net.co.http: Flags [.], ack 1448, win 862, options [nop,nop,TS val 1416685 ecr 386253021], length 0
11:07:38.192422 IP a4ec4c6ea1c92e2e6.awsglobalaccelerator.com.http > 172.28.240.3.46178: Flags [.], ack 1523659116, win 261, options [nop,nop,TS val 1084596658 ecr 1416654], length 0
11:07:38.636923 IP 172.28.240.3.43823 > web-server.e-nk.ru.domain: 53860+ PTR? 253.221.195.51.in-addr.arpa. (45)
11:07:38.637076 IP arsenic.cloudhosting.uk.http > 172.28.240.3.42324: Flags [.], seq 3463588526:3463589974, ack 2353858406, win 235, options [nop,nop,TS val 902575562 ecr 1416757], length 1448: HTTP: HTTP/1.1 200 OK
11:07:38.948811 IP s4.mcvps.hu.http > 172.28.240.3.55501: Flags [.], ack 4234152985, win 507, options [nop,nop,TS val 4044988904 ecr 1416847], length 0
11:07:38.948853 IP 172.28.240.3.34944 > web-server.e-nk.ru.domain: 28933+ PTR? 20.103.69.200.in-addr.arpa. (44)
11:07:39.376731 IP 172.28.240.3.40064 > web-server.e-nk.ru.domain: 40204+ PTR? 33.220.199.185.in-addr.arpa. (45)
11:07:39.376765 IP t101.x1.fr.https > 172.28.240.3.58193: Flags [.], seq 1197065879:1197067303, ack 884560598, win 22, options [nop,nop,TS val 1241909981 ecr 1416918], length 1424
11:07:39.376772 IP 172.28.240.3.58193 > t101.x1.fr.https: Flags [.], ack 1424, win 463, options [nop,nop,TS val 1416981 ecr 1241909981], length 0
11:07:39.377936 IP s46.tarhely.com.http > 172.28.240.3.56727: Flags [P.], seq 3911881208:3911881668, ack 2359213162, win 235, options [nop,nop,TS val 918399296 ecr 1416938], length 460: HTTP: HTTP/1.1 404 Not Found

17:02:44.942302 IP 172.28.240.37.52163 > 172.28.240.255.1947: UDP, length 40
17:02:44.948930 IP 172.28.240.3.50624 > web-server.e-nk.ru.domain: 20477+ PTR? 255.240.28.172.in-addr.arpa. (45)
17:02:44.949367 IP web-server.e-nk.ru.domain > 172.28.240.3.50624: 20477 NXDomain* 0/1/0 (99)
17:02:44.949458 IP 172.28.240.3.56770 > web-server.e-nk.ru.domain: 35822+ PTR? 37.240.28.172.in-addr.arpa. (44)
17:02:44.949807 IP web-server.e-nk.ru.domain > 172.28.240.3.56770: 35822 NXDomain* 0/1/0 (98)
17:02:44.949898 IP 172.28.240.3.59632 > web-server.e-nk.ru.domain: 30190+ PTR? 3.240.28.172.in-addr.arpa. (43)
17:02:44.950198 IP web-server.e-nk.ru.domain > 172.28.240.3.59632: 30190 NXDomain* 0/1/0 (97)
17:02:44.977351 IP data-186-171.cgates.lt.22422 > 172.28.240.3.ssh: Flags [.], seq 2871159979:2871161427, ack 1572261211, win 1460, options [nop,nop,TS val 2467724254 ecr 15778715], length 1448
17:02:44.977389 IP 172.28.240.3.ssh > data-186-171.cgates.lt.22422: Flags [R], seq 1572261211, win 0, length 0
17:02:44.979367 IP 172.28.240.3.37326 > web-server.e-nk.ru.domain: 25206+ PTR? 171.186.20.5.in-addr.arpa. (43)
17:02:44.993555 IP 81.200.245.34.61784 > 172.28.240.3.ssh: Flags [.], ack 85779605, win 513, length 0
17:02:44.993573 IP 172.28.240.3.ssh > 81.200.245.34.61784: Flags [R], seq 85779605, win 0, length 0
17:02:45.008611 IP 81.200.245.34.61784 > 172.28.240.3.ssh: Flags [F.], seq 0, ack 1, win 513, length 0
17:02:45.008626 IP 172.28.240.3.ssh > 81.200.245.34.61784: Flags [R], seq 85779605, win 0, length 0
17:02:45.216759 IP 172.28.240.3.56839 > web-server.e-nk.ru.domain: 20136+ PTR? 34.245.200.81.in-addr.arpa. (44)
17:02:45.261650 IP unn-84-17-48-9.cdn77.com.47416 > 172.28.240.3.ssh: Flags [.], seq 288829047:288830321, ack 1323427599, win 2920, options [nop,nop,TS val 2357815171 ecr 15778735], length 1274
17:02:45.261699 IP 172.28.240.3.ssh > unn-84-17-48-9.cdn77.com.47416: Flags [.], ack 1274, win 249, options [nop,nop,TS val 15778856 ecr 2357815171], length 0
17:02:45.269248 IP 172.28.240.3.54956 > web-server.e-nk.ru.domain: 42650+ PTR? 9.48.17.84.in-addr.arpa. (41)
17:02:45.270236 IP unn-84-17-48-9.cdn77.com.47424 > 172.28.240.3.ssh: Flags [S], seq 874630483, win 2920, options [mss 1286,sackOK,TS val 2357815171 ecr 0,nop,wscale 0], length 0
17:02:45.270256 IP 172.28.240.3.ssh > unn-84-17-48-9.cdn77.com.47424: Flags [S.], seq 3643893224, ack 874630484, win 28960, options [mss 1460,sackOK,TS val 15778858 ecr 2357815171,nop,wscale 7], length 0
17:02:45.270714 IP acgb25.neoplus.adsl.tpnet.pl.28326 > 172.28.240.3.ssh: Flags [P.], seq 1671498442:1671499792, ack 733987893, win 502, options [nop,nop,TS val 2457860702 ecr 15778710], length 1350
17:02:45.270737 IP 172.28.240.3.ssh > acgb25.neoplus.adsl.tpnet.pl.28326: Flags [R], seq 733987893, win 0, length 0
17:02:45.570122 IP 172.28.240.3.50414 > web-server.e-nk.ru.domain: 34121+ PTR? 25.229.9.83.in-addr.arpa. (42)
17:02:45.572486 IP lu2.pvdata.host.54488 > 172.28.240.3.ssh: Flags [.], ack 2594856607, win 2878, options [nop,nop,TS val 500634332 ecr 15778703], length 0
17:02:45.572497 IP 172.28.240.3.ssh > lu2.pvdata.host.54488: Flags [R], seq 2594856607, win 0, length 0
17:02:45.572936 IP lu2.pvdata.host.54492 > 172.28.240.3.ssh: Flags [.], seq 2420480262:2420481605, ack 1404956025, win 2920, options [nop,nop,TS val 500634333 ecr 15778703], length 1343
17:02:45.572950 IP 172.28.240.3.ssh > lu2.pvdata.host.54492: Flags [R], seq 1404956025, win 0, length 0
17:02:45.642077 IP 172.28.240.3.45551 > web-server.e-nk.ru.domain: 64837+ PTR? 171.88.223.92.in-addr.arpa. (44)
17:02:45.643416 IP 163.120.66.58.28376 > 172.28.240.3.ssh: Flags [.], seq 976810635:976812083, ack 995345306, win 58, options [nop,nop,TS val 140667733 ecr 15778717], length 1448
17:02:45.643436 IP 172.28.240.3.ssh > 163.120.66.58.28376: Flags [.], ack 1448, win 249, options [nop,nop,TS val 15778951 ecr 140667733], length 0
17:02:45.841255 IP 172.28.240.3.49363 > web-server.e-nk.ru.domain: 317+ PTR? 58.66.120.163.in-addr.arpa. (44)
17:02:45.856175 IP 62.115.255.163.55944 > 172.28.240.3.ssh: Flags [S], seq 3950433685, win 2920, options [mss 1340,sackOK,TS val 1287828900 ecr 0,nop,wscale 0], length 0
17:02:45.856209 IP 172.28.240.3.ssh > 62.115.255.163.55944: Flags [S.], seq 305991325, ack 3950433686, win 28960, options [mss 1460,sackOK,TS val 15779004 ecr 1287828900,nop,wscale 7], length 0
17:02:45.856773 IP 106.38.59.205.56191 > 172.28.240.3.ssh: Flags [S], seq 1623546231, win 14600, options [mss 1400,sackOK,TS val 2920959996 ecr 0,nop,wscale 7], length 0
17:02:45.856794 IP 172.28.240.3.ssh > 106.38.59.205.56191: Flags [S.], seq 1415886111, ack 1623546232, win 28960, options [mss 1460,sackOK,TS val 15779004 ecr 2920959996,nop,wscale 7], length 0
17:02:55.842415 IP 172.28.240.3.44248 > web-server.e-nk.ru.domain: 18915+ PTR? 163.255.115.62.in-addr.arpa. (45)
17:02:55.868921 IP 172.28.240.3.ssh > dsl-187-135-183-68-dyn.prod-infinitum.com.mx.48011: Flags [F.], seq 4088488052, ack 274723059, win 227, options [nop,nop,TS val 15781508 ecr 67707679], length 0
17:02:55.877027 IP 111.38.136.211.35001 > 172.28.240.3.ssh: Flags [.], seq 1287949246:1287950694, ack 380281416, win 5840, options [nop,nop,TS val 2241114447 ecr 15781369], length 1448
17:02:56.179308 IP 172.28.240.3.33596 > web-server.e-nk.ru.domain: 33619+ PTR? 205.59.38.106.in-addr.arpa. (44)
17:02:56.182632 IP 172.28.240.3.https > 172.28.240.254.42709: Flags [.], seq 395521922:395524818, ack 2777468700, win 235, options [nop,nop,TS val 15781586 ecr 3253501], length 2896
