start_time,duration,protocol,src_addr,src_port,direction,dst_addr,dst_port,state,src_tos,dst_tos,total_packets,total_bytes,src_bytes,dst_bytes,bytes_per_packet,src_byte_ratio,start_hour,is_well_known_dst_port,raw_label,label_family,binary_label 2011-08-16 14:18:56.018069,3586.282959,tcp,151.48.39.242,27546.0,,147.32.84.229,443.0,PA_PA,0.0,0.0,296,26555,14431,12124,89.71283783783784,0.5434381472415741,14,1,flow=Background,Background,-1 2011-08-16 14:18:56.152313,3151.685547,udp,85.254.40.5,52539.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1349,908,441,134.9,0.6730911786508524,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:18:56.248897,3566.919189,udp,78.89.212.34,47326.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,92,17033,8821,8212,185.1413043478261,0.5178770621734281,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:18:56.646714,0.00041,udp,147.32.84.170,35349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:18:56.899525,0.016182,tcp,147.32.84.164,46006.0,,93.184.220.20,80.0,FA_R,0.0,0.0,2,120,60,60,60.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:56.899679,0.128015,tcp,147.32.84.164,40454.0,,74.126.24.86,80.0,FA_A,0.0,0.0,2,120,60,60,60.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:56.899694,0.128807,tcp,147.32.84.164,40451.0,,74.126.24.86,80.0,FA_A,0.0,0.0,2,120,60,60,60.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:56.899781,0.12901,tcp,147.32.84.164,40455.0,,74.126.24.86,80.0,FA_A,0.0,0.0,2,120,60,60,60.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:57.368503,3540.139893,tcp,147.32.84.164,39779.0,,64.12.73.134,443.0,PA_A,0.0,0.0,199,11940,6000,5940,60.0,0.5025125628140703,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:57.368521,3549.503174,tcp,147.32.84.164,53377.0,,205.188.8.253,443.0,PA_PA,0.0,0.0,288,33613,11455,22158,116.71180555555556,0.3407907654776426,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:18:58.113466,154.57872,tcp,147.32.85.8,50373.0,,74.125.232.197,80.0,FA_FRA,0.0,0.0,12,786,396,390,65.5,0.5038167938931297,14,1,flow=Background-google-analytics6,Background,-1 2011-08-16 14:18:58.148637,0.066914,tcp,147.32.86.50,52057.0,->,77.78.99.22,80.0,SRPA_FSPA,0.0,0.0,8,2209,1237,972,276.125,0.5599818922589407,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:18:58.288986,3597.998535,tcp,147.32.84.229,13363.0,,86.212.105.228,1458.0,PA_PA,0.0,0.0,347,32466,14617,17849,93.56195965417868,0.4502248506129489,14,0,flow=Background,Background,-1 2011-08-16 14:18:58.459203,3589.186035,tcp,147.32.84.229,443.0,,195.59.102.18,24640.0,PA_PA,0.0,0.0,1147,151079,65894,85185,131.71665213600699,0.43615591842678336,14,0,flow=Background,Background,-1 2011-08-16 14:18:58.904627,3571.703857,tcp,147.32.84.134,41847.0,,205.188.17.129,443.0,PA_PA,0.0,0.0,502,43897,17796,26101,87.44422310756973,0.4054035583297264,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:18:59.071194,205.010574,tcp,147.32.84.170,47586.0,,209.85.148.106,443.0,RA_FPA,0.0,0.0,17,1220,594,626,71.76470588235294,0.48688524590163934,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:18:59.497849,0.000309,udp,147.32.84.138,59579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:00.814556,0.000961,udp,174.118.255.214,63984.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:01.438016,1.000221,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,1010,156,854,252.5,0.15445544554455445,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:19:02.409275,0.883203,tcp,147.32.86.50,52072.0,->,78.24.9.10,80.0,FSPA_FSPA,0.0,0.0,34,29233,1395,27838,859.7941176470588,0.04772004241781548,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:19:02.439762,500.002869,tcp,147.32.84.165,1039.0,->,195.113.232.98,80.0,SRPA_FSPA,0.0,0.0,14,5498,531,4967,392.7142857142857,0.09658057475445617,14,1,flow=From-Botnet-V49-TCP-Established-HTTP-Ad-40,Botnet,1 2011-08-16 14:19:03.297341,3593.850586,udp,147.32.84.59,7525.0,<->,188.40.102.87,51012.0,CON,0.0,0.0,3070,2536093,1812281,723812,826.0889250814332,0.7145956398286656,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:03.576297,3361.025146,udp,86.52.200.252,30000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1453,1081,372,121.08333333333333,0.7439779766001376,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:04.449991,2768.750244,udp,147.32.84.59,33556.0,<->,75.38.110.246,50436.0,CON,0.0,0.0,6,397,217,180,66.16666666666667,0.5465994962216625,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:04.864594,3575.775635,udp,147.32.84.59,7525.0,<->,46.4.122.107,50012.0,CON,0.0,0.0,8367,7808397,1094772,6713625,933.2373610613123,0.14020444913341368,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:05.343587,0.0,udp,113.92.42.134,10153.0,->,147.32.86.113,44167.0,INT,0.0,,1,72,72,0,72.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:19:05.351873,3577.249023,tcp,74.125.232.216,443.0,,147.32.84.170,35416.0,PA_PA,0.0,0.0,592,175034,61142,113892,295.6655405405405,0.3493149902304695,14,0,flow=To-Background-Stribrek,Background,-1 2011-08-16 14:19:05.997797,0.000308,udp,147.32.84.170,37941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:19:05.999051,0.22637,tcp,147.32.84.170,54979.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:19:07.335760,3526.100586,tcp,151.31.61.68,55775.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,239,32144,21323,10821,134.49372384937237,0.6633586361373818,14,0,flow=Background,Background,-1 2011-08-16 14:19:08.317736,38.360641,tcp,147.32.85.7,51169.0,,46.243.48.231,80.0,FA_FA,0.0,0.0,6,396,198,198,66.0,0.5,14,1,flow=Background,Background,-1 2011-08-16 14:19:08.486896,2275.009277,udp,147.32.84.229,13363.0,<->,147.102.13.62,49384.0,CON,0.0,0.0,8,3681,239,3442,460.125,0.06492800869328987,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:08.487129,0.055363,udp,147.32.84.229,13363.0,<->,31.11.128.70,57942.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:08.938629,3355.946777,udp,109.80.174.124,18235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2589,1993,596,129.45,0.7697952877558903,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:09.850615,17.060959,tcp,147.32.84.164,47168.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:09.850809,0.000153,udp,147.32.84.164,35858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:09.851540,257.074829,tcp,147.32.84.164,39339.0,,209.85.148.103,80.0,FPA_FPA,0.0,0.0,20,5023,3321,1702,251.15,0.6611586701174597,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.102344,0.000346,udp,147.32.84.138,47268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:10.211026,0.142956,udp,147.32.84.164,42915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,413,77,336,206.5,0.1864406779661017,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.274772,0.017552,tcp,147.32.84.181,51132.0,->,194.79.52.194,80.0,SRPA_FSPA,0.0,0.0,10,3043,1097,1946,304.3,0.36049950706539596,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:19:10.421552,0.000246,udp,147.32.84.164,34018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,78,140,109.0,0.3577981651376147,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.522539,1402.999878,tcp,85.168.70.114,16429.0,,147.32.84.59,50397.0,FPA_FPA,0.0,0.0,197,12465,7833,4632,63.2741116751269,0.6283995186522262,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:10.660285,6.361593,tcp,147.32.84.164,60892.0,->,208.43.115.82,80.0,FSPA_FSPA,0.0,0.0,16,6433,1921,4512,402.0625,0.29861650862739003,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.661060,0.00029,udp,147.32.84.164,49592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,77,181,129.0,0.29844961240310075,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.661546,6.255738,tcp,147.32.84.164,46033.0,->,93.184.220.20,80.0,FSPA_FSPA,0.0,0.0,11,1613,916,697,146.63636363636363,0.5678859268443893,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.661555,0.000358,udp,147.32.84.164,52255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,413,77,336,206.5,0.1864406779661017,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.662333,36.256264,tcp,147.32.84.164,51070.0,->,95.172.80.65,80.0,FSPA_FSPA,0.0,0.0,80,73405,2408,70997,917.5625,0.032804304883863496,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.662398,36.255974,tcp,147.32.84.164,51073.0,->,95.172.80.65,80.0,FSPA_FSPA,0.0,0.0,61,43493,3917,39576,713.0,0.09006046950083922,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.662470,36.256119,tcp,147.32.84.164,51074.0,->,95.172.80.65,80.0,FSPA_FSPA,0.0,0.0,58,46216,2048,44168,796.8275862068965,0.04431365760775489,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.672247,0.153573,udp,147.32.84.164,43754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.683020,0.000452,udp,147.32.84.164,50284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,79,293,186.0,0.21236559139784947,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.815303,0.111183,udp,147.32.84.164,46185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,76,138,107.0,0.35514018691588783,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:10.930062,0.210443,udp,147.32.84.229,13363.0,<->,71.94.9.5,23905.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:11.051250,0.000365,udp,147.32.84.164,43282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,76,155,115.5,0.329004329004329,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.051945,0.000302,udp,147.32.84.164,44368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,76,254,165.0,0.23030303030303031,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.052883,35.998142,tcp,147.32.84.164,43235.0,->,72.233.61.123,80.0,FSPA_FSPA,0.0,0.0,11,1513,915,598,137.54545454545453,0.6047587574355585,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.486127,0.035678,udp,147.32.84.164,56198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,76,175,125.5,0.30278884462151395,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.507510,0.15291,udp,147.32.84.164,60248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,73,128,100.5,0.36318407960199006,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.507679,0.428472,udp,147.32.84.164,54828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,84,158,121.0,0.34710743801652894,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.522040,0.014885,udp,147.32.84.164,59490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,76,172,124.0,0.3064516129032258,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.552601,0.00048,udp,147.32.84.164,35396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.646838,0.000271,udp,147.32.84.164,34057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,77,139,108.0,0.35648148148148145,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.647639,0.000208,udp,147.32.84.164,57829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,77,139,108.0,0.35648148148148145,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.647965,0.000344,udp,147.32.84.164,50276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,77,413,245.0,0.15714285714285714,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:11.936605,0.175451,udp,147.32.84.164,52557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,84,150,117.0,0.358974358974359,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:14.422722,3529.053711,tcp,80.121.40.72,55900.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,829,76723,42161,34562,92.54885404101327,0.5495223075218644,14,0,flow=Background,Background,-1 2011-08-16 14:19:15.001374,3000.004883,tcp,147.32.84.242,54501.0,,147.251.3.130,1713.0,PA_PA,0.0,0.0,18,2952,1674,1278,164.0,0.5670731707317073,14,0,flow=Background,Background,-1 2011-08-16 14:19:15.176355,0.000221,udp,147.32.84.216,59330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:15.576713,812.098206,udp,201.16.226.17,44858.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,273,153,120,68.25,0.5604395604395604,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:17.843305,0.000256,udp,147.32.84.164,44233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.100657,61.510746,tcp,147.32.86.33,2533.0,->,65.55.184.152,80.0,SPA_SRPA,0.0,0.0,7,850,412,438,121.42857142857143,0.48470588235294115,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:19:18.266169,0.000248,udp,147.32.84.164,46217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.266629,0.000174,udp,147.32.84.164,59273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.273418,1.037258,tcp,147.32.84.164,59481.0,->,69.89.93.43,80.0,FSPA_FSPA,0.0,0.0,47,37283,1769,35514,793.2553191489362,0.04744789850602151,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.396861,0.000219,udp,147.32.84.164,35868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.660308,0.186259,udp,147.32.84.164,53679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,80,172,126.0,0.31746031746031744,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.847478,0.089407,udp,147.32.84.164,50106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,76,146,111.0,0.34234234234234234,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.873209,0.022799,udp,147.32.84.164,52759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:18.925252,0.517272,tcp,147.32.84.164,59492.0,->,69.89.93.43,80.0,FSPA_FSPA,0.0,0.0,11,2706,772,1934,246.0,0.2852919438285292,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:19.878759,0.011768,udp,147.32.84.164,46814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:19.893093,307.028839,tcp,147.32.84.164,48146.0,->,95.100.248.10,80.0,FSPA_FSPA,0.0,0.0,26,6667,1907,4760,256.4230769230769,0.28603569821508923,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:19.929502,0.000529,udp,147.32.84.164,42218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,79,213,146.0,0.2705479452054795,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:19.966335,0.02224,udp,147.32.84.164,54241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,77,209,143.0,0.2692307692307692,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:19.986467,3538.918701,udp,147.32.84.229,13363.0,<->,208.105.204.75,19678.0,CON,0.0,0.0,6,806,625,181,134.33333333333334,0.7754342431761787,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:20.322086,0.099282,tcp,147.32.84.59,3549.0,,69.171.242.13,443.0,FA_FA,0.0,0.0,4,240,120,120,60.0,0.5,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:20.572396,0.000326,udp,147.32.84.164,49497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:20.572828,0.000281,udp,147.32.84.164,38382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:20.602074,240.141174,tcp,147.32.84.164,56654.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:20.602081,0.000306,udp,147.32.84.164,50285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:21.093771,0.050067,udp,147.32.84.164,58272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:21.094339,0.000669,udp,147.32.84.164,38860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,74,439,256.5,0.1442495126705653,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:21.095609,305.833038,tcp,147.32.84.164,36192.0,->,2.21.101.115,80.0,FSPA_FSPA,0.0,0.0,22,2491,1434,1057,113.22727272727273,0.5756724207145725,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:21.144185,0.01736,udp,147.32.84.164,40932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,74,416,245.0,0.1510204081632653,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:21.406282,0.517106,tcp,147.32.84.164,59508.0,->,69.89.93.43,80.0,FSPA_FSPA,0.0,0.0,12,3411,1017,2394,284.25,0.29815303430079154,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:19:23.276830,15.300182,udp,147.32.84.94,7103.0,->,90.13.157.5,7432.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:19:23.422134,0.000776,udp,110.137.35.195,23687.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:23.528296,0.000328,udp,147.32.85.21,44009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:23.642588,3583.799316,tcp,147.32.84.134,52238.0,,69.63.181.105,5222.0,PA_PA,0.0,0.0,1233,173578,78700,94878,140.77696674776968,0.4533984721566097,14,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:19:23.757799,1.017459,tcp,147.32.85.88,57138.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,3223,2418,805,268.5833333333333,0.7502327024511325,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:19:24.510189,3492.260742,tcp,147.32.84.229,13363.0,,81.213.183.40,21460.0,PA_PA,0.0,0.0,202,21215,7643,13572,105.02475247524752,0.36026396417629036,14,0,flow=Background,Background,-1 2011-08-16 14:19:24.780547,15.336321,udp,147.32.84.94,7103.0,->,89.245.109.28,7471.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:19:24.923407,3575.304443,tcp,147.32.85.113,48566.0,,88.86.104.104,5938.0,PA_PA,0.0,0.0,206,14518,9430,5088,70.47572815533981,0.6495385039261606,14,0,flow=Background,Background,-1 2011-08-16 14:19:26.646926,0.000345,udp,147.32.84.170,55150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:19:26.647935,0.018135,tcp,147.32.84.170,43038.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:19:26.899513,1890.677002,udp,77.77.18.16,39471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,980,732,248,122.5,0.746938775510204,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:27.782576,1659.922974,udp,147.32.84.229,13363.0,<->,78.141.181.222,34035.0,CON,0.0,0.0,124,8926,5084,3842,71.98387096774194,0.569572036746583,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:28.901549,0.337273,udp,147.32.84.229,13363.0,<->,120.50.38.148,41598.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:29.527648,3540.32959,tcp,79.186.2.54,20047.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,212,27227,21257,5970,128.42924528301887,0.7807323612590443,14,0,flow=Background,Background,-1 2011-08-16 14:19:30.317293,0.000358,udp,147.32.85.23,34479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:30.431913,3589.455811,udp,147.32.84.59,7525.0,<->,46.4.98.198,56012.0,CON,0.0,0.0,3228,2694648,1604210,1090438,834.7732342007434,0.5953319320371343,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:33.451699,0.356741,udp,147.32.84.229,13363.0,<->,118.169.1.156,53748.0,CON,0.0,0.0,4,3004,60,2944,751.0,0.019973368841544607,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:35.639191,0.0,tcp,192.168.88.67,49986.0,?>,74.125.232.227,80.0,RA_,0.0,,1,60,60,0,60.0,1.0,14,1,flow=Background,Background,-1 2011-08-16 14:19:36.241838,2.847131,tcp,66.249.66.10,47269.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8752,978,7774,486.22222222222223,0.11174588665447897,14,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 14:19:36.608772,0.000137,udp,147.32.85.25,56253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:36.648284,0.000281,udp,147.32.84.170,55826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:19:37.558649,0.000396,udp,147.32.85.8,51254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,77,279,178.0,0.21629213483146068,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:39.676362,3142.797852,udp,46.159.220.187,10041.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:41.705771,0.009772,udp,147.32.86.17,34091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,87,239,163.0,0.2668711656441718,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:42.736254,0.000639,udp,147.32.85.8,53121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,367,83,284,183.5,0.22615803814713897,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:46.678239,3035.346924,udp,147.32.84.118,54487.0,<->,99.228.59.169,53873.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:46.903512,0.000273,udp,147.32.85.25,59304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:47.539044,0.000566,udp,95.190.83.150,44914.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:47.930171,0.307334,udp,147.32.84.229,13363.0,<->,119.242.151.163,47930.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:48.677447,1948.178711,udp,195.225.145.17,47848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:49.774102,0.056611,udp,147.32.84.59,17021.0,<->,212.79.120.109,25289.0,CON,0.0,0.0,2,137,76,61,68.5,0.5547445255474452,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:19:50.998146,2433.389893,udp,147.32.84.229,13363.0,->,88.31.77.165,22374.0,INT,0.0,,6,456,456,0,76.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:19:51.161961,16.298515,udp,109.175.35.168,56745.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1032,912,120,258.0,0.8837209302325582,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:51.191500,3568.555176,udp,147.32.84.145,56349.0,<->,82.208.56.90,123.0,CON,0.0,0.0,74,6660,3330,3330,90.0,0.5,14,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 14:19:51.500963,0.000995,udp,92.243.182.162,48472.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:19:52.564326,0.000269,udp,147.32.84.138,48964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:19:53.906337,0.000412,icmp,147.32.86.96,,<-,147.32.87.51,43269.0,RED,,0.0,2,196,0,196,98.0,0.0,14,0,flow=Background,Background,-1 2011-08-16 14:19:58.016539,8.99784,tcp,147.32.84.179,50549.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:20:00.257453,0.000218,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,64,139,101.5,0.31527093596059114,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:20:02.484661,3595.119873,udp,147.32.84.229,13363.0,<->,64.130.179.99,30742.0,CON,0.0,0.0,119,20523,10165,10358,172.46218487394958,0.4952979583881499,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:02.506566,0.000513,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,87,503,295.0,0.14745762711864407,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:20:02.508142,0.037986,tcp,147.32.84.165,1027.0,->,74.125.232.193,80.0,SRPA_SPA,0.0,0.0,7,882,629,253,126.0,0.7131519274376418,14,1,flow=From-Botnet-V49-TCP-HTTP-Google-Net-Established-6,Botnet,1 2011-08-16 14:20:03.127664,115.044586,tcp,147.32.86.182,53143.0,->,74.125.232.198,443.0,FSPA_FSPA,0.0,0.0,18,3608,2301,1307,200.44444444444446,0.6377494456762749,14,1,flow=Background-google-analytics7,Background,-1 2011-08-16 14:20:03.760994,3555.083496,udp,147.32.84.94,7103.0,<->,188.40.97.43,50012.0,CON,0.0,0.0,1486,1296452,23275,1273177,872.4441453566621,0.017952843607013602,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:04.219145,56.553165,tcp,147.32.84.59,3556.0,->,69.171.242.13,443.0,FSPA_FSPA,0.0,0.0,14,2678,1737,941,191.28571428571428,0.6486183719193428,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:20:05.292143,0.032756,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,76,403,239.5,0.15866388308977036,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:20:05.358466,2.987797,udp,147.32.84.165,123.0,->,65.55.56.40,123.0,INT,0.0,,2,180,180,0,90.0,1.0,14,1,flow=From-Botnet-V49-UDP-Attempt,Botnet,1 2011-08-16 14:20:05.543393,3473.733154,udp,147.32.84.94,7103.0,<->,46.4.83.41,51012.0,CON,0.0,0.0,1156,993220,19590,973630,859.1868512110726,0.019723726868166168,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:06.507387,0.000619,udp,60.49.125.190,24205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:06.641875,0.019904,udp,147.32.84.170,60393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:06.662426,323.706818,tcp,147.32.84.170,32776.0,->,209.85.149.117,80.0,FSPA_FSPA,0.0,0.0,28897,28292695,651300,27641395,979.0876215524103,0.0230200763836743,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:07.997032,0.000221,udp,147.32.84.170,60671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:07.998196,0.213051,tcp,147.32.84.170,56290.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:10.326064,0.006769,tcp,147.32.86.165,62847.0,,80.239.149.24,80.0,FA_R,0.0,0.0,2,120,60,60,60.0,0.5,14,1,flow=Background,Background,-1 2011-08-16 14:20:12.089822,3.205081,udp,147.32.84.59,61615.0,->,212.5.193.135,58332.0,INT,0.0,,2,140,140,0,70.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:20:12.768316,2.017144,udp,200.111.162.43,34036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,882,731,151,220.5,0.828798185941043,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:13.096353,0.000684,udp,81.213.175.109,55370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:15.869591,60.25452,tcp,147.32.87.220,2737.0,->,164.130.1.9,443.0,FSPA_FSPA,0.0,0.0,24,10480,1621,8859,436.6666666666667,0.15467557251908398,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:20:18.347331,3515.70752,tcp,147.32.84.59,62836.0,,80.243.106.79,15622.0,PA_PA,0.0,0.0,120,7200,3600,3600,60.0,0.5,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:20:18.412293,1306.008545,udp,178.89.39.116,18360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,798,149,649,199.5,0.18671679197994986,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:18.764490,3179.415527,udp,94.236.134.169,9722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:20.011449,0.000321,udp,147.32.84.59,37682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:20.347880,1627.584717,udp,24.165.219.173,21003.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3146,132,3014,524.3333333333334,0.04195804195804196,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:24.638229,0.000257,udp,147.32.84.138,48753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:25.311602,10.381655,tcp,147.32.86.50,52197.0,->,78.24.9.10,80.0,SRPA_FSPA,0.0,0.0,63,61121,1939,59182,970.1746031746031,0.03172395739598501,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:20:26.647634,0.00047,udp,147.32.84.170,50997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:28.135509,3264.605957,udp,147.32.84.229,13363.0,->,78.8.137.163,34272.0,INT,0.0,,24,3531,3531,0,147.125,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:20:30.735740,0.323593,udp,147.32.84.229,13363.0,<->,140.128.102.107,6236.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:30.844913,2817.287109,udp,147.32.84.229,13363.0,<->,78.141.179.9,34041.0,CON,0.0,0.0,10,3443,3141,302,344.3,0.9122857972698228,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:31.583034,0.00979,udp,147.32.86.165,61744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:32.197477,0.00165,udp,79.163.2.227,55411.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:36.379697,0.000169,udp,147.32.84.138,46611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:36.563975,3583.099609,tcp,147.32.85.69,46459.0,,147.32.192.34,993.0,PA_PA,0.0,0.0,252,24658,13587,11071,97.84920634920636,0.5510179252169681,14,1,flow=Background,Background,-1 2011-08-16 14:20:36.575824,0.000582,udp,91.37.248.175,62618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:37.410622,3584.514893,tcp,151.33.23.65,1083.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,270,23316,12838,10478,86.35555555555555,0.5506090238462858,14,0,flow=Background,Background,-1 2011-08-16 14:20:38.832623,10.037263,tcp,147.32.84.134,48206.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.834269,0.000152,udp,147.32.84.134,42102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,74,143,108.5,0.34101382488479265,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.834273,250.046417,tcp,147.32.84.134,53267.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.837900,0.00035,udp,147.32.84.134,40667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,76,235,155.5,0.24437299035369775,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852329,20.020313,tcp,147.32.84.134,50467.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852375,20.012625,tcp,147.32.84.134,50469.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852379,20.012615,tcp,147.32.84.134,50470.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852625,20.01174,tcp,147.32.84.134,59779.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852636,20.011896,tcp,147.32.84.134,59780.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852649,20.020182,tcp,147.32.84.134,43934.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.852734,20.012039,tcp,147.32.84.134,43937.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.853405,0.02008,udp,147.32.84.134,33904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,562,75,487,281.0,0.13345195729537365,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.881706,19.982807,tcp,147.32.84.134,50650.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.881775,19.982786,tcp,147.32.84.134,50651.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:38.881932,19.9828,tcp,147.32.84.134,50658.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:39.848220,249.033325,tcp,147.32.84.134,34343.0,->,74.125.232.193,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:39.929080,440.085907,tcp,147.32.84.134,48372.0,->,74.125.232.203,80.0,FSPA_FSRPA,0.0,0.0,1718,1489617,127352,1362265,867.0646100116414,0.08549311668704103,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:39.929305,430.092133,tcp,147.32.84.134,50508.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,1624,1379952,126021,1253931,849.7241379310345,0.09132274166057949,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.022281,429.991516,tcp,147.32.84.134,48374.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,1594,1424057,117727,1306330,893.3858218318695,0.08267014592814755,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.026304,0.000194,udp,147.32.84.134,46838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.028125,0.000179,udp,147.32.84.134,57751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.028577,0.000399,udp,147.32.84.134,35877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.032453,0.000341,udp,147.32.84.134,52607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.032950,0.00024,udp,147.32.84.134,46895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.034477,0.000488,udp,147.32.84.134,51354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.765038,249.236816,tcp,147.32.84.134,59821.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,22,3459,2582,877,157.22727272727272,0.7464585140213935,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.766014,299.246185,tcp,147.32.84.134,59822.0,->,74.125.232.205,80.0,FSPA_FSPA,0.0,0.0,35,8954,6881,2073,255.82857142857142,0.7684833593924503,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:40.766747,439.254944,tcp,147.32.84.134,59823.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,252,119839,97540,22299,475.5515873015873,0.8139253498443746,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:41.657758,0.000285,udp,147.32.84.138,57987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:43.431773,0.207221,tcp,147.32.86.20,3226.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,31120,969,30151,818.9473684210526,0.031137532133676094,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:20:43.847214,0.039497,udp,147.32.84.59,40850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:44.839713,245.170059,tcp,147.32.84.134,43975.0,->,74.125.232.223,80.0,FSPA_FSRPA,0.0,0.0,31,8954,1885,7069,288.83870967741933,0.21052043779316507,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.239968,3301.992432,udp,147.32.84.94,7103.0,<->,178.63.104.6,54012.0,CON,0.0,0.0,889,730131,17109,713022,821.2947131608549,0.02343278124062668,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:45.413743,3520.463867,udp,147.32.84.94,7103.0,<->,85.10.207.87,50012.0,CON,0.0,0.0,884,761072,14662,746410,860.9411764705883,0.019264931570206235,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:45.804160,0.000405,udp,147.32.84.134,42676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.804240,0.000435,udp,147.32.84.134,57680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,83,157,120.0,0.3458333333333333,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.804261,243.098007,tcp,147.32.84.134,34362.0,->,74.125.232.193,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.804409,243.100739,tcp,147.32.84.134,38441.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.804557,0.000433,udp,147.32.84.134,45173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.804561,243.100754,tcp,147.32.84.134,55279.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,31,4560,1538,3022,147.09677419354838,0.33728070175438596,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.805109,0.000399,udp,147.32.84.134,44130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,84,272,178.0,0.23595505617977527,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.805683,243.074356,tcp,147.32.84.134,38607.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4755,1549,3206,153.38709677419354,0.32576235541535226,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.805955,243.073547,tcp,147.32.84.134,38609.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.806004,243.073853,tcp,147.32.84.134,38612.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.806314,243.072556,tcp,147.32.84.134,38615.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4755,1549,3206,153.38709677419354,0.32576235541535226,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.806670,3.057269,tcp,147.32.84.134,56124.0,->,74.125.232.203,443.0,SRPA_SPA,0.0,0.0,15,3801,1017,2784,253.4,0.2675611681136543,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:45.806677,3.057012,tcp,147.32.84.134,56125.0,->,74.125.232.203,443.0,SRPA_SPA,0.0,0.0,15,3801,1017,2784,253.4,0.2675611681136543,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:46.066395,0.000784,udp,223.218.56.150,48470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,73,486,279.5,0.13059033989266547,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:46.646766,0.000388,udp,147.32.84.170,37728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:46.648837,0.018875,tcp,147.32.84.170,37971.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:47.163946,0.000381,udp,147.32.84.138,33841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:47.845070,0.000334,udp,147.32.86.187,50403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,88,200,144.0,0.3055555555555556,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:47.887503,0.000168,udp,147.32.86.187,63324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:48.283475,15.372673,udp,147.32.84.94,7103.0,->,91.62.104.57,7340.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:20:48.388928,421.624664,tcp,147.32.84.134,48295.0,->,74.125.232.206,80.0,FSPA_FSPA,0.0,0.0,200,85997,57803,28194,429.985,0.6721513541170041,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:20:49.071561,2715.324707,udp,147.32.84.94,7103.0,->,24.74.179.213,7248.0,INT,0.0,,8,672,672,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:20:49.282416,0.001999,udp,147.32.85.7,48566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:49.329353,2164.914551,udp,147.32.84.94,7103.0,->,93.40.163.43,43574.0,INT,0.0,,12,1008,1008,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:20:50.171766,9.01321,tcp,76.164.193.171,80.0,->,147.32.84.94,12665.0,SA_,0.0,,2,124,124,0,62.0,1.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:20:51.034166,0.0,udp,183.8.18.73,22123.0,->,147.32.86.113,59273.0,INT,0.0,,1,72,72,0,72.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:20:52.697894,0.000361,udp,147.32.86.187,54296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,79,245,162.0,0.24382716049382716,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:52.748640,0.077139,udp,111.100.6.124,10773.0,<->,147.32.87.238,39371.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:56.090455,1212.755981,udp,77.251.167.80,51834.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,717,531,186,119.5,0.7405857740585774,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:20:56.646239,0.000427,udp,147.32.84.170,34741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:56.647093,0.0003,udp,147.32.84.170,48875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:20:57.138232,0.209013,tcp,147.32.86.168,38923.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,19,4719,1655,3064,248.3684210526316,0.3507098961644416,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:20:57.400889,0.005704,udp,147.32.84.59,52833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,71,170,120.5,0.2946058091286307,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:20:58.053453,364.662781,tcp,147.32.85.8,58345.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,34,9169,3467,5702,269.6764705882353,0.3781219325989748,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:21:00.435174,0.000212,udp,147.32.85.25,56414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:02.489622,1.804379,udp,87.252.227.84,57186.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:02.858558,3211.189453,udp,85.130.45.53,17596.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1538,1084,454,128.16666666666666,0.7048114434330299,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:03.506159,3053.845947,udp,87.120.190.186,25747.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1416,1044,372,118.0,0.7372881355932204,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:03.613374,0.000378,udp,147.32.84.138,34923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:04.027504,0.000349,udp,147.32.84.59,59158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,79,212,145.5,0.27147766323024053,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:04.221178,0.000343,udp,147.32.84.59,51379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,76,138,107.0,0.35514018691588783,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:05.550702,0.000306,udp,147.32.85.25,53858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:06.022405,2975.174561,tcp,147.32.84.134,44881.0,,147.32.192.34,993.0,PA_PA,0.0,0.0,92,9114,5011,4103,99.06521739130434,0.5498134737766074,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:21:06.793930,1029.78772,udp,92.43.13.82,21942.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,1447,787,660,65.77272727272727,0.5438838977194195,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:07.983734,0.000499,udp,147.32.84.170,51181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:21:09.196299,0.000276,udp,147.32.84.138,37872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:09.302326,3100.474854,udp,87.121.242.118,11581.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:09.728552,0.000268,udp,147.32.84.59,54908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,85,135,110.0,0.38636363636363635,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:10.270265,652.78241,udp,147.32.87.220,64719.0,<->,89.47.84.133,53553.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:12.858798,1.964909,tcp,209.85.149.102,80.0,,147.32.86.34,54823.0,FA_FA,0.0,0.0,4,264,132,132,66.0,0.5,14,0,flow=Background,Background,-1 2011-08-16 14:21:13.271752,0.422305,udp,147.32.84.229,13363.0,<->,218.163.18.93,51516.0,CON,0.0,0.0,2,944,76,868,472.0,0.08050847457627118,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:14.553769,8.978836,tcp,147.32.84.165,1038.0,->,169.254.197.200,2869.0,S_,0.0,,3,186,186,0,62.0,1.0,14,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:21:15.081659,0.000268,udp,147.32.84.59,57810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,100,294,197.0,0.25380710659898476,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:15.262021,0.000906,udp,110.55.169.117,10258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,684,73,611,342.0,0.1067251461988304,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:15.404257,3595.618408,udp,147.32.84.8,57389.0,<->,82.208.56.89,123.0,CON,0.0,0.0,40,3600,1800,1800,90.0,0.5,14,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 14:21:16.648759,0.018565,tcp,147.32.84.170,52727.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:21:16.752032,1.089261,tcp,147.32.87.220,2807.0,->,115.22.68.6,80.0,FSPA_FSPA,0.0,0.0,10,1542,819,723,154.2,0.5311284046692607,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:21:17.360730,61.404087,tcp,147.32.86.17,1366.0,->,195.113.232.81,80.0,SRPA_SPA,0.0,0.0,9,2932,824,2108,325.77777777777777,0.2810368349249659,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:21:18.713485,0.000695,udp,70.12.81.86,4079.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:19.669507,0.000674,udp,126.126.169.177,6896.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:20.096786,123.954262,tcp,147.32.85.123,59324.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,17,4009,3130,879,235.8235294117647,0.7807433275130955,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:21:20.235764,0.000294,udp,147.32.84.138,49262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:21.304900,0.000377,udp,147.32.84.138,49258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:21.730474,2790.597656,udp,147.32.84.111,48922.0,<->,94.41.66.89,47236.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:22.525895,0.004518,udp,111.249.31.95,41402.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2994,60,2934,748.5,0.02004008016032064,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:22.539190,1.38033,udp,147.32.84.59,58884.0,<->,109.65.37.244,32193.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:21:23.825610,0.000634,udp,190.194.223.111,34347.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:24.845099,9.001941,tcp,147.32.84.165,1039.0,->,192.168.88.148,2869.0,S_,0.0,,3,186,186,0,62.0,1.0,14,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:21:24.957523,0.000796,udp,114.41.112.85,18912.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,311,64,247,155.5,0.2057877813504823,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:25.371960,0.000687,udp,93.125.116.70,3201.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,77,476,276.5,0.13924050632911392,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:26.070854,0.00031,udp,147.32.84.138,57262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:29.138693,0.000234,udp,147.32.84.138,44102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:30.305470,3034.898438,udp,62.221.142.170,60357.0,<->,147.32.84.229,13363.0,CON,2.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:30.891433,0.053136,udp,147.32.84.59,17021.0,<->,91.157.58.142,10915.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:21:30.971169,3453.123047,udp,147.32.84.94,7103.0,->,50.46.224.102,7567.0,INT,0.0,,16,1344,1344,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:21:32.121398,681.793274,udp,75.45.126.69,12011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1188,1068,120,297.0,0.898989898989899,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:35.020950,0.000494,udp,147.32.84.59,49919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,73,276,174.5,0.20916905444126074,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:36.238110,3043.321045,udp,79.215.184.84,14041.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:38.849709,0.000557,udp,147.32.86.155,61848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:38.965996,0.0,tcp,66.220.153.23,80.0,?>,147.32.84.59,4108.0,RA_,0.0,,1,60,60,0,60.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:21:39.001095,0.272255,tcp,147.32.84.170,56304.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:21:40.828907,0.000753,udp,83.177.36.163,5807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:41.596303,0.0,icmp,147.32.84.59,771.0,->,86.131.147.195,20480.0,URP,0.0,,1,89,89,0,89.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:21:46.646369,0.000379,udp,147.32.84.170,38074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:21:46.647294,0.000401,udp,147.32.84.170,39992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:21:47.421661,2626.522217,udp,78.244.22.26,40968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3567,561,3006,594.5,0.15727502102607233,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:47.577276,3583.939453,udp,147.32.84.94,7103.0,<->,213.239.217.99,56012.0,CON,0.0,0.0,836,691692,15342,676350,827.3827751196172,0.02218039242900019,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:47.644947,0.000327,udp,147.32.84.134,56619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:21:47.645798,0.000294,udp,147.32.84.134,37091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:21:51.443695,3060.803955,udp,86.122.187.12,27877.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1520,1082,438,126.66666666666667,0.7118421052631579,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:51.864129,0.000236,udp,147.32.85.7,50329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:53.551657,0.000393,udp,147.32.86.155,50148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,71,261,166.0,0.21385542168674698,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:53.814471,0.0,icmp,147.32.86.155,771.0,->,147.32.80.9,13521.0,URP,0.0,,1,70,70,0,70.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:21:54.257419,0.000176,udp,147.32.84.138,40477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:54.392477,0.180229,udp,147.32.87.220,64719.0,<->,129.24.51.24,13855.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:54.398924,0.07808,udp,147.32.87.220,64719.0,<->,188.124.97.207,41616.0,CON,0.0,0.0,2,133,72,61,66.5,0.5413533834586466,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:21:55.039568,0.017565,udp,147.32.84.59,56886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,511,86,425,255.5,0.16829745596868884,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:55.073540,0.04157,udp,147.32.84.59,62945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,486,172,314,121.5,0.35390946502057613,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:55.280217,0.000316,udp,147.32.84.138,47871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:55.469052,14.578938,tcp,147.32.84.59,53753.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:21:56.392797,16.668119,tcp,147.32.84.184,52440.0,->,199.59.149.232,443.0,FSPA_FSPA,0.0,0.0,23,9402,2282,7120,408.7826086956522,0.24271431610295682,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:21:56.854176,303.193359,tcp,147.32.84.59,53767.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,28,7768,2676,5092,277.42857142857144,0.34449021627188464,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:21:57.638872,0.000303,udp,147.32.85.34,55910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:21:59.304769,0.000484,udp,147.32.86.171,53235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:00.215980,363.635925,udp,147.32.84.229,13363.0,<->,108.41.36.104,57376.0,CON,0.0,0.0,11,2887,687,2200,262.45454545454544,0.23796328368548667,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:00.422631,0.000274,udp,147.32.87.223,62757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,102,164,133.0,0.38345864661654133,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:00.531353,3051.123535,udp,77.24.86.142,65107.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:00.912502,0.007414,tcp,147.32.85.117,4449.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2008,1009,999,223.11111111111111,0.5024900398406374,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:01.131832,0.000287,udp,147.32.84.138,40196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:03.629385,1210.552368,udp,87.242.46.141,2743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,743,557,186,123.83333333333333,0.7496635262449529,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:03.690811,16.849522,tcp,151.83.87.19,49720.0,->,147.32.87.220,64719.0,FSPA_FSPA,0.0,0.0,20,1494,796,698,74.7,0.5327978580990629,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:04.271198,0.000318,udp,147.32.84.138,56786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:04.297597,111.366478,tcp,147.32.84.59,51333.0,->,195.113.232.75,80.0,SRPA_SPA,0.0,0.0,15,3049,1520,1529,203.26666666666668,0.49852410626434895,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:22:07.393531,2479.328613,udp,212.52.38.135,26864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,968,720,248,121.0,0.743801652892562,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:09.517753,0.0508,udp,147.32.87.220,64719.0,<->,85.24.105.75,17018.0,CON,0.0,0.0,2,134,73,61,67.0,0.5447761194029851,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:09.997950,0.000388,udp,147.32.84.170,38186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:09.998877,0.000277,udp,147.32.84.170,59589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:16.460936,0.000491,udp,147.32.85.8,36476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,74,154,114.0,0.32456140350877194,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:16.646473,0.000359,udp,147.32.84.170,47446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:17.165845,0.000782,udp,151.45.117.35,14233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1008,78,930,504.0,0.07738095238095238,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:17.475854,955.387573,udp,78.138.36.146,49073.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:18.619046,0.000185,udp,147.32.85.25,44878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:18.691039,18.482891,tcp,147.32.86.187,54276.0,->,64.71.13.120,80.0,FSA_FSA,0.0,0.0,10,636,378,258,63.6,0.5943396226415094,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:19.456809,3354.917969,udp,147.32.84.229,13363.0,<->,91.189.157.238,48056.0,CON,0.0,0.0,10,3475,534,2941,347.5,0.15366906474820144,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:24.252846,1684.398193,udp,147.32.84.13,57826.0,<->,82.208.56.89,123.0,CON,0.0,0.0,29,2610,1350,1260,90.0,0.5172413793103449,14,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 14:22:24.597214,0.0,udp,113.247.92.122,61830.0,->,147.32.87.218,1553.0,INT,0.0,,1,72,72,0,72.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:22:24.906693,1891.075439,udp,84.177.94.232,13452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:26.117060,0.000339,udp,147.32.84.59,41928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,76,207,141.5,0.26855123674911663,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:26.557671,0.000258,udp,147.32.85.34,53648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:26.646503,0.000433,udp,147.32.84.170,47839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:32.076093,0.000582,udp,24.255.26.20,42121.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:33.441998,3040.669678,udp,147.32.84.229,13363.0,<->,46.17.127.166,4396.0,CON,0.0,0.0,26,3523,1877,1646,135.5,0.5327845586148169,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:35.870782,3055.539551,udp,46.10.25.227,44091.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1174,150,1024,293.5,0.12776831345826234,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:36.646319,0.000352,udp,147.32.84.170,42054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:36.983861,3187.892334,udp,147.32.84.229,13363.0,<->,95.158.12.202,60232.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:41.000918,0.220139,tcp,147.32.84.170,56312.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:41.616836,0.000259,udp,147.32.84.138,52428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:42.064899,0.206256,tcp,147.32.86.20,3312.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,36,28236,969,27267,784.3333333333334,0.03431789205269868,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:42.884836,948.147217,icmp,195.113.235.89,3.0,->,147.32.84.105,49320.0,URN,0.0,,4,280,280,0,70.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:22:44.493270,0.000223,udp,147.32.85.25,46008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:45.002775,0.044883,tcp,147.32.86.96,60313.0,->,147.32.87.49,12489.0,_FSPA,,0.0,8,590,0,590,73.75,0.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:45.719283,0.108515,udp,147.32.84.134,49237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:22:48.288487,2841.609619,udp,82.117.255.71,57118.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,665,365,300,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:49.656993,2134.006836,udp,147.32.87.248,25317.0,<->,78.141.179.8,34050.0,CON,0.0,0.0,8,1041,757,284,130.125,0.7271853986551393,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:22:51.476708,0.000281,udp,147.32.84.134,57114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:22:52.660741,23.921919,tcp,89.24.131.193,11023.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,453,358163,13771,344392,790.6467991169978,0.03844897434966761,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:22:54.424067,0.024996,udp,147.32.85.36,39559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,80,150,115.0,0.34782608695652173,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:22:56.646225,0.000392,udp,147.32.84.170,47867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:22:56.648298,0.017693,tcp,147.32.84.170,52372.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:00.103807,0.000246,udp,147.32.84.59,42719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:00.250992,0.00053,udp,147.32.85.120,40178.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,414,91,323,207.0,0.21980676328502416,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:04.322020,3219.026855,udp,147.32.84.229,13363.0,<->,82.44.67.2,58453.0,CON,0.0,0.0,36,6990,2481,4509,194.16666666666666,0.35493562231759657,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:05.538515,827.744812,udp,147.32.84.94,7103.0,->,212.183.104.6,7161.0,INT,0.0,,6,504,504,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:23:07.069090,0.000912,udp,95.68.97.250,10527.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,269,182,87,134.5,0.6765799256505576,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:08.243713,0.000275,udp,147.32.84.171,33230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,87,161,124.0,0.35080645161290325,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:10.077298,0.000312,udp,147.32.84.138,36471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:10.396003,2451.963379,udp,92.69.203.42,12158.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1376,918,458,137.6,0.6671511627906976,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:10.685101,0.000312,udp,147.32.84.138,59954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:11.361077,3161.088135,udp,147.32.84.229,13363.0,<->,208.88.186.8,34051.0,CON,0.0,0.0,12,1518,1038,480,126.5,0.6837944664031621,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:13.825433,0.361663,tcp,147.32.84.170,39083.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:15.319754,0.000234,udp,147.32.85.7,37203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,75,195,135.0,0.2777777777777778,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:15.377134,0.000324,udp,147.32.84.138,38633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:16.293541,0.000272,udp,147.32.84.138,40846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:16.648242,0.018195,tcp,147.32.84.170,48927.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:19.823307,0.000334,udp,147.32.86.77,35688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,90,182,136.0,0.33088235294117646,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:20.569918,0.00022,udp,147.32.85.25,56318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:21.830267,3.642108,udp,193.227.184.1,58193.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1166,403,763,145.75,0.34562607204116635,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:21.876538,0.207028,tcp,147.32.86.20,3342.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,36,28032,969,27063,778.6666666666666,0.03456763698630137,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:23:22.857392,0.000218,udp,147.32.84.138,59707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:25.730731,10.947654,tcp,147.32.84.59,56260.0,->,192.168.78.1,139.0,S_,0.0,,8,608,608,0,76.0,1.0,14,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:23:29.802637,0.357719,udp,147.32.84.229,13363.0,<->,111.242.176.56,18781.0,CON,0.0,0.0,2,152,92,60,76.0,0.6052631578947368,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:32.327049,3124.472412,udp,147.32.84.229,13363.0,<->,211.75.254.23,9441.0,CON,0.0,0.0,17,2833,1896,937,166.64705882352942,0.6692552064948818,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:34.111694,0.000298,udp,147.32.86.77,36003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:34.457496,0.355071,udp,147.32.84.229,13363.0,<->,114.25.179.45,53801.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:36.646655,0.000418,udp,147.32.84.170,43243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:36.648673,0.018169,tcp,147.32.84.170,52751.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:37.451052,2769.213379,udp,147.32.84.94,7103.0,->,82.224.187.53,7307.0,INT,0.0,,8,672,672,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:23:40.194636,3353.988281,udp,78.141.181.222,34002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,577,395,182,96.16666666666667,0.6845753899480069,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:40.204616,114.616936,tcp,147.32.86.15,3777.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,11,2238,770,1468,203.45454545454547,0.34405719392314565,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:23:40.721680,3446.260254,udp,147.32.84.15,32856.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,14,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 14:23:42.001484,0.196122,tcp,147.32.84.170,56326.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:42.079099,1.366047,tcp,147.32.84.59,61511.0,->,199.59.148.20,443.0,FSPA_FSPA,0.0,0.0,29,15261,2237,13024,526.2413793103449,0.14658279273966318,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:23:42.325940,0.004305,tcp,147.32.84.59,2674.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2117,1209,908,235.22222222222223,0.5710911667453944,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:23:42.356319,0.000243,udp,147.32.84.138,35536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:49.835518,1821.15564,udp,65.75.121.203,31642.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,505,381,124,126.25,0.7544554455445545,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:23:51.325980,0.000352,udp,147.32.84.138,34837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:51.926691,0.015683,tcp,147.32.84.59,51344.0,->,93.185.102.51,443.0,FSPA_FSPA,0.0,0.0,14,2319,1222,1097,165.64285714285714,0.5269512721000431,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:23:53.805850,0.198593,tcp,147.32.86.58,4737.0,->,178.21.152.13,80.0,FSPA_FSPA,0.0,0.0,11,3185,2261,924,289.54545454545456,0.7098901098901099,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:23:54.513712,0.017139,udp,147.32.84.59,35095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,77,305,191.0,0.20157068062827224,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:54.895999,240.060272,tcp,147.32.84.134,37630.0,->,74.125.232.207,80.0,FSPA_FSPA,0.0,0.0,22,3509,2098,1411,159.5,0.5978911370760901,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:23:56.648703,0.000465,udp,147.32.84.170,55087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:56.649713,0.000422,udp,147.32.84.170,46656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:23:57.344061,0.251298,udp,147.32.84.134,58439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:23:57.787673,0.183228,tcp,147.32.86.58,4741.0,->,178.21.152.13,80.0,FSPA_FSPA,0.0,0.0,9,2018,1154,864,224.22222222222223,0.5718533201189296,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:23:58.347530,0.000218,udp,147.32.85.34,53815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:58.350279,0.000273,udp,147.32.85.34,58726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:58.380409,0.000359,udp,147.32.85.34,52023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:23:58.987729,0.000857,udp,109.231.193.164,30036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:01.220450,3277.077637,udp,128.176.228.97,22265.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1251,880,371,125.1,0.7034372501998402,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:02.914382,0.036667,tcp,147.32.85.2,50684.0,->,147.32.3.39,80.0,FSRPA_FSPA,0.0,0.0,9,1584,950,634,176.0,0.5997474747474747,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:04.129937,0.000265,udp,147.32.86.20,63373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:05.193121,489.144409,tcp,147.32.84.170,39091.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,115,41831,30903,10928,363.74782608695654,0.738758337118405,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:05.753105,0.233991,tcp,147.32.86.20,3372.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,34954,1091,33863,812.8837209302326,0.031212450649424957,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:06.366323,0.00347,udp,147.32.85.8,41610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:06.521455,0.001991,udp,147.32.85.8,37237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:06.650702,0.018122,tcp,147.32.84.170,52756.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:07.491722,0.008294,tcp,147.32.84.59,50682.0,->,78.24.10.27,80.0,FSPA_FSPA,0.0,0.0,9,1882,1043,839,209.11111111111111,0.5541976620616366,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:24:08.432815,1826.16272,udp,147.32.84.229,13363.0,<->,65.29.236.50,35529.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:09.012217,0.000402,udp,147.32.84.138,32873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:10.053504,0.00036,udp,147.32.84.138,41251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:11.997213,0.000375,udp,147.32.84.170,41686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:12.111427,2477.599365,udp,147.32.84.59,23176.0,<->,78.128.116.175,30729.0,CON,0.0,0.0,4,282,162,120,70.5,0.574468085106383,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:24:14.994329,0.000243,udp,147.32.84.138,41943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:16.648939,0.000502,udp,147.32.84.170,50862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:16.650171,0.018439,tcp,147.32.84.170,54359.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:19.852735,0.046149,tcp,147.32.86.53,57070.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,30,25564,2053,23511,852.1333333333333,0.08030824597089657,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:19.937023,95.068245,tcp,147.32.86.53,41045.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,48,40311,10372,29939,839.8125,0.2572994964153705,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:20.877701,0.000333,udp,147.32.84.138,54098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:23.532968,0.000188,udp,147.32.84.138,41533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:24.757252,0.000199,udp,147.32.84.171,49771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,82,132,107.0,0.38317757009345793,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:25.662571,0.000194,udp,147.32.84.138,41978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:25.917584,1745.63501,udp,147.32.84.229,13363.0,<->,82.227.82.180,32384.0,CON,0.0,0.0,8,3281,204,3077,410.125,0.06217616580310881,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:26.519759,0.000339,udp,147.32.84.138,49711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:27.647045,0.000692,udp,90.154.200.235,29409.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:30.935465,0.547711,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,75,245,160.0,0.234375,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:31.484937,5.729112,tcp,147.32.84.165,1042.0,->,175.6.0.105,80.0,SRPA_SPA,0.0,0.0,9,1092,509,583,121.33333333333333,0.4661172161172161,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:24:32.482693,0.417337,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,71,241,156.0,0.22756410256410256,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:32.836084,3349.785156,tcp,147.32.84.59,1106.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,32,12419,3258,9161,388.09375,0.2623399629599807,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:24:32.900987,4.450532,tcp,147.32.84.165,1043.0,->,175.6.0.103,80.0,SRPA_SPA,0.0,0.0,114,98904,3111,95793,867.578947368421,0.03145474399417617,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:24:32.902116,0.654713,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,74,308,191.0,0.193717277486911,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:33.557707,0.539839,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,73,227,150.0,0.24333333333333335,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:33.732392,0.024979,udp,147.32.84.59,61117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,76,270,173.0,0.21965317919075145,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:34.101147,0.751346,udp,147.32.84.165,23075.0,<->,122.225.115.158,3478.0,CON,0.0,0.0,4,400,140,260,100.0,0.35,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:24:34.118064,0.441865,udp,147.32.84.165,23076.0,->,122.225.115.158,3478.0,INT,0.0,,6,420,420,0,70.0,1.0,14,0,flow=From-Botnet-V49-UDP-Attempt,Botnet,1 2011-08-16 14:24:34.518264,0.412997,udp,147.32.84.165,23075.0,<->,122.225.115.159,3478.0,CON,0.0,0.0,2,200,70,130,100.0,0.35,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:24:36.647722,0.000368,udp,147.32.84.170,55459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:36.648712,0.000483,udp,147.32.84.170,50211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:36.774846,0.436996,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,74,244,159.0,0.23270440251572327,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:37.588613,3331.130127,udp,147.32.84.229,13363.0,<->,98.250.23.102,57324.0,CON,0.0,0.0,32,6621,4532,2089,206.90625,0.6844887479232744,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:39.142170,0.839587,tcp,147.32.86.194,4218.0,->,90.183.38.65,995.0,FSPA_FSPA,0.0,0.0,143,108458,3971,104487,758.4475524475524,0.036613251212450904,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:39.157564,3040.626709,udp,68.99.32.38,3693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:39.950674,1.893133,tcp,147.32.84.59,1215.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,2962,873,2089,269.27272727272725,0.2947332883187036,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:24:41.998399,0.000419,udp,147.32.84.170,48484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:41.999787,0.218874,tcp,147.32.84.170,56336.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:44.001883,0.398121,udp,147.32.84.216,51704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:46.070448,0.023237,udp,147.32.84.59,60847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,429,74,355,214.5,0.17249417249417248,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:46.121532,3.114577,udp,46.44.24.206,64941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,869,136,733,217.25,0.1565017261219793,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:46.429554,3127.200195,udp,87.21.93.19,42908.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1565,1131,434,111.78571428571429,0.7226837060702875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:48.655857,0.135757,udp,147.32.86.165,59804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,83,152,117.5,0.35319148936170214,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:49.088980,3531.946777,tcp,147.32.84.59,1492.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,26,10748,4643,6105,413.38461538461536,0.43198734648306664,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:24:51.265178,0.409671,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:24:51.386330,1596.994385,icmp,194.95.197.40,771.0,->,147.32.84.94,42781.0,URP,0.0,,8,896,896,0,112.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:24:51.675736,61.295837,tcp,147.32.84.165,1046.0,->,208.98.43.148,81.0,SRPA_SPA,0.0,0.0,8,2280,482,1798,285.0,0.21140350877192982,14,1,flow=From-Botnet-V49-TCP-Established,Botnet,1 2011-08-16 14:24:52.085769,17.945189,tcp,147.32.84.59,53979.0,->,85.90.254.44,80.0,FSPA_FSPA,0.0,0.0,17,5794,1822,3972,340.8235294117647,0.3144632378322402,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:24:52.269941,0.001659,udp,210.131.109.21,2893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,75,471,273.0,0.13736263736263737,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:24:54.802100,9.024882,tcp,119.107.225.248,59127.0,->,147.32.86.44,443.0,S_SA,0.0,0.0,6,390,132,258,65.0,0.3384615384615385,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:24:55.318031,0.000319,udp,147.32.86.20,59881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:55.386575,0.000427,udp,147.32.84.138,58295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:56.657295,0.000366,udp,147.32.84.170,36726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:56.658429,0.018502,tcp,147.32.84.170,48943.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:24:57.952971,554.388489,tcp,147.32.84.165,1047.0,->,174.128.235.237,88.0,SRPA_SPA,0.0,0.0,1129,1007271,34871,972400,892.1798051372897,0.03461928319191161,14,1,flow=From-Botnet-V49-TCP-CC76-HTTP-Custom-Port-Not-Encrypted-Binary-Download,Botnet,1 2011-08-16 14:24:58.476932,0.000304,udp,147.32.86.77,48504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,78,318,198.0,0.19696969696969696,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:24:58.731017,0.001805,udp,147.32.86.77,51525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,456,78,378,228.0,0.17105263157894737,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:00.229401,0.174587,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,505,78,427,252.5,0.15445544554455445,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:25:00.404983,500.001221,tcp,147.32.84.165,1048.0,->,195.113.232.98,80.0,SPA_FSPA,0.0,0.0,14,5498,531,4967,392.7142857142857,0.09658057475445617,14,1,flow=From-Botnet-V49-TCP-Established-HTTP-Ad-40,Botnet,1 2011-08-16 14:25:03.575791,598.125061,udp,89.215.190.197,32141.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,491,367,124,122.75,0.7474541751527495,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:04.185991,2470.753662,udp,62.30.176.120,4269.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1194,884,310,119.4,0.7403685092127303,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:04.334169,0.000191,udp,147.32.86.77,47038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:04.438205,0.00064,udp,70.69.185.72,10647.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:04.748747,0.000228,udp,147.32.84.59,52283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:05.295399,25.2335,tcp,147.32.85.88,59339.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,665,623730,16063,607667,937.9398496240601,0.025753130360893335,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:25:10.325701,2122.713135,udp,147.32.84.229,13363.0,<->,114.47.247.155,57207.0,CON,0.0,0.0,10,683,383,300,68.3,0.5607613469985359,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:10.852173,0.00065,udp,113.36.115.18,50668.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:14.693930,5.992089,udp,147.32.84.229,13363.0,->,24.243.160.133,20652.0,INT,0.0,,3,240,240,0,80.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:25:15.368272,0.160048,udp,147.32.84.111,48922.0,<->,74.137.152.210,22434.0,CON,0.0,0.0,2,644,78,566,322.0,0.12111801242236025,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:15.987773,0.170095,tcp,147.32.84.59,2377.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,18,10783,1141,9642,599.0555555555555,0.10581470833719744,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:25:16.332688,0.000314,udp,147.32.84.164,54671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:25:16.648821,0.000336,udp,147.32.84.170,60242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:17.649856,0.000462,udp,147.32.86.223,58127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,76,205,140.5,0.2704626334519573,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:20.492517,0.000479,udp,147.32.85.7,54712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:21.037614,20.791105,tcp,90.177.91.188,13107.0,->,147.32.84.242,443.0,FSPA_FSPA,0.0,0.0,26,5598,2010,3588,215.30769230769232,0.3590568060021436,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:25:21.805561,0.000688,udp,82.137.254.146,32366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:22.359256,0.000878,udp,93.130.106.250,33216.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:22.822357,0.000346,udp,147.32.84.138,41271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:24.513187,0.001085,udp,91.148.95.216,42406.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,73,485,279.0,0.13082437275985664,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:24.695768,1807.461792,udp,70.48.137.50,47975.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:26.648595,0.000412,udp,147.32.84.170,45043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:27.912839,0.000281,udp,147.32.84.164,52227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:25:30.296925,0.009907,udp,147.32.84.164,53903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:25:30.307252,0.000407,udp,147.32.84.164,47353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:25:31.135516,0.000293,udp,147.32.85.25,48627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:34.949452,1351.553345,tcp,195.113.232.75,80.0,,147.32.85.89,34428.0,FRA_FA,0.0,0.0,20,1266,606,660,63.3,0.4786729857819905,14,0,flow=Background,Background,-1 2011-08-16 14:25:36.775101,0.000295,udp,147.32.84.138,55899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:39.816520,0.000267,udp,147.32.84.138,35699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:43.998168,0.000277,udp,147.32.84.170,47925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:44.688655,0.000389,udp,147.32.84.59,60584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:45.013972,0.00023,udp,147.32.84.138,44768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:45.920735,1205.775879,udp,70.107.96.219,31456.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2054,148,1906,513.5,0.07205452775073028,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:46.109664,0.24738,udp,147.32.84.134,38220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:25:46.605485,0.24722,udp,147.32.84.134,58228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:25:46.648424,0.000429,udp,147.32.84.170,53083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:46.650532,0.018052,tcp,147.32.84.170,33335.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:47.101793,315.163574,tcp,147.32.84.134,39104.0,->,74.125.232.199,443.0,FSPA_FSPA,0.0,0.0,95,25200,6664,18536,265.2631578947368,0.2644444444444444,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:25:47.393122,0.000248,udp,147.32.85.25,47842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:48.989505,0.00063,udp,111.232.40.57,50088.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:25:50.387521,67.619026,tcp,147.32.84.59,3722.0,->,2.20.182.41,443.0,SRPA_FSPA,0.0,0.0,21,6994,1336,5658,333.04761904761904,0.1910208750357449,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:25:50.981998,0.000251,udp,147.32.84.138,60897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:53.036941,0.294111,udp,147.32.84.59,28902.0,<->,110.39.72.106,31915.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:25:53.932687,32.4921,tcp,147.32.84.216,56796.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,35,12624,3767,8857,360.6857142857143,0.29839987325728773,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:25:56.101176,0.24568,udp,147.32.84.216,60557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:56.648461,0.017824,tcp,147.32.84.170,33336.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:25:57.216781,0.000253,udp,147.32.84.216,37702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:57.652455,0.000186,udp,147.32.84.138,60921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:57.883546,0.000334,udp,147.32.85.34,60617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:25:58.823954,0.02328,tcp,147.32.84.59,1677.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1687,1098,589,187.44444444444446,0.6508595139300534,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:25:59.589531,0.000266,udp,147.32.84.138,33604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:01.096404,0.000577,udp,147.32.84.164,59928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:26:01.097370,0.000406,udp,147.32.84.164,34930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:26:01.407337,0.000218,udp,147.32.84.138,51832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:02.023092,7.8e-05,icmp,147.32.86.96,,<-,147.32.87.44,9226.0,ECR,,0.0,2,196,0,196,98.0,0.0,14,0,flow=Background,Background,-1 2011-08-16 14:26:02.208316,0.000247,udp,147.32.85.7,38198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,80,200,140.0,0.2857142857142857,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:02.662981,24.284727,tcp,147.32.84.59,38419.0,->,74.125.232.201,443.0,FSPA_FSPA,0.0,0.0,18,5010,3944,1066,278.3333333333333,0.7872255489021956,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:26:05.377294,1827.8396,udp,77.177.113.13,63898.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,489,365,124,122.25,0.7464212678936605,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:05.775592,0.000305,udp,147.32.84.59,37371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:06.488262,0.000725,udp,210.165.159.90,38189.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:10.711085,0.000369,udp,147.32.84.59,34128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,132,194,163.0,0.4049079754601227,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:10.874951,3091.191895,udp,212.28.76.195,58424.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,540,300,240,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:13.755009,160.799942,tcp,147.32.84.132,55797.0,->,74.125.232.229,80.0,FSPA_FSPA,0.0,0.0,22,16309,1214,15095,741.3181818181819,0.07443742718744252,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:26:14.999059,0.000414,udp,147.32.84.170,35807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:15.000424,0.220389,tcp,147.32.84.170,58352.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:16.187499,0.000816,udp,87.182.20.29,5084.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:17.957159,3.007321,tcp,147.32.84.21,47584.0,->,74.125.39.109,,S_,0.0,,2,148,148,0,74.0,1.0,14,,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:26:17.979456,3329.911133,udp,188.221.185.65,18372.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,723,537,186,120.5,0.7427385892116183,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:23.364348,0.000326,udp,147.32.84.59,58878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,70,174,122.0,0.28688524590163933,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:25.766195,0.05179,tcp,147.32.85.88,51892.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,118,70469,5873,64596,597.1949152542373,0.08334161120492699,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:26:26.646511,0.000566,udp,147.32.84.170,60761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:26.649134,0.018409,tcp,147.32.84.170,37078.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:27.446981,0.000804,udp,114.34.113.191,37004.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,74,481,277.5,0.13333333333333333,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:29.326430,123.013977,tcp,147.32.84.59,53464.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,32,8835,6265,2570,276.09375,0.7091114883984154,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:26:31.994251,0.000299,udp,147.32.84.59,42050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:32.014503,0.000389,udp,147.32.84.59,48460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:33.433148,0.000433,udp,147.32.86.165,54518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,74,159,116.5,0.31759656652360513,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:34.441515,0.070833,udp,147.32.84.229,13363.0,<->,78.30.198.42,26106.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:35.172226,8.674862,tcp,41.201.88.24,2439.0,->,147.32.87.36,80.0,SRPA_SPA,0.0,0.0,155,138840,4501,134339,895.741935483871,0.03241861135119562,14,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 14:26:36.229721,3271.141113,udp,82.142.93.3,45157.0,<->,147.32.86.223,21104.0,CON,0.0,0.0,17,1978,1540,438,116.3529411764706,0.7785642062689585,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:36.647997,0.000406,udp,147.32.84.170,33547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:36.648944,0.000457,udp,147.32.84.170,41225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:36.650140,0.018468,tcp,147.32.84.170,37079.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:40.915754,0.000193,udp,147.32.84.138,53722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:41.598314,2635.980957,udp,213.168.58.118,1830.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,946,698,248,118.25,0.7378435517970402,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:43.361412,0.000347,udp,147.32.84.59,49685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:43.951388,0.000457,udp,147.32.85.7,56262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,85,135,110.0,0.38636363636363635,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:45.454693,3149.912109,udp,109.239.68.69,53361.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1017,689,328,127.125,0.6774827925270404,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:45.732506,3037.042725,udp,202.151.203.136,10374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:45.920194,3168.020508,udp,79.132.22.78,11241.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1422,1050,372,118.5,0.7383966244725738,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:47.214733,3044.775146,udp,201.31.46.10,26260.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:48.517629,0.000194,udp,147.32.84.138,60278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:49.205691,0.000716,udp,95.158.130.106,36234.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:26:49.349164,158.333282,tcp,147.32.85.117,4491.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,42,27069,4305,22764,644.5,0.1590380139643134,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:26:51.392361,0.152529,tcp,147.32.84.59,1781.0,->,147.32.80.7,80.0,SRPA_SPA,0.0,0.0,6,1322,322,1000,220.33333333333334,0.24357034795763993,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:26:52.996387,0.009818,udp,147.32.84.134,50662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,69,126,97.5,0.35384615384615387,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.051389,0.000304,udp,147.32.84.59,49917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:26:53.344220,250.040436,tcp,147.32.84.134,42697.0,->,74.125.232.213,443.0,SRPA_FSPA,0.0,0.0,31,4528,1533,2995,146.06451612903226,0.3385600706713781,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.345167,0.000312,udp,147.32.84.134,33441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.347205,250.040802,tcp,147.32.84.134,46260.0,->,74.125.232.216,443.0,SRPA_FSPA,0.0,0.0,31,4562,1539,3023,147.16129032258064,0.33735203857957036,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.369411,0.000434,udp,147.32.84.134,42996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.370336,0.000459,udp,147.32.84.134,38708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,97,183,140.0,0.3464285714285714,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.371272,250.033295,tcp,147.32.84.134,46263.0,->,74.125.232.216,443.0,FSPA_FSRPA,0.0,0.0,32,4622,1539,3083,144.4375,0.33297273907399394,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.371324,250.025146,tcp,147.32.84.134,46264.0,->,74.125.232.216,443.0,FSPA_FSRPA,0.0,0.0,32,4622,1539,3083,144.4375,0.33297273907399394,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.375833,250.015488,tcp,147.32.84.134,55758.0,->,74.125.232.221,443.0,FSPA_FSRPA,0.0,0.0,28,2648,1492,1156,94.57142857142857,0.5634441087613293,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:53.375905,250.010742,tcp,147.32.84.134,50840.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4783,1561,3222,154.29032258064515,0.32636420656491744,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:54.617346,242.220947,tcp,147.32.84.134,50853.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,50,17841,2692,15149,356.82,0.15088840311641724,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:26:56.648096,0.000456,udp,147.32.84.170,59666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:26:57.836369,3383.052979,udp,147.32.84.184,59371.0,<->,78.141.179.8,34017.0,CON,0.0,0.0,12,1426,1048,378,118.83333333333333,0.7349228611500701,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:01.263932,0.000325,udp,147.32.84.181,57086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:01.936483,2494.609375,udp,75.100.26.248,31353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:02.098449,241.287521,tcp,147.32.84.134,50855.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.098661,241.29155,tcp,147.32.84.134,41947.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.098877,0.000406,udp,147.32.84.134,51142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.099171,0.000234,udp,147.32.84.134,46012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.099615,0.000374,udp,147.32.84.134,47932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.101046,0.000507,udp,147.32.84.134,59267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.104710,241.287186,tcp,147.32.84.134,49030.0,->,74.125.232.198,443.0,SRPA_FSPA,0.0,0.0,31,4955,1545,3410,159.83870967741936,0.31180625630676084,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:27:02.493356,0.000347,udp,147.32.87.54,54246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,73,289,181.0,0.20165745856353592,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:03.597732,0.000241,udp,147.32.84.181,56467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:05.696201,0.000385,udp,147.32.84.138,48744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:06.339103,3596.644043,udp,132.206.196.173,21331.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,540,266,274,67.5,0.4925925925925926,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:06.575220,0.000483,udp,147.32.84.138,59326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:08.086882,0.000164,udp,147.32.84.59,55962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,87,155,121.0,0.359504132231405,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:08.755664,0.000237,udp,147.32.86.168,56837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,78,164,121.0,0.32231404958677684,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:09.871549,0.000336,udp,147.32.84.59,2977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,87,137,112.0,0.38839285714285715,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:09.979959,0.00024,udp,147.32.87.238,1094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,73,196,134.5,0.27137546468401486,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:10.214120,0.312806,udp,147.32.84.229,13363.0,<->,114.41.163.178,47030.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:10.844445,6.260618,tcp,90.177.169.86,20001.0,->,147.32.85.56,44076.0,FSRPA_FSPA,0.0,0.0,11,786,419,367,71.45454545454545,0.5330788804071247,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:27:12.116764,0.126637,udp,147.32.86.165,49377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:13.094953,0.000524,udp,147.32.84.59,54407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:13.456624,0.29008,udp,147.32.84.229,13363.0,<->,41.242.196.192,6577.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:14.345926,2.763168,tcp,66.249.66.10,36158.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8710,978,7732,483.8888888888889,0.11228473019517796,14,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 14:27:16.483254,3238.136475,udp,147.32.84.229,13363.0,<->,208.126.87.180,3075.0,CON,0.0,0.0,6,771,206,565,128.5,0.26718547341115434,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:16.647490,0.000345,udp,147.32.84.170,41337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:27:19.398302,0.000169,tcp,147.32.80.7,47640.0,->,147.32.85.34,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:27:19.604616,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,14,,flow=Background,Background,-1 2011-08-16 14:27:26.076780,2349.288086,udp,84.228.51.105,22939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,421,220,201,70.16666666666667,0.5225653206650831,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:26.926071,128.283707,tcp,147.32.84.59,57173.0,->,195.113.232.74,80.0,FSPA_FSPA,0.0,0.0,14,5142,1188,3954,367.2857142857143,0.2310385064177363,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:27:30.711238,0.000311,udp,147.32.84.181,51182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:31.003431,2831.093262,udp,83.99.135.165,17625.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,831,534,297,138.5,0.6425992779783394,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:31.458752,0.069286,udp,147.32.85.22,52334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,77,173,125.0,0.308,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:32.015393,3434.865967,udp,79.18.187.66,45333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1681,1247,434,120.07142857142857,0.7418203450327187,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:32.879313,73.547073,tcp,147.32.84.181,51166.0,->,209.85.148.103,80.0,SRPA_SPA,0.0,0.0,58,43918,4995,38923,757.2068965517242,0.1137346873719204,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:27:35.189495,127.898483,tcp,147.32.84.59,58156.0,->,74.125.232.196,443.0,FSPA_FSPA,0.0,0.0,25,9806,5881,3925,392.24,0.5997348562104834,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:27:35.730027,0.000617,udp,88.78.156.37,34330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:36.258138,0.000283,udp,147.32.86.134,62155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:36.472041,0.400069,udp,147.32.84.229,13363.0,<->,119.192.135.109,52841.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:36.695106,0.000382,udp,147.32.84.138,59256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:38.231633,2934.474365,udp,134.102.133.191,25705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,397,217,180,66.16666666666667,0.5465994962216625,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:40.057103,0.103861,tcp,147.32.86.96,57425.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,600,0,600,75.0,0.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:27:40.177168,1690.220215,udp,147.32.84.229,13363.0,<->,62.143.76.189,23538.0,CON,0.0,3.0,6,1029,209,820,171.5,0.2031098153547133,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:41.074458,0.000314,udp,147.32.86.20,61018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:42.159807,0.000517,icmp,147.32.86.96,,<-,147.32.87.52,57099.0,RED,,0.0,2,196,0,196,98.0,0.0,14,0,flow=Background,Background,-1 2011-08-16 14:27:42.771966,0.000174,udp,147.32.84.138,44667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:43.905586,0.000213,udp,147.32.84.59,58561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:43.934897,0.000302,udp,147.32.84.164,40789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:27:44.240922,46.145023,tcp,147.32.86.6,50324.0,->,147.32.192.34,993.0,FSPA_FSPA,0.0,0.0,37,9346,1887,7459,252.59459459459458,0.2019045580997218,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:27:47.615815,3369.561279,udp,81.96.135.120,45975.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,669,548,121,167.25,0.8191330343796711,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:47.872230,0.004393,udp,114.44.185.60,6210.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3006,60,2946,751.5,0.01996007984031936,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:51.559170,1189.65686,udp,81.91.220.198,56591.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,710,500,210,118.33333333333333,0.704225352112676,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:52.336595,0.000255,udp,147.32.84.138,55360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:53.154460,0.000412,udp,147.32.84.59,45152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,73,148,110.5,0.33031674208144796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:54.919479,19.353329,tcp,147.32.84.59,45865.0,->,92.123.64.178,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:27:55.813945,0.00036,udp,147.32.84.59,38716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,76,174,125.0,0.304,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:57.762230,1212.032715,udp,147.32.86.58,48784.0,<->,213.231.134.75,10996.0,CON,0.0,0.0,6,771,549,222,128.5,0.7120622568093385,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:27:57.776529,773.490356,udp,147.32.84.94,7103.0,->,61.129.103.84,14194.0,INT,0.0,,10,840,840,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:27:59.130773,0.000154,udp,147.32.85.7,37093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:27:59.557875,0.000283,udp,147.32.84.59,63718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:02.195662,0.422055,tcp,147.32.84.132,55833.0,->,194.79.52.195,80.0,SRPA_FSPA,0.0,0.0,24,22136,1232,20904,922.3333333333334,0.05565594506685941,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:28:03.823816,150.062256,udp,200.102.19.14,50481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,843,483,360,70.25,0.5729537366548043,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:04.193906,0.000172,udp,147.32.84.138,56144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:04.907581,0.000265,udp,147.32.84.138,46757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:05.471933,0.000297,udp,147.32.85.7,52835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:06.647035,0.000344,udp,147.32.84.170,55390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:08.441355,0.00019,udp,147.32.84.138,56595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:08.716145,6.01067,udp,147.32.84.229,13363.0,->,212.139.249.152,53595.0,INT,0.0,,3,222,222,0,74.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:28:13.049455,0.384233,tcp,147.32.84.170,51940.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:13.686865,0.299452,tcp,147.32.84.170,45240.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:15.144108,0.421725,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,70,246,158.0,0.22151898734177214,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:15.582860,7.61517,tcp,147.32.84.165,1049.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,8,860,474,386,107.5,0.5511627906976744,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:16.438530,0.024729,tcp,147.32.85.123,58356.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:28:16.445397,0.86277,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,74,228,151.0,0.24503311258278146,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:16.647955,0.000348,udp,147.32.84.170,50003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:16.648841,0.000321,udp,147.32.84.170,51636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:17.095971,0.000209,udp,147.32.85.34,61295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:17.309010,1.305508,tcp,147.32.84.165,1050.0,->,123.125.115.150,80.0,FSPA_FSPA,0.0,0.0,10,926,502,424,92.6,0.5421166306695464,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:17.999686,0.236088,tcp,147.32.84.170,58376.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:18.182976,0.87624,tcp,147.32.84.165,1051.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,11,4793,501,4292,435.72727272727275,0.10452743584393907,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:20.330251,9e-06,icmp,147.32.87.249,,<-,147.32.87.48,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,14,1,flow=Background,Background,-1 2011-08-16 14:28:23.014502,0.0,icmp,74.109.125.79,771.0,->,147.32.84.94,455.0,URP,0.0,,1,70,70,0,70.0,1.0,14,1,flow=Background,Background,-1 2011-08-16 14:28:24.904623,6.211577,tcp,147.32.84.59,2086.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,2408,1263,1145,240.8,0.5245016611295681,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:28:25.539323,0.000196,udp,147.32.84.138,41711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:26.649224,0.000319,udp,147.32.84.170,56081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:27.181161,0.0003,udp,147.32.84.59,60979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,82,250,166.0,0.2469879518072289,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:28.433592,0.000343,udp,147.32.84.138,36212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:29.293885,8.085019,tcp,147.32.84.165,1053.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,8,915,529,386,114.375,0.5781420765027322,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:30.156994,1.311187,tcp,147.32.84.165,1054.0,->,123.125.115.150,80.0,FSPA_FSPA,0.0,0.0,10,981,557,424,98.1,0.5677879714576962,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:31.032956,0.87422,tcp,147.32.84.165,1055.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,11,4654,556,4098,423.09090909090907,0.11946712505371723,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:32.710638,0.320042,udp,147.32.85.26,60764.0,<->,118.6.1.25,2477.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:35.281085,2654.914551,udp,138.246.194.51,15306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,2076,1218,858,148.28571428571428,0.5867052023121387,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:35.647184,0.734542,tcp,147.32.86.50,52641.0,->,4.53.19.203,443.0,FSPA_FSPA,0.0,0.0,14,6192,1510,4682,442.2857142857143,0.24386304909560724,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:28:36.647630,0.000391,udp,147.32.84.170,49389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:36.648784,0.018059,tcp,147.32.84.170,40673.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:39.263094,2497.316895,udp,208.88.186.11,34060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1398,1088,310,139.8,0.7782546494992847,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:39.667934,0.001277,udp,147.32.85.36,60423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:39.686984,0.000248,udp,147.32.84.59,3332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:39.717207,0.000468,udp,147.32.84.59,58295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:40.267481,0.009126,udp,147.32.84.132,60633.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:40.342862,0.001848,udp,147.32.86.155,52326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,450,82,368,225.0,0.18222222222222223,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:42.271214,0.453937,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,71,126,98.5,0.3604060913705584,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:42.283547,2718.197021,udp,147.32.84.229,13363.0,<->,90.152.17.227,62697.0,CON,0.0,0.0,6,433,253,180,72.16666666666667,0.5842956120092379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:42.736633,63.944084,tcp,147.32.84.165,1057.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,19,5453,945,4508,287.0,0.17329910141206675,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:28:43.599442,62.298008,tcp,147.32.84.165,1059.0,->,222.189.228.111,80.0,SRPA_SPA,0.0,0.0,16,8513,672,7841,532.0625,0.07893809467872666,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:45.324041,18.574932,udp,147.32.86.223,21104.0,<->,59.113.69.65,39027.0,CON,0.0,0.0,12,816,456,360,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:45.358888,1.556848,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,416,138,278,138.66666666666666,0.3317307692307692,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:46.919567,1.374628,tcp,147.32.84.165,1061.0,->,60.28.190.87,80.0,FSPA_FSPA,0.0,0.0,10,943,478,465,94.3,0.5068928950159067,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:47.234664,0.000576,udp,89.204.137.166,5683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:48.418828,2697.863281,udp,86.157.117.162,61665.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:48.497779,1.661422,tcp,147.32.84.59,2174.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,33,20815,1691,19124,630.7575757575758,0.08123949075186164,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:28:48.779721,130.573029,tcp,147.32.84.94,48580.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,39,12848,2953,9895,329.43589743589746,0.2298412204234122,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:28:48.999734,0.000249,udp,147.32.84.170,42353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:49.000536,0.000326,udp,147.32.84.170,40031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:49.657657,0.049702,udp,147.32.84.229,13363.0,<->,95.28.61.114,22854.0,CON,0.0,0.0,2,309,66,243,154.5,0.21359223300970873,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:50.786263,15.809266,tcp,193.140.214.191,46888.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,32,24224,1154,23070,757.0,0.04763870541611625,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:28:50.842332,0.000559,udp,217.197.193.137,58232.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:28:51.445357,0.045495,tcp,147.32.84.59,49355.0,->,88.86.120.72,80.0,FSRPA_FSPA,0.0,0.0,10,2379,683,1696,237.9,0.2870954182429592,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:28:51.550641,2115.503906,udp,147.32.84.94,7103.0,->,212.185.232.213,7407.0,INT,0.0,,12,1008,1008,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:28:53.343060,1316.424683,tcp,147.32.84.59,2965.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,38,15075,3186,11889,396.7105263157895,0.21134328358208956,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:28:53.822965,0.000309,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,70,246,158.0,0.22151898734177214,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:53.829162,8.074477,tcp,147.32.84.165,1062.0,->,123.125.114.224,80.0,SRPA_SPA,0.0,0.0,8,915,529,386,114.375,0.5781420765027322,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:54.291255,0.037033,udp,147.32.86.58,64212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:28:54.509759,0.209745,udp,147.32.84.134,57254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:28:54.643958,0.000389,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,74,228,151.0,0.24503311258278146,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:28:54.645044,1.190212,tcp,147.32.84.165,1063.0,->,123.125.115.150,80.0,FSPA_FSPA,0.0,0.0,10,981,557,424,98.1,0.5677879714576962,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:54.722684,310.063904,tcp,147.32.84.134,37037.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,58,34692,3341,31351,598.1379310344828,0.09630462354433299,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:28:54.722835,300.062653,tcp,147.32.84.134,37039.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,41,13007,5053,7954,317.2439024390244,0.38848312447143846,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:28:55.440541,0.806525,tcp,147.32.84.165,1064.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,11,4654,556,4098,423.09090909090907,0.11946712505371723,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:28:56.650118,0.019096,tcp,147.32.84.170,36138.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:28:57.102304,130.74382,tcp,147.32.84.59,3767.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,83,82776,20854,61922,997.3012048192771,0.2519329274185754,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:28:57.298282,231.69397,tcp,147.32.84.59,3121.0,->,147.32.80.13,80.0,FSA_FSA,0.0,0.0,7,422,242,180,60.285714285714285,0.5734597156398105,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:28:59.162725,0.000296,udp,147.32.84.59,41263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:00.748149,80.011482,tcp,147.32.85.7,36966.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,88,61957,3556,58401,704.0568181818181,0.05739464467291831,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:29:01.059216,0.050722,udp,147.32.86.34,38857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:01.059598,0.003999,udp,147.32.86.34,49196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,85,157,121.0,0.3512396694214876,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:01.253424,3303.910889,udp,178.49.249.197,35774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,540,300,240,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:02.019342,618.205383,udp,90.62.1.155,62941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1069,536,533,267.25,0.5014031805425632,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:02.292132,0.000137,udp,147.32.84.138,55282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:02.381555,3091.065918,udp,147.32.86.165,12114.0,<->,94.19.164.30,36348.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:03.427529,0.000715,udp,92.62.252.88,38080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,767,75,692,383.5,0.09778357235984354,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:05.993592,0.000704,udp,62.162.5.126,2009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:06.407349,0.000224,udp,147.32.85.34,55809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:06.482076,0.047038,tcp,147.32.84.59,3790.0,->,194.79.52.204,80.0,SRPA_FSPA,0.0,0.0,8,2177,1686,491,272.125,0.7744602664216812,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:29:07.022168,43.677959,udp,90.178.133.75,12742.0,->,147.32.85.64,161.0,INT,0.0,,8,960,960,0,120.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:29:07.328547,0.00065,udp,79.140.73.37,47932.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:09.428509,862.147644,udp,147.32.84.94,7103.0,->,190.152.151.3,25560.0,INT,0.0,,9,756,756,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:29:10.629307,992.779358,tcp,147.32.84.59,49361.0,->,74.125.232.255,443.0,FSRPA_FSPA,0.0,0.0,33,6708,1886,4822,203.27272727272728,0.28115682766845557,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:29:11.930658,0.000697,udp,147.32.84.59,37171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:16.647583,0.000268,udp,147.32.84.170,53415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:29:16.735116,122.635773,tcp,147.32.84.94,48676.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,16,3774,2066,1708,235.875,0.5474297827239004,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:29:17.837479,0.64761,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,72,132,102.0,0.35294117647058826,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:29:17.862757,0.00071,udp,178.137.14.138,30257.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,76,488,282.0,0.1347517730496454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:18.486021,2.935939,tcp,147.32.84.165,1066.0,->,202.96.209.5,80.0,SR_SA,0.0,0.0,3,182,122,60,60.666666666666664,0.6703296703296703,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:29:19.399060,119.972061,tcp,147.32.84.94,48690.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,3753,1084,2669,220.76470588235293,0.28883559818811616,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:29:20.176241,0.000171,udp,147.32.87.223,55839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:20.204919,0.00037,udp,147.32.86.20,60870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:21.421960,6.008705,tcp,147.32.84.165,1066.0,->,202.96.209.5,80.0,S_,0.0,0.0,2,124,124,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:29:22.579955,0.492573,tcp,147.32.87.252,3556.0,->,212.161.8.36,13392.0,FSPA_FSPA,0.0,0.0,17,1600,971,629,94.11764705882354,0.606875,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:29:26.731476,0.306684,tcp,147.32.84.59,52834.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,19,3124,1654,1470,164.42105263157896,0.529449423815621,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:29:30.913264,0.000695,udp,147.32.84.59,64823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:31.300574,15.697365,tcp,147.32.84.59,60117.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:29:32.608195,0.000609,udp,85.26.186.223,41378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:33.519210,0.00032,udp,147.32.84.164,57397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,69,144,106.5,0.323943661971831,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:33.520629,0.000341,udp,147.32.84.164,36372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,69,144,106.5,0.323943661971831,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:33.521406,0.000197,udp,147.32.84.164,53367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,69,144,106.5,0.323943661971831,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:35.057111,1868.34082,udp,147.32.84.94,7103.0,<->,193.218.141.31,7598.0,CON,0.0,0.0,91,70693,69187,1506,776.8461538461538,0.9786966177697933,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:36.600204,0.000436,udp,147.32.84.164,46595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:36.647770,0.000532,udp,147.32.84.170,36190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:29:36.648795,0.0006,udp,147.32.84.170,40955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:29:37.448906,0.000282,udp,147.32.84.164,45735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:38.909512,0.11318,tcp,147.32.87.238,1983.0,->,212.77.100.148,80.0,FSPA_FSPA,0.0,0.0,10,1576,1113,463,157.6,0.7062182741116751,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:29:39.882981,0.000314,udp,147.32.84.164,41670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:39.883875,241.290237,tcp,147.32.84.164,38733.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,21,3278,2040,1238,156.0952380952381,0.6223306894447834,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.259504,0.000361,udp,147.32.84.164,36683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.273937,0.000356,udp,147.32.84.164,36750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.306959,0.000292,udp,147.32.84.164,60374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.307619,0.000218,udp,147.32.84.164,55230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.390595,0.029826,udp,147.32.84.164,46932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,76,188,132.0,0.2878787878787879,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.420747,10.756925,tcp,147.32.84.164,38639.0,->,67.201.31.45,80.0,FSPA_FSRPA,0.0,0.0,20,9330,1126,8204,466.5,0.12068595927116828,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.420756,10.757232,tcp,147.32.84.164,38640.0,->,67.201.31.45,80.0,FSPA_FSRPA,0.0,0.0,63,46589,3874,42715,739.5079365079365,0.08315267552426539,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.536214,12.249417,tcp,147.32.84.164,55493.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,12,2337,924,1413,194.75,0.39537869062901154,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.580004,0.044514,udp,147.32.84.164,54473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,77,190,133.5,0.2883895131086142,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.689768,0.000501,udp,147.32.84.164,52829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.689879,0.254559,udp,147.32.84.164,52633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,75,172,123.5,0.30364372469635625,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.796409,0.000292,udp,147.32.84.164,52779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,78,174,126.0,0.30952380952380953,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.797241,0.000425,udp,147.32.84.164,32945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,77,152,114.5,0.33624454148471616,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.843771,0.019859,udp,147.32.84.164,35734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.851849,0.000284,udp,147.32.84.164,39070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.864051,0.000456,udp,147.32.84.164,38350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.865120,240.308075,tcp,147.32.84.164,42023.0,->,74.125.232.202,80.0,FSPA_FSPA,0.0,0.0,23,3376,2325,1051,146.7826086956522,0.6886848341232228,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.888782,0.000292,udp,147.32.84.164,34754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.900108,0.00033,udp,147.32.84.164,47068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.960025,0.000268,udp,147.32.84.164,53688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.960665,0.000254,udp,147.32.84.164,51715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:40.982967,0.236636,udp,147.32.84.164,53317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,85,147,116.0,0.36637931034482757,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.066692,0.104463,udp,147.32.84.164,53900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.104934,0.000248,udp,147.32.84.164,39446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.105492,0.105032,udp,147.32.84.164,43391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,82,164,123.0,0.3333333333333333,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.172382,0.000294,udp,147.32.84.164,55124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.173033,0.000254,udp,147.32.84.164,60282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.175182,0.000225,udp,147.32.84.164,51129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.176667,0.000307,udp,147.32.84.164,59667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.177879,0.00024,udp,147.32.84.164,34808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.179927,0.00015,udp,147.32.84.164,46797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.180410,0.000213,udp,147.32.84.164,50245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.180906,0.000215,udp,147.32.84.164,55536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.182442,0.000181,udp,147.32.84.164,58000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,89,164,126.5,0.35177865612648224,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.213030,0.000339,udp,147.32.84.164,34155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.217648,0.000411,udp,147.32.84.164,58593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.222978,0.182227,udp,147.32.84.164,45142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.244978,0.000291,udp,147.32.84.164,39406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.245597,20.007919,tcp,147.32.84.164,35064.0,->,64.34.119.12,80.0,FSPA_FSPA,0.0,0.0,10,2110,1050,1060,211.0,0.4976303317535545,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.336429,0.000491,udp,147.32.84.164,55837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.337346,0.000524,udp,147.32.84.164,42944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,82,164,123.0,0.3333333333333333,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.405381,0.000235,udp,147.32.84.164,57293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.445572,0.000482,udp,147.32.84.164,50963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.449620,0.000368,udp,147.32.84.164,40922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.452875,0.000302,udp,147.32.84.164,45457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.453403,0.000391,udp,147.32.84.164,39900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.455046,0.000378,udp,147.32.84.164,57826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,88,163,125.5,0.350597609561753,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.457982,0.000506,udp,147.32.84.164,51062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,87,162,124.5,0.3493975903614458,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:29:41.745115,0.00235,udp,147.32.84.59,50483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:41.751411,0.000256,udp,147.32.84.59,61040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:44.465792,816.327881,udp,147.32.84.229,13363.0,<->,95.182.113.5,19270.0,CON,0.0,0.0,14,993,573,420,70.92857142857143,0.5770392749244713,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:45.235893,0.000286,udp,147.32.84.138,52228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:45.529526,0.381791,udp,147.32.84.229,13363.0,<->,123.204.6.178,32924.0,CON,0.0,0.0,2,601,541,60,300.5,0.9001663893510815,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:46.268825,61.236595,tcp,147.32.84.165,1067.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:29:46.649517,0.018407,tcp,147.32.84.170,37111.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:29:49.447792,0.118354,udp,147.32.84.229,13363.0,<->,94.180.206.143,19860.0,CON,0.0,0.0,4,2988,60,2928,747.0,0.020080321285140562,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:49.997094,0.000331,udp,147.32.84.170,59819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:29:51.446296,0.000582,udp,110.174.45.225,1470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:29:51.787881,0.000299,udp,147.32.85.7,33716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,93,143,118.0,0.3940677966101695,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:54.338719,0.000266,udp,147.32.84.138,56198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:55.398227,0.000322,udp,147.32.84.59,48940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:29:56.051761,0.000215,udp,147.32.84.138,56118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:01.866938,0.000367,udp,147.32.87.36,53144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,14,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 14:30:02.780158,0.000322,udp,147.32.86.172,50368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,84,242,163.0,0.25766871165644173,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:03.605294,50.100758,tcp,147.32.84.59,1471.0,->,92.123.64.137,80.0,FSPA_FSPA,0.0,0.0,24,16064,1106,14958,669.3333333333334,0.06884960159362549,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:30:04.082306,0.000363,udp,147.32.86.20,52254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:05.807781,115.259331,tcp,147.32.84.59,2460.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,21,6024,4175,1849,286.85714285714283,0.6930610889774237,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:30:06.646768,0.000359,udp,147.32.84.170,55212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:30:08.077494,147.262161,udp,72.229.230.225,36937.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,665,365,300,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:08.299137,0.000519,udp,147.32.84.94,36105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:13.099439,0.000677,udp,201.22.181.143,47274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:14.387307,0.000348,udp,147.32.84.138,37756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:19.981176,0.000398,udp,147.32.84.170,38189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:30:20.333589,15.300414,udp,147.32.84.94,7103.0,->,84.20.244.136,7572.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:30:23.911809,0.000269,udp,147.32.84.59,52077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:24.069938,130.463165,tcp,147.32.84.59,40277.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,34,19706,2217,17489,579.5882352941177,0.11250380594742718,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:30:24.935252,0.18723,udp,147.32.84.59,50624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,78,183,130.5,0.2988505747126437,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:24.955263,0.000298,udp,147.32.84.59,48893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:27.605388,0.000263,udp,147.32.84.138,52623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:33.579519,5.095945,udp,147.32.84.94,7103.0,->,60.179.186.169,7103.0,INT,0.0,,2,168,168,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:30:34.016748,0.000315,udp,147.32.84.59,46590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,72,128,100.0,0.36,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:34.882420,3054.703369,udp,213.233.11.5,41239.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:34.987152,485.341003,tcp,147.32.86.165,52029.