17:02:56.721963 IP 172.28.240.3.53273 > web-server.e-nk.ru.domain: 22046+ PTR? 68.183.135.187.in-addr.arpa. (45)
17:02:56.803025 IP 146.70.52.247.46506 > 172.28.240.3.ssh: Flags [P.], seq 1699838555:1699839829, ack 1948421463, win 2920, options [nop,nop,TS val 3499481594 ecr 15781533], length 1274
17:02:56.803051 IP 172.28.240.3.ssh > 146.70.52.247.46506: Flags [R], seq 1948421463, win 0, length 0
17:02:57.177762 IP 172.28.240.3.46765 > web-server.e-nk.ru.domain: 41799+ PTR? 211.136.38.111.in-addr.arpa. (45)
17:03:07.178551 IP 172.28.240.3.57307 > web-server.e-nk.ru.domain: 29979+ PTR? 254.240.28.172.in-addr.arpa. (45)
17:03:07.178916 IP web-server.e-nk.ru.domain > 172.28.240.3.57307: 29979 NXDomain* 0/1/0 (99)
17:03:07.179080 IP 172.28.240.3.44026 > web-server.e-nk.ru.domain: 56477+ PTR? 247.52.70.146.in-addr.arpa. (44)
17:03:07.222217 IP 130.41.109.121.10266 > 172.28.240.3.ssh: Flags [S], seq 3438926704, win 28416, options [mss 1420,nop,wscale 7,sackOK,TS val 2478859183 ecr 0], length 0
17:03:07.237804 IP 172.28.240.3.51492 > web-server.e-nk.ru.domain: 62696+ PTR? 121.109.41.130.in-addr.arpa. (45)
17:03:07.239363 IP 172.28.240.3.48398 > 172.28.240.31.mysql: Flags [P.], seq 200236244:200237585, ack 1072604499, win 3480, options [nop,nop,TS val 15784350 ecr 15784597], length 1341
17:03:07.239928 IP 172.28.240.31.mysql > 172.28.240.3.48398: Flags [P.], seq 1:57, ack 1341, win 811, options [nop,nop,TS val 15784598 ecr 15784350], length 56
17:03:07.240050 IP 172.28.240.3.48398 > 172.28.240.31.mysql: Flags [.], seq 1341:2789, ack 57, win 3480, options [nop,nop,TS val 15784350 ecr 15784598], length 1448
17:03:07.240057 IP 172.28.240.3.48398 > 172.28.240.31.mysql: Flags [P.], seq 2789:3791, ack 57, win 3480, options [nop,nop,TS val 15784350 ecr 15784598], length 1002
17:03:07.240096 IP 172.28.240.31.mysql > 172.28.240.3.48398: Flags [.], ack 3791, win 857, options [nop,nop,TS val 15784598 ecr 15784350], length 0
17:03:17.238649 IP 172.28.240.3.41707 > web-server.e-nk.ru.domain: 4951+ PTR? 31.240.28.172.in-addr.arpa. (44)
17:03:17.239094 IP web-server.e-nk.ru.domain > 172.28.240.3.41707: 4951 NXDomain* 0/1/0 (98)
17:03:17.316944 IP 172.28.240.3.ssh > 130.41.109.121.38761: Flags [S.], seq 4223388757, ack 3133473186, win 28960, options [mss 1460,sackOK,TS val 15786870 ecr 2478865886,nop,wscale 7], length 0
17:03:17.316972 IP 172.28.240.3.ssh > 82.157.208.241.51653: Flags [S.], seq 514979080, ack 3005374627, win 29200, options [mss 1460,nop,nop,sackOK], length 0
17:03:17.316981 IP 172.28.240.3.ssh > 181.214.218.178.60471: Flags [S.], seq 1837023964, ack 2589845875, win 29200, options [mss 1460], length 0
17:03:17.317247 IP 172.28.240.3.43377 > web-server.e-nk.ru.domain: 9043+ PTR? 241.208.157.82.in-addr.arpa. (45)
17:03:17.367875 IP 171.49.130.84.58101 > 172.28.240.3.ssh: Flags [S], seq 1245572526, win 29040, options [mss 1412,sackOK,TS val 6102755 ecr 0,nop,wscale 5], length 0
17:03:17.367911 IP 172.28.240.3.ssh > 171.49.130.84.58101: Flags [S.], seq 186456123, ack 1245572527, win 28960, options [mss 1460,sackOK,TS val 15786882 ecr 6102755,nop,wscale 7], length 0
17:03:17.377900 IP 49.232.23.200.57461 > 172.28.240.3.ssh: Flags [P.], seq 3987398593:3987400005, ack 629577297, win 1029, length 1412
17:03:17.377922 IP 172.28.240.3.ssh > 49.232.23.200.57461: Flags [R], seq 629577297, win 0, length 0
17:03:17.574558 IP 172.28.240.3.56739 > web-server.e-nk.ru.domain: 9993+ PTR? 178.218.214.181.in-addr.arpa. (46)
17:03:17.699659 IP 172.28.240.3.40383 > web-server.e-nk.ru.domain: 13162+ PTR? 84.130.49.171.in-addr.arpa. (44)
17:03:17.715093 IP 82.196.12.12.47612 > 172.28.240.3.ssh: Flags [S], seq 1582260109, win 2920, options [mss 1358,sackOK,TS val 1211256711 ecr 0,nop,wscale 0], length 0
17:03:18.018226 IP 172.28.240.3.60313 > web-server.e-nk.ru.domain: 11137+ PTR? 200.23.232.49.in-addr.arpa. (44)
17:03:18.023960 IP 130.41.109.7.8897 > 172.28.240.3.ssh: Flags [S], seq 3434980365, win 28416, options [mss 1420,nop,wscale 7,sackOK,TS val 3300337958 ecr 0], length 0

11:52:37.940629 IP 172.28.240.3.ssh > 172.30.237.120.61390: Flags [P.], seq 2023154640:2023154848, ack 4203211501, win 1452, length 208
11:52:37.941434 IP 172.30.237.120.61390 > 172.28.240.3.ssh: Flags [.], ack 208, win 8209, length 0
11:52:37.941470 IP 172.28.240.3.58969 > web-server.e-nk.ru.domain: 10309+ PTR? 120.237.30.172.in-addr.arpa. (45)
11:52:37.941880 IP web-server.e-nk.ru.domain > 172.28.240.3.58969: 10309 NXDomain* 0/1/0 (99)
11:52:37.942065 IP 172.28.240.3.33928 > web-server.e-nk.ru.domain: 1504+ PTR? 3.240.28.172.in-addr.arpa. (43)
11:52:37.942393 IP web-server.e-nk.ru.domain > 172.28.240.3.33928: 1504 NXDomain* 0/1/0 (97)
11:52:38.278429 IP 172.28.240.2.netbios-ns > 172.28.240.255.netbios-ns: UDP, length 50
11:52:38.278692 IP 172.28.240.3.52021 > web-server.e-nk.ru.domain: 21631+ PTR? 255.240.28.172.in-addr.arpa. (45)
11:52:38.279087 IP web-server.e-nk.ru.domain > 172.28.240.3.52021: 21631 NXDomain* 0/1/0 (99)
11:52:38.279212 IP 172.28.240.3.45366 > web-server.e-nk.ru.domain: 46992+ PTR? 2.240.28.172.in-addr.arpa. (43)
11:52:38.279525 IP web-server.e-nk.ru.domain > 172.28.240.3.45366: 46992 NXDomain* 0/1/0 (97)
11:52:38.582443 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 1279304963:1279305275, ack 145194208, win 317, options [nop,nop,TS val 90186943 ecr 1634751234], length 312
11:52:38.582609 IP 172.28.240.3.46814 > web-server.e-nk.ru.domain: 18812+ PTR? 58.100.168.192.in-addr.arpa. (45)
11:52:38.583028 IP web-server.e-nk.ru.domain > 172.28.240.3.46814: 18812 NXDomain* 0/1/0 (100)
11:52:38.583805 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 312, win 2373, options [nop,nop,TS val 1634752744 ecr 90186943], length 0
11:52:39.317237 IP 172.28.240.3.http > 172.28.240.254.36766: Flags [F.], seq 2727392881, ack 1139789834, win 235, options [nop,nop,TS val 90187127 ecr 118583971], length 0
11:52:39.317485 IP 172.28.240.3.37184 > web-server.e-nk.ru.domain: 13018+ PTR? 254.240.28.172.in-addr.arpa. (45)
11:52:39.318080 IP web-server.e-nk.ru.domain > 172.28.240.3.37184: 13018 NXDomain* 0/1/0 (99)
11:52:39.319115 IP 172.28.240.254.36766 > 172.28.240.3.http: Flags [F.], seq 1, ack 1, win 123, options [nop,nop,TS val 118591478 ecr 90187127], length 0
11:52:39.319133 IP 172.28.240.3.http > 172.28.240.254.36766: Flags [.], ack 2, win 235, options [nop,nop,TS val 90187127 ecr 118591478], length 0
11:52:39.421529 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
11:52:39.421675 IP 172.28.240.3.56908 > web-server.e-nk.ru.domain: 57033+ PTR? 230.240.28.172.in-addr.arpa. (45)
11:52:39.422028 IP web-server.e-nk.ru.domain > 172.28.240.3.56908: 57033 NXDomain* 0/1/0 (99)
11:52:39.422110 IP 172.28.240.3.55236 > web-server.e-nk.ru.domain: 37896+ PTR? 24.240.28.172.in-addr.arpa. (44)
11:52:39.422434 IP web-server.e-nk.ru.domain > 172.28.240.3.55236: 37896 NXDomain* 0/1/0 (98)
11:52:39.631151 IP 172.28.240.254.46746 > 172.28.240.3.https: Flags [S], seq 777962305, win 14600, options [mss 1460,sackOK,TS val 118591556 ecr 0,nop,wscale 7], length 0
11:52:39.631204 IP 172.28.240.3.https > 172.28.240.254.46746: Flags [S.], seq 3746291230, ack 777962306, win 28960, options [mss 1460,sackOK,TS val 90187205 ecr 118591556,nop,wscale 7], length 0