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,17,7489,1400,6089,440.52941176470586,0.18694084657497664,14,1,flow=Background-google-analytics6,Background,-1 2011-08-16 14:30:36.044045,0.000237,udp,147.32.85.34,50405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:36.434246,0.156879,tcp,147.32.85.123,46179.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:30:36.648207,0.00034,udp,147.32.84.170,60975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:30:38.959101,0.000282,udp,147.32.84.138,41978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:42.506606,0.00204,udp,147.32.84.59,53874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,81,401,241.0,0.16804979253112035,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:43.082260,0.000783,udp,94.199.218.114,10176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,618,81,537,309.0,0.13106796116504854,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:43.523397,1876.934448,udp,140.113.22.130,7723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,584,384,200,97.33333333333333,0.6575342465753424,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:44.928566,0.000212,udp,147.32.84.59,57503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:46.415588,0.156488,udp,147.32.84.59,15675.0,<->,24.180.162.94,2336.0,CON,0.0,0.0,2,557,75,482,278.5,0.13464991023339318,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:30:46.649559,0.017706,tcp,147.32.84.170,50081.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:30:47.086363,61.287251,tcp,147.32.84.165,1068.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:30:51.138399,0.000841,udp,199.255.211.89,40987.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:30:51.688261,0.00025,udp,147.32.84.138,43964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:56.283964,0.248195,udp,147.32.85.7,46231.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:30:56.646936,0.000444,udp,147.32.84.170,53676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:30:59.654511,0.000168,udp,147.32.85.25,54396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:00.331893,0.196024,udp,147.32.84.229,13363.0,<->,85.11.151.5,48743.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:00.347162,0.000344,udp,147.32.84.59,57102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:01.351529,0.000229,udp,147.32.84.138,49789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:01.397784,0.034422,udp,147.32.84.171,48745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:01.797741,0.000279,udp,147.32.84.171,46273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,80,144,112.0,0.35714285714285715,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:02.409366,0.002904,udp,147.32.84.59,59179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,83,170,126.5,0.32806324110671936,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:02.517767,1220.120605,udp,212.232.66.71,49658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,700,452,248,87.5,0.6457142857142857,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:02.584844,0.312309,tcp,147.32.86.20,3672.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,35,31027,798,30229,886.4857142857143,0.025719534598897736,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:31:04.010182,61.92918,udp,147.32.84.94,7103.0,->,193.10.196.43,7272.0,INT,0.0,,8,672,672,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:31:04.621155,71.250137,tcp,147.32.84.94,42903.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,15,5107,3444,1663,340.46666666666664,0.674368513804582,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:31:04.718368,0.000273,udp,147.32.85.25,39680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:06.647365,0.000655,udp,147.32.84.170,44547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:06.648646,0.000584,udp,147.32.84.170,35141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:06.649967,0.01861,tcp,147.32.84.170,59465.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:07.323230,0.00085,udp,193.120.212.165,14136.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:11.811007,0.00034,udp,147.32.84.138,43771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:16.551994,0.021977,tcp,147.32.85.123,46183.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:31:16.648744,0.000248,udp,147.32.84.170,34915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:19.571190,0.001942,udp,99.233.84.45,37888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:26.027003,0.000572,udp,62.182.151.253,4351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:26.647174,0.000433,udp,147.32.84.170,52168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:27.928175,10.200086,tcp,147.32.84.134,50738.0,->,69.63.189.16,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:27.932337,310.387939,tcp,147.32.84.134,47987.0,->,69.63.189.31,443.0,FSPA_FSPA,0.0,0.0,31,6929,1532,5397,223.51612903225808,0.2210997257901573,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.174103,0.030384,udp,147.32.84.134,41651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.174345,0.000979,udp,147.32.84.134,57434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,83,222,152.5,0.2721311475409836,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.174459,310.146301,tcp,147.32.84.134,47991.0,->,69.63.189.31,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.174907,0.003265,udp,147.32.84.134,46609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,84,224,154.0,0.2727272727272727,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.179303,30.02132,tcp,147.32.84.134,37565.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,18,3969,1093,2876,220.5,0.2753842277651801,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.179944,30.019365,tcp,147.32.84.134,59211.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,16,3023,1032,1991,188.9375,0.34138273238504796,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.180090,30.019728,tcp,147.32.84.134,59214.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,16,3023,1032,1991,188.9375,0.34138273238504796,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:28.188325,40.012669,tcp,147.32.84.134,59134.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4066,1160,2906,214.0,0.2852926709296606,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:29.017908,410.474884,tcp,147.32.84.134,59230.0,->,80.239.149.11,443.0,FSPA_FSPA,0.0,0.0,120,63734,13232,50502,531.1166666666667,0.2076128910785452,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:29.018699,300.465454,tcp,147.32.84.134,59231.0,->,80.239.149.11,443.0,FSPA_FSPA,0.0,0.0,97,53249,10911,42338,548.9587628865979,0.2049052564367406,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:29.439253,540.155945,tcp,147.32.84.134,48023.0,->,69.63.189.31,443.0,FSPA_FSPA,0.0,0.0,339,214174,83161,131013,631.7817109144543,0.3882870936715007,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:30.262659,439.32547,tcp,147.32.84.134,48024.0,->,69.63.189.31,443.0,FSPA_FSPA,0.0,0.0,214,130785,46130,84655,611.1448598130842,0.3527162900944298,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:30.421023,82.128273,tcp,147.32.84.134,34944.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:30.421224,78.39193,tcp,147.32.84.134,34946.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:31.221281,0.000306,udp,147.32.84.138,51771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:31.221350,0.000328,udp,147.32.84.138,41476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:31.305455,0.390895,tcp,147.32.3.51,4546.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,14,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:31:32.506312,0.000206,udp,147.32.84.138,40495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:34.392349,0.000605,udp,147.32.84.59,50881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:34.455505,0.000295,udp,147.32.87.238,1094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,75,203,139.0,0.2697841726618705,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:34.759426,2965.675537,udp,190.174.233.161,39358.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,958,291,667,119.75,0.3037578288100209,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:36.647125,0.000434,udp,147.32.84.170,54541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:36.648102,0.000354,udp,147.32.84.170,58463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:36.649199,0.018383,tcp,147.32.84.170,38767.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:37.775258,10.486659,tcp,147.32.86.171,3863.0,->,66.175.58.9,80.0,SRPA_FSPA,0.0,0.0,18,10179,881,9298,565.5,0.08655074172315552,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:31:39.303143,410.282867,tcp,147.32.84.134,48030.0,->,69.63.189.31,443.0,FSPA_FSPA,0.0,0.0,287,164630,31985,132645,573.6236933797909,0.19428415234161453,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:40.212319,0.000239,udp,147.32.84.138,40097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:41.295919,78.182312,tcp,147.32.84.134,37035.0,->,92.123.64.169,443.0,FSPA_FSPA,0.0,0.0,113,75055,7048,68007,664.2035398230089,0.09390447005529279,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:41.596438,0.00218,udp,147.32.84.134,36719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,87,381,234.0,0.1858974358974359,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:42.296826,2406.791992,udp,84.62.178.164,3391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:43.009965,0.004315,tcp,147.32.84.59,59244.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2024,1152,872,224.88888888888889,0.5691699604743083,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:31:43.510214,0.369606,udp,147.32.84.229,13363.0,<->,1.173.167.189,21896.0,CON,0.0,0.0,4,3005,60,2945,751.25,0.019966722129783693,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:46.133833,0.000328,udp,147.32.84.94,45710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:46.375452,138.009628,tcp,147.32.86.171,3895.0,->,74.125.232.212,80.0,FSPA_FSPA,0.0,0.0,53,34527,6463,28064,651.4528301886793,0.18718683928519708,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:31:46.503864,30.345694,tcp,147.32.84.59,44929.0,->,88.198.20.218,80.0,SRPA_SPA,0.0,0.0,15,1280,839,441,85.33333333333333,0.65546875,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:31:46.998667,0.247962,udp,147.32.84.134,52697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:47.247125,0.247741,udp,147.32.84.134,46059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:31:47.944134,61.278423,tcp,147.32.84.165,1069.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:31:48.520408,0.000216,udp,147.32.84.59,62660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:50.947926,0.000808,udp,81.149.98.174,38176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,79,481,280.0,0.14107142857142857,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:31:50.995548,0.232853,tcp,147.32.84.170,43450.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:31:51.511634,0.000335,udp,147.32.86.155,52226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,80,142,111.0,0.36036036036036034,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:51.821676,0.134965,tcp,147.32.84.168,56971.0,->,77.78.99.21,80.0,SRPA_FSPA,0.0,0.0,8,1831,991,840,228.875,0.5412342981977062,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:31:55.072129,0.000299,udp,147.32.84.138,45832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:31:58.991858,3599.723877,udp,147.32.84.229,13363.0,<->,79.173.230.183,55128.0,CON,0.0,0.0,6,884,698,186,147.33333333333334,0.7895927601809954,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:00.277349,1.71961,tcp,147.32.84.59,2749.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1738,1110,628,173.8,0.6386651323360184,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:32:00.687376,639.127258,udp,147.32.84.229,13363.0,->,220.140.105.141,41372.0,INT,0.0,,9,1329,1329,0,147.66666666666666,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:01.191710,12.603705,tcp,147.32.84.59,1582.0,->,66.220.153.27,80.0,FSA_FSA,0.0,0.0,7,486,276,210,69.42857142857143,0.5679012345679012,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:32:02.618327,0.274014,tcp,147.32.86.168,58660.0,->,74.125.232.213,443.0,FSPA_FSPA,0.0,0.0,19,4908,1702,3206,258.3157894736842,0.34678076609616953,14,1,flow=Background-google-webmail,Background,-1 2011-08-16 14:32:03.127861,823.251343,tcp,147.32.84.59,2843.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,71,50780,3722,47058,715.2112676056338,0.07329657345411579,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:32:04.818661,121.005135,tcp,147.32.84.59,57494.0,->,195.113.232.73,80.0,FSPA_FSPA,0.0,0.0,41,24706,4925,19781,602.5853658536586,0.1993442888367198,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:32:06.137999,74.728203,tcp,147.32.84.59,40617.0,->,46.51.182.221,80.0,FSPA_FSPA,0.0,0.0,49,28047,5522,22525,572.3877551020408,0.19688380218918244,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:32:06.364010,0.000249,udp,147.32.84.19,42638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:06.646740,0.000308,udp,147.32.84.170,59756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:06.648598,0.018584,tcp,147.32.84.170,50093.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:06.835500,8.066584,tcp,147.32.84.165,1070.0,->,123.125.114.224,80.0,SRPA_SPA,0.0,0.0,8,915,529,386,114.375,0.5781420765027322,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:07.723299,1.286142,tcp,147.32.84.165,1071.0,->,123.125.115.150,80.0,FSPA_FSPA,0.0,0.0,10,981,557,424,98.1,0.5677879714576962,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:08.579882,0.879995,tcp,147.32.84.165,1072.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,11,4654,556,4098,423.09090909090907,0.11946712505371723,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:09.078293,0.000205,udp,147.32.84.138,55748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:09.421506,3086.383545,udp,69.14.144.56,19608.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,279,143,136,69.75,0.5125448028673835,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:10.424628,0.000489,udp,147.32.84.134,36080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:32:10.425823,240.046173,tcp,147.32.84.134,50409.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,33,6156,2711,3445,186.54545454545453,0.4403833658219623,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:32:12.028182,2337.333496,udp,147.32.84.94,7103.0,->,82.226.77.39,43274.0,INT,0.0,,12,1008,1008,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:12.349206,0.00016,udp,147.32.84.138,49885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:12.839289,0.009384,udp,147.32.84.132,60609.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,158,71,87,79.0,0.44936708860759494,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:12.840289,0.009374,udp,147.32.84.132,55135.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,174,71,103,87.0,0.40804597701149425,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:14.331305,15.062161,tcp,147.32.84.94,43105.0,->,147.32.80.13,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:32:15.739027,0.000236,udp,147.32.84.138,37635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:18.515887,3010.141113,udp,182.20.195.251,41325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:19.213394,0.928472,tcp,147.32.84.59,56374.0,->,63.245.209.92,443.0,FSPA_FSPA,0.0,0.0,19,5526,2121,3405,290.8421052631579,0.38382193268186754,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:32:20.586448,0.206664,tcp,147.32.86.20,3732.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29940,1029,28911,787.8947368421053,0.0343687374749499,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:32:25.257040,117.159264,tcp,147.32.84.25,59459.0,->,74.125.232.197,443.0,FSPA_FSPA,0.0,0.0,17,3615,2317,1298,212.64705882352942,0.6409405255878285,14,1,flow=Background-google-analytics6,Background,-1 2011-08-16 14:32:26.648984,0.018075,tcp,147.32.84.170,50096.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:31.213427,0.0,udp,192.168.88.79,63510.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:31.215056,0.0,udp,192.168.88.79,63705.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:31.927448,8.071528,tcp,147.32.84.165,1074.0,->,123.125.114.224,80.0,SRPA_SPA,0.0,0.0,8,915,529,386,114.375,0.5781420765027322,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:32.059955,9.072069,tcp,94.197.127.225,62481.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,6,448,148,300,74.66666666666667,0.33035714285714285,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:32:32.845873,1.296903,tcp,147.32.84.165,1075.0,->,123.125.115.150,80.0,FSPA_FSPA,0.0,0.0,10,981,557,424,98.1,0.5677879714576962,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:33.712379,0.88839,tcp,147.32.84.165,1076.0,->,123.125.115.150,80.0,SRPA_SPA,0.0,0.0,11,4654,556,4098,423.09090909090907,0.11946712505371723,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:32:33.911900,0.000201,udp,147.32.86.183,52751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,85,135,110.0,0.38636363636363635,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:36.646926,0.00039,udp,147.32.84.170,34184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:36.648953,0.01867,tcp,147.32.84.170,34933.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:42.017408,0.000102,udp,147.32.84.138,42775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:44.818465,25.818832,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,6,553,350,203,92.16666666666667,0.6329113924050633,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:32:46.465529,6.014275,udp,147.32.84.229,13363.0,->,213.133.142.195,41709.0,INT,0.0,,3,207,207,0,69.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:48.034962,3548.503174,udp,147.32.84.59,7525.0,<->,46.4.123.119,53012.0,CON,0.0,0.0,10159,9103034,1758740,7344294,896.0561078846343,0.1932037164751884,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:32:48.802126,61.270657,tcp,147.32.84.165,1078.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:32:49.938741,3031.391357,udp,147.32.84.229,13363.0,<->,201.13.167.239,55688.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:50.191883,0.000211,udp,147.32.84.59,58688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:51.139249,0.000868,udp,86.178.131.13,51560.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,77,508,292.5,0.13162393162393163,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:32:51.992742,0.000327,udp,147.32.84.170,38979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:32:52.606637,19.515486,tcp,147.32.86.155,51964.0,->,82.208.44.86,80.0,FSPA_FSPA,0.0,0.0,252,226978,7023,219955,900.7063492063492,0.030941324709883776,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:32:57.059573,0.000249,udp,147.32.84.138,37430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:32:57.265872,1842.898315,udp,147.32.84.229,13363.0,->,41.135.27.252,7080.0,INT,0.0,,6,1119,1119,0,186.5,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:32:58.486513,0.373266,tcp,67.195.111.228,49626.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2027,731,1296,202.7,0.3606314750863345,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:33:00.521946,0.000217,udp,147.32.84.138,59103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:02.433414,0.000364,udp,147.32.84.138,49122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:04.215998,0.000156,udp,147.32.84.138,43790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:14.743118,3067.862549,udp,98.174.155.254,14345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:21.376076,0.000272,udp,147.32.84.138,41372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:22.001114,0.000257,udp,147.32.84.170,37990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:33:22.087277,0.052163,udp,147.32.84.134,36932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,88,233,160.5,0.27414330218068533,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:22.139853,0.033718,udp,147.32.84.134,45112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,510,88,422,255.0,0.17254901960784313,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:22.140883,0.000312,udp,147.32.84.138,57116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:22.614227,0.000405,udp,147.32.84.138,60020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:23.659916,325.838593,tcp,147.32.84.134,44251.0,->,92.122.212.203,443.0,FSRPA_FSPA,0.0,0.0,317,265654,10763,254891,838.02523659306,0.04051510611547351,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:23.660590,325.837189,tcp,147.32.84.134,44252.0,->,92.122.212.203,443.0,FSRPA_FSPA,0.0,0.0,170,146854,5475,141379,863.8470588235294,0.03728192626690455,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:24.054735,0.000191,udp,147.32.84.138,58241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:25.624449,0.000301,udp,147.32.84.59,59249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:25.790146,0.024446,udp,182.40.130.188,31756.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,941,75,866,470.5,0.07970244420828905,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:25.933854,0.000336,udp,147.32.84.138,37637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:26.649883,0.000325,udp,147.32.84.170,49995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:33:26.650962,0.018742,tcp,147.32.84.170,50108.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:33:27.283877,6.187451,tcp,76.164.193.171,80.0,->,147.32.84.69,819.0,SA_,0.0,,2,124,124,0,62.0,1.0,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:33:28.397773,0.000213,udp,147.32.84.138,41895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:30.518049,0.021319,udp,147.32.84.59,55402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:30.541581,2123.01709,udp,147.32.84.229,13363.0,<->,204.116.142.103,63612.0,CON,0.0,0.0,4,527,288,239,131.75,0.5464895635673624,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:30.905427,0.075547,udp,147.32.84.229,13363.0,<->,89.140.244.228,6275.0,CON,0.0,0.0,2,257,195,62,128.5,0.7587548638132295,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:31.121739,0.000173,udp,147.32.84.138,58984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:33.880945,0.000565,udp,147.32.84.59,34902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,74,129,101.5,0.3645320197044335,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:36.185508,32.035465,tcp,147.32.84.134,44256.0,->,92.122.212.203,443.0,FSPA_FSPA,0.0,0.0,15,1932,761,1171,128.8,0.39389233954451347,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.185981,0.002483,udp,147.32.84.134,37500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,628,87,541,314.0,0.13853503184713375,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.185984,0.00037,udp,147.32.84.134,60940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.186443,0.000698,udp,147.32.84.134,55840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,87,232,159.5,0.2727272727272727,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.186598,0.00091,udp,147.32.84.134,42444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.189158,32.021496,tcp,147.32.84.134,53194.0,->,92.123.64.171,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.189169,32.021858,tcp,147.32.84.134,53196.0,->,92.123.64.171,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.189276,32.021858,tcp,147.32.84.134,53199.0,->,92.123.64.171,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.189955,32.028221,tcp,147.32.84.134,55545.0,->,80.239.149.11,443.0,FSPA_FSPA,0.0,0.0,16,1998,827,1171,124.875,0.4139139139139139,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.189959,32.021309,tcp,147.32.84.134,55546.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,14,1866,761,1105,133.28571428571428,0.4078242229367631,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.191627,302.13681,tcp,147.32.84.134,53031.0,->,69.171.242.13,443.0,FSPA_FSPA,0.0,0.0,31,6905,1504,5401,222.74193548387098,0.2178131788559015,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.197660,32.02198,tcp,147.32.84.134,44177.0,->,2.21.99.206,443.0,FSPA_FSPA,0.0,0.0,16,1993,822,1171,124.5625,0.4124435524335173,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:36.197667,32.0149,tcp,147.32.84.134,44178.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,14,1861,756,1105,132.92857142857142,0.4062332079527136,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:33:37.335820,0.000774,udp,62.205.187.227,46124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,75,485,280.0,0.13392857142857142,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:41.026619,0.10474,udp,147.32.84.164,41096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:33:41.131679,0.000277,udp,147.32.84.164,53123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:33:42.482408,0.000231,udp,147.32.84.59,60425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:46.622040,0.031161,udp,147.32.85.26,60764.0,<->,188.2.113.223,64674.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:49.652060,61.278946,tcp,147.32.84.165,1081.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:33:51.715789,0.000986,udp,206.51.178.121,64165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,985,77,908,492.5,0.07817258883248732,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:53.861257,0.000223,udp,147.32.84.138,41164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:33:55.768425,3509.037842,udp,147.32.84.94,7103.0,<->,94.210.129.83,7210.0,CON,0.0,0.0,200,162395,159287,3108,811.975,0.980861479725361,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:55.788578,0.002188,udp,27.153.35.25,11981.0,->,147.32.87.218,48150.0,INT,0.0,,2,144,144,0,72.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:33:55.841673,5.476761,tcp,66.194.55.249,28696.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,36,21835,1605,20230,606.5277777777778,0.0735058392489123,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:33:56.010529,2441.549805,udp,147.32.84.229,13363.0,<->,122.30.191.253,25040.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:33:56.431489,0.022066,tcp,147.32.85.123,46200.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:33:56.648666,0.000417,udp,147.32.84.170,47478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:33:57.077931,263.680176,tcp,147.32.84.59,3437.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,109,84564,2972,81592,775.816513761468,0.03514497895085379,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:33:57.363702,2703.329346,tcp,147.32.84.59,3511.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,36,9716,5278,4438,269.8888888888889,0.5432276657060519,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:33:57.596250,0.000274,udp,147.32.85.34,63493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:01.004566,3129.74585,udp,147.32.84.59,7674.0,<->,200.136.9.183,12170.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:02.120826,0.00027,udp,147.32.85.7,34751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,72,227,149.5,0.2408026755852843,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:02.599739,0.000322,udp,147.32.84.138,55835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:02.960224,10.755559,tcp,147.32.84.59,1627.0,->,92.123.64.155,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:03.996762,0.000192,udp,147.32.84.59,57554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:04.279852,296.233795,tcp,147.32.84.59,3551.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,2501,1453,1048,147.11764705882354,0.580967612954818,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:34:05.111238,0.118772,udp,147.32.84.59,57824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,86,160,123.0,0.34959349593495936,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:06.646966,0.00035,udp,147.32.84.170,41881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:06.647832,0.000448,udp,147.32.84.170,47758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:06.649033,0.018264,tcp,147.32.84.170,34951.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:08.954306,0.000238,udp,147.32.84.59,63084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:09.275186,10.027817,tcp,147.32.86.208,4019.0,->,209.85.148.105,80.0,FSRPA_FSPA,0.0,0.0,43,25252,7599,17653,587.2558139534884,0.3009266592745129,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:09.380846,0.000396,udp,147.32.86.208,49439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:10.267561,0.000452,udp,147.32.86.192,56947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:10.763211,19.375156,tcp,147.32.84.59,54194.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:10.894913,0.002047,udp,147.32.86.155,57009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,80,174,127.0,0.31496062992125984,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:10.932945,0.003243,udp,147.32.86.155,64874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,74,195,134.5,0.275092936802974,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:13.054595,0.032747,udp,147.32.84.59,65482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,420,73,347,210.0,0.1738095238095238,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:13.212180,8.958149,tcp,147.32.84.170,54821.0,->,87.248.203.253,80.0,FSPA_FSPA,0.0,0.0,12,1955,1384,571,162.91666666666666,0.7079283887468031,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.212346,8.957555,tcp,147.32.84.170,54822.0,->,87.248.203.253,80.0,FSPA_FSPA,0.0,0.0,12,2191,1384,807,182.58333333333334,0.6316750342309447,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.212368,8.95795,tcp,147.32.84.170,54824.0,->,87.248.203.253,80.0,FSPA_FSPA,0.0,0.0,12,1951,1381,570,162.58333333333334,0.707842132239877,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.212982,0.031861,udp,147.32.84.170,43525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.237220,0.018923,udp,147.32.84.59,63925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,419,73,346,209.5,0.17422434367541767,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:13.245268,0.00237,udp,147.32.84.170,44652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,74,386,230.0,0.1608695652173913,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.248291,18.906441,tcp,147.32.84.170,51160.0,->,195.113.232.80,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.334142,0.000655,udp,147.32.84.170,37712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.419495,8.375503,tcp,147.32.84.170,38451.0,->,66.235.138.44,80.0,SA_SRA,0.0,0.0,4,278,140,138,69.5,0.5035971223021583,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.419554,8.921482,tcp,147.32.84.170,38452.0,->,66.235.138.44,80.0,SPA_SRPA,0.0,0.0,9,3012,2017,995,334.6666666666667,0.6696547144754316,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.495466,0.000354,udp,147.32.84.170,48421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:13.496201,0.196448,udp,147.32.84.170,58048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,78,166,122.0,0.319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:14.960817,143.928299,tcp,194.108.204.27,35312.0,->,147.32.84.138,8080.0,SPA_FSPA,0.0,0.0,101,32597,20722,11875,322.74257425742576,0.6357026720250329,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:15.953209,0.000186,udp,147.32.86.155,51768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:15.954227,0.000482,udp,147.32.86.155,56415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:16.649989,0.000372,udp,147.32.84.170,60051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:17.374482,0.000319,udp,147.32.84.59,59734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,74,136,105.0,0.3523809523809524,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:18.276013,2432.665771,tcp,147.32.85.20,49593.0,->,209.85.148.193,443.0,SPA_FSRPA,0.0,0.0,42,13521,3600,9921,321.92857142857144,0.26625249611715107,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:20.349614,0.000768,udp,80.101.137.30,45070.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:34:22.152873,60.758286,tcp,147.32.86.172,58871.0,->,69.171.228.20,443.0,SRPA_SPA,0.0,0.0,14,6283,1280,5003,448.7857142857143,0.20372433550851504,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:22.317575,0.166702,tcp,147.32.86.58,1161.0,->,178.21.152.13,80.0,FSPA_FSPA,0.0,0.0,9,1968,1104,864,218.66666666666666,0.5609756097560976,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:23.534871,5.994457,icmp,95.25.119.97,771.0,->,147.32.84.229,14446.0,URP,0.0,,3,399,399,0,133.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:34:23.999954,0.230038,tcp,147.32.84.170,43489.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:26.648445,0.000366,udp,147.32.84.170,50412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:27.379886,2430.527832,udp,89.178.148.205,61997.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:34:30.889868,0.000334,udp,147.32.85.89,53965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:31.201465,0.000294,udp,147.32.84.138,37439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:31.217009,0.000274,udp,147.32.84.138,58340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:33.493190,10.039529,tcp,147.32.84.59,62667.0,->,74.125.232.206,443.0,FSRPA_SPA,0.0,0.0,14,3587,881,2706,256.2142857142857,0.24560914413158627,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:35.475464,377.012787,udp,147.32.84.229,13363.0,<->,193.59.44.198,16471.0,CON,0.0,0.0,16,1320,795,525,82.5,0.6022727272727273,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:34:39.144042,11.125789,tcp,147.32.84.59,54242.0,->,202.137.235.27,80.0,FSPA_FSPA,0.0,0.0,11,2407,1290,1117,218.8181818181818,0.5359368508516826,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:39.146327,11.137584,tcp,147.32.84.59,54243.0,->,202.137.235.27,80.0,FSPA_FSPA,0.0,0.0,11,2397,1288,1109,217.9090909090909,0.5373383395911556,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:34:39.376799,15.209001,icmp,208.102.208.124,259.0,->,147.32.84.94,53350.0,URH,0.0,,4,448,448,0,112.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:34:41.971291,0.889354,tcp,147.32.86.20,3836.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29009,1029,27980,763.3947368421053,0.035471750146506255,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:48.301637,0.000239,udp,147.32.84.59,64765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:34:50.508269,61.269241,tcp,147.32.84.165,1082.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:34:51.221035,0.000566,udp,61.56.71.214,3161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:34:54.999801,0.000255,udp,147.32.84.170,37973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:56.660989,0.000392,udp,147.32.84.170,41464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:34:57.670175,115.447556,tcp,147.32.86.182,53210.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,18,5301,3897,1404,294.5,0.735144312393888,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:34:57.925350,2.209593,udp,147.32.87.238,39371.0,<->,174.89.61.239,24943.0,CON,0.0,0.0,3,206,146,60,68.66666666666667,0.7087378640776699,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:34:58.660441,2478.939453,udp,147.32.84.94,7103.0,->,84.75.21.83,23617.0,INT,0.0,,10,840,840,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:35:00.578317,3046.330078,udp,78.105.68.235,64649.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:05.596601,3045.910645,udp,77.240.185.162,35455.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:06.649203,0.000499,udp,147.32.84.170,36103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:06.650080,0.000375,udp,147.32.84.170,48566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:08.133434,2362.371826,udp,147.32.84.59,52996.0,<->,67.84.6.182,12213.0,CON,0.0,0.0,4,685,151,534,171.25,0.22043795620437956,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:35:09.968189,0.310378,tcp,147.32.86.223,8918.0,->,147.228.47.183,8009.0,FSRPA_FSPA,0.0,0.0,12,2027,1016,1011,168.91666666666666,0.501233349777997,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:35:12.109587,0.000153,udp,147.32.84.138,33203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:13.938794,0.216411,tcp,147.32.84.59,52360.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1569,695,874,196.125,0.4429572976418101,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:35:14.944457,816.529053,udp,84.107.63.172,2773.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,431,238,193,107.75,0.5522041763341067,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:16.783054,0.000274,udp,147.32.84.138,57764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:17.467646,0.008377,icmp,147.32.86.92,8.0,<->,209.85.148.106,29523.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,14,0,flow=Background,Background,-1 2011-08-16 14:35:17.629928,0.000318,udp,147.32.84.138,37825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:20.584069,0.000198,udp,147.32.84.59,52796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:23.230238,0.048256,udp,147.32.84.59,56776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,91,499,295.0,0.15423728813559323,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:24.162018,3555.005859,udp,125.224.7.10,2758.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3249,122,3127,541.5,0.03755001538935057,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:24.512912,3456.037109,udp,125.30.51.145,47710.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,959,621,338,159.83333333333334,0.6475495307612096,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:24.597000,0.0,udp,147.32.84.199,427.0,->,192.168.88.186,59217.0,INT,0.0,,1,325,325,0,325.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:35:26.000090,0.000346,udp,147.32.84.170,36621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:26.001435,0.226783,tcp,147.32.84.170,34245.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:26.647909,0.000367,udp,147.32.84.170,43297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:26.648775,0.0003,udp,147.32.84.170,43483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:26.769258,617.448059,udp,194.126.146.46,47209.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,546,422,124,136.5,0.7728937728937729,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:27.244166,0.000195,udp,147.32.84.138,59846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:28.651365,247.231079,tcp,147.32.84.59,54283.0,->,74.125.232.213,443.0,FSRPA_FSRPA,0.0,0.0,28,2485,1302,1183,88.75,0.523943661971831,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:35:30.922256,1299.182007,udp,147.32.84.229,13363.0,<->,126.108.109.207,34425.0,CON,0.0,0.0,4,269,149,120,67.25,0.5539033457249071,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:33.130836,0.017439,udp,147.32.84.170,59123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,79,203,141.0,0.2801418439716312,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:35.179111,3173.318359,udp,147.32.84.229,13363.0,<->,46.47.73.38,37502.0,CON,0.0,0.0,10,678,378,300,67.8,0.5575221238938053,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:36.652068,0.018246,tcp,147.32.84.170,42041.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:38.833189,3119.260986,udp,147.32.85.2,31604.0,<->,98.208.99.199,1582.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:40.757553,0.000411,udp,147.32.84.134,35051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.458689,15.5253,tcp,147.32.84.184,54485.0,->,129.16.113.252,65258.0,FSPA_FSPA,0.0,0.0,24,1703,836,867,70.95833333333333,0.4908984145625367,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:35:41.684133,20.026428,tcp,147.32.84.134,35084.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.684499,10.017134,tcp,147.32.84.134,35088.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.684878,0.010009,udp,147.32.84.134,45472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.685956,246.550751,tcp,147.32.84.134,39159.0,->,74.125.232.201,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.689374,0.000352,udp,147.32.84.134,37347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.689378,20.030191,tcp,147.32.84.134,43282.0,->,209.85.149.132,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.697498,0.000297,udp,147.32.84.134,39298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.706673,20.003885,tcp,147.32.84.134,48123.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.709197,20.001369,tcp,147.32.84.134,45428.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.821090,19.889763,tcp,147.32.84.134,35192.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.821168,19.889404,tcp,147.32.84.134,35193.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.821368,19.881918,tcp,147.32.84.134,35197.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:41.855934,0.111302,udp,147.32.84.59,43725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,80,208,144.0,0.2777777777777778,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:41.936364,0.247998,udp,147.32.84.134,38944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.681760,0.000426,udp,147.32.84.134,37913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.683125,245.554092,tcp,147.32.84.134,48236.0,->,74.125.232.196,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.985199,0.000371,udp,147.32.84.134,39868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.986035,0.000485,udp,147.32.84.134,32994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.987012,0.00028,udp,147.32.84.134,43384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.989033,0.000257,udp,147.32.84.134,37539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.993834,0.00023,udp,147.32.84.134,35905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.995747,0.000447,udp,147.32.84.134,53512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.997566,0.000348,udp,147.32.84.134,41138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,80,493,286.5,0.13961605584642234,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.997815,0.00025,udp,147.32.84.134,40065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.997825,0.000307,udp,147.32.84.134,46441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.998492,0.000449,udp,147.32.84.134,35464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.998564,0.000527,udp,147.32.84.134,44499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:42.999490,0.00031,udp,147.32.84.134,46885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:43.137227,271.685699,tcp,147.32.84.134,35204.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,640,504075,64558,439517,787.6171875,0.1280722114764668,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:43.723395,0.000445,udp,147.32.86.20,54825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:45.872243,0.000261,udp,147.32.84.138,56870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:46.706746,1.820116,tcp,147.32.84.59,50188.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,1472,760,712,133.8181818181818,0.5163043478260869,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:35:48.212974,0.307684,tcp,147.32.86.168,55691.0,->,217.163.21.37,443.0,FSPA_SRPA,0.0,0.0,25,14975,8432,6543,599.0,0.5630717863105176,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:35:48.373678,2445.283447,udp,193.11.109.61,46353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,3779,637,3142,377.9,0.16856311193437418,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:48.675021,249.560913,tcp,147.32.84.134,51720.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:48.675085,249.560486,tcp,147.32.84.134,51721.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:48.675089,0.000318,udp,147.32.84.134,44680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:48.675131,249.56102,tcp,147.32.84.134,51722.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:48.675459,249.562378,tcp,147.32.84.134,39111.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,31,4560,1538,3022,147.09677419354838,0.33728070175438596,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:48.676422,0.000325,udp,147.32.84.134,44746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:50.096033,264.726471,tcp,147.32.84.134,35220.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,746,625954,65515,560439,839.0804289544236,0.10466424050329577,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:50.263872,264.566772,tcp,147.32.84.134,35224.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,894,746183,80390,665793,834.6565995525727,0.10773496581937675,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:50.451667,0.000281,udp,147.32.84.138,45425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:51.356105,61.26302,tcp,147.32.84.165,1083.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:35:52.386841,0.00032,udp,147.32.84.59,57901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:54.023543,240.812225,tcp,147.32.84.134,43344.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,23,4012,1317,2695,174.43478260869566,0.3282652043868395,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:54.043924,260.779022,tcp,147.32.84.134,35228.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,698,584172,59252,524920,836.9226361031518,0.10142903117574961,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:54.046558,250.773788,tcp,147.32.84.134,41792.0,->,74.125.232.211,80.0,FSPA_FSPA,0.0,0.0,35,9424,2564,6860,269.25714285714287,0.2720713073005093,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:54.219764,260.610962,tcp,147.32.84.134,45416.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,126,79781,17124,62657,633.1825396825396,0.2146375703488299,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:54.468614,55.500713,tcp,147.32.84.59,50523.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,10,2031,690,1341,203.1,0.3397341211225997,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:35:54.692611,0.000349,udp,147.32.84.59,40250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:56.146884,0.000345,udp,147.32.84.59,53904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,82,156,119.0,0.3445378151260504,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:56.546152,2702.456299,udp,88.250.219.91,42630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:56.649470,0.000496,udp,147.32.84.170,42542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:56.650542,0.000452,udp,147.32.84.170,34465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:56.651774,0.019985,tcp,147.32.84.170,42420.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:56.999617,0.000402,udp,147.32.84.170,38396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:35:57.074713,0.000572,udp,112.167.240.162,21172.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:35:57.335895,0.000241,udp,147.32.85.25,45398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:58.047855,0.000318,udp,147.32.85.117,56524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:58.167460,0.000196,udp,147.32.85.34,62561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:35:59.272399,255.550674,tcp,147.32.84.134,45424.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,100,57368,13277,44091,573.68,0.23143564356435645,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:35:59.451065,0.000311,udp,147.32.86.168,46640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,72,209,140.5,0.25622775800711745,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:00.477940,0.00029,udp,147.32.84.138,49403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:01.611495,0.000253,udp,147.32.84.170,46907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:36:01.613770,270.784668,tcp,147.32.84.170,33526.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,34,10451,7643,2808,307.38235294117646,0.7313175772653334,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:36:01.682648,0.000326,udp,147.32.84.138,40696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:03.161916,0.00027,udp,147.32.84.194,58365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:05.377701,2554.3479,tcp,147.32.85.88,61649.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,49,20482,6326,14156,418.0,0.3088565569768577,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:36:05.981475,0.000222,udp,147.32.84.134,44587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:36:06.016464,248.80574,tcp,147.32.84.134,35183.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,322,270569,23916,246653,840.276397515528,0.08839150087408387,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:36:06.019618,248.802505,tcp,147.32.84.134,43671.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,177,135278,11997,123281,764.2824858757062,0.08868404322949777,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:36:06.019782,248.809799,tcp,147.32.84.134,43672.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,142,95106,10083,85023,669.7605633802817,0.10601854772569554,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:36:06.208494,0.000291,udp,147.32.86.164,58275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,77,222,149.5,0.25752508361204013,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:07.850617,0.079499,tcp,147.32.84.59,52900.0,->,74.125.232.195,80.0,FSRPA_FSPA,0.0,0.0,10,1686,997,689,168.6,0.5913404507710558,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:36:08.458457,0.000247,udp,147.32.84.138,58493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:08.975136,245.855789,tcp,147.32.84.134,48742.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,33,10328,4453,5875,312.969696969697,0.43115801704105344,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:36:11.849117,3101.358887,udp,188.118.4.79,17319.0,->,147.32.85.5,21857.0,INT,0.0,,21,3249,3249,0,154.71428571428572,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:36:14.329092,3375.996582,udp,62.221.95.238,9137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,506,382,124,126.5,0.7549407114624506,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:36:17.014744,0.000234,udp,147.32.84.138,53194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:18.948083,0.000345,udp,147.32.84.59,62754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:19.299369,0.000371,udp,147.32.85.5,58544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:19.901858,3008.376221,udp,147.32.84.59,33556.0,<->,131.247.136.94,62246.0,CON,0.0,0.0,5,345,225,120,69.0,0.6521739130434783,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:36:20.949140,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.38,17681.0,ECR,,0.0,2,196,0,196,98.0,0.0,14,0,flow=Background,Background,-1 2011-08-16 14:36:21.776780,0.000267,udp,147.32.84.138,54878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:23.538466,0.000428,udp,147.32.85.25,43500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:24.867548,0.000331,udp,147.32.84.59,52824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,87,229,158.0,0.27531645569620256,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:28.002477,0.217858,tcp,147.32.84.170,34257.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:36:34.841120,0.000278,udp,147.32.84.19,50075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:37.553322,0.000427,udp,147.32.84.138,36753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:40.680512,0.000232,udp,147.32.84.138,32991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:41.743826,0.000877,udp,109.195.19.104,16551.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:36:43.496336,0.183873,udp,147.32.84.59,50236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,80,160,120.0,0.3333333333333333,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:44.588021,305.614349,tcp,147.32.84.59,54369.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,34,12093,6666,5427,355.6764705882353,0.5512279831307368,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:36:46.606603,0.000221,udp,147.32.84.138,55967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:46.651450,0.017899,tcp,147.32.84.170,34356.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:36:47.615486,0.000352,udp,147.32.84.138,35713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:50.212710,0.000233,udp,147.32.84.138,55815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:50.351134,0.000284,udp,147.32.85.25,51940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:36:52.205371,61.271519,tcp,147.32.84.165,1084.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:36:52.361123,7.884029,tcp,147.32.84.168,57066.0,->,88.86.101.2,80.0,SRA_FSPA,0.0,0.0,7,632,246,386,90.28571428571429,0.38924050632911394,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:36:54.698762,3.191491,tcp,66.249.66.10,52306.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,26,11758,1576,10182,452.2307692307692,0.1340364007484266,14,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 14:36:56.289703,0.000765,udp,173.74.5.32,30218.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,80,66,73.0,0.547945205479452,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:36:56.648214,0.000355,udp,147.32.84.170,57902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:36:58.735753,23.634104,tcp,85.92.40.146,53118.0,->,147.32.85.34,80.0,SRPA_FSPA,0.0,0.0,12,3034,1273,1761,252.83333333333334,0.4195781147000659,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:36:58.997850,0.000234,udp,147.32.84.170,52204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:00.280166,0.000205,udp,147.32.84.138,60585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:00.679165,0.000174,udp,147.32.85.25,45698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:01.617659,0.09478,udp,147.32.84.229,13363.0,<->,79.1.236.85,11079.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:02.581718,15.349712,udp,147.32.84.94,7103.0,->,92.106.125.41,63798.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:37:06.650196,0.000326,udp,147.32.84.170,43131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:06.652302,0.018159,tcp,147.32.84.170,34359.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:08.220547,0.000567,udp,82.156.203.120,52246.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:08.641492,2457.870117,udp,147.32.84.229,13363.0,<->,68.39.227.225,64455.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:09.375574,0.002119,udp,109.168.179.153,52212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,502,60,281.0,0.8932384341637011,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:13.798875,0.005319,udp,147.32.86.168,58747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,72,225,148.5,0.24242424242424243,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:14.018663,0.001168,udp,147.32.84.19,34722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,85,195,140.0,0.30357142857142855,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:16.651642,0.017922,tcp,147.32.84.170,41354.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:17.481916,0.763604,tcp,137.215.6.53,48774.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1534,936,598,153.4,0.6101694915254238,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:37:17.571854,0.000373,udp,147.32.84.138,40743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:18.489642,0.000619,udp,80.1.108.145,56309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:21.927901,0.000292,udp,147.32.84.59,53467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,82,182,132.0,0.3106060606060606,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:22.983162,198.882324,udp,147.32.84.94,7103.0,<->,95.170.148.42,22666.0,CON,0.0,0.0,52,37177,36121,1056,714.9423076923077,0.9715953412055841,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:23.032498,0.000243,udp,147.32.84.138,51128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:23.692187,0.53334,tcp,147.32.84.59,50537.0,->,207.171.166.37,80.0,SRPA_FSPA,0.0,0.0,20,13860,5925,7935,693.0,0.4274891774891775,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:37:23.783836,0.000353,udp,147.32.84.59,62177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,608,94,514,304.0,0.15460526315789475,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:25.622184,0.000818,udp,109.227.230.157,28417.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,318,64,254,159.0,0.20125786163522014,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:26.027102,1893.667114,udp,147.32.84.59,15675.0,<->,89.102.159.12,4848.0,CON,0.0,0.0,6,805,553,252,134.16666666666666,0.6869565217391305,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:37:26.648589,0.000524,udp,147.32.84.170,52438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:26.650705,0.018404,tcp,147.32.84.170,38032.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:27.546358,0.00019,udp,147.32.85.7,38666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,77,167,122.0,0.3155737704918033,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:28.679180,0.216126,udp,46.135.14.10,22094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,261,170,91,130.5,0.6513409961685823,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:29.996371,0.00036,udp,147.32.84.170,33720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:33.234603,0.003968,udp,193.28.178.182,1963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,74,495,284.5,0.13005272407732865,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:33.458462,0.000216,udp,147.32.85.34,59939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:33.919377,0.000263,udp,147.32.84.138,41085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:35.852898,0.000247,udp,147.32.84.138,52751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:36.553827,0.000578,udp,147.32.85.36,48020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,75,230,152.5,0.2459016393442623,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:36.643631,0.000316,udp,147.32.84.138,48671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:36.652296,0.018522,tcp,147.32.84.170,34363.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:37.788097,8.357121,tcp,147.32.85.7,38477.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,12,2356,1372,984,196.33333333333334,0.5823429541595926,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:37:39.203818,6.004871,udp,147.32.84.229,13363.0,->,77.34.88.88,58191.0,INT,0.0,,3,192,192,0,64.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:37:39.639365,18.749981,tcp,147.32.84.59,2763.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:37:41.261384,95.479057,udp,147.32.84.94,7103.0,->,178.10.134.100,7468.0,INT,0.0,,2,160,160,0,80.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:37:41.351274,0.203268,udp,147.32.84.59,59474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,70,226,148.0,0.23648648648648649,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:41.444600,3046.831543,udp,91.140.173.68,54826.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:41.612592,19.197815,tcp,147.32.84.59,49011.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:37:42.690797,0.000223,udp,147.32.86.86,58204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,82,132,107.0,0.38317757009345793,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:46.292534,0.00022,udp,147.32.84.138,47753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:46.652136,0.018672,tcp,147.32.84.170,38035.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:49.998821,0.000154,udp,147.32.84.138,49420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:50.522818,1725.532227,udp,147.32.84.94,7103.0,<->,188.255.13.191,62429.0,CON,0.0,0.0,131,106055,104003,2052,809.5801526717557,0.9806515487247183,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:52.757475,2398.958984,udp,149.5.45.4,43020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3785,252,3533,473.125,0.0665785997357992,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:53.051703,61.287769,tcp,147.32.84.165,1085.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:37:53.452711,0.132878,udp,147.32.84.229,13363.0,<->,98.15.207.199,63342.0,CON,0.0,0.0,4,3017,60,2957,754.25,0.019887305270135897,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:53.876169,2790.192627,udp,147.32.84.59,60276.0,<->,149.5.45.8,443.0,CON,0.0,0.0,4,274,150,124,68.5,0.5474452554744526,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:37:53.999117,3593.623779,udp,76.23.23.228,28536.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,6565,3082,3483,656.5,0.46945925361766944,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:37:54.979060,0.000296,udp,147.32.86.155,62737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:56.649520,0.000547,udp,147.32.84.170,41964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:37:57.715113,0.000211,udp,147.32.85.34,50957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:57.723525,0.000302,udp,147.32.85.34,49877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:37:58.334765,0.000484,udp,147.32.84.59,53937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:00.535735,2156.314209,udp,188.169.177.244,18289.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1519,1147,372,126.58333333333333,0.7551020408163265,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:38:00.990751,0.000301,udp,147.32.84.170,44657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:00.991653,0.000371,udp,147.32.84.170,60422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:01.719791,0.000371,udp,147.32.84.59,50288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:02.891447,0.000271,udp,147.32.86.143,61657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:04.494984,0.00035,udp,147.32.84.59,63126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,84,320,202.0,0.2079207920792079,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:05.701592,0.175336,udp,147.32.84.59,59522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,75,141,108.0,0.3472222222222222,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:05.997001,0.176474,udp,147.32.86.168,47033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,81,142,111.5,0.3632286995515695,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:13.408549,0.000243,udp,147.32.84.138,33489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:13.777475,0.292044,tcp,147.32.84.170,54229.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:14.039819,0.00033,udp,147.32.84.170,53024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:14.041723,240.046707,tcp,147.32.84.170,60571.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:15.436085,53.172356,tcp,78.138.36.146,52671.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,109,29370,17947,11423,269.44954128440367,0.6110657133129044,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:38:16.650352,0.000282,udp,147.32.84.170,53285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:17.580924,0.000332,udp,147.32.84.138,34239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:18.300259,0.357487,tcp,147.32.87.4,38233.0,->,147.32.80.7,25.0,FSPA_FSPA,0.0,0.0,627,574573,559840,14733,916.384370015949,0.9743583495917838,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:38:20.944433,0.000448,udp,147.32.86.168,60470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:24.425754,1.41793,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,306,152,154,102.0,0.49673202614379086,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:38:25.347450,0.002009,udp,76.29.19.143,13422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:38:25.856585,139.740402,tcp,147.32.84.165,1086.0,->,222.73.45.135,81.0,SRPA_SRPA,0.0,0.0,16,3574,964,2610,223.375,0.2697257974258534,14,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 14:38:26.140826,0.000305,udp,147.32.84.138,53537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:26.650169,0.000435,udp,147.32.84.170,58720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:26.651303,0.018241,tcp,147.32.84.170,56613.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:27.830682,0.000281,udp,147.32.85.7,39062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,84,140,112.0,0.375,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:29.061991,0.016124,tcp,147.32.85.74,58977.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:38:30.258553,2177.200439,udp,147.32.84.59,58884.0,<->,68.9.124.208,5052.0,CON,0.0,0.0,4,1934,154,1780,483.5,0.0796277145811789,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:38:31.003687,0.000221,udp,147.32.84.170,36364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:32.406415,1.938591,tcp,147.32.84.165,1088.0,->,222.73.45.135,81.0,SRPA_SPA,0.0,0.0,10,2613,671,1942,261.3,0.2567929582854956,14,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 14:38:33.458442,0.000342,udp,147.32.84.59,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:33.490256,0.000211,udp,147.32.84.59,57970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:34.345530,9.271288,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,6,559,355,204,93.16666666666667,0.6350626118067979,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:38:34.624513,0.000327,udp,147.32.84.59,52662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,87,139,113.0,0.38495575221238937,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:35.021192,0.000197,udp,147.32.84.138,41679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:36.648210,0.000375,udp,147.32.84.170,38597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:38.108189,0.426736,udp,147.32.84.229,13363.0,<->,121.221.179.160,65051.0,CON,0.0,0.0,2,139,78,61,69.5,0.5611510791366906,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:38:38.207593,0.000235,udp,147.32.84.138,53056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:41.966270,0.000391,udp,147.32.84.94,37945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:42.083408,0.000256,udp,147.32.84.94,39021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:43.617716,4.90997,tcp,147.32.84.165,1089.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,10,1080,570,510,108.0,0.5277777777777778,14,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 14:38:46.230948,0.00023,udp,147.32.84.138,41720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:46.245638,0.000155,udp,147.32.84.138,38326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:46.649424,0.000377,udp,147.32.84.170,49686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:46.651473,0.018333,tcp,147.32.84.170,56616.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:47.836061,0.000349,udp,147.32.84.59,56045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,80,493,286.5,0.13961605584642234,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:49.883558,135.719376,tcp,147.32.84.165,1090.0,->,222.73.45.135,81.0,SRPA_SRPA,0.0,0.0,24,14202,1027,13175,591.75,0.0723137586255457,14,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 14:38:51.618305,326.843964,tcp,147.32.84.59,53003.0,->,74.125.232.223,80.0,FSPA_FSPA,0.0,0.0,354,404403,9889,394514,1142.3813559322034,0.024453329970351358,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:38:53.111339,0.000353,udp,147.32.84.59,54271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:38:53.909403,61.298306,tcp,147.32.84.165,1091.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:38:54.491065,266.51059,tcp,147.32.85.120,42878.0,->,74.125.43.108,993.0,FSPA_FSPA,0.0,0.0,50,8795,2560,6235,175.9,0.2910744741330301,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:38:54.530100,0.000293,udp,118.173.88.36,23092.0,<->,147.32.86.110,31338.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:38:56.054526,325.127808,tcp,147.32.84.165,1092.0,->,222.73.45.106,88.0,SRPA_SPA,0.0,0.0,2022,1811163,54424,1756739,895.7284866468842,0.030049200430883362,14,1,flow=From-Botnet-V49-TCP-Established-HTTP-Binary-Download-11,Botnet,1 2011-08-16 14:38:56.439205,0.000448,udp,207.70.169.223,29176.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:38:56.651245,0.018895,tcp,147.32.84.170,34385.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:38:57.210374,0.980846,tcp,147.32.85.31,2382.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,13,3839,1873,1966,295.3076923076923,0.4878874706954936,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:39:00.420581,0.247775,udp,147.32.85.8,56108.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:00.603793,0.000153,udp,147.32.84.138,60185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:01.132974,612.654846,udp,83.8.36.105,58451.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:04.918112,0.000279,udp,147.32.84.138,36374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:06.650233,0.01822,tcp,147.32.84.170,41381.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:39:13.678515,3007.649658,udp,109.114.43.142,57336.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:14.198391,0.00184,udp,78.179.81.176,10051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:14.934211,0.001032,udp,213.33.220.238,50450.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,964,75,889,482.0,0.07780082987551867,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:19.332405,117.881332,tcp,147.32.86.208,4072.0,->,192.231.246.213,443.0,FSPA_FSPA,0.0,0.0,74,56861,7042,49819,768.3918918918919,0.12384586975255447,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:19.374818,0.035013,udp,147.32.86.208,54689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,362,150,212,90.5,0.4143646408839779,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:19.985046,0.157242,tcp,147.32.84.59,2861.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,12,3535,863,2672,294.5833333333333,0.24413012729844413,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:39:21.772934,18.022741,tcp,147.32.86.179,58901.0,->,69.171.242.11,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:23.451833,0.00022,udp,147.32.84.138,59612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:25.849786,15.260352,tcp,141.76.49.12,43553.0,->,147.32.86.92,443.0,FSRPA_FSPA,0.0,0.0,19,4086,2397,1689,215.05263157894737,0.5866372980910426,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:25.880775,0.181913,udp,147.32.84.59,49152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,80,124,102.0,0.39215686274509803,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:26.650023,0.017991,tcp,147.32.84.170,42088.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:39:27.451134,0.676028,udp,91.124.52.91,1821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,883,718,165,220.75,0.8131370328425821,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:32.000983,0.000344,udp,147.32.84.170,57133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:39:35.921596,0.22159,tcp,147.32.84.25,43548.0,->,81.176.228.4,80.0,FSPA_FSPA,0.0,0.0,10,1660,838,822,166.0,0.5048192771084338,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:35.973558,0.020313,udp,147.32.86.58,61357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:37.712476,3596.544922,udp,147.32.84.59,7525.0,<->,88.198.60.166,51012.0,CON,0.0,0.0,1430,1179252,823579,355673,824.6517482517482,0.6983910139647844,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:39:40.619003,0.000362,udp,147.32.84.59,62641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,74,168,121.0,0.30578512396694213,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:41.532313,0.000218,udp,147.32.84.59,60950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,75,169,122.0,0.3073770491803279,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:43.170827,0.000582,udp,95.25.79.142,13580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:47.082236,3034.293945,udp,147.32.84.229,13363.0,<->,95.246.71.83,6541.0,CON,0.0,0.0,8,682,395,287,85.25,0.5791788856304986,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:39:48.352914,0.000427,udp,147.32.84.21,47062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:50.365393,0.526784,tcp,147.32.84.25,48864.0,->,157.22.19.24,80.0,FSPA_FSPA,0.0,0.0,10,1765,891,874,176.5,0.5048158640226629,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:50.836621,0.025855,tcp,147.32.84.59,44796.0,->,93.185.96.114,80.0,FSPA_FSPA,0.0,0.0,10,1995,1243,752,199.5,0.6230576441102756,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:39:50.861124,0.021133,tcp,147.32.84.59,44802.0,->,93.185.96.114,80.0,FSPA_FSPA,0.0,0.0,14,5060,1375,3685,361.42857142857144,0.2717391304347826,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:39:51.180048,5.004151,tcp,147.32.85.123,46897.0,->,74.125.232.199,443.0,SRPA_SPA,0.0,0.0,8,1025,686,339,128.125,0.6692682926829269,14,1,flow=Background-google-analytics8,Background,-1 2011-08-16 14:39:51.700542,0.000359,udp,147.32.85.25,43610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:51.787172,0.000205,udp,147.32.85.25,50819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:52.252513,3281.984375,udp,147.32.84.94,7103.0,->,97.101.92.1,49153.0,INT,0.0,,16,1344,1344,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:39:52.431476,0.067438,udp,147.32.86.182,49808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,76,203,139.5,0.2724014336917563,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:54.777316,61.274448,tcp,147.32.84.165,1094.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:39:54.856951,0.21901,tcp,147.32.84.132,56181.0,->,89.185.249.91,80.0,SRPA_FSPA,0.0,0.0,10,3939,1133,2806,393.9,0.28763645595328763,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:54.919360,0.186691,tcp,147.32.84.25,43591.0,->,81.176.228.4,80.0,FSPA_FSPA,0.0,0.0,10,2011,838,1173,201.1,0.41670810542018893,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:39:56.649654,0.000306,udp,147.32.84.170,48478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:39:56.650736,0.017892,tcp,147.32.84.170,42468.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:39:56.843627,9.9e-05,udp,147.32.85.25,49294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:58.211132,0.000413,udp,147.32.85.34,52403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:58.266332,0.000198,udp,147.32.85.34,54425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:39:58.902320,2471.099609,udp,82.135.139.57,8080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1650,228,1422,275.0,0.13818181818181818,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:01.694559,0.000159,udp,147.32.84.59,57609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:01.920243,0.000208,udp,147.32.85.25,37372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:01.996893,0.000264,udp,147.32.85.25,34742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:06.648943,0.000341,udp,147.32.84.170,39338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:08.286203,0.000178,udp,147.32.87.40,52933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:09.299423,3206.503662,udp,147.32.84.229,13363.0,<->,130.132.149.31,64431.0,CON,0.0,0.0,4,389,136,253,97.25,0.3496143958868895,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:10.219076,0.000817,udp,98.247.249.32,44691.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,76,480,278.0,0.1366906474820144,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:10.555513,0.000211,udp,147.32.84.138,57058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:10.798899,0.000288,udp,147.32.84.170,50485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:11.182959,0.000147,udp,147.32.84.138,53662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:12.053956,0.002007,udp,141.85.0.124,22719.0,<->,147.32.87.220,64719.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:12.069528,0.144906,udp,147.32.84.229,13363.0,<->,96.20.42.152,14932.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:12.104991,0.248152,udp,147.32.86.168,57438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:13.519878,0.036928,tcp,147.32.84.59,42031.0,->,74.125.232.220,80.0,FSPA_FSPA,0.0,0.0,32,19275,1550,17725,602.34375,0.08041504539559015,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:40:13.906410,3360.418213,udp,147.32.84.229,13363.0,<->,111.250.9.209,44463.0,CON,0.0,0.0,6,403,223,180,67.16666666666667,0.5533498759305211,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:14.036783,0.142342,tcp,147.32.84.59,1773.0,->,94.245.121.177,80.0,FSPA_FSPA,0.0,0.0,9,3809,1657,2152,423.22222222222223,0.43502231556839066,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:40:16.649795,0.000441,udp,147.32.84.170,39274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:18.684275,0.000825,udp,46.31.75.2,59160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:19.534661,18.929798,tcp,147.32.84.59,53050.0,->,74.125.232.208,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:40:19.828343,3100.479248,udp,193.86.188.38,4338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2226,1769,457,185.5,0.7946990116801438,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:20.278276,0.000338,udp,147.32.86.92,49606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,87,198,142.5,0.30526315789473685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:25.632938,0.000207,udp,147.32.85.123,51459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:25.929432,0.000404,udp,147.32.84.10,43517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:26.649143,0.000447,udp,147.32.84.170,56244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:26.650125,0.000396,udp,147.32.84.170,49093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:27.780735,0.000271,udp,147.32.85.25,57381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:29.393657,7.1e-05,icmp,91.211.116.103,8.0,<->,147.32.86.92,14220.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,14,0,flow=Background,Background,-1 2011-08-16 14:40:31.361189,0.001015,udp,202.93.215.107,8044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,320,66,254,160.0,0.20625,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:32.998490,0.000344,udp,147.32.84.170,43720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:39.487614,0.000335,udp,147.32.86.20,53259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:43.918300,0.086141,tcp,147.32.84.59,2736.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,10347,1138,9209,608.6470588235294,0.10998357011694211,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:40:45.077914,0.00081,udp,208.88.186.10,34015.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,698,91,607,349.0,0.1303724928366762,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:47.966999,0.346654,tcp,147.32.86.187,54392.0,->,87.248.105.221,80.0,FSPA_FSPA,0.0,0.0,14,3787,2874,913,270.5,0.7589120675996831,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:40:49.767765,0.000303,udp,147.32.84.170,53325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:49.997755,0.000255,udp,147.32.84.170,54382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:49.998416,0.000276,udp,147.32.84.170,58289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:52.291101,0.028066,udp,147.32.84.59,56810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:53.822095,2444.012939,udp,147.32.84.59,7674.0,<->,129.93.31.42,26882.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:40:54.776984,0.153136,udp,208.54.39.187,61301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,677,556,121,169.25,0.8212703101920237,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:40:55.627772,61.281803,tcp,147.32.84.165,1095.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:40:55.785566,0.000432,udp,147.32.84.59,37520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:40:56.649747,0.000365,udp,147.32.84.170,53504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:56.651577,0.017968,tcp,147.32.84.170,40245.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:58.681556,0.000378,udp,147.32.84.170,44104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:40:59.404017,0.12062,udp,147.32.86.168,57512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,84,225,154.5,0.27184466019417475,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:03.035162,0.28918,tcp,147.32.84.170,33349.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:05.298093,0.033264,tcp,147.32.84.59,51468.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,55,47169,1935,45234,857.6181818181818,0.041022705590536154,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:41:06.649293,0.000459,udp,147.32.84.170,35442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:06.650308,0.000573,udp,147.32.84.170,58508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:06.854120,0.041103,udp,147.32.86.50,51137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:10.112994,0.000398,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,64,139,101.5,0.31527093596059114,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:41:12.886799,0.321827,udp,147.32.84.59,58884.0,<->,121.115.223.211,15357.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:41:14.178132,0.000293,udp,147.32.84.138,55582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:14.265180,11.767312,tcp,147.32.85.120,43843.0,->,74.125.43.109,25.0,S_,0.0,,8,608,608,0,76.0,1.0,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:41:14.613279,0.01213,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,77,383,230.0,0.1673913043478261,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:41:14.626454,60.003036,tcp,147.32.84.165,1096.0,->,195.113.232.90,80.0,SRPA_SPA,0.0,0.0,8,1687,500,1187,210.875,0.2963841138114997,14,1,flow=From-Botnet-V49-TCP-Established-HTTP-Ad-62,Botnet,1 2011-08-16 14:41:18.441788,0.000228,udp,147.32.84.138,55453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:20.122880,0.161605,udp,147.32.84.229,13363.0,<->,69.137.87.184,60947.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:41:20.606552,0.000241,udp,147.32.84.138,53941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:21.154473,0.000275,udp,147.32.84.59,49913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:22.674490,2913.236328,udp,147.32.84.94,7103.0,->,78.234.16.167,7358.0,INT,0.0,,9,756,756,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:41:23.616592,23.161913,udp,184.223.107.64,43388.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1178,1058,120,294.5,0.8981324278438031,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:41:24.431239,15.303716,icmp,84.59.175.136,3331.0,->,147.32.84.94,,URFIL,0.0,,4,280,280,0,70.0,1.0,14,,flow=Background,Background,-1 2011-08-16 14:41:25.838586,0.000246,udp,147.32.86.168,49341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:26.298536,114.677643,tcp,74.125.43.108,993.0,,147.32.85.120,41712.0,FRA_FA,0.0,0.0,4,258,126,132,64.5,0.4883720930232558,14,0,flow=Background,Background,-1 2011-08-16 14:41:26.395971,0.020556,tcp,147.32.85.123,46241.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:41:26.651544,0.018706,tcp,147.32.84.170,40251.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:28.005223,0.000217,udp,147.32.84.138,57257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:30.625238,0.000184,udp,147.32.84.138,56450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:35.380117,3047.706543,udp,77.79.27.72,6900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:41:36.649355,0.000413,udp,147.32.84.170,45289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:41.814703,0.104595,udp,147.32.84.164,52669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:44.881972,0.000482,udp,147.32.86.168,56721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,75,250,162.5,0.23076923076923078,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:44.888312,0.000422,udp,147.32.86.168,54161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:46.774947,0.032476,udp,147.32.84.164,42242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,472,75,397,236.0,0.15889830508474576,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:48.461010,0.000292,udp,147.32.85.34,58923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,78,232,155.0,0.25161290322580643,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:48.475364,15.574848,udp,147.32.84.94,7103.0,->,121.93.66.155,7355.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:41:50.427390,0.000402,udp,147.32.84.164,53685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.427896,0.00037,udp,147.32.84.164,59966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.428770,10.018587,tcp,147.32.84.164,33382.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.428822,10.018528,tcp,147.32.84.164,33383.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.428885,10.018199,tcp,147.32.84.164,33385.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.610215,0.00025,udp,147.32.84.164,42365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.611166,0.000354,udp,147.32.84.164,48163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.613486,0.000359,udp,147.32.84.164,42849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.614413,0.000434,udp,147.32.84.164,46718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.614794,0.000584,udp,147.32.84.164,49720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.615730,0.000472,udp,147.32.84.164,58590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.616383,0.000387,udp,147.32.84.164,54585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.619322,0.010178,udp,147.32.84.164,48769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:50.861268,0.249323,udp,147.32.84.164,36638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.160095,249.308929,tcp,147.32.84.164,34270.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,21,2895,1708,1187,137.85714285714286,0.5899827288428324,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.186225,0.057472,udp,147.32.84.164,47675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,78,156,117.0,0.3333333333333333,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.186724,0.001054,udp,147.32.84.164,60491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.365893,0.108515,udp,147.32.84.164,58820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.367568,0.000413,udp,147.32.84.164,39222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,87,169,128.0,0.33984375,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.369105,0.000324,udp,147.32.84.164,48046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,82,152,117.0,0.3504273504273504,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.394950,0.000288,udp,147.32.84.164,38073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.395562,0.000419,udp,147.32.84.164,35784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,75,187,131.0,0.2862595419847328,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.474759,0.000229,udp,147.32.84.164,53655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.475354,0.109157,udp,147.32.84.164,46565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,78,242,160.0,0.24375,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:51.606681,0.000412,udp,147.32.84.164,34406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:41:54.627929,2670.809326,udp,147.32.84.229,13363.0,<->,111.251.22.157,10440.0,CON,0.0,0.0,6,885,199,686,147.5,0.2248587570621469,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:41:56.272808,1618.577026,udp,147.32.84.229,13363.0,<->,80.221.208.138,8273.0,CON,0.0,0.0,6,3538,3418,120,589.6666666666666,0.9660825325042397,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:41:56.484199,61.279179,tcp,147.32.84.165,1097.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:41:56.649228,0.00031,udp,147.32.84.170,50425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:56.651115,0.018296,tcp,147.32.84.170,36845.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:41:56.895318,0.000304,udp,147.32.84.59,41811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:58.571828,0.000338,udp,147.32.84.138,33504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:41:59.845902,250.011154,tcp,147.32.86.134,52772.0,->,209.85.148.104,80.0,SRPA_FSPA,0.0,0.0,42,20784,3028,17756,494.85714285714283,0.14568899153194764,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:01.893839,0.000392,udp,147.32.84.138,51432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:02.438541,0.000338,udp,147.32.84.59,45934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:02.570507,0.000504,udp,147.32.84.59,51410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:02.731107,605.183838,udp,147.32.84.59,33556.0,<->,24.232.120.85,4804.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:42:03.496406,0.000324,udp,147.32.84.59,48740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:05.872845,0.000273,udp,147.32.84.138,56102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:06.650066,0.000348,udp,147.32.84.170,46361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:06.651156,0.017705,tcp,147.32.84.170,36847.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:08.249125,0.000329,udp,147.32.84.164,47925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:09.408422,110.164345,tcp,147.32.86.15,3865.0,->,195.39.32.53,80.0,SRPA_SPA,0.0,0.0,9,4037,1714,2323,448.55555555555554,0.4245727025018578,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:09.900166,0.034318,udp,147.32.84.229,13363.0,<->,130.237.92.198,1488.0,CON,0.0,0.0,2,586,526,60,293.0,0.8976109215017065,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:10.462046,1.515928,tcp,147.32.84.132,56252.0,->,193.23.48.250,80.0,SRPA_FSPA,0.0,0.0,17,9213,1288,7925,541.9411764705883,0.1398024530554651,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:10.490383,0.000361,udp,147.32.86.20,60684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:11.320578,2552.853027,udp,147.32.84.94,7103.0,->,81.166.187.24,7255.0,INT,0.0,,15,1260,1260,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:42:12.404927,0.000197,udp,147.32.84.138,56497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:14.374396,1.372901,tcp,147.32.86.168,36655.0,->,4.26.249.126,80.0,FSPA_FSPA,0.0,0.0,38,21916,1699,20217,576.7368421052631,0.07752327066983027,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:15.957048,0.000164,udp,147.32.85.89,39073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:16.413351,0.000589,udp,147.32.84.164,54640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:16.415743,0.172099,udp,147.32.84.164,43810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,88,188,138.0,0.3188405797101449,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:16.579953,0.108261,udp,147.32.84.164,52344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,74,265,169.5,0.2182890855457227,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:16.650175,0.000398,udp,147.32.84.170,53151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:16.768580,0.000292,udp,147.32.84.164,53841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:16.770274,0.000235,udp,147.32.84.164,50663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,77,132,104.5,0.3684210526315789,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:16.889154,0.184607,udp,147.32.84.164,34730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:17.347175,0.000302,udp,147.32.84.164,59544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:18.423717,0.000363,udp,147.32.84.138,54281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:20.705637,0.000164,udp,147.32.84.138,49008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:21.052327,0.154109,tcp,147.32.86.20,4173.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,63,55817,1451,54366,885.984126984127,0.025995664403317985,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:21.545678,0.18912,udp,147.32.84.229,13363.0,<->,94.51.226.40,16900.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:21.639468,0.000194,udp,147.32.86.168,60567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,87,137,112.0,0.38839285714285715,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:22.492908,0.307767,udp,147.32.86.111,63488.0,<->,201.92.169.16,3599.0,CON,0.0,0.0,2,543,73,470,271.5,0.13443830570902393,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:24.195203,0.311593,udp,147.32.84.229,13363.0,<->,163.180.177.220,36296.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:24.472429,0.000701,udp,110.36.1.31,28852.0,<->,147.32.85.2,31604.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:24.493097,1413.292847,udp,147.32.84.229,13363.0,<->,79.118.190.209,1810.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:24.906790,0.000731,udp,90.212.230.227,25002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,78,482,280.0,0.1392857142857143,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:25.044799,0.192477,udp,147.32.86.168,39580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,71,300,185.5,0.19137466307277629,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:25.700956,0.000299,udp,147.32.84.59,63943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:26.584756,0.000576,udp,46.146.93.120,30274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:26.645886,0.000296,udp,147.32.84.138,34657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:26.650735,0.000411,udp,147.32.84.170,39656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:26.837803,0.000257,udp,147.32.86.168,40717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,96,146,121.0,0.39669421487603307,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:28.457867,0.000414,udp,147.32.84.164,45904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:32.874836,0.000245,udp,147.32.84.138,53389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:32.993214,0.000595,udp,116.90.204.61,60749.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:34.154563,15.033126,tcp,147.32.84.59,34562.0,->,82.208.29.37,80.0,FSPA_FSPA,0.0,0.0,32,21066,2644,18422,658.3125,0.1255103009588911,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:42:36.651006,0.000374,udp,147.32.84.170,42282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:37.423713,0.000283,udp,147.32.84.138,37485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:41.395687,0.000778,udp,90.225.30.208,48127.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,948,75,873,474.0,0.07911392405063292,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:41.744543,0.000368,udp,147.32.86.179,60686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:42.192011,0.340307,udp,147.32.84.229,13363.0,<->,111.251.171.115,15307.0,CON,0.0,0.0,2,998,75,923,499.0,0.07515030060120241,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:44.726062,0.06401,tcp,147.32.84.59,51654.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:42:45.238501,137.417572,tcp,147.32.86.168,49323.0,->,66.211.181.40,80.0,FSPA_FSPA,0.0,0.0,62,41191,15475,25716,664.3709677419355,0.3756888640722488,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:46.649602,0.000349,udp,147.32.84.170,51893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:47.741811,0.00022,udp,147.32.84.164,34578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:47.742829,0.00023,udp,147.32.84.164,54438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:42:48.674227,0.01749,udp,147.32.86.179,52052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,78,142,110.0,0.35454545454545455,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:50.161843,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,28641.0,URP,0.0,,1,70,70,0,70.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:42:51.082064,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,6868.0,URP,0.0,,1,70,70,0,70.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:42:51.794434,0.000384,udp,147.32.84.138,44731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:56.375899,0.438547,tcp,147.32.86.134,52795.0,->,77.78.99.23,80.0,SRPA_FSPA,0.0,0.0,8,1780,993,787,222.5,0.5578651685393259,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:56.386919,13.507987,tcp,147.32.86.134,52821.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,14,1,flow=Background-google-analytics15,Background,-1 2011-08-16 14:42:56.419807,13.439144,tcp,147.32.86.134,52827.0,->,90.182.101.157,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:56.474731,0.081241,udp,147.32.84.229,13363.0,<->,87.7.214.213,23269.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:56.651904,0.01811,tcp,147.32.84.170,36853.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:42:56.700028,2260.841797,udp,95.167.190.6,43542.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,15,2571,1918,653,171.4,0.7460132244262933,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:42:56.841685,0.000227,udp,147.32.86.134,51231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,91,180,135.5,0.33579335793357934,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:42:57.341961,61.273388,tcp,147.32.84.165,1098.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:42:58.285626,1.221198,tcp,66.194.55.249,1634.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1595,754,841,159.5,0.4727272727272727,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:42:59.491981,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,58069.0,URP,0.0,,1,70,70,0,70.0,1.0,14,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:42:59.498666,0.000552,udp,147.32.84.59,58660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:00.210918,0.020381,udp,147.32.84.59,60880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,66,131,98.5,0.3350253807106599,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:05.627938,0.322971,tcp,147.32.84.59,57321.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1541,699,842,171.22222222222223,0.4536015574302401,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:43:06.315047,0.000332,udp,147.32.85.25,46697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:06.651401,0.018295,tcp,147.32.84.170,36854.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:07.000347,0.000334,udp,147.32.84.170,49290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:07.369252,1.015587,tcp,147.32.86.20,4207.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,111,110711,1946,108765,997.3963963963964,0.017577295842328224,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:43:11.016232,243.830414,tcp,217.186.110.246,51149.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,27,2836,882,1954,105.03703703703704,0.31100141043723556,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:43:11.026657,0.00015,tcp,202.165.203.10,62996.0,->,147.32.86.110,80.0,S_RA,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:43:11.380794,0.074187,udp,147.32.84.59,56188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,73,177,125.0,0.292,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:12.785165,123.240082,udp,147.32.84.94,7103.0,->,80.89.75.40,7516.0,INT,0.0,,8,672,672,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:43:12.905939,853.320679,udp,94.27.83.49,15605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,882,578,304,88.2,0.655328798185941,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:13.038198,0.778823,tcp,147.32.84.170,54540.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:14.041973,0.259652,tcp,147.32.84.170,54543.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:16.653485,0.017908,tcp,147.32.84.170,36862.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:16.831111,1296.112793,udp,147.32.84.165,7100.0,<->,218.83.161.9,9009.0,CON,0.0,0.0,10,1500,480,1020,150.0,0.32,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:43:22.650221,0.557846,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,77,213,145.0,0.2655172413793103,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:43:23.221209,5.965297,tcp,147.32.84.165,1099.0,->,222.73.121.38,80.0,SRPA_SPA,0.0,0.0,10,1073,661,412,107.3,0.6160298229263746,14,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 14:43:23.830072,0.000301,udp,147.32.84.164,57057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.386885,0.000385,udp,147.32.84.164,36034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.387353,0.000395,udp,147.32.84.164,48564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.388576,16.065838,tcp,147.32.84.164,39182.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.388830,16.064978,tcp,147.32.84.164,39184.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.473129,0.000204,udp,147.32.84.164,36340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.473832,0.000253,udp,147.32.84.164,40308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:24.909937,0.000427,udp,147.32.84.164,44071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:25.425497,2479.161865,udp,147.32.84.229,13363.0,<->,126.48.203.238,30303.0,CON,0.0,0.0,6,398,218,180,66.33333333333333,0.5477386934673367,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:25.696883,0.026339,udp,147.32.84.59,63322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,76,138,107.0,0.35514018691588783,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:26.084589,655.808716,tcp,88.86.102.53,55184.0,->,147.32.84.130,5269.0,FSPA_FSPA,0.0,0.0,59,21961,18032,3929,372.22033898305085,0.8210919357042029,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:43:26.560433,0.000188,udp,147.32.84.164,39275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:26.561189,0.00044,udp,147.32.84.164,57399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:26.561580,0.000397,udp,147.32.84.164,38436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:26.562027,0.11238,tcp,147.32.84.164,37278.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1380,699,681,138.0,0.5065217391304347,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:26.562258,333.913055,tcp,147.32.84.164,38927.0,->,74.125.232.244,80.0,FSPA_FSRPA,0.0,0.0,38,12016,9224,2792,316.2105263157895,0.7676431424766977,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:26.652722,0.000215,udp,147.32.84.170,39196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:26.987645,2414.993408,udp,193.47.166.113,62980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,284,164,120,71.0,0.5774647887323944,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:27.446478,0.000212,udp,147.32.84.164,44184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,76,254,165.0,0.23030303030303031,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:27.511704,4.60249,tcp,147.32.84.165,1100.0,->,222.73.45.106,88.0,SRPA_SPA,0.0,0.0,9,1154,434,720,128.22222222222223,0.37608318890814557,14,1,flow=From-Botnet-V49-TCP-Established-HTTP-Binary-Download-11,Botnet,1 2011-08-16 14:43:27.559038,0.154299,udp,147.32.84.164,42536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,72,132,102.0,0.35294117647058826,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:27.822437,0.060243,udp,147.32.84.164,57423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,73,138,105.5,0.3459715639810427,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:27.864044,0.000182,udp,147.32.84.164,57495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:27.884765,0.159624,udp,147.32.84.164,35030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,81,204,142.5,0.28421052631578947,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:28.026835,0.173773,udp,147.32.84.164,41021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,75,187,131.0,0.2862595419847328,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:28.044731,0.129588,udp,147.32.84.164,43148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,81,192,136.5,0.2967032967032967,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:28.175019,0.157582,udp,147.32.84.164,36993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,80,162,121.0,0.3305785123966942,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:29.932108,0.056758,udp,147.32.84.59,57183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:30.267320,310.362457,tcp,147.32.84.164,45251.0,->,65.55.11.254,80.0,FSPA_FSPA,0.0,0.0,38,19290,4284,15006,507.63157894736844,0.22208398133748056,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:30.981425,0.168247,udp,147.32.84.164,38153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,80,205,142.5,0.2807017543859649,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:30.982207,0.000257,udp,147.32.84.164,57501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.150897,309.315948,tcp,147.32.84.164,44093.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,30,10550,2023,8527,351.6666666666667,0.19175355450236967,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.150946,309.316162,tcp,147.32.84.164,44095.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,28,7635,1974,5661,272.67857142857144,0.2585461689587426,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.151061,309.315857,tcp,147.32.84.164,44098.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,28,6387,2551,3836,228.10714285714286,0.39940504149052763,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.187640,309.280884,tcp,147.32.84.164,48525.0,->,195.113.232.73,80.0,FSPA_FSPA,0.0,0.0,31,12491,3368,9123,402.93548387096774,0.2696341365783364,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.188172,0.020671,udp,147.32.84.164,46544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,410,72,338,205.0,0.17560975609756097,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.200305,309.266937,tcp,147.32.84.164,44101.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,57,34387,4157,30230,603.280701754386,0.1208887079419548,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.209312,9.264245,tcp,147.32.84.164,54200.0,->,8.12.214.126,80.0,FSPA_FSPA,0.0,0.0,19,7828,1161,6667,412.0,0.14831374552887072,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.244325,0.000516,udp,147.32.84.164,57085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,469,80,389,234.5,0.17057569296375266,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.245303,309.221893,tcp,147.32.84.164,53328.0,->,195.113.232.75,80.0,FSPA_FSPA,0.0,0.0,51,30297,2570,27727,594.0588235294117,0.0848268805492293,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.308831,309.158081,tcp,147.32.84.164,44104.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,22,3172,1285,1887,144.1818181818182,0.40510718789407313,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.351357,0.185181,udp,147.32.84.164,56792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,77,212,144.5,0.2664359861591695,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.351487,0.355363,udp,147.32.84.164,49711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,180,83,97,90.0,0.46111111111111114,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.351539,0.212083,udp,147.32.84.164,44394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,84,84,84.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.472991,309.156952,tcp,147.32.84.164,45275.0,->,65.55.11.254,80.0,FSPA_FSPA,0.0,0.0,28,11488,3927,7561,410.2857142857143,0.34183495821727017,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.563736,0.180261,udp,147.32.84.164,48764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,84,84,84.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.592122,0.149921,udp,147.32.84.164,44194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,84,146,115.0,0.3652173913043478,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.616642,0.14406,udp,147.32.84.164,46559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,75,407,241.0,0.15560165975103735,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.742345,0.00035,udp,147.32.84.164,58293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,84,146,115.0,0.3652173913043478,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:31.942122,0.000599,udp,109.100.113.108,42669.0,<->,147.32.85.2,31604.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:32.321936,18.286913,tcp,147.32.84.164,45279.0,->,65.55.11.254,80.0,FSA_FSA,0.0,0.0,6,374,254,120,62.333333333333336,0.679144385026738,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:32.459453,308.007751,tcp,147.32.84.164,44118.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,24,5515,1312,4203,229.79166666666666,0.23789664551223935,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:33.344801,17.22632,tcp,147.32.84.164,52166.0,->,65.54.77.92,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:35.377060,0.000594,udp,213.225.216.81,64983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:36.053913,2610.487549,udp,147.32.84.94,7103.0,->,86.150.101.177,41427.0,INT,0.0,,12,1008,1008,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:43:36.652051,0.000177,udp,147.32.84.170,40490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:38.001458,0.000412,udp,147.32.84.170,41573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:39.026059,0.269355,udp,147.32.84.164,38918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:39.493340,3016.836426,udp,147.32.84.229,13363.0,<->,61.115.164.56,9400.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:39.493449,3016.586914,udp,147.32.84.229,13363.0,<->,89.169.15.164,64374.0,CON,0.0,0.0,6,849,654,195,141.5,0.7703180212014135,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:40.550832,0.000172,udp,147.32.84.164,38942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,77,132,104.5,0.3684210526315789,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:40.551285,0.000139,udp,147.32.84.164,42006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,77,132,104.5,0.3684210526315789,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:40.551765,0.000374,udp,147.32.84.164,37550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,77,139,108.0,0.35648148148148145,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:40.816159,0.000175,udp,147.32.84.138,45030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:42.477539,0.000176,udp,147.32.84.164,56978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:44.494073,0.000197,udp,147.32.84.164,60502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:44.495173,0.000308,udp,147.32.84.164,46979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,76,246,161.0,0.2360248447204969,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:45.096050,0.001624,udp,147.32.85.7,46968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,76,231,153.5,0.247557003257329,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:45.114937,0.000147,udp,147.32.85.7,59008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,93,143,118.0,0.3940677966101695,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:45.119382,0.000381,udp,147.32.85.7,36315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,75,140,107.5,0.3488372093023256,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:45.993345,0.239346,tcp,72.14.199.219,63142.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,1664,596,1068,166.4,0.3581730769230769,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:43:46.651907,0.01795,tcp,147.32.84.170,57145.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:47.904163,0.000522,udp,147.32.84.164,50609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:47.904272,0.000421,udp,147.32.84.164,41365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:47.905021,0.000246,udp,147.32.84.164,37936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:47.908101,0.234878,udp,147.32.84.164,33068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,81,178,129.5,0.3127413127413127,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:47.959180,0.509996,udp,147.32.84.164,45279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.143162,0.000445,udp,147.32.84.164,48238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,81,403,242.0,0.16735537190082644,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.144779,0.000422,udp,147.32.84.164,46198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.146242,0.000406,udp,147.32.84.164,35293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.147096,0.000263,udp,147.32.84.164,34781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,71,140,105.5,0.33649289099526064,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.148278,0.00024,udp,147.32.84.164,58259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,74,185,129.5,0.2857142857142857,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.150323,0.000313,udp,147.32.84.164,36925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,87,169,128.0,0.33984375,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:48.858278,2632.988281,udp,89.209.103.209,47464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1636,212,1424,272.6666666666667,0.1295843520782396,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:49.013806,0.000239,udp,147.32.84.138,42535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:50.626983,19.829382,tcp,147.32.84.164,58730.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:50.627120,18.694372,tcp,147.32.84.164,39244.0,->,209.85.148.106,80.0,FSRPA_FSPA,0.0,0.0,62,37104,6932,30172,598.4516129032259,0.18682621819749892,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:50.711457,19.359823,tcp,147.32.84.164,38513.0,->,207.241.148.80,80.0,SPA_SRPA,0.0,0.0,17,9126,1326,7800,536.8235294117648,0.1452991452991453,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.275367,18.80022,tcp,147.32.84.164,48043.0,->,207.241.148.91,80.0,SPA_SRPA,0.0,0.0,12,3374,1225,2149,281.1666666666667,0.3630705394190871,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.542179,0.147201,udp,147.32.84.164,56375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,71,167,119.0,0.29831932773109243,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.631550,0.182737,udp,147.32.84.164,51066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,79,176,127.5,0.30980392156862746,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.631607,0.105834,udp,147.32.84.164,37729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,76,173,124.5,0.30522088353413657,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.809862,0.176474,udp,147.32.84.164,39172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.814702,0.000421,udp,147.32.84.164,48641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,480,79,401,240.0,0.16458333333333333,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.815692,0.153127,udp,147.32.84.164,49122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,75,172,123.5,0.30364372469635625,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.970338,0.104839,udp,147.32.84.164,37519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,74,171,122.5,0.3020408163265306,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:51.986511,0.000304,udp,147.32.84.164,58575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,80,173,126.5,0.31620553359683795,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.075664,0.000362,udp,147.32.84.164,33944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,74,396,235.0,0.1574468085106383,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.103444,0.000414,udp,147.32.84.164,49941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,73,395,234.0,0.15598290598290598,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.166338,0.025376,udp,147.32.84.164,42733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,85,277,181.0,0.23480662983425415,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.192072,18.278618,tcp,147.32.84.164,41435.0,->,68.67.185.212,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.254864,0.000297,udp,147.32.84.164,44380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.259316,0.110145,udp,147.32.84.164,47976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,79,176,127.5,0.30980392156862746,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.307878,0.107677,udp,147.32.84.164,37561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.369858,0.000485,udp,147.32.84.164,54464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,480,79,401,240.0,0.16458333333333333,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:52.466801,0.042939,udp,147.32.84.164,50942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,547,81,466,273.5,0.1480804387568556,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:43:53.666297,7.997344,udp,147.32.87.48,2004.0,->,147.32.86.244,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:43:53.714550,0.000237,udp,147.32.84.138,38336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:54.042629,0.000695,udp,46.40.74.183,61801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:43:56.651371,0.000357,udp,147.32.84.170,39457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:56.653403,0.018611,tcp,147.32.84.170,50288.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:43:58.190060,64.125343,tcp,147.32.84.165,1101.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:43:58.231829,0.000402,udp,147.32.85.34,57057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:58.468944,0.000201,udp,147.32.84.138,33601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:43:59.682676,58.072487,tcp,147.32.85.8,47957.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,20,4481,3194,1287,224.05,0.7127873242579781,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:44:04.001802,0.000485,udp,147.32.84.138,60119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:04.246990,0.170525,tcp,147.32.86.20,4249.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,61,56041,1391,54650,918.7049180327868,0.024821113113613246,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:44:04.324309,0.11577,tcp,147.32.85.88,55195.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,20,10644,1594,9050,532.2,0.14975573092822247,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:44:05.116360,0.00025,udp,147.32.84.164,37688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:05.196589,240.513153,tcp,147.32.84.170,38451.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,35,8062,5316,2746,230.34285714285716,0.6593897295956338,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:05.555035,0.010053,udp,147.32.84.164,36707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,432,80,352,216.0,0.18518518518518517,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:05.557900,0.019663,udp,147.32.84.164,33820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:06.025558,767.402771,udp,178.93.118.16,14040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,473,349,124,118.25,0.7378435517970402,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:06.653130,0.018418,tcp,147.32.84.170,36869.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:08.033194,0.000241,udp,147.32.84.138,33896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:08.659520,0.364956,udp,147.32.84.164,58056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,84,155,119.5,0.3514644351464435,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:08.722098,0.002975,udp,147.32.84.164,36583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:08.725356,0.000232,udp,147.32.84.164,42821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:08.728314,0.019249,udp,147.32.84.164,49227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:08.792128,0.00049,udp,147.32.84.164,54486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,72,142,107.0,0.3364485981308411,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:08.792948,0.005424,udp,147.32.84.164,57812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,72,232,152.0,0.23684210526315788,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.376973,0.2256,udp,147.32.84.164,54236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.589952,0.000257,udp,147.32.84.164,56723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.591502,0.208469,udp,147.32.84.164,60821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.603162,0.193625,udp,147.32.84.164,55306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,70,147,108.5,0.3225806451612903,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.691895,0.044301,udp,147.32.84.164,55642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.736349,0.000231,udp,147.32.84.164,49997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.766795,0.000207,udp,147.32.84.164,44291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,80,150,115.0,0.34782608695652173,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:09.814342,0.000317,udp,147.32.84.164,60968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:10.299792,22.85162,udp,118.172.249.215,63137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1042,922,120,260.5,0.8848368522072937,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:10.380218,0.000802,udp,95.59.88.65,50960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:12.146717,0.024918,udp,147.32.84.184,53111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,78,312,195.0,0.2,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:16.651888,0.000455,udp,147.32.84.170,34796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:17.245884,0.000239,udp,147.32.86.20,50567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:17.735832,0.00068,udp,46.70.177.115,22872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,75,482,278.5,0.13464991023339318,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:17.857605,0.355216,udp,78.133.21.196,55463.