11:52:39.633022 IP 172.28.240.254.46746 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 118591556 ecr 90187205], length 0
11:52:39.633287 IP 172.28.240.254.46746 > 172.28.240.3.https: Flags [P.], seq 1:518, ack 1, win 115, options [nop,nop,TS val 118591557 ecr 90187205], length 517
11:52:39.633314 IP 172.28.240.3.https > 172.28.240.254.46746: Flags [.], ack 518, win 235, options [nop,nop,TS val 90187206 ecr 118591557], length 0
11:52:39.635779 IP 172.28.240.3.https > 172.28.240.254.46746: Flags [.], seq 1:2897, ack 518, win 235, options [nop,nop,TS val 90187207 ecr 118591557], length 2896
11:52:39.635792 IP 172.28.240.3.https > 172.28.240.254.46746: Flags [P.], seq 2897:3269, ack 518, win 235, options [nop,nop,TS val 90187207 ecr 118591557], length 372
11:52:39.638053 IP 172.28.240.254.46746 > 172.28.240.3.https: Flags [.], ack 1449, win 137, options [nop,nop,TS val 118591558 ecr 90187207], length 0
11:52:39.639685 IP 172.28.240.254.46746 > 172.28.240.3.https: Flags [.], ack 3269, win 166, options [nop,nop,TS val 118591558 ecr 90187207], length 0
11:52:40.056199 IP 172.28.240.3.https > 172.28.240.254.46734: Flags [P.], seq 1693073704:1693073735, ack 1200518416, win 243, options [nop,nop,TS val 90187312 ecr 118584157], length 31
11:52:40.056299 IP 172.28.240.3.https > 172.28.240.254.46734: Flags [F.], seq 31, ack 1, win 243, options [nop,nop,TS val 90187312 ecr 118584157], length 0
11:52:40.093094 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 312:656, ack 1, win 317, options [nop,nop,TS val 90187321 ecr 1634752744], length 344
11:52:40.094163 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 656, win 2373, options [nop,nop,TS val 1634754255 ecr 90187321], length 0
11:52:40.095687 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [S], seq 2748274421, win 14600, options [mss 1460,sackOK,TS val 118591672 ecr 0,nop,wscale 7], length 0
11:52:40.095715 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [S.], seq 714717212, ack 2748274422, win 28960, options [mss 1460,sackOK,TS val 90187322 ecr 118591672,nop,wscale 7], length 0
11:52:40.097584 IP 172.28.240.254.46734 > 172.28.240.3.https: Flags [.], ack 32, win 331, options [nop,nop,TS val 118591673 ecr 90187312], length 0
11:52:40.097606 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 118591673 ecr 90187322], length 0
11:52:40.097798 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [P.], seq 1:518, ack 1, win 115, options [nop,nop,TS val 118591673 ecr 90187322], length 517
11:52:40.097830 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [.], ack 518, win 235, options [nop,nop,TS val 90187322 ecr 118591673], length 0
11:52:40.100309 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [.], seq 1:2897, ack 518, win 235, options [nop,nop,TS val 90187323 ecr 118591673], length 2896
11:52:40.100320 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [P.], seq 2897:3264, ack 518, win 235, options [nop,nop,TS val 90187323 ecr 118591673], length 367
11:52:40.102580 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 1449, win 137, options [nop,nop,TS val 118591674 ecr 90187323], length 0
11:52:40.104248 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 3264, win 166, options [nop,nop,TS val 118591674 ecr 90187323], length 0
11:52:40.241069 IP 172.28.240.254.46734 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 331, options [nop,nop,TS val 118591708 ecr 90187312], length 31
11:52:40.241122 IP 172.28.240.3.https > 172.28.240.254.46734: Flags [.], ack 33, win 243, options [nop,nop,TS val 90187358 ecr 118591708], length 0
11:52:40.298408 IP 172.28.240.2.netbios-ns > 172.28.240.255.netbios-ns: UDP, length 50
11:52:40.298447 IP 172.28.240.2.netbios-ns > 172.28.240.255.netbios-ns: UDP, length 50
11:52:40.306733 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [P.], seq 518:644, ack 3264, win 166, options [nop,nop,TS val 118591725 ecr 90187323], length 126
11:52:40.307749 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [P.], seq 3264:3538, ack 644, win 235, options [nop,nop,TS val 90187375 ecr 118591725], length 274
11:52:40.309579 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 3538, win 188, options [nop,nop,TS val 118591726 ecr 90187375], length 0
11:52:40.509431 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [P.], seq 644:1182, ack 3538, win 188, options [nop,nop,TS val 118591776 ecr 90187375], length 538
11:52:40.523729 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [S], seq 2184847846, win 29200, options [mss 1460,sackOK,TS val 90187429 ecr 0,nop,wscale 7], length 0
11:52:40.523857 IP 172.28.240.3.34414 > web-server.e-nk.ru.domain: 28525+ PTR? 31.240.28.172.in-addr.arpa. (44)
11:52:40.523961 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [S.], seq 1666695165, ack 2184847847, win 28960, options [mss 1460,sackOK,TS val 90188628 ecr 90187429,nop,wscale 7], length 0
11:52:40.524013 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 0
11:52:40.524288 IP web-server.e-nk.ru.domain > 172.28.240.3.34414: 28525 NXDomain* 0/1/0 (98)
11:52:40.524443 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 95
11:52:40.524526 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 0
11:52:40.524603 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 1:111, ack 96, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 110
11:52:40.524643 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], ack 111, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 0
11:52:40.524687 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 96:107, ack 111, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 11
11:52:40.524891 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 111:132, ack 107, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 21
11:52:40.524967 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 107:118, ack 132, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 11
11:52:40.525078 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 132:181, ack 118, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 49
11:52:40.525163 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 118:129, ack 181, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 11
11:52:40.525261 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 181:201, ack 129, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 20
11:52:40.525331 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 129:140, ack 201, win 227, options [nop,nop,TS val 90188628 ecr 90187429], length 11
11:52:40.525466 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 201:360, ack 140, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 159
11:52:40.525795 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 140:196, ack 360, win 235, options [nop,nop,TS val 90188628 ecr 90187429], length 56
11:52:40.525933 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 360:430, ack 196, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 70
11:52:40.526058 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 196:252, ack 430, win 235, options [nop,nop,TS val 90188628 ecr 90187429], length 56