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,256,182,74,128.0,0.7109375,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:18.662473,1.5e-05,tcp,147.32.80.7,44430.0,->,147.32.87.4,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:44:18.742351,0.000215,udp,147.32.84.138,38437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:19.309376,0.000155,udp,147.32.84.138,37424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:20.256281,1622.335449,udp,77.236.163.217,34188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2910,370,2540,291.0,0.12714776632302405,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:21.205896,2856.492188,udp,79.30.224.73,29047.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1463,1091,372,121.91666666666667,0.745727956254272,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:21.737528,0.000246,udp,147.32.84.138,52395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:21.946129,30.860346,tcp,46.221.95.125,52641.0,->,147.32.84.229,443.0,FSA_SRA,0.0,0.0,19,1368,678,690,72.0,0.4956140350877193,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:44:22.146825,0.000785,udp,124.26.73.185,12809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,745,76,669,372.5,0.10201342281879194,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:27.391201,0.000265,udp,147.32.84.138,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:27.637874,0.009625,tcp,147.32.84.59,60273.0,->,77.75.73.9,80.0,SRPA_FSPA,0.0,0.0,11,3459,2737,722,314.45454545454544,0.791269152934374,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:44:27.704388,0.19119,udp,147.32.84.59,51814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,81,145,113.0,0.3584070796460177,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:30.183400,0.000255,udp,147.32.84.59,59695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,94,147,120.5,0.3900414937759336,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:30.215185,0.000465,udp,147.32.84.59,49727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,83,167,125.0,0.332,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:30.287506,0.000263,udp,147.32.84.138,50021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:30.330350,0.377036,udp,147.32.84.59,62287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,80,94,87.0,0.45977011494252873,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:30.810369,1325.291748,udp,98.25.255.66,28558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1107,552,555,276.75,0.4986449864498645,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:32.466535,0.62826,udp,147.32.84.165,21920.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:44:32.467393,0.61088,udp,147.32.84.165,21921.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:44:32.467823,0.624083,udp,147.32.84.165,21922.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:44:33.095673,27.119621,udp,147.32.84.165,21923.0,<->,183.60.49.33,8000.0,CON,0.0,0.0,47,18518,5432,13086,394.0,0.2933362134139756,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:44:33.459869,76.97007,udp,147.32.84.165,21924.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,68,26820,8254,18566,394.4117647058824,0.30775540641312454,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:44:33.460132,51.620102,udp,147.32.84.165,21925.0,<->,183.60.49.30,8000.0,CON,0.0,0.0,46,18168,5686,12482,394.95652173913044,0.3129678555702334,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:44:35.059782,0.139916,tcp,147.32.84.59,49834.0,->,41.230.56.191,62455.0,FSPA_FSRA,0.0,0.0,8,586,400,186,73.25,0.6825938566552902,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:44:35.187517,0.191542,udp,147.32.84.229,13363.0,<->,205.200.226.53,45997.0,CON,0.0,0.0,2,590,77,513,295.0,0.13050847457627118,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:36.490359,0.005024,udp,147.32.84.59,44114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,69,139,104.0,0.3317307692307692,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:36.499247,0.000242,udp,147.32.84.59,17116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,69,139,104.0,0.3317307692307692,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:37.556385,15.300015,udp,147.32.84.94,7103.0,->,93.34.52.55,48906.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:44:38.001165,0.000333,udp,147.32.84.170,59411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:38.002030,0.000274,udp,147.32.84.170,36923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:38.275557,0.042566,udp,147.32.84.59,51334.0,->,157.24.2.105,389.0,INT,0.0,,1,203,203,0,203.0,1.0,14,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 14:44:38.788964,0.000165,udp,147.32.84.138,34082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:40.473407,0.000401,udp,147.32.84.138,38438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:40.779313,0.292008,udp,147.32.84.59,35153.0,<->,61.23.163.11,22145.0,CON,0.0,0.0,2,516,456,60,258.0,0.8837209302325582,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:44:41.995975,60.875477,tcp,147.32.86.183,57980.0,->,78.141.177.73,60817.0,FSPA_FSPA,0.0,0.0,22,1837,908,929,83.5,0.49428415895481764,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:44:45.139285,2969.772461,udp,147.32.84.229,13363.0,<->,74.193.191.250,21257.0,CON,0.0,0.0,8,530,264,266,66.25,0.4981132075471698,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:45.142334,0.000668,udp,89.242.152.157,22207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:45.187162,0.000243,udp,147.32.84.59,51671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,76,270,173.0,0.21965317919075145,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:46.614432,12.0713,tcp,147.32.84.59,2932.0,->,209.17.70.143,80.0,FSPA_FSPA,0.0,0.0,11,1455,848,607,132.27272727272728,0.5828178694158076,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:44:46.651748,0.000482,udp,147.32.84.170,38851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:44:47.479508,549.831543,udp,147.32.84.229,13363.0,<->,88.222.218.170,51382.0,CON,0.0,0.0,6,3144,135,3009,524.0,0.042938931297709926,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:47.884036,13.577147,tcp,147.32.86.179,59342.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:44:49.619609,0.000843,udp,203.218.74.9,10428.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1066,77,989,533.0,0.07223264540337711,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:51.745024,0.304393,tcp,147.32.85.88,64765.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,2053,952,1101,186.63636363636363,0.4637116415002435,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:44:53.603375,2921.768066,udp,147.32.84.229,13363.0,<->,129.93.112.38,30364.0,CON,0.0,0.0,6,1397,789,608,232.83333333333334,0.5647816750178954,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:53.780000,0.000495,udp,147.32.84.138,50366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:44:54.098321,0.00045,udp,147.32.84.164,38717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.098357,16.362066,tcp,147.32.84.164,44476.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.099231,0.000372,udp,147.32.84.164,44730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.780495,0.000267,udp,147.32.84.164,43835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.780747,0.000353,udp,147.32.84.164,45159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.782895,0.000299,udp,147.32.84.164,46345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:54.796553,0.09603,udp,147.32.84.164,60203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,70,127,98.5,0.3553299492385787,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.212848,0.022932,udp,147.32.84.164,46981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.212863,0.024468,udp,147.32.84.164,55776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,76,164,120.0,0.31666666666666665,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.237753,5.236136,tcp,147.32.84.164,50657.0,->,67.201.31.160,80.0,FSPA_FSRPA,0.0,0.0,23,9745,1623,8122,423.69565217391306,0.16654694715238583,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.341135,5.132749,tcp,147.32.84.164,50661.0,->,67.201.31.160,80.0,FSPA_FSRPA,0.0,0.0,20,6623,1547,5076,331.15,0.23357994866374754,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.381303,0.000242,udp,147.32.84.164,46832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,77,135,106.0,0.3632075471698113,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.399431,0.000387,udp,147.32.84.164,49199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:55.400199,250.04921,tcp,147.32.84.164,38973.0,->,74.125.232.197,443.0,SRPA_FSPA,0.0,0.0,31,4952,1542,3410,159.74193548387098,0.311389337641357,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:44:56.997250,0.149235,udp,147.32.85.26,60764.0,<->,31.134.235.151,43749.0,CON,0.0,0.0,2,213,63,150,106.5,0.29577464788732394,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:57.691176,2938.19165,udp,147.32.84.94,7103.0,<->,46.126.170.30,47334.0,CON,0.0,0.0,89,70585,69157,1428,793.0898876404494,0.9797690727491677,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:44:58.379362,15.444187,tcp,147.32.84.59,1788.0,->,65.55.255.7,80.0,FSA_FSA,0.0,0.0,7,486,276,210,69.42857142857143,0.5679012345679012,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:00.049129,39.979019,tcp,147.32.84.59,1859.0,->,2.21.89.165,443.0,FSPA_FSPA,0.0,0.0,17,3865,923,2942,227.35294117647058,0.2388098318240621,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:01.460576,0.628939,udp,147.32.84.165,21926.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:45:01.762971,0.000236,udp,147.32.84.138,41257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:01.892756,61.295834,tcp,147.32.84.165,1102.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:45:02.380493,0.0002,udp,147.32.84.138,45390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:02.461646,54.106369,udp,147.32.84.165,21927.0,<->,183.60.16.12,8000.0,CON,0.0,0.0,73,30202,8468,21734,413.7260273972603,0.28037878286206214,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:03.119702,0.000164,udp,147.32.84.138,54306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:04.361506,0.306109,tcp,147.32.85.88,64891.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,16,6521,1316,5205,407.5625,0.20180953841435362,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:45:05.880942,0.000337,udp,147.32.87.40,53841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:05.911580,695.107056,udp,190.3.111.178,26986.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,505,381,124,126.25,0.7544554455445545,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:06.650625,0.000387,udp,147.32.84.170,39395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:06.652680,0.018888,tcp,147.32.84.170,41420.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:07.271304,0.0,udp,192.168.88.138,58601.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:45:13.051280,0.001813,udp,114.41.215.162,65523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:13.497506,0.002059,udp,147.32.86.165,55235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,70,129,99.5,0.35175879396984927,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:14.116798,0.000268,udp,147.32.84.138,50048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:15.411333,2501.674561,udp,147.32.84.59,2707.0,<->,78.45.180.249,51990.0,CON,0.0,0.0,6,724,538,186,120.66666666666667,0.7430939226519337,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:15.745386,296.877319,tcp,147.32.86.59,1807.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,364,275639,45096,230543,757.25,0.1636052953319378,14,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:45:16.893646,0.31131,udp,147.32.84.229,13363.0,<->,123.48.109.21,27265.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:17.741490,59.607391,tcp,147.32.84.59,51318.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,10,2354,778,1576,235.4,0.33050127442650806,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:17.895933,0.043959,udp,147.32.84.59,53581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:19.062649,2525.446045,udp,147.32.84.59,52996.0,<->,24.110.104.99,57045.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:22.820388,20.034565,tcp,147.32.84.59,49314.0,->,74.125.232.255,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:23.455664,0.133089,udp,147.32.84.229,13363.0,<->,128.104.108.198,50544.0,CON,0.0,0.0,4,2963,60,2903,740.75,0.020249746878164023,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:26.326290,0.468181,udp,147.32.84.165,21928.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:26.795105,6.075683,udp,147.32.84.165,21929.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,22,8248,2690,5558,374.90909090909093,0.3261396702230844,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:27.604041,0.00024,udp,147.32.84.138,34331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:28.592814,216.092819,tcp,147.32.86.171,3937.0,->,91.203.99.45,80.0,FSPA_FSPA,0.0,0.0,14,3239,1456,1783,231.35714285714286,0.44952145723988884,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:45:30.293142,0.000685,udp,83.79.187.98,15394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,321,186,135,160.5,0.5794392523364486,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:30.651097,5.639944,tcp,147.32.86.168,55835.0,->,74.200.246.228,80.0,FSPA_FSPA,0.0,0.0,12,3981,3233,748,331.75,0.8121075106757096,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:45:30.830047,0.000288,udp,147.32.84.138,44150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:30.961012,0.00041,udp,147.32.86.171,52974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,74,187,130.5,0.2835249042145594,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:31.286078,0.000244,udp,147.32.85.37,63870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,73,153,113.0,0.3230088495575221,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:31.683008,0.000244,udp,147.32.84.138,37088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:33.586915,1.041244,tcp,147.32.84.59,49359.0,->,174.36.28.11,80.0,SRPA_FSA,0.0,0.0,8,3510,978,2532,438.75,0.27863247863247864,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:33.927246,0.643027,udp,147.32.84.165,21930.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:45:34.348467,0.025217,udp,147.32.84.59,42563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,80,124,102.0,0.39215686274509803,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:34.928931,46.89632,udp,147.32.84.165,21931.0,<->,183.60.49.124,8000.0,CON,0.0,0.0,53,21386,6328,15058,403.50943396226415,0.2958945104273824,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:36.509809,0.112706,udp,147.32.84.59,18338.0,<->,71.59.73.83,13407.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:36.650343,0.000342,udp,147.32.84.170,49712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:36.651225,0.00028,udp,147.32.84.170,52856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:38.743474,0.330711,tcp,147.32.84.59,57572.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1537,699,838,170.77777777777777,0.4547820429407938,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:40.001305,0.000339,udp,147.32.84.170,40078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:40.002604,0.262371,tcp,147.32.84.170,39994.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:42.386228,1.336992,tcp,147.32.85.88,65122.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,16,6035,1206,4829,377.1875,0.19983429991714996,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:45:42.430754,0.000439,udp,147.32.84.164,43348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:43.358781,0.105428,udp,147.32.84.164,60723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:43.464465,0.000422,udp,147.32.84.164,49419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:43.473876,0.000159,udp,147.32.84.138,56440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:46.663584,24.334755,tcp,147.32.84.59,53705.0,->,192.44.35.14,80.0,FSPA_FSPA,0.0,0.0,20,7148,2074,5074,357.4,0.2901510912143257,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:46.886209,0.000352,udp,147.32.84.164,51701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:46.935455,25.406733,tcp,147.32.84.164,37068.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,16,5621,1518,4103,351.3125,0.2700587084148728,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:47.016399,0.166191,udp,147.32.85.117,61159.0,<->,98.238.22.95,38301.0,CON,0.0,0.0,2,536,73,463,268.0,0.13619402985074627,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:45:49.743501,0.000317,udp,147.32.84.164,33528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:45:51.592522,0.000246,udp,147.32.84.59,36140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:51.672771,0.61869,udp,147.32.84.165,21932.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:45:51.749584,0.000392,udp,147.32.85.30,56198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:52.292475,45.360718,udp,147.32.84.165,21933.0,<->,183.60.16.16,8000.0,CON,0.0,0.0,68,27428,7826,19602,403.3529411764706,0.28532886101793786,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:52.788894,0.062978,udp,147.32.84.59,17126.0,<->,176.14.218.237,63770.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:53.127452,17.56871,udp,147.32.84.59,17126.0,<->,77.79.157.40,48106.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:45:56.404115,0.002454,udp,147.32.86.134,63933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:56.438657,0.000308,udp,147.32.84.184,56878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:45:56.441250,20.834869,tcp,147.32.84.184,53258.0,->,199.59.148.87,443.0,FSPA_FSPA,0.0,0.0,21,6529,2077,4452,310.9047619047619,0.31811916066778984,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:45:56.651011,0.000391,udp,147.32.84.170,40242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:56.653276,0.019241,tcp,147.32.84.170,39175.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:45:57.741529,0.617717,udp,147.32.84.165,21934.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:45:58.360215,12.852733,udp,147.32.84.165,21935.0,<->,183.60.16.15,8000.0,CON,0.0,0.0,11,3910,2092,1818,355.45454545454544,0.5350383631713554,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:45:58.511217,0.000272,udp,147.32.84.138,50116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:01.880520,127.132111,tcp,147.32.86.50,52783.0,->,195.117.18.73,80.0,FSPA_FSPA,0.0,0.0,16,7258,1657,5601,453.625,0.22829980710939654,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:46:02.759074,61.282982,tcp,147.32.84.165,1103.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:46:02.857671,0.000173,udp,147.32.85.25,36003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:03.722703,3558.114014,tcp,193.68.13.150,60825.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,472,45583,27858,17725,96.57415254237289,0.6111488932277385,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:46:04.708524,0.000804,udp,197.225.3.160,26701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:05.084741,0.062487,tcp,147.32.86.164,2443.0,->,147.32.87.4,110.0,_FSPA,,0.0,18,1384,0,1384,76.88888888888889,0.0,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:46:06.969056,0.000249,udp,147.32.84.138,59752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:10.999694,0.000295,udp,147.32.84.170,39987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:11.001870,0.207966,tcp,147.32.84.170,39998.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:11.583741,0.00017,udp,147.32.84.138,41825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:12.402513,0.63382,udp,147.32.84.165,21936.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:46:13.404505,143.33046,udp,147.32.84.165,21937.0,<->,183.60.16.15,8000.0,CON,0.0,0.0,125,50474,14416,36058,403.792,0.2856123945001387,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:46:14.152958,0.141489,udp,147.32.84.229,13363.0,<->,24.224.177.3,25445.0,CON,0.0,0.0,2,537,477,60,268.5,0.888268156424581,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:16.651308,0.000362,udp,147.32.84.170,52424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:16.652226,0.000302,udp,147.32.84.170,43709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:19.402314,0.044176,udp,147.32.84.59,51301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,77,269,173.0,0.22254335260115607,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:19.613200,1752.303223,udp,147.32.84.229,13363.0,<->,77.57.174.35,21233.0,CON,0.0,0.0,6,3161,134,3027,526.8333333333334,0.04239164821259095,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:19.930647,3.67181,tcp,147.32.84.164,58764.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,13,4953,850,4103,381.0,0.17161316373914798,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:46:20.437223,0.000359,udp,129.241.69.116,5998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:22.075023,0.000825,udp,81.157.19.92,3930.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:22.207851,9.001981,tcp,77.34.126.182,53247.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:46:23.067955,0.423319,udp,147.32.84.165,21938.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:46:24.069813,35.69833,udp,147.32.84.165,21939.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,29,10426,3624,6802,359.51724137931035,0.34759255706886627,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:46:24.496591,0.000244,udp,147.32.84.138,47127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:24.504987,0.000349,udp,147.32.84.138,37082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:26.347968,6.004379,udp,147.32.84.229,13363.0,->,79.24.237.50,30683.0,INT,0.0,,3,465,465,0,155.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:46:26.497387,2481.02002,udp,212.233.154.14,61094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:26.649529,0.000362,udp,147.32.84.170,55480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:27.204296,0.000237,udp,147.32.84.138,43770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:27.866828,1836.311768,udp,147.32.84.229,13363.0,<->,149.5.45.252,43004.0,CON,0.0,0.0,10,680,370,310,68.0,0.5441176470588235,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:32.426121,0.000292,udp,147.32.84.138,33596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:36.651069,0.000335,udp,147.32.84.170,43695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:46:38.428941,0.000636,udp,78.24.157.162,10221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:38.860930,0.63752,udp,147.32.84.165,21940.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:46:39.499428,76.865601,udp,147.32.84.165,21941.0,<->,112.95.240.134,8000.0,CON,0.0,0.0,107,44654,11848,32806,417.32710280373834,0.26532897388811755,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:46:40.710804,0.00042,udp,147.32.84.138,37651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:44.496028,9.010025,tcp,147.32.87.38,52765.0,->,95.168.205.38,25.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:46:45.519711,0.000198,udp,147.32.84.138,44077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:45.657210,0.00185,udp,147.32.85.30,53754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,81,145,113.0,0.3584070796460177,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:46.652971,0.000345,udp,147.32.84.138,49001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:49.144102,0.000378,udp,147.32.85.25,53885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:49.462113,0.04518,udp,147.32.84.229,13363.0,<->,146.247.179.114,14230.0,CON,0.0,0.0,4,2998,60,2938,749.5,0.0200133422281521,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:46:49.549198,45.119419,tcp,147.32.84.164,58982.0,->,75.101.155.168,80.0,S_,0.0,,5,370,370,0,74.0,1.0,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:46:50.047790,0.000272,udp,147.32.84.138,34564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:46:56.652547,0.000357,udp,147.32.84.170,46134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:00.822231,0.623689,udp,147.32.84.165,21942.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:47:01.446762,58.048985,udp,147.32.84.165,21943.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,100,42220,11250,30970,422.2,0.26646139270487923,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:47:01.501063,1.855334,udp,147.32.84.59,31897.0,<->,109.201.177.215,59325.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:47:02.287822,0.000593,udp,113.210.226.99,61261.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:03.133403,0.000252,udp,147.32.84.138,59568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:03.497557,1862.675903,udp,134.121.84.130,37457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,651,134,517,162.75,0.20583717357910905,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:03.607367,0.000236,udp,147.32.84.138,36471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:03.617005,61.280258,tcp,147.32.84.165,1104.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:47:03.622740,0.000357,udp,147.32.84.138,37595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:05.374368,524.668518,udp,147.32.84.94,7103.0,->,174.126.7.10,6458.0,INT,0.0,,5,420,420,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:47:06.621236,0.000252,udp,147.32.85.34,50893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:06.622355,0.000348,udp,147.32.85.34,54519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:08.471122,0.000305,udp,147.32.84.138,34441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:10.460987,0.000236,udp,147.32.84.138,52577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:11.993210,0.000386,udp,147.32.84.170,43320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:16.651728,0.000266,udp,147.32.84.170,51032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:17.004657,0.000374,udp,147.32.84.138,53852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:19.441687,0.35481,udp,147.32.84.229,13363.0,<->,114.24.109.212,62430.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:20.272522,115.379654,tcp,147.32.86.168,46082.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,79,63410,3209,60201,802.6582278481013,0.05060715975398202,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:47:21.016572,0.000276,udp,147.32.84.138,43910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:31.010516,0.009594,udp,147.32.84.132,49836.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,174,79,95,87.0,0.4540229885057471,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:31.520951,0.0,tcp,113.105.171.58,80.0,->,147.32.85.6,18026.0,SA_,0.0,,1,66,66,0,66.0,1.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:47:31.693126,0.0,udp,192.168.88.79,52069.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:47:32.163106,0.057622,tcp,147.32.84.59,60367.0,->,64.236.124.229,80.0,SRPA_FSPA,0.0,0.0,9,1194,831,363,132.66666666666666,0.6959798994974874,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:47:33.016444,0.003198,udp,147.32.84.59,51381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:33.572490,0.0003,udp,147.32.84.138,59741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:36.651212,0.000491,udp,147.32.84.170,51730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:36.652144,0.000302,udp,147.32.84.170,39907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:36.653253,0.018266,tcp,147.32.84.170,47948.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:36.699235,0.00166,udp,79.11.56.166,25809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:41.264521,0.000228,udp,147.32.84.138,52124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:41.667027,0.0,tcp,147.32.84.165,1105.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:41.678422,0.0,tcp,147.32.84.165,1106.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:41.678966,0.0,tcp,147.32.84.165,1108.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:41.841606,0.0,tcp,147.32.84.165,1109.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:41.841956,0.0,tcp,147.32.84.165,1110.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:41.852388,0.0,tcp,147.32.84.165,1112.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:42.041653,0.0,tcp,147.32.84.165,1113.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:42.042027,0.0,tcp,147.32.84.165,1114.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:42.813031,0.0,tcp,147.32.84.165,1117.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:42.999783,0.000315,udp,147.32.84.170,45339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:43.614487,0.0,tcp,147.32.84.165,1116.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:46.650740,0.000382,udp,147.32.84.170,58183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:47:50.068477,0.000945,udp,98.243.170.223,18357.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:51.054303,2377.546875,udp,147.32.84.229,13363.0,<->,92.126.116.103,45221.0,CON,0.0,0.0,9,1276,1058,218,141.77777777777777,0.829153605015674,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:51.059533,0.000336,udp,147.32.84.138,33673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:51.858260,0.000823,udp,109.205.253.140,45162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,302,64,238,151.0,0.2119205298013245,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:53.792711,0.000409,udp,147.32.84.59,57727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:53.916056,0.330001,tcp,147.32.84.59,57726.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1541,699,842,171.22222222222223,0.4536015574302401,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:47:55.230670,0.0,tcp,147.32.84.165,1340.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.231026,0.0,tcp,147.32.84.165,1339.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.784332,0.037137,udp,147.32.86.58,49158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:55.831853,0.0,tcp,147.32.84.165,1350.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.832085,0.0,tcp,147.32.84.165,1352.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.832247,0.0,tcp,147.32.84.165,1351.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.832346,0.0,tcp,147.32.84.165,1354.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:55.832460,0.0,tcp,147.32.84.165,1356.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:47:57.645104,0.0,tcp,192.168.88.107,62627.0,?>,204.9.177.195,80.0,RA_,0.0,,1,60,60,0,60.0,1.0,14,1,flow=Background,Background,-1 2011-08-16 14:47:58.085470,0.621072,udp,147.32.84.165,21944.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:47:58.378402,0.00037,udp,147.32.85.34,63113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:47:58.707462,16.115496,udp,147.32.84.165,21945.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,19,6742,2476,4266,354.8421052631579,0.36725007416196975,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:47:58.730442,0.000808,udp,93.127.117.7,58151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,76,481,278.5,0.13644524236983843,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:47:59.875185,3005.906494,udp,66.131.165.81,58913.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1701,1521,180,283.5,0.8941798941798942,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:00.706114,0.000803,udp,219.117.222.47,62066.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,74,468,271.0,0.13653136531365315,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:00.739085,0.627288,udp,147.32.84.165,21946.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:48:01.740440,132.571609,udp,147.32.84.165,21947.0,<->,119.147.45.254,8000.0,CON,0.0,0.0,131,53582,15276,38306,409.0229007633588,0.2850957411070882,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:48:02.481102,0.000888,udp,108.89.36.25,64821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:04.615676,0.000331,udp,147.32.85.7,57763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:05.858726,0.025058,udp,147.32.85.7,54425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,72,194,133.0,0.2706766917293233,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:06.101243,0.000259,udp,147.32.85.7,53504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,72,194,133.0,0.2706766917293233,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:06.311781,0.000885,udp,93.38.152.204,20027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:06.383850,0.001819,udp,24.113.183.106,63819.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:06.650578,0.000324,udp,147.32.84.170,55531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:06.887388,0.000272,udp,147.32.85.25,51431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:07.248398,61.29995,tcp,147.32.84.165,1561.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:48:07.248529,0.0,tcp,147.32.84.165,1576.0,->,192.168.0.118,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.248582,0.0,tcp,147.32.84.165,1575.0,->,147.33.84.118,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.678550,0.0,tcp,147.32.84.165,1589.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.848904,0.0,tcp,147.32.84.165,1588.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.848959,0.0,tcp,147.32.84.165,1587.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.849012,0.0,tcp,147.32.84.165,1593.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.849094,0.0,tcp,147.32.84.165,1592.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:07.849174,0.0,tcp,147.32.84.165,1591.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:09.354350,0.000397,udp,147.32.84.138,48029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:11.663623,3024.911133,udp,94.163.62.14,21945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1455,1083,372,121.25,0.7443298969072165,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:11.675617,2.50823,tcp,66.249.66.119,53787.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,12,3096,817,2279,258.0,0.2638888888888889,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:48:13.217988,0.0,tcp,123.212.43.140,1723.0,->,147.32.85.14,19307.0,SA_,0.0,,1,62,62,0,62.0,1.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:48:14.034814,0.289623,tcp,147.32.84.170,60739.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.041961,0.000379,udp,147.32.84.170,42253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.043099,240.347839,tcp,147.32.84.170,60610.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,81,31920,23121,8799,394.0740740740741,0.7243421052631579,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.043220,240.052429,tcp,147.32.84.170,60613.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.043263,240.052231,tcp,147.32.84.170,60614.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.043321,240.052185,tcp,147.32.84.170,60615.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:14.965223,0.000264,udp,147.32.84.138,41516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:15.353623,759.252625,udp,123.156.213.174,17095.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1285,904,381,128.5,0.7035019455252919,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:16.001965,0.488637,udp,147.32.84.165,21948.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:48:16.652855,0.018386,tcp,147.32.84.170,39207.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:17.003231,34.746269,udp,147.32.84.165,21949.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,56,23404,6542,16862,417.92857142857144,0.27952486754400957,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:48:19.265070,0.0,tcp,147.32.84.165,1817.0,->,147.32.79.178,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866324,0.0,tcp,147.32.84.165,1828.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866418,0.0,tcp,147.32.84.165,1827.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866429,0.0,tcp,147.32.84.165,1829.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866551,0.0,tcp,147.32.84.165,1832.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866562,0.0,tcp,147.32.84.165,1831.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.866566,0.0,tcp,147.32.84.165,1833.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.867194,0.0,tcp,147.32.84.165,1836.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:19.951121,0.000618,udp,78.27.229.66,9282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:20.481300,0.000518,udp,147.32.84.59,53153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,583,77,506,291.5,0.1320754716981132,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:23.136729,0.001718,udp,147.32.84.59,58699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,472,79,393,236.0,0.1673728813559322,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:25.290726,0.034084,udp,147.32.84.59,49396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:25.467676,21.865936,tcp,220.255.1.98,21364.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,10,600,360,240,60.0,0.6,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:48:26.650919,0.000342,udp,147.32.84.170,57265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:31.282879,0.0,tcp,147.32.84.165,2051.0,->,147.33.84.237,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.283036,0.0,tcp,147.32.84.165,2053.0,->,147.32.79.237,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884009,0.0,tcp,147.32.84.165,2064.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884061,0.0,tcp,147.32.84.165,2063.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884114,0.0,tcp,147.32.84.165,2065.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884229,0.0,tcp,147.32.84.165,2068.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884278,0.0,tcp,147.32.84.165,2067.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:31.884337,0.0,tcp,147.32.84.165,2069.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:33.892441,0.000241,udp,147.32.84.138,45943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:34.058310,41.316174,tcp,147.32.84.59,50261.0,->,62.44.12.24,993.0,FSPA_FSPA,0.0,0.0,33,5271,1753,3518,159.72727272727272,0.3325744640485676,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:48:36.652926,0.018498,tcp,147.32.84.170,40108.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:37.256221,0.000367,udp,147.32.86.20,49434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:37.526961,35.329075,tcp,147.32.84.59,49408.0,->,147.32.30.134,80.0,SRPA_FSPA,0.0,0.0,83,69939,6875,63064,842.6385542168674,0.09829994709675574,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:48:37.777709,0.000343,udp,147.32.84.138,53285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:38.341275,0.000657,udp,147.32.84.59,65448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,96,255,175.5,0.27350427350427353,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:39.058445,0.64705,udp,147.32.84.165,21950.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:48:40.057496,17.870131,udp,147.32.84.165,21951.0,<->,183.60.49.123,8000.0,CON,0.0,0.0,23,8726,2904,5822,379.39130434782606,0.33279853311941326,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:48:41.405734,303.484406,tcp,147.32.84.59,60426.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,32,14629,1325,13304,457.15625,0.09057351835395447,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:48:42.185947,0.304672,tcp,147.32.86.223,9101.0,->,147.228.47.183,8009.0,FSRPA_FSPA,0.0,0.0,12,2028,1017,1011,169.0,0.5014792899408284,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:48:42.623749,0.130874,udp,147.32.84.59,15675.0,<->,72.39.136.233,19098.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:48:43.301216,0.0,tcp,147.32.84.165,2249.0,->,192.168.1.43,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:43.901523,0.0,tcp,147.32.84.165,2259.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:43.901537,0.0,tcp,147.32.84.165,2258.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:43.901543,0.0,tcp,147.32.84.165,2262.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:43.901694,0.0,tcp,147.32.84.165,2261.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:43.901708,0.0,tcp,147.32.84.165,2265.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:46.652558,0.000358,udp,147.32.84.170,37569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:47.491504,0.304924,tcp,147.32.86.223,9102.0,->,147.228.47.183,8009.0,SRPA_FSPA,0.0,0.0,11,1967,1016,951,178.8181818181818,0.5165226232841891,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:48:50.500027,0.000399,udp,147.32.84.138,56051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:50.588734,0.147257,udp,147.32.84.59,22975.0,<->,68.21.200.166,53249.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:48:51.906558,534.765747,udp,147.32.84.229,13363.0,<->,67.11.29.170,61806.0,CON,0.0,0.0,4,1105,533,572,276.25,0.4823529411764706,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:52.815473,0.628926,udp,147.32.84.165,21952.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:48:53.816330,34.674545,udp,147.32.84.165,21953.0,<->,119.147.45.251,8000.0,CON,0.0,0.0,44,17284,5258,12026,392.8181818181818,0.30421198796574866,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:48:54.325400,3228.214355,udp,147.32.86.165,12114.0,<->,88.101.241.61,17085.0,CON,0.0,0.0,20,3951,3708,243,197.55,0.9384965831435079,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:54.553324,0.000357,udp,147.32.84.138,34724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:55.318715,0.0,tcp,147.32.84.165,2426.0,->,192.168.1.102,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.318895,0.0,tcp,147.32.84.165,2427.0,->,147.32.80.102,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.919551,0.0,tcp,147.32.84.165,2435.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.919556,0.0,tcp,147.32.84.165,2436.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.919677,0.0,tcp,147.32.84.165,2438.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.919727,0.0,tcp,147.32.84.165,2439.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:55.919837,0.0,tcp,147.32.84.165,2441.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:48:56.653040,0.000523,udp,147.32.84.170,52518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:48:56.717752,0.000378,udp,147.32.85.8,59408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:48:57.750517,0.000898,udp,92.20.127.50,49067.0,<->,147.32.86.165,12114.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:48:59.134141,0.636804,udp,147.32.84.165,21954.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:49:00.135571,16.735275,udp,147.32.84.165,21955.0,<->,112.95.240.134,8000.0,CON,0.0,0.0,27,10158,3332,6826,376.22222222222223,0.32801732624532387,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:49:00.510001,60.585449,tcp,147.32.84.59,51631.0,->,195.168.10.171,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:49:02.878305,0.000174,udp,147.32.84.138,53779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:04.400042,0.000252,udp,147.32.84.138,47906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:05.426587,0.078106,tcp,147.32.84.132,56587.0,->,178.21.152.13,80.0,SRPA_FSPA,0.0,0.0,8,2104,1272,832,263.0,0.6045627376425855,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:49:07.335380,0.0,tcp,147.32.84.165,2604.0,->,147.32.80.161,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.936963,0.0,tcp,147.32.84.165,2612.0,->,192.168.1.164,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.937113,0.0,tcp,147.32.84.165,2613.0,->,147.32.80.164,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.937300,0.0,tcp,147.32.84.165,2615.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.937305,0.0,tcp,147.32.84.165,2616.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.937309,0.0,tcp,147.32.84.165,2618.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:07.937378,0.0,tcp,147.32.84.165,2619.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:08.549064,0.963651,udp,78.128.179.192,53634.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:49:09.406472,0.000378,udp,147.32.85.25,34613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:09.759021,0.000908,udp,78.157.169.198,3170.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:12.854588,0.149462,udp,147.32.84.229,13363.0,<->,68.102.71.34,33480.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:15.006788,0.259347,tcp,147.32.84.170,40036.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:16.219017,0.000614,udp,147.142.13.56,49040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:16.651815,0.000358,udp,147.32.84.170,40789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:16.901786,0.00036,udp,147.32.85.8,44360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,86,198,142.0,0.3028169014084507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:17.430263,0.013281,tcp,147.32.84.215,39603.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:49:17.533689,0.17081,tcp,147.32.86.165,52331.0,->,217.67.25.236,80.0,FSPA_FSPA,0.0,0.0,39,36557,1656,34901,937.3589743589744,0.04529912191919468,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:49:17.901434,0.639194,udp,147.32.84.165,21956.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:49:18.326978,0.000337,udp,147.32.86.165,59305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,75,150,112.5,0.3333333333333333,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:18.383261,301.945465,tcp,147.32.86.165,52369.0,->,217.67.25.237,80.0,FSPA_FSRPA,0.0,0.0,319,321419,10092,311327,1007.5830721003135,0.03139826830398949,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:49:18.511549,0.000811,udp,61.78.108.107,4946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:18.902462,65.532639,udp,147.32.84.165,21957.0,<->,183.60.16.244,8000.0,CON,0.0,0.0,97,40218,11036,29182,414.6185567010309,0.27440449549952756,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:49:19.353366,61.283272,tcp,147.32.84.165,2644.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:49:19.391094,0.000416,udp,147.32.86.165,50976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:19.420055,0.002741,udp,147.32.86.165,58979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,74,170,122.0,0.30327868852459017,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:19.422287,0.000519,udp,147.32.84.138,59715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:19.778593,0.0,tcp,147.32.84.165,2790.0,->,192.168.1.223,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:19.953865,0.0,tcp,147.32.84.165,2791.0,->,147.32.80.223,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:19.954016,0.0,tcp,147.32.84.165,2793.0,->,192.168.1.224,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:19.954118,0.0,tcp,147.32.84.165,2794.0,->,147.32.80.224,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:19.954221,0.0,tcp,147.32.84.165,2796.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:19.954270,0.0,tcp,147.32.84.165,2797.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:26.653454,0.018882,tcp,147.32.84.170,39217.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:26.773922,0.762111,tcp,108.62.11.8,47499.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,20,9730,1095,8635,486.5,0.11253854059609456,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:49:27.338365,2927.921387,udp,93.89.101.96,1024.0,<->,147.32.85.56,44076.0,CON,0.0,0.0,4,252,126,126,63.0,0.5,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:28.480230,0.000685,udp,86.162.71.78,19639.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,74,465,269.5,0.137291280148423,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:28.613482,1841.252808,udp,190.195.40.151,64399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:28.721875,0.140792,udp,147.32.84.59,38035.0,<->,74.56.195.19,15669.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:49:29.402071,0.000264,udp,147.32.84.138,37114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:29.708200,0.494473,udp,147.32.84.165,21958.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:49:30.203652,45.452614,udp,147.32.84.165,21959.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,65,26210,7612,18598,403.2307692307692,0.29042350247996945,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:49:31.370424,0.0,tcp,147.32.84.165,2936.0,->,147.32.81.26,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:31.892668,0.000285,udp,147.32.84.138,44414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:31.971426,0.0,tcp,147.32.84.165,2942.0,->,147.32.81.29,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:31.971575,0.0,tcp,147.32.84.165,2944.0,->,147.32.81.30,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:31.971719,0.0,tcp,147.32.84.165,2946.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:31.971869,0.0,tcp,147.32.84.165,2948.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:31.974491,0.0,tcp,147.32.84.165,2950.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:36.651083,0.000278,udp,147.32.84.170,50823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:36.652632,0.017915,tcp,147.32.84.170,39218.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:38.296350,0.000597,udp,173.173.71.87,44597.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:43.014142,0.000214,udp,147.32.84.138,45304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:43.334539,3059.325195,udp,41.226.17.206,3622.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:43.988188,0.0,tcp,147.32.84.165,3060.0,->,147.32.81.88,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:43.988406,0.0,tcp,147.32.84.165,3062.0,->,147.32.81.89,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:43.988566,0.0,tcp,147.32.84.165,3064.0,->,147.32.81.90,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:43.989301,0.0,tcp,147.32.84.165,3066.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:44.589505,0.0,tcp,147.32.84.165,3068.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:46.002652,0.000303,udp,147.32.84.170,49998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:49:49.593685,3599.912354,tcp,86.139.108.111,65445.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,272,21848,11896,9952,80.32352941176471,0.5444891980959355,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:49:51.865230,0.000985,udp,178.0.149.150,54259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,76,472,274.0,0.1386861313868613,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:49:53.200235,0.000295,udp,147.32.86.50,58494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:55.404836,0.0,tcp,147.32.84.165,3172.0,->,147.32.81.144,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:56.005665,0.0,tcp,147.32.84.165,3178.0,->,147.32.81.147,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:56.005828,0.0,tcp,147.32.84.165,3180.0,->,147.32.81.148,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:56.606868,0.0,tcp,147.32.84.165,3184.0,->,147.32.81.150,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:56.607052,0.0,tcp,147.32.84.165,3186.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:49:57.854691,0.000316,udp,147.32.85.34,60124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:49:59.170372,0.209379,tcp,194.108.204.27,43570.0,->,147.32.84.138,8080.0,FSPA_FSPA,0.0,0.0,23,11554,1273,10281,502.3478260869565,0.1101782932317812,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:50:00.503921,0.087706,tcp,147.32.84.59,52664.0,->,62.44.29.56,110.0,FSPA_FSPA,0.0,0.0,23,1690,847,843,73.47826086956522,0.5011834319526627,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:50:02.395746,0.000378,udp,147.32.86.141,1038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:04.687381,114.984985,tcp,147.32.86.208,4126.0,->,209.85.149.95,80.0,FSPA_FSPA,0.0,0.0,10,1207,831,376,120.7,0.6884838442419221,14,1,flow=Background-ajax.google,Background,-1 2011-08-16 14:50:05.501181,0.00201,udp,60.251.55.209,18667.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,479,60,269.5,0.8886827458256029,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:07.422429,0.0,tcp,147.32.84.165,3290.0,->,147.32.81.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:08.023495,0.0,tcp,147.32.84.165,3296.0,->,147.32.81.206,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:08.023548,0.0,tcp,147.32.84.165,3298.0,->,147.32.81.207,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:08.624375,0.0,tcp,147.32.84.165,3302.0,->,147.32.81.209,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:08.624558,0.0,tcp,147.32.84.165,3304.0,->,147.32.81.210,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:11.918672,0.000316,udp,147.32.84.138,52429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:12.191939,0.000214,udp,147.32.85.25,44763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:12.518742,0.000216,udp,147.32.84.138,48383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:12.620383,0.000617,udp,83.149.3.82,41980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:14.802958,114.857315,tcp,147.32.86.168,39980.0,->,74.125.232.198,443.0,FSPA_FSPA,0.0,0.0,24,7048,4424,2624,293.6666666666667,0.6276958002270148,14,1,flow=Background-google-analytics7,Background,-1 2011-08-16 14:50:15.564717,0.641654,udp,147.32.84.165,21960.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:50:16.002574,0.00029,udp,147.32.84.170,56386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:16.004671,0.249786,tcp,147.32.84.170,32814.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:16.186861,0.000219,udp,147.32.84.138,36812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:16.565767,13.297112,udp,147.32.84.165,21961.0,<->,112.95.240.134,8000.0,CON,0.0,0.0,19,7206,2948,4258,379.2631578947368,0.4091035248404108,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:50:16.685902,0.619793,udp,147.32.84.165,21962.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:50:17.687498,36.043262,udp,147.32.84.165,21963.0,<->,183.60.49.125,8000.0,CON,0.0,0.0,29,11218,3760,7458,386.82758620689657,0.33517561062578,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:50:18.242146,34.680145,tcp,147.32.84.132,56603.0,->,194.0.251.214,80.0,SPA_SRPA,0.0,0.0,84,88924,4860,84064,1058.6190476190477,0.05465341190229859,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:50:19.439624,0.0,tcp,147.32.84.165,3411.0,->,147.32.82.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:20.040952,0.0,tcp,147.32.84.165,3417.0,->,147.32.82.12,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:20.041065,0.0,tcp,147.32.84.165,3419.0,->,147.32.82.13,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:20.641320,61.271507,tcp,147.32.84.165,3438.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:50:20.641418,0.0,tcp,147.32.84.165,3423.0,->,147.32.82.15,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:20.641470,0.0,tcp,147.32.84.165,3425.0,->,147.32.82.16,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:20.930831,0.000363,udp,147.32.86.168,41307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,74,386,230.0,0.1608695652173913,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:21.004209,0.028765,udp,147.32.84.134,33509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:50:22.136785,0.000255,udp,147.32.84.138,41321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:25.679107,0.634729,udp,147.32.84.165,21964.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:50:26.639178,18.440817,tcp,147.32.85.6,50722.0,->,77.75.72.72,80.0,FSPA_FSPA,0.0,0.0,13,3622,1284,2338,278.61538461538464,0.3545002760905577,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:50:26.651562,0.000326,udp,147.32.84.170,54287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:26.652410,0.000344,udp,147.32.84.170,33056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:26.653455,0.017987,tcp,147.32.84.170,53240.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:26.674234,0.000295,udp,147.32.85.6,60179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:26.680435,130.113739,udp,147.32.84.165,21965.0,<->,183.60.49.31,8000.0,CON,0.0,0.0,104,41804,12494,29310,401.96153846153845,0.2988709214429241,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:50:26.768186,1.133124,tcp,147.32.84.59,56635.0,->,217.174.48.64,80.0,FSPA_FSPA,0.0,0.0,16,1204,726,478,75.25,0.6029900332225914,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:50:27.095123,3080.196777,udp,60.50.45.218,56582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,404,224,180,67.33333333333333,0.5544554455445545,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:30.997583,9.447393,udp,147.32.84.165,21966.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:50:31.457292,0.0,tcp,147.32.84.165,3532.0,->,147.32.82.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:31.586815,0.0,udp,192.168.88.79,50511.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,14,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:50:31.929921,2441.885254,icmp,95.189.34.59,771.0,->,147.32.84.229,45897.0,URP,0.0,,4,404,404,0,101.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:50:32.057980,0.0,tcp,147.32.84.165,3537.0,->,147.32.87.72,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.058057,0.0,tcp,147.32.84.165,3538.0,->,147.32.82.72,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.058161,0.0,tcp,147.32.84.165,3539.0,->,147.32.87.73,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.058165,0.0,tcp,147.32.84.165,3540.0,->,147.32.82.73,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.058261,0.0,tcp,147.32.84.165,3541.0,->,147.32.87.74,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.659454,0.0,tcp,147.32.84.165,3544.0,->,147.32.82.75,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.659565,0.0,tcp,147.32.84.165,3543.0,->,147.32.87.75,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.659580,0.0,tcp,147.32.84.165,3546.0,->,147.32.82.76,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:32.659675,0.0,tcp,147.32.84.165,3545.0,->,147.32.87.76,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:36.650729,0.000417,udp,147.32.84.170,46861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:36.651599,0.000349,udp,147.32.84.170,48883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:39.506651,2435.38208,udp,50.81.112.5,21368.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1203,893,310,120.3,0.742310889443059,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:39.735469,1390.859009,udp,61.63.113.74,38989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1451,1151,300,145.1,0.7932460372157133,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:39.812428,0.00022,udp,147.32.84.138,45953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:40.445871,2.637027,udp,147.32.84.165,21967.0,<->,112.95.240.64,8000.0,CON,0.0,0.0,10,3160,1406,1754,316.0,0.4449367088607595,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:50:40.452890,0.000304,udp,147.32.85.30,65384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:43.197800,0.000284,udp,147.32.84.138,56339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:43.474562,0.0,tcp,147.32.84.165,3652.0,->,147.32.82.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:44.075726,0.0,tcp,147.32.84.165,3658.0,->,147.32.82.132,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:44.075834,0.0,tcp,147.32.84.165,3660.0,->,147.32.82.133,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:44.145878,0.493789,udp,147.32.84.165,21968.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:50:44.640613,46.850071,udp,147.32.84.165,21969.0,<->,112.90.86.184,8000.0,CON,0.0,0.0,57,23170,6756,16414,406.49122807017545,0.2915839447561502,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:50:44.676496,0.0,tcp,147.32.84.165,3664.0,->,147.32.82.135,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:44.676688,0.0,tcp,147.32.84.165,3666.0,->,147.32.82.136,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:46.651834,0.000326,udp,147.32.84.170,35623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:46.652898,0.018,tcp,147.32.84.170,53640.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:47.003331,0.000291,udp,147.32.84.170,41230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:47.865992,0.000246,udp,147.32.84.138,54886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:50:54.971839,0.643617,udp,147.32.84.165,21970.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:50:55.491674,0.0,tcp,147.32.84.165,3772.0,->,147.32.82.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:55.972700,135.902924,udp,147.32.84.165,21971.0,<->,119.147.45.253,8000.0,CON,0.0,0.0,158,66608,17626,48982,421.56962025316454,0.2646228681239491,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:50:56.092345,0.0,tcp,147.32.84.165,3778.0,->,147.32.82.192,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:56.092404,0.0,tcp,147.32.84.165,3780.0,->,147.32.82.193,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:56.542084,0.000609,udp,200.7.224.65,32454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:50:56.652643,0.000237,udp,147.32.84.170,59166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:56.653648,0.018421,tcp,147.32.84.170,52230.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:50:56.693571,0.0,tcp,147.32.84.165,3784.0,->,147.32.82.195,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:56.693687,0.0,tcp,147.32.84.165,3786.0,->,147.32.82.196,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:50:57.480060,0.001087,udp,203.58.25.242,16941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,947,72,875,473.5,0.07602956705385427,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:01.539993,0.000679,udp,84.2.17.34,26113.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:04.380871,0.000893,udp,147.32.84.171,35085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:05.075004,0.000392,udp,147.32.84.138,37408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:05.644887,3057.611084,udp,178.89.92.49,42411.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:06.652347,0.000374,udp,147.32.84.170,52774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:06.653508,0.018276,tcp,147.32.84.170,51777.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:07.508755,0.0,tcp,147.32.84.165,3890.0,->,147.32.82.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:08.110039,0.0,tcp,147.32.84.165,3896.0,->,147.32.82.251,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:08.110153,0.0,tcp,147.32.84.165,3898.0,->,147.32.82.252,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:08.710630,0.0,tcp,147.32.84.165,3902.0,->,147.32.82.254,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:08.710819,0.0,tcp,147.32.84.165,3904.0,->,147.32.83.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:08.710876,0.0,tcp,147.32.84.165,3903.0,->,147.32.88.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:12.131049,0.080598,udp,147.32.84.59,49671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,81,459,270.0,0.15,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:13.303320,2455.592529,udp,147.32.84.229,13363.0,<->,119.14.191.164,18012.0,CON,0.0,0.0,4,1102,544,558,275.5,0.49364791288566245,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:13.509100,518.911987,udp,147.32.84.94,7103.0,->,50.11.67.255,50318.0,INT,0.0,,8,672,672,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:51:13.777179,0.000245,udp,147.32.85.25,33067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:16.650875,0.000435,udp,147.32.84.170,33173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:17.007442,0.000722,udp,147.32.86.134,60117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,83,546,314.5,0.13195548489666137,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:18.014455,0.204622,tcp,147.32.84.170,32825.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:19.526018,0.0,tcp,147.32.84.165,4008.0,->,147.32.83.53,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.127646,0.0,tcp,147.32.84.165,4013.0,->,147.32.88.56,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.127803,0.0,tcp,147.32.84.165,4014.0,->,147.32.83.56,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.127875,0.0,tcp,147.32.84.165,4015.0,->,147.32.88.57,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.127983,0.0,tcp,147.32.84.165,4016.0,->,147.32.83.57,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.128089,0.0,tcp,147.32.84.165,4017.0,->,147.32.88.58,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.727774,0.0,tcp,147.32.84.165,4020.0,->,147.32.83.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.727918,0.0,tcp,147.32.84.165,4019.0,->,147.32.88.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.727998,0.0,tcp,147.32.84.165,4022.0,->,147.32.83.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:20.728090,0.0,tcp,147.32.84.165,4021.0,->,147.32.88.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:21.197701,0.000229,udp,147.32.84.164,55645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:51:21.730924,1290.649048,udp,119.150.96.195,14245.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,696,152,544,174.0,0.21839080459770116,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:25.445543,0.00021,udp,147.32.84.138,51199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:26.372268,0.000292,udp,147.32.84.138,49018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:31.544709,61.295368,tcp,147.32.84.165,4047.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:51:31.915076,1770.779419,icmp,85.93.204.203,3331.0,->,147.32.84.94,,URFIL,0.0,,11,770,770,0,70.0,1.0,14,,flow=Background,Background,-1 2011-08-16 14:51:31.974465,0.0,tcp,147.32.84.165,4133.0,->,147.32.83.115,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.145490,0.0,tcp,147.32.84.165,4134.0,->,147.32.88.116,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.145537,0.0,tcp,147.32.84.165,4135.0,->,147.32.83.116,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.145541,0.0,tcp,147.32.84.165,4136.0,->,147.32.88.117,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.145578,0.0,tcp,147.32.84.165,4137.0,->,147.32.83.117,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.145630,0.0,tcp,147.32.84.165,4139.0,->,147.32.88.118,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.516705,0.631925,udp,147.32.84.165,21972.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:51:32.746262,0.0,tcp,147.32.84.165,4141.0,->,147.32.83.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.746424,0.0,tcp,147.32.84.165,4140.0,->,147.32.88.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.746431,0.0,tcp,147.32.84.165,4143.0,->,147.32.83.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:32.746508,0.0,tcp,147.32.84.165,4142.0,->,147.32.88.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:33.518069,101.422661,udp,147.32.84.165,21973.0,<->,183.60.48.105,8000.0,CON,0.0,0.0,143,61102,15700,45402,427.2867132867133,0.2569473994304605,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:51:33.729411,0.000252,udp,147.32.84.138,43511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:35.466814,0.000747,udp,99.249.122.169,4463.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:36.621886,0.000484,udp,147.32.84.59,45073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:36.653806,0.000475,udp,147.32.84.170,35911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:40.852819,0.02295,tcp,90.183.39.17,57536.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,16,10205,981,9224,637.8125,0.09612934835864773,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:51:43.275635,0.000519,udp,147.32.84.164,59343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,81,403,242.0,0.16735537190082644,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:51:43.563320,0.0,tcp,147.32.84.165,4247.0,->,147.32.83.172,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.086528,0.000746,udp,178.24.82.19,41026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,81,487,284.0,0.1426056338028169,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:44.163735,0.0,tcp,147.32.84.165,4252.0,->,147.32.88.175,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.163955,0.0,tcp,147.32.84.165,4253.0,->,147.32.83.175,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.163967,0.0,tcp,147.32.84.165,4254.0,->,147.32.88.176,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.163973,0.0,tcp,147.32.84.165,4255.0,->,147.32.83.176,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.163977,0.0,tcp,147.32.84.165,4256.0,->,147.32.88.177,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.549664,0.000348,udp,147.32.84.138,55481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:44.765015,0.0,tcp,147.32.84.165,4259.0,->,147.32.83.178,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.765208,0.0,tcp,147.32.84.165,4258.0,->,147.32.88.178,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.765223,0.0,tcp,147.32.84.165,4261.0,->,147.32.83.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:44.765228,0.0,tcp,147.32.84.165,4260.0,->,147.32.88.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:48.006121,0.000349,udp,147.32.84.170,35355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:48.716802,0.000258,udp,147.32.85.8,38404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,77,146,111.5,0.3452914798206278,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:48.884682,0.00039,udp,147.32.86.134,52525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,87,268,177.5,0.24507042253521127,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:50.768289,0.000235,udp,147.32.84.138,60357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:51.979570,7.2e-05,udp,147.32.84.138,32970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:51:52.341999,2412.397949,tcp,147.32.86.44,3511.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,320,117925,77141,40784,368.515625,0.6541530633877465,14,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:51:55.580281,0.0,tcp,147.32.84.165,4367.0,->,147.32.83.232,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:55.666843,2202.434326,udp,188.168.216.118,62323.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1044,801,243,130.5,0.7672413793103449,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:56.181580,0.0,tcp,147.32.84.165,4372.0,->,147.32.88.235,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.181764,0.0,tcp,147.32.84.165,4373.0,->,147.32.83.235,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.181779,0.0,tcp,147.32.84.165,4374.0,->,147.32.88.236,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.181784,0.0,tcp,147.32.84.165,4375.0,->,147.32.83.236,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.181872,0.0,tcp,147.32.84.165,4376.0,->,147.32.88.237,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.653748,0.000309,udp,147.32.84.170,33522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:56.654770,0.018471,tcp,147.32.84.170,51785.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:51:56.732302,3048.491699,udp,93.185.22.57,51154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:51:56.782105,0.0,tcp,147.32.84.165,4379.0,->,147.32.83.238,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.782195,0.0,tcp,147.32.84.165,4378.0,->,147.32.88.238,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.782202,0.0,tcp,147.32.84.165,4381.0,->,147.32.83.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:56.782244,0.0,tcp,147.32.84.165,4380.0,->,147.32.88.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,14,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 14:51:58.264215,0.000327,udp,147.32.85.34,57302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:00.820561,15.346679,tcp,147.32.84.132,56663.0,->,194.0.251.214,80.0,FSPA_FSPA,0.0,0.0,11,3283,797,2486,298.45454545454544,0.24276576302162656,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:52:03.300872,16.176483,tcp,147.32.84.59,54564.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:52:03.552493,0.00206,udp,95.70.115.39,64538.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:04.590619,3403.142822,udp,147.32.84.229,13363.0,<->,183.176.191.166,12493.0,CON,0.0,0.0,8,3251,213,3038,406.375,0.06551830206090434,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:04.901348,0.000312,udp,147.32.84.59,55314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,75,141,108.0,0.3472222222222222,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:06.653735,0.000406,udp,147.32.84.170,60953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:09.032608,0.000396,udp,147.32.85.87,51717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:12.596393,2286.826416,udp,188.36.0.252,6563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:14.950606,0.000149,udp,147.32.84.138,60697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:16.429750,0.000362,udp,147.32.84.138,58591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:16.655735,0.000478,udp,147.32.84.170,49294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:16.656951,0.018384,tcp,147.32.84.170,58893.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:19.005558,0.000253,udp,147.32.84.170,47908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:19.278955,0.000224,udp,147.32.84.138,44341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:23.539523,0.000349,udp,147.32.84.59,56692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:26.061436,8.993256,tcp,41.208.170.108,60188.0,->,147.32.87.220,443.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,14,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:52:28.008567,0.000171,udp,147.32.85.25,37167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:29.004617,0.000258,udp,147.32.84.59,44187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:29.472557,0.000146,udp,147.32.84.138,49032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:29.564770,0.000396,udp,147.32.84.134,57029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:52:29.947957,2050.140137,udp,147.32.84.229,13363.0,<->,85.130.66.189,22516.0,CON,0.0,0.0,4,301,136,165,75.25,0.45182724252491696,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:30.307571,0.000684,udp,147.32.85.36,58154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:30.451245,0.005395,udp,147.32.85.36,57684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:31.609625,0.303202,tcp,147.32.87.252,1.0,?>,192.168.88.91,44210.0,RA_,0.0,,4,240,240,0,60.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:52:32.414523,61.288223,tcp,147.32.84.165,4412.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:52:32.945137,15.18001,udp,147.32.84.94,7103.0,->,212.41.67.94,17560.0,INT,0.0,,4,336,336,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:52:33.802180,53.089558,tcp,95.75.219.95,53613.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,32,2765,1513,1252,86.40625,0.5471971066907776,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:52:36.753093,26.137928,tcp,147.32.84.132,56682.0,->,194.0.251.213,80.0,SPA_SRPA,0.0,0.0,8,2660,677,1983,332.5,0.25451127819548874,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:52:37.345563,0.000287,udp,147.32.84.138,51407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:37.992381,0.640488,udp,147.32.84.165,21974.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:52:38.993736,20.849554,udp,147.32.84.165,21975.0,<->,183.60.49.30,8000.0,CON,0.0,0.0,9,2618,1148,1470,290.8888888888889,0.4385026737967914,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:52:42.788391,0.000677,udp,95.25.100.124,19740.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:43.317870,0.000256,udp,147.32.84.138,60666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:46.530109,30.358379,tcp,147.32.84.194,1219.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,154,121108,11293,109815,786.4155844155844,0.09324734947319747,14,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:52:46.654995,0.01818,tcp,147.32.84.170,53259.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:47.293132,0.000436,udp,147.32.84.59,33880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:48.761484,0.004313,udp,78.225.47.89,15573.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3011,60,2951,752.75,0.019926934573231483,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:49.356655,0.028332,udp,147.32.84.94,59890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,75,312,193.5,0.1937984496124031,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:49.988823,0.000202,udp,147.32.84.170,40350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:49.989624,0.000348,udp,147.32.84.170,37503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:50.016355,0.000427,udp,147.32.85.6,50497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:50.309956,100.454102,tcp,147.32.84.59,4121.0,->,69.171.242.13,443.0,FSPA_FSPA,0.0,0.0,16,4022,2365,1657,251.375,0.5880159124813525,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:52:55.136959,20.825794,tcp,147.32.85.6,50804.0,->,77.75.77.134,80.0,FSPA_FSPA,0.0,0.0,13,2667,1325,1342,205.15384615384616,0.49681289838770154,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:52:55.333124,0.126039,udp,147.32.84.94,40237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,108,183,145.5,0.3711340206185567,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:52:56.653975,0.00041,udp,147.32.84.170,46974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:56.656038,0.018156,tcp,147.32.84.170,52399.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:52:57.800421,0.002151,udp,61.33.236.140,12525.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:52:59.835746,0.001903,udp,78.100.172.233,55144.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:03.339896,0.03718,udp,147.32.84.59,61316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:03.714359,0.11734,udp,147.32.84.59,60939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,520,76,444,260.0,0.14615384615384616,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:06.002464,0.000375,udp,147.32.85.7,56398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,72,366,219.0,0.1643835616438356,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:06.047527,0.000351,udp,147.32.84.59,52372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:06.653785,0.000361,udp,147.32.84.170,60324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:06.655763,0.018486,tcp,147.32.84.170,53660.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:09.249704,0.0,tcp,149.3.129.194,46155.0,?>,147.32.84.69,46532.0,R_,0.0,,1,60,60,0,60.0,1.0,14,0,flow=Background,Background,-1 2011-08-16 14:53:09.747813,0.00022,udp,147.32.84.138,49646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:10.168730,10.448571,udp,147.32.84.165,21976.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:53:13.208066,0.001864,udp,77.171.88.37,59436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:13.650854,0.276406,tcp,147.32.84.170,57854.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:13.662613,0.263901,tcp,147.32.84.170,35716.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:13.803816,0.444419,udp,147.32.84.165,21977.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:53:13.919560,0.362272,tcp,147.32.84.170,57856.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:14.249069,5.438041,udp,147.32.84.165,21978.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,18,6848,2262,4586,380.44444444444446,0.33031542056074764,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:53:15.564908,0.000715,udp,99.192.78.39,53469.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:15.858369,0.000278,udp,147.32.84.59,62347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:15.958290,0.000345,udp,147.32.84.138,41705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:16.788015,9.452531,udp,147.32.84.165,21979.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:53:19.954353,0.000303,udp,147.32.84.138,37567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:20.618164,44.168472,udp,147.32.84.165,21980.0,<->,183.60.16.15,8000.0,CON,0.0,0.0,45,17922,5376,12546,398.26666666666665,0.2999665215935721,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:53:20.693542,0.634453,udp,147.32.84.165,21981.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:53:21.004065,0.000369,udp,147.32.84.170,50451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:21.006087,0.221309,tcp,147.32.84.170,32847.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:21.328967,44.089851,udp,147.32.84.165,21982.0,<->,112.95.240.126,8000.0,CON,0.0,0.0,57,22786,6756,16030,399.7543859649123,0.29649784955674535,14,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 14:53:22.468887,0.000393,udp,147.32.86.168,60809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:24.561702,0.000245,udp,147.32.84.138,36088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:26.241524,10.033503,udp,147.32.84.165,21983.0,<->,119.147.45.251,8000.0,CON,0.0,0.0,26,10072,3118,6954,387.38461538461536,0.3095710881652105,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:53:26.485036,0.0002,udp,147.32.84.184,45316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:26.501258,0.000204,udp,147.32.84.138,60763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:28.167103,1447.376221,udp,189.18.24.179,13201.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,4039,180,3859,504.875,0.04456548650656103,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:32.565735,4.351918,tcp,147.32.86.110,40589.0,->,147.32.192.127,443.0,FSRPA_FSPA,0.0,0.0,38,20943,2507,18436,551.1315789473684,0.11970586830922027,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:53:33.272831,61.334972,tcp,147.32.84.165,4414.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:53:34.744084,115.226715,tcp,147.32.85.26,59494.0,->,217.11.235.111,80.0,FSPA_FSPA,0.0,0.0,10,2267,781,1486,226.7,0.34450816056462286,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:53:36.656058,0.000309,udp,147.32.84.170,43314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:37.517769,0.641165,udp,147.32.84.165,21984.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:53:38.159861,43.583912,udp,147.32.84.165,21985.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,57,23498,6756,16742,412.2456140350877,0.2875138309643374,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:53:39.891754,0.020487,tcp,147.32.85.26,59595.0,->,89.185.231.147,80.0,SRPA_FSPA,0.0,0.0,11,1927,826,1101,175.1818181818182,0.4286455630513752,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:53:40.364870,0.000305,udp,147.32.85.25,48545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:42.269962,0.000272,udp,147.32.84.138,48429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:42.648084,0.004094,udp,77.90.126.63,12117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3009,60,2949,752.25,0.019940179461615155,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:46.214576,0.000388,udp,147.32.86.134,58707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:46.654536,0.000346,udp,147.32.84.170,34414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:53:50.843299,0.001818,udp,92.248.128.55,33030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,492,60,276.0,0.8913043478260869,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:53:50.961186,0.000169,udp,147.32.84.138,50374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:52.374912,0.000215,udp,147.32.84.59,50931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:55.384185,0.000316,udp,147.32.84.138,52054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:53:57.445221,0.012754,tcp,147.32.84.59,2980.0,->,90.183.39.87,80.0,FSPA_FSPA,0.0,0.0,11,4508,1007,3501,409.8181818181818,0.22338065661047027,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:53:57.930525,0.000244,udp,147.32.84.138,43331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:00.966834,0.345767,udp,147.32.84.59,7674.0,<->,114.47.32.34,19267.0,CON,0.0,0.0,2,546,78,468,273.0,0.14285714285714285,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:54:02.978976,0.000277,udp,147.32.84.138,37254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:04.279438,0.022839,udp,147.32.85.7,39867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,78,235,156.5,0.24920127795527156,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:05.201954,240.616272,tcp,147.32.84.170,39627.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,34,7608,5405,2203,223.76470588235293,0.7104363827549948,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:05.999093,9.463521,udp,147.32.84.165,21986.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:54:06.489733,0.480327,udp,147.32.84.165,21987.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:06.655734,0.000336,udp,147.32.84.170,36546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:06.656825,0.018162,tcp,147.32.84.170,52263.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:07.430773,0.000368,udp,147.32.84.59,48989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:07.491437,18.451572,udp,147.32.84.165,21988.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,35,13982,4188,9794,399.48571428571427,0.2995279645258189,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:07.553424,0.00027,udp,147.32.84.59,35412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:09.985454,0.000184,udp,147.32.84.138,51514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:15.463873,188.998917,udp,147.32.84.165,21989.0,<->,119.147.45.253,8000.0,CON,0.0,0.0,164,68044,18814,49230,414.9024390243902,0.2764975604020928,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:16.654072,0.000368,udp,147.32.84.170,35389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:16.656137,0.018002,tcp,147.32.84.170,52416.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:17.393226,0.000362,udp,147.32.84.138,54685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:17.887806,0.000279,udp,147.32.84.138,51307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:19.351168,0.000138,udp,147.32.84.138,56446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:20.110118,3053.78418,udp,94.15.90.236,53656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:54:22.783289,0.634561,udp,147.32.84.165,21990.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:54:23.418676,20.251694,udp,147.32.84.165,21991.0,<->,183.60.48.104,8000.0,CON,0.0,0.0,50,20992,5686,15306,419.84,0.27086509146341464,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:26.989524,9.517138,udp,147.32.84.165,21992.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:54:27.136571,0.000329,udp,147.32.84.164,60841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:54:27.325063,0.018556,tcp,147.32.85.26,59683.0,->,78.24.14.20,80.0,FSRPA_FSPA,0.0,0.0,20,12641,1272,11369,632.05,0.10062495055770904,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:27.332770,0.01489,tcp,147.32.85.26,59684.0,->,78.24.14.20,80.0,SRPA_FSPA,0.0,0.0,32,27301,1508,25793,853.15625,0.05523607193875682,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:29.765049,0.000334,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:54:31.759723,0.000298,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:54:33.793592,0.000339,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,14,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 14:54:33.945122,3046.001221,udp,74.212.241.189,7612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:54:34.177861,61.274746,tcp,147.32.84.165,4461.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:54:35.078096,61.964977,tcp,147.32.86.15,4004.0,->,80.250.15.41,80.0,SRPA_SPA,0.0,0.0,134,112889,8463,104426,842.455223880597,0.07496744589818317,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:36.507366,84.66671,udp,147.32.84.165,21993.0,<->,119.147.45.89,8000.0,CON,0.0,0.0,76,30700,9110,21590,403.94736842105266,0.296742671009772,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:36.655430,0.000252,udp,147.32.84.170,35969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:37.653549,0.000346,udp,147.32.84.59,58494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:38.045107,2197.572998,udp,77.67.32.13,14431.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1057,531,526,264.25,0.5023651844843898,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:54:42.086390,0.309154,tcp,147.32.86.20,4742.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,28212,858,27354,829.7647058823529,0.03041259038706933,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:42.384349,0.156769,udp,147.32.84.59,33556.0,<->,184.162.222.110,40254.0,CON,0.0,0.0,2,606,78,528,303.0,0.12871287128712872,14,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:54:42.806236,0.009186,udp,147.32.84.132,56775.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,158,71,87,79.0,0.44936708860759494,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:54:43.697429,21.007963,tcp,147.32.85.26,59752.0,->,88.86.101.2,80.0,SRPA_FSPA,0.0,0.0,9,1267,833,434,140.77777777777777,0.6574585635359116,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:44.905387,0.657662,udp,147.32.84.165,21994.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:54:45.907025,37.178604,udp,147.32.84.165,21995.0,<->,183.60.48.105,8000.0,CON,0.0,0.0,29,10714,3664,7050,369.44827586206895,0.34198245286540974,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:54:46.209458,16.498245,tcp,147.32.84.132,56786.0,->,82.208.40.124,80.0,SRPA_FSPA,0.0,0.0,14,6007,799,5208,429.07142857142856,0.13301148659896786,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:54:46.655570,0.000266,udp,147.32.84.170,33426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:48.375811,0.000285,udp,147.32.84.138,57261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:54:49.342449,15.251924,icmp,91.19.249.57,3331.0,->,147.32.84.94,,URFIL,0.0,,3,210,210,0,70.0,1.0,14,,flow=Background,Background,-1 2011-08-16 14:54:50.298738,0.000441,icmp,147.32.87.249,,<-,147.32.87.38,2.0,RED,,0.0,2,148,0,148,74.0,0.0,14,1,flow=Background,Background,-1 2011-08-16 14:54:53.004458,0.000251,udp,147.32.84.170,38008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:56.654283,0.010258,udp,147.32.84.170,35793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:54:56.665005,0.000349,udp,147.32.84.170,51851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:02.331423,0.001394,udp,147.32.84.134,53016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,71,228,149.5,0.23745819397993312,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:55:03.931832,0.006408,udp,147.32.84.59,60946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:04.202910,1.988363,udp,41.98.47.185,16774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:04.575413,0.00031,udp,147.32.84.59,65402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,77,235,156.0,0.2467948717948718,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:05.897713,0.00048,udp,147.32.84.36,59397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:06.653016,0.000295,udp,147.32.84.170,42876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:07.170666,0.000705,udp,118.90.48.163,57326.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,76,475,275.5,0.13793103448275862,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:07.524228,0.000147,udp,147.32.84.138,34066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:11.962477,3317.392578,udp,147.32.85.30,61070.0,<->,147.102.13.62,49384.0,CON,0.0,0.0,14,2169,1690,479,154.92857142857142,0.7791609036422315,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:13.151352,0.000751,udp,212.74.157.253,9734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,179,74,126.5,0.7075098814229249,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:13.631860,0.000275,udp,147.32.84.138,40407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:13.638000,0.000275,udp,147.32.84.138,48349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:17.075653,0.055554,udp,147.32.84.181,53640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,80,160,120.0,0.3333333333333333,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:17.087360,0.000333,udp,147.32.84.181,53761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,76,145,110.5,0.3438914027149321,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:21.828452,0.000774,udp,193.120.212.24,28879.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,217,155,62,108.5,0.7142857142857143,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:24.009380,0.000325,udp,147.32.84.170,57114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:24.010277,0.000339,udp,147.32.84.170,47838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:24.131845,0.643869,udp,147.32.84.165,21996.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:55:25.132945,220.227203,udp,147.32.84.165,21997.0,<->,183.60.49.126,8000.0,CON,0.0,0.0,204,84004,23618,60386,411.7843137254902,0.28115327841531357,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:55:29.087878,10.050332,tcp,147.32.84.134,46193.0,->,147.32.3.36,443.0,FSPA_FSPA,0.0,0.0,39,18503,2454,16049,474.43589743589746,0.13262714154461439,14,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 14:55:31.058202,3424.893799,udp,95.29.215.153,39151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3166,120,3046,527.6666666666666,0.03790271636133923,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:35.028387,61.281303,tcp,147.32.84.165,4462.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:55:35.860350,0.000339,udp,147.32.84.164,58067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:55:35.861039,0.000237,udp,147.32.84.164,59400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:55:36.655835,0.039623,tcp,147.32.84.170,35495.0,->,74.125.79.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:36.701663,60.771423,tcp,147.32.86.172,58913.0,->,69.171.228.20,443.0,SRPA_SPA,0.0,0.0,15,6344,1280,5064,422.93333333333334,0.201765447667087,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:55:39.395355,0.000256,udp,147.32.84.138,52835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:43.075288,65.734207,tcp,147.32.86.53,49551.0,->,216.129.112.93,80.0,FSPA_FSPA,0.0,0.0,10,1892,1196,696,189.2,0.6321353065539113,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:55:43.953832,0.009584,udp,147.32.84.132,60949.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,174,79,95,87.0,0.4540229885057471,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:46.653046,0.000404,udp,147.32.84.170,47670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:49.807675,0.000498,udp,147.32.85.25,42165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:53.293214,2229.625244,udp,147.32.84.94,7103.0,<->,94.217.44.109,7306.0,CON,0.0,0.0,79,52962,51534,1428,670.4050632911392,0.9730372720063442,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:56.655762,0.000377,udp,147.32.84.170,53753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:55:58.528282,0.000323,udp,147.32.85.34,53852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:55:58.660243,918.448059,udp,147.32.84.229,13363.0,<->,88.203.216.175,50478.0,CON,0.0,0.0,4,1087,536,551,271.75,0.49310027598896045,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:55:58.809487,69.651306,tcp,147.32.85.8,43030.0,->,66.220.145.45,80.0,FSA_FSA,0.0,0.0,9,610,338,272,67.77777777777777,0.5540983606557377,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:55:59.927855,2.336799,tcp,66.249.66.50,59468.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1118,672,446,111.8,0.6010733452593918,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:01.376785,0.000401,udp,147.32.85.74,48868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:02.417387,0.490898,udp,147.32.84.165,21998.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:56:03.418198,107.93679,udp,147.32.84.165,21999.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,103,42222,12224,29998,409.92233009708735,0.2895173132490171,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:56:04.142518,0.000302,udp,147.32.84.138,60848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:04.730512,0.000196,udp,147.32.84.138,56927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:06.654078,0.00037,udp,147.32.84.170,53437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:07.473450,3121.523926,udp,95.82.140.95,59930.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1509,1077,432,125.75,0.7137176938369781,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:08.854879,0.055631,udp,147.32.84.59,64401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:10.212721,250.062393,tcp,147.32.84.59,50128.0,->,74.125.232.223,443.0,FSRPA_FSRPA,0.0,0.0,27,2388,1300,1088,88.44444444444444,0.5443886097152428,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:56:10.315928,1.17781,udp,82.193.97.248,16016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1216,622,594,202.66666666666666,0.5115131578947368,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:17.359495,0.000115,udp,147.32.84.138,57091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:20.631139,0.000179,udp,147.32.85.25,39594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:21.278534,0.000351,udp,147.32.84.138,58819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:23.226207,0.000748,udp,82.193.83.37,21641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:24.345255,0.000252,udp,147.32.84.138,58531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:25.996271,0.000242,udp,147.32.84.170,42832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:25.997076,0.000351,udp,147.32.84.170,54139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:25.998465,0.336215,tcp,147.32.84.170,55864.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:26.656185,0.0386,tcp,147.32.84.170,58438.0,->,74.125.79.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:29.513185,0.000493,udp,147.32.84.138,53895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:30.975798,3043.088867,udp,147.32.86.44,10966.0,<->,66.215.63.71,55260.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:31.336425,0.000348,udp,147.32.84.59,62750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:32.153317,5.132631,tcp,147.32.85.6,50940.0,->,77.75.77.138,80.0,FSPA_FSPA,0.0,0.0,10,2002,946,1056,200.2,0.4725274725274725,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:33.365846,0.000199,udp,147.32.84.138,39940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:33.755331,3.00579,tcp,147.32.84.21,38671.0,->,74.125.39.108,,S_,0.0,,2,148,148,0,74.0,1.0,14,,flow=Background-google-pop,Background,-1 2011-08-16 14:56:35.885410,71.067879,tcp,147.32.84.165,4463.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:56:38.310685,0.000531,udp,78.58.249.176,58838.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:39.230650,0.000287,udp,147.32.85.8,50587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,97,147,122.0,0.3975409836065574,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:39.253397,2562.768066,udp,208.88.186.10,34039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,298,178,120,74.5,0.5973154362416108,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:41.712233,3086.83374,udp,79.100.75.214,4060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:42.559532,0.028187,udp,147.32.84.59,65411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,625,83,542,312.5,0.1328,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:44.136572,0.000308,udp,147.32.85.7,47437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:46.477227,0.01731,udp,147.32.86.168,60063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,493,77,416,246.5,0.15618661257606492,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:46.504893,12.897625,tcp,147.32.84.59,54820.0,->,92.123.64.139,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:56:46.535677,0.156197,udp,147.32.86.168,48518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,81,194,137.5,0.29454545454545455,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:46.655321,0.000309,udp,147.32.84.170,60006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:56:47.080444,15.487186,tcp,147.32.85.7,54928.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:47.728008,0.496499,udp,147.32.84.229,13363.0,<->,111.250.192.135,25376.0,CON,0.0,0.0,4,656,535,121,164.0,0.8155487804878049,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:47.990034,57.975632,tcp,147.32.85.6,50951.0,->,77.75.77.138,80.0,FSPA_FSPA,0.0,0.0,55,28854,13946,14908,524.6181818181818,0.4833298676093436,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:50.643978,0.000761,udp,92.112.94.99,17283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,646,76,570,323.0,0.11764705882352941,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:56:51.714238,14.856457,tcp,138.40.68.131,33210.0,->,147.32.85.2,31604.0,FSPA_FSPA,0.0,0.0,14,963,532,431,68.78571428571429,0.5524402907580478,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:53.441819,0.000301,udp,147.32.84.138,41748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:53.584310,0.000406,udp,147.32.84.216,41897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:56:56.224997,115.797325,tcp,147.32.86.168,38294.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,52,31240,2689,28551,600.7692307692307,0.08607554417413572,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:56:56.654447,0.000422,udp,147.32.84.170,41404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:57:01.104823,0.000246,udp,147.32.84.216,44924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:01.407845,0.000426,udp,147.32.85.74,36760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:07.571279,0.00024,udp,147.32.84.138,57036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:07.925494,0.000829,udp,31.162.83.34,20042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,582,74,508,291.0,0.12714776632302405,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:08.254583,0.000311,udp,147.32.84.138,32867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:08.868944,0.010003,udp,147.32.84.164,45410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:57:08.879339,0.00046,udp,147.32.84.164,51906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:57:08.880414,420.209503,tcp,147.32.84.164,39073.0,->,74.125.232.200,443.0,FSPA_FSPA,0.0,0.0,64,28018,25059,2959,437.78125,0.8943893211506888,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:57:13.794357,0.000402,udp,147.32.84.138,43072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:13.941229,0.000611,udp,58.169.236.34,49912.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:16.209138,0.391985,tcp,67.195.111.228,55205.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,5346,850,4496,381.85714285714283,0.15899738121960344,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:57:16.533667,0.000295,udp,147.32.84.138,41360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:17.586613,0.000768,udp,82.55.157.56,35302.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,74,481,277.5,0.13333333333333333,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:26.558194,0.638812,udp,147.32.84.165,22000.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:57:26.655445,0.000405,udp,147.32.84.170,60955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:57:27.559496,73.592499,udp,147.32.84.165,22001.0,<->,183.60.49.30,8000.0,CON,0.0,0.0,138,60584,15058,45526,439.0144927536232,0.24854747127954577,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:57:28.695004,0.158776,udp,147.32.84.216,48096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,80,136,108.0,0.37037037037037035,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:31.654584,0.000785,udp,95.105.21.3,61212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1001,77,924,500.5,0.07692307692307693,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:32.963361,0.00078,udp,99.164.14.4,16896.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:34.304013,0.000196,udp,147.32.84.138,53170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:37.726566,0.000413,udp,147.32.84.138,39208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:38.960278,0.001619,udp,147.32.84.138,42700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:39.048981,0.010327,udp,147.32.84.132,61111.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,174,79,95,87.0,0.4540229885057471,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:39.613778,0.000379,udp,147.32.84.94,36482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:41.266270,3333.273438,udp,132.199.76.150,50794.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3014,1681,1333,125.58333333333333,0.5577305905773059,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:41.594940,0.000451,udp,222.148.109.246,5506.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:57:42.527792,0.11063,udp,147.32.84.171,58308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:42.770361,0.000259,udp,147.32.84.138,36590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:43.908366,1594.356689,tcp,147.32.84.130,58562.0,->,88.86.102.50,5269.0,FSPA_FSPA,0.0,0.0,110,17628,9875,7753,160.25454545454545,0.5601883367370093,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:57:46.528831,61.284763,tcp,147.32.84.165,4464.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:57:47.443736,0.000259,udp,147.32.84.138,47010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:49.425982,0.000481,udp,147.32.85.7,41796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,80,200,140.0,0.2857142857142857,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:52.365605,0.622896,udp,147.32.84.165,22002.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:57:53.367451,3.437401,udp,147.32.84.165,22003.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,10,3176,1406,1770,317.6,0.44269521410579343,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:57:54.553879,0.000199,udp,147.32.85.25,44306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:56.656564,0.039248,tcp,147.32.84.170,35515.0,->,74.125.79.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:57:57.433456,0.000228,udp,147.32.84.138,55821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:57.765239,0.000478,udp,147.32.84.59,54110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:57:57.768223,250.099731,tcp,147.32.84.59,62290.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,18,1987,1155,832,110.38888888888889,0.5812783090085556,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:57:58.026459,0.629213,udp,147.32.84.165,22004.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:57:59.005313,0.00036,udp,147.32.84.170,42762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:57:59.025155,23.833834,udp,147.32.84.165,22005.0,<->,183.60.16.244,8000.0,CON,0.0,0.0,16,5988,1790,4198,374.25,0.2989311957247829,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:58:03.596662,0.171026,tcp,147.32.86.20,4897.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,60,54337,1331,53006,905.6166666666667,0.024495279459668368,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:58:04.498297,0.000254,udp,147.32.86.165,62513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:05.113167,0.000341,udp,147.32.86.165,56517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:06.655396,0.000306,udp,147.32.84.170,49833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:06.656545,0.039155,tcp,147.32.84.170,38395.0,->,74.125.79.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:08.401209,0.000361,udp,147.32.86.58,61462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:13.051897,0.35533,tcp,147.32.84.170,56296.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:13.399456,0.288128,tcp,147.32.84.170,56297.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:14.045264,0.000506,udp,147.32.84.170,37801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:14.046970,280.752502,tcp,147.32.84.170,46837.0,->,74.125.79.104,443.0,FSPA_FPA,0.0,0.0,54,10540,4680,5860,195.1851851851852,0.444022770398482,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:14.047228,250.069061,tcp,147.32.84.170,46841.0,->,74.125.79.104,443.0,SRPA_FPA,0.0,0.0,19,1582,956,626,83.26315789473684,0.6042983565107459,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:15.071232,9.6e-05,udp,147.32.84.138,38219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:16.063840,0.000248,udp,147.32.84.138,55093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:16.506785,0.03501,udp,147.32.85.8,39505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:16.640357,0.000775,udp,217.172.92.2,24332.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:16.654312,0.000449,udp,147.32.84.170,52659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:16.687112,0.011064,udp,147.32.84.132,51544.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,174,79,95,87.0,0.4540229885057471,14,1,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:18.210767,0.00022,udp,147.32.84.138,35490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:18.980603,0.000577,udp,147.32.84.59,43226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:19.036070,0.00027,udp,147.32.86.20,63621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:19.307093,1915.42981,udp,147.32.84.94,7103.0,->,194.95.197.40,7596.0,INT,0.0,,7,588,588,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:58:19.763549,3504.424561,udp,147.32.87.248,25317.0,<->,111.253.105.91,15569.0,CON,0.0,0.0,12,2940,2423,517,245.0,0.8241496598639456,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:20.368075,0.00063,udp,131.152.213.47,1541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,252,190,62,126.0,0.753968253968254,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:20.524604,0.000375,udp,147.32.84.164,51580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:58:20.525272,0.000348,udp,147.32.84.164,39633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,73,305,189.0,0.1931216931216931,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:58:20.565422,0.00023,udp,147.32.84.164,34887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:58:24.554712,0.000566,udp,178.3.6.143,38470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:26.690082,118.854057,tcp,147.32.84.181,51385.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,10,2855,1722,1133,285.5,0.603152364273205,14,1,flow=Background-google-analytics9,Background,-1 2011-08-16 14:58:27.167359,250.61702,tcp,147.32.84.164,59853.0,->,74.125.79.104,80.0,FSPA_FSPA,0.0,0.0,23,3451,2030,1421,150.04347826086956,0.5882352941176471,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:58:27.216301,2523.858887,udp,92.24.2.221,47014.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,403,223,180,67.16666666666667,0.5533498759305211,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:27.236393,1.212794,tcp,188.22.143.60,63919.0,->,147.32.85.123,60607.0,FSPA_FSPA,0.0,0.0,23,1745,929,816,75.8695652173913,0.532378223495702,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:58:27.354108,240.42897,tcp,147.32.84.164,59854.0,->,74.125.79.104,80.0,FSPA_FSPA,0.0,0.0,22,3435,1954,1481,156.13636363636363,0.5688500727802038,14,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 14:58:28.514371,0.132848,tcp,147.32.86.164,2604.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,18,6132,1490,4642,340.6666666666667,0.24298760600130462,14,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 14:58:28.999647,0.000359,udp,147.32.84.170,44694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:29.363387,0.000224,udp,147.32.84.170,52513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:29.493176,10.926359,udp,113.35.202.218,62584.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,671,550,121,167.75,0.819672131147541,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:29.849800,2805.783203,udp,92.244.236.39,31931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1472,519,953,92.0,0.35258152173913043,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:58:29.992750,0.000379,udp,147.32.84.170,59828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:29.993484,0.000347,udp,147.32.84.170,58153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:29.994368,0.250731,tcp,147.32.84.170,55896.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:30.259235,255.651596,tcp,147.32.84.170,35535.0,->,74.125.79.147,80.0,FSPA_FSPA,0.0,0.0,73,33080,9799,23281,453.1506849315069,0.29622128174123336,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.054551,0.644753,udp,147.32.84.165,22006.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:58:33.395371,0.000259,udp,147.32.84.170,59059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.396586,0.000321,udp,147.32.84.170,37251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.620780,0.000255,udp,147.32.84.170,48670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.621029,0.000329,udp,147.32.84.170,50372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.621214,0.000508,udp,147.32.84.170,36690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.894009,0.105179,udp,147.32.84.170,34637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,77,139,108.0,0.35648148148148145,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.947175,0.017334,udp,147.32.84.170,48878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,79,187,133.0,0.29699248120300753,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.969933,0.00023,udp,147.32.84.170,52420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:33.973530,0.17323,udp,147.32.84.170,40483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,80,94,87.0,0.45977011494252873,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:34.000340,0.000296,udp,147.32.84.170,58018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:34.055344,56.886463,udp,147.32.84.165,22007.0,<->,183.60.48.104,8000.0,CON,0.0,0.0,51,20218,6018,14200,396.4313725490196,0.29765555445642494,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:58:34.366643,0.247474,udp,147.32.84.170,57463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:34.508242,0.11241,udp,147.32.84.170,33749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:34.514383,472.608246,udp,147.32.84.94,7103.0,->,75.33.14.106,7275.0,INT,0.0,,7,588,588,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:58:35.995253,70.04924,tcp,147.32.84.170,52366.0,->,64.78.181.5,80.0,FSPA_FSPA,0.0,0.0,50,30357,3923,26434,607.14,0.12922884342985144,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:35.995409,70.048897,tcp,147.32.84.170,52367.0,->,64.78.181.5,80.0,FSPA_FSPA,0.0,0.0,41,22834,4563,18271,556.9268292682926,0.19983358150127004,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:36.000091,0.000413,udp,147.32.84.170,40708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,89,169,129.0,0.3449612403100775,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:36.079924,0.000417,udp,147.32.85.14,56051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:36.433356,0.144784,udp,147.32.84.170,42099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:36.784821,0.000301,udp,147.32.84.170,51595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:36.816902,9.08754,tcp,147.32.84.170,33337.0,->,69.174.57.102,80.0,FSPA_FSRPA,0.0,0.0,67,55606,3384,52222,829.9402985074627,0.060856742078193,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:36.894423,0.000404,udp,147.32.84.170,50258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.544108,18.435528,tcp,147.32.84.170,48491.0,->,64.34.119.12,80.0,SPA_FSPA,0.0,0.0,12,4827,847,3980,402.25,0.17547130723016366,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.560016,0.000219,udp,147.32.84.170,42260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,85,167,126.0,0.3373015873015873,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.711257,0.000323,udp,147.32.84.170,39726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.713186,248.193771,tcp,147.32.84.170,51320.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,24,4023,2995,1028,167.625,0.7444693015162814,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.775857,0.000322,udp,147.32.84.170,43728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,85,167,126.0,0.3373015873015873,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.776962,0.000255,udp,147.32.84.170,46365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.778206,0.000352,udp,147.32.84.170,57534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.779989,0.000224,udp,147.32.84.170,34283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,84,159,121.5,0.345679012345679,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.781761,0.10466,udp,147.32.84.170,34012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.886730,0.000268,udp,147.32.84.170,38406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.887256,0.000455,udp,147.32.84.170,41291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.888346,0.000201,udp,147.32.84.170,54316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.889537,0.000295,udp,147.32.84.170,55944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,86,168,127.0,0.33858267716535434,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.890663,0.000236,udp,147.32.84.170,49826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.912658,0.00034,udp,147.32.84.59,58764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:37.940183,0.000185,udp,147.32.84.170,40229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.944726,0.000258,udp,147.32.84.170,60455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.945422,0.00024,udp,147.32.84.170,58638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,86,168,127.0,0.33858267716535434,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.949035,0.000203,udp,147.32.84.170,58176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.997057,0.000367,udp,147.32.84.170,59009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:37.998943,0.000266,udp,147.32.84.170,42887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.001287,0.000167,udp,147.32.84.170,60276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.001786,0.000161,udp,147.32.84.170,32913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.003250,0.000332,udp,147.32.84.170,38687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,84,159,121.5,0.345679012345679,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.005647,0.000197,udp,147.32.84.170,43941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.008009,0.000202,udp,147.32.84.170,35908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.010391,0.000245,udp,147.32.84.170,38695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.017288,0.000155,udp,147.32.84.170,59719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.018511,0.00018,udp,147.32.84.170,36175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.020847,0.000215,udp,147.32.84.170,44909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.022351,0.104409,udp,147.32.84.170,34063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.030053,0.000171,udp,147.32.84.170,59021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.127190,0.000347,udp,147.32.84.170,53258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.215540,0.000217,udp,147.32.84.170,59012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.216538,0.104453,udp,147.32.84.170,56190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,87,162,124.5,0.3493975903614458,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:38.228919,0.000242,udp,147.32.84.170,59620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:43.018490,0.50463,udp,147.32.84.165,22008.