11:52:40.526188 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 430:620, ack 252, win 229, options [nop,nop,TS val 90187429 ecr 90188628], length 190
11:52:40.526421 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 252:702, ack 620, win 243, options [nop,nop,TS val 90188628 ecr 90187429], length 450
11:52:40.526567 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 620:743, ack 702, win 237, options [nop,nop,TS val 90187429 ecr 90188628], length 123
11:52:40.526781 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 702:754, ack 743, win 243, options [nop,nop,TS val 90188628 ecr 90187429], length 52
11:52:40.526868 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 743:809, ack 754, win 237, options [nop,nop,TS val 90187429 ecr 90188628], length 66
11:52:40.526960 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 754:863, ack 809, win 243, options [nop,nop,TS val 90188628 ecr 90187429], length 109
11:52:40.527092 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 809:855, ack 863, win 237, options [nop,nop,TS val 90187429 ecr 90188628], length 46
11:52:40.527231 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 863:915, ack 855, win 243, options [nop,nop,TS val 90188629 ecr 90187429], length 52
11:52:40.528707 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 855:1090, ack 915, win 237, options [nop,nop,TS val 90187430 ecr 90188629], length 235
11:52:40.528910 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 915:967, ack 1090, win 252, options [nop,nop,TS val 90188629 ecr 90187430], length 52
11:52:40.532585 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 1090:1147, ack 967, win 237, options [nop,nop,TS val 90187431 ecr 90188629], length 57
11:52:40.532669 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 967:1075, ack 1147, win 252, options [nop,nop,TS val 90188630 ecr 90187431], length 108
11:52:40.547361 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [.], ack 1182, win 244, options [nop,nop,TS val 90187435 ecr 118591776], length 0
11:52:40.571386 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 1075, win 237, options [nop,nop,TS val 90187441 ecr 90188630], length 0
11:52:40.664473 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 1147:1291, ack 1075, win 237, options [nop,nop,TS val 90187464 ecr 90188630], length 144
11:52:40.664622 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 1075:1184, ack 1291, win 260, options [nop,nop,TS val 90188663 ecr 90187464], length 109
11:52:40.664657 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 1184, win 237, options [nop,nop,TS val 90187464 ecr 90188663], length 0
11:52:41.603474 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 656:888, ack 1, win 317, options [nop,nop,TS val 90187699 ecr 1634754255], length 232
11:52:41.604536 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 888, win 2373, options [nop,nop,TS val 1634755766 ecr 90187699], length 0
11:52:42.318367 IP 172.28.240.2.netbios-ns > 172.28.240.255.netbios-ns: UDP, length 50
11:52:42.318474 IP 172.28.240.2.netbios-dgm > 172.28.240.255.netbios-dgm: UDP, length 183
11:52:42.631586 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
11:52:43.119340 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 888:1104, ack 1, win 317, options [nop,nop,TS val 90188077 ecr 1634755766], length 216
11:52:43.120179 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 1104, win 2373, options [nop,nop,TS val 1634757281 ecr 90188077], length 0
11:52:43.379071 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [S], seq 2851350248, win 14600, options [mss 1460,sackOK,TS val 118592493 ecr 0,nop,wscale 7], length 0
11:52:43.379113 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [S.], seq 629141142, ack 2851350249, win 28960, options [mss 1460,sackOK,TS val 90188142 ecr 118592493,nop,wscale 7], length 0
11:52:43.380870 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 118592493 ecr 90188142], length 0
11:52:43.381093 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [P.], seq 1:518, ack 1, win 115, options [nop,nop,TS val 118592493 ecr 90188142], length 517
11:52:43.381113 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], ack 518, win 235, options [nop,nop,TS val 90188143 ecr 118592493], length 0
11:52:43.383817 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], seq 1:2897, ack 518, win 235, options [nop,nop,TS val 90188144 ecr 118592493], length 2896
11:52:43.383829 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [P.], seq 2897:3262, ack 518, win 235, options [nop,nop,TS val 90188144 ecr 118592493], length 365
11:52:43.386151 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 1449, win 137, options [nop,nop,TS val 118592495 ecr 90188144], length 0
11:52:43.387819 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 3262, win 166, options [nop,nop,TS val 118592495 ecr 90188144], length 0
11:52:43.425248 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [P.], seq 518:644, ack 3262, win 166, options [nop,nop,TS val 118592505 ecr 90188144], length 126
11:52:43.425666 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [P.], seq 3262:3536, ack 644, win 235, options [nop,nop,TS val 90188154 ecr 118592505], length 274
11:52:43.427602 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 3536, win 188, options [nop,nop,TS val 118592505 ecr 90188154], length 0
11:52:43.457914 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [P.], seq 644:971, ack 3536, win 188, options [nop,nop,TS val 118592513 ecr 90188154], length 327
11:52:43.495344 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], ack 971, win 243, options [nop,nop,TS val 90188172 ecr 118592513], length 0
11:52:44.113928 IP 172.28.240.7.46858 > 172.28.240.3.ftp: Flags [S], seq 1611561855, win 29200, options [mss 1460,sackOK,TS val 1098132372 ecr 0,nop,wscale 7], length 0
11:52:44.113965 IP 172.28.240.3.ftp > 172.28.240.7.46858: Flags [S.], seq 846422481, ack 1611561856, win 28960, options [mss 1460,sackOK,TS val 90188326 ecr 1098132372,nop,wscale 7], length 0
11:52:44.114204 IP 172.28.240.7.46858 > 172.28.240.3.ftp: Flags [.], ack 1, win 229, options [nop,nop,TS val 1098132372 ecr 90188326], length 0
11:52:44.115089 IP 172.28.240.3.52733 > web-server.e-nk.ru.domain: 10102+ PTR? 7.240.28.172.in-addr.arpa. (43)
11:52:44.115439 IP web-server.e-nk.ru.domain > 172.28.240.3.52733: 10102 NXDomain* 0/1/0 (97)
11:52:44.239636 IP 172.28.240.3.39990 > web-server.e-nk.ru.domain: 59470+ PTR? 7.240.28.172.in-addr.arpa. (43)
11:52:44.240112 IP web-server.e-nk.ru.domain > 172.28.240.3.39990: 59470 NXDomain* 0/1/0 (97)
11:52:44.245276 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 1291:1450, ack 1184, win 237, options [nop,nop,TS val 90188359 ecr 90188663], length 159
11:52:44.245465 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], seq 1184:2632, ack 1450, win 269, options [nop,nop,TS val 90189558 ecr 90188359], length 1448
11:52:44.245495 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 2632:3257, ack 1450, win 269, options [nop,nop,TS val 90189558 ecr 90188359], length 625
11:52:44.245510 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 2632, win 260, options [nop,nop,TS val 90188359 ecr 90189558], length 0
11:52:44.245534 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 3257, win 282, options [nop,nop,TS val 90188359 ecr 90189558], length 0
11:52:44.249584 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], seq 1450:2898, ack 3257, win 282, options [nop,nop,TS val 90188360 ecr 90189558], length 1448
11:52:44.249622 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 2898:3367, ack 3257, win 282, options [nop,nop,TS val 90188360 ecr 90189558], length 469
11:52:44.249690 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], ack 3367, win 314, options [nop,nop,TS val 90189559 ecr 90188360], length 0
11:52:44.250190 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], seq 3257:6153, ack 3367, win 314, options [nop,nop,TS val 90189559 ecr 90188360], length 2896
11:52:44.250200 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 6153:6997, ack 3367, win 314, options [nop,nop,TS val 90189559 ecr 90188360], length 844
11:52:44.250230 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 6997, win 373, options [nop,nop,TS val 90188360 ecr 90189559], length 0
11:52:44.253516 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 3367:3539, ack 6997, win 373, options [nop,nop,TS val 90188361 ecr 90189559], length 172
11:52:44.253626 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 6997:7109, ack 3539, win 336, options [nop,nop,TS val 90189560 ecr 90188361], length 112
11:52:44.254383 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 3539:3675, ack 7109, win 373, options [nop,nop,TS val 90188361 ecr 90189560], length 136
11:52:44.266039 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [S], seq 4061504570, win 29200, options [mss 1460,sackOK,TS val 90188364 ecr 0,nop,wscale 7], length 0
11:52:44.266161 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [S.], seq 2860409571, ack 4061504571, win 28960, options [mss 1460,sackOK,TS val 90189563 ecr 90188364,nop,wscale 7], length 0
11:52:44.266187 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 90188364 ecr 90189563], length 0
11:52:44.266500 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 90189563 ecr 90188364], length 95
11:52:44.266514 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 90188364 ecr 90189563], length 0
11:52:44.267551 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 90188365 ecr 90189563], length 89
11:52:44.267602 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [.], ack 90, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 0
11:52:44.267615 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.267653 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 21
11:52:44.267740 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.267888 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [S], seq 2324126297, win 29200, options [mss 1460,sackOK,TS val 90188365 ecr 0,nop,wscale 7], length 0
11:52:44.267955 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [S.], seq 2914117545, ack 2324126298, win 28960, options [mss 1460,sackOK,TS val 90189564 ecr 90188365,nop,wscale 7], length 0
11:52:44.267973 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 0
11:52:44.268197 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 95
11:52:44.268210 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 0
11:52:44.268274 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 89
11:52:44.268351 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], ack 90, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 0
11:52:44.268360 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.268407 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 21
11:52:44.268499 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.268589 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 7
11:52:44.268704 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 9
11:52:44.268735 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 118:139, ack 127, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 21
11:52:44.268844 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 127:138, ack 139, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.269105 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 139:188, ack 138, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 49
11:52:44.269192 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 138:149, ack 188, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.269246 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 188:209, ack 149, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 21
11:52:44.269307 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 149:160, ack 209, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.269366 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 209:258, ack 160, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 49
11:52:44.269425 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 160:171, ack 258, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 11
11:52:44.269496 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 7
11:52:44.269560 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 9
11:52:44.269596 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 118:190, ack 127, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 72
11:52:44.269684 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 127:230, ack 190, win 227, options [nop,nop,TS val 90189564 ecr 90188365], length 103
11:52:44.271190 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 190:378, ack 230, win 229, options [nop,nop,TS val 90188365 ecr 90189564], length 188
11:52:44.271380 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 230:348, ack 378, win 235, options [nop,nop,TS val 90189565 ecr 90188365], length 118
11:52:44.276494 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 258:1316, ack 171, win 229, options [nop,nop,TS val 90188367 ecr 90189564], length 1058
11:52:44.276847 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 171:678, ack 1316, win 243, options [nop,nop,TS val 90189566 ecr 90188367], length 507
11:52:44.279506 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1316:1373, ack 678, win 237, options [nop,nop,TS val 90188368 ecr 90189566], length 57
11:52:44.279580 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 678:786, ack 1373, win 243, options [nop,nop,TS val 90189567 ecr 90188368], length 108
11:52:44.284552 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1373:1579, ack 786, win 237, options [nop,nop,TS val 90188369 ecr 90189567], length 206
11:52:44.284766 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 786:1776, ack 1579, win 260, options [nop,nop,TS val 90189568 ecr 90188369], length 990
11:52:44.284909 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1579:1654, ack 1776, win 252, options [nop,nop,TS val 90188369 ecr 90189568], length 75
11:52:44.284964 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 1776:1881, ack 1654, win 260, options [nop,nop,TS val 90189568 ecr 90188369], length 105