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:58:43.052294,0.000323,udp,147.32.84.59,49615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,83,142,112.5,0.3688888888888889,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:43.523633,6.445359,udp,147.32.84.165,22009.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,18,6696,2262,4434,372.0,0.3378136200716846,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:58:43.544264,0.000357,udp,147.32.84.138,40534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:44.830022,11.220038,tcp,147.32.84.170,55348.0,->,66.147.240.98,80.0,SPA_FSPA,0.0,0.0,15,4778,2118,2660,318.53333333333336,0.4432817078275429,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:46.654717,0.000275,udp,147.32.84.170,55509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:46.655600,0.000338,udp,147.32.84.170,48028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:47.385310,61.282768,tcp,147.32.84.165,4465.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:58:48.896530,0.000282,udp,147.32.85.8,60749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:51.470729,8.812206,udp,147.32.84.165,22010.0,->,58.60.15.39,8000.0,INT,0.0,,2,236,236,0,118.0,1.0,14,0,flow=From-Botnet-V49-UDP-Attempt,Botnet,1 2011-08-16 14:58:55.259314,303.393799,tcp,147.32.86.165,52546.0,->,74.125.232.203,80.0,FSPA_FSRPA,0.0,0.0,14,5458,4721,737,389.85714285714283,0.8649688530597288,14,1,flow=Background-google-analytics12,Background,-1 2011-08-16 14:58:56.655806,0.040087,tcp,147.32.84.170,58512.0,->,74.125.79.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:58:56.757486,0.009883,udp,147.32.84.59,56587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,87,167,127.0,0.3425196850393701,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:56.829441,0.285483,udp,147.32.86.168,47759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:58:58.115428,0.000447,udp,147.32.84.138,43090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:00.432991,0.000315,udp,147.32.84.138,58324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:01.075235,0.0,udp,147.32.80.9,53.0,->,147.32.84.138,54232.0,INT,0.0,,1,133,133,0,133.0,1.0,14,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 14:59:01.199177,0.0,udp,147.32.80.9,53.0,->,147.32.86.168,33148.0,INT,0.0,,1,77,77,0,77.0,1.0,14,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 14:59:01.315339,0.0,udp,147.32.80.9,53.0,->,147.32.84.138,38277.0,INT,0.0,,1,133,133,0,133.0,1.0,14,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 14:59:01.564795,0.0,udp,147.32.80.9,53.0,->,147.32.86.168,47843.0,INT,0.0,,1,77,77,0,77.0,1.0,14,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 14:59:07.247950,0.000635,udp,76.23.234.66,38502.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:07.414046,0.619015,udp,147.32.84.165,22012.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:59:08.034076,48.320293,udp,147.32.84.165,22013.0,<->,183.60.16.244,8000.0,CON,0.0,0.0,39,15222,4476,10746,390.3076923076923,0.29404808829325974,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:59:08.705942,0.639962,udp,147.32.84.165,22014.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:59:09.707301,119.753784,udp,147.32.84.165,22015.0,<->,183.60.48.104,8000.0,CON,0.0,0.0,79,30630,9656,20974,387.72151898734177,0.3152464903689194,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:59:16.654158,0.000353,udp,147.32.84.170,53299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,74,278,176.0,0.21022727272727273,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:17.088254,0.002563,udp,147.32.84.59,63409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,81,172,126.5,0.3201581027667984,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:21.023774,3155.330322,udp,147.32.84.229,13363.0,<->,95.180.140.51,28879.0,CON,0.0,0.0,10,1104,983,121,110.4,0.8903985507246377,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:24.719253,0.000226,udp,147.32.84.138,42382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:25.178844,2.531899,tcp,112.135.52.69,1687.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,10,671,501,170,67.1,0.7466467958271237,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:59:25.670367,0.000353,udp,147.32.86.179,63505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:28.081742,0.000343,udp,147.32.84.138,55007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:29.336036,0.000179,udp,147.32.84.138,57464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:30.995548,0.000355,udp,147.32.84.170,48816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:30.997476,0.216975,tcp,147.32.84.170,55945.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:31.063149,0.563418,tcp,147.32.84.59,58462.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1537,699,838,170.77777777777777,0.4547820429407938,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:59:32.169569,0.63227,udp,147.32.84.165,22016.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 14:59:32.802518,105.648163,udp,147.32.84.165,22017.0,<->,183.60.49.31,8000.0,CON,0.0,0.0,108,44320,12748,31572,410.3703703703704,0.2876353790613718,14,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 14:59:33.454175,0.000801,udp,85.24.129.245,6207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,77,484,280.5,0.13725490196078433,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:34.405651,0.731812,tcp,147.32.84.59,51669.0,->,206.191.52.47,80.0,FSPA_FSPA,0.0,0.0,22,13863,702,13161,630.1363636363636,0.05063838995888336,14,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 14:59:35.832136,0.073388,tcp,147.32.86.96,34721.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,592,0,592,74.0,0.0,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:59:37.482306,1695.419922,udp,147.32.84.94,7103.0,<->,116.237.138.124,63085.0,CON,0.0,0.0,103,67800,64950,2850,658.252427184466,0.9579646017699115,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:38.264816,0.000192,udp,147.32.84.138,48117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:42.128347,0.000433,udp,147.32.84.170,45050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:42.764924,0.000234,udp,147.32.84.138,54847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:42.898213,646.386902,udp,147.32.84.94,7103.0,->,80.103.222.79,7524.0,INT,0.0,,12,1008,1008,0,84.0,1.0,14,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 14:59:43.134270,9.00003,tcp,126.12.92.81,64957.0,->,147.32.85.100,3126.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,14,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 14:59:43.711945,0.000335,udp,147.32.85.25,51622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:46.269342,0.000249,udp,147.32.84.138,54329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:46.656498,0.038784,tcp,147.32.84.170,38463.0,->,74.125.79.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:48.243575,65.653351,tcp,147.32.84.165,4466.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,14,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 14:59:49.075445,22.058041,tcp,195.13.137.164,62045.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,57,42726,3367,39359,749.578947368421,0.07880447502691569,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:59:50.378534,2158.765625,udp,91.140.91.109,45725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:50.619220,3119.225342,udp,147.32.86.165,12114.0,<->,2.94.121.70,1615.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 14:59:52.369688,0.000269,udp,147.32.84.59,57894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,85,137,111.0,0.38288288288288286,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:54.162006,0.206431,udp,147.32.84.59,50802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,86,169,127.5,0.33725490196078434,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:55.544988,0.000209,udp,147.32.84.170,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,77,123,100.0,0.385,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:55.834408,0.333865,tcp,147.32.86.223,9321.0,->,147.228.47.183,8009.0,FSRPA_FSPA,0.0,0.0,13,2963,997,1966,227.92307692307693,0.33648329395882554,14,0,flow=Background-TCP-Established,Background,-1 2011-08-16 14:59:55.959582,0.000227,udp,147.32.84.59,45484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,14,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 14:59:56.037524,9.017626,tcp,95.37.208.63,20949.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,14,1,flow=Background-TCP-Established,Background,-1 2011-08-16 14:59:56.676420,0.019078,tcp,147.32.84.170,36426.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,14,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 14:59:58.129458,3422.181885,udp,147.32.84.229,13363.0,<->,188.187.116.118,7646.0,CON,0.0,0.0,4,732,598,134,183.0,0.8169398907103825,14,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:00:00.992035,0.000501,udp,147.32.87.36,41472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,15,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:00:01.057430,0.00034,udp,147.32.84.164,40065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:00:01.069086,246.710434,tcp,147.32.84.164,58969.0,->,74.125.232.240,80.0,FSPA_FSPA,0.0,0.0,27,6457,4874,1583,239.14814814814815,0.754839708843116,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:00:01.815851,0.0,udp,147.32.80.9,53.0,->,147.32.84.242,57552.0,INT,0.0,,1,216,216,0,216.0,1.0,15,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 15:00:02.082443,0.0,udp,147.32.1.20,53.0,->,147.32.85.7,43512.0,INT,0.0,,1,75,75,0,75.0,1.0,15,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 15:00:02.783614,0.000222,udp,147.32.84.138,52299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:03.076932,0.000173,udp,147.32.85.7,60386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:03.376708,0.000354,udp,147.32.84.59,55985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:03.392552,0.149287,tcp,147.32.85.7,52091.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,19,5239,1503,3736,275.7368421052632,0.28688681046001147,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:04.305598,0.000228,udp,147.32.85.7,49940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:06.074800,0.000228,udp,147.32.84.59,56955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:06.629456,0.501084,udp,147.32.84.165,22018.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:00:06.655266,0.000463,udp,147.32.84.170,56980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:07.630775,62.711906,udp,147.32.84.165,22019.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,97,41138,11036,30102,424.10309278350513,0.2682677816131071,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:00:08.451115,0.017572,udp,147.32.84.59,55807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,451,71,380,225.5,0.1574279379157428,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:08.465735,3.084352,tcp,78.141.8.160,50266.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,4,246,122,124,61.5,0.4959349593495935,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:09.865659,0.000256,udp,147.32.87.36,51974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,15,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:00:10.923328,0.298796,tcp,147.32.84.59,3148.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,23,14949,1595,13354,649.9565217391304,0.10669610007358352,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:00:11.895887,0.0,icmp,147.32.86.92,8.0,->,213.29.198.144,45922.0,ECO,0.0,,1,98,98,0,98.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:00:13.195767,0.001787,udp,147.32.84.59,63192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:14.895647,0.000215,udp,147.32.84.138,35194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:15.154917,122.84787,tcp,147.32.84.59,51694.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,19,6170,4448,1722,324.7368421052632,0.7209076175040519,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:00:15.515289,1.617468,tcp,194.108.204.27,51095.0,->,147.32.84.138,8080.0,FSPA_FSPA,0.0,0.0,13,2323,949,1374,178.69230769230768,0.40852346104175635,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:16.653943,0.000446,udp,147.32.84.170,36816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:18.479972,33.978905,tcp,27.60.160.86,49311.0,->,147.32.84.2,80.0,FSRPA_SA,0.0,0.0,30,15636,2460,13176,521.2,0.15732924021488873,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:24.021979,2160.703613,icmp,82.234.128.139,259.0,->,147.32.84.94,21226.0,URH,0.0,,8,896,896,0,112.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:00:25.211845,1.205657,tcp,69.9.80.32,51573.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,20,1689,935,754,84.45,0.5535820011841326,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:25.838994,0.169873,tcp,147.32.86.20,1039.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,64,57743,1513,56230,902.234375,0.026202310236738652,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:26.647943,0.000419,udp,147.32.86.20,60431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:26.655859,0.018639,tcp,147.32.84.170,37488.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:28.567209,0.00067,udp,94.76.87.211,33918.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,250,62,156.0,0.8012820512820513,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:00:29.462137,242.342102,tcp,147.32.84.59,49445.0,->,209.85.149.138,443.0,FSPA_FSPA,0.0,0.0,54,13078,8094,4984,242.1851851851852,0.6189019727787124,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:00:29.537749,0.83882,tcp,194.108.204.27,35710.0,->,147.32.84.138,8080.0,FSPA_FSPA,0.0,0.0,10,2108,661,1447,210.8,0.3135673624288425,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:35.554430,0.102483,udp,147.32.86.208,11289.0,<->,81.20.249.174,40298.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:00:35.639213,0.000301,udp,147.32.84.134,41784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,79,270,174.5,0.22636103151862463,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:00:36.653424,0.000417,udp,147.32.84.170,48845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:37.354799,0.000198,udp,147.32.84.138,47644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:40.496160,0.000592,udp,147.32.84.138,57455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:46.220279,3472.070557,udp,147.32.84.13,49073.0,<->,82.208.56.89,123.0,CON,0.0,0.0,54,4860,2430,2430,90.0,0.5,15,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 15:00:46.514849,9.490761,tcp,66.194.55.249,43596.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,3363,859,2504,280.25,0.2554267023490931,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:00:46.654768,0.000361,udp,147.32.84.170,48613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:50.328911,0.000293,udp,147.32.84.138,51567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:52.206405,0.000207,udp,147.32.84.138,42768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:00:53.466777,61.299953,tcp,147.32.84.165,4467.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:00:56.655247,0.018455,tcp,147.32.84.170,58606.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:00:57.083756,5.94807,tcp,147.32.84.59,3030.0,->,46.28.105.29,80.0,FSPA_FSPA,0.0,0.0,12,3618,1300,2318,301.5,0.359314538419016,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:00.651152,0.16562,udp,147.32.84.59,17153.0,<->,69.137.65.211,60989.0,CON,0.0,0.0,2,543,75,468,271.5,0.13812154696132597,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:01.312302,0.000314,udp,147.32.84.138,44393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:01.734127,0.000402,udp,147.32.87.23,32868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,73,287,180.0,0.20277777777777778,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:05.057338,0.00052,udp,85.197.244.179,23438.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,82,60,71.0,0.5774647887323944,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:05.814961,241.072403,tcp,147.32.85.7,57759.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,42,9053,3744,5309,215.54761904761904,0.413564564232851,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:01:06.077417,0.000617,icmp,147.32.84.59,8.0,->,147.32.82.252,22748.0,TXD,0.0,,1,78,78,0,78.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:01:06.653412,0.00067,udp,147.32.84.170,52369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:06.655985,0.018909,tcp,147.32.84.170,49883.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:07.267390,0.0,icmp,147.32.84.59,8.0,->,147.32.82.252,22748.0,ECO,0.0,,1,78,78,0,78.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:01:10.127353,0.367761,udp,147.32.84.59,52996.0,<->,132.248.95.188,61450.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:10.681306,9.483015,udp,147.32.84.165,22020.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:11.823648,0.616817,udp,147.32.84.165,22021.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:11.965029,0.000147,udp,147.32.84.138,47970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:12.824760,44.098427,udp,147.32.84.165,22022.0,<->,183.60.16.17,8000.0,CON,0.0,0.0,45,18442,5472,12970,409.8222222222222,0.29671402234031014,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:14.326643,2728.398682,udp,147.32.84.229,13363.0,<->,118.170.3.79,33279.0,CON,0.0,0.0,8,1244,648,596,155.5,0.5209003215434084,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:16.653924,0.000353,udp,147.32.84.170,51002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:16.654768,0.000514,udp,147.32.84.170,47916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:17.422977,0.000279,udp,147.32.85.25,46865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:19.145954,60.762882,tcp,147.32.84.59,51939.0,->,50.19.234.35,80.0,SRPA_FSPA,0.0,0.0,10,1709,1086,623,170.9,0.6354593329432416,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:19.654650,0.6387,udp,147.32.84.165,22023.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:19.996716,0.000319,udp,147.32.85.123,53148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,87,275,181.0,0.24033149171270718,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:20.165434,30.430807,udp,147.32.84.165,22024.0,<->,112.95.240.64,8000.0,CON,0.0,0.0,63,26238,7184,19054,416.4761904761905,0.27380135681073253,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:01:20.655835,3.444259,udp,147.32.84.165,22025.0,<->,183.60.49.125,8000.0,CON,0.0,0.0,10,3192,1406,1786,319.2,0.44047619047619047,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:01:21.794816,0.000326,udp,147.32.84.138,46900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:22.430683,0.023815,tcp,147.32.84.59,3126.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,10,1728,1074,654,172.8,0.6215277777777778,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:23.388121,0.000269,udp,147.32.86.111,62176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,94,201,147.5,0.31864406779661014,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:25.292733,9.446456,udp,147.32.84.165,22026.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:26.656034,0.017936,tcp,147.32.84.170,49885.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:28.489069,14.909462,tcp,147.32.84.59,53712.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:30.937989,0.001762,udp,147.32.85.76,56598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:31.126340,2990.876221,tcp,147.32.84.59,4189.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,40,22192,3479,18713,554.8,0.15676820475847153,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:01:32.995475,0.000161,udp,147.32.84.170,57339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:32.996784,0.22454,tcp,147.32.84.170,48781.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:34.739990,6.817494,udp,147.32.84.165,22027.0,<->,183.60.16.16,8000.0,CON,0.0,0.0,18,7016,2262,4754,389.77777777777777,0.322405929304447,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:36.021840,26.813196,tcp,147.32.84.59,60566.0,->,77.75.73.138,80.0,SRPA_FSPA,0.0,0.0,30,12628,7394,5234,420.93333333333334,0.5855242318656952,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:01:36.257733,0.002049,udp,147.32.86.168,40836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,472,78,394,236.0,0.1652542372881356,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:37.227335,0.201291,udp,147.32.86.168,60665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:38.681516,3042.0271,udp,147.32.84.111,48922.0,<->,69.136.80.138,8507.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:42.738251,0.496305,udp,147.32.84.165,22028.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:43.533752,6.880859,tcp,110.49.241.53,43897.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,25,2149,1271,878,85.96,0.5914378780828292,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:01:43.739182,23.692635,udp,147.32.84.165,22029.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,43,17054,5044,12010,396.6046511627907,0.2957663891169227,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:44.164690,0.000401,udp,86.214.212.67,61452.0,<->,147.32.85.56,44076.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:44.838670,2838.483887,udp,147.32.84.229,13363.0,<->,98.224.58.184,52660.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:48.327341,0.004318,tcp,147.32.85.7,34671.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2038,1166,872,226.44444444444446,0.5721295387634936,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:01:50.029886,0.000365,udp,147.32.84.138,51457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:50.269586,0.870527,tcp,147.32.85.76,4671.0,->,92.123.64.130,80.0,FSPA_FSPA,0.0,0.0,10,1280,851,429,128.0,0.66484375,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:01:51.740766,0.643379,udp,147.32.84.165,22030.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:52.742245,99.498375,udp,147.32.84.165,22031.0,<->,112.95.240.74,8000.0,CON,0.0,0.0,120,50604,13346,37258,421.7,0.26373409216662713,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:54.240411,0.093232,udp,147.32.86.44,10966.0,<->,41.104.39.106,22807.0,CON,0.0,0.0,2,543,74,469,271.5,0.13627992633517497,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:01:54.336724,61.29615,tcp,147.32.84.165,4468.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:01:55.148344,0.000231,udp,147.32.84.138,49134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:56.131443,0.000213,udp,147.32.85.89,43750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:56.653415,0.000412,udp,147.32.84.170,48796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:56.654393,0.000365,udp,147.32.84.170,50457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:01:57.881477,0.000198,udp,147.32.84.138,43732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:01:58.160215,0.608232,udp,147.32.84.165,22032.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:01:58.326834,0.092845,tcp,109.230.221.183,62723.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,19,14492,1042,13450,762.7368421052631,0.0719017388904223,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:01:59.161574,14.080278,udp,147.32.84.165,22033.0,<->,183.60.49.123,8000.0,CON,0.0,0.0,15,4974,2048,2926,331.6,0.41174105347808604,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:01:59.912095,0.000318,udp,147.32.85.34,59863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:00.399391,0.000238,udp,147.32.84.138,53735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:02.924943,0.33445,udp,147.32.84.229,13363.0,<->,114.43.53.153,15063.0,CON,0.0,0.0,2,134,73,61,67.0,0.5447761194029851,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:03.006289,0.227978,tcp,147.32.84.170,48785.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:02:06.805795,0.001896,udp,126.248.81.19,5945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,477,60,268.5,0.888268156424581,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:06.853420,0.006806,udp,80.136.156.11,8258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:08.475099,0.624109,udp,147.32.84.165,22034.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:02:09.112410,67.03363,tcp,147.32.84.59,53782.0,->,1.2.3.8,80.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:02:09.114111,3.35994,tcp,147.32.84.59,53785.0,->,194.213.222.30,80.0,FSPA_FSPA,0.0,0.0,26,17988,1403,16585,691.8461538461538,0.07799644207249277,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:02:09.476817,15.13617,udp,147.32.84.165,22035.0,<->,119.147.45.14,8000.0,CON,0.0,0.0,19,7022,2476,4546,369.57894736842104,0.35260609512959273,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:02:10.060543,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,23764.0,URP,0.0,,1,70,70,0,70.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:02:11.193978,0.000746,udp,83.228.18.214,7784.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,75,481,278.0,0.13489208633093525,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:12.622409,2821.105469,udp,147.32.84.229,13363.0,<->,89.235.238.78,31033.0,CON,0.0,0.0,4,1044,924,120,261.0,0.8850574712643678,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:13.452710,0.000292,udp,147.32.84.19,48334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:14.453617,0.630281,udp,147.32.84.165,22036.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:02:15.084750,34.293251,udp,147.32.84.165,22037.0,<->,119.147.45.13,8000.0,CON,0.0,0.0,25,9178,3236,5942,367.12,0.35258226193070386,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:02:21.518304,0.000348,udp,147.32.84.59,47410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,132,194,163.0,0.4049079754601227,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:23.378326,96.465446,tcp,147.32.85.123,45443.0,->,80.239.149.18,80.0,FSPA_FSRPA,0.0,0.0,86,49472,6499,42973,575.2558139534884,0.13136723803363518,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:02:25.860691,0.000356,udp,147.32.86.208,56311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:25.940924,0.490058,udp,147.32.84.165,22038.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:02:26.941837,11.595802,udp,147.32.84.165,22039.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,11,3302,1620,1682,300.1818181818182,0.49061175045427013,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:02:30.612032,0.728702,udp,147.32.84.94,7103.0,<->,67.170.107.125,43242.0,CON,0.0,0.0,90,64785,62463,2322,719.8333333333334,0.9641583699930539,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:30.839097,0.000587,udp,189.24.35.112,41895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:31.162977,0.0,udp,192.168.88.79,62352.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:02:31.745551,0.000292,udp,147.32.85.123,47894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,88,163,125.5,0.350597609561753,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:34.011826,0.000218,udp,147.32.84.170,36746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:02:36.608552,0.000852,udp,188.113.103.48,37919.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:36.691956,3556.503906,udp,79.100.41.44,33707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:36.796929,0.000816,udp,151.62.214.187,13040.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:36.882872,4.930575,tcp,147.32.86.181,2342.0,->,147.32.80.13,3128.0,SRPA_SPA,0.0,0.0,9,3383,2732,651,375.8888888888889,0.8075672480047296,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:02:37.743817,0.000334,udp,147.32.84.59,33201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,87,285,186.0,0.23387096774193547,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:39.008519,14.402162,tcp,147.32.84.59,53832.0,->,94.127.76.180,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:02:41.317519,9.016808,tcp,152.19.89.51,1923.0,->,147.32.84.2,80.0,SRPA_SPA,0.0,0.0,255,287497,4353,283144,1127.4392156862746,0.015141027558548436,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:02:43.160308,464.637878,tcp,147.162.29.66,52318.0,->,147.32.87.238,39371.0,FSPA_FSPA,0.0,0.0,100,6280,2669,3611,62.8,0.425,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:02:45.006882,0.000223,udp,147.32.84.138,58031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:45.128360,0.000339,udp,147.32.86.15,51108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:50.293302,955.266724,udp,122.212.234.128,11191.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:02:50.341642,0.000496,udp,147.32.86.208,61890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,596,78,518,298.0,0.13087248322147652,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:50.342521,0.000318,udp,147.32.86.208,61878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,78,206,142.0,0.2746478873239437,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:50.784183,0.000355,udp,147.32.84.184,49848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:51.400996,15.524677,udp,147.32.84.94,7103.0,->,66.162.153.40,7864.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:02:53.628432,0.000169,udp,147.32.84.138,40688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:54.197362,0.698891,tcp,147.32.84.59,53805.0,->,199.59.148.201,80.0,FSPA_FSPA,0.0,0.0,11,2449,1586,863,222.63636363636363,0.6476112699060841,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:02:54.383024,0.000109,udp,147.32.84.138,34896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:54.625992,1493.12854,tcp,147.32.85.120,43359.0,->,74.125.43.108,993.0,FSPA_FSPA,0.0,0.0,46,7761,2355,5406,168.7173913043478,0.30344027831465015,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:02:55.151591,0.000189,udp,147.32.84.138,39112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:02:55.203150,61.299374,tcp,147.32.84.165,4469.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:02:55.436481,1.293568,tcp,147.32.84.59,3242.0,->,208.94.3.16,80.0,FSPA_FSPA,0.0,0.0,28,27054,1260,25794,966.2142857142857,0.046573519627411845,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:02:55.753583,0.000281,udp,147.32.84.138,60794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:01.233447,3203.813965,tcp,147.32.84.59,4291.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,57,39180,5271,33909,687.3684210526316,0.13453292496171515,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:03:01.576978,115.385361,tcp,147.32.86.208,4244.0,->,174.121.89.202,80.0,FSPA_FSPA,0.0,0.0,19,8921,1567,7354,469.5263157894737,0.17565295370474163,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:02.906739,0.000554,udp,69.70.50.178,43852.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:03.593875,0.00068,udp,72.152.105.160,1242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:04.496040,3099.775635,udp,147.32.84.59,23176.0,<->,125.224.84.129,13161.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:03:04.798405,0.022027,udp,147.32.86.208,65509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,80,399,239.5,0.16701461377870563,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:04.928785,0.067798,tcp,147.32.86.208,4295.0,->,80.239.149.16,80.0,FSPA_FSPA,0.0,0.0,15,7787,1466,6321,519.1333333333333,0.1882624887633235,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:04.929147,99.872169,tcp,147.32.86.208,4297.0,->,80.239.149.16,80.0,SRPA_FSPA,0.0,0.0,19,11371,2117,9254,598.4736842105264,0.18617535836777768,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:06.653474,0.000472,udp,147.32.84.170,49769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:08.800563,0.149558,udp,147.32.84.59,15675.0,<->,66.190.168.183,8919.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:03:10.122691,0.000247,udp,147.32.84.138,51012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:11.592946,0.207799,tcp,147.32.86.20,1174.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,36,27734,969,26765,770.3888888888889,0.03493906396480854,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:12.176300,0.200176,tcp,95.124.17.221,4796.0,->,147.32.84.229,80.0,SRA_SA,0.0,0.0,4,282,204,78,70.5,0.723404255319149,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:12.205835,0.022212,udp,147.32.84.229,13363.0,<->,178.202.118.46,60005.0,CON,0.0,3.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:12.430418,0.000637,udp,150.203.114.13,15028.0,<->,147.32.85.26,60764.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:12.950599,0.000265,udp,147.32.84.138,51016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:14.039130,60.771225,tcp,147.32.86.155,52231.0,->,209.85.149.101,80.0,FSPA_FSPA,0.0,0.0,1681,1682413,51222,1631191,1000.8405710886377,0.030445556471567922,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:14.053926,15.262508,udp,147.32.84.94,7103.0,->,79.226.132.157,7338.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:03:15.224453,22.015514,tcp,147.32.84.132,57061.0,->,95.168.214.77,80.0,SRPA_FSPA,0.0,0.0,10,1682,1116,566,168.2,0.6634958382877527,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:16.284996,0.000348,udp,147.32.84.59,52536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:16.654169,0.000374,udp,147.32.84.170,33536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:17.631555,0.74642,udp,180.183.39.231,16272.0,<->,147.32.84.229,443.0,CON,0.0,0.0,6,386,185,201,64.33333333333333,0.4792746113989637,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:30.649538,0.000394,udp,147.32.84.2,40947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:30.764661,0.000319,udp,147.32.84.2,55771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:31.636675,0.000161,udp,147.32.84.138,48032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:32.496535,10.908118,tcp,147.32.84.59,53959.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:03:32.974101,0.000526,udp,147.32.85.30,59063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,532,83,449,266.0,0.15601503759398497,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:34.579690,0.000217,udp,147.32.84.138,54977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:36.011347,0.228182,tcp,147.32.84.170,48804.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:36.241633,0.151565,tcp,147.32.86.171,4318.0,->,77.75.77.9,80.0,SRPA_FSPA,0.0,0.0,9,2059,1398,661,228.77777777777777,0.6789703739679456,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:03:36.656909,0.000327,udp,147.32.84.170,54257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:37.468214,0.000612,udp,109.205.114.167,41243.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:37.761274,0.000214,udp,147.32.85.25,52590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:38.012736,0.000164,udp,147.32.84.138,44727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:40.807747,0.186303,udp,147.32.84.59,23176.0,<->,24.26.49.194,9033.0,CON,0.0,0.0,2,548,74,474,274.0,0.13503649635036497,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:03:44.010622,0.000358,udp,147.32.85.26,50361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,72,174,123.0,0.2926829268292683,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:03:44.634054,0.160156,udp,147.32.84.184,59371.0,<->,74.222.223.248,7655.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:45.509003,3020.590088,udp,80.91.196.29,36740.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:46.654547,0.000585,udp,147.32.84.170,44078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:48.766194,0.000858,udp,78.188.131.110,47118.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,78,481,279.5,0.13953488372093023,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:03:56.072272,61.281315,tcp,147.32.84.165,4470.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:03:56.655249,0.000385,udp,147.32.84.170,48437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:03:59.170427,8.6e-05,udp,147.32.84.138,45090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:00.148072,0.000223,udp,147.32.84.138,55569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:04.814971,44.26656,tcp,147.32.86.151,2219.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,81,17436,4920,12516,215.25925925925927,0.28217481073640743,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:04:05.201097,0.000291,udp,147.32.84.170,46605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:05.201826,0.000379,udp,147.32.84.170,54900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:05.202866,240.317413,tcp,147.32.84.170,48668.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,35,7596,5316,2280,217.02857142857144,0.6998420221169036,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:05.355575,0.000311,udp,147.32.84.138,32978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:06.657759,0.000342,udp,147.32.84.170,33782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:06.775204,0.000339,udp,147.32.86.179,62174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,71,261,166.0,0.21385542168674698,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:07.632285,2.509559,udp,119.142.132.28,4892.0,<->,147.32.86.110,31338.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:09.949008,0.000324,udp,147.32.84.138,46538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:09.996910,0.001085,udp,118.93.240.237,15520.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,959,77,882,479.5,0.08029197080291971,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:10.543416,0.000224,udp,147.32.84.59,48415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:16.654701,0.001703,udp,147.32.84.170,37699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:17.577069,0.031939,tcp,147.32.85.74,57645.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:04:21.122126,275.734009,tcp,147.32.84.170,35408.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,34,10439,7643,2796,307.02941176470586,0.7321582527061979,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:21.414951,0.019598,udp,147.32.84.170,50138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:21.445341,245.425369,tcp,147.32.84.170,42828.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,6109,5684782,137852,5546930,930.5585202160746,0.024249302787688252,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:25.345653,0.0004,udp,147.32.85.6,65322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:26.360387,0.141479,tcp,147.32.86.182,53663.0,->,79.125.110.17,80.0,SRPA_FSPA,0.0,0.0,9,2637,1028,1609,293.0,0.38983693591202123,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:04:26.655448,0.000377,udp,147.32.84.170,36853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:26.656393,0.000277,udp,147.32.84.170,52010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:26.657418,0.018491,tcp,147.32.84.170,40578.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:27.618833,0.000392,udp,147.32.84.138,56294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:28.368259,0.000116,udp,147.32.84.138,42355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:29.961761,9.6e-05,udp,147.32.87.48,2209.0,->,147.32.86.254,161.0,INT,0.0,,2,262,262,0,131.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:04:32.593763,0.642248,udp,147.32.84.165,7101.0,<->,218.83.161.9,9010.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:04:32.677693,0.002121,udp,147.32.84.59,61755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:35.143636,0.000261,udp,147.32.84.138,37453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:35.438552,2589.289795,udp,187.54.2.188,52744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:36.658278,0.018109,tcp,147.32.84.170,58646.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:37.032390,0.000816,udp,190.145.24.114,34532.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,78,484,281.0,0.1387900355871886,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:37.556731,109.254402,tcp,31.9.74.136,57379.0,->,147.32.84.229,13363.0,SRA_FSA,0.0,0.0,10,678,204,474,67.8,0.3008849557522124,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:04:39.172963,0.009992,udp,147.32.86.179,49420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,108,267,187.5,0.288,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:40.103674,0.107754,udp,147.32.86.165,52840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,128,178,153.0,0.41830065359477125,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:41.118196,3146.817383,udp,188.35.20.119,44682.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1498,1126,372,124.83333333333333,0.7516688918558078,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:42.599426,0.000321,udp,147.32.86.20,52587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:43.265026,0.00083,udp,87.255.85.57,14351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,73,502,287.5,0.12695652173913044,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:44.800153,19.933441,tcp,147.32.86.53,44311.0,->,216.129.112.93,80.0,FSPA_FSPA,0.0,0.0,10,1891,1195,696,189.1,0.6319407720782655,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:04:45.187848,0.000264,udp,147.32.85.25,59623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:45.957586,3000.290771,udp,109.232.112.12,10314.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,471,285,186,78.5,0.6050955414012739,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:46.656023,0.000329,udp,147.32.84.170,53386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:47.609655,0.016162,tcp,147.32.85.74,57657.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:04:47.664688,0.000609,udp,81.159.211.104,58165.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:48.026972,0.000251,udp,147.32.84.138,47885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:48.323148,0.000978,udp,62.240.184.110,41214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,72,477,274.5,0.13114754098360656,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:52.946389,0.502534,udp,147.32.84.165,29032.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:04:52.946667,0.637194,udp,147.32.84.165,29031.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:04:52.947133,0.655304,udp,147.32.84.165,29033.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:04:53.421853,0.002263,udp,147.32.85.7,39211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:53.449866,105.136154,udp,147.32.84.165,29034.0,<->,112.90.86.184,8000.0,CON,0.0,0.0,109,45394,12276,33118,416.45871559633025,0.2704322157113275,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:04:53.909250,0.003959,tcp,147.32.86.168,49993.0,->,195.113.232.89,443.0,SRPA_SPA,0.0,0.0,9,1761,583,1178,195.66666666666666,0.33106189664963087,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:04:53.944890,24.585688,udp,147.32.84.165,29036.0,<->,183.60.16.16,8000.0,CON,0.0,0.0,39,16254,5088,11166,416.7692307692308,0.31303063861203395,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:04:53.945142,52.101814,udp,147.32.84.165,29035.0,<->,119.147.45.15,8000.0,CON,0.0,0.0,84,35852,9026,26826,426.8095238095238,0.2517572241437019,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:04:56.656740,0.01946,udp,147.32.84.170,55540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:56.676735,0.000517,udp,147.32.84.170,40869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:56.678005,0.018431,tcp,147.32.84.170,40582.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:04:56.929163,61.300732,tcp,147.32.84.165,4471.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:04:57.657875,0.00267,udp,147.32.85.8,41285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,77,420,248.5,0.15492957746478872,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:58.938956,0.000601,udp,109.113.13.93,40412.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:59.234339,0.000371,udp,147.32.84.59,17161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:04:59.710583,739.980225,udp,77.189.93.230,39917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:04:59.718940,0.024763,udp,147.32.84.229,13363.0,<->,88.159.68.10,14762.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:00.746182,18.871775,tcp,147.32.84.59,54921.0,->,66.220.158.47,80.0,FSA_FSA,0.0,0.0,7,424,242,182,60.57142857142857,0.5707547169811321,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:01.187129,431.566467,tcp,147.32.86.110,53448.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,78,29920,19858,10062,383.5897435897436,0.6637032085561497,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:05:01.724270,0.048485,udp,147.32.84.59,23176.0,<->,77.248.183.116,61724.0,CON,0.0,0.0,2,594,71,523,297.0,0.11952861952861953,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:02.109316,2.091451,tcp,147.32.84.2,52384.0,->,147.32.192.26,389.0,FSPA_FSPA,0.0,0.0,14,1166,710,456,83.28571428571429,0.6089193825042881,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:05:02.151358,0.003005,udp,147.32.84.59,64293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:03.001438,3048.037109,udp,72.130.158.204,1267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:08.049016,0.16207,tcp,87.186.124.104,1044.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,9,805,433,372,89.44444444444444,0.537888198757764,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:05:08.556914,18.246801,tcp,147.32.84.59,60625.0,->,77.75.77.135,80.0,SRPA_FSPA,0.0,0.0,13,4376,900,3476,336.61538461538464,0.2056672760511883,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:09.006917,0.000293,udp,147.32.84.170,43756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:09.009227,0.212644,tcp,147.32.84.170,48821.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:09.478473,0.008736,icmp,147.32.86.92,8.0,<->,209.85.148.105,39269.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,15,0,flow=Background,Background,-1 2011-08-16 15:05:09.597212,0.004296,udp,147.32.84.59,64333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:10.620507,0.330656,udp,147.32.86.187,65074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,83,241,162.0,0.25617283950617287,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:15.190046,0.000235,udp,147.32.84.138,44531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:16.657083,0.000403,udp,147.32.84.170,37533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:16.938011,0.000311,udp,147.32.86.110,38822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:17.393778,0.048473,udp,147.32.84.59,60776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,502,76,426,251.0,0.15139442231075698,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:17.946555,0.000355,udp,147.32.84.138,51070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:19.652223,0.649885,udp,147.32.84.165,29037.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:05:20.653701,27.993841,udp,147.32.84.165,29038.0,<->,183.60.48.101,8000.0,CON,0.0,0.0,70,29440,7826,21614,420.57142857142856,0.2658288043478261,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:05:20.901796,3599.506592,udp,147.32.84.229,13363.0,<->,66.207.230.87,18325.0,CON,0.0,0.0,4,698,158,540,174.5,0.22636103151862463,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:21.054426,0.02517,udp,147.32.84.229,13363.0,<->,155.185.41.88,9103.0,CON,0.0,0.0,2,554,75,479,277.0,0.13537906137184116,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:22.016129,0.000216,udp,147.32.86.165,62737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:24.367527,0.000551,udp,78.101.182.38,13846.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:25.107008,3595.812256,udp,147.32.84.94,7103.0,->,78.35.191.13,10305.0,INT,0.0,,8,672,672,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:05:29.498470,0.000342,udp,147.32.84.138,52514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:31.139006,0.0,udp,147.32.84.59,51283.0,->,143.225.49.13,56530.0,INT,0.0,,1,73,73,0,73.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:05:35.828167,0.000252,udp,147.32.85.2,61941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,76,215,145.5,0.2611683848797251,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:36.656212,0.000402,udp,147.32.84.170,54091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:37.620874,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,34276.0,URP,0.0,,1,70,70,0,70.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:05:38.184528,64.119286,tcp,147.32.84.59,51951.0,->,66.77.93.21,80.0,SRPA_SPA,0.0,0.0,26,19437,1415,18022,747.5769230769231,0.07279930030354478,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:38.643886,0.000294,udp,147.32.84.138,44016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:39.003324,0.108658,udp,147.32.84.170,54286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:39.052141,0.328747,tcp,147.32.84.59,44102.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,13,3645,1843,1802,280.38461538461536,0.5056241426611797,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:40.530960,0.000305,udp,147.32.84.222,34650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:40.675904,7.203774,tcp,147.32.84.59,53283.0,->,90.183.38.60,80.0,FSPA_FSPA,0.0,0.0,12,2863,1513,1350,238.58333333333334,0.5284666433810689,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:41.612228,0.000319,udp,147.32.84.59,51952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,79,139,109.0,0.3623853211009174,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:44.810392,0.292264,udp,208.54.45.189,1461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,355,183,172,177.5,0.5154929577464789,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:46.654480,0.000395,udp,147.32.84.170,56855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:05:47.394665,0.026204,udp,147.32.84.59,63871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,442,73,369,221.0,0.16515837104072398,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:47.847700,0.000705,udp,114.154.110.217,5691.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,75,487,281.0,0.13345195729537365,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:05:47.852747,9.446961,udp,147.32.84.165,29039.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:05:49.835775,0.631648,udp,147.32.84.165,29040.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:05:50.162237,0.481986,tcp,147.32.84.59,45215.0,->,72.233.119.209,80.0,FSPA_FSPA,0.0,0.0,12,1954,930,1024,162.83333333333334,0.4759467758444217,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:50.468382,56.351227,udp,147.32.84.165,29041.0,<->,119.147.45.251,8000.0,CON,0.0,0.0,96,40732,10822,29910,424.2916666666667,0.26568791122459,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:05:50.813935,0.479774,tcp,147.32.84.59,45228.0,->,72.233.119.209,80.0,FSPA_FSPA,0.0,0.0,12,1955,930,1025,162.91666666666666,0.47570332480818417,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:05:52.447224,86.556259,tcp,147.32.85.7,45049.0,->,216.52.242.80,80.0,FSPA_FSPA,0.0,0.0,119,89928,10399,79529,755.6974789915967,0.11563695400765056,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:05:52.500231,0.000233,udp,147.32.84.138,52769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:52.712715,0.248277,udp,147.32.84.134,44985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:05:53.209647,0.000438,udp,147.32.84.134,53355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:05:54.913069,0.000353,udp,147.32.86.20,49530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:57.300665,6.758171,udp,147.32.84.165,29042.0,<->,183.60.49.33,8000.0,CON,0.0,0.0,18,6592,2262,4330,366.22222222222223,0.3431432038834951,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:05:57.458736,0.000183,udp,147.32.84.59,62213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,78,148,113.0,0.34513274336283184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:57.498479,0.002405,udp,147.32.84.59,49577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,82,201,141.5,0.28975265017667845,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:57.515486,0.000254,udp,147.32.84.59,49440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:57.533737,0.000257,udp,147.32.84.59,64157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:57.798772,61.299438,tcp,147.32.84.165,4472.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:05:58.060678,0.000214,udp,147.32.85.25,40508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:58.390973,0.000267,udp,147.32.84.138,55042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:59.668685,0.000376,udp,147.32.85.34,53549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:59.676049,0.000324,udp,147.32.85.34,64412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:05:59.689193,0.000292,udp,147.32.85.34,62807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:02.885219,0.019773,udp,147.32.84.59,58426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,348,76,272,174.0,0.21839080459770116,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:05.297689,0.525822,udp,147.32.84.165,29043.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:06:05.428388,0.000174,udp,147.32.84.138,57920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:05.589151,0.000339,udp,147.32.84.59,57656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:05.804920,9.132136,tcp,124.254.151.42,57232.0,->,147.32.85.100,3126.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:06:05.824521,44.548061,udp,147.32.84.165,29044.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,76,31276,8642,22634,411.5263157894737,0.2763141066632562,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:06:06.656282,0.000308,udp,147.32.84.170,44245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:06:06.657163,0.000412,udp,147.32.84.170,35535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:06:06.897575,0.035002,udp,147.32.84.59,37025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,79,178,128.5,0.30739299610894943,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:07.566888,0.000478,udp,147.32.84.138,58457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:08.836946,0.00024,udp,147.32.84.138,49124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:09.810467,0.000299,udp,147.32.85.34,58773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:10.353529,0.206624,tcp,147.32.86.20,1315.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,28893,1029,27864,760.3421052631579,0.0356141625999377,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:06:12.934926,3053.600586,udp,147.32.84.59,18338.0,<->,110.173.49.210,1849.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:06:16.294455,0.000265,udp,147.32.84.59,57782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:16.470640,0.000175,udp,147.32.84.138,44355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:17.914194,0.000256,udp,147.32.84.138,34221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:18.206016,0.000411,udp,147.32.86.155,50242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:22.714366,0.104027,udp,147.32.86.223,21104.0,<->,128.122.184.164,63025.0,CON,0.0,0.0,2,655,75,580,327.5,0.11450381679389313,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:23.631398,0.0,icmp,147.32.84.164,771.0,->,208.117.231.72,39810.0,URP,0.0,,1,86,86,0,86.0,1.0,15,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:06:26.484830,0.000316,udp,147.32.84.59,36382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:28.887796,0.000298,udp,147.32.84.138,36916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:29.701613,0.000282,udp,147.32.84.138,33914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:31.888832,0.000392,udp,147.32.84.59,58633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:32.903517,2480.547852,udp,147.32.84.229,13363.0,<->,83.252.102.38,38912.0,CON,0.0,0.0,10,4417,268,4149,441.7,0.06067466606293865,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:34.752221,0.000372,udp,147.32.86.151,51717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,77,265,171.0,0.22514619883040934,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:36.654771,0.000412,udp,147.32.84.170,36757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:06:37.244132,2178.432373,udp,147.32.84.229,13363.0,<->,83.170.111.239,53619.0,CON,0.0,0.0,8,1343,265,1078,167.875,0.19731943410275501,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:38.245557,3022.978516,udp,87.194.135.95,50722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:40.650105,0.633454,udp,147.32.84.165,29045.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:06:41.588643,0.00069,udp,112.200.144.251,60658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:41.650397,114.026161,udp,147.32.84.165,29046.0,<->,183.60.49.124,8000.0,CON,0.0,0.0,91,36702,10996,25706,403.31868131868134,0.2996022015149038,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:06:41.916494,0.000416,udp,147.32.84.59,58868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:43.138209,0.000714,udp,187.59.162.233,21433.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:46.656692,0.000365,udp,147.32.84.170,46996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:06:48.059759,9.43981,udp,147.32.84.165,29047.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:06:50.434874,0.340075,udp,147.32.85.84,13716.0,<->,114.24.97.164,46169.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:50.480227,2980.8125,udp,1.169.161.83,16044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:06:51.076976,0.013328,tcp,147.32.84.215,51559.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:06:51.815193,0.635732,udp,147.32.84.165,29048.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:06:52.451629,125.730957,udp,147.32.84.165,29049.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,184,79812,20194,59618,433.7608695652174,0.25301959605071916,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:06:56.060103,0.000358,udp,147.32.84.164,40782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:06:56.060853,0.00024,udp,147.32.84.164,56901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:06:56.708829,0.152881,tcp,147.32.84.59,45331.0,->,72.233.119.209,80.0,SR_SA,0.0,0.0,3,208,134,74,69.33333333333333,0.6442307692307693,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:06:57.500534,91.179344,udp,147.32.84.165,29050.0,<->,119.147.45.15,8000.0,CON,0.0,0.0,73,29602,8896,20706,405.5068493150685,0.3005202351192487,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:06:58.668108,61.295757,tcp,147.32.84.165,4473.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:06:58.721805,0.000281,udp,147.32.87.223,64116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,102,164,133.0,0.38345864661654133,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:06:59.549859,0.000295,udp,147.32.86.110,34805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:00.703017,0.000284,udp,147.32.86.110,44155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:01.185963,0.001143,udp,147.32.85.36,40808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:03.670662,0.000226,udp,147.32.84.138,50451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:04.503430,0.000455,udp,147.32.84.138,43630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:04.695102,0.01965,tcp,147.32.84.59,44233.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:07:06.203343,0.000577,udp,147.32.84.59,35703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:06.657804,0.000326,udp,147.32.84.170,59907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:09.690603,0.164599,udp,147.32.84.59,42874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:12.006090,0.000345,udp,147.32.84.170,49687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:12.007498,0.256682,tcp,147.32.84.170,33807.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:16.656280,0.000388,udp,147.32.84.170,51800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:18.560347,3468.51001,udp,147.32.84.94,7103.0,<->,202.60.240.93,7378.0,CON,0.0,0.0,144,95703,91293,4410,664.6041666666666,0.953919939813799,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:19.329821,6.950703,tcp,147.32.84.59,56831.0,->,192.168.78.1,139.0,S_,0.0,,7,546,546,0,78.0,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:07:26.657561,0.000374,udp,147.32.84.170,51749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:26.658656,0.018357,tcp,147.32.84.170,40532.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:28.212373,0.000266,udp,147.32.87.223,54684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:29.946161,1.434889,tcp,90.178.81.122,12111.0,->,147.32.87.54,2222.0,FSPA_FSPA,0.0,0.0,127,9083,4740,4343,71.51968503937007,0.5218540129913024,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:07:31.865224,11.191097,tcp,147.32.84.59,3341.0,->,87.248.203.253,80.0,FSPA_FSPA,0.0,0.0,305,234371,16027,218344,768.4295081967213,0.06838303373710912,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:07:32.755477,0.009796,udp,147.32.84.59,56413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:34.428537,0.000407,udp,147.32.84.138,50049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:35.671714,1.134009,tcp,147.32.86.20,1383.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,114,113393,2006,111387,994.6754385964912,0.017690686373938426,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:07:36.657134,0.000355,udp,147.32.84.170,53548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:36.658252,0.02021,tcp,147.32.84.170,36511.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:36.713107,0.000329,udp,147.32.85.25,33525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:37.106127,0.00042,udp,147.32.84.2,47197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,77,222,149.5,0.25752508361204013,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:41.665081,81.974472,udp,74.184.107.195,49181.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1056,936,120,264.0,0.8863636363636364,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:43.008131,0.000416,udp,147.32.84.170,49319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:43.013866,0.001031,udp,212.74.157.253,32281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,179,74,126.5,0.7075098814229249,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:46.887573,0.020137,udp,147.32.86.187,59359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,71,325,198.0,0.17929292929292928,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:48.984727,0.000642,udp,213.184.244.222,18760.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:49.379642,0.000219,udp,147.32.85.8,37189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,74,132,103.0,0.3592233009708738,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:49.829808,114.829353,tcp,147.32.86.168,36537.0,->,74.125.232.222,443.0,FSPA_FSPA,0.0,0.0,16,4193,3128,1065,262.0625,0.7460052468399714,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:07:50.776828,0.03068,udp,147.32.86.168,50182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,71,442,256.5,0.13840155945419103,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:52.372408,0.455133,udp,147.32.86.168,54263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:53.173554,0.000342,udp,147.32.84.138,53038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:07:55.066272,701.811829,udp,147.32.84.229,13363.0,<->,42.98.26.25,57517.0,CON,0.0,0.0,6,731,295,436,121.83333333333333,0.40355677154582764,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:55.066377,3360.535156,udp,147.32.84.229,13363.0,<->,113.37.84.231,61921.0,CON,0.0,0.0,18,1752,1134,618,97.33333333333333,0.6472602739726028,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:55.140641,2409.662354,udp,147.32.84.229,13363.0,<->,65.38.64.227,11651.0,CON,0.0,0.0,8,642,400,242,80.25,0.6230529595015576,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:07:56.657209,0.000361,udp,147.32.84.170,42312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:56.658344,0.018294,tcp,147.32.84.170,36514.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:07:59.532637,61.299351,tcp,147.32.84.165,4474.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:08:00.299574,3444.629395,udp,147.32.84.59,18338.0,<->,64.71.211.53,24461.0,CON,0.0,0.0,4,1098,148,950,274.5,0.13479052823315119,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:00.334022,0.000321,udp,147.32.84.59,53671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,97,183,140.0,0.3464285714285714,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:02.225799,8.299876,tcp,66.249.72.233,58286.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,13,2622,1091,1531,201.69230769230768,0.41609458428680396,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:08:02.373292,0.000268,udp,147.32.84.138,40745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:02.683119,0.000265,udp,147.32.85.25,60189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:03.782158,0.00027,udp,147.32.84.138,53405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:06.657782,0.000322,udp,147.32.84.170,46736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:06.680129,20.529696,tcp,147.32.86.111,33257.0,->,93.184.220.20,80.0,SRPA_FSPA,0.0,0.0,10,2968,1681,1287,296.8,0.5663746630727763,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:08:06.793172,447.392975,udp,94.129.200.98,33461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:12.464774,0.00022,udp,147.32.84.138,60552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:13.413894,0.246009,tcp,147.32.84.170,40202.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:13.931030,0.265554,tcp,147.32.84.170,40205.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:14.048009,0.000288,udp,147.32.84.170,48658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:14.051945,240.042038,tcp,147.32.84.170,49578.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:14.859054,240.084991,tcp,147.32.84.59,39206.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,21,3793,2557,1236,180.61904761904762,0.674136567360928,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:15.650546,20.405264,udp,147.32.84.59,7525.0,<->,68.37.238.116,7537.0,CON,0.0,0.0,464,429043,5193,423850,924.6616379310345,0.012103681915332495,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:21.035265,0.000519,udp,114.43.19.2,6907.0,<->,147.32.86.165,443.0,CON,0.0,0.0,2,121,61,60,60.5,0.5041322314049587,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:22.019966,0.000343,udp,147.32.84.138,51882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:23.317529,0.017438,udp,147.32.86.187,62830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,72,249,160.5,0.22429906542056074,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:25.102128,0.000261,udp,147.32.84.59,54345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,78,223,150.5,0.2591362126245847,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:26.180747,0.000407,icmp,147.32.84.19,,<-,147.32.87.5,12855.0,RED,,0.0,2,196,0,196,98.0,0.0,15,0,flow=Background,Background,-1 2011-08-16 15:08:26.366658,1765.446167,udp,188.234.0.126,10536.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:27.666322,0.000681,udp,202.153.34.99,37336.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:28.757506,0.000257,udp,147.32.84.79,48202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,86,243,164.5,0.2613981762917933,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:28.834097,0.000283,udp,147.32.85.25,59327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:29.906163,9.435153,udp,147.32.84.165,29051.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,3,390,236,154,130.0,0.6051282051282051,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:08:30.312298,0.00058,udp,195.244.169.41,48106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:30.706207,0.00024,udp,147.32.84.59,52264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,84,203,143.5,0.2926829268292683,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:33.698425,0.029051,udp,147.32.84.59,57040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,158,79,79,79.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:33.735078,0.000476,udp,147.32.84.59,60942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:35.241535,0.247898,udp,147.32.84.164,44475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:08:35.738189,0.0004,udp,147.32.84.164,46343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:08:36.656403,0.000518,udp,147.32.84.170,45969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:36.657419,0.000288,udp,147.32.84.170,37459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:36.936422,0.506773,udp,147.32.84.165,29052.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:08:37.444264,3.161498,udp,147.32.84.165,29053.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,10,3392,1406,1986,339.2,0.41450471698113206,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:08:37.755388,0.123097,udp,147.32.84.59,59188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,85,189,137.0,0.3102189781021898,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:39.342135,153.809753,udp,147.32.84.165,29054.0,<->,183.60.48.104,8000.0,CON,0.0,0.0,100,39860,11982,27878,398.6,0.30060210737581533,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:08:39.738621,0.000303,udp,147.32.84.59,37210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,87,167,127.0,0.3425196850393701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:42.094205,0.637506,udp,147.32.84.165,29055.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:08:43.095351,25.225534,udp,147.32.84.165,29056.0,<->,183.60.49.125,8000.0,CON,0.0,0.0,20,6708,2690,4018,335.4,0.40101371496720334,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:08:44.045355,0.000281,tcp,67.195.115.95,51939.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 15:08:45.005636,0.000328,udp,147.32.84.170,54700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:51.079183,0.002144,udp,147.32.84.59,58180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:51.086377,0.011342,udp,147.32.84.59,46974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,72,141,106.5,0.3380281690140845,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:51.188879,5.159756,udp,85.107.90.96,45381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1147,157,990,286.75,0.13687881429816914,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:08:51.232462,0.089198,tcp,147.32.84.59,54123.0,->,64.236.124.241,80.0,FSPA_FSPA,0.0,0.0,11,1705,1142,563,155.0,0.6697947214076246,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:51.363715,11.687339,tcp,147.32.84.59,3364.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:52.259622,2.22504,tcp,147.32.86.168,34732.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,13,4214,2976,1238,324.15384615384613,0.7062173706691979,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:08:53.157377,3507.258789,tcp,147.32.84.59,54142.0,->,74.125.43.16,993.0,SPA_SPA,0.0,0.0,319,29687,14973,14714,93.0626959247649,0.5043621787314313,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:08:55.518452,0.17246,udp,147.32.84.59,53313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:55.671914,0.184668,udp,147.32.84.59,60645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:08:56.656689,0.000368,udp,147.32.84.170,49627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:08:59.839836,0.634432,udp,147.32.84.165,29057.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:09:00.401235,61.298725,tcp,147.32.84.165,4475.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:09:00.840619,8.309673,udp,147.32.84.165,29058.0,<->,112.95.240.73,8000.0,CON,0.0,0.0,30,11640,3546,8094,388.0,0.30463917525773193,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:09:04.297479,0.000227,udp,147.32.86.168,47062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,68,136,102.0,0.3333333333333333,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:04.497880,0.352417,udp,147.32.84.229,13363.0,<->,118.168.206.97,39389.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:04.773965,0.000601,udp,110.36.36.78,1684.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:05.530573,5.722003,tcp,66.249.72.233,44570.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1125,679,446,112.5,0.6035555555555555,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:09:06.656291,0.000441,udp,147.32.84.170,60746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:09.563836,0.636632,udp,147.32.84.165,29059.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:09:10.195076,0.631038,udp,147.32.84.165,29060.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:09:10.565247,95.083176,udp,147.32.84.165,29061.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,149,64086,16342,47744,430.10738255033556,0.2550010922822457,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:09:11.195756,139.079666,udp,147.32.84.165,29062.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,151,63382,16984,46398,419.74834437086093,0.2679625130163138,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:09:11.747951,0.000266,udp,147.32.84.138,52899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:12.183595,11.205514,tcp,147.32.84.59,54171.0,->,66.235.156.132,80.0,SPA_SRPA,0.0,0.0,9,3153,2307,846,350.3333333333333,0.7316841103710752,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:09:12.190602,11.384967,tcp,147.32.84.59,54184.0,->,63.215.202.6,80.0,FSA_FSA,0.0,0.0,6,378,258,120,63.0,0.6825396825396826,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:09:12.203047,0.0,icmp,147.32.84.59,8.0,->,192.168.1.101,256.0,ECO,0.0,,1,106,106,0,106.0,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:09:15.925976,0.000808,udp,114.44.2.38,16565.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:16.358500,3161.101318,udp,193.179.175.210,12062.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1285,869,416,128.5,0.6762645914396888,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:16.655015,0.000323,udp,147.32.84.170,48373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:18.344895,0.000302,udp,147.32.84.138,53903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:18.467915,240.052689,tcp,147.32.85.8,37290.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,26,2494,1398,1096,95.92307692307692,0.5605453087409783,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:09:20.068333,0.003886,udp,94.21.107.182,12553.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3020,60,2960,755.0,0.019867549668874173,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:20.089711,0.000578,udp,195.160.204.33,64746.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:20.947988,0.000209,udp,147.32.84.138,54952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:20.960293,0.000171,udp,147.32.84.138,54609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:20.976504,0.000286,udp,147.32.84.2,56669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:21.543354,0.000221,udp,147.32.84.138,40977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:23.080768,0.000368,udp,147.32.84.138,45939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:24.682403,0.000348,udp,147.32.84.138,35513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:26.527390,0.000287,udp,147.32.84.138,59079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:26.822213,3423.14502,tcp,147.32.84.59,4515.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,38,21197,3461,17736,557.8157894736842,0.16327782233334906,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:09:30.191131,0.00051,udp,180.107.168.74,15205.0,<->,147.32.85.123,60607.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:32.303261,0.000351,udp,147.32.84.138,49919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:38.308126,0.68089,tcp,66.249.72.237,48817.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,28,13592,1561,12031,485.42857142857144,0.11484696880517951,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:09:38.476506,0.000275,udp,147.32.84.59,58339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:38.554616,0.000276,udp,147.32.84.138,34552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:40.513031,0.000394,udp,147.32.84.138,46122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:40.903816,0.184016,udp,147.32.84.168,54974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,85,199,142.0,0.2992957746478873,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:41.037022,15.963011,tcp,147.32.84.59,49464.0,->,212.8.166.36,12350.0,FSPA_FSPA,0.0,0.0,49,5648,2598,3050,115.26530612244898,0.459985835694051,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:09:44.542700,0.343481,tcp,147.32.84.59,58982.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1541,699,842,171.22222222222223,0.4536015574302401,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:09:45.274898,0.000161,icmp,200.54.71.170,8.0,<->,147.32.84.166,2.0,ECO,0.0,0.0,2,148,74,74,74.0,0.5,15,1,flow=Background,Background,-1 2011-08-16 15:09:46.655795,0.000375,udp,147.32.84.170,53303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:46.656726,0.000411,udp,147.32.84.170,53208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:47.006286,0.0003,udp,147.32.84.170,49249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:47.301734,0.206808,tcp,147.32.86.20,1478.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,27675,1029,26646,747.972972972973,0.037181571815718156,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:09:49.091276,0.000492,udp,147.32.84.59,59208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,80,163,121.5,0.3292181069958848,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:51.377328,0.000208,udp,147.32.85.25,54505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:09:53.292220,0.000945,udp,109.229.66.25,1789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:56.676303,0.000409,udp,147.32.84.170,53654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:09:57.680278,2431.105225,udp,109.110.2.195,27325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:09:58.124575,1.9e-05,udp,147.32.84.138,56344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:00.242662,0.000435,udp,147.32.85.34,59325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:00.296674,0.000346,udp,147.32.85.34,59268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:01.269897,61.282032,tcp,147.32.84.165,4476.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:10:03.863639,0.000273,udp,147.32.84.138,44843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:06.216835,0.247087,udp,147.32.85.20,3079.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:06.802032,0.170309,tcp,147.32.86.20,1492.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,63,58029,1393,56636,921.0952380952381,0.02400523875993038,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:10:08.444922,2321.176514,tcp,151.52.201.183,49170.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,267,25919,15020,10899,97.0749063670412,0.5794976658050079,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:10:09.202670,0.00056,udp,147.32.84.59,60807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,72,158,115.0,0.3130434782608696,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:09.211515,0.000321,udp,147.32.84.59,46894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,77,146,111.5,0.3452914798206278,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:10.328627,0.000374,udp,147.32.84.138,46084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:11.606392,10.952246,tcp,147.32.84.194,1388.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,62,38038,7794,30244,613.516129032258,0.20490036279509963,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:10:13.273599,0.000393,udp,147.32.84.59,51811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:14.288149,0.000236,udp,147.32.84.19,51203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:16.326019,0.000257,udp,147.32.84.138,42448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:19.455767,0.000338,udp,147.32.84.138,44136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:22.139665,0.390764,udp,147.32.84.94,36128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,76,318,197.0,0.19289340101522842,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:24.012965,10.167116,udp,99.162.87.197,12240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,365,135,230,91.25,0.3698630136986301,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:10:25.205607,0.000419,udp,147.32.84.94,51495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:26.399137,0.127038,tcp,147.32.84.59,53592.0,->,62.168.44.116,80.0,FSPA_FSPA,0.0,0.0,11,1681,837,844,152.8181818181818,0.49791790600832836,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:10:26.657023,0.000454,udp,147.32.84.170,45286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:10:26.979357,0.002061,udp,147.32.84.59,58883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,72,141,106.5,0.3380281690140845,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:27.930630,0.0002,udp,147.32.84.138,44972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:28.001248,0.000308,udp,147.32.85.25,43682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:28.655107,0.000477,udp,147.32.84.94,58275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:30.706412,2575.741699,udp,90.180.252.146,22899.0,<->,147.32.85.26,60764.0,CON,0.0,0.0,10,1202,832,370,120.2,0.6921797004991681,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:10:32.645044,0.000258,udp,147.32.84.138,49629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:32.651801,0.000298,udp,147.32.84.138,53517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:34.057066,9.014489,tcp,84.42.157.102,30331.0,->,147.32.87.54,80.0,S_,0.0,,3,186,186,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:10:34.934901,0.017306,udp,147.32.85.8,50141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,72,212,142.0,0.2535211267605634,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:35.482744,125.986511,tcp,147.32.85.5,57794.0,->,74.125.232.213,443.0,FSPA_FSPA,0.0,0.0,16,3887,2969,918,242.9375,0.7638281450990481,15,1,flow=Background-google-webmail,Background,-1 2011-08-16 15:10:36.866850,0.311152,tcp,147.32.86.20,1513.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,28980,798,28182,852.3529411764706,0.02753623188405797,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:10:39.627725,0.000399,udp,147.32.84.170,46927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:10:39.995289,247.546341,tcp,147.32.84.170,38447.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,11383,10756800,252758,10504042,944.9881402090837,0.023497508552729435,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:10:46.655310,0.00038,udp,147.32.84.170,56787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:10:46.656304,0.000386,udp,147.32.84.170,52409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:10:46.824111,0.000344,udp,147.32.84.59,54430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,74,232,153.0,0.24183006535947713,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:46.825574,0.000423,udp,147.32.84.59,44812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,72,280,176.0,0.20454545454545456,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:47.504977,0.621038,udp,147.32.84.165,29063.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:10:48.485254,99.659927,tcp,27.60.160.86,49463.0,->,147.32.84.2,80.0,FSRPA_SPA,0.0,0.0,69,44101,2665,41436,639.1449275362319,0.06042946871953017,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:10:48.506499,128.109512,udp,147.32.84.165,29064.0,<->,112.90.86.181,8000.0,CON,0.0,0.0,97,39234,11852,27382,404.4742268041237,0.3020849263393995,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:10:51.369832,0.000168,udp,147.32.84.138,45295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:52.306358,20.6222,tcp,147.32.84.59,41519.0,->,74.125.39.116,80.0,FSPA_FSPA,0.0,0.0,14,4037,1998,2039,288.35714285714283,0.49492197176120883,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:10:52.772170,1252.15625,udp,178.142.5.75,3074.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,710,524,186,118.33333333333333,0.7380281690140845,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:10:52.952012,0.00178,udp,147.32.84.59,53445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:53.929119,0.000473,udp,147.32.86.20,52326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:56.400928,0.000193,udp,147.32.84.138,37494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:10:56.657016,0.018406,tcp,147.32.84.170,58427.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:02.098780,0.192524,udp,88.100.104.234,20477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,170,73,121.5,0.6995884773662552,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:02.126594,61.282764,tcp,147.32.84.165,4477.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:11:02.547792,0.000301,udp,147.32.84.25,55930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:02.736407,0.000421,udp,147.32.84.25,50877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,75,265,170.0,0.22058823529411764,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:08.284171,0.000393,udp,147.32.84.59,33679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:11.609419,0.000403,udp,147.32.84.138,39474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:11.710062,643.117371,udp,91.189.244.43,8466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3159,120,3039,526.5,0.03798670465337132,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:13.345905,0.00032,udp,147.32.84.59,58022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:13.480167,0.164438,udp,147.32.84.229,13363.0,<->,64.138.217.176,50174.0,CON,0.0,0.0,4,3000,60,2940,750.0,0.02,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:13.867949,2595.580322,udp,147.32.84.94,7103.0,->,75.108.247.6,7137.0,INT,0.0,,8,672,672,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:11:16.013011,0.009581,udp,147.32.84.132,57886.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:17.892520,0.000156,udp,147.32.84.138,49475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:19.480504,0.000346,udp,147.32.84.59,50896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:19.973069,0.004362,tcp,90.183.39.17,52045.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1740,800,940,174.0,0.45977011494252873,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:20.007726,0.000322,udp,147.32.84.170,46008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:20.009044,0.274518,tcp,147.32.84.170,38366.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:21.808480,9.005271,tcp,147.32.86.208,4322.0,->,77.75.73.9,80.0,SRPA_FSPA,0.0,0.0,10,2198,1537,661,219.8,0.6992720655141037,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:23.606896,0.633793,udp,147.32.84.165,29065.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:11:24.241493,68.734001,udp,147.32.84.165,29066.0,<->,183.60.49.30,8000.0,CON,0.0,0.0,67,27638,8000,19638,412.5074626865672,0.2894565453361314,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:11:27.803349,0.000285,udp,147.32.84.138,51564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:29.127530,0.000662,udp,111.233.46.15,14796.0,<->,147.32.85.2,31604.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:30.180151,0.000297,udp,147.32.84.59,48803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,72,174,123.0,0.2926829268292683,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:30.182990,0.000327,udp,147.32.84.59,36366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,74,176,125.0,0.296,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:30.186013,0.00035,udp,147.32.84.59,45341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,75,161,118.0,0.3177966101694915,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:30.199218,0.000356,udp,147.32.84.59,37995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:30.621423,0.000254,udp,147.32.84.164,37319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:11:30.622057,0.000365,udp,147.32.84.164,42560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:11:30.622852,250.040237,tcp,147.32.84.164,46688.0,->,209.85.149.139,80.0,FSPA_FSPA,0.0,0.0,27,8125,4664,3461,300.9259259259259,0.5740307692307692,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:11:31.110635,0.001013,udp,187.115.173.106,35722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,649,78,571,324.5,0.12018489984591679,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:31.354252,0.114145,udp,147.32.84.59,62181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,74,151,112.5,0.3288888888888889,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:31.961745,0.0,udp,192.168.88.79,51615.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:11:32.139625,0.627325,udp,147.32.84.165,29067.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:11:32.767782,74.755913,udp,147.32.84.165,29068.0,<->,183.60.49.123,8000.0,CON,0.0,0.0,98,40544,11250,29294,413.7142857142857,0.2774763220205209,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:11:33.178270,3.270299,tcp,147.32.84.68,50289.0,->,195.113.232.88,80.0,SRPA_SPA,0.0,0.0,21,16661,1206,15455,793.3809523809524,0.072384610767661,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:34.419197,261.908417,icmp,188.154.61.124,3331.0,->,147.32.84.94,,URFIL,0.0,,8,560,560,0,70.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:11:35.105625,1703.495972,udp,147.32.84.94,7103.0,<->,108.49.140.135,7330.0,CON,0.0,0.0,94,64577,62117,2460,686.9893617021277,0.9619059417439646,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:36.023994,0.248139,tcp,147.32.85.88,58496.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,2003,1214,789,200.3,0.6060908637044433,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:11:36.328007,0.000209,udp,147.32.85.25,37695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:41.368347,3300.624268,tcp,147.32.86.50,52855.0,->,74.125.43.109,993.0,SPA_SPA,0.0,0.0,186,16848,7678,9170,90.58064516129032,0.45572174738841403,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:42.680919,0.231826,tcp,147.32.86.20,1561.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,46,37547,1211,36336,816.2391304347826,0.03225290968652622,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:44.624091,0.000218,udp,147.32.84.138,53130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:44.821629,0.000677,udp,109.93.104.34,46978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:11:46.655650,0.000428,udp,147.32.84.170,56516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:46.657799,0.018046,tcp,147.32.84.170,56935.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:46.858050,0.000243,udp,147.32.84.138,38393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:50.164396,8.96871,tcp,41.145.221.243,1509.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:11:50.996837,0.00035,udp,147.32.84.170,58170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:56.656067,0.000463,udp,147.32.84.170,41046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:11:57.084960,0.000478,udp,147.32.85.36,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:11:59.660771,0.000243,udp,147.32.85.34,51866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:02.689175,426.986053,tcp,147.32.84.59,46127.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,279,216939,18404,198535,777.5591397849462,0.08483490750856232,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:12:02.984888,61.281399,tcp,147.32.84.165,4478.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:12:04.067042,3173.851074,udp,147.32.84.229,13363.0,<->,118.233.248.148,47619.0,CON,0.0,0.0,12,2367,2006,361,197.25,0.8474862695395015,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:12:04.254247,8.3e-05,udp,147.32.84.138,33997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:04.583089,14.763367,tcp,89.204.137.81,16952.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,11,768,402,366,69.81818181818181,0.5234375,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:06.655128,0.000392,udp,147.32.84.170,54214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:06.657069,0.018613,tcp,147.32.84.170,56938.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:08.720127,0.196997,tcp,91.124.79.90,10006.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,9,782,428,354,86.88888888888889,0.5473145780051151,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:08.856526,15.459621,udp,147.32.84.94,7103.0,->,186.45.204.172,7110.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:12:10.348115,0.007684,tcp,147.32.84.132,57276.0,->,77.78.99.21,80.0,SRPA_FSPA,0.0,0.0,8,1991,1159,832,248.875,0.5821195379206429,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:11.033214,0.000404,udp,147.32.84.59,43476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,87,192,139.5,0.3118279569892473,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:15.929121,10.440989,tcp,147.32.86.172,59047.0,->,80.239.242.252,80.0,FSPA_FSPA,0.0,0.0,22,16860,1595,15265,766.3636363636364,0.09460260972716489,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:16.340390,10.194089,tcp,147.32.86.172,59048.0,->,80.239.242.252,80.0,FSPA_FSPA,0.0,0.0,15,7635,1190,6445,509.0,0.1558611656843484,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:16.655101,0.00047,udp,147.32.84.170,35885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:16.657091,0.017995,tcp,147.32.84.170,42842.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:18.785842,0.0,udp,147.32.84.199,427.0,->,192.168.88.186,49828.0,INT,0.0,,1,325,325,0,325.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:12:19.806724,0.249495,tcp,147.32.85.6,51092.0,->,77.78.104.105,80.0,FSPA_FSPA,0.0,0.0,17,8544,960,7584,502.5882352941176,0.11235955056179775,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:19.822097,310.384003,tcp,147.32.84.134,43041.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,31,6905,1504,5401,222.74193548387098,0.2178131788559015,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:19.822182,310.383911,tcp,147.32.84.134,43042.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,31,6905,1504,5401,222.74193548387098,0.2178131788559015,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.059031,310.148407,tcp,147.32.84.134,43048.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,31,6905,1504,5401,222.74193548387098,0.2178131788559015,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.061029,40.030418,tcp,147.32.84.134,38573.0,->,92.123.64.161,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.061035,40.030128,tcp,147.32.84.134,38574.0,->,92.123.64.161,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.063285,30.026379,tcp,147.32.84.134,38616.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,16,3023,1032,1991,188.9375,0.34138273238504796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.063289,30.026852,tcp,147.32.84.134,38617.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,16,3023,1032,1991,188.9375,0.34138273238504796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.063293,30.026564,tcp,147.32.84.134,38618.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,16,3023,1032,1991,188.9375,0.34138273238504796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.078557,0.003088,udp,147.32.84.134,47995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,428,84,344,214.0,0.19626168224299065,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.082355,40.013996,tcp,147.32.84.134,55637.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.159568,39.933315,tcp,147.32.84.134,35402.0,->,92.123.68.154,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.159682,39.932835,tcp,147.32.84.134,35405.0,->,92.123.68.154,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.169107,0.008426,udp,147.32.84.134,40263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,466,83,383,233.0,0.1781115879828326,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.178391,39.915234,tcp,147.32.84.134,45038.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.178469,39.915737,tcp,147.32.84.134,45040.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:20.884193,310.053864,tcp,147.32.84.134,38641.0,->,80.239.149.19,443.0,FSRPA_FSPA,0.0,0.0,40,12044,3185,8859,301.1,0.26444702756559285,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:21.708180,309.229248,tcp,147.32.84.134,38645.0,->,80.239.149.19,443.0,FSRPA_FSPA,0.0,0.0,30,5571,1812,3759,185.7,0.325255788906839,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:21.736641,319.293213,tcp,147.32.84.134,43087.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,32,6973,3934,3039,217.90625,0.5641761078445432,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:22.008474,0.000311,udp,147.32.84.170,41688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:22.025323,83.005096,tcp,147.32.84.134,41384.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:12:24.804740,0.000242,udp,147.32.84.138,60150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:24.809563,0.000783,udp,151.37.112.196,39796.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,306,64,242,153.0,0.20915032679738563,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:12:26.657101,0.018185,tcp,147.32.84.170,56941.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:29.628978,15.299893,icmp,89.212.82.153,771.0,->,147.32.84.94,24348.0,URP,0.0,,4,448,448,0,112.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:12:34.209348,0.644179,udp,147.32.84.165,29069.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:12:34.786957,0.000269,udp,147.32.85.30,56181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,71,159,115.0,0.30869565217391304,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:35.210693,21.263731,udp,147.32.84.165,29070.0,<->,183.60.48.103,8000.0,CON,0.0,0.0,31,12102,3720,8382,390.38709677419354,0.3073872087258304,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:12:36.459172,0.640483,tcp,180.74.239.130,50805.0,->,147.32.84.229,80.0,SRA_SA,0.0,0.0,4,268,202,66,67.0,0.753731343283582,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:36.655592,0.000462,udp,147.32.84.170,50154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:39.417727,213.820694,udp,220.136.33.142,37180.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,723,150,573,180.75,0.2074688796680498,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:12:45.567692,0.002152,udp,147.32.84.59,50677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,80,150,115.0,0.34782608695652173,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:46.183854,0.000215,udp,147.32.84.59,2772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:48.719531,0.646408,udp,147.32.84.165,29071.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:12:49.366718,114.698891,udp,147.32.84.165,29072.0,<->,119.147.45.13,8000.0,CON,0.0,0.0,106,44200,12438,31762,416.9811320754717,0.2814027149321267,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:12:50.152250,0.000377,udp,147.32.85.120,6038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,384,76,308,192.0,0.19791666666666666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:56.656945,0.000544,udp,147.32.84.170,36854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:56.657786,0.000357,udp,147.32.84.170,51451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:12:57.672584,0.524454,udp,147.32.84.165,29073.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:12:58.073212,0.63931,udp,147.32.84.165,29074.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:12:58.197980,60.422665,udp,147.32.84.165,29075.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,25,8522,3192,5330,340.88,0.37455996245012907,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:12:58.583604,889.215271,tcp,147.32.85.120,43960.0,->,74.125.43.108,993.0,FSPA_FSPA,0.0,0.0,11889,6252705,307669,5945036,525.9235427706283,0.04920574375410323,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:12:58.631048,0.000154,udp,147.32.84.138,51213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:12:58.713387,35.754066,udp,147.32.84.165,29076.0,<->,112.95.240.74,8000.0,CON,0.0,0.0,25,9338,3804,5534,373.52,0.40736774469907905,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:13:00.624929,10.005353,tcp,147.32.84.134,58131.0,->,194.79.52.193,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.660912,0.013306,tcp,147.32.84.134,45889.0,->,194.79.52.192,80.0,FSPA_FSPA,0.0,0.0,69,33597,2717,30880,486.9130434782609,0.08087031580200613,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.661217,0.00023,udp,147.32.84.134,43733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.661493,0.000212,udp,147.32.84.134,35362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.661682,0.000298,udp,147.32.84.134,59305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.661696,0.000346,udp,147.32.84.134,55980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.661782,0.000515,udp,147.32.84.134,33035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.662354,0.000282,udp,147.32.84.134,48125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.662809,19.967638,tcp,147.32.84.134,59038.0,->,194.79.52.195,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.662872,0.000326,udp,147.32.84.134,45464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.662987,19.968102,tcp,147.32.84.134,41060.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663552,0.000326,udp,147.32.84.134,48288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,83,200,141.5,0.29328621908127206,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663666,19.967535,tcp,147.32.84.134,50759.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663751,19.966707,tcp,147.32.84.134,50761.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663762,19.966928,tcp,147.32.84.134,50763.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,344,206,138,68.8,0.5988372093023255,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663859,7.393132,tcp,147.32.84.134,40418.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.663874,7.394309,tcp,147.32.84.134,40419.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.664668,19.966974,tcp,147.32.84.134,44685.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.664801,19.966928,tcp,147.32.84.134,44687.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.675926,6.414039,tcp,147.32.84.134,42011.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.747934,43.042538,tcp,147.32.84.134,50781.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,78,62101,4100,58001,796.1666666666666,0.06602148113556948,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.752575,59.31057,tcp,147.32.84.134,39995.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,12,2270,932,1338,189.16666666666666,0.4105726872246696,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.864780,0.074532,tcp,147.32.84.134,41099.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,11,2721,1133,1588,247.36363636363637,0.41639103270856304,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.929057,0.000296,udp,147.32.84.134,45476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.929067,0.000337,udp,147.32.84.134,38950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.929784,0.000479,udp,147.32.84.134,43927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,77,184,130.5,0.2950191570881226,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.930615,0.000154,udp,147.32.84.134,36881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.938733,0.007437,tcp,147.32.84.134,44713.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,12,1884,1199,685,157.0,0.636411889596603,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.939071,0.00042,udp,147.32.84.134,53816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,78,184,131.0,0.29770992366412213,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.940392,0.000374,udp,147.32.84.134,35714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.941197,0.000257,udp,147.32.84.134,55910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.942688,0.000274,udp,147.32.84.134,55186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,70,177,123.5,0.2834008097165992,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.944469,0.000347,udp,147.32.84.134,48915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.944927,0.000233,udp,147.32.84.134,50711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.945513,0.000394,udp,147.32.84.134,49926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:00.946174,0.000269,udp,147.32.84.134,53775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,75,181,128.0,0.29296875,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:01.083222,369.01474,tcp,147.32.84.134,39477.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,46,13108,9402,3706,284.95652173913044,0.7172718950259384,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:01.084271,0.007341,tcp,147.32.84.134,44718.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,13,3336,929,2407,256.61538461538464,0.27847721822541965,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:01.256273,0.331335,tcp,147.32.84.59,59185.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1537,699,838,170.77777777777777,0.4547820429407938,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:13:01.394106,0.009362,tcp,147.32.84.134,40736.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1776,1011,765,197.33333333333334,0.5692567567567568,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:01.394253,0.009592,tcp,147.32.84.134,40737.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1779,1014,765,197.66666666666666,0.5699831365935919,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:01.395086,0.000326,udp,147.32.84.134,41382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,72,178,125.0,0.288,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:02.076376,0.001286,udp,147.32.85.36,45631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:02.518738,0.000206,udp,147.32.84.134,56251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:02.519418,0.000303,udp,147.32.84.134,50743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,77,183,130.0,0.29615384615384616,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:13:03.842508,61.29855,tcp,147.32.84.165,4479.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:13:05.600408,0.309563,tcp,147.32.85.7,54784.0,->,8.12.211.126,80.0,FSPA_FSPA,0.0,0.0,18,7158,1134,6024,397.6666666666667,0.1584241408214585,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:13:05.763588,0.000244,udp,147.32.84.138,34093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:08.000092,0.000308,udp,147.32.85.36,60934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,89,164,126.5,0.35177865612648224,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:11.337557,89.403946,tcp,147.251.3.130,1713.0,?>,147.32.84.59,37268.0,FA_,0.0,,10,660,660,0,66.0,1.0,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:13:11.811780,0.000318,udp,147.32.84.59,33886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,71,159,115.0,0.30869565217391304,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:14.779323,0.000207,udp,147.32.85.25,43204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:15.185424,0.000228,udp,147.32.84.138,37434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:18.013992,0.000304,udp,147.32.85.76,54038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:19.148945,259.426147,tcp,147.32.86.172,59125.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,21,2604,1648,956,124.0,0.6328725038402457,15,1,flow=Background-google-analytics8,Background,-1 2011-08-16 15:13:19.312041,14.126943,tcp,147.32.84.59,54448.0,->,217.163.21.37,80.0,FSA_FSA,0.0,0.0,7,482,276,206,68.85714285714286,0.5726141078838174,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:13:24.814536,0.000535,udp,186.113.78.7,11835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:13:28.346076,0.000186,udp,147.32.84.138,55972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:30.229290,0.000274,udp,147.32.85.25,48908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:30.667236,0.000186,udp,147.32.84.138,49596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:31.644815,2.5e-05,udp,147.32.84.171,41467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,87,161,124.0,0.35080645161290325,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:33.122344,1847.989136,udp,124.148.187.210,45459.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,742,521,221,123.66666666666667,0.7021563342318059,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:13:34.962511,30.008833,tcp,147.32.84.59,54963.0,->,69.167.127.68,80.0,S_,0.0,,6,372,372,0,62.0,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:13:35.697391,0.618893,udp,147.32.84.165,29077.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:13:36.317309,57.730671,udp,147.32.84.165,29078.0,<->,183.60.49.126,8000.0,CON,0.0,0.0,39,15022,5044,9978,385.1794871794872,0.33577419784316337,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:13:36.655050,0.000288,udp,147.32.84.170,55978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:13:41.466549,0.004605,udp,147.32.84.189,47963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,158,79,79,79.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:41.471193,9.439118,tcp,147.32.84.189,49912.0,->,77.75.76.52,80.0,FSPA_FSPA,0.0,0.0,55,35712,2271,33441,649.3090909090909,0.06359206989247312,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:13:44.924119,33.239525,tcp,78.111.116.139,4696.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,40,24138,7784,16354,603.45,0.3224790786312039,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:13:46.657649,0.000333,udp,147.32.84.170,55137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:13:46.692418,0.000256,udp,147.32.84.138,44119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:48.756437,3492.383057,tcp,147.32.84.59,4557.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,52,30098,8977,21121,578.8076923076923,0.2982590205329258,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:13:50.612111,0.000227,udp,147.32.84.164,51545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:13:52.305276,2462.615723,udp,147.32.86.179,58675.0,<->,78.141.179.8,34013.0,CON,0.0,0.0,4,272,148,124,68.0,0.5441176470588235,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:13:53.432676,3.697986,udp,147.32.84.229,13363.0,<->,210.94.211.142,54410.0,CON,0.0,0.0,5,3024,120,2904,604.8,0.03968253968253968,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:13:53.755188,0.000616,udp,147.32.84.59,42896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,104,292,198.0,0.26262626262626265,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:54.314017,17.647511,tcp,147.32.84.59,49896.0,->,209.85.149.132,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:13:54.631779,0.105335,udp,147.32.84.59,51272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,78,124,101.0,0.38613861386138615,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:55.278788,1.535352,tcp,147.32.84.59,54749.0,->,64.34.119.12,80.0,FSPA_FSPA,0.0,0.0,40,23895,3003,20892,597.375,0.12567482736974261,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:13:55.568834,0.030113,udp,147.32.84.59,55107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,76,188,132.0,0.2878787878787879,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:55.918535,0.000313,udp,147.32.85.25,37735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:13:56.659514,0.018305,tcp,147.32.84.170,41956.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:13:57.149625,0.003409,udp,188.218.133.122,16690.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:01.435090,346.099213,udp,190.140.98.74,13955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1049,527,522,262.25,0.5023832221163013,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:03.322159,0.000511,udp,147.32.84.25,56671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:04.711258,61.297215,tcp,147.32.84.165,4480.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:14:05.203676,0.000283,udp,147.32.84.170,55292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:05.204668,240.377914,tcp,147.32.84.170,45313.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,34,7981,5312,2669,234.73529411764707,0.6655807542914421,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:06.272590,0.009932,udp,147.32.84.59,49548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,488,128,360,244.0,0.26229508196721313,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:08.835857,0.649699,udp,147.32.84.165,29079.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:14:09.836920,35.57732,udp,147.32.84.165,29080.0,<->,183.60.49.33,8000.0,CON,0.0,0.0,25,9666,3708,5958,386.64,0.38361266294227186,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:14:13.376465,0.000337,udp,147.32.84.138,41152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:14.868373,0.122061,tcp,147.32.84.59,3578.0,->,83.240.1.136,80.0,FSPA_FSPA,0.0,0.0,10,1830,1055,775,183.0,0.5765027322404371,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:14:16.656994,0.000372,udp,147.32.84.170,60221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:21.879359,0.000185,udp,147.32.84.138,39829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:23.392152,18.549488,tcp,147.32.84.59,52763.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:14:23.399236,18.54455,tcp,147.32.84.59,39595.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:14:23.522214,0.036106,tcp,147.32.84.59,3608.0,->,77.93.211.209,80.0,FSPA_FSPA,0.0,0.0,10,1546,806,740,154.6,0.5213454075032341,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:14:27.086917,2585.862549,udp,147.32.84.59,52996.0,<->,72.241.183.15,43388.0,CON,0.0,0.0,8,2256,2016,240,282.0,0.8936170212765957,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:14:27.594512,0.000412,udp,147.32.84.59,54792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:27.756807,0.0,udp,147.32.84.24,137.0,->,192.168.88.70,61242.0,INT,0.0,,1,104,104,0,104.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:14:28.202367,0.00363,udp,80.109.31.104,62696.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3019,60,2959,754.75,0.01987413050679033,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:29.178590,0.000244,udp,147.32.84.138,53646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:29.358445,0.000329,udp,147.32.84.59,38175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:31.326354,0.348658,udp,87.58.16.209,9249.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,887,738,149,221.75,0.8320180383314544,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:34.491193,0.000252,udp,147.32.84.59,37541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:35.303857,0.648967,udp,147.32.84.165,29081.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:14:36.305216,195.540176,udp,147.32.84.165,29082.0,<->,183.60.16.17,8000.0,CON,0.0,0.0,127,49854,15744,34110,392.5511811023622,0.3158021422553857,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:14:36.657505,0.000363,udp,147.32.84.170,32881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:37.793555,15.29732,icmp,81.62.130.184,771.0,->,147.32.84.94,45252.0,URP,0.0,,4,280,280,0,70.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:14:38.240220,3484.587402,tcp,192.166.145.17,1030.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,551,53229,26025,27204,96.6043557168784,0.48892520994194894,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:14:41.316177,0.000306,udp,147.32.84.138,44838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:42.311506,3537.799072,tcp,147.32.85.123,39474.0,->,74.125.43.108,993.0,SPA_SPA,0.0,0.0,252,29506,11984,17522,117.08730158730158,0.4061546804039856,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:14:45.297958,0.510131,udp,147.32.84.165,29083.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:14:45.809018,34.78553,udp,147.32.84.165,29084.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,33,12610,4148,8462,382.1212121212121,0.3289452815226011,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:14:45.899757,0.000831,udp,119.93.21.121,13878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,942,75,867,471.0,0.07961783439490445,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:46.460003,0.629467,udp,147.32.84.165,29085.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:14:46.586560,0.000256,udp,147.32.84.59,33936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:46.655184,0.000273,udp,147.32.84.170,42783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:46.655882,0.000328,udp,147.32.84.170,44876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:47.461504,8.33275,udp,147.32.84.165,29086.0,<->,119.147.45.252,8000.0,CON,0.0,0.0,22,8456,2690,5766,384.3636363636364,0.31811731315042574,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:14:48.457461,8.997882,tcp,147.32.84.179,50750.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:14:52.147826,0.230026,udp,147.32.84.59,60581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,82,199,140.5,0.2918149466192171,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:52.275636,1234.28186,udp,24.165.157.21,43297.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1098,154,944,274.5,0.14025500910746813,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:14:54.654178,0.000292,udp,147.32.84.134,35838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:14:55.838186,0.000319,udp,147.32.84.138,38287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:14:56.667613,0.000494,udp,147.32.84.170,36212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:14:57.014553,0.625927,udp,147.32.84.165,29087.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:14:57.641450,40.527935,udp,147.32.84.165,29088.0,<->,183.60.49.123,8000.0,CON,0.0,0.0,37,14546,4616,9930,393.13513513513516,0.3173380998212567,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:15:00.268669,0.000389,icmp,147.32.87.249,,<-,147.32.87.49,2.0,RED,,0.0,2,148,0,148,74.0,0.0,15,1,flow=Background,Background,-1 2011-08-16 15:15:01.233182,0.00213,udp,147.32.84.134,59827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,70,177,123.5,0.2834008097165992,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.234078,10.005256,tcp,147.32.84.134,59978.0,->,194.79.52.194,80.0,FSA_SRA,0.0,0.0,6,376,194,182,62.666666666666664,0.5159574468085106,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.235979,0.010757,tcp,147.32.84.134,40741.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1901,1136,765,211.22222222222223,0.5975802209363493,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.244619,0.000212,udp,147.32.85.89,36401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:01.289157,0.000272,udp,147.32.84.134,34151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.294525,97.15815,tcp,147.32.84.134,50822.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,89,63628,17575,46053,714.9213483146067,0.27621487395486266,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.347254,0.000279,udp,147.32.84.134,54915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.374768,0.02137,tcp,147.32.84.134,40476.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2285,1293,992,253.88888888888889,0.5658643326039388,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.379687,0.000316,udp,147.32.84.134,45695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,72,179,125.5,0.2868525896414343,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.380485,0.005677,tcp,147.32.84.134,40750.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1677,1090,587,186.33333333333334,0.6499701848539058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.382848,0.069013,tcp,147.32.84.134,49909.0,->,195.168.10.171,80.0,FSPA_FSPA,0.0,0.0,14,7288,1323,5965,520.5714285714286,0.18153128430296378,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.407221,0.000347,udp,147.32.84.134,35010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.408065,96.88604,tcp,147.32.84.134,50829.