11:52:44.285042 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1654:1789, ack 1881, win 252, options [nop,nop,TS val 90188369 ecr 90189568], length 135
11:52:44.285189 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 1881:1933, ack 1789, win 276, options [nop,nop,TS val 90189568 ecr 90188369], length 52
11:52:44.285301 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 1789:2117, ack 1933, win 252, options [nop,nop,TS val 90188369 ecr 90189568], length 328
11:52:44.285407 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 1933:1952, ack 2117, win 293, options [nop,nop,TS val 90189568 ecr 90188369], length 19
11:52:44.285557 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 2117:3107, ack 1952, win 252, options [nop,nop,TS val 90188369 ecr 90189568], length 990
11:52:44.285679 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 1952:2004, ack 3107, win 309, options [nop,nop,TS val 90189568 ecr 90188369], length 52
11:52:44.287297 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], seq 7109:8557, ack 3675, win 359, options [nop,nop,TS val 90189569 ecr 90188361], length 1448
11:52:44.287314 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 8557:9983, ack 3675, win 359, options [nop,nop,TS val 90189569 ecr 90188361], length 1426
11:52:44.287331 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 9983, win 418, options [nop,nop,TS val 90188370 ecr 90189569], length 0
11:52:44.289529 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 3675:4241, ack 9983, win 418, options [nop,nop,TS val 90188370 ecr 90189569], length 566
11:52:44.295269 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 3107:3251, ack 2004, win 252, options [nop,nop,TS val 90188371 ecr 90189568], length 144
11:52:44.295405 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 2004:2113, ack 3251, win 326, options [nop,nop,TS val 90189571 ecr 90188371], length 109
11:52:44.301877 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 3251:4218, ack 2113, win 252, options [nop,nop,TS val 90188373 ecr 90189571], length 967
11:52:44.302075 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 2113:5009, ack 4218, win 342, options [nop,nop,TS val 90189572 ecr 90188373], length 2896
11:52:44.302083 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 5009:5650, ack 4218, win 342, options [nop,nop,TS val 90189572 ecr 90188373], length 641
11:52:44.302112 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 5650, win 343, options [nop,nop,TS val 90188373 ecr 90189572], length 0
11:52:44.304282 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 4218:4378, ack 5650, win 343, options [nop,nop,TS val 90188374 ecr 90189572], length 160
11:52:44.304405 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 5650:7098, ack 4378, win 359, options [nop,nop,TS val 90189573 ecr 90188374], length 1448
11:52:44.304417 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 7098:7723, ack 4378, win 359, options [nop,nop,TS val 90189573 ecr 90188374], length 625
11:52:44.304454 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 7723, win 411, options [nop,nop,TS val 90188374 ecr 90189573], length 0
11:52:44.309316 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 4378:4530, ack 7723, win 411, options [nop,nop,TS val 90188375 ecr 90189573], length 152
11:52:44.309515 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 7723:9171, ack 4530, win 376, options [nop,nop,TS val 90189574 ecr 90188375], length 1448
11:52:44.309524 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 9171:9987, ack 4530, win 376, options [nop,nop,TS val 90189574 ecr 90188375], length 816
11:52:44.309559 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 9987, win 479, options [nop,nop,TS val 90188375 ecr 90189574], length 0
11:52:44.309822 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 4530:5765, ack 9987, win 479, options [nop,nop,TS val 90188375 ecr 90189574], length 1235
11:52:44.313579 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 9987:10043, ack 5765, win 398, options [nop,nop,TS val 90189575 ecr 90188375], length 56
11:52:44.313735 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], seq 5765:7213, ack 10043, win 479, options [nop,nop,TS val 90188376 ecr 90189575], length 1448
11:52:44.313745 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 7213:8101, ack 10043, win 479, options [nop,nop,TS val 90188376 ecr 90189575], length 888
11:52:44.313808 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], ack 8101, win 443, options [nop,nop,TS val 90189575 ecr 90188376], length 0
11:52:44.315294 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], ack 348, win 229, options [nop,nop,TS val 90188376 ecr 90189565], length 0
11:52:44.317434 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 10043:11491, ack 8101, win 443, options [nop,nop,TS val 90189576 ecr 90188376], length 1448
11:52:44.317442 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 11491:11728, ack 8101, win 443, options [nop,nop,TS val 90189576 ecr 90188376], length 237
11:52:44.317469 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 11728, win 547, options [nop,nop,TS val 90188377 ecr 90189576], length 0
11:52:44.319510 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 8101:8250, ack 11728, win 547, options [nop,nop,TS val 90188378 ecr 90189576], length 149
11:52:44.319579 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 11728:11872, ack 8250, win 466, options [nop,nop,TS val 90189577 ecr 90188378], length 144
11:52:44.327146 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], ack 4241, win 382, options [nop,nop,TS val 90189579 ecr 90188370], length 0
11:52:44.327935 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], seq 8250:9698, ack 11872, win 592, options [nop,nop,TS val 90188380 ecr 90189577], length 1448
11:52:44.327949 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 9698:10677, ack 11872, win 592, options [nop,nop,TS val 90188380 ecr 90189577], length 979
11:52:44.328022 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], ack 10677, win 511, options [nop,nop,TS val 90189579 ecr 90188380], length 0
11:52:44.404407 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 11872:13320, ack 10677, win 511, options [nop,nop,TS val 90189598 ecr 90188380], length 1448
11:52:44.404427 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 13320:13522, ack 10677, win 511, options [nop,nop,TS val 90189598 ecr 90188380], length 202
11:52:44.404484 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 13522, win 660, options [nop,nop,TS val 90188399 ecr 90189598], length 0
11:52:44.405525 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 10677:11091, ack 13522, win 660, options [nop,nop,TS val 90188399 ecr 90189598], length 414
11:52:44.405626 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 13522:16418, ack 11091, win 534, options [nop,nop,TS val 90189598 ecr 90188399], length 2896
11:52:44.405633 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 16418:17866, ack 11091, win 534, options [nop,nop,TS val 90189598 ecr 90188399], length 1448
11:52:44.405635 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 17866:18368, ack 11091, win 534, options [nop,nop,TS val 90189598 ecr 90188399], length 502
11:52:44.405673 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 17866, win 728, options [nop,nop,TS val 90188399 ecr 90189598], length 0
11:52:44.407473 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 11091:11503, ack 18368, win 773, options [nop,nop,TS val 90188400 ecr 90189598], length 412
11:52:44.407566 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 18368:21264, ack 11503, win 557, options [nop,nop,TS val 90189599 ecr 90188400], length 2896
11:52:44.407575 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [.], seq 21264:22712, ack 11503, win 557, options [nop,nop,TS val 90189599 ecr 90188400], length 1448
11:52:44.407577 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 22712:22837, ack 11503, win 557, options [nop,nop,TS val 90189599 ecr 90188400], length 125
11:52:44.407610 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 22712, win 841, options [nop,nop,TS val 90188400 ecr 90189599], length 0
11:52:44.411953 IP 172.28.240.3.36056 > web-server.e-nk.ru.domain: 19009+ AAAA? no24.ru. (25)
11:52:44.412376 IP web-server.e-nk.ru.domain > 172.28.240.3.36056: 19009 0/1/0 (80)
11:52:44.412442 IP 172.28.240.3.39143 > web-server.e-nk.ru.domain: 20462+ AAAA? no24.ru.e-nk.ru. (33)
11:52:44.412751 IP web-server.e-nk.ru.domain > 172.28.240.3.39143: 20462 NXDomain* 0/1/0 (79)
11:52:44.412793 IP 172.28.240.3.40171 > web-server.e-nk.ru.domain: 42625+ A? no24.ru. (25)
11:52:44.413105 IP web-server.e-nk.ru.domain > 172.28.240.3.40171: 42625 1/2/22 A 194.58.112.165 (457)
11:52:44.413184 IP 172.28.240.3.59762 > parking.reg.ru.http: Flags [S], seq 3541938159, win 29200, options [mss 1460,sackOK,TS val 90188401 ecr 0,nop,wscale 7], length 0
11:52:44.413313 IP 172.28.240.3.37558 > web-server.e-nk.ru.domain: 32175+ PTR? 165.112.58.194.in-addr.arpa. (45)
11:52:44.413616 IP web-server.e-nk.ru.domain > 172.28.240.3.37558: 32175 1/2/22 PTR parking.reg.ru. (485)
11:52:44.433111 IP parking.reg.ru.http > 172.28.240.3.59762: Flags [S.], seq 1127801111, ack 3541938160, win 65160, options [mss 1460,sackOK,TS val 1145982557 ecr 90188401,nop,wscale 7], length 0
11:52:44.433147 IP 172.28.240.3.59762 > parking.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 90188406 ecr 1145982557], length 0
11:52:44.433291 IP 172.28.240.3.59762 > parking.reg.ru.http: Flags [P.], seq 1:281, ack 1, win 229, options [nop,nop,TS val 90188406 ecr 1145982557], length 280: HTTP: GET /get.php?ip=172.28.240.254&d=e-nkama.ru%2Fnews%2F252%2F112386&u=Mozilla%2F5.0+%28compatible%3B+Linux+x86_64%3B+Mail.RU_Bot%2F2.0%3B+%2Bhttps%3A%2F%2Fhelp.mail.ru%2Fwebmaster%2Findexing%2Frobots%29&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
11:52:44.435558 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], seq 9983:12879, ack 4241, win 382, options [nop,nop,TS val 90189606 ecr 90188370], length 2896
11:52:44.435603 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 12879:13664, ack 4241, win 382, options [nop,nop,TS val 90189606 ecr 90188370], length 785
11:52:44.435626 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 13664, win 508, options [nop,nop,TS val 90188407 ecr 90189606], length 0
11:52:44.436238 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 4241:5294, ack 13664, win 508, options [nop,nop,TS val 90188407 ecr 90189606], length 1053
11:52:44.436307 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], ack 5294, win 404, options [nop,nop,TS val 90189606 ecr 90188407], length 0
11:52:44.437051 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [.], seq 13664:16560, ack 5294, win 404, options [nop,nop,TS val 90189606 ecr 90188407], length 2896
11:52:44.437060 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 16560:17183, ack 5294, win 404, options [nop,nop,TS val 90189606 ecr 90188407], length 623
11:52:44.437078 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 17183, win 599, options [nop,nop,TS val 90188407 ecr 90189606], length 0
11:52:44.447325 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 22837, win 841, options [nop,nop,TS val 90188410 ecr 90189599], length 0
11:52:44.453082 IP parking.reg.ru.http > 172.28.240.3.59762: Flags [.], ack 281, win 507, options [nop,nop,TS val 1145982577 ecr 90188406], length 0
11:52:44.479115 IP parking.reg.ru.http > 172.28.240.3.59762: Flags [P.], seq 1:117, ack 281, win 507, options [nop,nop,TS val 1145982603 ecr 90188406], length 116: HTTP: HTTP/1.1 403 Forbidden
11:52:44.479151 IP 172.28.240.3.59762 > parking.reg.ru.http: Flags [.], ack 117, win 229, options [nop,nop,TS val 90188417 ecr 1145982603], length 0
11:52:44.479179 IP parking.reg.ru.http > 172.28.240.3.59762: Flags [F.], seq 117, ack 281, win 507, options [nop,nop,TS val 1145982603 ecr 90188406], length 0
11:52:44.479365 IP 172.28.240.3.59762 > parking.reg.ru.http: Flags [F.], seq 281, ack 118, win 229, options [nop,nop,TS val 90188418 ecr 1145982603], length 0
11:52:44.482446 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 11503:12244, ack 22837, win 841, options [nop,nop,TS val 90188418 ecr 90189599], length 741
11:52:44.482612 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [P.], seq 22837:22914, ack 12244, win 579, options [nop,nop,TS val 90189617 ecr 90188418], length 77
11:52:44.482669 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 22914, win 841, options [nop,nop,TS val 90188418 ecr 90189617], length 0
11:52:44.499253 IP parking.reg.ru.http > 172.28.240.3.59762: Flags [.], ack 282, win 507, options [nop,nop,TS val 1145982623 ecr 90188418], length 0
11:52:44.505934 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], seq 3536:15120, ack 971, win 243, options [nop,nop,TS val 90188424 ecr 118592513], length 11584
11:52:44.506122 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [P.], seq 12244:12249, ack 22914, win 841, options [nop,nop,TS val 90188424 ecr 90189617], length 5
11:52:44.506153 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [F.], seq 12249, ack 22914, win 841, options [nop,nop,TS val 90188424 ecr 90189617], length 0
11:52:44.506252 IP 172.28.240.31.mysql > 172.28.240.3.59419: Flags [F.], seq 22914, ack 12250, win 579, options [nop,nop,TS val 90189623 ecr 90188424], length 0
11:52:44.506265 IP 172.28.240.3.59419 > 172.28.240.31.mysql: Flags [.], ack 22915, win 841, options [nop,nop,TS val 90188424 ecr 90189623], length 0
11:52:44.506922 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 378:420, ack 348, win 229, options [nop,nop,TS val 90188424 ecr 90189565], length 42
11:52:44.507352 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 348:641, ack 420, win 235, options [nop,nop,TS val 90189624 ecr 90188424], length 293
11:52:44.507393 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], ack 641, win 237, options [nop,nop,TS val 90188425 ecr 90189624], length 0
11:52:44.507573 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 420:500, ack 641, win 237, options [nop,nop,TS val 90188425 ecr 90189624], length 80