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,81,63860,7093,56767,788.395061728395,0.11107109301597244,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.414037,58.658504,tcp,147.32.84.134,40042.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,28,13763,2607,11156,491.5357142857143,0.1894209111385599,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.415391,97.196785,tcp,147.32.84.134,50835.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,54,40278,5082,35196,745.8888888888889,0.1261730969760167,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.417525,0.000334,udp,147.32.84.134,45448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.419930,0.000408,udp,147.32.84.134,60672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,73,178,125.5,0.2908366533864542,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.420634,0.000169,udp,147.32.84.134,45458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.428982,0.000304,udp,147.32.84.134,39996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.429159,0.000332,udp,147.32.84.134,57641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.430180,0.000269,udp,147.32.84.134,37288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,87,157,122.0,0.35655737704918034,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.430675,0.000297,udp,147.32.84.134,51676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,83,202,142.5,0.2912280701754386,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.433804,0.000243,udp,147.32.84.134,38892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.435202,0.000461,udp,147.32.84.134,55705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,81,200,140.5,0.28825622775800713,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.435474,0.000379,udp,147.32.84.134,57655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.436939,0.0004,udp,147.32.84.134,59203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,72,178,125.0,0.288,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.441176,0.000395,udp,147.32.84.134,37031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.445745,0.000372,udp,147.32.84.134,55087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.463290,0.005552,tcp,147.32.84.134,40489.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1950,1094,856,216.66666666666666,0.561025641025641,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.464974,0.002049,udp,147.32.84.134,43554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.466456,0.005899,tcp,147.32.84.134,44752.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,12,3815,961,2854,317.9166666666667,0.25190039318479684,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.467065,0.000305,udp,147.32.84.134,44732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,81,157,119.0,0.3403361344537815,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.467961,0.000293,udp,147.32.84.134,49391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.468178,0.000215,udp,147.32.84.134,37583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.468718,0.0022,udp,147.32.84.134,56783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,75,180,127.5,0.29411764705882354,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.508501,0.03666,udp,147.32.84.134,60117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,75,169,122.0,0.3073770491803279,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.589749,248.500473,tcp,147.32.84.134,56390.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,43,15672,11506,4166,364.4651162790698,0.7341755997958141,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.667460,0.011701,tcp,147.32.84.134,44759.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,40,27498,1873,25625,687.45,0.06811404465779329,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.669096,0.000173,udp,147.32.84.134,37862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.670501,0.000316,udp,147.32.84.134,42575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,76,174,125.0,0.304,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:01.671911,6.7688,tcp,147.32.84.134,37364.0,->,82.208.47.218,80.0,FSPA_FSPA,0.0,0.0,24,12364,2001,10363,515.1666666666666,0.16184082821093498,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:03.325587,0.000251,udp,147.32.84.138,46550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:04.252183,0.000414,udp,147.32.84.138,44758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:04.467221,295.62561,tcp,147.32.84.134,56396.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,48,17205,12649,4556,358.4375,0.735193257773903,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:04.468197,245.622025,tcp,147.32.84.134,56397.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,27,6048,4258,1790,224.0,0.7040343915343915,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:05.578503,61.282116,tcp,147.32.84.165,4481.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:15:06.657885,0.019317,tcp,147.32.84.170,56011.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:15:07.839839,0.316166,tcp,147.32.86.223,9547.0,->,147.228.47.183,8009.0,SRPA_FSPA,0.0,0.0,12,2905,998,1907,242.08333333333334,0.3435456110154905,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:15:08.146962,0.086838,tcp,147.32.84.134,49939.0,->,195.168.10.171,80.0,FSPA_FSPA,0.0,0.0,14,7227,1323,5904,516.2142857142857,0.18306351183063513,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:08.241825,0.002376,udp,147.32.84.134,39313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,77,156,116.5,0.33047210300429186,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:08.242021,0.002548,udp,147.32.84.134,48467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:08.246300,0.004718,udp,147.32.84.134,48419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,77,166,121.5,0.3168724279835391,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:08.439916,11.628781,tcp,147.32.84.134,37381.0,->,82.208.47.218,80.0,FSPA_FSPA,0.0,0.0,13,3391,1107,2284,260.84615384615387,0.3264523739309938,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:10.475681,0.000205,udp,147.32.84.138,45197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:11.850285,0.0002,udp,147.32.84.59,56793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:12.034855,0.000458,udp,147.32.85.6,54716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,76,170,123.0,0.3089430894308943,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:12.265499,0.000308,udp,147.32.85.6,62756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,77,212,144.5,0.2664359861591695,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:12.638581,0.000396,udp,147.32.85.6,61288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:12.893243,2559.548096,tcp,147.32.86.182,53743.0,->,74.125.43.16,993.0,FSPA_FSPA,0.0,0.0,575,313880,15630,298250,545.8782608695652,0.04979610042054288,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:15:13.761648,0.000223,udp,147.32.84.138,44612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:13.775285,0.000207,udp,147.32.84.138,32971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:14.410656,0.185594,udp,147.32.84.229,13363.0,<->,67.172.232.37,6786.0,CON,0.0,0.0,2,257,195,62,128.5,0.7587548638132295,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:15:14.851881,0.000279,udp,147.32.84.138,45196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:16.204093,0.000596,udp,147.32.86.15,51556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:16.659100,0.018087,tcp,147.32.84.170,53827.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:15:17.127088,0.000242,udp,147.32.84.59,57922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:20.591052,0.009621,udp,147.32.84.19,33601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,348,87,261,174.0,0.25,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:21.640721,0.648323,udp,147.32.84.165,29089.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:15:22.159107,0.248458,udp,147.32.85.123,58478.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:22.289942,57.618683,udp,147.32.84.165,29090.0,<->,183.60.49.30,8000.0,CON,0.0,0.0,54,21752,6542,15210,402.81481481481484,0.30075395365943364,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:15:23.258831,0.000387,udp,147.32.84.59,51121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:24.467034,873.079712,udp,147.32.84.229,13363.0,<->,24.90.125.177,55673.0,CON,0.0,0.0,8,3321,225,3096,415.125,0.06775067750677506,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:15:26.657011,0.000391,udp,147.32.84.170,36950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:15:27.092082,0.000318,udp,147.32.84.138,58264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:31.645671,0.000217,udp,147.32.85.6,55027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:31.814183,0.118903,tcp,147.32.86.20,1726.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,32,22631,853,21778,707.21875,0.037691661879722504,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:15:33.403179,0.000354,udp,147.32.84.59,57504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:34.450006,0.000358,udp,147.32.85.30,53538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:36.656771,0.000253,udp,147.32.84.170,51138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:15:37.843027,0.000614,udp,81.224.94.72,61365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:15:38.593173,8.929809,tcp,147.229.39.31,3659.0,->,147.32.86.58,48784.0,S_,0.0,,3,186,186,0,62.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:15:39.516403,0.654611,udp,147.32.84.165,29091.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:15:40.517965,86.342751,udp,147.32.84.165,29092.0,<->,183.60.49.33,8000.0,CON,0.0,0.0,69,27474,8468,19006,398.17391304347825,0.30821867947877996,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:15:41.734068,0.000196,udp,147.32.84.138,56535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:43.643521,2730.573975,udp,147.32.84.229,13363.0,<->,85.226.157.94,38306.0,CON,0.0,0.0,6,3589,3052,537,598.1666666666666,0.8503761493452215,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:15:44.862759,0.022546,tcp,147.32.84.134,40794.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2103,1338,765,233.66666666666666,0.6362339514978602,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:15:45.016044,0.000419,udp,147.32.84.138,42199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:46.658909,0.018196,tcp,147.32.84.170,53386.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:15:47.050097,0.000288,udp,147.32.84.138,39727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:51.773187,123.015884,tcp,147.32.84.59,4234.0,->,2.21.99.206,443.0,FSRPA_FSPA,0.0,0.0,23,9187,1577,7610,399.4347826086956,0.1716556003047785,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:15:54.017872,0.000531,udp,119.152.38.67,11450.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:15:54.620999,0.000476,udp,147.32.84.59,41666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:54.664292,0.00041,udp,147.32.84.59,41371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:15:55.434529,120.449936,tcp,147.32.84.59,55072.0,->,128.84.154.137,80.0,SPA_SRPA,0.0,0.0,11,1503,755,748,136.63636363636363,0.5023286759813705,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:15:59.461939,0.000295,udp,147.32.85.34,61758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:01.288533,0.000303,udp,147.32.84.138,52258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:02.107138,0.000196,udp,147.32.84.138,43071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:02.895954,0.103943,udp,147.32.84.59,52180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:04.767068,0.000323,udp,147.32.84.138,50902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:06.299002,115.619423,tcp,147.32.85.26,59937.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,17,3894,2873,1021,229.05882352941177,0.7378017462763226,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:16:06.435927,61.298519,tcp,147.32.84.165,4482.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:16:06.438600,0.0,udp,147.32.85.8,57989.0,->,219.89.57.180,54575.0,INT,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:16:06.816448,3142.372314,udp,147.32.85.8,57989.0,<->,212.13.26.208,14704.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:16:06.950043,0.000229,udp,147.32.84.59,49023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:07.611834,0.000271,udp,147.32.84.138,53386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:07.727944,2706.483643,udp,147.32.85.8,57989.0,<->,89.215.111.56,34260.0,CON,0.0,0.0,4,274,152,122,68.5,0.5547445255474452,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:16:09.783229,0.000251,udp,147.32.84.134,53719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:16:09.783974,0.000295,udp,147.32.84.134,36293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,78,184,131.0,0.29770992366412213,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:16:12.548286,0.000251,udp,147.32.84.138,58766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:16.078299,0.000712,udp,212.44.128.130,61507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,256,172,84,128.0,0.671875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:16:16.659842,0.018292,tcp,147.32.84.170,53836.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:16:16.880150,0.000433,udp,147.32.84.59,56861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:20.868171,0.000288,udp,147.32.87.245,55797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,77,132,104.5,0.3684210526315789,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:21.266989,0.489442,udp,147.32.84.165,29093.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:16:21.412030,400.053345,udp,147.32.84.166,4445.0,->,147.32.255.255,4472.0,INT,0.0,,11,891,891,0,81.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:16:21.413444,400.053345,udp,147.32.84.166,4445.0,->,147.32.255.255,4640.0,INT,0.0,,11,891,891,0,81.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:16:22.268221,104.937996,udp,147.32.84.165,29094.0,<->,112.90.86.184,8000.0,CON,0.0,0.0,122,50800,14246,36554,416.39344262295083,0.2804330708661417,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:16:23.737634,0.020565,udp,147.32.84.59,53432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,75,161,118.0,0.3177966101694915,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:25.441432,0.029804,tcp,147.32.85.6,51217.0,->,188.175.0.243,80.0,FSPA_FSPA,0.0,0.0,10,2340,716,1624,234.0,0.305982905982906,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:16:29.084244,0.001173,udp,147.32.84.59,45032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:34.930405,0.000349,icmp,147.32.86.96,,<-,147.32.87.4,5933.0,RED,,0.0,2,196,0,196,98.0,0.0,15,0,flow=Background,Background,-1 2011-08-16 15:16:36.657369,0.000465,udp,147.32.84.170,45068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:16:39.407750,0.192504,udp,147.32.85.7,38574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,81,169,125.0,0.324,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:46.656727,0.000321,udp,147.32.84.170,47683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:16:50.938025,0.000181,udp,147.32.85.7,50806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:52.171897,0.000942,udp,116.118.0.187,10003.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1145,77,1068,572.5,0.06724890829694323,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:16:52.753874,0.000276,udp,147.32.85.6,57481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:52.848695,0.000332,udp,147.32.84.138,46660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:53.513831,0.062371,tcp,147.32.84.59,48970.0,->,93.185.101.233,80.0,FSPA_FSPA,0.0,0.0,34,19599,1758,17841,576.4411764705883,0.08969845400275524,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:16:53.907068,33.598824,tcp,147.32.86.183,58042.0,->,77.93.209.54,80.0,FSPA_FSPA,0.0,0.0,49,34379,12240,22139,701.6122448979592,0.3560312981762122,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:16:54.508292,148.340424,tcp,147.32.86.183,58056.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,28,11194,8320,2874,399.7857142857143,0.7432553153475076,15,1,flow=Background-google-analytics9,Background,-1 2011-08-16 15:16:54.643602,19.005148,tcp,147.32.84.59,40312.0,->,195.113.180.205,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:16:55.949595,0.000331,udp,147.32.84.170,59447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:16:56.520493,0.000782,udp,130.58.235.195,25940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,941,76,865,470.5,0.08076514346439957,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:16:56.581531,0.00026,udp,147.32.84.59,59684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,72,217,144.5,0.2491349480968858,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:56.664663,0.000197,udp,147.32.84.138,59223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:57.682342,0.000233,udp,147.32.84.59,43760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:16:59.998493,0.000295,udp,147.32.84.170,45143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:01.043630,0.000175,udp,147.32.84.138,39926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:03.492553,0.001868,udp,147.32.86.183,57443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,75,155,115.0,0.32608695652173914,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:04.398662,0.00019,udp,147.32.86.74,65010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:06.658720,0.00034,udp,147.32.84.170,51367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:06.659790,0.018174,tcp,147.32.84.170,53400.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:06.800598,0.002943,udp,147.32.84.59,51934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:07.303384,61.300423,tcp,147.32.84.165,4483.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:17:08.194780,0.632942,udp,147.32.84.165,29095.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:17:08.835592,18.202251,udp,147.32.84.165,29096.0,<->,183.60.16.10,8000.0,CON,0.0,0.0,23,8534,2904,5630,371.04347826086956,0.3402859151628779,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:17:11.110156,0.000544,udp,147.32.86.208,60131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:14.255608,0.000314,udp,147.32.85.25,56163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:18.257602,0.000484,udp,147.32.86.20,63089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:24.809448,0.000417,udp,147.32.85.36,35964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,71,141,106.0,0.33490566037735847,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:24.892174,0.000348,udp,147.32.84.138,57414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:26.657034,0.000644,udp,147.32.84.170,48246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:26.658228,0.000395,udp,147.32.84.170,47515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:26.659364,0.017931,tcp,147.32.84.170,53402.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:28.273562,0.627166,udp,147.32.84.165,29097.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:17:28.966177,10.317768,udp,147.32.84.229,13363.0,<->,78.141.181.223,34059.0,CON,0.0,0.0,4,486,360,126,121.5,0.7407407407407407,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:29.274549,29.499525,udp,147.32.84.165,29098.0,<->,183.60.48.104,8000.0,CON,0.0,0.0,13,4498,2520,1978,346.0,0.5602489995553579,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:17:29.947547,0.000313,udp,147.32.84.138,33432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:29.970996,0.001045,udp,147.32.85.36,53041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:30.005776,0.000336,udp,147.32.84.170,55987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:30.673101,63.838165,udp,138.4.138.42,22161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,721,601,120,180.25,0.8335644937586685,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:31.300380,0.000503,udp,147.32.84.59,51781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,600,100,500,300.0,0.16666666666666666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:31.614992,0.024884,udp,147.32.84.59,57731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:32.406807,0.367144,tcp,147.32.86.77,44226.0,->,174.129.30.226,80.0,FSPA_FSPA,0.0,0.0,12,2490,1685,805,207.5,0.6767068273092369,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:17:33.074808,0.000789,udp,89.134.0.236,57990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:36.449625,0.018095,udp,109.148.224.27,43549.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:36.656519,0.000531,udp,147.32.84.170,47836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:39.749017,0.004931,tcp,147.32.84.194,1501.0,->,147.32.80.13,80.0,FSPA_FSA,0.0,0.0,8,1321,1141,180,165.125,0.8637395912187736,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:17:40.360564,0.000325,udp,147.32.84.138,38961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:41.186071,0.00048,udp,147.32.84.59,64649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:41.694814,0.000366,udp,147.32.84.59,55321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,477,84,393,238.5,0.1761006289308176,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:44.142144,0.000162,udp,147.32.84.138,50186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:45.562671,0.000628,udp,64.13.161.65,55032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:46.657427,0.000508,udp,147.32.84.170,43448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:46.813665,0.000284,udp,147.32.84.171,53260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:48.384453,0.000166,udp,147.32.84.138,60385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:51.521452,0.000436,udp,147.32.85.25,33293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:53.197888,0.632669,udp,147.32.84.165,29099.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:17:54.190489,69.138214,udp,147.32.84.165,29100.0,<->,183.60.49.31,8000.0,CON,0.0,0.0,90,38352,10394,27958,426.1333333333333,0.27101585314977056,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:17:56.079134,0.134011,udp,147.32.85.22,50385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,72,134,103.0,0.34951456310679613,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:56.658836,0.018425,tcp,147.32.84.170,54722.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:17:58.694518,0.000192,udp,147.32.84.138,59024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:59.301432,2434.558594,udp,178.184.76.145,39061.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:17:59.746661,0.000351,udp,147.32.85.34,51028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:17:59.968818,0.649132,udp,147.32.84.165,29101.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:18:00.618734,54.490479,udp,147.32.84.165,29102.0,<->,119.147.45.254,8000.0,CON,0.0,0.0,46,17648,5646,12002,383.6521739130435,0.31992293744333633,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:18:00.763177,0.000723,udp,95.41.206.155,12747.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:18:01.007080,0.00025,udp,147.32.84.170,47833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:18:01.007964,0.000245,udp,147.32.84.170,43545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:18:01.184462,0.079027,tcp,147.32.84.59,46972.0,->,62.44.29.56,110.0,FSPA_FSPA,0.0,0.0,23,1690,847,843,73.47826086956522,0.5011834319526627,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:18:02.952853,0.000229,udp,147.32.84.138,59749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:04.442464,0.000665,udp,85.198.107.158,62496.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:18:05.845885,0.110968,tcp,147.32.85.7,40528.0,->,8.12.214.126,80.0,FSPA_FSPA,0.0,0.0,14,3799,1011,2788,271.35714285714283,0.26612266385891026,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:18:08.172965,61.281281,tcp,147.32.84.165,4484.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:18:08.671264,0.47935,udp,147.32.84.165,29103.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:18:09.673117,132.591354,udp,147.32.84.165,29104.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,198,84448,21906,62542,426.5050505050505,0.25940223569533916,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:18:10.835311,0.024405,udp,147.32.84.59,57814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,84,271,177.5,0.23661971830985915,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:14.049601,250.03511,tcp,147.32.84.170,43219.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:18:15.684213,0.000363,udp,147.32.84.59,60649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:16.112448,0.000334,udp,147.32.84.138,39756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:18.274690,0.000412,udp,147.32.84.59,35061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:20.019109,756.39917,tcp,66.249.72.50,46262.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,54,27664,3532,24132,512.2962962962963,0.12767495662232503,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:18:21.593854,0.000353,udp,147.32.84.138,41909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:22.890138,0.004323,udp,111.253.6.5,50308.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3018,60,2958,754.5,0.019880715705765408,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:18:24.039065,0.00077,udp,83.255.52.241,41621.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:18:26.420714,0.215426,tcp,147.32.84.59,52945.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1569,695,874,196.125,0.4429572976418101,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:18:33.480045,0.000358,udp,147.32.84.59,38262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:33.927138,0.000677,udp,147.32.84.138,48333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:39.963001,0.000631,udp,147.32.85.34,65441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,345,69,276,172.5,0.2,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:44.006159,0.000215,udp,147.32.84.138,41937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:45.254986,0.247612,udp,147.32.84.59,46113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:46.516473,0.017661,udp,147.32.85.87,34276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,75,230,152.5,0.2459016393442623,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:46.656346,0.00031,udp,147.32.84.170,60575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:18:47.035917,0.000359,udp,147.32.84.138,51691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:48.410357,0.000332,udp,147.32.85.7,48557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,77,305,191.0,0.20157068062827224,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:49.269974,0.000403,udp,147.32.84.59,58618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,399,81,318,199.5,0.20300751879699247,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:49.967964,0.000773,udp,91.211.57.126,52790.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,74,483,278.5,0.13285457809694792,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:18:50.893841,0.001052,udp,147.32.85.87,35140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,75,181,128.0,0.29296875,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:18:52.103374,0.396087,tcp,147.32.84.59,59514.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1541,699,842,171.22222222222223,0.4536015574302401,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:18:56.340020,0.63861,udp,147.32.84.165,29105.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:18:56.979647,2.929058,udp,147.32.84.165,29106.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,10,3336,1406,1930,333.6,0.421462829736211,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:18:57.207927,1435.776733,udp,147.32.87.220,64719.0,<->,111.248.106.136,30772.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:00.977311,0.627333,udp,147.32.84.165,29107.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:19:01.986843,0.003653,udp,147.32.86.169,29547.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,309,76,233,154.5,0.2459546925566343,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:02.035639,3.580399,udp,147.32.84.165,29108.0,<->,112.95.240.126,8000.0,CON,0.0,0.0,14,4832,1834,2998,345.14285714285717,0.3795529801324503,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:19:03.006865,0.000445,udp,147.32.84.170,37932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:03.007837,0.000316,udp,147.32.84.170,37217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:04.532231,0.636732,udp,147.32.84.165,29109.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:19:05.533590,91.363182,udp,147.32.84.165,29110.0,<->,183.60.49.124,8000.0,CON,0.0,0.0,100,40596,11678,28918,405.96,0.2876638092422899,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:19:06.325200,0.208963,tcp,147.32.86.20,1877.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,32034,1089,30945,781.3170731707318,0.033995130174189925,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:19:06.656171,0.000423,udp,147.32.84.170,59863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:06.755218,0.63469,udp,147.32.84.165,29111.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:19:07.390814,47.518562,udp,147.32.84.165,29112.0,<->,183.60.48.101,8000.0,CON,0.0,0.0,34,12904,4362,8542,379.52941176470586,0.33803471791692496,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:19:07.658997,10.021358,tcp,147.32.84.59,49486.0,->,74.125.232.224,443.0,FSRPA_SPA,0.0,0.0,14,3611,889,2722,257.92857142857144,0.24619219052893934,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:09.029130,61.28326,tcp,147.32.84.165,4485.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:19:10.636242,2485.647461,udp,147.32.84.59,7525.0,<->,176.9.23.170,52012.0,CON,0.0,0.0,901,735898,432052,303846,816.7569367369589,0.5871085394986805,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:11.482526,0.000573,udp,41.133.184.214,37363.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:12.881797,0.342024,udp,147.32.86.134,64125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,76,122,99.0,0.3838383838383838,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:15.619925,0.038594,tcp,147.32.85.88,52369.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,22,11981,1451,10530,544.5909090909091,0.12110842166764044,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:19:15.731557,0.000202,udp,147.32.84.138,44431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:16.657805,0.000374,udp,147.32.84.170,38161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:16.658865,0.018454,tcp,147.32.84.170,52508.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:18.728269,77.404846,tcp,147.32.84.59,50026.0,->,82.199.250.36,443.0,SRPA_SPA,0.0,0.0,222,236751,17943,218808,1066.445945945946,0.07578848663786003,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:19.028450,0.000259,udp,147.32.84.59,60553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:19.227905,3569.354736,udp,147.32.86.96,50526.0,<->,82.208.56.89,123.0,CON,0.0,0.0,224,20160,10080,10080,90.0,0.5,15,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 15:19:20.354897,0.003814,udp,147.32.84.59,61821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:20.659997,0.000548,udp,222.92.42.101,29290.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:20.933379,0.000267,udp,147.32.84.138,36106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:21.039235,3524.763184,udp,147.32.84.94,7103.0,<->,46.4.112.11,51012.0,CON,0.0,0.0,906,770808,15774,755034,850.7814569536424,0.02046424012205374,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:22.921813,2959.712402,udp,147.32.84.59,7525.0,<->,46.4.123.118,53012.0,CON,0.0,0.0,2011,1640526,967170,673356,815.7762307309796,0.5895487179112066,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:23.691567,0.000383,udp,147.32.84.59,61329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,79,265,172.0,0.22965116279069767,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:25.012680,0.310329,tcp,147.32.86.20,1891.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,35,28161,918,27243,804.6,0.032598274209012464,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:19:25.649514,1321.007202,udp,89.215.187.89,18861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,318,198,120,79.5,0.6226415094339622,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:26.342202,0.036171,udp,93.220.31.240,32832.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,261,141,120,65.25,0.5402298850574713,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:26.568376,0.148096,udp,147.32.84.59,63205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,492,81,411,246.0,0.16463414634146342,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:26.656887,0.000485,udp,147.32.84.170,54024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:26.658008,0.000337,udp,147.32.84.170,41271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:27.253049,2949.379395,udp,147.32.84.59,7525.0,<->,213.239.217.99,50012.0,CON,0.0,0.0,2897,2452315,1453488,998827,846.5015533310321,0.5927003667962721,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:27.390108,3540.036865,tcp,147.32.84.164,59646.0,,74.125.39.125,5222.0,PA_PA,0.0,0.0,348,92909,19329,73580,266.9798850574713,0.2080422779278649,15,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:19:27.803061,0.00221,udp,147.32.85.6,64774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:28.492478,274.97876,tcp,147.32.86.223,9609.0,->,209.85.148.99,443.0,SPA_FSPA,0.0,0.0,25,4328,1812,2516,173.12,0.41866913123844735,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:19:30.989497,2954.671875,udp,147.32.84.59,7525.0,<->,188.40.116.165,50012.0,CON,0.0,0.0,5117,4325971,2594791,1731180,845.4115692788744,0.5998170121806179,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:33.879998,2122.695312,udp,178.122.83.137,23010.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,920,226,694,153.33333333333334,0.24565217391304348,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:35.573698,0.001739,udp,98.231.106.39,19204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:36.657526,0.000202,udp,147.32.84.170,38889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:40.561371,2980.777832,udp,195.78.24.62,27628.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1446,1074,372,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:43.953700,0.000214,udp,147.32.84.138,33292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:44.372405,60.291084,tcp,147.32.84.59,53941.0,->,95.168.192.14,80.0,FSPA_FSPA,0.0,0.0,15,6497,902,5595,433.1333333333333,0.13883330768046792,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:45.647116,0.000219,udp,147.32.84.138,55663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:19:48.543502,3567.170898,tcp,147.32.84.170,48161.0,->,74.125.232.194,80.0,PA_PA,0.0,0.0,630,337385,280811,56574,535.531746031746,0.8323161966299628,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:49.969692,2478.310303,udp,147.32.85.26,60764.0,<->,212.75.23.100,64479.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:19:53.674458,62.68129,tcp,147.32.84.132,57318.0,->,217.198.118.96,80.0,SRPA_FSPA,0.0,0.0,107,124218,3514,120704,1160.9158878504672,0.02828897583281006,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:19:54.235207,3540.199951,tcp,147.32.84.229,13363.0,,62.245.116.88,1035.0,PA_PA,0.0,0.0,356,37502,12958,24544,105.34269662921348,0.345528238493947,15,0,flow=Background,Background,-1 2011-08-16 15:19:56.186198,0.49292,udp,147.32.84.165,29113.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:19:56.656645,0.000328,udp,147.32.84.170,44935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:56.657543,0.000375,udp,147.32.84.170,44032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:56.658689,0.017933,tcp,147.32.84.170,53879.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:19:56.679885,14.938416,udp,147.32.84.165,29114.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,19,6830,2476,4354,359.4736842105263,0.3625183016105417,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:19:57.623911,434.801544,tcp,147.32.84.59,38413.0,->,74.125.232.203,80.0,FSPA_FSRPA,0.0,0.0,457,369526,31974,337552,808.5908096280087,0.08652706440142237,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:19:58.764463,0.00023,udp,147.32.84.138,41617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:00.026835,0.000346,udp,147.32.85.34,57834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:00.132966,0.001858,udp,94.123.243.103,17581.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,504,60,282.0,0.8936170212765957,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:00.629018,0.000305,udp,147.32.84.138,57714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:00.760725,0.00065,udp,212.95.7.240,21296.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:01.027273,261.373932,tcp,147.32.84.59,41404.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,453,384115,29157,354958,847.9359823399559,0.07590695494838785,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:01.343674,2883.169678,udp,147.32.84.59,7525.0,<->,46.4.67.5,56012.0,CON,0.0,0.0,3999,3373478,2397241,976237,843.5803950987747,0.7106140902652989,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:03.415914,3056.446777,tcp,199.47.216.144,80.0,,147.32.84.59,59110.0,FPA_PA,0.0,0.0,139,28299,17340,10959,203.58992805755395,0.612742499734973,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:04.286431,0.000749,udp,184.237.67.103,47536.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:05.644214,11.72105,tcp,147.32.85.88,52791.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,2345,1440,905,234.5,0.6140724946695096,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:20:06.657771,0.018101,tcp,147.32.84.170,50071.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:20:08.781595,0.000507,udp,147.32.85.87,59451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,393,74,319,196.5,0.18829516539440203,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:09.155252,0.00014,udp,147.32.84.138,46846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:09.886788,61.298515,tcp,147.32.84.165,4486.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:20:10.585763,2870.218018,udp,147.32.84.59,7525.0,<->,46.4.84.173,54012.0,CON,0.0,0.0,3945,3392429,2377057,1015372,859.9313054499366,0.7006946939788571,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:12.701180,0.000262,udp,147.32.84.138,52415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:13.120621,0.636754,udp,147.32.84.165,29115.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:20:14.122097,13.121118,udp,147.32.84.165,29116.0,<->,183.60.49.31,8000.0,CON,0.0,0.0,11,3422,1620,1802,311.09090909090907,0.4734073641145529,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:20:15.204991,2913.821045,udp,147.32.84.59,7525.0,<->,46.4.116.181,53012.0,CON,0.0,0.0,3572,3103269,1682497,1420772,868.7763157894736,0.5421692415320747,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:17.014227,0.232826,tcp,147.32.86.20,1924.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,32344,1029,31315,808.6,0.03181424684640119,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:20:17.483240,0.091396,tcp,147.32.85.88,52809.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2099,1170,929,233.22222222222223,0.5574082896617437,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:20:23.602271,0.247597,udp,147.32.85.20,3079.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:23.777955,2895.031494,udp,147.32.84.59,7525.0,<->,46.4.101.72,50012.0,CON,0.0,0.0,3880,3382646,1826856,1555790,871.8159793814433,0.5400671545293241,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:23.986989,0.629722,udp,147.32.84.165,29117.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:20:24.988427,58.559261,udp,147.32.84.165,29118.0,<->,183.60.49.31,8000.0,CON,0.0,0.0,58,23856,7306,16550,411.3103448275862,0.3062541918175721,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:20:26.656082,0.000397,udp,147.32.84.170,43199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:20:28.237641,1679.984619,tcp,217.11.249.140,143.0,,147.32.84.168,56768.0,PA_FRPA,0.0,0.0,34,2854,1712,1142,83.94117647058823,0.5998598458304134,15,0,flow=Background,Background,-1 2011-08-16 15:20:28.282765,0.625049,udp,147.32.84.165,29119.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:20:29.283981,33.401073,udp,147.32.84.165,29120.0,<->,183.60.49.126,8000.0,CON,0.0,0.0,25,9322,3292,6030,372.88,0.35314310233855395,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:20:30.647204,0.057502,udp,147.32.87.220,1068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:33.274953,0.000353,udp,147.32.84.94,57863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:36.285083,0.000804,udp,69.57.231.170,61336.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:36.656102,0.000475,udp,147.32.84.170,46910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:20:36.657198,0.000346,udp,147.32.84.170,55878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:20:36.658283,0.018223,tcp,147.32.84.170,49480.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:20:37.189371,0.112896,tcp,147.32.85.88,52898.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,14,4828,1071,3757,344.85714285714283,0.22183098591549297,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:20:38.137340,0.639523,udp,147.32.84.165,29121.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:20:38.216932,0.000187,udp,147.32.84.138,35606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:39.138402,70.065582,udp,147.32.84.165,29122.0,<->,183.60.16.12,8000.0,CON,0.0,0.0,86,35448,9966,25482,412.1860465116279,0.28114421123899797,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:20:39.924891,0.017743,udp,147.32.85.87,50656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,536,80,456,268.0,0.14925373134328357,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:44.142428,0.000417,udp,147.32.84.138,35664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:46.223425,3260.478027,udp,147.32.84.94,7103.0,<->,188.40.14.59,50012.0,CON,0.0,0.0,983,823922,17688,806234,838.1709053916582,0.021468051587407545,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:50.689597,0.000277,udp,147.32.84.138,41251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:20:53.228150,0.000304,udp,213.140.59.46,8683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:53.265743,2860.814697,udp,147.32.84.59,7525.0,<->,176.9.11.5,53012.0,CON,0.0,0.0,3231,2680150,1594360,1085790,829.5109873104302,0.5948771523981866,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:20:53.783450,1893.220215,udp,124.177.163.50,10628.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1068,588,480,66.75,0.550561797752809,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:20:58.308480,0.176528,tcp,147.32.84.59,1330.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1985,1508,477,220.55555555555554,0.7596977329974811,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:21:00.313601,0.003517,udp,147.32.84.59,59431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,74,181,127.5,0.2901960784313726,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:03.903986,0.488493,udp,147.32.84.165,29123.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:21:04.081369,2.765954,tcp,66.249.66.175,60704.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,26,11329,1509,9820,435.7307692307692,0.13319798746579575,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:21:04.905270,7.196355,udp,147.32.84.165,29124.0,<->,112.90.86.183,8000.0,CON,0.0,0.0,26,10424,3118,7306,400.9230769230769,0.2991174213353799,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:21:06.658157,0.018722,tcp,147.32.84.170,49483.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:08.697433,0.000252,udp,147.32.84.138,35758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:09.178258,0.000209,udp,147.32.84.138,59392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:09.606066,0.000368,udp,147.32.86.51,46324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:10.754351,61.300037,tcp,147.32.84.165,4487.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:21:11.439195,0.000828,udp,151.27.227.4,5896.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:11.970395,1.886357,tcp,147.32.84.59,62656.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,66,51600,3330,48270,781.8181818181819,0.06453488372093023,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:21:11.970642,1.115131,tcp,147.32.84.59,62657.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,33,13093,2720,10373,396.75757575757575,0.20774459634919423,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:21:13.107541,0.63894,udp,147.32.84.165,29125.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:21:14.109043,54.807697,udp,147.32.84.165,29126.0,<->,112.95.240.73,8000.0,CON,0.0,0.0,62,25120,7398,17722,405.16129032258067,0.29450636942675157,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:21:14.186769,0.045479,tcp,147.32.87.220,1184.0,->,80.67.28.202,80.0,FSPA_FSPA,0.0,0.0,10,1573,768,805,157.3,0.4882390336935791,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:21:14.426600,0.000209,udp,147.32.84.138,41397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:14.705963,0.207789,tcp,147.32.86.20,1966.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,33069,1089,31980,806.560975609756,0.032931143971695546,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:21:15.610672,0.000251,udp,147.32.84.138,50686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:16.656824,0.00047,udp,147.32.84.170,40062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:16.658057,0.017839,tcp,147.32.84.170,59787.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:24.714079,0.621976,udp,147.32.84.165,29127.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:21:25.715957,15.339284,udp,147.32.84.165,29128.0,<->,112.95.240.126,8000.0,CON,0.0,0.0,23,8390,2864,5526,364.7826086956522,0.34135876042908225,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:21:26.656024,0.000465,udp,147.32.84.170,36572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:28.159588,40.478523,tcp,147.32.85.88,52960.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1608,903,705,160.8,0.5615671641791045,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:21:29.342578,0.00031,udp,147.32.84.3,34672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:31.366192,3117.665771,udp,94.254.35.244,17943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1235,870,365,123.5,0.7044534412955465,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:34.863298,0.00025,udp,147.32.84.138,42729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:36.016314,0.000284,udp,147.32.84.59,48587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:36.656558,0.000425,udp,147.32.84.170,57636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:37.726570,0.000648,udp,65.79.202.62,3639.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:38.006961,0.000352,udp,147.32.84.170,57458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:39.307038,0.000819,udp,84.138.52.137,4518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:39.865107,0.0007,udp,194.82.50.2,3649.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,169,73,121.0,0.6983471074380165,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:40.722686,0.000543,udp,147.32.85.36,43165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,84,166,125.0,0.336,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:42.259367,0.6422,udp,147.32.84.165,29129.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:21:43.260821,84.051216,udp,147.32.84.165,29130.0,<->,183.60.49.123,8000.0,CON,0.0,0.0,64,25656,7472,18184,400.875,0.29123791705643903,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:21:46.223579,0.000252,udp,147.32.85.25,48662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:46.655707,0.00035,udp,147.32.84.170,50661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:21:49.200646,0.000183,udp,147.32.84.59,43476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:50.411053,0.63605,udp,147.32.84.165,29131.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:21:51.048122,118.83168,udp,147.32.84.165,29132.0,<->,183.60.16.16,8000.0,CON,0.0,0.0,168,70556,18482,52074,419.9761904761905,0.26194795623334655,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:21:53.513076,0.000182,udp,147.32.84.138,49483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:59.048968,0.000224,udp,147.32.84.138,60205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:21:59.711537,513.412415,udp,147.32.84.229,13363.0,<->,98.211.123.171,49726.0,CON,0.0,0.0,6,1377,1010,367,229.5,0.7334785766158315,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:21:59.725743,0.000334,udp,147.32.85.34,52036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:22:00.027592,0.000309,udp,147.32.86.77,47700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,70,200,135.0,0.25925925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:22:02.328220,3.521408,tcp,147.32.85.26,60112.0,->,216.52.242.80,80.0,FSRPA_SPA,0.0,0.0,57,34890,7876,27014,612.1052631578947,0.22573803382057897,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:22:06.659286,0.018214,tcp,147.32.84.170,41520.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:09.009371,0.000319,udp,147.32.84.170,43260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:09.999531,0.494948,udp,147.32.84.165,29133.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:22:11.000941,25.858385,udp,147.32.84.165,29134.0,<->,112.90.86.182,8000.0,CON,0.0,0.0,28,10724,3546,7178,383.0,0.33066020141738156,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:22:11.623839,61.281513,tcp,147.32.84.165,4488.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:22:11.747278,0.000273,udp,76.114.160.109,28842.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:12.581902,0.009435,udp,147.32.84.132,61711.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,293,80,213,146.5,0.27303754266211605,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:14.249073,0.100715,tcp,147.32.85.88,53056.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,3087,1025,2062,280.6363636363636,0.3320375769355361,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:22:16.658592,0.000296,udp,147.32.84.170,45527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:16.659658,0.018779,tcp,147.32.84.170,37491.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:19.393896,0.160857,tcp,147.32.85.88,53087.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,34,24108,1671,22437,709.0588235294117,0.06931309109009458,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:22:19.717382,0.008949,tcp,147.32.85.88,53105.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1606,871,735,178.44444444444446,0.5423412204234122,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:22:21.442837,0.0,icmp,147.32.87.53,11.0,->,67.210.234.162,,TXD,0.0,,1,70,70,0,70.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:22:24.300275,9.44874,tcp,147.32.87.220,1319.0,->,206.191.52.46,80.0,FSPA_FSPA,0.0,0.0,27,18853,1325,17528,698.2592592592592,0.07028059194823105,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:22:25.076798,0.000355,udp,147.32.87.223,65241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,103,164,133.5,0.3857677902621723,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:22:31.308681,0.00022,udp,147.32.85.89,35854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:22:32.978932,0.000286,udp,147.32.85.25,57076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:22:34.970454,2888.374268,udp,147.32.85.56,44076.0,<->,68.187.182.129,47596.0,CON,0.0,0.0,10,2795,385,2410,279.5,0.13774597495527727,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:35.009874,3390.677002,udp,93.153.126.18,7386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1625,1191,434,116.07142857142857,0.7329230769230769,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:35.908325,45.768421,tcp,147.32.85.30,52434.0,->,66.220.151.74,80.0,FSPA_FSRPA,0.0,0.0,12,3263,2549,714,271.9166666666667,0.781182960465829,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:22:35.914610,0.039583,udp,147.32.84.170,37388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:36.657321,0.000433,udp,147.32.84.170,53092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:36.658303,0.000378,udp,147.32.84.170,53766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:36.659396,0.018093,tcp,147.32.84.170,41235.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:38.240468,0.650586,udp,147.32.84.165,29135.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:22:38.891798,78.642715,udp,147.32.84.165,29136.0,<->,183.60.48.105,8000.0,CON,0.0,0.0,133,57066,14416,42650,429.0676691729323,0.25261977359548593,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:22:39.918841,3303.035889,icmp,147.32.87.1,261.0,->,147.32.87.2,37664.0,RED,0.0,,20,1400,1400,0,70.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:22:44.593685,0.000821,udp,70.246.178.102,62733.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,76,486,281.0,0.13523131672597866,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:48.015386,115.049805,tcp,147.32.84.59,57730.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,10,3173,1776,1397,317.3,0.5597226599432713,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:22:48.220235,0.000509,udp,195.191.104.19,59812.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:51.907760,668.721924,udp,149.5.45.252,43010.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,986,276,710,164.33333333333334,0.2799188640973631,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:56.657763,0.000524,udp,147.32.84.170,34487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:56.658804,0.000334,udp,147.32.84.170,54915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:22:58.349369,0.000807,udp,159.148.74.101,63739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:22:59.808644,0.000262,udp,147.32.84.138,38782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:01.963171,9.3e-05,tcp,66.249.68.138,62852.0,->,147.32.85.115,80.0,S_,0.0,,1,74,74,0,74.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:23:02.050309,0.000172,udp,147.32.84.138,41218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:03.126985,0.000312,udp,147.32.84.138,48304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:04.136463,0.0,udp,77.81.11.85,29865.0,->,147.32.87.121,21168.0,INT,0.0,,1,109,109,0,109.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:23:04.980765,0.000641,udp,213.226.237.254,1418.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,153,79,116.0,0.6594827586206896,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:06.657038,0.000422,udp,147.32.84.170,54780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:10.688039,0.00028,udp,147.32.84.138,54083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:11.013237,0.000255,udp,147.32.84.170,47053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:11.210031,0.023317,tcp,147.32.84.59,36587.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,35,23586,2039,21547,673.8857142857142,0.08644958873908251,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:23:11.423843,0.000367,udp,147.32.84.138,33741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:11.581336,0.0005,udp,147.32.84.59,45409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,87,157,122.0,0.35655737704918034,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:11.874091,0.000625,udp,134.76.171.48,49684.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:12.480505,64.357124,tcp,147.32.84.165,4489.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:23:13.521241,3042.218994,udp,147.32.84.229,13363.0,<->,147.32.229.43,7921.0,CON,0.0,0.0,26,3758,2246,1512,144.53846153846155,0.5976583288983501,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:13.588435,0.360948,tcp,147.32.84.170,60105.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:13.941710,0.242342,tcp,147.32.84.170,60107.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:16.657165,0.000454,udp,147.32.84.170,50573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:17.615900,18.443521,udp,147.32.84.165,29137.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,4,508,354,154,127.0,0.6968503937007874,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:23:19.666665,3012.070557,udp,147.32.84.229,13363.0,<->,208.88.186.4,34016.0,CON,0.0,0.0,22,2997,1432,1565,136.22727272727272,0.47781114447781114,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:21.909515,146.577942,tcp,147.32.84.94,36717.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,70,38859,6092,32767,555.1285714285714,0.15677191898916595,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:23:22.623487,0.000234,udp,147.32.84.138,38814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:24.116502,0.000596,udp,217.119.147.37,18540.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,231,169,62,115.5,0.7316017316017316,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:24.710310,0.000467,udp,147.32.86.20,65334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:26.659176,0.019061,tcp,147.32.84.170,37508.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:27.949816,74.475891,tcp,147.32.84.59,55714.0,->,74.125.39.116,80.0,FSPA_FSPA,0.0,0.0,12,3822,1869,1953,318.5,0.489010989010989,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:23:28.684279,0.005241,udp,173.176.185.109,3717.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3015,60,2955,753.75,0.01990049751243781,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:28.773094,0.000243,udp,147.32.86.20,50540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:29.424164,2680.418457,udp,147.32.84.229,13363.0,<->,96.35.201.164,17629.0,CON,0.0,0.0,8,3430,186,3244,428.75,0.05422740524781341,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:30.737488,3164.51709,udp,147.32.84.229,13363.0,->,174.61.85.12,52092.0,INT,0.0,,18,3204,3204,0,178.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:23:32.318841,10.797467,tcp,147.32.84.59,3971.0,->,89.185.252.39,80.0,FSPA_FSPA,0.0,0.0,16,7347,879,6468,459.1875,0.11964066966108616,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:23:35.222523,3358.38916,udp,147.32.84.229,13363.0,<->,130.88.213.39,34470.0,CON,0.0,0.0,12,1519,1070,449,126.58333333333333,0.7044107965766951,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:36.060573,80.711258,udp,147.32.84.165,29138.0,<->,183.60.49.33,8000.0,CON,0.0,0.0,92,38252,10350,27902,415.7826086956522,0.270574087629405,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:23:36.658105,0.017908,tcp,147.32.84.170,59813.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:23:40.852566,3105.581543,udp,90.179.68.178,44975.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1392,1020,372,116.0,0.7327586206896551,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:41.736597,0.000745,udp,87.18.127.185,21570.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,73,511,292.0,0.125,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:41.796759,0.000733,udp,151.75.12.53,53780.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:45.224281,7.984922,udp,147.32.87.48,2398.0,->,147.32.86.241,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:23:45.904034,0.017889,udp,147.32.84.59,51722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,87,157,122.0,0.35655737704918034,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:48.433686,0.000237,udp,147.32.84.138,37966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:48.916253,0.001023,udp,41.107.23.252,24302.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,681,78,603,340.5,0.1145374449339207,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:23:50.190378,0.000198,udp,147.32.84.138,39107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:50.871745,0.000292,udp,147.32.84.138,54048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:51.716248,0.642222,udp,147.32.84.165,29139.0,<->,219.133.60.36,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:23:52.156483,0.000374,udp,147.32.84.68,59386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:52.359378,16.899845,udp,147.32.84.165,29140.0,<->,183.60.48.106,8000.0,CON,0.0,0.0,42,16792,4830,11962,399.8095238095238,0.2876369699857075,15,0,flow=From-Botnet-V49-UDP-Established,Botnet,1 2011-08-16 15:23:52.911834,0.000604,udp,147.32.84.59,56756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:53.393180,0.000162,udp,147.32.84.138,40832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:53.503559,240.046051,tcp,147.32.84.59,50875.0,->,74.125.232.194,80.0,SPA_FSPA,0.0,0.0,12,4275,1220,3055,356.25,0.28538011695906434,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:23:54.042919,0.000283,udp,147.32.84.138,60293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:56.302625,0.383416,tcp,147.32.84.59,59819.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1541,699,842,171.22222222222223,0.4536015574302401,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:23:57.568932,0.00034,udp,147.32.84.138,53851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:23:59.307263,0.643513,udp,147.32.84.165,29141.0,<->,219.133.49.171,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:24:00.032205,0.000376,udp,147.32.85.34,61384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:00.309021,42.732029,udp,147.32.84.165,29142.0,<->,183.60.16.10,8000.0,CON,0.0,0.0,106,45520,11206,34314,429.4339622641509,0.2461775043936731,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:24:01.297023,0.000339,udp,147.32.84.138,48395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:01.345153,0.000375,udp,147.32.85.25,44060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:01.482570,0.000227,udp,147.32.85.25,41516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:01.525635,0.000194,udp,147.32.85.25,43158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:01.632204,14.491553,tcp,147.32.84.59,34094.0,->,62.168.111.108,80.0,FSA_FSA,0.0,0.0,9,556,314,242,61.77777777777778,0.564748201438849,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:01.941114,0.00022,udp,147.32.84.59,45363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:02.033769,0.022871,tcp,147.32.84.59,54297.0,->,90.183.38.22,80.0,FSPA_FSPA,0.0,0.0,11,2655,1352,1303,241.36363636363637,0.5092278719397364,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:02.086813,0.00074,udp,196.2.118.61,33583.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:02.332136,0.000275,udp,147.32.84.59,32987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,74,176,125.0,0.296,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:02.337836,0.000195,udp,147.32.84.59,47709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,74,143,108.5,0.34101382488479265,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:06.017991,2783.022461,udp,124.214.171.104,2208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:06.829427,0.541308,udp,192.168.88.138,65487.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:24:09.139337,15.256057,udp,147.32.84.94,7103.0,->,92.231.163.156,7377.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:24:09.516339,0.037858,udp,147.32.84.94,40075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,345,73,272,172.5,0.21159420289855072,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:10.473284,0.495776,udp,147.32.84.165,29143.0,<->,112.90.138.160,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:24:11.474568,3.14745,udp,147.32.84.165,29144.0,<->,112.90.86.184,8000.0,CON,0.0,0.0,10,3016,1406,1610,301.6,0.4661803713527852,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:24:12.483213,2143.409424,udp,147.32.84.94,7103.0,->,98.180.15.212,7200.0,INT,0.0,,12,1008,1008,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:24:14.029446,19.651009,tcp,147.32.84.59,44493.0,->,195.113.180.211,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:14.195414,3095.320557,udp,188.36.153.254,64055.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1482,1110,372,123.5,0.7489878542510121,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:14.387954,0.000257,udp,147.32.84.138,43814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:16.111432,0.642214,udp,147.32.84.165,29145.0,<->,58.60.15.39,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:24:16.412734,61.298004,tcp,147.32.84.165,4490.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:24:16.658602,0.000284,udp,147.32.84.170,55757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:16.659728,0.017977,tcp,147.32.84.170,41548.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:16.773312,22.485567,udp,147.32.84.165,29146.0,<->,183.60.48.105,8000.0,CON,0.0,0.0,12,3604,1738,1866,300.3333333333333,0.48224195338512765,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:24:18.665988,0.000311,udp,147.32.84.138,51468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:19.302200,0.000676,udp,81.198.208.197,57907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,267,177,90,133.5,0.6629213483146067,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:19.827983,0.000289,udp,147.32.84.138,53269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:21.396630,0.000248,udp,147.32.84.138,59240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:22.725326,0.000244,udp,147.32.85.25,50129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:26.109113,0.006444,tcp,147.32.85.6,51638.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2073,946,1127,230.33333333333334,0.45634346357935357,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:24:26.981054,0.002056,udp,147.32.85.123,52594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,85,232,158.5,0.26813880126182965,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:27.357577,1207.908813,udp,212.52.155.35,17404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,753,567,186,125.5,0.7529880478087649,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:28.012423,34.07061,tcp,147.32.84.59,40664.0,->,77.75.77.154,80.0,FSPA_FSPA,0.0,0.0,291,222972,14266,208706,766.2268041237113,0.06398112767522379,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:28.032601,0.000198,udp,147.32.84.138,57835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:29.184614,10.40104,tcp,147.32.84.184,60861.0,->,199.59.149.243,443.0,FSA_FSA,0.0,0.0,8,480,300,180,60.0,0.625,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:24:29.397395,0.000181,udp,147.32.84.138,36682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:30.321929,0.000391,udp,147.32.84.134,44493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:24:30.323089,240.551849,tcp,147.32.84.134,43090.0,->,74.125.232.202,80.0,FSPA_FSPA,0.0,0.0,23,3820,2164,1656,166.08695652173913,0.5664921465968586,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:24:30.850171,0.000324,udp,147.32.84.134,37758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:24:30.851068,250.04068,tcp,147.32.84.134,55349.0,->,209.85.149.138,80.0,FSPA_FSPA,0.0,0.0,28,8584,5064,3520,306.57142857142856,0.5899347623485555,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:24:31.283506,0.000407,udp,147.32.84.216,35382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:32.151965,0.000234,udp,147.32.86.20,65330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:32.179886,1005.170288,udp,24.146.207.195,20485.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:34.961797,0.000259,udp,147.32.86.182,53791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,74,143,108.5,0.34101382488479265,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:36.655597,0.000413,udp,147.32.84.170,39648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:36.657702,0.018792,tcp,147.32.84.170,59823.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:37.322089,0.800704,udp,49.134.178.197,63736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,966,716,250,241.5,0.7412008281573499,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:37.687799,0.000216,udp,147.32.84.138,47308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:38.264306,0.000716,udp,81.218.203.67,24240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:40.366282,0.628869,udp,147.32.84.165,29147.0,<->,58.60.14.37,8000.0,CON,0.0,0.0,2,272,118,154,136.0,0.4338235294117647,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-2,Botnet,1 2011-08-16 15:24:40.661185,3155.426514,udp,129.194.169.36,9092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1242,877,365,124.2,0.7061191626409018,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:40.714173,0.162389,udp,147.32.84.194,36146.0,<->,68.56.170.96,24222.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:41.367484,12.512354,udp,147.32.84.165,29148.0,<->,183.60.16.15,8000.0,CON,0.0,0.0,11,3870,1052,2818,351.8181818181818,0.2718346253229974,15,0,flow=From-Botnet-V49-UDP-Established-Custom-Encryption-1,Botnet,1 2011-08-16 15:24:41.379161,0.000585,udp,147.32.84.94,38034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:43.652277,0.000256,udp,147.32.84.138,57782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:44.007529,0.000282,udp,147.32.84.170,34343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:44.008463,0.000299,udp,147.32.84.170,41385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:45.186481,0.000367,udp,147.32.84.138,52886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:46.657372,0.000498,udp,147.32.84.170,60074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:24:46.778846,0.274398,tcp,147.32.86.20,2110.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,35,27965,909,27056,799.0,0.032504916860361166,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:24:47.120636,0.000293,udp,147.32.84.168,59853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,70,177,123.5,0.2834008097165992,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:24:51.336464,115.750565,tcp,147.32.84.59,49544.0,->,74.125.232.229,80.0,FSPA_FSPA,0.0,0.0,13,2804,2046,758,215.69230769230768,0.7296718972895863,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:51.383409,0.015772,tcp,147.32.86.6,50729.0,->,90.183.53.30,80.0,SRPA_FSPA,0.0,0.0,35,31439,1358,30081,898.2571428571429,0.0431947581029931,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:24:51.622232,3445.931885,udp,62.122.129.62,45119.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,28,6110,1581,4529,218.21428571428572,0.25875613747954174,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:24:53.879838,0.0,icmp,147.32.84.165,771.0,->,183.60.16.15,56433.0,URP,0.0,,1,190,190,0,190.0,1.0,15,0,flow=From-Botnet-V49-ICMP,Botnet,1 2011-08-16 15:24:54.208662,0.133732,tcp,147.32.84.59,50073.0,->,193.166.221.86,80.0,FSPA_FSPA,0.0,0.0,9,2114,714,1400,234.88888888888889,0.33774834437086093,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:24:56.470891,1.335142,tcp,147.32.84.59,1547.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1922,1254,668,192.2,0.6524453694068678,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:24:58.235756,33.34948,tcp,147.32.86.182,53841.0,->,98.139.50.166,80.0,SRPA_FSPA,0.0,0.0,10,3066,1641,1425,306.6,0.5352250489236791,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:25:01.305530,0.000392,udp,147.32.84.59,33948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,87,285,186.0,0.23387096774193547,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:01.403913,0.000417,udp,147.32.86.20,54694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:01.867587,0.000197,udp,147.32.84.138,49824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:02.137427,0.000486,udp,147.32.85.123,50144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:02.450868,0.000596,udp,147.32.85.123,34581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:02.456976,0.000331,udp,147.32.85.123,51525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:03.004193,0.002251,udp,147.32.84.59,60586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:04.196346,0.017662,udp,147.32.84.59,61485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,495,78,417,247.5,0.15757575757575756,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:04.428985,0.161356,udp,147.32.84.59,50154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,464,75,389,232.0,0.16163793103448276,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:04.691264,0.159085,udp,147.32.84.59,49915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,448,70,378,224.0,0.15625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:05.012511,0.000269,udp,147.32.85.123,39146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:05.412418,0.000453,udp,188.235.139.49,59616.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:07.868461,0.000375,udp,147.32.84.59,38106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:08.040527,0.000176,udp,147.32.84.59,46930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:09.727807,0.001972,udp,79.204.157.108,44009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,498,60,279.0,0.8924731182795699,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:14.781114,0.000488,udp,147.32.85.25,55413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:15.008339,0.000395,udp,147.32.84.170,49956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:16.658029,0.000413,udp,147.32.84.170,38433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:17.280131,61.284267,tcp,147.32.84.165,4492.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:25:21.527966,0.363731,tcp,66.249.72.107,53987.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,20,9859,981,8878,492.95,0.09950299218987727,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:25:22.473871,0.0,udp,93.42.238.56,2049.0,->,147.32.86.223,21104.0,INT,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:25:23.256147,0.000865,udp,89.29.80.194,44903.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:27.193938,0.000406,udp,147.32.84.138,50679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:29.390795,13.903371,tcp,147.32.84.59,2325.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,384,258,126,64.0,0.671875,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:25:30.935847,0.009571,tcp,147.32.86.6,50840.0,->,90.183.53.30,80.0,SRPA_FSPA,0.0,0.0,8,1954,1279,675,244.25,0.6545547594677584,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:25:31.544301,0.000321,udp,147.32.84.138,55051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:31.816657,0.017303,udp,147.32.86.6,50867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,76,158,117.0,0.3247863247863248,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:35.159889,0.000485,udp,147.32.86.179,56355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:35.236934,0.030826,tcp,147.32.84.59,52830.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2335,1335,1000,259.44444444444446,0.5717344753747323,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:25:36.374275,0.000426,udp,147.32.85.34,61884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:36.657539,0.000603,udp,147.32.84.170,34748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:36.658888,0.021313,tcp,147.32.84.170,51050.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:39.337151,0.00037,udp,147.32.84.164,43680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:25:42.098550,0.3438,udp,147.32.84.229,13363.0,<->,114.38.87.193,5040.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:44.431898,0.000339,udp,147.32.84.138,36158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:46.009296,0.231821,tcp,147.32.84.170,40066.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:46.659544,0.017664,tcp,147.32.84.170,58562.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:48.269281,0.000272,udp,147.32.84.59,60983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:49.980372,0.000425,udp,147.32.84.138,50722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:25:50.097020,0.000893,udp,115.177.216.238,50955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,587,76,511,293.5,0.12947189097103917,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:53.822250,0.657138,tcp,147.32.85.26,60196.0,->,128.131.167.54,80.0,SRPA_FSPA,0.0,0.0,29,19232,1246,17986,663.1724137931035,0.06478785357737105,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:25:56.077188,2.17398,udp,147.32.84.152,42182.0,->,83.167.228.113,123.0,INT,0.0,,1,90,90,0,90.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:25:56.648449,0.035719,udp,147.32.84.229,13363.0,<->,77.100.148.248,45939.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:25:56.657342,0.000428,udp,147.32.84.170,35114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:56.658343,0.000424,udp,147.32.84.170,34552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:25:57.857892,0.651364,tcp,147.32.84.171,41933.0,->,86.124.210.133,16973.0,FSPA_FSPA,0.0,0.0,12,1416,548,868,118.0,0.3870056497175141,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:26:00.321354,0.000239,udp,147.32.85.34,53708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:00.377286,0.000271,udp,147.32.85.34,62071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:00.548627,3528.000732,udp,147.32.84.229,13363.0,<->,78.141.181.222,80.0,CON,0.0,0.0,10,1490,768,722,149.0,0.5154362416107383,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:03.321577,0.00032,udp,147.32.84.59,43883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:03.764502,0.000306,udp,147.32.85.89,37726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:04.681141,0.000354,udp,147.32.84.138,59400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:06.048005,0.173242,tcp,147.32.84.59,1674.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1627,1150,477,180.77777777777777,0.7068223724646588,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:26:06.656982,0.000542,udp,147.32.84.170,32919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:06.659088,0.017851,tcp,147.32.84.170,53080.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:09.936600,2544.580811,udp,147.32.84.59,7525.0,<->,46.4.102.182,55012.0,CON,0.0,0.0,3921,3457887,2613059,844828,881.8890589135425,0.7556808536542692,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:26:10.704839,0.0005,udp,147.32.84.138,41096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:12.874027,3213.256592,udp,212.122.88.96,40140.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:13.070129,0.00033,udp,147.32.84.138,45925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:13.797459,15.288525,udp,147.32.84.94,7103.0,->,67.51.246.179,15724.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:26:14.252730,0.148244,udp,147.32.84.229,13363.0,<->,98.160.100.207,3094.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:15.349414,0.0,tcp,89.166.157.99,31160.0,->,147.32.87.219,3389.0,S_,0.0,,1,66,66,0,66.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:26:16.658151,0.000433,udp,147.32.84.170,36702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:16.659373,0.019703,tcp,147.32.84.170,53081.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:18.138990,61.281811,tcp,147.32.84.165,4493.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:26:26.658117,0.018825,tcp,147.32.84.170,49172.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:26.784912,68.8582,tcp,147.32.84.59,37155.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,8,544,338,206,68.0,0.6213235294117647,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:26:27.062393,1.169638,tcp,147.32.84.59,1681.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,66,56651,2824,53827,858.3484848484849,0.04984907592098992,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:26:30.660770,25.132401,tcp,147.32.84.59,39911.0,->,157.22.19.18,80.0,FSPA_FSPA,0.0,0.0,64,45402,2796,42606,709.40625,0.061583190167834014,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:26:30.965558,0.000241,udp,147.32.84.138,60480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:34.756963,0.000338,udp,147.32.85.87,51460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:35.771106,0.000327,udp,147.32.84.138,38694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:35.825414,240.090027,tcp,147.32.86.165,53175.0,->,74.125.232.211,443.0,SPA_FSPA,0.0,0.0,15,4537,907,3630,302.46666666666664,0.19991183601498788,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:26:36.207652,29.506826,udp,86.73.26.12,34750.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1593,1413,180,265.5,0.8870056497175142,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:36.656852,0.000415,udp,147.32.84.170,37498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:37.964662,0.000235,udp,147.32.84.138,40878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:26:39.112316,0.0,tcp,121.12.169.234,80.0,->,147.32.85.114,10513.0,SA_,0.0,,1,62,62,0,62.0,1.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:26:39.327716,0.000767,udp,81.227.81.101,3432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,76,484,280.0,0.1357142857142857,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:41.333733,0.000643,udp,89.169.139.64,49210.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,163,96,67,81.5,0.588957055214724,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:42.879763,0.000735,udp,212.233.170.53,80.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:44.041115,0.218324,udp,147.32.85.2,31604.0,<->,98.232.115.195,34232.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:26:48.011372,0.000258,udp,147.32.84.170,49474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:26:57.430130,18.899572,tcp,192.168.88.125,54345.0,?>,95.168.192.14,80.0,FRA_,0.0,,7,456,456,0,65.14285714285714,1.0,15,1,flow=Background,Background,-1 2011-08-16 15:27:00.945562,3597.148682,tcp,147.32.84.134,46262.0,->,74.125.232.216,443.0,PA_PA,0.0,0.0,1722,477394,307778,169616,277.2322880371661,0.644704374164736,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:27:01.148717,131.137741,tcp,82.226.100.164,57175.0,->,147.32.84.229,13363.0,SRPA_FSRPA,0.0,0.0,26,2008,989,1019,77.23076923076923,0.49252988047808766,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:27:02.571129,0.060565,udp,147.32.84.59,33391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,78,172,125.0,0.312,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:02.600215,0.000686,udp,129.97.120.156,34051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,191,62,126.5,0.7549407114624506,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:04.500907,0.000302,udp,147.32.84.59,51057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:06.657198,0.000479,udp,147.32.84.170,47469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:06.916398,0.000896,udp,95.153.175.10,15447.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,580,77,503,290.0,0.13275862068965516,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:08.971718,0.000265,udp,147.32.86.20,59046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:11.215143,0.0,tcp,147.32.84.165,4494.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.232574,0.0,tcp,147.32.84.165,4496.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.232819,0.0,tcp,147.32.84.165,4497.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.404079,0.0,tcp,147.32.84.165,4498.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.415202,0.0,tcp,147.32.84.165,4500.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.415510,0.0,tcp,147.32.84.165,4501.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:11.604651,0.0,tcp,147.32.84.165,4502.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:12.135851,0.0,tcp,147.32.84.165,4505.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:12.182521,103.010605,udp,78.121.22.23,7192.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,43,33484,822,32662,778.6976744186046,0.024549038346673036,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:12.335567,0.0,tcp,147.32.84.165,4506.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:12.535567,0.0,tcp,147.32.84.165,4504.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:12.653316,0.0003,udp,147.32.85.8,58831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:14.012924,6.3e-05,udp,147.32.86.77,55271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:16.657271,0.000324,udp,147.32.84.170,54813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:17.029721,0.004388,tcp,147.32.87.249,3739.0,->,147.32.87.48,80.0,_FSPA,,0.0,8,3576,0,3576,447.0,0.0,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:27:17.567960,0.000195,udp,147.32.84.138,57990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:20.043180,0.100452,udp,147.32.84.59,17236.0,<->,82.209.82.169,28607.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:21.767194,0.000621,udp,84.51.91.220,61561.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:24.171542,0.53696,udp,192.168.88.70,57429.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:27:24.342644,0.04794,udp,147.32.84.59,52996.0,<->,178.253.235.165,33362.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:24.344229,2465.529785,udp,147.32.84.59,52996.0,<->,95.28.65.12,41739.0,CON,0.0,0.0,26,1742,962,780,67.0,0.5522388059701493,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:24.495783,3163.480469,udp,147.32.84.59,52996.0,<->,46.137.3.179,34033.0,CON,0.0,0.0,16,1975,1471,504,123.4375,0.7448101265822785,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:25.053961,61.281921,tcp,147.32.84.165,4650.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:27:25.053968,0.0,tcp,147.32.84.165,4737.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.054011,0.0,tcp,147.32.84.165,4735.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.054069,0.0,tcp,147.32.84.165,4738.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.054146,0.0,tcp,147.32.84.165,4740.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.054153,0.0,tcp,147.32.84.165,4739.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.054196,0.0,tcp,147.32.84.165,4741.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:25.654617,0.0,tcp,147.32.84.165,4749.0,->,147.33.84.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:26.657664,0.000322,udp,147.32.84.170,33712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:32.676877,0.000177,udp,147.32.84.138,49060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:35.300557,0.000465,udp,147.32.84.138,40686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:36.227602,0.00019,udp,147.32.84.138,43254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:36.659186,0.018922,tcp,147.32.84.170,58576.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:37.070683,0.0,tcp,147.32.84.165,4975.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.070805,0.0,tcp,147.32.84.165,4978.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.070930,0.0,tcp,147.32.84.165,4977.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.071019,0.0,tcp,147.32.84.165,4979.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.071030,0.0,tcp,147.32.84.165,4981.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.071157,0.0,tcp,147.32.84.165,4980.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.071210,0.0,tcp,147.32.84.165,4983.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:37.672051,0.0,tcp,147.32.84.165,4990.0,->,147.32.79.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:38.876330,0.001855,udp,187.3.201.228,57563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:38.931471,0.000188,udp,147.32.84.138,49716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:39.809507,0.000322,udp,147.32.84.138,57422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:40.692198,0.001738,udp,109.197.69.158,56609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,475,60,267.5,0.8878504672897196,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:41.604488,0.000318,udp,147.32.85.120,39196.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,244,97,147,122.0,0.3975409836065574,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:41.954976,1.758298,tcp,147.32.84.59,62742.0,->,199.59.148.20,443.0,FSPA_FSPA,0.0,0.0,36,19824,2752,17072,550.6666666666666,0.13882163034705408,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:42.437439,0.000242,udp,147.32.84.138,37462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:45.850341,3009.354004,udp,147.32.85.56,44076.0,<->,125.226.133.160,51859.0,CON,0.0,0.0,13,878,518,360,67.53846153846153,0.5899772209567198,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:45.897871,0.002968,udp,147.32.84.59,51064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,77,153,115.0,0.3347826086956522,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:46.006199,0.000344,udp,147.32.85.25,57487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:46.657944,0.000387,udp,147.32.84.170,49413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:47.051443,344.421143,udp,79.118.210.87,37437.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,420,242,178,105.0,0.5761904761904761,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:49.088693,0.0,tcp,147.32.84.165,1242.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.088704,0.0,tcp,147.32.84.165,1240.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.088708,0.0,tcp,147.32.84.165,1243.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.088848,0.0,tcp,147.32.84.165,1245.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.088907,0.0,tcp,147.32.84.165,1244.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.088959,0.0,tcp,147.32.84.165,1246.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.089683,0.0,tcp,147.32.84.165,1251.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.279968,1583.243286,udp,147.32.84.94,7103.0,->,194.186.62.34,7161.0,INT,0.0,,12,1008,1008,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:27:49.688909,0.0,tcp,147.32.84.165,1252.0,->,192.168.0.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:27:49.997416,0.000379,udp,147.32.84.170,38819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:50.139660,0.000222,udp,147.32.84.138,53984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:52.304475,30.035482,tcp,212.39.157.2,49166.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,18,1342,689,653,74.55555555555556,0.5134128166915052,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:27:52.700597,0.000268,udp,147.32.85.6,64691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,71,224,147.5,0.24067796610169492,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:52.836047,0.00017,udp,147.32.85.6,62050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:53.488835,0.358682,udp,147.32.84.59,60276.0,<->,89.102.37.23,30850.0,CON,0.0,0.0,2,253,181,72,126.5,0.7154150197628458,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:27:55.007931,0.002214,udp,77.62.28.139,44137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,627,567,60,313.5,0.9043062200956937,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:27:56.013273,0.000227,udp,147.32.84.138,60349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:27:56.658327,0.000256,udp,147.32.84.170,36935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:27:56.888744,0.000268,udp,147.32.84.138,32952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:01.105687,0.0,tcp,147.32.84.165,1477.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.105939,0.0,tcp,147.32.84.165,1479.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.106000,0.0,tcp,147.32.84.165,1476.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.106065,0.0,tcp,147.32.84.165,1483.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.106209,0.0,tcp,147.32.84.165,1482.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.106272,0.0,tcp,147.32.84.165,1480.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:01.106341,0.0,tcp,147.32.84.165,1486.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:02.013256,0.000155,udp,147.32.85.25,35266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:03.913425,0.00031,udp,147.32.84.170,42587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:03.914067,0.000435,udp,147.32.84.170,45214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:03.915346,275.610657,tcp,147.32.84.170,48360.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,36,10581,7709,2872,293.9166666666667,0.7285700784424912,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:04.990478,3062.10498,udp,77.240.96.2,42262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1470,1098,372,122.5,0.746938775510204,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:05.438151,0.0,udp,147.32.87.238,39371.0,->,67.82.3.224,443.0,INT,0.0,,1,63,63,0,63.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:28:06.657270,0.000449,udp,147.32.84.170,48641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:06.659396,0.018199,tcp,147.32.84.170,51072.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:07.385321,0.000205,udp,147.32.84.138,34336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:12.225216,0.000191,udp,147.32.84.138,35685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:13.051575,0.304968,tcp,147.32.84.170,34138.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:13.123087,0.0,tcp,147.32.84.165,1671.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.123256,0.0,tcp,147.32.84.165,1672.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.123488,0.0,tcp,147.32.84.165,1674.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.123615,0.0,tcp,147.32.84.165,1676.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.123812,0.0,tcp,147.32.84.165,1677.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.123886,0.0,tcp,147.32.84.165,1678.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:13.723425,0.0,tcp,147.32.84.165,1680.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:14.049919,250.048935,tcp,147.32.84.170,36715.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:14.385138,0.000232,udp,147.32.84.138,43439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:16.657599,0.000301,udp,147.32.84.170,44246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:21.008834,0.308432,tcp,147.32.84.170,40101.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:22.380842,0.0003,udp,147.32.84.138,34244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:25.139987,0.0,tcp,147.32.84.165,1852.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.140206,0.0,tcp,147.32.84.165,1851.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.140271,0.0,tcp,147.32.84.165,1856.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.140453,0.0,tcp,147.32.84.165,1854.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.140460,0.0,tcp,147.32.84.165,1858.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.140601,0.0,tcp,147.32.84.165,1857.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:25.297069,0.247007,udp,147.32.86.168,48451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:25.741213,0.0,tcp,147.32.84.165,1861.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:26.658245,0.000314,udp,147.32.84.170,43393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:27.713134,14.420422,tcp,147.32.84.59,55538.0,->,69.63.190.28,80.0,FSA_FSA,0.0,0.0,7,424,242,182,60.57142857142857,0.5707547169811321,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:28:31.360436,0.000288,udp,147.32.85.89,48093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:31.932542,2559.081055,udp,68.40.162.84,63007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1071,252,819,133.875,0.23529411764705882,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:33.122760,663.233093,tcp,212.183.127.241,60929.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,26,2271,1348,923,87.34615384615384,0.5935711140466755,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:28:34.681339,2636.966309,udp,213.214.75.22,24071.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:36.424572,0.001939,udp,113.160.154.126,63985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:36.656687,0.000335,udp,147.32.84.170,45350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:37.157859,61.2976,tcp,147.32.84.165,1893.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:28:37.157874,0.0,tcp,147.32.84.165,2032.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:37.158013,0.0,tcp,147.32.84.165,2033.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:37.158225,0.0,tcp,147.32.84.165,2035.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:37.158335,0.0,tcp,147.32.84.165,2037.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:37.158558,0.0,tcp,147.32.84.165,2038.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:37.529757,0.000243,udp,147.32.84.138,48146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:37.587867,0.0,tcp,147.32.84.165,2042.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:38.093627,0.00031,udp,109.164.207.57,10402.0,<->,147.32.84.184,59371.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:39.422944,3155.063232,udp,147.32.84.229,13363.0,<->,213.119.97.126,25452.0,CON,0.0,0.0,10,4280,707,3573,428.0,0.16518691588785048,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:42.188100,0.000379,udp,147.32.84.138,60236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:28:42.697447,9.83376,tcp,147.32.86.17,2236.0,->,68.232.35.229,80.0,FSPA_FSRPA,0.0,0.0,38,33283,1641,31642,875.8684210526316,0.049304449719075806,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:28:46.656814,0.000502,udp,147.32.84.170,42949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:49.161812,65.73941,tcp,147.32.86.53,38806.0,->,216.129.112.93,80.0,FSPA_FSPA,0.0,0.0,10,1891,1195,696,189.1,0.6319407720782655,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:28:49.174881,0.0,tcp,147.32.84.165,2212.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.174999,0.0,tcp,147.32.84.165,2213.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.175154,0.0,tcp,147.32.84.165,2215.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.175209,0.0,tcp,147.32.84.165,2217.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.175248,0.0,tcp,147.32.84.165,2218.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.175288,0.0,tcp,147.32.84.165,2219.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:49.775891,0.0,tcp,147.32.84.165,2221.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:28:50.977576,2925.283936,udp,24.19.31.44,55135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,6544,3271,3273,409.0,0.49984718826405866,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:51.289289,0.000784,udp,71.163.69.32,53390.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,79,469,274.0,0.14416058394160583,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:52.008090,0.000287,udp,147.32.84.170,54350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:28:52.748060,2483.630371,udp,112.205.20.238,38638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:53.224537,0.000334,udp,115.241.184.233,59913.0,<->,147.32.86.110,31338.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:56.249303,0.078225,udp,147.32.84.229,13363.0,<->,95.233.18.113,6309.0,CON,0.0,0.0,2,171,99,72,85.5,0.5789473684210527,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:28:58.045638,3.626042,tcp,147.32.84.59,38365.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,38,21345,5149,16196,561.7105263157895,0.241227453736238,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:28:58.663840,0.206588,tcp,147.32.86.20,2294.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,27431,1029,26402,741.3783783783783,0.03751230359811892,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:29:00.156478,3076.933594,udp,94.1.189.215,62194.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1688,1254,434,120.57142857142857,0.7428909952606635,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:00.681247,0.00019,udp,147.32.84.138,42830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:01.192396,0.0,tcp,147.32.84.165,2361.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:01.192618,0.0,tcp,147.32.84.165,2364.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:01.192623,0.0,tcp,147.32.84.165,2365.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:01.192734,0.0,tcp,147.32.84.165,2367.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:01.194431,0.0,tcp,147.32.84.165,2370.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:01.290241,0.010576,udp,147.32.86.6,65358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,480,75,405,240.0,0.15625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:01.792978,0.0,tcp,147.32.84.165,2371.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:05.448372,7.619649,tcp,147.32.85.47,2241.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,17,6640,4311,2329,390.5882352941176,0.6492469879518072,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:29:06.830165,0.0002,udp,147.32.84.188,34277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:08.875954,0.000239,udp,147.32.84.138,43031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:09.642620,0.000814,udp,84.249.234.98,11116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:10.733805,0.000299,udp,147.32.84.138,32806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:11.721922,0.001003,udp,77.123.39.56,4827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1023,76,947,511.5,0.07429130009775171,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:13.209555,0.0,tcp,147.32.84.165,2481.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:13.209574,0.0,tcp,147.32.84.165,2484.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:13.810703,0.0,tcp,147.32.84.165,2487.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:13.810887,0.0,tcp,147.32.84.165,2490.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:13.811000,0.0,tcp,147.32.84.165,2491.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:15.034801,0.00025,udp,147.32.84.138,54378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:16.267078,0.071067,udp,147.32.84.229,13363.0,<->,89.117.184.37,53402.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:22.062000,0.000419,udp,147.32.84.59,49050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:23.007509,0.000242,udp,147.32.84.170,49587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:29:23.009586,0.237456,tcp,147.32.84.170,40110.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:29:23.063793,0.000197,udp,147.32.84.138,51700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:23.132649,2467.283691,udp,85.207.18.54,36153.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1788,1384,404,127.71428571428571,0.7740492170022372,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:23.298639,0.000608,udp,121.135.129.78,48324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:23.307802,292.85022,tcp,147.32.84.59,39351.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,148,95444,10913,84531,644.8918918918919,0.11433929843677969,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:29:24.257820,3458.58667,udp,173.2.220.159,20399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,26,3231,1596,1635,124.26923076923077,0.49396471680594245,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:25.226870,0.0,tcp,147.32.84.165,2601.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:25.226978,0.0,tcp,147.32.84.165,2604.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:25.426042,3092.524658,udp,147.32.84.229,13363.0,<->,98.243.164.29,24305.0,CON,0.0,0.0,6,3969,955,3014,661.5,0.24061476442428822,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:25.827545,0.0,tcp,147.32.84.165,2607.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:25.827770,0.0,tcp,147.32.84.165,2610.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:25.827949,0.0,tcp,147.32.84.165,2611.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:27.193936,3590.52002,tcp,147.32.84.134,37123.0,->,205.188.17.129,443.0,SPA_SPA,0.0,0.0,522,48479,18878,29601,92.87164750957854,0.3894057220652241,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:29:27.817544,0.183934,udp,147.32.84.59,53228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,82,171,126.5,0.3241106719367589,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:30.431270,0.000521,udp,114.39.175.173,52777.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:30.519036,0.000207,udp,147.32.85.25,59860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:36.458418,0.001638,udp,147.32.86.165,52778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:36.723273,51.119247,tcp,27.107.50.4,1103.0,->,147.32.84.2,80.0,SRPA_SPA,0.0,0.0,175,159476,4926,154550,911.2914285714286,0.030888660362687802,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:29:37.244752,0.0,tcp,147.32.84.165,2721.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:37.244936,0.0,tcp,147.32.84.165,2724.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:37.577663,0.000281,udp,147.32.84.138,38993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:37.641171,0.000765,udp,82.117.232.106,64907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,588,79,509,294.0,0.13435374149659865,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:37.844837,0.0,tcp,147.32.84.165,2727.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:37.845111,0.0,tcp,147.32.84.165,2730.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:37.845268,0.0,tcp,147.32.84.165,2731.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:38.020374,1263.482056,udp,88.208.220.171,57824.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,502,354,148,125.5,0.7051792828685259,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:39.553033,0.876143,tcp,147.32.84.59,55598.0,->,202.137.237.29,80.0,FSPA_FSPA,0.0,0.0,10,2510,1510,1000,251.0,0.601593625498008,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:29:39.629111,0.000287,udp,147.32.84.138,47366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:39.817619,31.176168,udp,93.178.76.201,58248.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1032,912,120,258.0,0.8837209302325582,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:42.678216,0.000338,udp,147.32.84.138,38811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:43.751416,3156.447998,icmp,87.123.86.221,3331.0,->,147.32.84.229,,URFIL,0.0,,18,1260,1260,0,70.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:29:46.656729,0.000434,udp,147.32.84.170,56622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:29:46.657736,0.000337,udp,147.32.84.170,56485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:29:47.666443,0.104743,tcp,147.32.87.252,1584.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,9,2788,1295,1493,309.77777777777777,0.4644906743185079,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:29:47.745122,1.336666,tcp,147.32.87.252,1604.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,10,2306,960,1346,230.6,0.4163052905464007,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:29:49.261660,61.273258,tcp,147.32.84.165,2749.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:29:49.261723,0.0,tcp,147.32.84.165,2842.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:49.261854,0.0,tcp,147.32.84.165,2845.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:49.862374,0.0,tcp,147.32.84.165,2848.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:49.862589,0.0,tcp,147.32.84.165,2851.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:49.862850,0.0,tcp,147.32.84.165,2852.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:29:51.640515,0.000211,udp,147.32.84.138,47278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:52.670191,0.000308,udp,147.32.84.59,52169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:52.853721,0.000339,udp,147.32.84.168,53603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:53.642393,0.000222,udp,147.32.84.138,46512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:54.016268,0.017271,udp,147.32.85.26,54203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,86,314,200.0,0.215,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:29:56.273790,3008.751465,udp,147.32.85.56,44076.0,<->,97.104.93.66,14175.0,CON,0.0,0.0,12,810,450,360,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:56.593598,3359.500488,udp,94.161.117.114,1024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1737,1303,434,124.07142857142857,0.7501439263097294,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:29:56.676420,0.000501,udp,147.32.84.170,53427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:29:59.605583,0.309532,tcp,147.32.86.20,2340.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,37,28767,978,27789,777.4864864864865,0.03399728855980811,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:30:00.257369,0.000305,udp,147.32.85.34,64775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:00.281588,0.000331,udp,147.32.85.34,53327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:01.033209,0.000424,udp,147.32.87.36,57411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,15,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:30:01.278890,0.0,tcp,147.32.84.165,2963.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.279002,0.0,tcp,147.32.84.165,2962.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.279096,0.0,tcp,147.32.84.165,2964.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.279166,0.0,tcp,147.32.84.165,2965.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.349479,17.859915,udp,72.100.103.4,11642.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1062,942,120,265.5,0.8870056497175142,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:01.880050,0.0,tcp,147.32.84.165,2969.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.880192,0.0,tcp,147.32.84.165,2968.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.880256,0.0,tcp,147.32.84.165,2970.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.880321,0.0,tcp,147.32.84.165,2971.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.880384,0.0,tcp,147.32.84.165,2973.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.880441,0.0,tcp,147.32.84.165,2972.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:01.883584,0.796019,tcp,147.32.84.59,55657.0,->,202.137.237.29,80.0,FSPA_FSPA,0.0,0.0,10,2510,1510,1000,251.0,0.601593625498008,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:30:06.603787,0.000278,udp,147.32.85.25,35000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:06.658125,0.01845,tcp,147.32.84.170,43984.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:09.344024,0.609631,tcp,147.32.84.171,44900.0,->,86.124.210.133,16973.0,FSPA_FSPA,0.0,0.0,12,1498,630,868,124.83333333333333,0.4205607476635514,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:30:09.950504,0.000252,udp,147.32.87.36,37544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,15,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:30:10.294550,0.000208,udp,147.32.84.138,42693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:10.660252,0.367813,tcp,147.32.87.252,1771.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,58,45997,1773,44224,793.051724137931,0.03854599212992152,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:30:11.698687,0.000198,udp,147.32.84.138,48030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:11.911324,1.156949,tcp,147.32.87.252,1962.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,14,3876,2542,1334,276.85714285714283,0.6558307533539731,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:30:13.296683,0.0,tcp,147.32.84.165,3082.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:13.296789,0.0,tcp,147.32.84.165,3085.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:13.897497,0.0,tcp,147.32.84.165,3088.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:13.897655,0.0,tcp,147.32.84.165,3091.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:13.897814,0.0,tcp,147.32.84.165,3092.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:14.809394,0.120705,udp,92.106.26.81,59962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,246,174,72,123.0,0.7073170731707317,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:15.593310,0.00017,udp,147.32.84.138,37174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:16.656530,0.000328,udp,147.32.84.170,59305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:16.657395,0.000486,udp,147.32.84.170,42110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:16.658603,0.018467,tcp,147.32.84.170,55465.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:18.549760,0.000436,udp,147.32.85.36,39328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:19.470380,0.000372,udp,147.32.84.138,40570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:21.919399,0.00041,udp,147.32.85.36,38094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:24.127072,2.285471,tcp,147.32.87.252,2051.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,15,7106,1396,5710,473.73333333333335,0.19645370109766394,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:30:25.313396,0.0,tcp,147.32.84.165,3202.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:25.313505,0.0,tcp,147.32.84.165,3205.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:25.914794,0.0,tcp,147.32.84.165,3208.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:25.914922,0.0,tcp,147.32.84.165,3211.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:25.915053,0.0,tcp,147.32.84.165,3212.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:26.635617,3375.866455,udp,96.19.1.106,51632.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,856,209,647,142.66666666666666,0.2441588785046729,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:26.656872,0.000334,udp,147.32.84.170,33056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:28.707519,3110.952881,udp,82.23.55.181,14663.0,->,147.32.86.99,56214.0,INT,0.0,,18,3150,3150,0,175.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:30:29.017865,51.763542,tcp,147.32.86.111,33413.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,19,4089,2904,1185,215.21052631578948,0.7101980924431401,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:30:33.631385,3055.755859,udp,213.208.238.35,39543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1536,1164,372,128.0,0.7578125,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:35.975675,281.258606,tcp,147.32.84.59,58563.0,->,74.125.232.213,443.0,FSPA_FSPA,0.0,0.0,40,9768,6067,3701,244.2,0.6211097461097461,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:30:36.657234,0.000383,udp,147.32.84.170,44046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:37.048029,2767.366455,icmp,147.32.80.9,771.0,->,147.32.84.199,35072.0,URP,0.0,,12,840,840,0,70.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:30:37.330652,0.0,tcp,147.32.84.165,3323.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.330811,0.0,tcp,147.32.84.165,3322.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.330883,0.0,tcp,147.32.84.165,3324.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.330896,0.0,tcp,147.32.84.165,3325.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.931908,0.0,tcp,147.32.84.165,3329.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.932057,0.0,tcp,147.32.84.165,3328.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.932110,0.0,tcp,147.32.84.165,3330.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.932165,0.0,tcp,147.32.84.165,3331.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.932223,0.0,tcp,147.32.84.165,3333.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:37.932278,0.0,tcp,147.32.84.165,3332.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:38.538851,0.000249,udp,147.32.84.134,57003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:30:38.540296,0.000328,udp,147.32.84.134,47881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:30:45.358283,0.000294,udp,147.32.84.138,41519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:46.189627,0.000199,udp,147.32.84.138,43944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:46.218443,0.000285,udp,147.32.84.138,42797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:30:46.410203,3330.593994,udp,147.32.84.229,13363.0,<->,188.24.107.184,6340.0,CON,0.0,0.0,6,624,420,204,104.0,0.6730769230769231,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:46.656348,0.000339,udp,147.32.84.170,36501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:30:49.348047,0.0,tcp,147.32.84.165,3444.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.348106,0.0,tcp,147.32.84.165,3443.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.348161,0.0,tcp,147.32.84.165,3445.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.348215,0.0,tcp,147.32.84.165,3446.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.417879,0.247424,udp,147.32.84.134,38189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:30:49.949404,0.0,tcp,147.32.84.165,3450.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.949581,0.0,tcp,147.32.84.165,3449.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.949594,0.0,tcp,147.32.84.165,3451.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.949603,0.0,tcp,147.32.84.165,3452.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.949635,0.0,tcp,147.32.84.165,3454.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.949731,0.0,tcp,147.32.84.165,3453.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:30:49.974801,0.000726,udp,79.223.73.22,50419.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:52.535036,0.164586,udp,147.32.85.84,13716.0,<->,24.26.208.64,44819.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:56.549161,2704.981445,udp,78.42.90.172,45565.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,991,810,181,165.16666666666666,0.8173562058526741,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:30:56.656933,0.00038,udp,147.32.84.170,60028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:01.365827,0.0,tcp,147.32.84.165,3565.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.365982,61.298801,tcp,147.32.84.165,3471.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:31:01.365989,0.0,tcp,147.32.84.165,3564.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.366057,0.0,tcp,147.32.84.165,3566.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.796438,0.0,tcp,147.32.84.165,3570.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966220,0.0,tcp,147.32.84.165,3571.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966382,0.0,tcp,147.32.84.165,3573.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966396,0.0,tcp,147.32.84.165,3572.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966401,0.0,tcp,147.32.84.165,3574.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966556,0.0,tcp,147.32.84.165,3575.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:01.966570,0.0,tcp,147.32.84.165,3576.0,->,147.32.83.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:06.939904,0.000288,udp,147.32.84.138,36813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:07.776173,0.0004,udp,147.32.84.171,39297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:11.274354,4.7e-05,udp,147.32.84.138,43036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:11.328674,16.979107,tcp,147.32.80.13,12036.0,->,147.32.84.4,80.0,FSPA_FSPA,0.0,0.0,174,126800,17264,109536,728.735632183908,0.13615141955835963,15,1,flow=From-Background-CVUT-Proxy,Background,-1 2011-08-16 15:31:11.990992,0.361321,tcp,147.32.85.88,55016.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,125,109780,3900,105880,878.24,0.035525596647841134,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:31:13.383081,0.0,tcp,147.32.84.165,3685.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.383208,0.0,tcp,147.32.84.165,3684.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.383260,0.0,tcp,147.32.84.165,3686.