11:52:44.507776 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 641:652, ack 500, win 235, options [nop,nop,TS val 90189624 ecr 90188425], length 11
11:52:44.508843 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], seq 500:1948, ack 652, win 237, options [nop,nop,TS val 90188425 ecr 90189624], length 1448
11:52:44.508857 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 1948:3080, ack 652, win 237, options [nop,nop,TS val 90188425 ecr 90189624], length 1132
11:52:44.508922 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [.], ack 3080, win 280, options [nop,nop,TS val 90189624 ecr 90188425], length 0
11:52:44.509144 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 652:663, ack 3080, win 280, options [nop,nop,TS val 90189624 ecr 90188425], length 11
11:52:44.509339 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 3080:3136, ack 663, win 237, options [nop,nop,TS val 90188425 ecr 90189624], length 56
11:52:44.509441 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [P.], seq 663:674, ack 3136, win 280, options [nop,nop,TS val 90189624 ecr 90188425], length 11
11:52:44.510408 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 15120, win 283, options [nop,nop,TS val 118592776 ecr 90188424], length 0
11:52:44.510426 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], seq 15120:18016, ack 971, win 243, options [nop,nop,TS val 90188425 ecr 118592776], length 2896
11:52:44.510436 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [P.], seq 18016:19093, ack 971, win 243, options [nop,nop,TS val 90188425 ecr 118592776], length 1077
11:52:44.514408 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [P.], seq 3136:3141, ack 674, win 237, options [nop,nop,TS val 90188426 ecr 90189624], length 5
11:52:44.514441 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [F.], seq 3141, ack 674, win 237, options [nop,nop,TS val 90188426 ecr 90189624], length 0
11:52:44.514581 IP 172.28.240.31.mysql > 172.28.240.3.59418: Flags [F.], seq 674, ack 3142, win 280, options [nop,nop,TS val 90189625 ecr 90188426], length 0
11:52:44.514609 IP 172.28.240.3.59418 > 172.28.240.31.mysql: Flags [.], ack 675, win 237, options [nop,nop,TS val 90188426 ecr 90189625], length 0
11:52:44.514753 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 19093, win 319, options [nop,nop,TS val 118592777 ecr 90188425], length 0
11:52:44.516402 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [P.], seq 19093:19258, ack 971, win 243, options [nop,nop,TS val 90188427 ecr 118592777], length 165
11:52:44.516497 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [P.], seq 19258:19289, ack 971, win 243, options [nop,nop,TS val 90188427 ecr 118592777], length 31
11:52:44.516549 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [F.], seq 19289, ack 971, win 243, options [nop,nop,TS val 90188427 ecr 118592777], length 0
11:52:44.522253 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [.], ack 19290, win 331, options [nop,nop,TS val 118592779 ecr 90188427], length 0
11:52:44.623488 IP 172.28.240.254.46748 > 172.28.240.3.https: Flags [F.], seq 971, ack 19290, win 331, options [nop,nop,TS val 118592804 ecr 90188427], length 0
11:52:44.623518 IP 172.28.240.3.https > 172.28.240.254.46748: Flags [.], ack 972, win 243, options [nop,nop,TS val 90188454 ecr 118592804], length 0
11:52:44.628978 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 1104:1416, ack 1, win 317, options [nop,nop,TS val 90188455 ecr 1634757281], length 312
11:52:44.630080 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 1416, win 2373, options [nop,nop,TS val 1634758791 ecr 90188455], length 0
11:52:45.190544 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 5294:5470, ack 17183, win 599, options [nop,nop,TS val 90188595 ecr 90189606], length 176
11:52:45.191028 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 17183:17235, ack 5470, win 427, options [nop,nop,TS val 90189794 ecr 90188595], length 52
11:52:45.192994 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 5470:5742, ack 17235, win 599, options [nop,nop,TS val 90188596 ecr 90189794], length 272
11:52:45.193081 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 17235:17297, ack 5742, win 450, options [nop,nop,TS val 90189795 ecr 90188596], length 62
11:52:45.193219 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 5742:6483, ack 17297, win 599, options [nop,nop,TS val 90188596 ecr 90189795], length 741
11:52:45.193285 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [P.], seq 17297:17374, ack 6483, win 472, options [nop,nop,TS val 90189795 ecr 90188596], length 77
11:52:45.197411 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [P.], seq 6483:6488, ack 17374, win 599, options [nop,nop,TS val 90188597 ecr 90189795], length 5
11:52:45.197448 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [F.], seq 6488, ack 17374, win 599, options [nop,nop,TS val 90188597 ecr 90189795], length 0
11:52:45.197499 IP 172.28.240.31.mysql > 172.28.240.3.59417: Flags [F.], seq 17374, ack 6489, win 472, options [nop,nop,TS val 90189796 ecr 90188597], length 0
11:52:45.197511 IP 172.28.240.3.59417 > 172.28.240.31.mysql: Flags [.], ack 17375, win 599, options [nop,nop,TS val 90188597 ecr 90189796], length 0
11:52:45.202354 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [.], seq 3538:9330, ack 1182, win 244, options [nop,nop,TS val 90188598 ecr 118591776], length 5792
11:52:45.202369 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [P.], seq 9330:10164, ack 1182, win 244, options [nop,nop,TS val 90188598 ecr 118591776], length 834
11:52:45.204700 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 4986, win 211, options [nop,nop,TS val 118592949 ecr 90188598], length 0
11:52:45.206325 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 10164, win 292, options [nop,nop,TS val 118592950 ecr 90188598], length 0
11:52:45.411854 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [F.], seq 1182, ack 10164, win 292, options [nop,nop,TS val 118593001 ecr 90188598], length 0
11:52:45.411950 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [P.], seq 10164:10195, ack 1183, win 244, options [nop,nop,TS val 90188651 ecr 118593001], length 31
11:52:45.412026 IP 172.28.240.3.https > 172.28.240.254.46747: Flags [F.], seq 10195, ack 1183, win 244, options [nop,nop,TS val 90188651 ecr 118593001], length 0
11:52:45.413713 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 10195, win 292, options [nop,nop,TS val 118593002 ecr 90188651], length 0
11:52:45.415324 IP 172.28.240.254.46747 > 172.28.240.3.https: Flags [.], ack 10196, win 292, options [nop,nop,TS val 118593002 ecr 90188651], length 0
11:52:45.851404 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
11:52:46.143419 IP 172.28.240.3.ssh > 192.168.100.58.46122: Flags [P.], seq 1416:1600, ack 1, win 317, options [nop,nop,TS val 90188834 ecr 1634758791], length 184
11:52:46.145507 IP 192.168.100.58.46122 > 172.28.240.3.ssh: Flags [.], ack 1600, win 2373, options [nop,nop,TS val 1634760305 ecr 90188834], length 0
11:52:46.261406 IP 172.30.237.120.61390 > 172.28.240.3.ssh: Flags [P.], seq 1:65, ack 208, win 8209, length 64