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.779007,13.171171,tcp,147.32.86.187,54824.0,->,77.238.187.43,80.0,FSRA_FSPA,0.0,0.0,9,763,306,457,84.77777777777777,0.40104849279161203,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:31:13.984211,0.0,tcp,147.32.84.165,3690.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.984272,0.0,tcp,147.32.84.165,3691.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.984302,0.0,tcp,147.32.84.165,3693.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.984380,0.0,tcp,147.32.84.165,3692.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.984436,0.0,tcp,147.32.84.165,3694.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:13.984496,0.0,tcp,147.32.84.165,3695.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:14.584627,0.0,tcp,147.32.84.165,3696.0,->,147.32.83.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:15.243993,11.716053,tcp,147.32.86.187,54837.0,->,212.82.110.111,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:31:16.656824,0.0003,udp,147.32.84.170,45834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:20.154583,0.000405,udp,147.32.86.187,57225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:20.363999,56.575283,tcp,147.32.86.187,54880.0,->,92.123.64.130,80.0,FSPA_FSPA,0.0,0.0,13,2079,859,1220,159.92307692307693,0.4131794131794132,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:31:20.761387,0.00035,udp,147.32.86.111,61284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:22.780964,0.252291,udp,193.77.24.83,30150.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,168,72,120.0,0.7,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:31:24.049251,0.311781,tcp,147.32.84.59,55683.0,->,69.171.242.40,80.0,FSRPA_FSPA,0.0,0.0,10,3820,2999,821,382.0,0.7850785340314136,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:31:25.400450,0.0,tcp,147.32.84.165,3805.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:25.400578,0.0,tcp,147.32.84.165,3804.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:25.400631,0.0,tcp,147.32.84.165,3806.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001015,0.0,tcp,147.32.84.165,3810.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001078,0.0,tcp,147.32.84.165,3811.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001082,0.0,tcp,147.32.84.165,3813.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001174,0.0,tcp,147.32.84.165,3812.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001180,0.0,tcp,147.32.84.165,3814.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.001184,0.0,tcp,147.32.84.165,3815.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.602400,0.0,tcp,147.32.84.165,3816.0,->,147.32.83.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 15:31:26.657887,0.017943,tcp,147.32.84.170,55474.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:27.009222,0.263999,tcp,147.32.84.170,60399.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:29.197934,0.000251,udp,147.32.84.138,37391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:31.804218,0.000404,udp,147.32.84.138,41993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:36.141526,810.072876,udp,91.225.100.99,63024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1271,289,982,211.83333333333334,0.22738001573564123,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:31:36.656348,0.000574,udp,147.32.84.170,51421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:36.657442,0.000384,udp,147.32.84.170,54420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:44.240400,0.000204,udp,147.32.84.138,45542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:45.206217,0.00029,udp,147.32.84.138,57111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:46.658207,0.000328,udp,147.32.84.170,52216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:46.659152,0.000383,udp,147.32.84.170,45461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:31:47.910151,0.000264,udp,147.32.84.138,49376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:50.361284,0.000315,udp,147.32.84.138,47737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:50.576550,0.060091,udp,147.32.84.59,60420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,76,135,105.5,0.36018957345971564,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:31:56.659214,0.000493,udp,147.32.84.170,42744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:00.660138,0.000332,udp,147.32.85.34,61771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:01.247045,10.010829,tcp,147.32.84.134,34941.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:01.341675,0.000335,udp,147.32.84.138,54840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:02.234477,61.29718,tcp,147.32.84.165,3826.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:32:03.248215,0.000397,udp,147.32.84.134,34820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.249476,0.000198,udp,147.32.84.134,51404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.249527,0.000284,udp,147.32.84.134,42119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.250108,0.000517,udp,147.32.84.134,32926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.250380,21.863117,tcp,147.32.84.134,34946.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,80,55122,3558,51564,689.025,0.06454773048873408,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.255127,18.014639,tcp,147.32.84.134,45539.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.255778,360.278625,tcp,147.32.84.134,47512.0,->,66.220.158.53,80.0,FSPA_FSPA,0.0,0.0,31,6623,4372,2251,213.6451612903226,0.6601238109617998,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:03.524310,0.000401,udp,147.32.84.134,33620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.032441,0.030062,udp,147.32.84.134,47046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.033346,0.02187,udp,147.32.84.134,52191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,83,222,152.5,0.2721311475409836,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.033535,0.011612,udp,147.32.84.134,39082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,84,224,154.0,0.2727272727272727,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.033739,310.156738,tcp,147.32.84.134,53533.0,->,66.220.158.53,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.034412,19.391672,tcp,147.32.84.134,41249.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.037374,0.002127,udp,147.32.84.134,39248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,88,380,234.0,0.18803418803418803,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.040105,30.018847,tcp,147.32.84.134,53607.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,16,2991,1000,1991,186.9375,0.3343363423604146,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.040215,30.019171,tcp,147.32.84.134,53611.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,16,2991,1000,1991,186.9375,0.3343363423604146,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.046141,0.001803,udp,147.32.84.134,55318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,428,84,344,214.0,0.19626168224299065,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.048518,40.023907,tcp,147.32.84.134,34233.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.156356,39.915558,tcp,147.32.84.134,35170.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.156569,39.914944,tcp,147.32.84.134,60386.0,->,92.123.68.113,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.177766,0.000488,udp,147.32.84.134,42581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,628,87,541,314.0,0.13853503184713375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.264275,39.807178,tcp,147.32.84.134,59047.0,->,92.123.64.104,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.264330,39.806953,tcp,147.32.84.134,59048.0,->,92.123.64.104,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:04.656862,3235.995605,udp,89.12.195.80,35143.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3920,2693,1227,163.33333333333334,0.6869897959183674,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:06.656859,0.0004,udp,147.32.84.170,58228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:08.954540,185.90004,tcp,147.32.84.134,53639.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,43,16642,4538,12104,387.0232558139535,0.2726835716860954,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:08.959161,165.893127,tcp,147.32.84.134,53643.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,27,6586,2009,4577,243.92592592592592,0.305040996052232,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:09.239723,0.000219,udp,147.32.84.138,52641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:19.128886,0.000774,udp,149.5.45.8,43021.0,<->,147.32.86.165,12114.0,CON,0.0,0.0,2,274,212,62,137.0,0.7737226277372263,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:21.190040,0.000352,udp,147.32.84.138,53170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:21.859033,0.000396,udp,147.32.84.138,38217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:21.965529,0.13629,udp,147.32.84.229,13363.0,<->,76.117.1.118,6653.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:23.887410,3273.294922,udp,61.231.196.84,58482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,3256,60,3196,465.14285714285717,0.018427518427518427,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:24.819797,0.563733,udp,147.32.84.94,7103.0,<->,141.255.150.14,7239.0,CON,0.0,0.0,42,33725,33119,606,802.9761904761905,0.9820311341734618,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:25.090572,10.009783,tcp,147.32.84.134,35003.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090637,10.00971,tcp,147.32.84.134,35005.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090644,10.009716,tcp,147.32.84.134,35006.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090699,10.009644,tcp,147.32.84.134,35007.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090768,20.105469,tcp,147.32.84.134,47569.0,->,66.220.158.53,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090889,20.021545,tcp,147.32.84.134,46258.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.090927,20.013851,tcp,147.32.84.134,46260.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:25.091023,20.013714,tcp,147.32.84.134,45605.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:26.503747,2422.035889,udp,79.50.0.196,15913.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:27.249768,0.000402,udp,147.32.86.155,53970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,465,76,389,232.5,0.16344086021505377,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:28.415047,33.693829,tcp,147.32.84.59,50343.0,->,62.44.12.24,993.0,FSPA_FSPA,0.0,0.0,38,5742,2026,3716,151.10526315789474,0.35283873214907696,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:32:28.829510,0.000658,udp,80.54.132.233,56524.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:28.993992,0.009797,udp,147.32.84.134,50995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:29.008358,0.000247,udp,147.32.84.170,39250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:29.009251,0.000355,udp,147.32.84.170,55867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:29.286537,0.000342,udp,147.32.84.134,55567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.005673,0.000318,udp,147.32.84.134,36140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,68,142,105.0,0.3238095238095238,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.007198,0.000265,udp,147.32.84.134,46816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,68,196,132.0,0.25757575757575757,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.178554,23.267502,tcp,147.32.84.134,54823.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,10,1564,803,761,156.4,0.5134271099744245,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.293778,0.00025,udp,147.32.84.134,53186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.294490,0.000309,udp,147.32.84.134,42527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,72,200,136.0,0.2647058823529412,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.382132,23.064011,tcp,147.32.84.134,54827.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,99,77705,5192,72513,784.89898989899,0.06681680715526671,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.383172,23.062864,tcp,147.32.84.134,54829.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,19,5812,2742,3070,305.89473684210526,0.47178251892635925,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.663114,22.783026,tcp,147.32.84.134,54830.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,41,22609,3901,18708,551.439024390244,0.1725419080896988,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.716644,0.103937,udp,147.32.84.134,45893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.717992,0.000476,udp,147.32.84.134,41894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,71,199,135.0,0.26296296296296295,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.719393,0.000368,udp,147.32.84.134,55687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,72,144,108.0,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.720106,0.000268,udp,147.32.84.134,34431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.875364,22.570681,tcp,147.32.84.134,54832.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,73,59923,3388,56535,820.8630136986301,0.05653922533918529,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:30.875369,22.57066,tcp,147.32.84.134,54833.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,12,1856,900,956,154.66666666666666,0.4849137931034483,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:31.562825,0.0,udp,192.168.88.79,65051.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:32:31.842067,141.575272,tcp,147.32.84.134,44044.0,->,193.41.230.85,443.0,SPA_FSRPA,0.0,0.0,95,62376,6680,55696,656.5894736842105,0.10709247146338335,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:31.994331,0.000245,udp,147.32.84.138,58812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:32.057346,0.048076,udp,147.32.84.134,60462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,77,108,92.5,0.41621621621621624,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:33.044147,140.373184,tcp,147.32.84.134,44048.0,->,193.41.230.85,443.0,SPA_FSRPA,0.0,0.0,35,12287,3086,9201,351.0571428571429,0.2511597623504517,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:33.099174,0.002034,udp,147.32.84.59,53688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,79,147,113.0,0.3495575221238938,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:33.484717,139.089066,tcp,147.32.84.134,44051.0,->,193.41.230.85,443.0,SPA_FSRPA,0.0,0.0,29,8633,2479,6154,297.6896551724138,0.2871539441677285,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:34.856434,2917.343262,udp,85.70.3.7,20604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:36.658812,0.000377,udp,147.32.84.170,41100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:36.659812,0.000334,udp,147.32.84.170,58876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:38.073686,0.000659,udp,14.202.143.34,49085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,78,472,275.0,0.14181818181818182,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:40.398393,2328.399414,udp,114.163.81.150,33872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,835,223,612,139.16666666666666,0.26706586826347306,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:40.799631,3443.373047,udp,147.32.84.229,13363.0,<->,61.231.67.165,61663.0,CON,0.0,0.0,16,1064,584,480,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:32:41.017597,69.378944,tcp,147.32.84.168,57694.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,6,372,186,186,62.0,0.5,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:32:44.438162,0.000308,udp,147.32.84.134,53744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:32:46.659363,0.000382,udp,147.32.84.170,48187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:47.877510,0.000204,udp,147.32.84.138,44880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:32:56.418158,20.523914,tcp,147.32.86.187,54952.0,->,192.221.106.126,80.0,FSPA_FSPA,0.0,0.0,23,8096,1442,6654,352.0,0.17811264822134387,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:32:56.661122,0.018372,tcp,147.32.84.170,56893.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:32:58.597308,0.000315,udp,147.32.84.138,57965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:01.907731,0.000397,udp,147.32.84.134,54941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.907835,14.875305,tcp,147.32.84.134,34888.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.907839,14.875294,tcp,147.32.84.134,34889.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.907922,14.875495,tcp,147.32.84.134,52662.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.907935,14.875488,tcp,147.32.84.134,52663.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.908646,0.000194,udp,147.32.84.134,34084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.910420,14.868566,tcp,147.32.84.134,56606.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.910658,14.868332,tcp,147.32.84.134,56609.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:01.910725,14.868269,tcp,147.32.84.134,56611.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.240149,31.834579,tcp,147.32.84.134,58797.0,->,92.123.64.104,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.240363,31.835089,tcp,147.32.84.134,59712.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,14,1866,761,1105,133.28571428571428,0.4078242229367631,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.240430,31.84215,tcp,147.32.84.134,59714.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,15,1932,761,1171,128.8,0.39389233954451347,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.240866,31.835712,tcp,147.32.84.134,41766.0,->,92.123.68.113,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.241009,31.835215,tcp,147.32.84.134,41768.0,->,92.123.68.113,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.241465,31.842426,tcp,147.32.84.134,47729.0,->,2.21.98.110,443.0,FSPA_FSPA,0.0,0.0,15,1928,757,1171,128.53333333333333,0.3926348547717842,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.241783,31.842607,tcp,147.32.84.134,47733.0,->,2.21.98.110,443.0,FSPA_FSPA,0.0,0.0,16,1994,823,1171,124.625,0.4127382146439318,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.241896,31.843039,tcp,147.32.84.134,47734.0,->,2.21.98.110,443.0,FSPA_FSPA,0.0,0.0,15,1928,757,1171,128.53333333333333,0.3926348547717842,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:02.997545,0.020002,udp,147.32.84.59,57799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,525,80,445,262.5,0.1523809523809524,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:03.103375,61.297966,tcp,147.32.84.165,3828.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:33:04.058915,10.660027,tcp,147.32.84.59,54045.0,->,92.123.64.187,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:33:05.503393,9.739137,tcp,147.32.84.59,54082.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,16,3467,1005,2462,216.6875,0.28987597346409,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:33:06.464282,0.00037,udp,147.32.87.220,1067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,421,74,347,210.5,0.17577197149643706,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:06.658612,0.000413,udp,147.32.84.170,58225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:06.660905,0.017969,tcp,147.32.84.170,52850.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:07.235530,0.000861,udp,31.9.34.13,5276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,74,496,285.0,0.12982456140350876,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:10.602169,22.815434,tcp,147.32.84.134,56636.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,129,93895,6879,87016,727.8682170542636,0.07326268704403856,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:10.602519,41.010357,tcp,147.32.84.134,56637.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,108,75563,8455,67108,699.6574074074074,0.11189338697510687,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:33:11.338736,2124.349365,udp,147.32.84.59,7525.0,<->,188.40.121.71,52012.0,CON,0.0,0.0,4855,4375576,3496978,878598,901.2514933058702,0.7992040362228882,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:33:13.360595,0.239202,tcp,147.32.84.170,38472.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:14.966539,0.000276,udp,147.32.84.59,17257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:15.086448,0.000641,udp,200.139.114.139,59488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:16.657453,0.000349,udp,147.32.84.170,42278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:19.221219,0.000939,udp,78.85.243.67,13912.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:21.489241,268.620636,tcp,147.32.84.170,37175.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,34,10444,7643,2801,307.1764705882353,0.7318077364994255,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:23.293519,0.000348,udp,147.32.84.59,60409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:23.327692,0.000753,udp,75.90.151.77,60330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,78,467,272.5,0.14311926605504588,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:24.013670,0.000227,udp,147.32.84.138,41848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:25.829507,249.341354,tcp,41.226.224.179,49312.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,257,31273,16183,15090,121.68482490272373,0.5174751382982126,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:33:26.234188,0.000264,udp,147.32.84.138,44517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:26.659020,0.000433,udp,147.32.84.170,43229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:28.837323,318.087372,tcp,147.32.86.187,55006.0,->,74.125.232.219,80.0,FSPA_FSRPA,0.0,0.0,87,47293,20736,26557,543.5977011494252,0.4384581227665828,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:33:29.006393,34.280827,udp,147.32.84.229,13363.0,<->,93.123.117.95,63079.0,CON,0.0,0.0,6,841,635,206,140.16666666666666,0.7550535077288941,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:29.543018,0.000316,udp,147.32.85.25,51291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:30.583115,0.040768,udp,147.32.86.187,60559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,338,76,262,169.0,0.22485207100591717,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:31.225917,735.40155,udp,147.32.84.229,13363.0,<->,78.30.245.217,11662.0,CON,0.0,0.0,8,1441,1180,261,180.125,0.8188757807078417,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:31.274501,15.882898,tcp,147.32.86.187,55048.0,->,92.123.64.115,80.0,FSA_FSA,0.0,0.0,8,492,306,186,61.5,0.6219512195121951,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:33:32.106721,0.0003,udp,147.32.84.138,48294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:32.661056,0.000223,udp,147.32.84.138,54475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:33.006588,0.000206,udp,147.32.86.187,57586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,72,140,106.0,0.33962264150943394,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:36.264957,0.00908,tcp,147.32.84.59,54106.0,->,195.113.232.88,80.0,FSPA_FSPA,0.0,0.0,13,1829,1132,697,140.69230769230768,0.6189174412247129,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:33:36.406108,0.000629,udp,147.32.85.89,49785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:41.078621,0.000297,udp,147.32.85.25,42886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:41.360107,0.000297,udp,147.32.84.138,40068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:43.158691,0.002065,udp,85.73.60.80,14117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,510,60,285.0,0.8947368421052632,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:44.798649,0.000818,udp,46.208.203.212,51195.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:44.917795,0.000428,udp,147.32.84.59,54036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,75,185,130.0,0.28846153846153844,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:46.394214,0.003309,tcp,147.32.84.59,52765.0,->,147.32.244.10,16286.0,FSPA_FSPA,0.0,0.0,10,2096,1048,1048,209.6,0.5,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:33:46.659502,0.018522,tcp,147.32.84.170,56908.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:50.734383,0.001125,udp,147.32.85.36,55416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:52.054749,0.000156,udp,147.32.85.25,34131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:33:55.045704,1254.070312,rtp,147.32.84.229,13363.0,<->,178.204.90.154,2235.0,CON,0.0,0.0,10,1172,787,385,117.2,0.6715017064846417,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:33:56.660366,0.017824,tcp,147.32.84.170,55502.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:33:57.931798,0.33072,tcp,147.32.84.59,60546.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1535,699,836,170.55555555555554,0.4553745928338762,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:34:00.139482,0.000318,udp,147.32.85.34,58440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:00.150926,0.000259,udp,147.32.85.34,51400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:00.171665,0.11886,udp,147.32.85.30,61070.0,<->,208.88.186.4,34031.0,CON,0.0,0.0,2,134,72,62,67.0,0.5373134328358209,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:02.011852,0.225899,tcp,147.32.84.170,60427.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:03.971250,61.300186,tcp,147.32.84.165,3860.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:34:04.059725,0.000211,udp,147.32.84.138,44701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:06.658272,0.000291,udp,147.32.84.170,42586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:13.524388,0.000204,udp,147.32.84.134,53982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:13.525050,0.043454,udp,147.32.84.134,41987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,73,201,137.0,0.2664233576642336,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:13.569262,13.24379,tcp,147.32.84.134,52241.0,->,193.41.230.73,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:13.652315,19.7987,tcp,147.32.84.134,52243.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,42,27739,2091,25648,660.452380952381,0.07538123220015142,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:13.804576,19.647055,tcp,147.32.84.134,52247.0,->,193.41.230.73,80.0,FSPA_FSPA,0.0,0.0,16,6397,2503,3894,399.8125,0.3912771611692981,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:13.823402,0.00037,udp,147.32.84.134,47283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,71,199,135.0,0.26296296296296295,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:34:16.659991,0.018266,tcp,147.32.84.170,50591.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:17.545158,62.34803,rtcp,85.241.133.236,54567.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,468,344,124,117.0,0.7350427350427351,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:18.090287,179.319717,tcp,147.32.84.59,60206.0,->,74.125.39.117,80.0,FSPA_FSPA,0.0,0.0,12,3742,1818,1924,311.8333333333333,0.48583645109567075,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:34:20.254869,0.000256,udp,147.32.84.138,59680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:20.618718,0.403238,udp,82.76.197.50,8472.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,299,237,62,149.5,0.7926421404682275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:22.258489,0.00022,udp,147.32.84.138,36707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:24.214446,0.095406,tcp,147.32.84.94,53509.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1159,590,569,128.77777777777777,0.5090595340811044,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:34:26.658068,0.000338,udp,147.32.84.170,48918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:27.446055,1.41464,tcp,147.32.84.59,54263.0,->,157.22.19.24,80.0,FSPA_FSPA,0.0,0.0,180,133585,4578,129007,742.1388888888889,0.034270314780851144,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:34:27.448584,240.618515,tcp,147.32.84.59,53492.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,23,4151,2628,1523,180.47826086956522,0.6331004577210311,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:34:31.351144,0.001907,udp,95.28.77.205,59400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:33.007054,0.000242,udp,147.32.84.170,47567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:33.007842,0.000305,udp,147.32.84.170,52463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:36.826859,0.000204,udp,147.32.84.138,46443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:38.810886,2654.358643,udp,147.32.84.229,13363.0,->,98.195.170.160,13828.0,INT,0.0,,9,1635,1635,0,181.66666666666666,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:34:39.824961,0.040908,udp,147.32.86.187,62940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,338,76,262,169.0,0.22485207100591717,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:40.003961,157.268173,udp,90.233.172.149,20796.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:42.290980,851.278137,tcp,147.32.84.59,56955.0,->,74.125.232.221,443.0,FSPA_FSRPA,0.0,0.0,78,14478,7136,7342,185.6153846153846,0.49288575770133997,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:34:42.770004,0.373539,tcp,147.32.86.187,55257.0,->,208.71.125.18,80.0,FSPA_FSPA,0.0,0.0,9,1378,814,564,153.11111111111111,0.590711175616836,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:34:44.004356,0.000264,udp,147.32.84.138,53683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:45.212640,1766.004639,udp,147.32.84.229,13363.0,<->,84.55.93.19,10865.0,CON,0.0,0.0,6,406,226,180,67.66666666666667,0.5566502463054187,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:47.767030,0.000409,udp,147.32.84.138,35141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:48.761122,3066.04248,udp,147.32.84.229,13363.0,<->,89.212.101.237,38950.0,CON,0.0,0.0,8,821,562,259,102.625,0.6845310596833131,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:34:49.643638,0.000215,udp,147.32.86.15,63788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:50.528852,0.000234,udp,147.32.84.59,54596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:51.963197,0.000215,udp,147.32.84.138,38457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:34:56.658629,0.010995,udp,147.32.84.170,50611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:34:56.671423,0.018791,tcp,147.32.84.170,50228.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:01.587915,0.000258,udp,147.32.84.138,40533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:04.841263,61.280621,tcp,147.32.84.165,3861.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:35:06.659560,0.00041,udp,147.32.84.170,51731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:06.660548,0.000349,udp,147.32.84.170,36214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:06.661684,0.017719,tcp,147.32.84.170,52874.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:06.808924,0.000251,udp,147.32.84.138,33967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:08.800486,19.58547,tcp,147.32.84.59,39275.0,->,173.0.88.34,443.0,FSA_FSRA,0.0,0.0,9,608,338,270,67.55555555555556,0.555921052631579,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:35:10.894254,3103.702148,udp,85.238.169.22,14380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,534,294,240,66.75,0.550561797752809,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:12.611237,10.032859,tcp,147.32.85.87,59371.0,->,74.125.232.192,443.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=Background-google-analytics1,Background,-1 2011-08-16 15:35:16.661108,0.000529,udp,147.32.84.170,42455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:17.083925,0.000336,udp,147.32.84.138,55094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:17.706103,0.099706,tcp,194.108.204.27,54251.0,->,147.32.84.138,8080.0,FSPA_FSPA,0.0,0.0,10,2115,668,1447,211.5,0.315839243498818,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:19.657088,388.661163,tcp,147.32.86.17,2879.0,->,74.125.232.211,80.0,SRPA_SPA,0.0,0.0,399,317160,42271,274889,794.8872180451128,0.13327973262706522,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:20.213618,0.133175,udp,147.32.84.229,13363.0,<->,129.79.155.126,33809.0,CON,0.0,0.0,2,1032,80,952,516.0,0.07751937984496124,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:21.233204,224.430984,tcp,147.32.86.17,2886.0,->,74.125.232.208,80.0,SRPA_SPA,0.0,0.0,299,237322,30979,206343,793.7190635451504,0.13053572782969974,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:21.855543,0.00084,udp,201.22.174.101,26389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:24.254627,0.00103,udp,89.176.77.246,24615.0,<->,147.32.85.26,60764.0,CON,0.0,0.0,2,224,147,77,112.0,0.65625,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:24.896436,51.191334,tcp,147.32.85.6,52123.0,->,217.11.242.25,80.0,FSPA_FSPA,0.0,0.0,23,13641,1508,12133,593.0869565217391,0.11054907997947365,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:26.049900,0.042472,udp,147.32.84.59,59348.0,->,157.24.2.105,389.0,INT,0.0,,1,203,203,0,203.0,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:35:26.669405,31.177418,tcp,147.32.84.132,57516.0,->,77.75.72.72,80.0,SRPA_FSPA,0.0,0.0,12,2993,2109,884,249.41666666666666,0.7046441697293685,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:28.158659,18.162338,tcp,147.32.84.184,48693.0,->,170.149.173.164,80.0,FSA_FSA,0.0,0.0,6,360,240,120,60.0,0.6666666666666666,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:35.011003,0.000293,udp,147.32.84.170,60797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:35.539551,0.184872,tcp,147.32.85.88,56103.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1639,1032,607,163.9,0.6296522269676632,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:35:36.687312,3060.614258,udp,151.82.133.87,37861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,729,543,186,121.5,0.7448559670781894,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:36.921890,0.105013,udp,147.32.85.36,55744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:37.993664,0.000274,udp,147.32.84.138,34658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:38.047065,3099.975586,udp,147.32.87.248,25317.0,<->,70.81.90.101,46315.0,CON,0.0,0.0,14,945,525,420,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:38.582259,1.1e-05,icmp,147.32.87.249,,<-,147.32.87.52,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,15,1,flow=Background,Background,-1 2011-08-16 15:35:41.183257,0.000611,udp,212.41.203.182,56325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,255,193,62,127.5,0.7568627450980392,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:35:42.206310,0.000242,udp,147.32.84.138,51344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:42.573973,15.968279,tcp,123.205.2.34,2786.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,25,8489,2165,6324,339.56,0.2550359288490988,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:46.659231,0.00034,udp,147.32.84.170,56079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:50.303120,0.000166,tcp,147.32.80.7,31480.0,->,147.32.87.5,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:35:50.887309,1.549187,tcp,66.249.71.16,56169.0,->,147.32.84.212,80.0,FSPA_FSPA,0.0,0.0,24,10908,1153,9755,454.5,0.1057022368903557,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:35:56.660734,0.00034,udp,147.32.84.170,40701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:56.661772,0.017939,tcp,147.32.84.170,43624.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:35:57.944690,0.000474,udp,147.32.85.113,60445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:35:58.667098,0.296948,tcp,147.32.87.252,2344.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,10,1871,1133,738,187.1,0.6055585248530198,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:36:00.506209,0.000264,udp,147.32.85.34,61013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:00.515955,0.000391,udp,147.32.85.34,50828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:05.697122,61.283119,tcp,147.32.84.165,3862.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:36:06.011867,0.000435,udp,147.32.84.170,49059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:06.014187,0.258606,tcp,147.32.84.170,43513.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:06.659331,0.000263,udp,147.32.84.170,56643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:07.152680,2.376554,tcp,147.32.86.110,33879.0,->,194.79.52.199,80.0,FSPA_FSPA,0.0,0.0,18,9759,1236,8523,542.1666666666666,0.12665232093452197,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:07.713878,0.2067,tcp,147.32.86.20,2612.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,35286,1151,34135,801.9545454545455,0.032619169075554046,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:08.352779,3013.228271,udp,147.32.85.8,57989.0,<->,195.113.61.42,23095.0,CON,0.0,0.0,12,1452,1080,372,121.0,0.743801652892562,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:11.246609,0.000687,udp,119.237.126.136,54507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:16.661839,0.01896,tcp,147.32.84.170,32793.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:17.125929,0.033472,udp,147.32.84.59,53997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,483,82,401,241.5,0.16977225672877846,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:17.138203,0.000167,udp,147.32.84.138,38346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:20.055746,0.000576,udp,147.32.84.138,42780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:22.412929,10.004307,tcp,147.32.84.59,53155.0,->,68.232.35.119,80.0,SRPA_FSPA,0.0,0.0,22,6009,3853,2156,273.1363636363636,0.6412048593776003,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:36:23.433425,0.000785,udp,41.69.250.229,34832.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:23.961010,0.000434,udp,147.32.86.165,54595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,75,204,139.5,0.26881720430107525,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:25.271827,100.457634,tcp,147.32.84.59,4325.0,->,69.171.242.13,443.0,FSPA_FSPA,0.0,0.0,16,4078,2667,1411,254.875,0.6539970573810692,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:36:25.758883,0.000562,udp,147.32.84.138,51798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:27.663720,0.000216,udp,147.32.84.138,59711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:27.878364,0.863054,udp,62.198.83.204,62428.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1215,620,595,202.5,0.5102880658436214,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:27.929563,0.081157,udp,32.142.102.116,10330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1719,237,1482,286.5,0.13787085514834205,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:29.935545,36.187267,udp,76.164.224.218,63644.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,524,354,170,131.0,0.6755725190839694,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:32.694499,0.000436,udp,147.32.84.59,55870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:33.575522,15.226391,tcp,84.42.140.231,63576.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,15,7077,1138,5939,471.8,0.16080259997173943,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:33.717768,0.15456,tcp,147.32.86.20,2633.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,59,53660,1331,52329,909.4915254237288,0.024804323518449498,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:33.800778,0.000256,udp,147.32.84.59,64432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:34.041446,10.089665,tcp,147.32.84.59,49225.0,->,74.125.232.203,443.0,FSRPA_FSPA,0.0,0.0,15,3647,881,2766,243.13333333333333,0.2415684123937483,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:36:34.091772,0.174179,udp,147.32.84.229,13363.0,<->,24.86.248.138,29304.0,CON,0.0,0.0,2,160,89,71,80.0,0.55625,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:34.092067,113.622612,udp,147.32.84.229,13363.0,<->,114.44.9.228,12687.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:34.250980,0.000894,udp,213.226.63.149,50618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,674,74,600,337.0,0.10979228486646884,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:34.907318,1.663223,udp,174.252.1.246,4668.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,678,557,121,169.5,0.8215339233038348,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:35.777026,0.000357,udp,147.32.84.5,33447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,87,248,167.5,0.25970149253731345,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:36.065553,1.512941,udp,147.32.84.59,61055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,322,154,168,107.33333333333333,0.4782608695652174,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:36.659454,0.000434,udp,147.32.84.170,50817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:37.009286,0.000273,udp,147.32.84.170,32781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:45.009708,0.000239,udp,147.32.85.25,32962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:46.661152,0.018374,tcp,147.32.84.170,36154.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:47.083962,0.000394,udp,147.32.84.138,39903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:48.376219,17.90708,udp,147.32.84.229,13363.0,<->,99.142.20.242,23041.0,CON,0.0,0.0,6,405,222,183,67.5,0.5481481481481482,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:48.612859,0.006916,tcp,147.32.85.6,52301.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1846,817,1029,205.11111111111111,0.44257854821235104,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:50.935019,0.022613,tcp,147.32.85.6,52315.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,65,53753,2178,51575,826.9692307692308,0.040518668725466486,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:36:55.017373,0.000362,udp,147.32.87.248,54292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:36:56.589563,0.134148,tcp,147.32.84.59,2152.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2045,1492,553,227.22222222222223,0.7295843520782396,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:36:56.661518,0.018025,tcp,147.32.84.170,50685.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:36:57.661483,0.066544,udp,147.32.87.248,25317.0,<->,83.164.11.181,4774.0,CON,0.0,0.0,2,167,74,93,83.5,0.4431137724550898,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:36:59.973291,0.125676,udp,178.137.129.203,59398.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,838,687,151,209.5,0.8198090692124105,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:05.021216,0.000272,udp,147.32.86.111,58311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,84,203,143.5,0.2926829268292683,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:05.815683,2821.980225,udp,68.53.239.111,58009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:06.555281,61.299274,tcp,147.32.84.165,3863.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:37:06.660451,0.018729,tcp,147.32.84.170,58485.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:37:07.314163,97.307678,tcp,147.32.84.59,52340.0,->,74.125.39.117,80.0,FSPA_FSPA,0.0,0.0,12,3772,1837,1935,314.3333333333333,0.48700954400848356,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:37:07.746213,0.00022,udp,147.32.84.59,39291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:08.010850,0.000314,udp,147.32.84.170,37763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:37:12.140392,0.00799,tcp,147.32.85.6,52345.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1846,817,1029,205.11111111111111,0.44257854821235104,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:13.977586,271.956177,udp,91.197.115.92,1348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1548,242,1306,258.0,0.15633074935400518,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:14.885413,123.042885,tcp,147.32.86.171,4542.0,->,74.125.232.194,443.0,FSPA_FSPA,0.0,0.0,17,2738,1777,961,161.05882352941177,0.6490138787436085,15,1,flow=Background-google-analytics3,Background,-1 2011-08-16 15:37:15.673942,0.00039,udp,147.32.85.36,60802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:16.013722,0.000328,udp,147.32.85.6,52202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,77,138,107.5,0.3581395348837209,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:16.074636,0.000335,udp,147.32.85.6,54238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,84,155,119.5,0.3514644351464435,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:16.445727,0.000378,udp,147.32.85.8,32869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:18.195861,60.08577,tcp,147.32.86.165,53497.0,->,94.100.187.193,80.0,FSPA_FSRPA,0.0,0.0,11,1841,793,1048,167.36363636363637,0.4307441607821836,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:19.412850,8.9901,tcp,208.54.64.223,27616.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,14,1032,468,564,73.71428571428571,0.45348837209302323,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:20.539743,3554.885742,udp,147.32.84.59,55456.0,<->,78.141.179.8,34016.0,CON,0.0,0.0,8,1596,786,810,199.5,0.4924812030075188,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:37:20.670389,2257.733398,udp,147.32.84.229,13363.0,->,111.255.99.141,51587.0,INT,0.0,,6,468,468,0,78.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:37:21.215231,51.09602,tcp,147.32.84.59,51164.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,21,4362,2994,1368,207.71428571428572,0.686382393397524,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:37:26.745049,0.000512,udp,147.32.84.59,51516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:27.396257,3415.136963,udp,147.32.84.229,13363.0,<->,122.254.20.169,14121.0,CON,0.0,0.0,4,385,145,240,96.25,0.37662337662337664,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:28.262063,0.000154,udp,147.32.84.138,43511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:28.682224,0.000377,udp,147.32.85.37,65221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,79,230,154.5,0.255663430420712,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:29.311325,0.000177,udp,147.32.84.138,40329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:31.177090,0.000312,udp,147.32.84.19,44207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,78,232,155.0,0.25161290322580643,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:31.612101,0.00075,udp,183.23.194.209,48362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,71,67,69.0,0.5144927536231884,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:36.224483,0.00016,udp,147.32.84.138,52958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:36.661262,0.018534,tcp,147.32.84.170,36160.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:37:38.962225,64.941154,tcp,147.32.85.8,40394.0,->,195.113.232.89,80.0,SRA_FSPA,0.0,0.0,8,958,338,620,119.75,0.35281837160751567,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:39.010636,0.00034,udp,147.32.84.170,60749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:37:39.875352,0.00858,tcp,147.32.86.96,58999.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,600,0,600,75.0,0.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:44.406345,0.207899,tcp,147.32.86.20,2686.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30506,1089,29417,762.65,0.035697895495968,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:44.780100,0.000786,udp,109.55.233.241,27948.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,74,482,278.0,0.13309352517985612,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:44.959982,0.003839,tcp,90.183.39.17,52243.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1663,773,890,166.3,0.46482260974143114,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:46.661653,0.01842,tcp,147.32.84.170,59245.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:37:50.507750,0.000176,udp,147.32.84.138,49818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:53.255101,152.408127,tcp,147.32.87.238,2443.0,->,2.21.96.244,80.0,FSPA_FSPA,0.0,0.0,109,84437,17723,66714,774.651376146789,0.20989613558037354,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:37:56.569887,0.00029,udp,147.32.84.181,61161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:37:58.386309,3533.685059,udp,108.86.12.231,56618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2243,153,2090,560.75,0.06821221578243424,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:37:59.931442,0.000305,udp,147.32.85.34,59138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:02.235823,3013.434814,udp,200.86.147.22,18435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,795,148,647,198.75,0.1861635220125786,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:02.791889,0.081396,tcp,147.32.86.171,4657.0,->,193.19.179.29,80.0,SRPA_FSPA,0.0,0.0,10,4785,1054,3731,478.5,0.22027168234064787,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:38:05.964303,0.000655,udp,147.32.85.7,41548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,423,72,351,211.5,0.1702127659574468,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:06.658229,0.000302,udp,147.32.84.170,35128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:07.423425,61.296429,tcp,147.32.84.165,3864.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:38:08.072491,0.000263,udp,147.32.85.25,49193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:12.669256,248.077591,tcp,147.32.84.170,41042.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,5634,5710369,113815,5596554,1013.5550230741924,0.01993128640198208,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:12.699040,668.820251,udp,147.32.84.229,13363.0,<->,77.87.43.173,23903.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:13.022725,3542.654297,tcp,147.32.248.109,3569.0,->,147.32.84.19,993.0,SPA_SPA,0.0,0.0,620,69397,27409,41988,111.93064516129033,0.3949594362868712,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:38:13.960621,0.275387,tcp,147.32.84.170,56005.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:14.051955,240.040359,tcp,147.32.84.170,33245.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:14.110426,0.00055,udp,76.102.150.210,12039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:14.228018,0.342342,tcp,147.32.84.170,56012.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:16.659804,0.00036,udp,147.32.84.170,39213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:18.237556,0.000296,udp,147.32.84.59,37924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:22.673077,0.000697,udp,113.149.146.212,60799.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:24.425475,0.000166,udp,147.32.84.138,33012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:26.162611,0.000361,udp,147.32.84.138,53325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:28.038023,3.199066,tcp,85.26.235.247,29299.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,21,1607,851,756,76.52380952380952,0.5295581829495956,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:38:29.991039,0.000505,udp,147.32.86.15,51256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:35.865927,1263.560669,udp,219.124.27.107,23635.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1406,148,1258,351.5,0.10526315789473684,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:38.007370,3.993096,tcp,147.32.85.31,1960.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,14,3891,2012,1879,277.92857142857144,0.5170907221793883,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:38:45.263334,2248.350098,udp,118.128.252.83,23137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,911,635,276,113.875,0.6970362239297475,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:46.660765,0.017984,tcp,147.32.84.170,32828.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:38:50.308399,0.000437,udp,147.32.84.59,54126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:50.389156,0.000231,udp,147.32.84.138,32783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:38:53.374873,2120.893799,udp,84.193.85.213,51356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:38:56.992499,305.327454,tcp,147.32.85.123,43813.0,->,74.125.232.192,443.0,FSPA_FSPA,0.0,0.0,48,16875,9718,7157,351.5625,0.5758814814814814,15,1,flow=Background-google-analytics1,Background,-1 2011-08-16 15:39:00.021934,245.177414,tcp,147.32.84.59,48748.0,->,74.125.232.223,443.0,FSPA_FSRPA,0.0,0.0,28,2620,1464,1156,93.57142857142857,0.5587786259541985,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:39:01.602867,0.000237,udp,147.32.84.138,49752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:04.899483,0.156625,udp,147.32.84.59,17284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,365,83,282,182.5,0.2273972602739726,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:05.364520,0.060146,udp,147.32.85.26,60764.0,<->,87.228.102.76,33997.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:05.593948,0.000188,udp,147.32.86.110,58158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:05.772279,1.966151,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,346,142,204,115.33333333333333,0.41040462427745666,15,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 15:39:05.875463,243.794434,tcp,147.32.86.187,55320.0,->,209.85.149.132,443.0,FSRPA_FSRPA,0.0,0.0,26,2391,1303,1088,91.96153846153847,0.5449602676704308,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:39:05.887758,3.765104,tcp,147.32.86.187,55327.0,->,74.125.232.207,443.0,FSRPA_SPA,0.0,0.0,14,3611,889,2722,257.92857142857144,0.24619219052893934,15,1,flow=Background-google-analytics16,Background,-1 2011-08-16 15:39:06.419709,1776.269531,udp,147.32.84.59,7525.0,<->,46.4.98.198,55012.0,CON,0.0,0.0,1637,1381138,517340,863798,843.7006719609041,0.37457516917208855,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:39:06.658843,0.000308,udp,147.32.84.170,51020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:39:07.739428,1.989096,tcp,147.32.84.165,3865.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,904,461,443,100.44444444444444,0.5099557522123894,15,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 15:39:08.291118,61.29805,tcp,147.32.84.165,3866.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:39:09.708512,510.835449,udp,85.90.217.253,36007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,708,171,537,177.0,0.24152542372881355,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:15.113188,1354.61145,udp,147.32.84.138,4444.0,->,147.32.255.255,4490.0,INT,0.0,,88,7128,7128,0,81.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:39:16.661112,0.01816,tcp,147.32.84.170,50719.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:39:17.349302,15.299057,udp,147.32.84.94,7103.0,->,91.65.147.18,7362.0,INT,0.0,,4,336,336,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:39:17.441709,1545.400513,udp,147.32.84.229,13363.0,<->,193.71.118.189,26268.0,CON,0.0,0.0,10,1191,881,310,119.1,0.7397145256087322,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:18.044100,9.288572,tcp,147.32.84.59,33426.0,->,67.201.31.45,80.0,FSPA_FSPA,0.0,0.0,52,15928,11012,4916,306.3076923076923,0.6913611250627825,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:39:20.221898,0.000255,udp,147.32.84.138,34149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:20.339990,36.684818,udp,147.32.84.229,13363.0,->,149.142.228.17,64340.0,INT,0.0,,6,1644,1644,0,274.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:39:20.351800,0.000236,udp,147.32.84.138,46120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:20.372695,0.000396,udp,147.32.84.138,50171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:20.473759,466.902679,udp,147.32.84.138,4445.0,->,147.32.255.255,4462.0,INT,0.0,,5,405,405,0,81.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:39:20.475132,466.902496,udp,147.32.84.138,4445.0,->,147.32.255.255,4576.0,INT,0.0,,5,405,405,0,81.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:39:22.051065,0.00027,udp,147.32.86.6,54641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:22.930090,0.00079,udp,41.100.233.211,10133.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:26.838560,0.00023,udp,147.32.84.138,56819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:28.305539,2519.188232,tcp,147.32.84.59,51048.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,31,5289,3041,2248,170.61290322580646,0.5749669124598222,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:39:28.448950,9.1e-05,udp,147.32.84.138,40886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:28.733676,128.754425,tcp,147.32.84.59,51082.0,->,195.113.232.73,80.0,FSPA_FSPA,0.0,0.0,14,5622,1532,4090,401.57142857142856,0.2725008893632159,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:39:29.079511,0.000695,udp,147.32.84.19,52693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:29.212440,0.000258,udp,147.32.84.138,60695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:31.129405,0.000232,udp,147.32.84.138,52647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:32.002370,0.000234,udp,147.32.84.138,36862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:35.469120,300.2612,tcp,147.32.84.194,1787.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,8893,7805801,432751,7373050,877.746654672214,0.055439665961251126,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:39:37.996020,0.000228,udp,147.32.84.138,40846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:42.221746,0.000171,udp,147.32.86.168,39160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:43.101019,3523.202393,udp,212.163.253.249,22421.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1844,728,1116,102.44444444444444,0.3947939262472885,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:44.443135,0.000213,udp,147.32.84.138,49910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:46.070202,0.446236,tcp,147.32.85.88,50337.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1380,836,544,138.0,0.6057971014492753,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:39:46.217250,0.000327,udp,147.32.84.138,56360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:46.660894,0.018734,tcp,147.32.84.170,50723.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:39:48.838926,0.000204,udp,147.32.84.138,47407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:52.556653,0.004048,udp,87.97.243.171,38131.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:54.870757,0.000811,udp,125.201.123.154,27863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,603,73,530,301.5,0.12106135986733002,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:55.483362,0.009079,udp,147.32.84.132,50357.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,190,74,116,95.0,0.3894736842105263,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:39:57.664747,0.000321,udp,147.32.86.20,63720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:39:59.598246,0.0,icmp,147.32.84.164,771.0,->,79.141.73.151,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,15,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:40:00.777301,0.000193,udp,147.32.85.34,56441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:00.801063,0.000581,udp,147.32.85.34,60426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:07.593704,0.000261,udp,147.32.84.138,41470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:09.158785,61.283253,tcp,147.32.84.165,3867.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:40:09.296097,0.000175,udp,147.32.84.138,46204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:10.540700,0.000356,udp,147.32.84.138,50666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:10.809367,0.000196,udp,147.32.84.170,47032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:11.031111,7.580908,tcp,147.32.84.59,57635.0,->,66.211.169.2,443.0,FSPA_FSPA,0.0,0.0,24,9814,1900,7914,408.9166666666667,0.19360097819441613,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:40:11.031307,9.243301,tcp,147.32.84.59,57636.0,->,66.211.169.2,443.0,FSRPA_FSPA,0.0,0.0,17,2428,1459,969,142.8235294117647,0.6009060955518946,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:40:16.659359,0.000337,udp,147.32.84.170,57701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:16.660408,0.018162,tcp,147.32.84.170,58527.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:18.389921,0.000298,udp,147.32.84.138,58067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:18.506044,0.0003,udp,147.32.84.138,47023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:18.506054,0.000457,udp,147.32.84.138,47023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:18.693814,0.000288,udp,147.32.84.138,44605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:18.758824,0.000346,udp,147.32.84.138,57375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:18.784825,0.000223,udp,147.32.84.138,35313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:22.237239,0.06414,tcp,147.32.84.59,59337.0,->,209.85.148.104,80.0,FSPA_FSPA,0.0,0.0,18,8532,1771,6761,474.0,0.2075714955461791,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:40:23.968770,3290.541748,udp,213.143.102.196,44282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1457,1085,372,121.41666666666667,0.7446808510638298,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:40:26.658733,0.000442,udp,147.32.84.170,41273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:30.270573,0.000174,udp,147.32.84.138,34243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:31.420298,0.06493,udp,147.32.84.229,13363.0,<->,95.79.33.104,33379.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:40:33.639223,0.000294,udp,147.32.84.59,53867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:33.694218,0.000317,udp,147.32.84.59,60239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:35.424813,0.00024,udp,147.32.84.138,39779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:36.659393,0.00063,udp,147.32.84.170,57556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:39.066483,0.000219,udp,147.32.85.25,45767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:43.361401,0.004349,udp,24.192.245.171,39282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:40:47.624412,0.000285,udp,147.32.84.138,48174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:48.932535,240.177124,tcp,147.32.84.170,36770.0,->,74.125.232.203,443.0,FSPA_FSPA,0.0,0.0,35,5690,3713,1977,162.57142857142858,0.6525483304042179,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:49.265349,2441.881104,udp,147.32.84.59,58884.0,<->,89.176.215.122,9823.0,CON,0.0,0.0,10,1152,777,375,115.2,0.6744791666666666,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:40:49.442215,0.368492,tcp,147.32.86.77,58787.0,->,174.129.28.81,80.0,FSPA_FSPA,0.0,0.0,12,2405,1649,756,200.41666666666666,0.6856548856548856,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:40:51.902865,242.198685,tcp,147.32.84.170,51877.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4786,1564,3222,154.38709677419354,0.3267864605098203,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.113143,0.000166,udp,147.32.84.170,48300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.113773,0.010607,udp,147.32.84.170,46282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.114138,0.000376,udp,147.32.84.170,48303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.116020,18.610043,tcp,147.32.84.170,40808.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.116121,18.617439,tcp,147.32.84.170,40810.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.116889,0.00027,udp,147.32.84.170,52205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,85,301,193.0,0.22020725388601037,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.124212,18.60928,tcp,147.32.84.170,49587.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.124608,18.608891,tcp,147.32.84.170,49592.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.124733,0.000496,udp,147.32.84.170,54473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,84,141,112.5,0.37333333333333335,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.126861,18.606924,tcp,147.32.84.170,33076.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.126921,18.599148,tcp,147.32.84.170,33078.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.136925,18.58894,tcp,147.32.84.170,45285.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:40:52.517402,4.427727,tcp,147.32.86.187,55355.0,->,67.201.31.160,80.0,FSPA_FSRPA,0.0,0.0,42,36692,1282,35410,873.6190476190476,0.03493949634797776,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:40:52.714340,167.322205,tcp,147.32.85.18,1328.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,112,66112,21188,44924,590.2857142857143,0.3204864472410455,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:40:53.620073,46.27216,tcp,147.32.85.18,1341.0,->,147.32.80.13,80.0,FSPA_FSRPA,0.0,0.0,82,50089,9255,40834,610.8414634146342,0.18477110742877678,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:40:56.235516,0.000812,udp,95.223.50.195,55292.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:40:57.659401,0.000197,udp,147.32.84.138,39190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:40:58.941474,0.000176,udp,147.32.84.138,44789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:03.383148,0.002583,udp,147.32.84.138,42873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:03.393926,0.000974,udp,147.32.84.138,51105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:03.402509,0.000321,udp,147.32.84.138,46421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:05.678908,0.000209,udp,147.32.85.25,37995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:06.230489,0.082326,tcp,147.32.85.123,45046.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:41:06.661543,0.018309,tcp,147.32.84.170,43355.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:07.503989,0.000492,udp,147.32.84.138,34818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:10.017217,61.28326,tcp,147.32.84.165,3868.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:41:10.956425,0.000334,udp,147.32.84.170,59645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:12.129594,0.000297,udp,147.32.84.138,39885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:16.012152,0.000338,udp,147.32.84.170,39479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:16.661901,0.018188,tcp,147.32.84.170,40256.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:16.956683,0.000261,udp,147.32.84.59,61210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,77,199,138.0,0.27898550724637683,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:19.566453,9.9e-05,udp,147.32.84.138,46109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:21.152933,0.00037,udp,147.32.84.138,46927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:21.260413,0.000529,udp,147.32.84.138,44391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:21.426601,0.000359,udp,147.32.84.59,43317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,80,177,128.5,0.311284046692607,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:21.882248,32.905888,udp,66.253.132.132,32427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,665,365,300,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:41:22.306258,0.082628,tcp,147.32.84.59,2282.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2280,1589,691,253.33333333333334,0.6969298245614035,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:41:23.060588,0.000492,udp,212.24.150.110,59749.0,->,147.32.86.155,12093.0,INT,0.0,,1,154,154,0,154.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:41:25.141704,0.000313,udp,147.32.84.138,47671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:25.366594,0.000199,udp,147.32.84.138,56522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:26.660230,0.00045,udp,147.32.84.170,56890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:26.715683,0.00016,tcp,76.164.193.171,80.0,->,147.32.85.63,62537.0,SA_,0.0,,1,62,62,0,62.0,1.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:41:30.839387,0.025928,tcp,147.32.84.59,54630.0,->,90.183.38.22,80.0,FSPA_FSPA,0.0,0.0,12,4296,1416,2880,358.0,0.329608938547486,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:41:35.704677,0.000278,udp,147.32.84.59,49366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,78,139,108.5,0.35944700460829493,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:36.661601,0.000239,udp,147.32.84.170,33580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:38.418669,0.000452,udp,147.32.86.20,63254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:39.007439,0.121529,udp,147.32.84.59,64307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:39.309446,0.000308,udp,147.32.84.59,62145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:39.955692,0.019716,udp,147.32.86.165,51770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:40.015100,0.000626,udp,147.32.85.36,48617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:40.108062,0.105958,udp,147.32.85.36,43748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,73,149,111.0,0.32882882882882886,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:43.875174,0.000242,udp,147.32.84.138,60415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:45.840027,0.000795,udp,201.191.198.43,49372.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,598,75,523,299.0,0.1254180602006689,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:41:46.660588,0.000384,udp,147.32.84.170,34904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:47.010488,0.000379,udp,147.32.84.170,35108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:51.467715,2.722692,tcp,66.249.66.10,38490.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8385,979,7406,465.8333333333333,0.11675611210494931,15,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 15:41:51.578463,0.000188,udp,147.32.84.138,51964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:51.613412,0.000242,udp,147.32.84.138,42638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:52.681221,94.855705,udp,109.170.64.106,54985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3302,3122,180,412.75,0.9454875832828589,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:41:53.469297,21.925695,udp,85.102.182.218,61389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2634,464,2170,219.5,0.17615793470007593,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:41:56.550691,0.000214,udp,147.32.84.59,52009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:56.642154,0.00031,udp,147.32.84.59,59361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:56.662584,0.00046,udp,147.32.84.170,44843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:41:57.244249,3083.873535,udp,80.250.252.23,49720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,734,548,186,122.33333333333333,0.7465940054495913,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:41:57.930711,256.209198,tcp,147.32.84.59,61131.0,->,74.125.159.120,80.0,FSPA_FSPA,0.0,0.0,11,1350,835,515,122.72727272727273,0.6185185185185185,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:41:59.341109,0.000338,udp,147.32.84.59,37696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:41:59.921455,0.000218,udp,147.32.85.26,54216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:00.111331,0.000297,udp,147.32.85.34,62282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:00.555555,0.000761,udp,159.148.1.237,61712.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,76,487,281.5,0.1349911190053286,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:01.223069,600.695496,udp,135.196.107.22,39170.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,528,384,144,132.0,0.7272727272727273,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:04.697021,0.000297,udp,147.32.84.59,52362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:05.439040,10.009358,tcp,147.32.84.134,53243.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.449646,0.000232,udp,147.32.84.134,38908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.451060,0.000688,udp,147.32.84.134,49031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.452064,20.091717,tcp,147.32.84.134,41472.0,->,66.220.158.53,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.468136,20.118759,tcp,147.32.84.134,53251.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,37,19323,1951,17372,522.2432432432432,0.10096775862961238,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.631756,0.278004,udp,110.184.117.30,5979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,182,72,127.0,0.7165354330708661,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:05.786486,47.220177,tcp,147.32.84.25,44185.0,->,140.211.15.67,80.0,FSPA_FSPA,0.0,0.0,43,19162,6903,12259,445.6279069767442,0.36024423337856176,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:42:05.836171,300.711914,tcp,147.32.84.134,39239.0,->,66.220.158.53,443.0,FSPA_FSPA,0.0,0.0,43,16140,2813,13327,375.3488372093023,0.17428748451053283,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.837637,0.011743,udp,147.32.84.134,44007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,88,233,160.5,0.27414330218068533,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.837796,0.011777,udp,147.32.84.134,35376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,87,232,159.5,0.2727272727272727,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.839051,310.037933,tcp,147.32.84.134,39241.0,->,66.220.158.53,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.843343,39.916485,tcp,147.32.84.134,33292.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4066,1160,2906,214.0,0.2852926709296606,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.849786,0.020163,udp,147.32.84.134,50321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,526,88,438,263.0,0.16730038022813687,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.853059,39.905453,tcp,147.32.84.134,50755.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.853181,39.905998,tcp,147.32.84.134,50757.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:05.853363,39.905685,tcp,147.32.84.134,50760.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:06.431517,310.025177,tcp,147.32.84.134,50764.0,->,80.239.149.11,443.0,FSRPA_FSPA,0.0,0.0,28,4256,2093,2163,152.0,0.4917763157894737,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:08.543534,0.0002,udp,147.32.84.138,33047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:08.656344,15.343606,tcp,147.32.84.59,61240.0,->,194.79.54.24,80.0,FSA_FSA,0.0,0.0,8,504,312,192,63.0,0.6190476190476191,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:09.650817,0.000274,udp,147.32.84.59,57481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:10.255796,1840.194946,udp,78.34.35.102,9122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:10.747337,0.000419,udp,147.32.84.138,51766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:10.757242,0.00026,udp,147.32.84.138,59912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:10.875491,61.301361,tcp,147.32.84.165,3869.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:42:11.794086,68.578827,tcp,203.218.140.158,51714.0,->,147.32.85.100,3126.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:42:15.672763,0.000218,udp,147.32.84.138,40203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:16.529442,0.000316,udp,147.32.84.138,55108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:16.660542,0.000342,udp,147.32.84.170,58518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:42:16.661371,0.000485,udp,147.32.84.170,34760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:42:18.012115,0.227645,tcp,147.32.84.170,59829.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:42:19.858884,0.00058,udp,147.32.86.20,57196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:20.198510,0.000154,udp,147.32.84.138,38574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:20.716640,0.000198,udp,147.32.84.138,58596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:20.981389,0.00116,udp,111.251.24.24,7806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,318,64,254,159.0,0.20125786163522014,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:21.495966,0.000365,udp,147.32.84.138,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:24.288683,0.000188,udp,147.32.84.138,36148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:24.349758,0.056685,udp,89.236.246.180,51848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,718,597,121,179.5,0.8314763231197771,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:26.311595,0.000638,udp,216.221.39.225,5876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:42:29.875759,0.000253,udp,147.32.84.138,35303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:30.807268,0.000387,udp,147.32.84.59,58815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,76,235,155.5,0.24437299035369775,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:41.278706,0.000389,udp,147.32.84.134,46733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,68,124,96.0,0.3541666666666667,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.770614,20.002575,tcp,147.32.84.134,37763.0,->,194.79.52.192,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795120,0.000391,udp,147.32.84.134,37647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795147,0.000387,udp,147.32.84.134,40103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795233,0.000385,udp,147.32.84.134,57255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795624,19.98332,tcp,147.32.84.134,49873.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795773,19.983175,tcp,147.32.84.134,49875.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.795777,19.983162,tcp,147.32.84.134,49876.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.796538,0.000495,udp,147.32.84.134,48701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.796941,19.981264,tcp,147.32.84.134,44472.0,->,62.168.44.115,80.0,FSA_FSA,0.0,0.0,11,758,404,354,68.9090909090909,0.5329815303430079,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797180,19.974411,tcp,147.32.84.134,46137.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797225,0.000474,udp,147.32.84.134,51107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797234,19.9746,tcp,147.32.84.134,46140.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797416,19.975159,tcp,147.32.84.134,46143.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797436,19.974594,tcp,147.32.84.134,46146.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.797519,19.974094,tcp,147.32.84.134,41114.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.798034,19.97456,tcp,147.32.84.134,59065.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.798037,19.974543,tcp,147.32.84.134,59066.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.798056,19.97471,tcp,147.32.84.134,59069.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.800169,0.002103,udp,147.32.84.134,50303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:41.816297,0.000214,udp,147.32.84.134,33703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.441818,0.005361,tcp,147.32.84.134,56029.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2041,1049,992,226.77777777777777,0.5139637432631063,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.498299,0.006247,tcp,147.32.84.134,40747.0,->,194.79.54.24,80.0,FSPA_FSPA,0.0,0.0,16,8457,1130,7327,528.5625,0.1336171219108431,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.913338,90.27784,tcp,147.32.84.134,46178.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,18,8194,1259,6935,455.22222222222223,0.15364901147180865,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.914259,90.277321,tcp,147.32.84.134,46179.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,17,7552,1242,6310,444.2352941176471,0.16445974576271186,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.914904,90.276947,tcp,147.32.84.134,46180.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,18,8762,1278,7484,486.77777777777777,0.14585711024880163,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.918112,0.216,tcp,147.32.84.134,40755.0,->,194.79.54.24,80.0,FSPA_FSPA,0.0,0.0,15,7192,1064,6128,479.46666666666664,0.14794215795328142,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:42.918319,0.014935,tcp,147.32.84.134,40756.0,->,194.79.54.24,80.0,FSPA_FSPA,0.0,0.0,20,11895,1310,10585,594.75,0.11013030685161833,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.009431,0.000362,udp,147.32.84.134,46372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.009435,0.002747,udp,147.32.84.134,38428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.009581,0.002829,udp,147.32.84.134,35657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.013626,0.002213,udp,147.32.84.134,43912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.013942,0.002465,udp,147.32.84.134,51246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.013946,0.000509,udp,147.32.84.134,45818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.016702,0.000352,udp,147.32.84.134,36705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.017550,0.000372,udp,147.32.84.134,44648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.023500,0.000435,udp,147.32.84.134,34794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.026817,0.000194,udp,147.32.84.134,33247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.074071,0.04985,tcp,147.32.84.134,59094.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,22,14054,1878,12176,638.8181818181819,0.13362743702860397,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:42:43.360988,0.000222,udp,147.32.84.138,40061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:45.143700,0.000216,udp,147.32.84.138,48175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:45.210237,0.000251,udp,147.32.85.25,54784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:42:46.662083,0.000374,udp,147.32.84.170,37806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:42:49.010198,0.000296,udp,147.32.84.170,42380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:42:50.084367,0.69424,tcp,147.32.84.59,4452.0,->,65.55.68.219,443.0,FSPA_FSPA,0.0,0.0,18,6912,1457,5455,384.0,0.21079282407407407,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:50.104590,240.070618,tcp,147.32.84.59,4453.0,->,74.125.232.218,443.0,FSPA_FSPA,0.0,0.0,35,4616,2540,2076,131.88571428571427,0.550259965337955,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:51.179717,242.420486,tcp,147.32.84.59,62983.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,25,3387,1828,1559,135.48,0.5397106583997638,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:53.530988,8.223589,tcp,147.32.84.59,63003.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,16,3696,1034,2662,231.0,0.27976190476190477,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:53.531256,248.217224,tcp,147.32.84.59,63007.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,21,4124,1166,2958,196.38095238095238,0.2827352085354025,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:42:59.933835,0.321138,tcp,147.32.84.59,61301.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1538,699,839,170.88888888888889,0.4544863459037711,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:43:04.030408,0.000339,icmp,147.32.87.249,,<-,147.32.87.3,2.0,RED,,0.0,2,148,0,148,74.0,0.0,15,1,flow=Background,Background,-1 2011-08-16 15:43:06.356113,0.000243,udp,147.32.84.138,60333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:06.395398,0.000172,udp,147.32.84.138,59851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:06.661201,0.000468,udp,147.32.84.170,51902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:08.415388,0.000169,udp,147.32.84.138,60987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:10.382271,0.000328,udp,147.32.85.34,58484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:11.744772,61.296749,tcp,147.32.84.165,3870.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:43:13.065317,0.000326,udp,147.32.84.138,57533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:13.085761,0.000368,udp,147.32.84.138,47300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:13.142985,0.000362,udp,147.32.84.138,56117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:13.284675,0.269295,tcp,147.32.84.170,50803.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:18.727446,0.000235,udp,147.32.84.138,51282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:20.014464,0.000268,udp,147.32.84.170,36461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:22.403200,38.73724,tcp,147.32.85.6,52581.0,->,88.86.100.129,80.0,FSPA_FSPA,0.0,0.0,59,41903,2778,39125,710.2203389830509,0.06629596926234399,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:23.117977,825.155151,udp,149.5.45.70,43023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,565,311,254,70.625,0.5504424778761062,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:23.504913,6.020708,icmp,95.25.119.97,771.0,->,147.32.84.229,14446.0,URP,0.0,,3,399,399,0,133.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:43:24.935035,0.00047,udp,147.32.84.138,36705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:25.826464,0.000699,udp,94.21.94.156,37288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,162,95,67,81.0,0.5864197530864198,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:26.495593,0.000342,udp,147.32.85.89,45757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:27.284190,349.958282,tcp,147.32.84.138,59518.0,->,89.167.251.252,80.0,FSPA_FSRPA,0.0,0.0,11,1351,693,658,122.81818181818181,0.5129533678756477,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:30.243369,0.028638,udp,147.32.84.229,13363.0,<->,131.114.60.150,24490.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:36.659559,0.000352,udp,147.32.84.170,55406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:36.660472,0.00028,udp,147.32.84.170,36768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:36.881957,8.996787,tcp,188.16.121.225,58311.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:37.380269,0.000266,udp,147.32.85.25,34357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:37.942796,0.000305,udp,147.32.84.59,34014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,74,160,117.0,0.3162393162393162,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:38.390933,13.738465,tcp,147.32.84.166,58774.0,->,213.182.181.109,80.0,FSPA_FSPA,0.0,0.0,893,868054,22043,846011,972.0649496080628,0.02539358150529806,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:39.442421,0.860158,tcp,109.179.29.144,50442.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,3,216,138,78,72.0,0.6388888888888888,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:40.404739,1260.303589,udp,147.32.84.229,13363.0,<->,77.66.156.139,49229.0,CON,0.0,0.0,4,496,372,124,124.0,0.75,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:40.610041,20.529459,tcp,147.32.85.6,52596.0,->,81.0.237.73,80.0,FSPA_FSPA,0.0,0.0,45,29228,2952,26276,649.5111111111111,0.10099904201450664,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:43:46.662742,0.000464,udp,147.32.84.170,41915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:49.298551,0.646078,udp,221.147.26.52,2740.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,657,536,121,164.25,0.8158295281582952,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:50.047971,0.000285,udp,147.32.86.20,60120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:50.666922,0.000273,udp,147.32.84.138,52610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:50.701481,19.790478,tcp,147.32.84.59,51979.0,->,209.85.148.132,80.0,FSPA_FSPA,0.0,0.0,28,16679,1588,15091,595.6785714285714,0.09520954493674681,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:43:51.005080,0.000395,udp,147.32.84.170,49189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:51.005919,0.000256,udp,147.32.84.170,35543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:51.007055,0.307701,tcp,147.32.84.170,59847.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:51.961375,0.000249,udp,147.32.84.138,57495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:53.600945,0.001995,udp,94.234.170.24,12410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:43:53.868610,0.000198,udp,147.32.84.138,53787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:43:56.659552,0.000417,udp,147.32.84.170,43898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:43:56.661670,0.018595,tcp,147.32.84.170,40283.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:00.596670,0.000264,udp,147.32.85.34,49257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:01.270466,0.000273,udp,147.32.86.192,49481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:03.167646,0.00027,udp,147.32.85.25,37997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:04.008614,0.000204,udp,147.32.86.168,45178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:04.486284,0.000796,udp,92.225.185.38,48346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,77,491,284.0,0.13556338028169015,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:05.233024,0.000925,udp,194.237.172.43,6076.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:06.661713,0.018442,tcp,147.32.84.170,50543.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:07.947044,0.047395,udp,147.32.84.59,59598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:08.752703,2710.736328,udp,147.32.84.229,13363.0,<->,188.187.29.32,12379.0,CON,0.0,0.0,8,4158,1050,3108,519.75,0.25252525252525254,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:09.638660,0.000977,udp,213.102.145.165,60444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:12.611055,61.282825,tcp,147.32.84.165,3871.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:44:13.812422,2514.392578,udp,157.200.172.181,7634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1197,887,310,119.7,0.7410192147034252,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:15.667112,3411.486816,udp,129.67.5.56,18730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1385,942,443,115.41666666666667,0.68014440433213,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:16.548351,1.777828,tcp,176.13.12.28,57662.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,11,884,546,338,80.36363636363636,0.6176470588235294,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:44:22.920081,0.0,igmp,147.32.87.4,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:44:23.646611,0.000816,udp,87.227.20.104,19704.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,73,462,267.5,0.13644859813084112,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:24.056599,0.001008,udp,89.215.226.200,52186.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,735,75,660,367.5,0.10204081632653061,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:24.194029,0.028589,udp,147.32.84.171,54137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,80,176,128.0,0.3125,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:25.574505,0.000236,udp,147.32.84.138,57292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:25.726626,18.319912,tcp,147.32.84.134,36304.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.727385,0.000255,udp,147.32.84.134,52079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.729092,18.323925,tcp,147.32.84.134,58520.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.729098,18.323532,tcp,147.32.84.134,58521.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.849703,0.000406,udp,147.32.84.134,44205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.850311,0.000263,udp,147.32.84.134,53658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.850524,0.00031,udp,147.32.84.134,46848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.852525,0.000466,udp,147.32.84.134,57835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.853645,0.000233,udp,147.32.84.134,48331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.856117,0.00044,udp,147.32.84.134,42017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.857847,0.000444,udp,147.32.84.134,53200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.858982,0.000353,udp,147.32.84.134,60755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:25.987865,123.025352,tcp,147.32.86.192,49384.0,->,77.75.72.72,80.0,FSPA_FSRPA,0.0,0.0,49,43461,3855,39606,886.9591836734694,0.08870021398495202,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:44:26.154153,0.000256,udp,147.32.84.134,43676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,79,144,111.5,0.3542600896860987,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.154814,0.000411,udp,147.32.84.134,49690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,79,245,162.0,0.24382716049382716,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.265519,0.000212,udp,147.32.84.134,35798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.411798,0.536785,udp,147.32.84.134,49340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.419299,0.282931,udp,147.32.84.134,48178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.595540,0.248619,udp,147.32.84.134,46519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.661370,0.000384,udp,147.32.84.170,45431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:26.844508,0.000502,udp,147.32.84.134,35478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.847059,0.000321,udp,147.32.84.134,51708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.848369,0.009978,udp,147.32.84.134,37527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:26.860831,0.000352,udp,147.32.84.134,51716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,72,156,114.0,0.3157894736842105,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:27.013363,115.076721,tcp,147.32.84.59,49351.0,->,74.125.232.199,80.0,FSPA_FSPA,0.0,0.0,10,2318,1336,982,231.8,0.5763589301121657,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:44:27.124767,0.113403,udp,147.32.84.134,53355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,83,147,115.0,0.36086956521739133,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:27.238625,0.00033,udp,147.32.84.134,47165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,83,147,115.0,0.36086956521739133,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:27.240933,0.136073,udp,147.32.84.134,34615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:27.377553,0.000226,udp,147.32.84.134,55637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:27.378279,0.000261,udp,147.32.84.134,48295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:29.034362,0.000256,tcp,59.53.48.226,80.0,->,147.32.85.23,10039.0,SA_R,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:44:29.947133,0.000703,udp,88.83.173.69,55020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,257,170,87,128.5,0.6614785992217899,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:34.925434,0.000443,udp,147.32.84.170,47468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:35.053869,0.000332,udp,147.32.84.134,44207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.085179,0.10199,udp,147.32.84.134,35916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,85,270,177.5,0.23943661971830985,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.187754,10.423485,tcp,147.32.84.134,36552.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,88,72527,4275,68252,824.1704545454545,0.058943565844444136,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.187759,10.423233,tcp,147.32.84.134,36553.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,20,7143,2176,4967,357.15,0.3046339073218536,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.229236,30.383949,tcp,147.32.84.134,51211.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,31,10549,3605,6944,340.2903225806452,0.3417385534173855,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.376295,0.00026,udp,147.32.84.134,52971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.377881,0.018026,udp,147.32.84.134,41952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.386433,285.38739,tcp,147.32.84.170,40047.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,7093,7132340,147428,6984912,1005.5463132666009,0.02067035503074727,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:35.396446,20.216404,tcp,147.32.84.134,38848.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,127,127119,3583,123536,1000.9370078740158,0.02818618774534098,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.399838,20.213133,tcp,147.32.84.134,38851.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,225,205176,6547,198629,911.8933333333333,0.03190919015869303,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.519751,0.000436,udp,147.32.84.134,58953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,75,247,161.0,0.2329192546583851,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.520500,0.000383,udp,147.32.84.134,47964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.521315,0.000387,udp,147.32.84.134,45934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.522345,0.00037,udp,147.32.84.134,33369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.527045,0.000395,udp,147.32.84.134,38947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,72,335,203.5,0.1769041769041769,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.528870,0.021116,udp,147.32.84.134,38504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.531402,0.000279,udp,147.32.84.134,60835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,72,335,203.5,0.1769041769041769,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.640655,0.009547,udp,147.32.84.134,36114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:35.650730,0.000302,udp,147.32.84.134,55095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:44:39.804170,0.000226,udp,147.32.85.25,57993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:41.378896,0.00024,udp,147.32.84.138,59153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:41.498443,9.4e-05,udp,147.32.84.138,35649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:41.519781,0.000252,udp,147.32.84.138,47269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:44:46.662239,0.000419,udp,147.32.84.170,42872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:49.904836,0.180085,tcp,147.32.85.88,60927.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,2819,2047,772,234.91666666666666,0.7261440227030862,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:44:50.077029,5.117268,tcp,147.32.85.88,60928.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,19,8614,1444,7170,453.36842105263156,0.1676340840492222,15,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:44:50.481704,0.719215,tcp,147.32.86.53,42717.0,->,91.203.96.252,443.0,FSPA_FSPA,0.0,0.0,25,9297,2610,6687,371.88,0.2807357212003872,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:44:53.673018,0.439641,udp,147.32.84.229,13363.0,<->,114.26.31.93,33685.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:44:56.661080,0.009907,udp,147.32.84.170,44092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:56.671516,0.000444,udp,147.32.84.170,58814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:44:57.911101,3547.013184,tcp,147.142.55.226,50257.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,2300,252140,152388,99752,109.62608695652175,0.6043785198699135,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:44:59.299378,0.000611,udp,213.131.51.62,36528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:00.384673,0.168043,udp,85.26.232.161,12652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,341,213,128,85.25,0.624633431085044,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:06.661840,0.000375,udp,147.32.84.170,60911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:45:08.486010,0.000332,udp,147.32.84.138,43233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:13.124796,8.989495,tcp,212.95.7.124,25773.0,->,147.32.84.229,443.0,SRA_SA,0.0,0.0,7,508,208,300,72.57142857142857,0.4094488188976378,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:45:13.372930,0.000402,udp,147.32.84.59,58864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,78,173,125.5,0.3107569721115538,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:13.468429,61.28389,tcp,147.32.84.165,3872.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:45:14.692580,0.000303,udp,147.32.84.59,60374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:16.661207,0.000304,udp,147.32.84.170,48237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:45:17.270994,0.335223,tcp,147.32.84.59,49846.0,->,66.199.241.180,80.0,FSPA_FSPA,0.0,0.0,10,2931,1463,1468,293.1,0.4991470487888093,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:45:17.795129,16.254278,tcp,147.32.84.134,36332.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:45:17.795650,16.25272,tcp,147.32.84.134,58547.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:45:17.795894,16.254005,tcp,147.32.84.134,36337.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:45:17.796099,16.253298,tcp,147.32.84.134,36339.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:45:18.334769,0.364559,udp,147.32.84.229,13363.0,<->,112.205.194.19,19250.0,CON,0.0,0.0,2,233,63,170,116.5,0.2703862660944206,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:18.548143,0.03798,udp,147.32.84.59,50913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,77,521,299.0,0.12876254180602006,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:18.703929,0.00025,udp,147.32.84.138,36780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:19.766666,0.000285,udp,147.32.84.138,54013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:21.135181,0.000336,udp,147.32.84.138,41773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:21.160128,0.000388,udp,147.32.84.138,41339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:21.220389,0.000257,udp,147.32.84.59,33514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:21.810104,2.191861,tcp,66.249.66.10,51802.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1189,729,460,118.9,0.6131202691337259,15,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 15:45:22.499728,52.834846,tcp,147.32.86.44,3839.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,610,464221,53712,410509,761.0180327868852,0.11570351190489013,15,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 15:45:24.013561,0.000534,udp,147.32.84.170,41159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:45:24.518306,0.048026,udp,147.32.84.229,13363.0,<->,83.255.134.168,10653.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:26.661379,0.00044,udp,147.32.84.170,35234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:45:30.827851,64.527428,tcp,147.32.84.59,54800.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,12,1866,603,1263,155.5,0.32315112540192925,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:45:35.338752,0.000316,udp,147.32.86.208,49155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:36.662375,0.000275,udp,147.32.84.170,53668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:45:41.612953,0.00055,udp,87.246.110.210,20368.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:42.115237,0.000653,udp,147.32.85.36,41409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:46.243445,0.205564,tcp,147.32.86.20,3040.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29007,1029,27978,763.3421052631579,0.035474195883752196,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:45:46.450623,0.000415,udp,147.32.84.59,35039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:49.986593,0.0,tcp,147.32.84.59,37622.0,->,178.63.29.131,38088.0,S_,0.0,,1,74,74,0,74.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:45:50.870152,0.042308,udp,147.32.84.59,48882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,76,152,114.0,0.3333333333333333,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:52.339574,0.000305,udp,147.32.85.25,46441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:52.642476,0.000571,udp,147.32.85.36,46536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,82,164,123.0,0.3333333333333333,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:52.970537,0.121216,udp,147.32.84.59,22975.0,<->,24.191.21.216,48657.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:45:52.977497,3459.554688,udp,147.32.84.229,13363.0,<->,193.10.187.26,28750.0,CON,0.0,0.0,16,1651,547,1104,103.1875,0.33131435493640216,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:45:53.227260,0.000275,udp,147.32.84.138,55409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:45:54.802594,0.003753,udp,147.32.86.6,61570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,80,190,135.0,0.2962962962962963,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:00.101804,0.0005,udp,147.32.85.34,64154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:03.615770,0.000361,udp,147.32.84.59,45939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,94,144,119.0,0.3949579831932773,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:04.237248,0.001986,udp,116.15.105.20,16524.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,515,455,60,257.5,0.883495145631068,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:04.897614,0.247006,udp,147.32.84.170,55388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:05.432372,240.877014,tcp,147.32.84.59,50591.0,->,209.85.148.147,80.0,SRPA_FSPA,0.0,0.0,23,3257,2261,996,141.6086956521739,0.6941971139085048,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:46:05.642935,0.248194,udp,147.32.84.170,54231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:05.891374,0.0004,udp,147.32.84.170,48345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:06.429698,0.000337,udp,147.32.84.138,54707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:06.662208,0.000315,udp,147.32.84.170,34237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:07.973574,0.00033,udp,147.32.84.138,45184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:10.322891,2421.36084,udp,147.32.85.8,57989.0,<->,188.115.178.213,59809.0,CON,0.0,0.0,4,272,148,124,68.0,0.5441176470588235,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:10.837244,0.000679,udp,46.165.7.154,50522.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:12.680937,0.000212,udp,147.32.84.138,54234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:14.326799,61.304176,tcp,147.32.84.165,3873.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:46:14.372904,1278.220215,udp,193.59.10.3,5892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,940,692,248,117.5,0.7361702127659574,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:18.321033,0.000482,udp,147.32.85.114,62665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,83,191,137.0,0.3029197080291971,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:18.763112,0.000176,udp,147.32.85.114,62045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:26.661082,0.000822,udp,147.32.84.170,46075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:26.662432,0.000651,udp,147.32.84.170,55999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:26.806107,0.0,tcp,118.122.178.94,24244.0,->,147.32.84.200,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.809052,0.0,tcp,118.122.178.94,24244.0,->,147.32.84.38,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.810764,0.0,tcp,118.122.178.94,24244.0,->,147.32.84.195,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.819253,0.0,tcp,118.122.178.94,24244.0,->,147.32.84.248,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.819407,0.0,tcp,118.122.178.94,24244.0,->,147.32.84.57,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.819615,0.681657,tcp,118.122.178.94,24244.0,->,147.32.84.36,22.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:46:26.839506,0.0,tcp,118.122.178.94,24244.0,->,147.32.85.212,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.860720,0.000203,tcp,118.122.178.94,24244.0,->,147.32.85.115,22.0,S_,0.0,,1,62,62,0,62.0,1.0,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:26.882432,0.000527,tcp,118.122.178.94,24244.0,->,147.32.87.251,22.0,S_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,15,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:30.327340,3064.190674,udp,93.152.186.254,33131.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:32.631130,2.656174,tcp,147.32.85.6,52611.0,->,88.86.120.93,80.0,FSPA_FSPA,0.0,0.0,19,9582,1010,8572,504.3157894736842,0.10540596952619495,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:46:32.902368,0.00055,udp,147.32.84.138,43748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:33.793253,0.015746,udp,147.32.84.59,42001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:34.541703,0.000292,udp,147.32.85.25,57659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:36.660748,0.000436,udp,147.32.84.170,46350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:36.661727,0.000363,udp,147.32.84.170,50796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:36.662773,0.018925,tcp,147.32.84.170,43708.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:38.505060,13.385322,tcp,147.32.84.59,34366.0,->,74.125.232.208,80.0,FSPA_FSPA,0.0,0.0,75,47714,5200,42514,636.1866666666666,0.10898268851909293,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:46:39.309524,0.390944,tcp,147.32.84.123,36329.0,->,74.125.232.209,80.0,FSPA_FSPA,0.0,0.0,31,18954,2756,16198,611.4193548387096,0.14540466392318244,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:46:39.889036,0.0,tcp,61.160.213.49,6000.0,->,147.32.84.251,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:39.894900,0.0,icmp,147.32.85.89,2563.0,->,61.160.213.49,,URHPRO,0.0,,1,82,82,0,82.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:46:39.915732,0.000609,tcp,61.160.213.49,6000.0,->,147.32.87.238,1433.0,S_RA,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:39.922862,0.0,tcp,61.160.213.49,6000.0,->,147.32.86.125,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:39.929522,0.0,tcp,61.160.213.49,6000.0,->,147.32.86.223,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:46:44.028229,0.000967,udp,128.118.170.10,13920.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,586,86,500,293.0,0.14675767918088736,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:46.659685,0.000437,udp,147.32.84.170,47088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:46.661997,0.0189,tcp,147.32.84.170,43749.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:48.391410,0.000323,udp,147.32.84.138,51645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:49.907627,0.000305,udp,147.32.84.138,52785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:49.978643,0.000709,udp,125.192.146.21,30040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:50.469361,123.023193,tcp,147.32.84.59,34807.0,->,74.125.232.217,80.0,FSPA_FSPA,0.0,0.0,15,5721,3485,2236,381.4,0.6091592378954728,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:46:50.992651,0.000256,udp,147.32.84.138,33352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:46:56.098975,0.000626,udp,83.149.46.134,55257.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:46:56.662462,0.018333,tcp,147.32.84.170,42072.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:46:57.948710,15.664085,tcp,94.113.242.66,62043.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,3219,3299782,64687,3235095,1025.0953712333023,0.01960341622567794,15,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 15:46:58.761284,0.00235,udp,147.32.85.114,52582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,71,170,120.5,0.2946058091286307,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:02.851775,2862.546387,udp,147.32.84.229,13363.0,<->,58.3.188.88,14380.0,CON,0.0,0.0,4,673,145,528,168.25,0.21545319465081725,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:04.501455,49.441746,tcp,147.32.84.59,51215.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,23,4988,3060,1928,216.8695652173913,0.6134723336006416,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:47:05.785322,0.000362,udp,147.32.84.138,59963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:06.661125,0.000304,udp,147.32.84.170,34284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:06.662185,0.018457,tcp,147.32.84.170,42074.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:07.253615,0.000312,udp,147.32.84.138,59908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:07.270457,0.000207,udp,147.32.84.138,53552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:07.302463,0.000486,udp,147.32.84.138,43373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:07.323262,0.000375,udp,147.32.84.138,45394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:10.022127,0.000858,udp,193.227.184.1,59861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:10.110256,10.295724,udp,147.32.84.94,7103.0,->,213.97.63.133,7251.0,INT,0.0,,3,252,252,0,84.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:47:10.838234,0.000283,udp,147.32.84.138,37596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:12.867878,2425.768555,udp,147.32.84.229,13363.0,<->,93.103.218.179,55657.0,CON,0.0,0.0,6,789,206,583,131.5,0.26108998732572875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:14.230520,0.000274,udp,147.32.84.138,33248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:14.478485,1028.746338,udp,147.32.84.229,13363.0,<->,95.30.132.154,47777.0,CON,0.0,0.0,6,4115,3050,1065,685.8333333333334,0.741190765492102,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:15.205769,61.296967,tcp,147.32.84.165,3874.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:47:16.663243,0.000275,udp,147.32.84.170,34980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:23.218954,598.897278,rtp,96.39.187.110,40297.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,4216,1060,3156,421.6,0.2514231499051233,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:24.345496,0.000301,udp,147.32.84.138,60638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:24.600817,0.000457,udp,147.32.84.138,33080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:26.661614,0.000571,udp,147.32.84.170,36460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:28.013022,0.250899,tcp,147.32.84.170,51539.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:29.605582,0.000145,udp,147.32.84.138,39118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:30.653918,2702.001953,udp,147.32.87.7,427.0,->,195.113.44.15,1122.0,REQ,0.0,,8,880,880,0,110.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:47:30.798805,3020.271973,udp,123.3.227.18,63559.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:36.661074,0.0003,udp,147.32.84.170,49181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:36.662108,0.018724,tcp,147.32.84.170,60440.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:37.880014,3231.98999,udp,147.32.84.229,13363.0,<->,46.107.65.214,2610.0,CON,0.0,0.0,10,673,373,300,67.3,0.5542347696879644,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:38.975242,0.021981,tcp,147.32.86.15,1410.0,->,77.75.73.21,80.0,FSPA_FSPA,0.0,0.0,12,3458,801,2657,288.1666666666667,0.2316367842683632,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:47:39.043699,0.000389,udp,147.32.86.15,50331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,75,144,109.5,0.3424657534246575,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:39.411450,0.000468,udp,147.32.84.138,49249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:39.963684,0.00065,udp,109.205.32.10,45028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:40.629881,17.556353,tcp,147.32.84.59,50602.0,->,147.32.235.130,80.0,FSA_FSA,0.0,0.0,8,504,246,258,63.0,0.4880952380952381,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:47:41.680457,0.000358,udp,147.32.84.138,47176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:43.664923,0.000207,udp,147.32.85.25,44119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:48.591882,0.00024,udp,147.32.84.138,34525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:48.770566,0.000295,udp,147.32.85.25,54912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:50.113785,0.000289,udp,147.32.84.138,59791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:54.905561,0.000268,udp,147.32.84.138,57563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:47:55.351193,0.000877,udp,178.239.231.224,23227.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:47:56.663557,0.019322,tcp,147.32.84.170,60442.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:47:58.283307,3478.568115,udp,147.32.84.94,7103.0,<->,176.9.23.170,55012.0,CON,0.0,0.0,535,447236,9774,437462,835.9551401869159,0.02185423355901582,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:48:01.503575,0.000267,udp,147.32.84.59,59373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:01.629380,11.747947,tcp,147.32.84.59,2611.0,->,173.194.1.17,80.0,FSA_FSA,0.0,0.0,7,482,276,206,68.85714285714286,0.5726141078838174,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:48:06.662061,0.000382,udp,147.32.84.170,58669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:12.497226,0.000379,udp,147.32.86.20,53764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:12.594080,0.000249,udp,147.32.84.138,33604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:13.315519,0.685936,tcp,147.32.84.170,40785.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:13.613718,0.000212,udp,147.32.84.138,56139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:16.072236,61.298943,tcp,147.32.84.165,3875.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:48:16.661277,0.000338,udp,147.32.84.170,37200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:16.662340,0.019431,tcp,147.32.84.170,43734.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:21.312301,0.000861,udp,188.20.36.78,65222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:48:26.085997,0.000365,udp,147.32.85.25,55880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:28.302511,364.58609,tcp,147.32.84.59,52110.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,493,313543,35160,278383,635.9898580121704,0.11213772911530476,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:48:28.943320,0.466592,tcp,147.32.86.6,51130.0,->,147.32.87.54,2222.0,_FSPA,,0.0,128,8822,0,8822,68.921875,0.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:48:29.980684,0.000306,udp,147.32.86.165,64226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:32.324724,0.350941,tcp,67.195.111.228,47238.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1516,720,796,151.6,0.47493403693931396,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:48:32.643999,0.000222,udp,147.32.84.138,51936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:35.134140,0.000298,udp,147.32.84.138,34533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:35.161735,0.000311,udp,147.32.84.138,48959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:35.169525,0.000284,udp,147.32.84.138,57898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:35.197092,0.000297,udp,147.32.84.138,53057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:35.265290,0.000352,udp,147.32.84.138,42858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:36.660732,0.000323,udp,147.32.84.170,41262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:37.826068,0.000203,udp,147.32.84.138,44136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:38.529007,2426.283203,udp,147.32.84.59,23176.0,<->,62.63.83.225,6316.0,CON,0.0,0.0,4,268,144,124,67.0,0.5373134328358209,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:48:44.344244,0.000296,udp,147.32.84.138,39268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:45.354012,126.19313,tcp,147.32.84.123,48421.0,->,74.125.232.217,80.0,FSPA_FSPA,0.0,0.0,118,85137,11101,74036,721.5,0.13038984225424904,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:48:45.355479,0.000295,udp,147.32.84.138,35544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:45.847263,3080.901123,udp,147.32.84.229,13363.0,<->,95.26.167.180,51710.0,CON,0.0,0.0,6,408,225,183,68.0,0.5514705882352942,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:48:46.660829,0.000505,udp,147.32.84.170,48048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:48:49.008619,0.000266,udp,147.32.84.216,55052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:54.105327,0.000487,udp,147.32.84.138,57498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:48:54.621098,18.781342,tcp,147.32.84.59,2748.0,->,92.123.64.195,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:48:55.577094,0.333867,tcp,147.32.86.20,3175.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,32301,1089,31212,787.829268292683,0.033714126497631655,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:48:58.280004,0.00031,udp,147.32.85.6,53231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:00.807879,0.000235,udp,147.32.84.59,37954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:01.016928,0.224761,tcp,147.32.84.170,51564.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:04.362820,0.000285,udp,147.32.84.138,51286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:08.309166,0.000228,udp,147.32.85.25,56047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:08.487070,0.000212,udp,147.32.85.25,53255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:13.511745,0.278354,udp,147.32.84.229,13363.0,<->,186.206.67.30,11478.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:14.096925,0.000738,udp,178.140.105.174,59407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:16.031698,0.000786,udp,77.78.8.129,20059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,73,479,276.0,0.1322463768115942,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:16.096764,0.000666,udp,46.31.75.2,62969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:16.662350,0.000346,udp,147.32.84.170,53025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:16.815271,0.000525,udp,147.32.84.59,34889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:16.941063,61.282963,tcp,147.32.84.165,3876.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:49:17.422226,0.338877,udp,147.32.84.229,13363.0,<->,183.182.82.25,33033.0,CON,0.0,0.0,5,5283,60,5223,1056.6,0.011357183418512209,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:20.515585,0.250011,udp,147.32.84.59,50264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:22.117522,3015.722168,udp,82.38.18.153,36516.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:24.812437,0.001068,udp,217.76.2.129,2679.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,73,473,273.0,0.1336996336996337,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:25.427179,0.000331,udp,147.32.84.138,56329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:26.663114,0.018236,tcp,147.32.84.170,60467.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:29.082243,2.353602,tcp,66.249.66.71,55150.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,10,1131,688,443,113.1,0.6083112290008842,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:49:29.618686,0.000694,udp,212.156.175.46,22207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,77,490,283.5,0.13580246913580246,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:32.012344,0.0004,udp,147.32.84.170,58664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:35.037471,0.364297,udp,95.103.235.133,12007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,717,597,120,179.25,0.8326359832635983,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:36.662182,0.000514,udp,147.32.84.170,45954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:36.663351,0.017733,tcp,147.32.84.170,60469.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:37.916883,0.000236,udp,147.32.84.138,54428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:43.012738,0.00045,udp,147.32.84.138,39969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:44.099037,0.000388,udp,147.32.84.138,41228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:46.660981,0.000396,udp,147.32.84.170,41738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:46.661933,0.000368,udp,147.32.84.170,36446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:46.941894,0.028443,udp,147.32.84.229,13363.0,<->,134.76.75.248,54833.0,CON,0.0,0.0,2,594,75,519,297.0,0.12626262626262627,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:49:47.209250,0.000421,udp,147.32.85.7,47764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:48.336463,0.00024,udp,147.32.85.7,45692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:54.357000,0.002234,udp,147.32.85.7,48429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,78,211,144.5,0.2698961937716263,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:54.500633,0.008812,tcp,147.32.85.7,52887.0,->,88.86.101.3,80.0,FSPA_FSPA,0.0,0.0,10,1587,797,790,158.7,0.5022054190296156,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:49:55.765915,0.000295,udp,147.32.85.25,50219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:49:56.671493,0.000385,udp,147.32.84.170,54086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:49:58.944626,2219.128906,udp,41.189.57.58,16689.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:00.116223,0.00027,udp,147.32.85.34,52126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:00.151379,0.000252,udp,147.32.85.34,63325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:00.176118,0.000247,udp,147.32.85.34,49370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:03.013845,0.000261,udp,147.32.84.170,55424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:03.813246,0.000278,udp,147.32.85.6,62057.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:04.036515,0.002604,udp,147.32.85.6,50316.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:06.662183,0.000479,udp,147.32.84.170,56198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:06.663428,0.018479,tcp,147.32.84.170,43789.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:07.066996,9.002363,tcp,147.32.84.59,61197.0,->,194.108.204.19,9100.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:50:07.210095,2429.263916,udp,96.231.163.193,23925.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1599,1419,180,266.5,0.8874296435272045,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:12.556587,0.000522,udp,147.32.85.6,50585.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,221,81,140,110.5,0.3665158371040724,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:12.752222,0.000906,udp,78.141.181.221,34050.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,89,468,278.5,0.15978456014362658,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:13.624125,8.591212,tcp,147.32.85.7,57460.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,11,3239,1284,1955,294.45454545454544,0.3964186477307811,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:50:16.662057,0.000399,udp,147.32.84.170,58933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:16.663251,0.018127,tcp,147.32.84.170,42112.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:16.684333,0.0,icmp,146.185.18.252,2563.0,->,147.32.85.67,,URHPRO,0.0,,1,90,90,0,90.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:50:17.798795,61.283089,tcp,147.32.84.165,3877.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:50:18.641643,0.000861,udp,79.55.250.154,28495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:19.154336,0.000565,udp,147.32.84.138,53707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:23.743568,0.000202,udp,147.32.84.138,40703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:25.715388,3000.118164,tcp,147.32.84.59,57757.0,,147.32.192.34,993.0,PA_PA,0.0,0.0,18,1824,1110,714,101.33333333333333,0.6085526315789473,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:50:26.215239,0.018176,udp,147.32.85.8,35107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:26.349033,0.000388,udp,147.32.85.8,56356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:26.661453,0.000349,udp,147.32.84.170,50085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:26.662322,0.000371,udp,147.32.84.170,55059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:27.376507,0.261163,tcp,147.32.84.59,57038.0,->,68.64.26.250,80.0,FSA_FSA,0.0,0.0,6,366,246,120,61.0,0.6721311475409836,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:50:27.459799,16.602806,tcp,147.32.84.59,61980.0,->,46.234.99.9,80.0,FSPA_FSPA,0.0,0.0,46,27390,6742,20648,595.4347826086956,0.2461482292807594,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:50:28.554687,0.000216,udp,147.32.84.138,43710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:30.555237,0.000232,udp,147.32.85.123,52294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:34.339726,0.000249,udp,147.32.84.138,51916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:34.548905,0.000287,udp,147.32.84.138,42290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:34.614913,0.000275,udp,147.32.84.138,55918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:35.924883,0.000228,udp,147.32.84.138,38716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:36.662836,0.01854,tcp,147.32.84.170,56844.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:50:37.498002,0.000241,udp,147.32.84.138,50073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:42.740705,0.000252,udp,147.32.84.59,36871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,84,139,111.5,0.37668161434977576,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:43.728306,0.998309,tcp,147.32.87.36,139.0,?>,147.32.86.171,4671.0,RA_,0.0,,6,360,360,0,60.0,1.0,15,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:50:43.733042,1.018982,tcp,147.32.87.36,139.0,?>,147.32.87.252,4672.0,RA_,0.0,,6,360,360,0,60.0,1.0,15,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:50:45.312677,0.000176,udp,147.32.84.138,60788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:50.318728,3074.963623,udp,212.45.79.26,36389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,680,380,300,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:52.384077,88.273994,tcp,147.32.86.17,1310.0,->,194.79.52.199,80.0,SRPA_SPA,0.0,0.0,77,69963,6633,63330,908.6103896103896,0.09480725526349643,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:50:53.004146,0.000236,udp,147.32.84.138,33181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:54.328279,0.15042,tcp,147.32.86.183,58143.0,->,195.168.10.171,80.0,SRPA_FSPA,0.0,0.0,44,47180,1638,45542,1072.2727272727273,0.034718100890207715,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:50:57.564547,620.462402,udp,147.32.84.194,36146.0,<->,24.210.129.145,30421.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:58.311955,0.02071,udp,147.32.86.179,50135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,553,83,470,276.5,0.15009041591320071,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:50:58.514779,3030.184082,rtp,147.32.84.229,13363.0,<->,95.89.93.230,46128.0,CON,0.0,0.0,8,3300,212,3088,412.5,0.06424242424242424,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:50:59.084298,18.688852,tcp,147.32.84.59,49288.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:01.534978,0.028612,udp,147.32.84.229,13363.0,<->,149.13.32.90,33033.0,CON,0.0,0.0,2,559,76,483,279.5,0.13595706618962433,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:01.833412,8.857982,tcp,147.32.84.59,49321.0,->,193.74.68.160,80.0,FSPA_FSPA,0.0,0.0,40,32827,1593,31234,820.675,0.04852712706004204,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:02.220888,244.987274,tcp,147.32.84.59,50616.0,->,74.125.232.196,443.0,SRPA_FSPA,0.0,0.0,27,4485,1183,3302,166.11111111111111,0.263768115942029,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:03.831406,0.000383,udp,147.32.84.171,33917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,72,132,102.0,0.35294117647058826,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:03.866181,0.000197,udp,147.32.84.59,55551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:04.333040,0.002486,udp,147.32.84.59,50210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,74,386,230.0,0.1608695652173913,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:05.014104,0.000306,udp,147.32.84.170,53767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:05.015007,0.000324,udp,147.32.84.170,45854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:05.016334,0.249177,tcp,147.32.84.170,46542.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:05.152068,0.000428,udp,147.32.84.138,43125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.005262,0.000323,udp,147.32.84.138,51699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.014547,0.000353,udp,147.32.84.138,50994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,83,205,144.0,0.2881944444444444,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.027497,0.000324,udp,147.32.84.138,48958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,83,205,144.0,0.2881944444444444,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.028126,0.000336,udp,147.32.84.138,38063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.042938,0.000299,udp,147.32.84.138,43358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,83,205,144.0,0.2881944444444444,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.082516,0.000263,udp,147.32.84.138,40930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,83,205,144.0,0.2881944444444444,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:06.661971,0.000413,udp,147.32.84.170,60538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:06.663145,0.018342,tcp,147.32.84.170,57399.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:07.288812,0.000775,udp,83.228.183.138,63511.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:08.167700,0.000214,udp,147.32.85.25,51446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:10.027082,0.000818,udp,87.142.175.135,46092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:10.910019,0.000242,udp,147.32.84.138,33847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:13.141846,0.000187,udp,147.32.84.138,52548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:14.776107,302.99472,tcp,147.32.84.59,49485.0,->,195.113.232.81,80.0,FSPA_FSPA,0.0,0.0,22,2724,1923,801,123.81818181818181,0.7059471365638766,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:14.864635,0.121848,udp,147.32.84.59,61082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,73,118,95.5,0.38219895287958117,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:15.384120,0.022137,udp,147.32.86.187,61985.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,334,81,253,167.0,0.24251497005988024,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:16.412399,0.223201,udp,147.32.84.59,33556.0,<->,75.6.216.127,61964.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:16.661990,0.000448,udp,147.32.84.170,52300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:16.866245,0.000123,udp,147.32.84.138,34361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:18.068793,9.441984,udp,147.32.86.165,12114.0,->,77.8.64.247,61523.0,INT,0.0,,3,465,465,0,155.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:51:18.657375,61.298492,tcp,147.32.84.165,3878.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:51:18.713439,0.00028,udp,147.32.84.138,45711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:19.595262,378.182251,tcp,147.32.84.59,49515.0,->,74.125.232.220,80.0,FSPA_FSRPA,0.0,0.0,64,22976,14451,8525,359.0,0.6289606545961003,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:51:19.889033,0.000314,udp,147.32.84.138,59635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:20.068155,1058.344238,udp,195.39.100.66,14476.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,857,254,603,214.25,0.29638273045507585,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:22.088188,0.000245,udp,147.32.84.59,60556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:22.179948,0.017092,udp,147.32.85.7,57202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,77,108,92.5,0.41621621621621624,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:22.595386,0.000348,udp,147.32.84.138,59993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:22.611404,0.000244,udp,147.32.84.138,39865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:24.127128,0.000227,udp,147.32.85.25,51988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:25.209835,0.000269,udp,147.32.85.34,60874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,73,157,115.0,0.3173913043478261,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:28.422471,1.018734,tcp,173.239.78.78,31536.0,,147.32.84.4,22.0,PA_PA,0.0,0.0,14,4306,1648,2658,307.57142857142856,0.38272178355782627,15,1,flow=Background,Background,-1 2011-08-16 15:51:31.795335,0.000282,udp,147.32.84.138,40377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:36.663383,0.000429,udp,147.32.84.170,50166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:39.378136,0.009937,tcp,147.32.86.183,58174.0,->,77.78.109.75,80.0,FSRPA_FSPA,0.0,0.0,9,1324,848,476,147.11111111111111,0.6404833836858006,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:51:43.100880,0.133952,tcp,147.32.86.183,58177.0,->,195.168.10.171,80.0,FSRPA_FSPA,0.0,0.0,45,43600,1726,41874,968.8888888888889,0.03958715596330275,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:51:44.682507,0.000353,udp,149.5.45.253,43004.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,168,108,60,84.0,0.6428571428571429,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:44.992261,0.000641,udp,217.118.66.89,23494.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:45.759255,0.000386,udp,147.32.84.138,57255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:45.801545,0.000425,udp,147.32.84.138,59532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:45.875854,0.000334,udp,147.32.84.138,46364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:45.878840,0.000198,udp,147.32.84.138,46228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:47.579116,0.000774,udp,84.15.180.7,51055.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,682,75,607,341.0,0.10997067448680352,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:48.741342,0.000617,udp,212.118.142.84,52493.0,<->,147.32.85.26,60764.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:51:49.100360,240.147903,tcp,147.32.84.170,34472.0,->,74.125.232.192,443.0,FSPA_FSPA,0.0,0.0,37,5827,3850,1977,157.48648648648648,0.6607173502660031,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:51:49.947285,0.000145,udp,147.32.85.25,51326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:50.871815,0.000303,udp,147.32.84.138,54156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:51.082438,0.000245,udp,147.32.84.138,36248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:51.391686,0.000242,udp,147.32.87.34,37473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,88,140,114.0,0.38596491228070173,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:55.803257,0.000305,udp,147.32.84.138,45989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:55.809345,0.000272,udp,147.32.84.138,51910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:51:59.711052,3114.317383,udp,138.232.204.12,41112.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:00.564987,0.000318,udp,147.32.84.138,51431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:00.602167,0.000404,udp,147.32.85.34,63023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:00.648174,0.00039,udp,147.32.84.138,48860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:00.648856,0.00024,udp,147.32.84.138,35076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:02.710237,1925.796143,udp,201.92.202.249,22915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,836,699,137,209.0,0.8361244019138756,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:05.016739,22.700937,tcp,147.32.84.59,54872.0,->,89.187.146.39,80.0,FSPA_FSPA,0.0,0.0,52,41777,2722,39055,803.4038461538462,0.06515546831988893,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:52:05.036589,2045.814575,udp,64.30.92.167,28670.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1046,525,521,261.5,0.5019120458891013,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:11.617983,0.000376,udp,147.32.84.134,37234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:52:12.275721,0.434008,tcp,147.32.85.76,1277.0,->,67.202.94.86,80.0,FSPA_FSA,0.0,0.0,8,1206,772,434,150.75,0.6401326699834162,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:52:14.219278,0.000248,udp,147.32.84.138,37027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:14.228566,0.000258,udp,147.32.84.138,60130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:14.505745,3024.595215,udp,147.27.31.181,61247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,690,504,186,115.0,0.7304347826086957,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:15.181782,0.000306,udp,147.32.84.59,37745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:16.411099,0.504295,udp,91.77.129.218,10242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,302,242,60,151.0,0.8013245033112583,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:17.709056,0.0,udp,147.32.84.54,427.0,->,192.168.88.186,49987.0,INT,0.0,,1,351,351,0,351.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:52:19.007602,15.058799,tcp,147.32.84.59,62134.0,->,46.234.99.9,80.0,FSA_FSA,0.0,0.0,9,564,312,252,62.666666666666664,0.5531914893617021,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:52:19.050811,15.032991,tcp,147.32.84.59,62161.0,->,74.125.232.195,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:52:19.525201,61.28289,tcp,147.32.84.165,3879.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:52:21.365616,0.000224,udp,147.32.84.138,38529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:22.648070,0.000264,udp,147.32.84.138,36797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:22.675687,0.000212,udp,147.32.84.138,59239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:22.706850,0.00043,udp,147.32.84.138,53030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:22.731641,0.000353,udp,147.32.84.138,37268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:26.663609,0.000429,udp,147.32.84.170,50469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:26.664693,0.000304,udp,147.32.84.170,42274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:28.502668,0.000345,udp,147.32.85.7,40856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,80,493,286.5,0.13961605584642234,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:32.749453,0.000362,udp,147.32.84.170,58810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:33.096496,0.111653,udp,147.32.84.170,41179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:33.208600,0.019723,udp,147.32.84.170,32895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:33.229046,249.19429,tcp,147.32.84.170,59521.0,->,209.85.149.117,80.0,FSPA_FSPA,0.0,0.0,9587,8924525,217448,8707077,930.8986127047043,0.024365218316941238,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:34.621754,0.000206,udp,147.32.84.59,60957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,75,195,135.0,0.2777777777777778,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:36.665781,0.018829,tcp,147.32.84.170,37517.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:38.013609,0.000592,udp,147.32.84.170,60445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:52:38.654757,0.000201,udp,147.32.84.138,57329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:39.598058,0.000156,udp,147.32.84.138,48787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:40.287775,0.048932,udp,147.32.86.44,10966.0,<->,178.76.165.196,12958.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:40.625932,1410.201416,udp,147.32.84.229,13363.0,<->,61.216.9.84,32706.0,CON,0.0,0.0,6,3184,3064,120,530.6666666666666,0.9623115577889447,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:41.047739,0.000608,udp,203.87.203.202,33337.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:43.244328,0.062015,udp,147.32.84.229,13363.0,<->,93.72.88.84,13326.0,CON,0.0,0.0,2,539,72,467,269.5,0.13358070500927643,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:44.645872,0.496769,tcp,147.32.86.17,1445.0,->,65.55.7.141,80.0,FSPA_FSPA,0.0,0.0,10,3583,3120,463,358.3,0.8707786770862406,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:52:45.596538,86.864685,tcp,147.32.86.183,58206.0,->,95.173.214.56,80.0,SRPA_FSPA,0.0,0.0,33,21538,4719,16819,652.6666666666666,0.21910112359550563,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:52:46.603840,0.000361,udp,147.32.84.138,57255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:46.659755,0.000241,udp,147.32.84.138,52130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:49.770243,0.000899,udp,151.63.21.11,58831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,308,64,244,154.0,0.2077922077922078,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:52.031520,0.000143,udp,147.32.85.25,41724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:52.708245,3245.845947,ipv6,147.32.84.181,,<->,192.88.99.1,,CON,0.0,0.0,38,6643,3691,2952,174.81578947368422,0.5556224597320488,15,,flow=Background,Background,-1 2011-08-16 15:52:54.060884,3023.814453,udp,212.77.156.114,44778.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:52:57.482136,0.000195,udp,147.32.86.179,57556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:52:58.241398,122.609215,tcp,147.32.84.132,57929.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,159,169676,5307,164369,1067.1446540880504,0.031277257832575026,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:52:59.655052,2808.004639,icmp,94.232.233.244,771.0,->,147.32.84.229,25738.0,URP,0.0,,5,525,525,0,105.0,1.0,15,0,flow=Background,Background,-1 2011-08-16 15:53:07.581476,0.000286,udp,147.32.85.25,48259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:09.940143,955.250854,udp,147.32.84.229,13363.0,<->,94.31.138.201,29061.0,CON,0.0,0.0,10,1725,790,935,172.5,0.4579710144927536,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:11.726858,0.000785,udp,46.55.144.109,44156.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:13.025109,0.134015,udp,147.32.84.229,13363.0,<->,77.208.181.21,52497.0,CON,0.0,0.0,2,134,72,62,67.0,0.5373134328358209,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:14.310827,0.00028,udp,147.32.84.134,45031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:14.311471,0.000162,udp,147.32.84.134,57573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:14.409657,0.000263,udp,147.32.84.134,60808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:15.924683,0.00026,udp,147.32.84.134,33246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,70,163,116.5,0.30042918454935624,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.053477,10.036956,tcp,147.32.84.134,39195.0,->,77.93.218.150,80.0,FSPA_FSPA,0.0,0.0,16,5346,1838,3508,334.125,0.343808454919566,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.073996,10.016441,tcp,147.32.84.134,39200.0,->,77.93.218.150,80.0,FSPA_FSPA,0.0,0.0,37,15786,5398,10388,426.64864864864865,0.34194856201697704,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.088394,0.000266,udp,147.32.84.134,33507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,74,129,101.5,0.3645320197044335,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.112374,0.032745,tcp,147.32.84.134,37289.0,->,62.168.44.116,80.0,FSPA_FSPA,0.0,0.0,12,1974,1131,843,164.5,0.5729483282674772,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.119623,0.007258,udp,147.32.84.134,43102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,74,146,110.0,0.33636363636363636,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.123934,0.00026,udp,147.32.84.134,32788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,79,146,112.5,0.3511111111111111,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.124665,0.000374,udp,147.32.84.134,53580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,79,235,157.0,0.2515923566878981,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.126365,0.000267,udp,147.32.84.134,48647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.154915,0.000267,udp,147.32.84.134,34846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.155244,0.000344,udp,147.32.84.134,54830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.155577,0.000459,udp,147.32.84.134,60524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,532,83,449,266.0,0.15601503759398497,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.156697,319.953033,tcp,147.32.84.134,39635.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,42,12067,6193,5874,287.3095238095238,0.5132178669097539,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.156969,0.000289,udp,147.32.84.134,43709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,70,127,98.5,0.3553299492385787,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:16.157647,0.029197,udp,147.32.84.134,46765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,70,298,184.0,0.19021739130434784,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:17.853548,12.640297,tcp,147.32.84.59,49764.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:53:18.368453,0.000357,udp,147.32.84.134,59676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:18.971492,0.000631,udp,78.92.9.186,23598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:20.313397,0.000343,udp,147.32.84.134,46330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:20.383183,61.282745,tcp,147.32.84.165,3880.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:53:22.231976,803.95105,udp,95.170.177.40,7524.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,7,2062,1762,300,294.57142857142856,0.8545101842870999,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:23.588010,0.000285,udp,147.32.84.138,36597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:23.606183,0.000411,udp,147.32.84.138,57261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:24.319900,0.000357,udp,147.32.84.25,47710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:26.215318,1034.674805,udp,147.32.84.229,13363.0,<->,122.108.231.201,28865.0,CON,0.0,0.0,6,959,307,652,159.83333333333334,0.32012513034410844,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:26.663053,0.000334,udp,147.32.84.170,33632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:53:26.858124,303.453217,tcp,147.32.86.165,53774.0,->,80.239.149.26,80.0,FSPA_FSRPA,0.0,0.0,13,1657,899,758,127.46153846153847,0.5425467712733857,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:53:27.633827,0.000307,udp,147.32.86.183,54797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:28.878670,3273.899902,udp,83.244.246.242,2956.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1531,157,1374,382.75,0.10254735467015023,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:29.866997,16.224052,tcp,147.32.84.134,39211.0,->,77.93.218.150,80.0,FSPA_FSPA,0.0,0.0,37,14654,6625,8029,396.05405405405406,0.45209499112870205,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:29.950480,0.000378,udp,147.32.84.134,34694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,74,129,101.5,0.3645320197044335,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:29.951798,0.000292,udp,147.32.84.134,40528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,74,167,120.5,0.3070539419087137,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:30.028067,0.000377,udp,147.32.84.134,45957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:31.676430,0.000508,udp,147.32.84.138,34870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:31.685019,0.0,udp,192.168.88.79,50229.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,15,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:53:31.780291,0.000176,udp,147.32.84.138,38001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:32.866724,0.02716,tcp,147.32.84.134,36772.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,1923,1220,703,160.25,0.6344253770150806,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:32.890373,0.000254,udp,147.32.84.134,43189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:32.891152,0.000606,udp,147.32.84.134,52799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:53:33.345725,3568.892578,tcp,92.69.141.3,49173.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,247,24098,14276,9822,97.56275303643724,0.5924143082413478,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:53:35.372758,0.000694,udp,189.30.62.216,60166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:35.423532,36.213928,tcp,147.32.84.59,55832.0,->,74.125.39.116,80.0,FSPA_FSPA,0.0,0.0,12,3740,1821,1919,311.6666666666667,0.4868983957219251,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:53:36.202557,0.00062,udp,99.235.78.69,17898.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:40.015918,0.24008,tcp,147.32.84.170,46575.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:53:43.986825,0.000246,udp,147.32.84.138,54495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:46.665373,0.00028,udp,147.32.84.170,47722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:53:47.434752,0.120804,udp,147.32.84.229,13363.0,<->,178.74.85.236,42106.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:49.421995,6.032749,udp,147.32.84.229,13363.0,->,94.45.181.42,48935.0,INT,0.0,,3,207,207,0,69.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:53:49.678613,0.000294,udp,147.32.84.138,53132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:50.608567,58.745827,tcp,147.32.85.30,52486.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,68,41441,17106,24335,609.4264705882352,0.4127796143915446,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:53:50.654307,3481.806641,udp,109.228.176.124,44772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2123,1065,1058,265.375,0.5016486104569006,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:53:51.813860,0.0004,udp,147.32.84.59,64544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:54.808570,0.000552,udp,147.32.84.59,40411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:53:59.088124,3022.36377,udp,95.133.198.204,26746.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:02.423241,0.000668,udp,69.130.92.229,56890.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:08.429759,0.000357,udp,147.32.84.138,34689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:09.165040,3080.110352,udp,95.59.75.234,42071.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:10.134077,0.0,tcp,147.32.84.59,58909.0,->,78.46.52.245,443.0,S_,0.0,,1,74,74,0,74.0,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:54:10.572599,0.000231,udp,147.32.85.25,51859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:11.014062,0.000447,udp,147.32.84.170,44189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:13.884253,0.000316,udp,147.32.85.30,59741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,80,164,122.0,0.32786885245901637,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:16.664149,0.000384,udp,147.32.84.170,58248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:16.665082,0.000311,udp,147.32.84.170,36783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:17.553019,2932.858643,udp,147.32.84.94,7103.0,->,95.25.152.162,7486.0,INT,0.0,,16,1120,1120,0,70.0,1.0,15,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 15:54:21.241109,61.283581,tcp,147.32.84.165,3881.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:54:23.351277,0.000686,udp,193.85.202.210,8169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:26.665677,0.018289,tcp,147.32.84.170,52632.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:27.494708,2688.306152,udp,173.97.224.30,34203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,19,3067,2449,618,161.42105263157896,0.7985001630257581,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:28.390751,387.018951,udp,78.83.131.105,5110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,481,357,124,120.25,0.7422037422037422,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:54:28.548062,5.668081,tcp,147.32.85.26,60384.0,->,77.93.206.35,80.0,FSPA_FSPA,0.0,0.0,27,16413,1787,14626,607.8888888888889,0.10887710960823738,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:54:32.810124,0.337269,tcp,147.32.84.59,51301.0,->,67.195.186.236,80.0,FSPA_FSPA,0.0,0.0,9,1820,978,842,202.22222222222223,0.5373626373626373,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:54:33.991376,0.000107,udp,147.32.84.138,50669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:34.310299,0.000443,udp,147.32.84.138,44516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:34.401912,6.703406,tcp,66.249.72.237,39380.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,40,23070,1961,21109,576.75,0.08500216731686172,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:54:36.663780,0.000317,udp,147.32.84.170,35019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:36.664684,0.000285,udp,147.32.84.170,40551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:54:42.043313,0.000205,udp,147.32.84.138,33552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:47.983386,0.000415,udp,147.32.84.19,60906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,72,286,179.0,0.2011173184357542,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:48.856355,0.000415,udp,147.32.84.59,61699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:49.565033,0.000417,udp,147.32.84.186,51548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:51.416516,0.000157,udp,147.32.84.138,39968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:55.135894,0.000322,udp,147.32.84.138,59390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:54:57.087326,0.000727,udp,147.32.84.134,39907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:54:58.681409,0.0,tcp,50.23.113.205,40000.0,->,147.32.86.125,64372.0,SA_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:54:59.664443,11.691182,tcp,147.32.84.59,4673.0,->,208.81.234.106,80.0,FSA_FSA,0.0,0.0,6,366,246,120,61.0,0.6721311475409836,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:55:04.038214,5e-06,icmp,147.32.86.96,,<-,147.32.87.47,30023.0,ECR,,0.0,2,196,0,196,98.0,0.0,15,0,flow=Background,Background,-1 2011-08-16 15:55:04.221886,0.000203,udp,147.32.84.138,60943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:05.540954,145.623947,tcp,147.32.85.6,52836.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,96,69198,6650,62548,720.8125,0.09610104338275673,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:55:06.259354,0.000328,udp,147.32.85.6,53710.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,221,76,145,110.5,0.3438914027149321,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:06.278406,0.234734,udp,147.32.85.6,51884.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,469,79,390,234.5,0.16844349680170576,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:06.670604,3315.528564,udp,147.32.84.229,13363.0,<->,129.97.81.56,44403.0,CON,0.0,0.0,6,771,217,554,128.5,0.2814526588845655,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:08.717393,0.000814,udp,62.2.97.66,40580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,173,74,123.5,0.7004048582995951,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:08.810989,0.000266,udp,147.32.84.138,60534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:09.563533,0.070136,udp,147.32.85.30,61070.0,<->,88.184.38.110,17226.0,CON,0.0,0.0,2,136,75,61,68.0,0.5514705882352942,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:13.011270,0.308117,tcp,147.32.84.170,46588.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:16.569167,0.000343,udp,147.32.84.216,34292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:16.664254,0.000651,udp,147.32.84.170,33798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:16.665413,0.000326,udp,147.32.84.170,42701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:16.666481,0.017941,tcp,147.32.84.170,37549.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:16.760667,0.000709,udp,92.104.234.3,62676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:17.006227,0.000279,udp,147.32.84.19,54949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,78,232,155.0,0.25161290322580643,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:17.274557,0.00028,udp,147.32.84.19,39007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,374,73,301,187.0,0.19518716577540107,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:17.279492,0.000329,udp,147.32.84.19,51355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,81,236,158.5,0.2555205047318612,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:20.840619,0.000642,udp,203.101.73.51,38982.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:21.670144,0.000242,udp,147.32.84.138,34895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:21.675339,0.000378,udp,147.32.84.59,54187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:21.693876,0.000258,udp,147.32.84.138,46176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:22.100074,61.288525,tcp,147.32.84.165,3882.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:55:22.565707,0.000435,udp,147.32.84.59,57248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:25.283460,0.000265,udp,147.32.84.138,40777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:26.664838,0.000576,udp,147.32.84.170,41690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:27.086406,0.000267,udp,147.32.84.138,53927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:29.126450,0.000357,udp,147.32.86.165,50711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:29.659186,0.000337,udp,147.32.86.20,51884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:31.040967,1.272004,tcp,147.32.86.165,53810.0,->,173.194.1.24,80.0,FSPA_FSPA,0.0,0.0,1286,1479462,19030,1460432,1150.4370139968896,0.012862783903878572,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:55:31.392287,0.000712,udp,93.16.199.179,47727.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,75,481,278.0,0.13489208633093525,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:55:31.464848,0.076947,tcp,147.32.84.19,54956.0,->,147.32.80.7,25.0,FSPA_FSPA,0.0,0.0,77,55873,53088,2785,725.6233766233767,0.9501548153848908,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:55:32.101841,0.000306,udp,147.32.84.138,57873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:33.918208,0.002816,udp,147.32.85.8,45423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:36.664231,0.000322,udp,147.32.84.170,53098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:42.385407,0.000246,udp,147.32.84.138,34655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:43.364715,0.000347,udp,147.32.84.138,39607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:46.663917,0.000315,udp,147.32.84.170,55736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:46.664723,0.000368,udp,147.32.84.170,42612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:46.665834,0.018902,tcp,147.32.84.170,54080.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:55:46.974351,0.000194,udp,147.32.84.59,54922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,93,143,118.0,0.3940677966101695,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:51.318850,0.006145,tcp,147.32.85.26,60473.0,->,88.86.101.2,80.0,SRPA_FSPA,0.0,0.0,9,1459,773,686,162.11111111111111,0.5298149417409185,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:55:52.723106,0.001912,udp,147.32.85.8,54682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:55:55.756539,0.087364,tcp,147.32.84.59,40642.0,->,74.125.232.215,443.0,FSPA_FSPA,0.0,0.0,17,4781,1849,2932,281.2352941176471,0.3867391759046225,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:55:56.433860,0.000209,tcp,113.105.171.58,80.0,->,147.32.86.28,4707.0,SA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:56:00.228398,0.000276,udp,147.32.85.25,33597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:00.509249,0.000241,udp,147.32.84.138,46831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:00.681138,0.000293,udp,147.32.85.34,58309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:02.854378,0.001796,udp,147.32.85.6,56917.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:03.359809,0.00024,udp,147.32.84.138,58490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:03.364417,0.000186,udp,147.32.84.138,58625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:03.386284,0.000242,udp,147.32.84.138,37726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:05.448304,8.999763,tcp,147.32.84.59,62532.0,->,192.18.6.130,993.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,15,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:56:06.506973,0.000229,udp,147.32.84.138,42796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:06.664583,0.000326,udp,147.32.84.170,37613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:56:06.665677,0.01855,tcp,147.32.84.170,33880.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:56:09.761928,0.00036,udp,147.32.84.138,33202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:12.316509,0.00036,udp,147.32.84.138,46005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:12.378503,0.00029,udp,147.32.84.138,42873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:12.778977,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,40677.0,URP,0.0,,1,70,70,0,70.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:56:13.483601,0.000309,udp,147.32.84.138,33644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:16.100909,0.000282,udp,147.32.84.138,37331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:16.860890,0.155039,udp,24.104.71.126,48089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,692,157,535,173.0,0.22687861271676302,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:56:17.798496,0.000396,udp,147.32.84.138,47318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:21.200933,0.000243,udp,147.32.84.138,35056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:21.219488,0.000449,udp,147.32.84.138,45088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:22.956334,61.300766,tcp,147.32.84.165,3883.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:56:25.412649,63.950672,tcp,147.32.85.8,58943.0,->,92.123.64.120,80.0,SRA_FSPA,0.0,0.0,8,958,338,620,119.75,0.35281837160751567,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:56:25.987258,0.000374,udp,147.32.84.59,62245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,456,95,361,228.0,0.20833333333333334,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:29.006184,0.000393,udp,147.32.84.138,40086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:29.026114,0.000201,udp,147.32.84.138,44162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:29.082466,0.000362,udp,147.32.84.138,59580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:29.105189,0.000256,udp,147.32.84.138,38815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:29.868385,0.021586,udp,147.32.87.238,1121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,78,173,125.5,0.3107569721115538,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:30.307687,1851.756958,tcp,147.32.85.125,42688.0,->,195.113.232.90,80.0,FSPA_FSRPA,0.0,0.0,36,9936,1333,8603,276.0,0.13415861513687602,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:56:31.179987,0.000189,udp,147.32.84.138,57240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:31.314796,0.137961,udp,147.32.84.59,35153.0,<->,24.57.165.238,57245.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:56:32.224625,0.21273,udp,147.32.86.50,62151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,80,132,106.0,0.37735849056603776,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:38.868902,0.000343,udp,147.32.84.138,52932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:38.879963,0.000228,udp,147.32.84.138,43749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:38.930307,0.000271,udp,147.32.84.138,60987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:39.097825,260.365082,tcp,147.32.84.132,57960.0,->,66.77.174.59,80.0,FSPA_FSPA,0.0,0.0,59,28151,17590,10561,477.135593220339,0.6248445881140989,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:56:41.311281,0.000227,udp,147.32.84.138,51025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:43.753106,8.992138,tcp,180.34.209.129,50454.0,->,147.32.86.58,48784.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:56:44.270635,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,29121.0,URP,0.0,,1,70,70,0,70.0,1.0,15,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 15:56:44.721710,0.102486,udp,147.32.84.59,64996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,79,157,118.0,0.3347457627118644,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:45.447653,0.097255,tcp,147.32.84.59,54316.0,->,188.121.36.239,80.0,FSPA_FSPA,0.0,0.0,14,4027,774,3253,287.64285714285717,0.1922026322324311,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:56:48.044442,0.238807,udp,147.32.84.59,55314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,73,132,102.5,0.35609756097560974,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:48.954227,0.000342,udp,147.32.84.138,34868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:48.976179,0.000248,udp,147.32.84.138,45685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:55.830282,0.099888,tcp,147.32.84.59,40659.0,->,74.125.232.215,443.0,FSPA_FSPA,0.0,0.0,17,4993,1912,3081,293.70588235294116,0.38293611055477667,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:56:56.666080,0.01768,tcp,147.32.84.170,59947.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:56:57.999819,6.165261,udp,147.32.84.229,13363.0,<->,24.156.251.77,48268.0,CON,0.0,0.0,4,282,222,60,70.5,0.7872340425531915,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:56:58.019247,0.000316,udp,147.32.84.138,57040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:58.081895,0.000238,udp,147.32.84.138,41839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:58.110475,0.00033,udp,147.32.84.138,33651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:56:59.775484,0.000483,udp,147.32.84.59,61755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,84,320,202.0,0.2079207920792079,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:01.113802,8.999161,tcp,78.92.48.145,35541.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:57:01.716808,0.0,tcp,50.23.113.205,40000.0,->,147.32.84.82,34368.0,SA_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:57:05.374306,0.079831,udp,147.32.84.59,59523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,82,228,155.0,0.2645161290322581,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:05.599776,0.00037,udp,147.32.84.138,58784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:05.623284,0.000355,udp,147.32.84.138,54172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:05.660965,0.000212,udp,147.32.84.138,50432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:11.778996,0.000341,udp,147.32.84.138,41073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:13.591648,0.00033,udp,147.32.84.138,54864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:14.040755,0.000509,udp,147.32.84.138,51847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:14.126547,0.000245,udp,147.32.84.138,35973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:16.664371,0.0003,udp,147.32.84.170,37620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:16.665398,0.01821,tcp,147.32.84.170,59293.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:16.725442,0.000745,udp,217.253.27.219,54726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:57:18.221172,0.999254,tcp,147.32.87.36,445.0,?>,147.32.86.171,4685.0,RA_,0.0,,6,360,360,0,60.0,1.0,15,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:57:18.790786,0.0,icmp,146.185.18.252,2563.0,->,147.32.86.89,,URHPRO,0.0,,1,90,90,0,90.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:57:19.234813,1.013551,tcp,147.32.87.36,139.0,?>,147.32.87.252,4688.0,RA_,0.0,,6,360,360,0,60.0,1.0,15,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 15:57:20.349081,0.480224,udp,31.140.31.74,17407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,170,71,120.5,0.7053941908713693,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:57:21.221932,0.000334,udp,147.32.84.138,56173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:21.252385,0.000245,udp,147.32.84.138,58163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:21.266605,0.00031,udp,147.32.84.138,38697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:21.314428,0.000307,udp,147.32.84.138,56349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:21.344406,0.000284,udp,147.32.84.138,60276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:23.824879,61.298523,tcp,147.32.84.165,3884.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:57:26.663750,0.019271,tcp,147.32.84.170,59295.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:26.822386,0.000255,udp,147.32.84.138,43625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:26.898054,0.000348,udp,147.32.84.138,42175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:26.947730,0.000393,udp,147.32.84.138,57150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:28.748381,0.000337,tcp,121.11.80.162,6000.0,->,147.32.84.152,1433.0,S_RA,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.756915,0.0,tcp,121.11.80.162,6000.0,->,147.32.84.11,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.756923,0.0,tcp,121.11.80.162,6000.0,->,147.32.84.162,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.765347,0.0,tcp,121.11.80.162,6000.0,->,147.32.85.27,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.771537,0.0,tcp,121.11.80.162,6000.0,->,147.32.85.158,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.807176,9.9e-05,tcp,121.11.80.162,6000.0,->,147.32.87.30,1433.0,S_RA,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.811788,0.00041,tcp,121.11.80.162,6000.0,->,147.32.87.124,1433.0,S_RA,0.0,0.0,2,120,60,60,60.0,0.5,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.812190,0.0,tcp,121.11.80.162,6000.0,->,147.32.87.172,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.812194,0.0,tcp,121.11.80.162,6000.0,->,147.32.87.247,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:28.815796,0.0,tcp,121.11.80.162,6000.0,->,147.32.87.202,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,15,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 15:57:34.877576,0.000194,udp,147.32.84.138,46226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:34.881918,0.000222,udp,147.32.84.138,34366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:34.965397,0.000234,udp,147.32.84.138,48780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:35.002489,0.000383,udp,147.32.84.138,37961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:36.663851,0.000402,udp,147.32.84.170,56049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:38.618438,0.441042,tcp,218.254.94.159,64179.0,->,147.32.87.238,39371.0,SR_SA,0.0,0.0,3,216,138,78,72.0,0.6388888888888888,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:57:38.844696,0.000174,udp,147.32.84.138,41619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:39.804818,18.761032,tcp,147.32.84.59,50736.0,->,69.63.190.22,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:57:41.239333,0.000189,udp,147.32.84.138,47238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:42.921087,0.000196,udp,147.32.84.138,44325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:43.051506,0.000195,udp,147.32.84.138,50758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:44.107040,23.689732,tcp,147.32.84.59,49786.0,->,188.40.70.132,80.0,FSPA_FSPA,0.0,0.0,16,8020,990,7030,501.25,0.12344139650872818,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:57:46.666887,0.018508,tcp,147.32.84.170,33893.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:48.006253,0.000564,udp,147.32.84.170,36807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:48.007415,0.232042,tcp,147.32.84.170,39778.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:57:49.170387,0.158201,udp,147.32.84.229,13363.0,<->,75.34.27.109,54121.0,CON,0.0,0.0,2,613,78,535,306.5,0.1272430668841762,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:57:49.772474,0.000298,udp,147.32.84.138,57017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:49.823138,0.000233,udp,147.32.84.138,45753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:49.826324,0.000412,udp,147.32.84.138,58056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:51.636042,6.24755,tcp,66.249.72.153,41394.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,24,12986,1137,11849,541.0833333333334,0.08755582935468967,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:57:54.244004,0.000237,udp,147.32.84.138,58374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:57.603324,0.000388,udp,147.32.84.138,57126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:57.672289,0.000174,udp,147.32.84.138,41808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:57.803878,0.000238,udp,147.32.84.138,41923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:57:59.935334,0.000369,udp,147.32.85.8,43977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:00.169020,0.000278,udp,147.32.85.34,60748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:00.217838,0.000353,udp,147.32.85.34,55308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:05.965967,0.000187,udp,147.32.84.138,39668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:06.156970,0.000316,udp,147.32.84.59,64592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:06.664179,0.000428,udp,147.32.84.170,44215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:08.360459,0.000304,udp,147.32.84.138,46487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:08.745344,0.000477,udp,147.32.84.59,55552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:08.780660,0.000538,udp,117.192.184.192,31662.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,1,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:11.499954,0.000315,udp,147.32.84.138,36691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:11.524842,0.000452,udp,147.32.84.138,52003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:12.242917,0.000314,udp,147.32.84.138,53826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:12.308001,0.000212,udp,147.32.84.138,55734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:13.282959,0.258355,tcp,147.32.84.170,46543.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:13.340478,0.419363,tcp,147.32.84.170,40703.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:13.533557,0.301939,tcp,147.32.84.170,46545.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:13.810841,0.000262,udp,147.32.84.138,36546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:14.043401,240.046997,tcp,147.32.84.170,41508.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:16.050457,0.031747,udp,147.32.84.59,65424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,80,134,107.0,0.37383177570093457,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:16.663635,0.000327,udp,147.32.84.170,42370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:18.523580,0.000166,udp,147.32.84.138,34519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:18.538403,0.000243,udp,147.32.84.138,48239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:18.546576,0.000234,udp,147.32.84.138,41930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:18.644499,0.000246,udp,147.32.84.138,51203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:18.746548,0.000271,udp,147.32.84.138,58779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:20.681837,2501.104492,udp,31.152.19.199,40786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2244,304,1940,280.5,0.1354723707664884,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:22.379951,0.000175,udp,147.32.84.138,57367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:23.533069,15.540769,tcp,147.32.84.123,45736.0,->,88.208.118.155,80.0,FSPA_FSPA,0.0,0.0,37,16090,8857,7233,434.86486486486484,0.5504661280298322,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:58:24.692860,61.284218,tcp,147.32.84.165,3885.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:58:26.863219,0.475218,udp,147.32.84.181,49827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,80,180,130.0,0.3076923076923077,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:26.949218,5.978911,tcp,66.249.72.233,37340.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1100,655,445,110.0,0.5954545454545455,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:58:27.563750,0.000522,udp,147.32.84.138,56811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:27.578488,0.000165,udp,147.32.84.138,49704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:27.598260,0.000275,udp,147.32.84.138,54603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:27.668518,0.0002,udp,147.32.84.138,36904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:30.222307,0.00207,udp,147.32.84.59,17315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:32.760299,0.000457,udp,147.32.84.181,64123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,393,77,316,196.5,0.19592875318066158,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:33.341288,0.00031,udp,147.32.84.138,36878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:35.678992,127.786774,tcp,147.32.84.59,46015.0,->,74.125.232.223,443.0,SPA_FSPA,0.0,0.0,48,33493,2907,30586,697.7708333333334,0.08679425551607799,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:58:35.920764,0.000168,udp,147.32.84.138,34895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:35.921294,0.0002,udp,147.32.84.138,56615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:35.995897,0.000305,udp,147.32.84.138,60053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:36.666011,0.019013,tcp,147.32.84.170,43389.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:38.751554,0.215218,tcp,147.32.84.59,53364.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1572,695,877,196.5,0.44211195928753183,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:58:39.791894,0.000299,udp,147.32.84.138,45134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:39.830809,0.000231,udp,147.32.84.138,49717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:39.877610,0.000305,udp,147.32.84.138,55480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:39.882513,0.000315,udp,147.32.84.138,57050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:41.666095,0.000685,udp,98.207.68.209,55480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:42.634464,0.000224,udp,147.32.85.7,34101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:43.613513,0.000271,udp,147.32.84.181,57216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:44.036833,0.000236,udp,147.32.84.138,49788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:45.167079,0.000705,udp,147.32.84.138,39391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:45.186907,0.0005,udp,147.32.84.138,36342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:45.238264,0.000292,udp,147.32.84.138,36452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:45.238859,0.000265,udp,147.32.84.138,54354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:45.358750,3527.455566,udp,110.132.76.67,62096.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2030,1222,808,126.875,0.6019704433497537,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:46.666131,0.017501,tcp,147.32.84.170,36780.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:47.203823,0.000277,udp,147.32.84.138,45895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:48.398385,0.02473,udp,147.32.84.59,54061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:48.527811,0.00019,udp,147.32.84.59,61808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,87,192,139.5,0.3118279569892473,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:48.926069,0.307309,udp,147.32.84.229,13363.0,<->,61.124.68.52,60392.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:49.671441,0.265674,tcp,147.32.84.59,48485.0,->,67.201.31.64,80.0,FSPA_FSPA,0.0,0.0,55,37443,2901,34542,680.7818181818182,0.07747776620463104,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:58:50.014634,0.000532,udp,147.32.84.170,49874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:50.016326,0.299014,tcp,147.32.84.170,39799.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:50.380586,2426.239502,udp,147.32.84.229,13363.0,<->,75.111.38.224,49184.0,CON,0.0,0.0,8,1385,333,1052,173.125,0.2404332129963899,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:52.892724,0.00024,udp,147.32.84.138,45414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:52.950040,0.000306,udp,147.32.84.138,53847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:54.136079,0.000268,udp,147.32.84.138,36610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:54.379999,65.668465,tcp,147.32.86.53,39590.0,->,216.129.112.93,80.0,FSPA_FSPA,0.0,0.0,10,1891,1195,696,189.1,0.6319407720782655,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:58:55.393564,0.00038,udp,147.32.84.138,57046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:58:56.664614,0.000287,udp,147.32.84.170,38752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:58:57.330904,900.033081,udp,147.32.84.229,13363.0,<->,68.9.86.186,37289.0,CON,0.0,0.0,6,3570,3450,120,595.0,0.9663865546218487,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:58:58.870334,0.376184,udp,147.32.84.229,13363.0,<->,59.115.226.177,22390.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:00.961638,0.00032,udp,147.32.84.138,59554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:00.979325,0.000194,udp,147.32.84.138,41084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:01.379667,0.000569,udp,147.32.84.134,53500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,15,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 15:59:01.468294,0.000254,udp,147.32.84.138,56248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:03.001644,0.000316,udp,147.32.84.138,36759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:03.425705,0.000263,udp,147.32.84.138,37043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:03.730665,0.000319,udp,147.32.84.179,55680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:04.748060,0.000249,udp,147.32.84.138,51028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:08.221203,0.000367,udp,147.32.84.138,53343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:08.300663,0.000313,udp,147.32.84.138,44652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:08.309901,0.000395,udp,147.32.84.138,40794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:08.322215,0.000293,udp,147.32.84.138,57499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:10.540961,0.000195,udp,147.32.84.138,33669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:12.850836,0.000445,udp,147.32.84.59,53064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:14.660214,0.000662,udp,85.151.204.150,59237.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:14.757724,0.000256,udp,147.32.84.59,39771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,81,320,200.5,0.20199501246882792,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:16.815012,0.019949,udp,147.32.86.179,50836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,625,83,542,312.5,0.1328,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:17.633733,0.923635,tcp,88.101.237.173,12692.0,->,147.32.87.54,2222.0,FSPA_FSPA,0.0,0.0,122,8368,4384,3984,68.59016393442623,0.5239005736137667,15,0,flow=Background-TCP-Established,Background,-1 2011-08-16 15:59:19.286765,0.000372,udp,147.32.84.138,36955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:21.013420,0.000271,udp,147.32.84.170,44831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:59:22.591966,3.578938,tcp,147.32.84.59,53180.0,->,193.202.110.155,80.0,FSPA_FSPA,0.0,0.0,14,4644,1006,3638,331.7142857142857,0.21662360034453057,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:59:23.150527,0.0,igmp,147.32.87.4,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,15,,flow=Background,Background,-1 2011-08-16 15:59:23.323153,0.000656,udp,147.32.84.138,38727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:23.332787,2.924681,tcp,147.32.84.59,53184.0,->,193.202.110.155,80.0,FSPA_FSPA,0.0,0.0,20,11829,1211,10618,591.45,0.10237551779524896,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:59:23.504654,0.000372,udp,147.32.84.138,44226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:23.544248,0.000386,udp,147.32.84.138,34370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:23.546794,0.000334,udp,147.32.84.138,54406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:25.053319,0.000276,udp,147.32.85.7,40349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:25.552057,61.281425,tcp,147.32.84.165,3886.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,15,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 15:59:26.661111,0.000143,udp,147.32.84.138,34451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:26.666030,0.018188,tcp,147.32.84.170,43396.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:59:29.163627,0.000704,udp,216.80.47.237,61876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,80,480,280.0,0.14285714285714285,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:29.209818,0.000817,udp,90.183.218.1,50191.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,76,479,277.5,0.13693693693693693,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:29.689154,0.000386,udp,147.32.84.138,45867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:29.739733,0.000289,udp,147.32.84.138,60892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:29.747888,0.066382,udp,147.32.84.59,16838.0,<->,78.106.225.227,30905.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,15,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:59:32.101376,0.00021,udp,147.32.84.164,50494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,15,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 15:59:32.880934,0.000307,udp,147.32.84.138,33136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:32.881471,0.000275,udp,147.32.84.138,59650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:33.012816,0.000349,udp,147.32.84.138,58575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:33.543770,0.003755,tcp,147.32.84.59,4723.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2044,1049,995,227.11111111111111,0.5132093933463796,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:59:35.724079,0.000629,udp,38.104.173.154,4265.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,664,75,589,332.0,0.11295180722891567,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:35.758079,0.000205,udp,147.32.84.138,33213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:35.855484,0.000237,udp,147.32.84.138,49137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:35.863889,0.000317,udp,147.32.84.138,56076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:35.865780,0.000191,udp,147.32.84.138,42858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:39.667177,0.000254,udp,147.32.84.138,43902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:40.479016,0.00029,udp,147.32.84.138,34426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:40.537065,0.00028,udp,147.32.84.138,52505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:40.562875,0.000184,udp,147.32.84.138,44273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:40.870013,0.000227,udp,147.32.84.138,48601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:44.202186,0.577239,tcp,147.32.85.7,53987.0,->,66.228.45.231,80.0,FSPA_FSPA,0.0,0.0,142,127677,4404,123273,899.1338028169014,0.03449329166568763,15,1,flow=Background-TCP-Established,Background,-1 2011-08-16 15:59:47.140608,0.000248,udp,147.32.84.138,36125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:47.164976,0.000279,udp,147.32.84.138,54525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:47.186374,0.000442,udp,147.32.84.138,53141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:47.256194,0.0003,udp,147.32.84.138,44821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:51.013802,0.000285,udp,147.32.84.170,46180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:59:51.175058,0.201721,tcp,147.32.84.59,50907.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,9,1861,1244,617,206.77777777777777,0.6684578183772165,15,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 15:59:55.660551,0.000243,udp,147.32.84.138,39194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:55.684147,0.000386,udp,147.32.84.138,44560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:55.695908,0.000338,udp,147.32.84.138,42752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,15,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 15:59:56.675768,0.018128,tcp,147.32.84.170,59984.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,15,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 15:59:58.704848,2413.849121,udp,151.62.32.223,51740.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,490,366,124,122.5,0.746938775510204,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 15:59:59.204833,2663.793701,udp,212.114.253.35,13175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,15,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:00:00.230371,0.000753,udp,147.32.86.20,59004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:00.743322,0.000452,udp,147.32.85.34,50045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:01.195787,1800.046997,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,2,120,0,120,60.0,0.0,16,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:00:02.290417,0.000211,udp,147.32.84.138,43770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:02.569270,0.000662,udp,176.44.110.126,40445.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:00:02.592452,0.000287,udp,147.32.84.138,58847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:03.782963,19.957613,tcp,147.32.84.59,61436.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:00:06.665894,0.017878,tcp,147.32.84.170,59985.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:06.860171,0.000397,udp,147.32.84.171,36746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:09.523855,0.000199,udp,147.32.84.138,35844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:09.575696,0.000249,udp,147.32.84.138,57335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:09.929827,0.000173,udp,147.32.84.138,49105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:10.022723,0.00026,udp,147.32.87.36,35274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:00:10.491269,3467.162109,udp,147.32.84.229,13363.0,<->,85.134.85.41,63472.0,CON,0.0,0.0,10,770,358,412,77.0,0.4649350649350649,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:00:15.877940,5.423316,tcp,117.55.250.216,17739.0,->,147.32.84.2,80.0,FSRPA_SPA,0.0,0.0,115,103871,3741,100130,903.2260869565217,0.03601582732427723,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:00:16.645776,0.000223,udp,147.32.85.89,49289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:16.664574,0.000393,udp,147.32.84.170,43037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:17.693512,0.000266,udp,147.32.84.138,50325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:17.800543,0.000295,udp,147.32.84.138,55956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:21.166413,0.000435,udp,147.32.84.138,34060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:22.016301,0.000278,udp,147.32.84.170,43943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:23.144580,0.000212,udp,147.32.84.138,40909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:23.396112,0.002182,udp,147.32.84.59,60815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:23.401009,65.078323,tcp,147.32.84.59,50928.0,->,80.239.149.18,80.0,SRPA_FSPA,0.0,0.0,19,8047,1406,6641,423.5263157894737,0.17472349944078538,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:00:25.346084,0.018061,udp,147.32.84.59,48763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,462,76,386,231.0,0.1645021645021645,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:25.758707,0.00033,udp,147.32.84.138,50243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:26.408183,61.299122,tcp,147.32.84.165,3887.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:00:26.664544,0.000315,udp,147.32.84.170,35344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:27.887610,8.81419,tcp,66.249.72.233,58074.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,21,8942,1279,7663,425.8095238095238,0.1430328785506598,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:00:28.095941,0.187799,udp,140.203.154.12,7883.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,269,185,84,134.5,0.6877323420074349,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:00:28.988665,0.000401,udp,147.32.84.138,35511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:28.992943,0.000331,udp,147.32.84.138,51799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:29.003690,0.000347,udp,147.32.84.138,43954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:29.036732,0.000253,udp,147.32.84.138,34077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:29.075263,0.000349,udp,147.32.84.138,54461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:29.105856,0.000329,udp,147.32.84.138,42347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:31.728450,0.000262,udp,147.32.84.138,43292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:32.874849,66.610054,tcp,147.32.85.8,40429.0,->,66.228.45.231,80.0,FSA_FSA,0.0,0.0,9,610,338,272,67.77777777777777,0.5540983606557377,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:00:34.793204,0.00029,udp,147.32.85.8,44750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,75,158,116.5,0.3218884120171674,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:35.690670,1.082749,tcp,174.54.12.112,64213.0,->,147.32.85.101,80.0,FSPA_FSPA,0.0,0.0,34,27807,1441,26366,817.8529411764706,0.05182148379904341,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:00:36.664759,0.000394,udp,147.32.84.170,59865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:36.805112,0.00019,udp,147.32.84.134,34367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.260851,10.355265,tcp,147.32.84.134,36366.0,->,69.63.181.12,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.647446,0.003633,udp,147.32.84.134,60757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,88,380,234.0,0.18803418803418803,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.647702,310.046173,tcp,147.32.84.134,44720.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,31,6905,1504,5401,222.74193548387098,0.2178131788559015,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.651773,39.921394,tcp,147.32.84.134,50735.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.660894,0.00179,udp,147.32.84.134,42230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,87,381,234.0,0.1858974358974359,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.670128,39.903835,tcp,147.32.84.134,33925.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.670404,39.903957,tcp,147.32.84.134,33928.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.676837,0.038017,udp,147.32.84.134,43377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,88,486,287.0,0.15331010452961671,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.679968,0.002273,udp,147.32.84.134,38449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,628,87,541,314.0,0.13853503184713375,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:37.715880,39.857964,tcp,147.32.84.134,40732.0,->,92.123.68.112,443.0,SRPA_FSPA,0.0,0.0,17,3057,1066,1991,179.8235294117647,0.3487078835459601,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:38.502941,110.046234,tcp,147.32.84.134,50755.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,36,14698,3648,11050,408.27777777777777,0.24819703361001497,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:39.521223,0.000192,udp,147.32.84.138,57105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:39.528748,0.000298,udp,147.32.84.138,45358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:39.550300,0.000274,udp,147.32.84.138,36003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:39.555469,739.138062,tcp,147.32.84.134,44745.0,->,66.220.153.15,443.0,FSPA_FSPA,0.0,0.0,289,180766,40756,140010,625.4878892733564,0.22546275295132934,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:39.586960,0.000326,udp,147.32.84.138,53575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:39.654248,0.000223,udp,147.32.84.138,45237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:39.757447,80.482246,tcp,147.32.84.134,46325.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:39.758323,79.042374,tcp,147.32.84.134,46329.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:00:40.194595,0.000354,udp,147.32.84.138,35783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:41.434733,0.000261,udp,147.32.84.138,36875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:42.484726,0.000254,udp,147.32.86.20,49855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:42.542924,6.008597,tcp,66.249.72.233,50293.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1158,714,444,115.8,0.616580310880829,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:00:42.813030,0.000339,udp,147.32.84.138,56569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:43.005448,0.000314,udp,147.32.84.138,45909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:43.960353,0.000173,udp,147.32.84.138,38715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:46.664522,0.000281,udp,147.32.84.170,43635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:46.665550,0.018367,tcp,147.32.84.170,60671.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:46.726789,0.000347,udp,147.32.84.138,35716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:46.776922,0.000246,udp,147.32.84.138,57322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:49.549122,0.000249,udp,147.32.84.138,55408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:49.570593,0.000254,udp,147.32.84.138,34621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:49.574037,0.000444,udp,147.32.84.138,56734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:49.604563,0.000213,udp,147.32.84.138,33288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:49.684562,0.000274,udp,147.32.84.138,60833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:52.258967,0.000427,udp,126.192.7.74,26912.0,<->,147.32.86.183,51246.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:00:53.016109,0.000321,udp,147.32.84.170,47531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:00:53.172411,0.367389,tcp,147.32.84.59,62863.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1535,699,836,170.55555555555554,0.4553745928338762,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:00:54.110155,0.027436,udp,147.32.86.92,37270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,85,188,136.5,0.31135531135531136,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:54.390843,0.000241,udp,147.32.84.138,40105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:54.432695,0.000212,udp,147.32.84.138,59644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:54.443827,0.000235,udp,147.32.84.138,50081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:56.318042,35.596825,tcp,147.32.84.59,54391.0,->,72.233.44.59,80.0,FSPA_FSPA,0.0,0.0,11,2561,888,1673,232.8181818181818,0.34673955486138225,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:00:57.128655,0.000328,udp,147.32.84.138,46291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:57.179363,0.000251,udp,147.32.84.138,49280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.450195,0.00035,udp,147.32.84.138,46883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.482514,0.000258,udp,147.32.84.138,44491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.513405,0.000224,udp,147.32.84.138,36847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.515297,0.000322,udp,147.32.84.138,51686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.619014,0.000303,udp,147.32.84.138,36401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:00:59.981366,17.793076,tcp,147.32.84.59,49822.0,->,74.125.232.220,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:01:01.862144,0.000218,udp,147.32.84.138,55968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:02.183306,0.000361,udp,147.32.84.138,41414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:02.210359,0.000259,udp,147.32.84.138,44612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:02.320914,0.000265,udp,147.32.84.138,45034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:02.342851,0.000321,udp,147.32.84.138,51950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:03.241115,0.00089,udp,147.32.85.84,47441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:03.655081,0.000206,udp,147.32.84.134,58050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:01:03.781703,0.699278,udp,94.46.240.168,49904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,276,194,82,138.0,0.7028985507246377,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:04.456231,0.000226,udp,147.32.84.138,37853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:04.481665,2292.045166,udp,147.32.84.229,13363.0,<->,69.125.156.154,19318.0,CON,0.0,0.0,4,318,198,120,79.5,0.6226415094339622,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:04.762195,2623.302002,udp,147.32.84.94,7103.0,->,71.40.217.114,7428.0,INT,0.0,,16,1344,1344,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:01:05.233629,0.000347,udp,147.32.84.138,50925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:05.255535,0.000492,udp,147.32.84.138,41328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:05.294582,0.000438,udp,147.32.84.138,39208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:05.302179,0.000501,udp,147.32.84.138,59549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:05.386114,0.35263,udp,147.32.84.229,13363.0,<->,114.47.199.128,42701.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:05.644599,0.00047,udp,147.32.84.134,58566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:01:05.645819,240.259384,tcp,147.32.84.134,46481.0,->,74.125.232.193,443.0,SPA_FSPA,0.0,0.0,30,4865,1471,3394,162.16666666666666,0.30236382322713257,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:01:06.663545,0.000848,udp,147.32.84.170,43255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:06.666319,0.018384,tcp,147.32.84.170,54168.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:08.087134,0.000299,udp,147.32.84.138,55710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:08.113751,0.000275,udp,147.32.84.138,38208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:11.033534,0.000306,udp,147.32.84.138,50627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:12.154071,0.000446,udp,147.32.84.138,40221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:14.402742,84.223251,tcp,147.32.87.238,2641.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,280,149351,32622,116729,533.3964285714286,0.21842505239335525,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:01:14.538149,1466.375732,udp,82.43.194.149,33938.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,992,744,248,124.0,0.75,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:15.529218,0.000287,udp,147.32.84.138,52657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:16.123419,0.00052,udp,147.32.84.134,53701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:01:16.151936,0.000242,udp,147.32.84.138,53506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:16.227950,0.00023,udp,147.32.84.138,49548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:18.406230,0.000573,udp,147.32.84.138,44510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:18.434916,0.000319,udp,147.32.84.138,55129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:21.313957,0.000291,udp,147.32.84.138,39595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:21.330512,0.000307,udp,147.32.84.138,45663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:21.370516,0.000466,udp,147.32.84.138,43485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:21.382208,0.000209,udp,147.32.84.138,60420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:21.580702,0.018211,udp,147.32.84.59,41985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,503,82,421,251.5,0.16302186878727634,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:22.360940,0.0,igmp,147.32.87.15,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:01:23.429894,0.000327,udp,147.32.84.138,38007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:23.450998,0.000273,udp,147.32.84.138,51911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:24.342395,0.000526,udp,147.32.84.59,60212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,83,499,291.0,0.14261168384879724,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:25.022330,0.000288,udp,147.32.84.59,50526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:25.034005,0.000217,udp,147.32.84.138,52390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:25.392095,0.027789,tcp,147.32.86.74,1923.0,->,90.183.38.22,80.0,FSPA_FSPA,0.0,0.0,12,2743,1419,1324,228.58333333333334,0.5173168064163325,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:01:25.491719,0.000551,udp,147.32.84.138,37105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:25.514589,0.000318,udp,147.32.84.138,48225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:25.621528,0.000352,udp,147.32.84.138,37853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:26.357466,0.000303,udp,147.32.86.20,52463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:26.665307,0.000762,udp,147.32.84.170,57543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:27.277137,61.29261,tcp,147.32.84.165,3888.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:01:28.155474,0.000233,udp,147.32.84.138,48964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:28.925771,0.21773,tcp,147.32.84.59,53382.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1573,695,878,196.625,0.4418308963763509,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:01:30.238363,11.973729,tcp,147.32.84.59,55964.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:01:30.402551,0.000256,udp,147.32.84.138,45106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:30.457057,0.000334,udp,147.32.84.138,43746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:30.500098,0.000336,udp,147.32.84.138,58734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:31.414616,3.260286,udp,147.32.84.229,13363.0,<->,111.251.192.46,44831.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:32.319133,0.000285,udp,147.32.84.138,33556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:32.349393,0.000208,udp,147.32.84.138,50416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:32.354878,0.000334,udp,147.32.84.138,59574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:32.391401,0.000612,udp,147.32.84.138,54691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:32.934281,0.000617,udp,147.32.84.138,60760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:34.250138,3319.981201,udp,212.164.80.194,38438.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,4439,3084,1355,277.4375,0.6947510700608245,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:35.374382,0.070141,udp,147.32.84.59,63913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,77,126,101.5,0.3793103448275862,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:35.436547,0.000206,udp,147.32.84.138,46679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:35.830358,0.000353,udp,147.32.84.138,40219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:35.895893,0.00024,udp,147.32.84.138,35855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:35.924900,0.000266,udp,147.32.84.138,33889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.036383,0.000293,udp,147.32.84.138,55611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.087981,0.000401,udp,147.32.84.138,51117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.108442,0.000319,udp,147.32.84.138,58519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.119476,0.000317,udp,147.32.84.138,41064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.123058,0.000291,udp,147.32.84.138,40249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.240950,0.000341,udp,147.32.84.138,54310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:38.966459,0.000292,udp,147.32.84.138,57386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:41.004384,0.00043,udp,147.32.84.138,45589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:41.011908,0.0005,udp,147.32.84.138,51095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:41.102055,0.000273,udp,147.32.84.138,60127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:41.344670,0.00021,udp,147.32.84.138,39896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:41.634505,97.014084,tcp,147.32.84.59,46522.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,15,5009,2470,2539,333.93333333333334,0.4931123976841685,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:01:41.657578,0.000209,udp,147.32.85.89,55055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:42.409325,3056.455566,udp,108.18.14.34,50099.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:43.726651,3.51447,tcp,147.32.84.59,52928.0,->,134.2.143.121,21185.0,FSPA_FSPA,0.0,0.0,18,1387,759,628,77.05555555555556,0.5472242249459265,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:01:46.054624,0.000271,udp,147.32.84.138,56396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.069084,0.000278,udp,147.32.85.25,41572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.095285,0.000265,udp,147.32.84.138,54298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.116816,0.000266,udp,147.32.84.138,56450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.130703,0.000304,udp,147.32.84.138,35987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.172098,0.000332,udp,147.32.84.138,48584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:46.665042,0.000445,udp,147.32.84.170,39061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:46.666097,0.000346,udp,147.32.84.170,37495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:49.821467,422.822968,udp,147.32.84.94,7103.0,<->,77.58.229.51,7140.0,CON,0.0,0.0,32,18097,1122,16975,565.53125,0.06199922639111455,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:01:52.065802,0.000383,udp,147.32.84.138,59018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:01:54.999557,0.000385,udp,147.32.84.170,43975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:01:56.667592,0.020216,tcp,147.32.84.170,51109.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:01.528366,0.000307,udp,147.32.85.25,45649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:02.041985,0.000374,udp,147.32.86.74,65018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:02.835328,0.000632,udp,147.32.84.59,49443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,76,145,110.5,0.3438914027149321,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:08.135327,0.023179,udp,147.32.84.59,56629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,443,84,359,221.5,0.18961625282167044,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:12.091462,0.000317,udp,147.32.84.138,37518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:12.097788,0.000619,udp,147.32.84.138,48052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:13.658451,2485.974365,udp,95.97.5.10,61386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,670,272,398,83.75,0.4059701492537313,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:02:14.984893,0.0,tcp,72.46.129.147,80.0,->,147.32.86.31,57935.0,SA_,0.0,,1,62,62,0,62.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:15.161873,0.273841,tcp,147.32.84.59,52377.0,->,63.246.7.157,80.0,SRPA_FSPA,0.0,0.0,11,2989,1063,1926,271.72727272727275,0.3556373369019739,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:02:16.194026,0.000274,udp,147.32.84.138,56718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:16.447290,0.00038,udp,147.32.84.59,62780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,366,83,283,183.0,0.226775956284153,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:16.914197,0.0,tcp,174.127.86.151,80.0,->,147.32.87.111,17181.0,SA_,0.0,,1,60,60,0,60.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:18.644462,0.247643,udp,147.32.84.170,57007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:19.637991,0.000364,udp,147.32.84.170,45544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:19.639354,240.151871,tcp,147.32.84.170,52839.0,->,74.125.232.202,443.0,FSPA_FSPA,0.0,0.0,37,5821,3844,1977,157.32432432432432,0.6603676344270744,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:22.656948,0.000331,udp,147.32.85.37,50482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:22.835466,0.000544,udp,217.228.121.207,1894.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:02:23.588397,1823.171021,udp,125.54.232.78,10948.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:02:24.824752,0.021919,udp,147.32.84.59,64517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,81,188,134.5,0.30111524163568776,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:26.015796,0.000323,udp,147.32.84.170,40513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:26.230645,6.82408,tcp,147.32.85.37,3794.0,->,12.130.81.249,80.0,SPA_FSRPA,0.0,0.0,9,1690,760,930,187.77777777777777,0.44970414201183434,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:26.333611,0.000373,udp,147.32.84.170,57912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:28.144227,61.284161,tcp,147.32.84.165,3889.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:02:31.035463,0.042469,udp,147.32.84.59,59266.0,->,157.24.2.40,389.0,INT,0.0,,1,246,246,0,246.0,1.0,16,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 16:02:36.738829,2278.227539,udp,147.32.84.229,13363.0,<->,72.185.207.165,48812.0,CON,0.0,0.0,4,682,158,524,170.5,0.2316715542521994,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:02:37.645546,0.00018,udp,147.32.84.138,53649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:37.746631,191.820267,udp,147.32.84.229,13363.0,<->,208.88.186.11,34031.0,CON,0.0,0.0,8,1310,895,415,163.75,0.683206106870229,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:02:46.018789,0.075963,tcp,147.32.86.6,51162.0,->,80.250.24.233,80.0,SRPA_FSPA,0.0,0.0,115,131378,2262,129116,1142.4173913043478,0.017217494557688503,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:46.107079,0.012663,tcp,147.32.86.6,51187.0,->,80.250.24.228,80.0,FSRPA_FSPA,0.0,0.0,12,5738,941,4797,478.1666666666667,0.1639944231439526,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:46.648359,115.396263,tcp,147.32.86.6,51202.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,11,2343,1125,1218,213.0,0.4801536491677337,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:46.797697,0.144621,tcp,147.32.86.20,3764.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,31,22589,853,21736,728.6774193548387,0.03776174244101111,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:47.567129,0.000236,udp,147.32.84.170,42364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.567609,0.018184,udp,147.32.84.170,47097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.568283,0.000259,udp,147.32.84.170,42377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.568536,16.149513,tcp,147.32.84.170,39936.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.568585,0.000731,udp,147.32.84.170,43734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.568815,0.000623,udp,147.32.84.170,46183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.568874,7.003295,tcp,147.32.84.170,53558.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.569140,6.316633,tcp,147.32.84.170,54597.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.569806,16.149448,tcp,147.32.84.170,36807.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.569913,15.91093,tcp,147.32.84.170,36808.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,96,87684,7364,80320,913.375,0.08398339491811505,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.570411,0.27838,tcp,147.32.84.170,53576.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2077,1061,1016,230.77777777777777,0.5108329321136255,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.571039,16.163664,tcp,147.32.84.170,51269.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.598863,226.136612,tcp,147.32.84.170,59651.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,39,15702,11233,4469,402.61538461538464,0.715386574958604,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.608504,16.117239,tcp,147.32.84.170,51688.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.608566,16.117275,tcp,147.32.84.170,51689.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.751766,0.000206,udp,147.32.84.170,42969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.753730,0.262982,tcp,147.32.84.170,44869.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,11,1653,773,880,150.27272727272728,0.4676346037507562,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.870897,0.00037,udp,147.32.84.170,40584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.873384,15.944457,tcp,147.32.84.170,57084.0,->,69.171.242.12,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.873679,0.00097,udp,147.32.84.170,38393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.873858,0.020565,udp,147.32.84.170,59606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,625,83,542,312.5,0.1328,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.874874,0.021342,udp,147.32.84.170,34475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,83,486,284.5,0.14586994727592267,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.875258,0.004165,udp,147.32.84.170,48879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.877241,0.000636,udp,147.32.84.170,42840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.880195,15.838069,tcp,147.32.84.170,34234.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.880248,0.000313,udp,147.32.84.170,52075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.880395,55.845592,tcp,147.32.84.170,33241.0,->,80.239.149.10,80.0,FSPA_FSPA,0.0,0.0,24,12358,3229,9129,514.9166666666666,0.26128823434212656,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.880502,15.84519,tcp,147.32.84.170,33243.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.880565,15.84484,tcp,147.32.84.170,33245.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.881927,325.853943,tcp,147.32.84.170,41047.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,65,48057,3315,44742,739.3384615384615,0.06898058555465385,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.892761,0.019917,udp,147.32.84.170,60021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,83,482,282.5,0.14690265486725665,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.894298,0.0197,udp,147.32.84.170,60509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,553,83,470,276.5,0.15009041591320071,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.899440,15.834186,tcp,147.32.84.170,35953.0,->,92.122.216.211,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.991220,0.026096,udp,147.32.84.170,38994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.991305,0.000414,udp,147.32.84.170,38642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.991389,0.005078,udp,147.32.84.170,51254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.991537,0.000649,udp,147.32.84.170,43400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.992428,0.000727,udp,147.32.84.170,52925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.993256,128.179153,tcp,147.32.84.170,47819.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,31,20907,2680,18227,674.4193548387096,0.12818673171664993,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.993467,0.025132,udp,147.32.84.170,58514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.993810,0.677019,tcp,147.32.84.170,40484.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,10,2626,1040,1586,262.6,0.39603960396039606,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:47.997262,0.000361,udp,147.32.84.170,49162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.011651,0.000485,udp,147.32.84.170,43916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.013138,0.000388,udp,147.32.84.170,46891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.013656,0.000829,udp,147.32.84.170,34006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.013887,0.020251,tcp,147.32.84.170,53801.0,->,62.168.44.119,80.0,FSPA_FSPA,0.0,0.0,10,1438,814,624,143.8,0.5660639777468707,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.018329,0.000575,udp,147.32.84.170,39153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.019128,0.000241,udp,147.32.84.170,49818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.019230,0.000377,udp,147.32.84.170,35070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.019592,15.699115,tcp,147.32.84.170,60734.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.020519,0.291735,tcp,147.32.84.170,48216.0,->,194.79.52.195,80.0,FSPA_FSPA,0.0,0.0,29,23112,1663,21449,796.9655172413793,0.0719539633091035,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.022060,0.000222,udp,147.32.84.170,48601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.024909,0.000248,udp,147.32.84.170,34334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.025439,0.000206,udp,147.32.84.170,58518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.417191,0.002302,udp,147.32.84.170,59024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.417405,0.004309,udp,147.32.84.170,54683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.417482,0.00469,udp,147.32.84.170,51975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.420883,0.002262,udp,147.32.84.170,50327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.422098,0.000356,udp,147.32.84.170,58295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.425948,0.0022,udp,147.32.84.170,44085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.426153,0.002304,udp,147.32.84.170,55218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.429534,0.002616,udp,147.32.84.170,44764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.429656,0.000443,udp,147.32.84.170,44417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.430426,0.000353,udp,147.32.84.170,55892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.430716,0.002042,udp,147.32.84.170,35377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.433151,0.000229,udp,147.32.84.170,38214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.433647,0.002045,udp,147.32.84.170,39735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.433790,0.000357,udp,147.32.84.170,58138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.435469,0.000477,udp,147.32.84.170,50171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.436583,0.000222,udp,147.32.84.170,59785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.438089,0.000326,udp,147.32.84.170,51262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.438680,0.000434,udp,147.32.84.170,58539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.440592,0.000253,udp,147.32.84.170,37541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.513596,0.000276,udp,147.32.84.170,45328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.514184,0.000517,udp,147.32.84.170,46151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.516632,0.00039,udp,147.32.84.170,49636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,87,179,133.0,0.32706766917293234,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.517008,0.000156,udp,147.32.84.170,42221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.523333,0.002168,udp,147.32.84.170,38637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,79,177,128.0,0.30859375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.634587,0.002226,udp,147.32.84.170,39691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.637163,0.000392,udp,147.32.84.170,46986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.667357,0.000346,udp,147.32.84.170,34904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.669603,0.0003,udp,147.32.84.170,51034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.671211,0.000414,udp,147.32.84.170,38200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.672916,0.000205,udp,147.32.84.170,46638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:48.674666,0.000189,udp,147.32.84.170,41557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.088611,0.146033,udp,147.32.84.170,42285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,444,79,365,222.0,0.17792792792792791,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.093501,64.642067,tcp,147.32.84.170,54164.0,->,92.123.64.178,80.0,FSPA_FSPA,0.0,0.0,18,8101,973,7128,450.05555555555554,0.12010862856437476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.200624,0.00016,udp,147.32.84.170,44196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.200631,0.000309,udp,147.32.84.170,52216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.201136,0.000292,udp,147.32.84.170,40837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,69,218,143.5,0.24041811846689895,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.201804,0.000321,udp,147.32.84.170,41197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,70,213,141.5,0.24734982332155478,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.202058,0.000322,udp,147.32.84.170,49374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,71,214,142.5,0.24912280701754386,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.202133,0.000455,udp,147.32.84.170,40550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.202696,0.000249,udp,147.32.84.170,34955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,71,218,144.5,0.24567474048442905,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.203195,0.245671,tcp,147.32.84.170,60333.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,9,1473,942,531,163.66666666666666,0.639511201629328,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.203311,0.780439,tcp,147.32.84.170,60778.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,10,1681,800,881,168.1,0.4759071980963712,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.242193,0.000204,udp,147.32.84.170,54561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,79,158,118.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.243671,0.000268,udp,147.32.84.170,48637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,79,179,129.0,0.3062015503875969,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.566922,0.024287,udp,147.32.84.170,55572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,76,207,141.5,0.26855123674911663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.567435,0.000705,udp,147.32.84.170,35289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.569239,0.000424,udp,147.32.84.170,42354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.670594,0.000188,udp,147.32.84.170,57248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,75,138,106.5,0.352112676056338,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.672143,0.038182,udp,147.32.84.170,41647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.688565,0.002586,udp,147.32.84.170,39664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,75,226,150.5,0.24916943521594684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.698727,0.005559,udp,147.32.84.170,35978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.704750,0.002301,udp,147.32.84.170,50809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.710723,0.000301,udp,147.32.84.170,35678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.712901,0.000326,udp,147.32.84.170,54496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.714280,0.027515,udp,147.32.84.170,41584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,72,235,153.5,0.23452768729641693,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.727381,0.006061,udp,147.32.84.170,52657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.729162,0.002435,udp,147.32.84.170,56932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,71,208,139.5,0.25448028673835127,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.732328,0.004479,udp,147.32.84.170,52057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,77,226,151.5,0.25412541254125415,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.742413,0.009418,udp,147.32.84.170,33712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.766469,0.003064,udp,147.32.84.170,52870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.768172,0.002495,udp,147.32.84.170,56779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,73,210,141.5,0.2579505300353357,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.773545,0.000533,udp,147.32.84.170,41746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.809156,0.002725,udp,147.32.84.170,55463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.813158,0.002801,udp,147.32.84.170,49323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.837838,0.002329,udp,147.32.84.170,40575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,455,75,380,227.5,0.16483516483516483,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.839416,13.981725,tcp,147.32.84.170,48682.0,->,64.215.254.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.839538,603.924744,tcp,147.32.84.170,45385.0,->,2.21.101.115,80.0,FSPA_FSPA,0.0,0.0,50,12437,7608,4829,248.74,0.6117230843450993,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.915219,0.000217,udp,147.32.84.170,43561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,70,174,122.0,0.28688524590163933,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.947855,0.007527,udp,147.32.84.170,44519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,68,233,150.5,0.22591362126245848,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.972879,0.000327,udp,147.32.84.170,60888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:49.986385,0.000362,udp,147.32.84.170,34087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,81,215,148.0,0.27364864864864863,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.024687,0.029961,udp,147.32.84.170,40227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,68,173,120.5,0.2821576763485477,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.056573,0.163841,udp,147.32.84.170,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,74,282,178.0,0.20786516853932585,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.239167,0.000296,udp,147.32.84.170,41666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.244859,0.171416,udp,147.32.84.170,39473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,74,311,192.5,0.19220779220779222,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.266411,0.00058,udp,147.32.84.170,48891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,79,213,146.0,0.2705479452054795,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.341186,0.0177,udp,147.32.84.170,51538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.361603,0.302592,udp,147.32.84.170,55740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.418848,0.000257,udp,147.32.84.170,46430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,75,215,145.0,0.25862068965517243,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.419867,1.637115,udp,147.32.84.170,52605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,74,311,192.5,0.19220779220779222,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.480617,0.029487,udp,147.32.84.170,57418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.667197,0.007003,udp,147.32.84.170,60601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.680915,0.245286,udp,147.32.84.170,53723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,88,147,117.5,0.37446808510638296,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.755325,0.000255,udp,147.32.84.170,39310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,75,134,104.5,0.3588516746411483,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.757051,0.076663,udp,147.32.84.170,47279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.871668,0.020555,udp,147.32.84.170,42273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.892516,0.00038,udp,147.32.84.170,44317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,81,265,173.0,0.23410404624277456,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.896576,0.000424,udp,147.32.84.170,35511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.897285,0.000204,udp,147.32.84.170,43462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.897862,0.000406,udp,147.32.84.170,44761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.934702,0.000299,udp,147.32.84.170,45097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.935295,0.017347,udp,147.32.84.170,59076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.953641,12.929576,tcp,147.32.84.170,57472.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:50.953731,12.938207,tcp,147.32.84.170,57473.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.055794,0.000413,udp,147.32.84.170,38430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,81,220,150.5,0.2691029900332226,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.055882,0.000398,udp,147.32.84.170,48848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.056606,0.002161,udp,147.32.84.170,53493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,81,401,241.0,0.16804979253112035,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.063150,302.670349,tcp,147.32.84.170,42496.0,->,195.113.232.80,80.0,FSPA_FSPA,0.0,0.0,92,78213,4910,73303,850.1413043478261,0.0627772876631762,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.094980,0.000303,udp,147.32.84.170,46708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,77,122,99.5,0.3869346733668342,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.095515,0.000273,udp,147.32.84.170,33045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:51.661827,0.000308,udp,147.32.84.170,53006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,79,137,108.0,0.36574074074074076,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:52.169877,0.000467,udp,147.32.84.59,64237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,354,81,273,177.0,0.2288135593220339,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:52.486144,0.903327,tcp,147.32.86.20,3769.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,110,110012,1886,108126,1000.1090909090909,0.017143584336254226,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:52.917393,0.000238,udp,147.32.84.138,40536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:56.267476,0.000276,udp,147.32.84.138,45627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:56.551858,0.207546,tcp,147.32.86.20,3772.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29891,1029,28862,786.6052631578947,0.03442507778261015,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:02:57.005103,0.000306,udp,147.32.84.170,35375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:02:57.798032,0.000217,udp,147.32.84.138,54219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:02:58.036563,0.000268,udp,147.32.84.138,35757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:02.027761,0.000348,udp,147.32.84.170,48348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:02.047197,0.220919,udp,147.32.86.77,48528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:03.310977,0.000225,udp,147.32.84.170,32799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.326890,0.000181,udp,147.32.84.170,57523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.474996,0.004736,tcp,147.32.84.170,53710.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2171,1291,880,241.22222222222223,0.5946568401658222,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.522965,0.000609,udp,147.32.84.170,38377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,79,391,235.0,0.16808510638297872,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.560074,10.173516,tcp,147.32.84.170,54235.0,->,92.123.64.178,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.560467,10.173628,tcp,147.32.84.170,38224.0,->,92.123.64.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.560908,10.17366,tcp,147.32.84.170,53641.0,->,92.123.64.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.560999,10.173331,tcp,147.32.84.170,38921.0,->,92.123.64.138,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.561341,45.735508,tcp,147.32.84.170,33366.0,->,80.239.149.10,80.0,FSPA_FSPA,0.0,0.0,17,7954,2163,5791,467.88235294117646,0.2719386472215238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.561899,0.000465,udp,147.32.84.170,37867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.562121,10.15587,tcp,147.32.84.170,39147.0,->,195.113.232.74,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:03.563112,10.171413,tcp,147.32.84.170,51909.0,->,92.123.64.137,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.142262,0.00031,udp,147.32.84.170,53128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.144047,0.000233,udp,147.32.84.170,39004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.149479,0.000598,udp,147.32.84.170,37296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.150372,0.000502,udp,147.32.84.170,53762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.150551,0.000446,udp,147.32.84.170,48999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,70,189,129.5,0.2702702702702703,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.151311,0.000256,udp,147.32.84.170,46729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.151976,0.00047,udp,147.32.84.170,54662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.152393,0.000489,udp,147.32.84.170,43093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.152771,0.000531,udp,147.32.84.170,55818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.152871,0.000464,udp,147.32.84.170,45926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.173401,589.584534,tcp,147.32.84.170,36511.0,->,195.113.232.88,80.0,FSPA_FSPA,0.0,0.0,50,12338,7574,4764,246.76,0.6138758307667369,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.433085,0.000336,udp,147.32.84.170,44797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.433311,0.11148,udp,147.32.84.170,38838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.433796,0.00037,udp,147.32.84.170,36279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.438169,250.069611,tcp,147.32.84.170,33161.0,->,74.125.232.203,443.0,SRPA_FSPA,0.0,0.0,31,4952,1542,3410,159.74193548387098,0.311389337641357,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.507296,0.017358,udp,147.32.84.170,59816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.545281,0.000257,udp,147.32.84.170,36055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.573454,0.000257,udp,147.32.84.170,60554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.574055,0.000179,udp,147.32.84.170,45782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.893602,0.000362,udp,147.32.84.170,40206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.893970,38.831902,tcp,147.32.84.170,33389.0,->,80.239.149.10,80.0,FSPA_FSPA,0.0,0.0,14,4787,1251,3536,341.92857142857144,0.26133277626906204,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.894167,0.000606,udp,147.32.84.170,42187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.894384,18.824003,tcp,147.32.84.170,41194.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.895254,0.000219,udp,147.32.84.170,33982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.895610,0.397717,udp,147.32.84.170,57207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,75,204,139.5,0.26881720430107525,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.895664,0.000359,udp,147.32.84.170,57767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.896433,0.001739,udp,147.32.84.170,35820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.899960,0.000508,udp,147.32.84.170,51336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.901806,0.007444,udp,147.32.84.170,40292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,86,299,192.5,0.22337662337662337,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:04.911309,0.001705,udp,147.32.86.50,50982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,77,319,198.0,0.19444444444444445,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:05.250263,0.000211,udp,147.32.84.170,42590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:05.293766,0.002215,udp,147.32.84.170,36678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,463,75,388,231.5,0.16198704103671707,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:06.306235,0.000299,udp,147.32.84.170,42432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,83,181,132.0,0.3143939393939394,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:06.647095,0.004994,tcp,147.32.84.170,45625.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2439,1634,805,243.9,0.6699466994669947,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:06.665391,0.000288,udp,147.32.84.170,44784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:06.667327,0.019086,tcp,147.32.84.170,44550.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:13.050294,0.287858,tcp,147.32.84.170,48452.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:14.923132,0.00034,udp,147.32.84.138,38425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:15.746715,0.000397,udp,147.32.84.138,47639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:16.665660,0.000399,udp,147.32.84.170,56446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:16.667666,0.018809,tcp,147.32.84.170,38590.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:16.908174,0.000321,udp,147.32.85.7,33351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:17.454642,10.058644,tcp,147.32.84.184,37944.0,->,85.13.133.108,80.0,FSPA_FSPA,0.0,0.0,11,2177,728,1449,197.9090909090909,0.33440514469453375,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:03:18.412471,463.215668,tcp,147.32.84.59,54424.0,->,145.120.9.149,50340.0,FSPA_FSPA,0.0,0.0,86,6262,3178,3084,72.81395348837209,0.5075055892686042,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:03:19.326037,0.000386,udp,147.32.85.25,44550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:20.046660,0.003309,udp,147.32.86.143,63922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,81,126,103.5,0.391304347826087,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:20.427878,0.000596,udp,188.186.39.216,19986.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:03:21.330223,0.225006,udp,212.105.80.220,35259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,258,180,78,129.0,0.6976744186046512,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:03:22.490845,0.000428,udp,147.32.84.170,44950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:22.491947,0.000516,udp,147.32.84.170,60330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,463,75,388,231.5,0.16198704103671707,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:22.581116,0.000209,udp,147.32.84.170,51257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:22.581804,0.000324,udp,147.32.84.170,40120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:22.583967,0.036673,tcp,147.32.84.170,38448.0,->,62.168.44.116,80.0,FSPA_FSPA,0.0,0.0,12,2305,1195,1110,192.08333333333334,0.5184381778741866,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:23.462013,0.000234,udp,147.32.84.170,57313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:23.497715,0.000238,udp,147.32.84.59,53302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,81,182,131.5,0.30798479087452474,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:23.558401,0.004711,tcp,147.32.84.170,53771.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2202,1322,880,244.66666666666666,0.6003633060853769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:23.638963,0.000268,udp,147.32.84.170,40280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:23.639822,0.032187,tcp,147.32.84.170,42822.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,12,2393,1194,1199,199.41666666666666,0.4989552862515671,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:23.954102,0.000951,udp,147.32.84.59,51983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:24.314582,0.00031,udp,147.32.84.138,37685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:25.165996,0.000233,udp,147.32.84.170,50077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.166578,0.00024,udp,147.32.84.170,45026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.345987,0.004144,tcp,147.32.84.170,53777.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2202,1322,880,244.66666666666666,0.6003633060853769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.365813,0.000539,udp,147.32.84.170,47940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.451739,0.000174,udp,147.32.84.170,35353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.452912,0.000373,udp,147.32.84.170,39933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,86,299,192.5,0.22337662337662337,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:25.729189,0.000473,udp,147.32.84.138,34545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:03:26.113354,0.000319,udp,147.32.84.170,35787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:26.115030,0.006427,tcp,147.32.84.170,45651.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2390,1631,759,239.0,0.6824267782426778,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:27.420006,0.107741,tcp,147.32.84.170,42838.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,10,1412,851,561,141.2,0.6026912181303116,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:27.507029,252.164886,tcp,147.32.86.168,59357.0,->,74.125.232.199,443.0,FSPA_FSPA,0.0,0.0,128,37818,25410,12408,295.453125,0.6719022687609075,16,1,flow=Background-google-analytics8,Background,-1 2011-08-16 16:03:27.513907,0.000239,udp,147.32.84.170,49615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:28.016397,0.000224,udp,147.32.84.170,34855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:28.178560,0.005268,tcp,147.32.84.170,53792.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2202,1322,880,244.66666666666666,0.6003633060853769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:29.003885,61.296017,tcp,147.32.84.165,3890.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:03:30.407339,0.000279,udp,147.32.84.170,57991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:32.629649,1318.944458,udp,173.32.184.13,45483.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3172,121,3051,528.6666666666666,0.03814627994955864,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:03:46.561554,0.000154,udp,147.32.84.170,51637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:46.563609,0.004861,tcp,147.32.84.170,53806.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2169,1289,880,241.0,0.5942830797602582,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:46.666861,0.000344,udp,147.32.84.170,60396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:46.838644,0.000568,udp,81.182.191.78,52321.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:03:47.181996,0.025027,udp,147.32.84.170,40443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215228,0.000536,udp,147.32.84.170,50785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215341,46.513649,tcp,147.32.84.170,33456.0,->,80.239.149.10,80.0,FSPA_FSPA,0.0,0.0,12,4169,1191,2978,347.4166666666667,0.285680019189254,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215352,0.000466,udp,147.32.84.170,39554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215567,0.000344,udp,147.32.84.170,43012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215581,16.505434,tcp,147.32.84.170,41259.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.215745,16.505281,tcp,147.32.84.170,41260.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.216082,0.000373,udp,147.32.84.170,51669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.216190,0.002436,udp,147.32.84.170,46256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.216294,16.504898,tcp,147.32.84.170,41262.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.216844,0.000644,udp,147.32.84.170,40790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.243738,0.020267,tcp,147.32.84.170,49145.0,->,194.213.222.30,80.0,FSPA_FSPA,0.0,0.0,10,1534,910,624,153.4,0.5932203389830508,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.337418,0.000399,udp,147.32.84.170,44477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.338706,0.000229,udp,147.32.84.170,49145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.339877,0.000217,udp,147.32.84.170,53389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,72,191,131.5,0.2737642585551331,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.340466,0.000244,udp,147.32.84.170,46323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.340772,0.000157,udp,147.32.84.170,40748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.341092,0.000202,udp,147.32.84.170,42178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.341714,0.000332,udp,147.32.84.170,52792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:47.344004,0.000323,udp,147.32.84.170,33986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:48.970841,0.000657,udp,119.237.126.136,54604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:03:49.050830,0.07037,udp,147.32.84.170,53304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:49.051095,0.000534,udp,147.32.84.170,35282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,76,216,146.0,0.2602739726027397,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:49.121659,0.115841,udp,147.32.84.170,53992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,74,416,245.0,0.1510204081632653,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:49.676674,0.000297,udp,147.32.84.170,53946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:56.666758,0.000314,udp,147.32.84.170,35622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:03:59.014834,0.000547,udp,147.32.84.170,39827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:00.094650,0.000265,udp,147.32.85.34,59904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:00.942763,21.060755,tcp,132.68.135.162,2247.0,->,147.32.87.238,39371.0,FSPA_FSPA,0.0,0.0,15,1140,608,532,76.0,0.5333333333333333,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:04:04.012528,0.010462,udp,147.32.84.59,63988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,79,182,130.5,0.30268199233716475,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:06.665528,0.000425,udp,147.32.84.170,59986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:06.666686,0.018112,tcp,147.32.84.170,40094.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:07.225369,609.91925,udp,67.58.151.236,50723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:07.957853,0.000505,udp,147.32.84.138,56015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:08.967160,0.000538,udp,159.148.183.100,51135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:09.254287,3278.519043,udp,89.113.228.222,9295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:15.283310,0.0,udp,147.32.87.248,25317.0,->,86.180.93.234,80.0,INT,0.0,,1,62,62,0,62.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:04:15.428182,0.000713,udp,94.230.152.8,11789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:15.563640,3231.714355,udp,147.32.84.229,13363.0,<->,70.79.106.207,53187.0,CON,0.0,0.0,4,673,537,136,168.25,0.7979197622585439,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:15.742966,0.00032,udp,147.32.85.6,53231.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:15.759637,0.000543,udp,147.32.85.6,56008.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:16.665523,0.000251,udp,147.32.84.170,51071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:16.667304,0.0188,tcp,147.32.84.170,38652.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:18.820633,114.981155,tcp,147.32.84.59,49280.0,->,74.125.232.217,80.0,FSPA_FSPA,0.0,0.0,12,4880,1876,3004,406.6666666666667,0.3844262295081967,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:04:20.248883,0.000219,udp,147.32.84.138,47338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:21.279225,0.000301,udp,147.32.84.138,49035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:21.747377,0.072421,tcp,147.32.84.59,61081.0,->,195.24.232.207,80.0,SRPA_FSPA,0.0,0.0,9,996,582,414,110.66666666666667,0.5843373493975904,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:04:21.767543,0.961541,udp,147.32.84.59,55709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:21.972790,0.000509,udp,147.32.84.59,60247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:24.629931,0.000195,udp,147.32.84.170,40059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:24.630443,0.000415,udp,147.32.84.170,53726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:25.695635,0.000257,udp,147.32.84.138,47426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:26.382152,0.000316,udp,147.32.84.170,59734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,68,169,118.5,0.2869198312236287,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:26.663773,0.00033,udp,147.32.84.170,40946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:26.665848,0.0188,tcp,147.32.84.170,40096.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.626540,0.000362,udp,147.32.84.170,38070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.627263,0.000246,udp,147.32.84.170,43959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.834371,74.89357,tcp,147.32.84.170,37068.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,71,54622,3282,51340,769.3239436619718,0.06008567976273296,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.928155,0.000233,udp,147.32.84.170,47737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.929066,0.020068,tcp,147.32.84.170,49384.0,->,194.213.222.29,80.0,FSPA_FSPA,0.0,0.0,10,1438,814,624,143.8,0.5660639777468707,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:28.942668,0.039886,udp,147.32.84.184,40305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,78,170,124.0,0.31451612903225806,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:28.993128,0.000229,udp,147.32.84.170,45982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.005728,14.717959,tcp,147.32.84.170,41281.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.005817,14.717819,tcp,147.32.84.170,41282.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.129942,0.000346,udp,147.32.84.170,40118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.188457,0.000622,udp,147.32.84.170,39242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.189896,0.000261,udp,147.32.84.170,32881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.191776,0.00036,udp,147.32.84.170,35286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.193266,0.000238,udp,147.32.84.170,33483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.193272,0.000422,udp,147.32.84.170,56106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.195444,0.000261,udp,147.32.84.170,45891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.195968,0.000242,udp,147.32.84.170,35440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:29.869576,61.283512,tcp,147.32.84.165,3892.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:04:29.951289,37.395206,udp,203.130.132.196,23056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:30.255676,0.020456,udp,147.32.84.170,45972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:30.460305,13.269457,tcp,147.32.84.170,45544.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:30.527810,0.071025,tcp,147.32.84.170,51943.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,12,2006,1185,821,167.16666666666666,0.590727816550349,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:32.107702,0.000365,udp,147.32.84.134,48655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.109457,10.00443,tcp,147.32.84.134,54204.0,->,194.79.52.192,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.109544,20.00614,tcp,147.32.84.134,54205.0,->,194.79.52.192,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.152298,0.000159,udp,147.32.84.134,47891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.152626,0.00043,udp,147.32.84.134,54619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.152937,0.000351,udp,147.32.84.134,51822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.152945,0.000425,udp,147.32.84.134,49205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153295,0.000187,udp,147.32.84.134,46153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153364,0.000238,udp,147.32.84.134,38441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153651,19.961077,tcp,147.32.84.134,33989.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153655,19.960804,tcp,147.32.84.134,33990.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153708,19.960756,tcp,147.32.84.134,33991.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153715,19.960697,tcp,147.32.84.134,33992.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153726,19.960747,tcp,147.32.84.134,33994.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153877,19.960245,tcp,147.32.84.134,38759.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.153885,19.960854,tcp,147.32.84.134,38760.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.154141,19.960606,tcp,147.32.84.134,34002.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.154144,19.960754,tcp,147.32.84.134,34003.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.154634,19.961472,tcp,147.32.84.134,58507.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.155715,19.974722,tcp,147.32.84.134,45070.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.156950,0.000342,udp,147.32.84.134,57957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.157749,19.957754,tcp,147.32.84.134,50119.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.157764,19.95793,tcp,147.32.84.134,50120.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.176813,0.000274,udp,147.32.84.134,34243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.178907,55.486065,tcp,147.32.84.134,39220.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,12,2277,932,1345,189.75,0.409310496267018,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:32.890756,0.000269,udp,147.32.84.134,60653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.318963,127.854706,tcp,147.32.84.134,34041.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,18,7576,1242,6334,420.8888888888889,0.16393875395987328,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.410288,0.000279,udp,147.32.84.134,39096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.410834,0.000337,udp,147.32.84.134,33308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.410841,0.000503,udp,147.32.84.134,48566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,77,152,114.5,0.33624454148471616,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.412589,0.00028,udp,147.32.84.134,59038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.413284,0.000266,udp,147.32.84.134,44977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.413783,0.000424,udp,147.32.84.134,44639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.414388,0.002759,udp,147.32.84.134,39199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.415535,0.000317,udp,147.32.84.134,49574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.415545,0.000406,udp,147.32.84.134,38061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.416528,0.000248,udp,147.32.84.134,46472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.418176,0.000262,udp,147.32.84.134,53657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.419517,0.000162,udp,147.32.84.134,36855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.419737,0.000318,udp,147.32.84.134,51721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.512163,0.004672,tcp,147.32.84.134,44065.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1841,985,856,204.55555555555554,0.5350353068984248,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.570310,0.005838,tcp,147.32.84.134,58542.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,12,4695,849,3846,391.25,0.18083067092651758,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:33.733298,243.953537,tcp,147.32.84.134,45096.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,21,2620,1628,992,124.76190476190476,0.6213740458015267,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:34.669453,0.000262,udp,147.32.87.34,51440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,88,140,114.0,0.38596491228070173,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:35.210396,22.057688,tcp,147.32.84.181,51784.0,->,74.125.232.205,443.0,FSRPA_SRPA,0.0,0.0,27,8395,5100,3295,310.9259259259259,0.6075044669446099,16,1,flow=Background-google-analytics14,Background,-1 2011-08-16 16:04:35.247661,0.179034,udp,147.32.84.59,64993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:35.751529,0.003924,tcp,147.32.84.170,37812.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2125,1245,880,236.11111111111111,0.5858823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:35.776550,0.000336,udp,147.32.84.170,40323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:35.777812,0.000329,udp,147.32.84.170,42596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:36.248442,0.000293,udp,147.32.84.170,58637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,70,152,111.0,0.3153153153153153,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:36.249030,0.000475,udp,147.32.84.170,37981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,72,191,131.5,0.2737642585551331,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:36.249243,0.000646,udp,147.32.84.170,37261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:36.811567,0.000451,udp,147.32.84.170,60672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:37.128883,0.000233,udp,147.32.84.134,38566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:04:37.724028,0.004616,tcp,147.32.84.170,45723.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2393,1588,805,239.3,0.6636021730045968,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:40.032353,0.000115,icmp,147.32.87.249,,<-,147.32.87.13,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:04:45.426323,0.147187,udp,147.32.86.171,63022.0,<->,174.118.215.22,15553.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:47.707889,0.000608,udp,67.241.127.26,5032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:04:49.284351,11.91643,tcp,147.32.85.6,52875.0,->,77.75.76.57,80.0,FSPA_FSPA,0.0,0.0,98,64929,7715,57214,662.5408163265306,0.1188220979839517,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:04:49.876740,0.000419,udp,147.32.84.68,60217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,84,320,202.0,0.2079207920792079,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:53.106571,19.896793,tcp,147.32.85.7,59875.0,->,212.65.245.213,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:04:53.474570,0.000347,udp,147.32.84.138,45131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:56.413312,6.010919,udp,147.32.84.229,13363.0,->,74.138.20.44,42130.0,INT,0.0,,3,207,207,0,69.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:04:56.663786,0.020088,udp,147.32.84.170,43028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:56.684457,0.000417,udp,147.32.84.170,33982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:04:57.198171,0.045073,udp,147.32.84.59,56756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,75,287,181.0,0.20718232044198895,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:04:59.101609,0.003547,udp,147.32.84.59,56688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,90,419,254.5,0.17681728880157171,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:01.741353,0.000645,udp,119.230.23.135,60671.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:02.819164,0.000275,udp,147.32.86.208,57475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,76,186,131.0,0.2900763358778626,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:03.403706,0.000263,udp,147.32.85.34,63406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,71,216,143.5,0.24738675958188153,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:07.133749,0.153247,udp,147.32.84.59,33556.0,<->,24.200.89.156,33332.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:05:08.346699,0.00064,udp,75.110.144.155,39013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:10.312895,0.000321,udp,147.32.84.59,32820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:10.482212,0.000331,udp,147.32.84.59,53975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:12.058983,0.000226,udp,147.32.84.134,52130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,88,231,159.5,0.27586206896551724,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.059080,0.000186,udp,147.32.84.134,46337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.059793,0.000734,udp,147.32.84.134,51862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.060429,305.650757,tcp,147.32.84.134,55881.0,->,69.63.190.14,443.0,FSPA_FSPA,0.0,0.0,31,6929,1532,5397,223.51612903225808,0.2210997257901573,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.060592,305.649841,tcp,147.32.84.134,55882.0,->,69.63.190.14,443.0,FSPA_FSPA,0.0,0.0,31,6929,1532,5397,223.51612903225808,0.2210997257901573,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.061589,35.529945,tcp,147.32.84.134,40083.0,->,92.123.64.146,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.065320,35.527386,tcp,147.32.84.134,40600.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.072106,35.521557,tcp,147.32.84.134,35655.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4066,1160,2906,214.0,0.2852926709296606,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.072109,35.521908,tcp,147.32.84.134,35656.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4066,1160,2906,214.0,0.2852926709296606,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.081842,35.511238,tcp,147.32.84.134,36387.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:12.082046,35.511501,tcp,147.32.84.134,36391.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:13.420619,78.121269,tcp,147.32.84.134,33376.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:13.420659,78.414124,tcp,147.32.84.134,33377.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:14.165357,0.000245,udp,147.32.84.134,58757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:14.166074,0.000233,udp,147.32.84.134,41496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:15.716039,16.24864,tcp,147.32.84.134,57796.0,->,81.31.45.94,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:15.716516,16.344172,tcp,147.32.84.134,55391.0,->,69.63.190.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:15.742743,21.926317,tcp,147.32.84.134,57804.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,55,31302,3258,28044,569.1272727272727,0.10408280621046578,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:15.980034,0.000212,udp,147.32.84.134,51992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:15.981104,461.816833,tcp,147.32.84.134,55397.0,->,69.63.190.14,80.0,FSPA_FSPA,0.0,0.0,42,11894,7454,4440,283.1904761904762,0.6267025390953422,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:16.025772,0.000159,udp,147.32.84.134,36717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:16.351536,0.000783,udp,46.45.226.118,48766.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,77,507,292.0,0.13184931506849315,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:16.386332,0.00031,udp,147.32.84.138,58238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:16.513608,241.177216,tcp,147.32.84.134,56063.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,40,17613,2051,15562,440.325,0.11644807812411287,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:05:16.665848,0.000325,udp,147.32.84.170,59231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:05:16.666737,0.000301,udp,147.32.84.170,37504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:05:16.667781,0.018118,tcp,147.32.84.170,40127.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:05:21.256816,1208.706421,udp,109.184.59.170,29031.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,447,138,309,111.75,0.3087248322147651,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:21.666395,0.000527,udp,147.32.86.92,38108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,75,213,144.0,0.2604166666666667,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:22.081922,0.000291,udp,147.32.84.138,51158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:22.610733,0.012689,tcp,147.32.85.74,38526.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:05:26.696167,114.840782,tcp,147.32.84.194,2076.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,369,310303,22065,288238,840.9295392953929,0.07110791710038253,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:05:26.725609,0.000248,udp,147.32.84.194,53106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:30.727896,61.298264,tcp,147.32.84.165,3893.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:05:32.019310,0.000275,udp,147.32.84.170,41035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:05:34.095353,147.650818,tcp,147.32.84.59,59574.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,27,13649,2634,11015,505.51851851851853,0.19298117078174226,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:05:34.545046,0.000279,udp,147.32.84.59,35539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:34.794011,0.000196,udp,147.32.84.59,37999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,79,177,128.0,0.30859375,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:39.458666,0.050901,udp,147.32.84.229,13363.0,<->,93.128.57.202,23919.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:39.533789,485.294403,udp,147.32.84.229,13363.0,<->,70.176.58.139,61043.0,CON,0.0,0.0,4,1163,554,609,290.75,0.4763542562338779,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:05:43.116732,0.000278,udp,147.32.86.20,56504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:44.457241,0.000279,udp,147.32.84.138,34626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:46.361140,0.01732,udp,147.32.84.181,58238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:46.666740,0.000364,udp,147.32.84.170,53887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:05:46.878277,2268.304932,udp,147.32.84.94,7103.0,->,128.220.247.242,7152.0,INT,0.0,,8,672,672,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:05:47.252455,27.843033,tcp,147.32.85.31,3683.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,28,16861,2318,14543,602.1785714285714,0.13747701797046438,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:05:48.234316,7e-06,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:05:49.476128,0.000442,udp,147.32.86.110,53366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:53.368962,0.000283,udp,147.32.84.138,44737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:05:53.803267,170.586288,udp,147.32.84.229,13363.0,<->,85.69.252.60,29575.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:06:01.176253,0.000304,udp,147.32.85.34,60464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:01.178378,0.000305,udp,147.32.85.34,57370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:03.309660,0.000207,udp,147.32.84.59,56602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:03.426981,0.000319,udp,147.32.84.138,53905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:06.225362,0.000338,udp,147.32.85.25,32962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:06.668038,0.017868,tcp,147.32.84.170,34160.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:06.832277,9.028752,tcp,94.67.142.60,53022.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:06:07.298293,15.279771,icmp,188.154.146.37,3331.0,->,147.32.84.94,,URFIL,0.0,,4,280,280,0,70.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:06:15.440327,0.047698,udp,147.32.84.229,13363.0,<->,82.131.14.68,16738.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:06:16.665549,0.000354,udp,147.32.84.170,49756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:16.667510,0.017941,tcp,147.32.84.170,47202.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:18.475563,0.000275,udp,147.32.84.138,37687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:21.712630,0.00014,udp,147.32.84.138,55405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:25.345545,0.001687,udp,86.183.133.90,63047.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,516,456,60,258.0,0.8837209302325582,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:06:29.727609,0.0,tcp,62.209.212.194,2980.0,->,147.32.85.114,37632.0,S_,0.0,,1,62,62,0,62.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:06:31.596006,61.282738,tcp,147.32.84.165,3894.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:06:32.631995,0.111834,udp,147.32.85.114,37632.0,<->,109.126.247.44,12201.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:06:34.017697,0.238599,tcp,147.32.84.170,43889.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:34.730480,0.000311,udp,147.32.84.138,36238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:40.766065,0.0,tcp,147.32.84.165,3895.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:40.778434,0.0,tcp,147.32.84.165,3897.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:40.783670,0.0,tcp,147.32.84.165,3898.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:40.948519,0.0,tcp,147.32.84.165,3899.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:40.959331,0.0,tcp,147.32.84.165,3901.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:40.968711,0.0,tcp,147.32.84.165,3902.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:41.148715,0.0,tcp,147.32.84.165,3903.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:41.760839,0.0,tcp,147.32.84.165,3905.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:41.960653,0.0,tcp,147.32.84.165,3907.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:42.770744,0.000186,udp,147.32.84.138,48295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:43.161696,0.0,tcp,147.32.84.165,3906.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:46.763168,0.000329,udp,147.32.84.170,55057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.951900,0.001194,udp,147.32.84.170,49885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.952289,0.000912,udp,147.32.84.170,49900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.952606,6.6571,tcp,147.32.84.170,38139.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.952634,6.635369,tcp,147.32.84.170,38140.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.952697,6.635317,tcp,147.32.84.170,38141.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.953425,0.000487,udp,147.32.84.170,38494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.954623,126.787552,tcp,147.32.84.170,42509.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,102,78017,7878,70139,764.8725490196078,0.10097799197610777,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.954728,126.787453,tcp,147.32.84.170,42511.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,57,39501,5144,34357,693.0,0.13022455127718285,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.955793,16.783352,tcp,147.32.84.170,41327.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.956134,16.782288,tcp,147.32.84.170,47562.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.956177,16.782433,tcp,147.32.84.170,47563.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.956804,16.78231,tcp,147.32.84.170,44308.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.956892,16.78223,tcp,147.32.84.170,44309.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:46.981283,16.749451,tcp,147.32.84.170,58336.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.119560,0.020675,udp,147.32.84.170,45237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.119630,0.00027,udp,147.32.84.170,52220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.120327,0.003131,udp,147.32.84.170,56772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,80,399,239.5,0.16701461377870563,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.125259,16.606127,tcp,147.32.84.170,55230.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.125357,16.606071,tcp,147.32.84.170,55232.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.125406,16.606033,tcp,147.32.84.170,55233.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.298305,0.000183,udp,147.32.84.170,33768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.298829,0.000313,udp,147.32.84.170,36967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.299269,0.000223,udp,147.32.84.170,50082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.299741,0.000238,udp,147.32.84.170,34545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.299833,0.000281,udp,147.32.84.170,60677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.300916,0.000252,udp,147.32.84.170,47486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.301524,0.000208,udp,147.32.84.170,49567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.301738,0.000258,udp,147.32.84.170,38702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.302003,0.000267,udp,147.32.84.170,40115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.302264,0.000232,udp,147.32.84.170,42926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.302675,0.000325,udp,147.32.84.170,53486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.302793,0.000316,udp,147.32.84.170,51845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.303346,0.000333,udp,147.32.84.170,56329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.304118,0.000228,udp,147.32.84.170,53645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.304206,0.000191,udp,147.32.84.170,47348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.304212,0.00035,udp,147.32.84.170,34416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,74,193,133.5,0.27715355805243447,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.304725,0.00023,udp,147.32.84.170,41532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.304794,0.000276,udp,147.32.84.170,41401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.305127,0.000349,udp,147.32.84.170,60072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:47.323561,326.437592,tcp,147.32.84.170,47580.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,28,6264,2464,3800,223.71428571428572,0.3933588761174968,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:48.471341,0.000262,udp,147.32.84.170,54814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:48.471538,0.000327,udp,147.32.84.170,49884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,76,216,146.0,0.2602739726027397,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:49.295274,0.035489,udp,147.32.85.36,38758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,80,198,139.0,0.28776978417266186,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:50.645433,115.400864,tcp,147.32.86.6,51234.0,->,209.85.149.138,80.0,FSPA_FSPA,0.0,0.0,13,4008,1832,2176,308.3076923076923,0.45708582834331335,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:06:50.989979,0.000185,udp,147.32.84.138,44915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:50.989992,0.000189,udp,147.32.84.138,40766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:52.990943,0.000517,udp,147.32.84.181,62439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:54.277364,0.0,tcp,147.32.84.165,4129.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.277496,0.0,tcp,147.32.84.165,4128.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.384260,0.00019,udp,147.32.84.138,47980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:06:54.878342,0.0,tcp,147.32.84.165,4142.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.878469,0.0,tcp,147.32.84.165,4141.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.878530,0.0,tcp,147.32.84.165,4140.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.878640,0.0,tcp,147.32.84.165,4145.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.878693,0.0,tcp,147.32.84.165,4146.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:54.878748,0.0,tcp,147.32.84.165,4144.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:06:56.085832,0.000271,udp,147.32.84.164,51008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:06:56.666380,0.000276,udp,147.32.84.170,58195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:56.667388,0.017865,tcp,147.32.84.170,46171.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:58.293074,0.004401,tcp,147.32.84.170,38189.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2070,1054,1016,230.0,0.5091787439613527,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:58.501469,75.234978,tcp,147.32.84.170,42547.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,77,61542,3332,58210,799.2467532467532,0.054141886841506615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:58.979417,74.757027,tcp,147.32.84.170,42549.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,41,23274,4040,19234,567.6585365853658,0.17358425711093925,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:58.981324,14.750403,tcp,147.32.84.170,42550.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,19,7413,2020,5393,390.1578947368421,0.27249426682854444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:58.987723,0.068642,tcp,147.32.84.170,42031.0,->,194.213.62.46,80.0,FSPA_FSPA,0.0,0.0,11,1550,926,624,140.9090909090909,0.5974193548387097,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:59.115968,0.000295,udp,147.32.84.170,42254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:06:59.329669,0.000257,udp,147.32.84.134,57149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,68,151,109.5,0.3105022831050228,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:06:59.946126,243.811768,tcp,147.32.84.170,43004.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,27,9028,4848,4180,334.3703703703704,0.5369960124058485,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:00.172999,0.000129,udp,147.32.84.170,37005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:00.173323,0.000327,udp,147.32.84.170,36582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:00.173406,0.000251,udp,147.32.84.170,37949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:02.001161,0.008846,tcp,147.32.84.170,56208.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2328,1523,805,232.8,0.6542096219931272,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:02.478411,0.000278,udp,147.32.84.59,51332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:02.520228,0.000323,udp,147.32.84.170,33205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:02.545843,0.001537,udp,147.32.86.6,54241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,532,83,449,266.0,0.15601503759398497,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:02.547835,0.000213,udp,147.32.86.6,53507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:02.768461,0.000758,udp,41.82.122.62,26516.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,77,476,276.5,0.13924050632911392,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:04.073020,0.00482,tcp,147.32.84.170,38202.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2026,1146,880,225.11111111111111,0.5656465942744324,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:06.295098,0.0,tcp,147.32.84.165,4370.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.295114,0.0,tcp,147.32.84.165,4369.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.603718,0.000408,udp,147.32.84.134,49494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,68,124,96.0,0.3541666666666667,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:06.604599,0.000278,udp,147.32.84.134,57319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,68,124,96.0,0.3541666666666667,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:06.665958,0.000402,udp,147.32.84.170,53118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:06.742773,0.000331,udp,147.32.84.134,45648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:06.743589,0.000299,udp,147.32.84.134,44074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,68,169,118.5,0.2869198312236287,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:06.895717,0.0,tcp,147.32.84.165,4380.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.895881,0.0,tcp,147.32.84.165,4382.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.895888,0.0,tcp,147.32.84.165,4381.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.895897,0.0,tcp,147.32.84.165,4384.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:06.895996,0.0,tcp,147.32.84.165,4385.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:07.373191,10.008439,tcp,147.32.84.134,55002.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.479305,20.196077,tcp,147.32.84.134,55006.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,125,87876,8116,79760,703.008,0.09235741271792071,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.485307,0.000607,udp,147.32.84.134,46195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.489343,0.011067,tcp,147.32.84.134,45451.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,23,14646,1287,13359,636.7826086956521,0.08787382220401475,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.503393,0.000243,udp,147.32.84.134,47341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.506418,0.000506,udp,147.32.84.134,41282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.508305,0.036029,tcp,147.32.84.134,57066.0,->,194.213.62.45,80.0,FSPA_FSPA,0.0,0.0,26,14362,1274,13088,552.3846153846154,0.08870630831360535,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.631143,0.000456,udp,147.32.84.134,49145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.636234,110.046661,tcp,147.32.84.134,55016.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,204,177423,11498,165925,869.7205882352941,0.06480557763085959,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.663688,0.000304,udp,147.32.84.134,53739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.883757,0.000434,udp,147.32.84.134,50487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.883925,0.000366,udp,147.32.84.134,33575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.897743,0.000362,udp,147.32.84.134,51680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.899346,0.000312,udp,147.32.84.134,35984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.903704,0.000329,udp,147.32.84.134,43791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.904733,0.003275,udp,147.32.84.134,49031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,88,231,159.5,0.27586206896551724,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.904740,0.00082,udp,147.32.84.134,45184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,83,222,152.5,0.2721311475409836,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.904783,0.000876,udp,147.32.84.134,50173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,84,224,154.0,0.2727272727272727,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.904857,309.813812,tcp,147.32.84.134,55965.0,->,69.63.190.14,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.905266,0.000674,udp,147.32.84.134,44835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.906170,0.020602,udp,147.32.84.134,40550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,428,84,344,214.0,0.19626168224299065,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.908583,0.003018,udp,147.32.84.134,34374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,468,88,380,234.0,0.18803418803418803,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.909854,39.689201,tcp,147.32.84.134,36452.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4035,1159,2876,212.3684210526316,0.2872366790582404,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.910126,0.000357,udp,147.32.84.134,49335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.912536,39.686111,tcp,147.32.84.134,44535.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.928344,39.671124,tcp,147.32.84.134,35733.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.928450,39.67128,tcp,147.32.84.134,35737.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.928508,39.671387,tcp,147.32.84.134,35738.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.943741,0.000595,udp,147.32.84.134,59173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,628,87,541,314.0,0.13853503184713375,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.946681,39.651085,tcp,147.32.84.134,45351.0,->,92.123.64.177,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.972723,0.032584,tcp,147.32.84.134,57309.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,10,2332,734,1598,233.2,0.31475128644939965,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.973721,0.000284,udp,147.32.84.134,58919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:07.975045,0.008709,tcp,147.32.84.134,55621.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1973,981,992,219.22222222222223,0.4972123669538773,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.061521,7e-06,icmp,147.32.87.249,,<-,147.32.87.38,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:07:08.082203,0.000392,udp,147.32.84.134,44675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.083032,0.000226,udp,147.32.84.134,41868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.083924,0.000205,udp,147.32.84.134,57617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.085800,0.000289,udp,147.32.84.134,39128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.088554,0.000307,udp,147.32.84.134,41972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.134610,0.000463,udp,147.32.84.134,36628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.136291,0.000334,udp,147.32.84.134,45120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.323528,0.000614,udp,180.217.117.209,52148.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:08.333486,0.00032,udp,147.32.84.134,40505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,87,170,128.5,0.33852140077821014,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.565437,0.045924,tcp,147.32.84.134,57111.0,->,194.213.62.45,80.0,FSPA_FSPA,0.0,0.0,54,36650,2432,34218,678.7037037037037,0.06635743519781719,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.565968,0.038008,tcp,147.32.84.134,57112.0,->,194.213.62.45,80.0,FSPA_FSPA,0.0,0.0,30,18236,1651,16585,607.8666666666667,0.09053520508883527,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.573910,18.812803,tcp,147.32.84.134,52982.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.573921,18.812796,tcp,147.32.84.134,52983.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:08.573930,18.812889,tcp,147.32.84.134,52985.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:09.002995,18.383821,tcp,147.32.84.134,42055.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:09.058433,348.647461,tcp,147.32.84.134,41804.0,->,2.21.101.115,80.0,FSPA_FSPA,0.0,0.0,25,3659,2147,1512,146.36,0.5867723421699919,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:10.524393,6.137983,tcp,147.32.84.170,38215.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:10.524634,13.207319,tcp,147.32.84.170,42575.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:10.524703,13.217115,tcp,147.32.84.170,42576.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:10.525071,13.213262,tcp,147.32.84.170,47618.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:10.748835,12.989766,tcp,147.32.84.170,39287.0,->,80.239.149.24,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:10.867634,0.057274,tcp,147.32.84.170,50916.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,12,4668,1452,3216,389.0,0.3110539845758355,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:11.747117,0.00518,tcp,147.32.84.170,56449.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1859,979,880,206.55555555555554,0.5266272189349113,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:12.607718,0.0,udp,147.32.80.9,53.0,->,147.32.85.7,60058.0,INT,0.0,,1,75,75,0,75.0,1.0,16,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 16:07:13.507515,0.0,udp,147.32.80.9,53.0,->,147.32.85.7,43839.0,INT,0.0,,1,133,133,0,133.0,1.0,16,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 16:07:13.568236,0.0,udp,147.32.80.9,53.0,->,147.32.85.7,47618.0,INT,0.0,,1,219,219,0,219.0,1.0,16,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 16:07:13.654798,0.0,udp,147.32.80.9,53.0,->,147.32.85.7,33364.0,INT,0.0,,1,229,229,0,229.0,1.0,16,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 16:07:13.839685,0.000246,udp,147.32.85.7,37557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:15.100112,0.166397,udp,147.32.84.59,62066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,74,168,121.0,0.30578512396694213,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:16.667237,0.018355,tcp,147.32.84.170,39095.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:18.311956,0.0,tcp,147.32.84.165,4609.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.312094,0.0,tcp,147.32.84.165,4608.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.783954,0.000289,udp,147.32.85.25,40324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:18.823951,0.000243,udp,147.32.85.25,54546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:18.913141,0.0,tcp,147.32.84.165,4622.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.913198,0.0,tcp,147.32.84.165,4621.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.913246,0.0,tcp,147.32.84.165,4620.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.913314,0.0,tcp,147.32.84.165,4625.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.913321,0.0,tcp,147.32.84.165,4626.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:18.913370,0.0,tcp,147.32.84.165,4624.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:21.129290,0.36741,udp,147.32.85.7,58294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,441,82,359,220.5,0.18594104308390022,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:21.267571,0.000277,udp,147.32.84.59,63152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:21.547861,3165.681396,udp,217.114.29.129,53314.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:22.843675,0.000291,udp,147.32.84.138,56810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:25.027922,0.000306,udp,147.32.84.138,45586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:26.088055,0.000281,udp,147.32.84.138,55702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:26.667264,0.018154,tcp,147.32.84.170,39096.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:28.207996,0.000572,udp,95.103.182.213,20135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:29.091703,0.000311,udp,147.32.85.25,48521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:30.305554,126.692146,tcp,147.32.84.59,38340.0,->,74.125.232.220,80.0,FSPA_FSPA,0.0,0.0,37,22419,2112,20307,605.918918918919,0.09420580757393282,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:07:30.329918,0.0,tcp,147.32.84.165,4851.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.329984,0.0,tcp,147.32.84.165,4850.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.930270,0.0,tcp,147.32.84.165,4861.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.930568,0.0,tcp,147.32.84.165,4863.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.930636,0.0,tcp,147.32.84.165,4862.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.930713,0.0,tcp,147.32.84.165,4865.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:30.930871,0.0,tcp,147.32.84.165,4866.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:31.068496,0.00028,udp,147.32.84.138,34601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:31.358284,2496.986572,udp,95.158.159.35,55268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:34.765544,0.000604,udp,147.32.84.59,48867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:34.774590,0.00032,udp,147.32.84.59,35081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:35.912539,0.000183,udp,147.32.84.138,59028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:07:36.015383,0.000262,udp,147.32.84.170,56532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:36.666603,0.000322,udp,147.32.84.170,36364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:37.909594,19.907198,tcp,147.32.84.59,49966.0,->,74.125.39.105,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:07:42.346790,61.299408,tcp,147.32.84.165,4924.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:07:42.346806,0.0,tcp,147.32.84.165,1110.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.346811,0.0,tcp,147.32.84.165,1109.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.947482,0.0,tcp,147.32.84.165,1119.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.947638,0.0,tcp,147.32.84.165,1118.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.947661,0.0,tcp,147.32.84.165,1122.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.947666,0.0,tcp,147.32.84.165,1121.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:42.947670,0.0,tcp,147.32.84.165,1125.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:44.352534,0.022733,tcp,147.32.84.170,42096.0,->,194.213.62.46,80.0,FSPA_FSPA,0.0,0.0,10,1502,878,624,150.2,0.5845539280958721,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.476497,0.004057,tcp,147.32.84.170,56464.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2095,1215,880,232.77777777777777,0.5799522673031027,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.497505,0.000262,udp,147.32.84.170,37879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.498127,0.000338,udp,147.32.84.170,32800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,74,175,124.5,0.2971887550200803,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.498979,20.499498,tcp,147.32.84.170,56150.0,->,81.95.101.3,443.0,FSPA_FSPA,0.0,0.0,24,9462,1733,7729,394.25,0.18315366730078209,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.596550,0.055229,tcp,147.32.84.170,50940.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,11,4048,1429,2619,368.0,0.35301383399209485,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.746833,0.00022,udp,147.32.84.170,53508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.747468,0.00044,udp,147.32.84.170,52264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,73,192,132.5,0.27547169811320754,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.750783,0.000389,udp,147.32.84.170,59886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:44.889087,0.000561,udp,46.251.72.55,8674.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:44.903163,0.004316,tcp,147.32.84.170,56475.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1923,1043,880,213.66666666666666,0.5423816952678107,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:45.223654,249.788696,tcp,147.32.84.170,56279.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:46.586507,0.004674,tcp,147.32.84.170,56286.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2364,1559,805,236.4,0.6594754653130288,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:50.648387,1264.73584,udp,130.235.147.10,29908.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,734,303,431,122.33333333333333,0.4128065395095368,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:51.550134,66.132545,tcp,147.32.84.134,55071.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,244,200100,20405,179695,820.0819672131148,0.10197401299350325,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:51.896150,75.788239,tcp,147.32.84.134,55073.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,164,123192,12082,111110,751.170731707317,0.09807455029547373,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:51.900137,0.000245,udp,147.32.84.134,50182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:51.900962,0.00044,udp,147.32.84.134,47765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:51.910018,305.795532,tcp,147.32.84.134,46203.0,->,2.21.111.139,80.0,FSPA_FSPA,0.0,0.0,76,48122,2953,45169,633.1842105263158,0.061364864303229294,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.243901,10.015909,tcp,147.32.84.134,53005.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.244301,10.015604,tcp,147.32.84.134,53009.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.267557,19.987234,tcp,147.32.84.134,51406.0,->,77.75.77.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.341635,65.340752,tcp,147.32.84.134,55091.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,54,37511,4685,32826,694.6481481481482,0.12489669696888912,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.341900,65.340874,tcp,147.32.84.134,55092.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,51,35122,6152,28970,688.6666666666666,0.175160867832128,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.379375,0.000331,udp,147.32.84.134,48350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.396438,305.309448,tcp,147.32.84.134,53016.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,22,3050,2013,1037,138.63636363636363,0.66,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.442951,245.174988,tcp,147.32.84.134,34473.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,31,4952,1542,3410,159.74193548387098,0.311389337641357,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.450606,0.002019,udp,147.32.84.134,38496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.453138,0.000147,udp,147.32.84.134,53922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.475050,0.094281,tcp,147.32.84.134,57152.0,->,194.213.62.45,80.0,FSPA_FSPA,0.0,0.0,100,80891,3505,77386,808.91,0.04332991309292752,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.477421,35.123032,tcp,147.32.84.134,44602.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.477508,35.12315,tcp,147.32.84.134,44603.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.477737,35.123764,tcp,147.32.84.134,35803.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.477843,35.12376,tcp,147.32.84.134,35804.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.477937,35.123924,tcp,147.32.84.134,35806.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.496333,0.338823,udp,147.32.87.238,39371.0,<->,140.113.63.20,20866.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:07:52.512041,0.018323,tcp,147.32.84.59,55415.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1896,1029,867,210.66666666666666,0.5427215189873418,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:07:52.700442,0.000352,udp,147.32.84.134,53970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.729761,304.9758,tcp,147.32.84.134,42103.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,26,5420,1500,3920,208.46153846153845,0.2767527675276753,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.845948,0.000387,udp,147.32.84.134,44905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.899650,19.35457,tcp,147.32.84.134,36603.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.899711,19.354515,tcp,147.32.84.134,36605.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:52.907594,0.002994,udp,147.32.84.134,36978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,529,82,447,264.5,0.15500945179584122,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:53.191732,305.408813,tcp,147.32.84.134,35818.0,->,2.21.98.110,443.0,FSRPA_FSPA,0.0,0.0,33,8997,2578,6419,272.6363636363636,0.286539957763699,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:53.224937,19.133263,tcp,147.32.84.134,43711.0,->,64.215.254.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:53.224986,19.036638,tcp,147.32.84.134,41864.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:07:54.364146,0.0,tcp,147.32.84.165,1289.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.364293,0.0,tcp,147.32.84.165,1290.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.965017,0.0,tcp,147.32.84.165,1298.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.965151,0.0,tcp,147.32.84.165,1299.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.965157,0.0,tcp,147.32.84.165,1301.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.965287,0.0,tcp,147.32.84.165,1302.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:54.965299,0.0,tcp,147.32.84.165,1304.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:07:55.187097,41.289368,tcp,147.231.17.84,64124.0,->,147.32.87.238,39371.0,FSPA_FSPA,0.0,0.0,153,16757,7880,8877,109.52287581699346,0.4702512382884765,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:07:56.667497,0.018846,tcp,147.32.84.170,39126.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:07:59.988103,0.005839,udp,147.32.85.7,39882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:00.463435,0.000262,udp,147.32.85.25,41781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:00.625949,0.000201,udp,147.32.85.25,38577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:01.274830,6.149874,icmp,147.32.84.59,259.0,->,74.125.235.191,37664.0,URH,0.0,,4,376,376,0,94.0,1.0,16,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 16:08:02.089452,0.380415,udp,147.32.84.229,13363.0,<->,175.181.190.169,50286.0,CON,0.0,0.0,4,674,553,121,168.5,0.8204747774480712,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:03.611591,0.000294,udp,147.32.84.186,45045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:05.755310,0.000368,udp,147.32.84.138,33977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:06.381910,0.0,tcp,147.32.84.165,1470.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:06.381915,0.0,tcp,147.32.84.165,1469.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:06.982400,0.0,tcp,147.32.84.165,1479.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:06.982466,0.0,tcp,147.32.84.165,1478.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:06.982599,0.0,tcp,147.32.84.165,1482.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:06.982666,0.0,tcp,147.32.84.165,1481.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:07.011587,0.000319,udp,147.32.84.170,53929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:10.657644,0.001934,udp,68.63.199.17,54323.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:11.180154,0.129891,udp,147.32.86.165,57932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,83,224,153.5,0.2703583061889251,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:12.621720,0.153172,tcp,147.32.86.20,3991.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,62,53853,1451,52402,868.5967741935484,0.0269437171559616,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:08:13.366262,0.307809,tcp,147.32.84.170,47545.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:15.307443,0.000624,udp,109.194.233.80,32537.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:15.586206,0.000218,udp,147.32.84.138,55163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:15.604806,0.00019,udp,147.32.85.34,53188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:15.605865,0.000327,udp,147.32.85.34,55691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:16.665071,0.000394,udp,147.32.84.170,41698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:16.666115,0.000333,udp,147.32.84.170,58668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:18.398951,0.0,tcp,147.32.84.165,1650.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:18.399088,0.0,tcp,147.32.84.165,1649.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:18.986594,0.000223,udp,147.32.84.138,42490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:19.000193,0.0,tcp,147.32.84.165,1659.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:19.000261,0.0,tcp,147.32.84.165,1658.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:19.000341,0.0,tcp,147.32.84.165,1662.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:19.000348,0.0,tcp,147.32.84.165,1661.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:19.000475,0.0,tcp,147.32.84.165,1665.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:19.626946,0.002025,udp,147.32.85.6,60650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,76,211,143.5,0.26480836236933797,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:23.538695,0.355155,udp,147.32.84.229,13363.0,<->,125.224.7.10,2758.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:23.912329,3544.844482,udp,147.32.84.229,13363.0,<->,188.163.38.170,62832.0,CON,0.0,0.0,4,777,529,248,194.25,0.6808236808236808,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:26.506882,0.000333,udp,147.32.84.138,38862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:26.665580,0.000277,udp,147.32.84.170,54252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:27.446615,0.000293,udp,147.32.84.138,34183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:29.648557,0.000307,udp,147.32.84.138,38580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:30.416412,0.0,tcp,147.32.84.165,1799.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:30.416692,0.0,tcp,147.32.84.165,1801.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:31.017441,0.0,tcp,147.32.84.165,1805.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:31.017543,0.0,tcp,147.32.84.165,1807.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:31.017727,0.0,tcp,147.32.84.165,1809.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:32.084506,3032.910889,udp,147.32.84.111,48922.0,<->,78.90.33.182,10083.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:35.186722,128.967117,tcp,147.32.84.59,45664.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,19,8564,5814,2750,450.7368421052632,0.6788883699205979,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:08:36.664476,0.00027,udp,147.32.84.170,41152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:36.728828,0.000226,udp,147.32.84.138,48103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:37.310136,1278.914429,udp,91.19.142.88,7557.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,39,29689,528,29161,761.2564102564103,0.01778436457947388,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:37.329347,0.001663,udp,147.32.84.59,62684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,503,80,423,251.5,0.15904572564612326,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:38.014670,0.000251,udp,147.32.84.170,59236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:39.815722,0.000241,udp,147.32.84.59,34734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:39.852951,0.000312,udp,147.32.84.138,55645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:41.307785,0.022989,udp,147.32.87.36,48388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:08:41.533770,56.517673,tcp,147.32.84.59,50949.0,->,77.75.76.3,80.0,FSPA_FSPA,0.0,0.0,42,26701,3323,23378,635.7380952380952,0.12445226770532938,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:08:42.038203,0.000291,udp,147.32.85.7,51325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,94,144,119.0,0.3949579831932773,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:42.433744,0.0,tcp,147.32.84.165,1919.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:42.433930,0.0,tcp,147.32.84.165,1921.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:42.547087,0.000204,udp,147.32.85.25,38468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:43.034509,0.0,tcp,147.32.84.165,1925.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:43.034639,0.0,tcp,147.32.84.165,1927.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:43.034751,0.0,tcp,147.32.84.165,1929.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:43.169207,0.00028,udp,147.32.84.138,32866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:43.634916,61.285034,tcp,147.32.84.165,1946.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:08:43.635039,0.0,tcp,147.32.84.165,1931.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:44.324997,0.000201,udp,147.32.84.138,52850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:45.031812,0.108021,udp,147.32.84.184,59371.0,<->,129.10.73.144,2493.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:46.665812,0.000367,udp,147.32.84.170,44623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:46.667014,0.017995,tcp,147.32.84.170,34326.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:49.600673,0.000548,udp,81.14.25.5,45953.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:08:53.283473,0.0001,udp,147.32.84.138,53588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:54.451711,0.0,tcp,147.32.84.165,2040.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:55.052728,0.0,tcp,147.32.84.165,2046.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:55.052929,0.0,tcp,147.32.84.165,2048.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:55.053067,0.0,tcp,147.32.84.165,2050.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:55.178985,0.000166,udp,147.32.84.138,60280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:55.654042,0.0,tcp,147.32.84.165,2052.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:08:56.429152,0.000231,udp,147.32.84.59,48372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:08:56.665255,0.000416,udp,147.32.84.170,55806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:08:57.221171,0.000327,udp,147.32.85.6,59675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,85,164,124.5,0.3413654618473896,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:00.614610,27.05884,tcp,147.32.86.50,53194.0,->,66.235.139.152,80.0,SPA_SRPA,0.0,0.0,17,9412,7887,1525,553.6470588235294,0.837972800679983,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:09:03.214651,115.218849,tcp,147.32.86.110,48870.0,->,74.125.232.199,443.0,FSPA_FSPA,0.0,0.0,19,4141,2314,1827,217.94736842105263,0.5588022216855832,16,1,flow=Background-google-analytics8,Background,-1 2011-08-16 16:09:03.739684,0.000159,udp,147.32.85.25,49525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:06.469074,0.0,tcp,147.32.84.165,2160.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:06.665840,0.0002,udp,147.32.84.170,57510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:07.070334,0.0,tcp,147.32.84.165,2166.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:07.070589,0.0,tcp,147.32.84.165,2168.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:07.070594,0.0,tcp,147.32.84.165,2170.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:07.671424,0.0,tcp,147.32.84.165,2172.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:09.021101,0.252188,tcp,147.32.84.170,44056.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:09.847486,2427.002197,udp,81.210.49.14,5455.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:10.153453,0.072275,udp,147.32.85.36,57761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:10.687495,0.000269,udp,147.32.84.138,52516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:12.166395,0.000205,udp,147.32.84.170,39946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:13.786094,91.1446,udp,147.32.84.229,13363.0,<->,82.32.147.95,8813.0,CON,0.0,0.0,10,670,370,300,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:14.924659,2182.699463,udp,147.32.84.229,13363.0,->,151.37.64.4,23965.0,INT,0.0,,6,882,882,0,147.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:09:16.665301,0.000262,udp,147.32.84.170,38921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:17.774561,2259.590332,udp,147.32.84.94,7103.0,<->,208.126.207.144,7436.0,CON,0.0,0.0,76,59146,57778,1368,778.2368421052631,0.9768707943056166,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:18.270762,15.365764,udp,147.32.84.94,7103.0,->,89.175.255.4,7501.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:09:18.486672,0.0,tcp,147.32.84.165,2280.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:19.087710,0.0,tcp,147.32.84.165,2286.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:19.087827,0.0,tcp,147.32.84.165,2288.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:19.087881,0.0,tcp,147.32.84.165,2290.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:19.688151,0.0,tcp,147.32.84.165,2292.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:24.746477,0.009294,tcp,147.32.84.170,57775.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,1966,1301,665,218.44444444444446,0.6617497456765005,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.798244,90.146378,tcp,147.32.84.170,46918.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,19,8263,3890,4373,434.89473684210526,0.47077332687885753,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.798304,39.714397,tcp,147.32.84.170,46919.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,14,6388,3688,2700,456.2857142857143,0.5773324984345648,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.798356,39.714336,tcp,147.32.84.170,46920.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,14,6057,3706,2351,432.64285714285717,0.6118540531616312,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.810005,0.000193,udp,147.32.84.170,37361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.810597,0.000439,udp,147.32.84.170,41154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.822078,0.000174,udp,147.32.84.170,37572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.823697,0.000173,udp,147.32.84.170,59343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.824208,0.000329,udp,147.32.84.170,44063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.824697,0.002022,udp,147.32.84.170,49396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,71,182,126.5,0.28063241106719367,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.826714,0.000307,udp,147.32.84.170,59708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.827135,0.000323,udp,147.32.84.170,37314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,71,200,135.5,0.26199261992619927,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.828085,90.743889,tcp,147.32.84.170,49735.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,38,22950,7252,15698,603.9473684210526,0.3159912854030501,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.875126,0.000245,udp,147.32.84.170,49251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.876296,0.000293,udp,147.32.84.170,35603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,83,200,141.5,0.29328621908127206,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.876303,39.636395,tcp,147.32.84.170,46929.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,27,25652,2602,23050,950.074074074074,0.1014345859971932,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.876720,127.076797,tcp,147.32.84.170,46931.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,26,18012,2730,15282,692.7692307692307,0.15156562291805464,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.877912,18.86602,tcp,147.32.84.170,46936.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.881009,0.036789,tcp,147.32.84.170,40328.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,14,8869,1609,7260,633.5,0.1814184237230804,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.952828,0.002113,udp,147.32.84.170,38733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.955299,0.000439,udp,147.32.84.170,47090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.955459,0.000331,udp,147.32.84.170,38874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.956122,0.002203,udp,147.32.84.170,44862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.960147,0.000443,udp,147.32.84.170,50598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.960733,0.00029,udp,147.32.84.170,56154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.961185,0.002149,udp,147.32.84.170,51241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.964732,0.007725,udp,147.32.84.170,34440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.964811,0.000442,udp,147.32.84.170,55431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,87,174,130.5,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.966010,0.00182,udp,147.32.84.170,53133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.966964,0.001979,udp,147.32.84.170,46772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,81,151,116.0,0.34913793103448276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.970580,0.002225,udp,147.32.84.170,55955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.971912,0.000212,udp,147.32.84.170,34189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,79,166,122.5,0.3224489795918367,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.972859,0.0005,udp,147.32.84.170,59613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.972940,0.000533,udp,147.32.84.170,52241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.975828,0.000294,udp,147.32.84.170,45885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.975908,0.002042,udp,147.32.84.170,58037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.976071,0.003781,udp,147.32.84.170,38681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,82,152,117.0,0.3504273504273504,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.981316,0.000281,udp,147.32.84.170,46004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:24.986710,0.000424,udp,147.32.84.170,36689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.175571,0.0002,udp,147.32.84.170,56724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.176055,0.000201,udp,147.32.84.170,42401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.181065,0.00749,tcp,147.32.84.170,40330.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,11,3769,851,2918,342.6363636363636,0.22578933404085966,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.181223,0.006254,tcp,147.32.84.170,40331.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,11,3122,831,2291,283.8181818181818,0.2661755285073671,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.197356,0.000413,udp,147.32.84.170,53395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.289209,0.000272,udp,147.32.84.170,52386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.289898,58.456985,tcp,147.32.84.170,60949.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,20,7433,2945,4488,371.65,0.3962061078972151,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.533978,18.225214,tcp,147.32.84.170,44985.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.549780,0.000385,udp,147.32.84.170,36628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.551734,0.002082,udp,147.32.84.170,55293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,88,195,141.5,0.31095406360424027,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:25.636293,2413.668945,udp,213.146.167.51,11979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:26.017125,0.013158,tcp,147.32.84.215,52882.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:09:29.455225,0.000337,udp,147.32.85.25,53683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:30.503605,0.0,tcp,147.32.84.165,2399.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:30.503736,0.0,tcp,147.32.84.165,2400.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:30.503791,0.0,tcp,147.32.84.165,2401.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:30.759002,19.218966,tcp,147.32.86.111,33561.0,->,81.0.237.209,80.0,SRPA_FSPA,0.0,0.0,131,124776,5195,119581,952.4885496183206,0.041634609219721744,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:09:31.104418,0.0,tcp,147.32.84.165,2406.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.104543,0.0,tcp,147.32.84.165,2405.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.104608,0.0,tcp,147.32.84.165,2408.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.104669,0.0,tcp,147.32.84.165,2407.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.104723,0.0,tcp,147.32.84.165,2410.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.263882,0.000304,udp,147.32.84.170,39371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:31.264593,0.001965,udp,147.32.84.170,51341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:31.706052,0.0,tcp,147.32.84.165,2411.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:31.706137,0.0,tcp,147.32.84.165,2412.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:33.369196,0.000151,udp,147.32.84.138,49716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:36.665306,0.000259,udp,147.32.84.170,43524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:36.667135,0.018328,tcp,147.32.84.170,46769.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:37.985478,0.000778,udp,99.250.112.11,25844.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:39.337145,115.742523,tcp,147.32.84.59,50989.0,->,193.51.224.9,80.0,FSPA_FSPA,0.0,0.0,14,4309,1532,2777,307.7857142857143,0.3555349268971919,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:09:40.018919,0.000237,udp,147.32.84.170,59762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:09:40.035699,0.000203,udp,147.32.85.25,56414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:41.429397,0.00028,udp,147.32.87.61,63179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:42.385992,0.13168,udp,147.32.84.59,54866.0,<->,173.3.226.170,8988.0,CON,0.0,0.0,2,541,74,467,270.5,0.1367837338262477,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:09:42.521273,0.0,tcp,147.32.84.165,2520.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:42.815106,0.205763,tcp,147.32.86.20,4058.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31071,1089,29982,776.775,0.03504875929323163,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:09:43.122410,0.0,tcp,147.32.84.165,2526.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:43.122597,0.0,tcp,147.32.84.165,2528.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:43.122698,0.0,tcp,147.32.84.165,2530.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:43.723490,0.0,tcp,147.32.84.165,2532.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:43.930465,2526.739502,udp,125.63.92.90,35678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:45.101973,0.0,icmp,147.32.85.125,2563.0,->,64.40.10.54,,URHPRO,0.0,,1,86,86,0,86.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:09:46.193760,1.597358,tcp,147.32.84.181,51971.0,->,209.85.149.191,80.0,SRPA_SPA,0.0,0.0,10,5071,1582,3489,507.1,0.31197002563596926,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:09:49.132518,19.512297,tcp,147.32.84.59,56162.0,->,119.252.154.10,80.0,FSA_FSA,0.0,0.0,6,362,242,120,60.333333333333336,0.6685082872928176,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:09:53.288175,0.000278,udp,147.32.84.59,55288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:09:53.616792,2451.757324,udp,147.32.84.229,13363.0,->,92.255.162.83,45891.0,INT,0.0,,6,480,480,0,80.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:09:53.644440,83.083405,udp,147.32.84.229,13363.0,->,213.109.20.60,55597.0,INT,0.0,,9,666,666,0,74.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:09:54.538387,61.29924,tcp,147.32.84.165,2559.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:09:54.538444,0.0,tcp,147.32.84.165,2641.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:55.139294,0.0,tcp,147.32.84.165,2647.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:55.139514,0.0,tcp,147.32.84.165,2649.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:55.139625,0.0,tcp,147.32.84.165,2651.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:55.740368,0.0,tcp,147.32.84.165,2653.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:09:56.937380,0.000716,udp,83.69.50.164,31752.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:09:56.997233,10.849242,tcp,147.32.84.59,56195.0,->,138.108.7.20,80.0,SA_SRA,0.0,0.0,4,244,122,122,61.0,0.5,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:00.001501,0.000303,udp,147.32.85.34,50484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:01.127221,0.20397,udp,147.32.84.59,62254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,75,134,104.5,0.3588516746411483,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:01.182303,0.000337,udp,147.32.84.170,53558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:01.184311,242.585342,tcp,147.32.84.170,44992.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,24,4574,3060,1514,190.58333333333334,0.6689986882378662,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:01.220282,0.000285,udp,147.32.84.170,36676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:01.923837,0.187696,udp,147.32.84.59,50020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:02.109024,0.298789,udp,147.32.84.59,51813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,457,78,379,228.5,0.17067833698030635,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:03.054489,0.000588,udp,217.111.199.186,14254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:04.751790,0.231959,tcp,147.32.86.20,4073.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,30186,969,29217,794.3684210526316,0.03210097396143908,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:10:06.108444,14.215338,tcp,147.32.84.59,51592.0,->,68.232.35.229,80.0,FSPA_FSRPA,0.0,0.0,11,1798,1101,697,163.45454545454547,0.6123470522803115,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:06.555737,0.0,tcp,147.32.84.165,2760.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:06.555835,0.0,tcp,147.32.84.165,2761.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:06.555927,0.0,tcp,147.32.84.165,2762.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.157020,0.0,tcp,147.32.84.165,2767.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.157120,0.0,tcp,147.32.84.165,2766.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.157174,0.0,tcp,147.32.84.165,2769.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.157232,0.0,tcp,147.32.84.165,2768.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.157284,0.0,tcp,147.32.84.165,2771.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.757791,0.0,tcp,147.32.84.165,2772.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.757919,0.0,tcp,147.32.84.165,2773.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:07.893007,6.02757,udp,147.32.84.229,13363.0,->,184.161.211.253,59614.0,INT,0.0,,3,537,537,0,179.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:10:11.016211,0.000451,udp,147.32.84.170,47016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:11.017201,0.00026,udp,147.32.84.170,60741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:13.214880,2.599918,tcp,147.32.86.50,53253.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,12,3384,1008,2376,282.0,0.2978723404255319,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:10:13.354549,7.767429,tcp,147.32.84.59,56280.0,->,81.94.208.241,80.0,FSRPA_FSPA,0.0,0.0,15,2691,1206,1485,179.4,0.44816053511705684,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:13.838714,0.000675,udp,91.74.71.98,53273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:14.397458,0.000263,udp,147.32.84.138,53613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:15.421419,0.001919,udp,147.32.84.130,35346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,95,252,173.5,0.2737752161383285,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:16.665180,0.000414,udp,147.32.84.170,37208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:18.573587,0.0,tcp,147.32.84.165,2880.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:18.573689,0.0,tcp,147.32.84.165,2881.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:18.573710,0.0,tcp,147.32.84.165,2882.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.174541,0.0,tcp,147.32.84.165,2887.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.174696,0.0,tcp,147.32.84.165,2886.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.174762,0.0,tcp,147.32.84.165,2889.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.174829,0.0,tcp,147.32.84.165,2888.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.174895,0.0,tcp,147.32.84.165,2891.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.294334,15.243038,udp,147.32.84.94,7103.0,->,93.40.98.59,7131.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:10:19.774986,0.0,tcp,147.32.84.165,2892.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:19.775068,0.0,tcp,147.32.84.165,2893.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:20.062090,0.000345,udp,147.32.84.19,35854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,67,268,167.5,0.2,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:21.321499,0.000559,udp,95.104.52.246,15125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,227,165,62,113.5,0.7268722466960352,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:21.457733,2268.906738,udp,147.32.84.229,13363.0,<->,95.31.135.12,41804.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:25.175858,0.000278,udp,147.32.84.138,41959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:26.667147,0.018056,tcp,147.32.84.170,49174.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:29.198737,0.004884,udp,147.32.84.164,56704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,78,167,122.5,0.3183673469387755,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.261393,0.00038,udp,147.32.84.164,35621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.261576,0.042965,udp,147.32.84.164,37992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.262662,0.000227,udp,147.32.84.164,60056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.263291,20.2941,tcp,147.32.84.164,42115.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,15,3099,1450,1649,206.6,0.46789286866731206,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.304963,0.000238,udp,147.32.84.164,57756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.305524,0.04061,udp,147.32.84.164,38655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.305893,0.020496,udp,147.32.84.164,55772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.438289,0.135213,tcp,147.32.84.164,48012.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1420,705,715,142.0,0.4964788732394366,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.446343,0.619841,tcp,147.32.84.164,42887.0,->,80.250.15.41,80.0,FSPA_FSPA,0.0,0.0,44,35488,4847,30641,806.5454545454545,0.13658137962128045,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.446427,127.484177,tcp,147.32.84.164,42888.0,->,80.250.15.41,80.0,SPA_SRPA,0.0,0.0,12,3633,1613,2020,302.75,0.44398568676025324,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:29.668759,0.004667,udp,147.32.84.164,40904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:10:30.590623,0.0,tcp,147.32.84.165,3000.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:30.590999,0.0,tcp,147.32.84.165,3001.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:30.591016,0.0,tcp,147.32.84.165,3002.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.191558,0.0,tcp,147.32.84.165,3007.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.191688,0.0,tcp,147.32.84.165,3006.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.191744,0.0,tcp,147.32.84.165,3009.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.191796,0.0,tcp,147.32.84.165,3008.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.191851,0.0,tcp,147.32.84.165,3011.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.792012,0.0,tcp,147.32.84.165,3012.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:31.792133,0.0,tcp,147.32.84.165,3013.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:32.508920,239.27243,tcp,147.32.85.5,42670.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,41,9259,5500,3759,225.82926829268294,0.594016632465709,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:10:34.522555,0.000315,udp,147.32.85.34,60051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:35.187878,0.158098,udp,147.32.85.36,39696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:35.684953,0.004571,tcp,147.32.84.59,55586.0,->,195.113.79.5,80.0,FSPA_FSPA,0.0,0.0,10,1290,801,489,129.0,0.6209302325581395,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:39.268091,3591.801758,udp,147.32.84.59,17344.0,<->,88.198.8.200,53012.0,CON,0.0,0.0,3441,2563786,1945961,617825,745.0700377797152,0.7590184984238154,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:40.778454,0.000404,udp,147.32.84.168,57610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,88,233,160.5,0.27414330218068533,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:41.610586,0.00029,udp,147.32.84.168,55252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,84,224,154.0,0.2727272727272727,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:42.496625,3550.479736,udp,147.32.84.59,17344.0,<->,46.4.80.141,50012.0,CON,0.0,0.0,2703,2027316,1711031,316285,750.0244173140954,0.8439883076935218,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:42.608182,0.0,tcp,147.32.84.165,3120.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:42.608277,0.0,tcp,147.32.84.165,3121.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:42.608408,0.0,tcp,147.32.84.165,3122.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.208667,0.0,tcp,147.32.84.165,3127.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.208823,0.0,tcp,147.32.84.165,3126.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.208881,0.0,tcp,147.32.84.165,3129.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.208990,0.0,tcp,147.32.84.165,3128.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.209005,0.0,tcp,147.32.84.165,3131.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.296953,3599.615967,udp,82.53.109.202,35324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1927,1431,496,120.4375,0.7426050856253243,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:43.809498,0.0,tcp,147.32.84.165,3132.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:43.809629,0.0,tcp,147.32.84.165,3133.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:45.271196,0.002206,udp,95.84.219.248,64990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,506,60,283.0,0.8939929328621908,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:48.592715,3432.955811,udp,147.32.84.59,17344.0,<->,46.4.25.149,55012.0,CON,0.0,0.0,3361,2567294,1889606,677688,763.8482594465933,0.7360302326106788,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:50.636114,0.000189,udp,147.32.84.170,43002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:50.637024,0.000283,udp,147.32.84.170,41865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:10:52.681951,3550.987061,udp,147.32.84.59,17344.0,<->,78.46.51.206,50012.0,CON,0.0,0.0,2943,2187398,1520374,667024,743.2545022086307,0.6950605239650032,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:54.092496,1806.36792,udp,220.247.216.50,3128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,968,720,248,121.0,0.743801652892562,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:54.625068,0.0,tcp,147.32.84.165,3240.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:54.625190,0.0,tcp,147.32.84.165,3241.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:54.625312,0.0,tcp,147.32.84.165,3242.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:54.911602,2444.910156,udp,86.176.99.53,14009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,532,287,245,66.5,0.5394736842105263,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:55.226305,0.0,tcp,147.32.84.165,3247.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.226373,0.0,tcp,147.32.84.165,3246.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.226525,0.0,tcp,147.32.84.165,3249.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.226538,0.0,tcp,147.32.84.165,3248.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.226543,0.0,tcp,147.32.84.165,3251.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.826881,0.0,tcp,147.32.84.165,3252.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:55.827013,61.300789,tcp,147.32.84.165,3264.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:10:55.827080,0.0,tcp,147.32.84.165,3253.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:10:56.046024,0.000275,udp,147.32.84.138,46995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:56.057978,0.000316,udp,147.32.84.138,43721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:10:56.174589,0.000707,udp,80.243.1.251,27273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,75,465,270.0,0.1388888888888889,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:56.372781,9.520922,tcp,147.32.85.114,49563.0,->,77.75.73.127,80.0,SRPA_FSPA,0.0,0.0,15,6272,1904,4368,418.1333333333333,0.30357142857142855,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:10:58.302078,3554.673828,udp,147.32.84.59,17344.0,<->,188.40.108.66,50012.0,CON,0.0,0.0,1601,1171188,946223,224965,731.5352904434728,0.8079172600812167,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:10:58.307810,0.000691,udp,124.213.229.206,24138.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:59.856496,0.000549,udp,108.20.128.186,53387.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:10:59.943129,1523.982544,udp,77.29.120.140,18884.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,293,159,134,73.25,0.5426621160409556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:00.564095,3599.751709,udp,147.32.84.59,17344.0,<->,88.198.10.130,55012.0,CON,0.0,0.0,5178,4360179,1601654,2758525,842.058516801854,0.36733675383510633,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:11:03.930737,0.000424,udp,147.32.84.171,56652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:06.119311,0.333473,tcp,147.32.87.252,1156.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,11,3365,1919,1446,305.90909090909093,0.5702823179791976,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:11:09.195764,0.556204,tcp,147.32.85.26,60698.0,->,171.64.167.196,80.0,FSRPA_FSPA,0.0,0.0,10,2002,919,1083,200.2,0.45904095904095904,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:09.430613,0.00031,udp,147.32.84.170,50874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:11.755868,3427.199463,udp,147.32.84.229,13363.0,<->,95.25.15.110,21695.0,CON,0.0,0.0,6,527,227,300,87.83333333333333,0.4307400379506641,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:13.018462,0.000374,udp,147.32.84.170,43669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:13.512112,0.000615,udp,89.160.179.129,20603.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:14.353755,0.000394,udp,147.32.84.164,56431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:14.353954,0.000367,udp,147.32.84.164,59045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:14.354525,0.000504,udp,147.32.84.164,37877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:14.355144,249.43718,tcp,147.32.84.164,58222.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,32,4626,1538,3088,144.5625,0.33246865542585385,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:15.713930,3563.539551,udp,147.32.84.59,17344.0,<->,188.40.108.115,50012.0,CON,0.0,0.0,5051,3744718,2788697,956021,741.381508612156,0.7447014701774606,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:11:16.086419,0.000416,udp,147.32.84.170,57164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,625,83,542,312.5,0.1328,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:16.544245,0.000623,udp,80.242.44.102,27978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:18.170122,2.182668,tcp,147.32.86.168,36301.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,12,4191,2979,1212,349.25,0.7108088761632069,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:18.603594,3362.680176,udp,188.97.77.220,49420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,3048,2236,812,138.54545454545453,0.7335958005249343,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:20.168138,0.00033,udp,147.32.84.164,42473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,538,73,465,269.0,0.13568773234200743,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:21.157480,3553.654541,udp,147.32.84.59,17344.0,<->,46.4.116.181,51012.0,CON,0.0,0.0,2203,1608741,1253929,354812,730.2501134816159,0.7794474063879767,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:11:24.753297,0.000353,udp,147.32.84.164,50701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:24.753716,0.000456,udp,147.32.84.164,50926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:24.753846,0.000653,udp,147.32.84.164,44343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,83,499,291.0,0.14261168384879724,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:25.177817,3355.625,udp,90.48.87.87,37618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,4672,3924,748,194.66666666666666,0.8398972602739726,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:26.666969,0.000412,udp,147.32.84.170,49986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:26.817075,0.207308,tcp,147.32.86.20,4133.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,35445,1091,34354,824.3023255813954,0.03078008181689942,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:27.965027,3557.459717,udp,173.79.125.189,42173.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2103,453,1650,175.25,0.21540656205420827,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:11:28.474279,0.000441,udp,147.32.84.138,34271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:34.129282,1.005188,tcp,147.32.86.20,4138.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,106,107994,1766,106228,1018.811320754717,0.016352760338537328,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:34.350932,0.0,tcp,147.32.84.59,36928.0,->,88.198.20.131,38088.0,S_,0.0,,1,74,74,0,74.0,1.0,16,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 16:11:36.668575,0.000433,udp,147.32.84.170,47935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:39.497400,12.359267,tcp,147.32.85.7,60896.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:42.293203,24.100895,tcp,88.100.105.231,3422.0,->,147.32.84.222,80.0,FSPA_FSPA,0.0,0.0,317,290711,11693,279018,917.0694006309149,0.040222076220026076,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:42.294981,0.000324,udp,147.32.84.59,51359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:44.017375,0.000347,udp,147.32.84.170,46923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:44.308174,14.422707,tcp,84.42.140.231,49195.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,16,7947,1198,6749,496.6875,0.15074871020510885,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:11:46.667627,0.018837,tcp,147.32.84.170,43819.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:47.978324,15.309362,udp,147.32.84.94,7103.0,->,178.49.155.43,32558.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:11:48.400564,0.0,udp,78.128.207.249,32782.0,->,239.255.255.250,1900.0,INT,0.0,,1,406,406,0,406.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:11:50.163428,0.000332,udp,147.32.84.164,32883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,76,222,149.0,0.2550335570469799,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.166997,0.000242,udp,147.32.84.164,39419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.167840,0.000561,udp,147.32.84.164,45934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.168646,539.324707,tcp,147.32.84.164,35695.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,977,747127,156898,590229,764.7154554759468,0.2100017801525042,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.168654,529.323792,tcp,147.32.84.164,35696.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,622,486506,100649,385857,782.1639871382637,0.20688131287178368,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.169416,0.000261,udp,147.32.84.164,60367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.170275,0.000412,udp,147.32.84.164,40271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.450834,0.000245,udp,147.32.84.164,55423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.451430,0.000505,udp,147.32.84.164,40290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.453099,19.010399,tcp,147.32.84.164,50999.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.668087,0.000215,udp,147.32.84.164,44836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.670323,0.00035,udp,147.32.84.164,45551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.671008,0.000252,udp,147.32.84.164,58933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.671200,0.000205,udp,147.32.84.164,38082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.672504,0.000287,udp,147.32.84.164,52404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.672594,0.247192,udp,147.32.84.164,34447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.672919,0.000509,udp,147.32.84.164,43261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.676053,0.000279,udp,147.32.84.164,60000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.678262,0.000314,udp,147.32.84.164,48733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.678322,0.00026,udp,147.32.84.164,48446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:50.679661,0.000266,udp,147.32.84.164,39598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:51.536499,0.004909,udp,147.32.84.164,55672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,89,150,119.5,0.3723849372384937,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:51.537717,0.000357,udp,147.32.84.164,56450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:51.541841,0.006522,udp,147.32.84.164,54529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:51.662024,0.000416,udp,147.32.84.164,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:54.677016,0.000292,udp,147.32.85.34,63916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:54.926522,0.000496,udp,147.32.84.164,43120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:54.930046,0.055206,udp,147.32.84.164,34387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:55.024409,0.163407,udp,147.32.84.164,53041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,71,168,119.5,0.29707112970711297,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:55.144370,0.000374,udp,147.32.84.164,45406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,74,134,104.0,0.3557692307692308,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:55.188142,0.045758,udp,147.32.84.164,57982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,338,71,267,169.0,0.21005917159763313,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:55.824883,0.000345,udp,147.32.84.138,33184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:55.915873,0.000162,udp,147.32.84.164,39774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,72,139,105.5,0.3412322274881517,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:55.916528,0.148201,udp,147.32.84.164,54505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,72,172,122.0,0.29508196721311475,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:56.667581,0.000347,udp,147.32.84.170,50001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:56.697317,61.297031,tcp,147.32.84.165,3265.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:11:56.886721,0.009754,udp,147.32.84.170,52866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:56.896880,0.009883,udp,147.32.84.170,54147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:11:57.404066,0.000247,udp,147.32.84.164,53279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.404133,0.000199,udp,147.32.84.164,49357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.404187,0.000247,udp,147.32.84.164,55282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.404487,0.000424,udp,147.32.84.164,60906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.486144,532.007202,tcp,147.32.84.164,60303.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,807,860869,66120,794749,1066.7521685254028,0.07680611103431532,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.563015,241.911728,tcp,147.32.84.164,60677.0,->,74.125.232.223,80.0,FSPA_FSPA,0.0,0.0,256,255017,8193,246824,996.16015625,0.03212726994670943,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.690348,0.009854,udp,147.32.84.164,46503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,77,158,117.5,0.3276595744680851,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.693991,521.806274,tcp,147.32.84.164,36818.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,731,569705,105682,464023,779.3502051983584,0.18550302349461564,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.705182,521.786804,tcp,147.32.84.164,60317.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,1053,1209876,80646,1129230,1148.980056980057,0.06665641768247324,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:57.705579,521.794556,tcp,147.32.84.164,35737.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,1347,1025450,232893,792557,761.2843355605048,0.22711297479155493,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:11:59.540646,0.000205,udp,147.32.84.138,39429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:11:59.954453,529.538391,tcp,147.32.84.164,44586.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,276,110937,92572,18365,401.94565217391306,0.8344555919125269,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:00.047063,0.246977,udp,147.32.85.7,48586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:00.459072,0.000259,udp,147.32.85.34,62580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:00.460188,0.000327,udp,147.32.85.34,64719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:00.469692,0.000307,udp,147.32.85.34,60724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:00.760851,0.000343,udp,147.32.84.138,48753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:02.586223,526.914062,tcp,147.32.84.164,44588.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,526,218104,182389,35715,414.64638783269965,0.8362478450647397,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:02.586357,16.884769,tcp,147.32.84.164,60329.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:03.524571,2.273695,tcp,147.32.86.168,36318.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,15,5382,3037,2345,358.8,0.5642883686361947,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:12:06.253463,0.12593,udp,147.32.84.59,51127.0,<->,83.158.235.188,29719.0,CON,0.0,0.0,2,557,78,479,278.5,0.1400359066427289,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:12:08.313958,0.000188,udp,147.32.84.134,37696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:08.446285,0.000355,udp,147.32.84.134,49663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:08.470633,309.346436,tcp,147.32.84.134,46777.0,->,69.63.189.11,80.0,FSPA_FSPA,0.0,0.0,22,2322,1448,874,105.54545454545455,0.6236003445305771,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:08.683981,0.008685,udp,147.32.84.134,44829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,476,84,392,238.0,0.17647058823529413,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:08.686985,38.934555,tcp,147.32.84.134,56176.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:08.687235,38.934643,tcp,147.32.84.134,56180.0,->,80.239.149.8,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:10.092620,3523.775146,udp,147.32.84.59,17344.0,<->,188.40.10.195,50012.0,CON,0.0,0.0,2722,2022479,1860987,161492,743.012123438648,0.9201514576912788,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:12:10.118606,258.496582,tcp,147.32.84.134,56192.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,37,10893,2564,8329,294.4054054054054,0.23538051959974296,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:10.395992,0.000269,udp,147.32.84.138,36851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:10.448817,79.546844,tcp,147.32.84.134,56340.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:10.448828,79.583199,tcp,147.32.84.134,56342.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:12:10.493036,0.000201,udp,147.32.84.138,39904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:15.013432,114.805771,tcp,147.32.86.6,51330.0,->,77.75.77.86,80.0,SRPA_FSPA,0.0,0.0,12,5996,1292,4704,499.6666666666667,0.21547698465643764,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:12:15.016834,0.000455,udp,147.32.84.170,47387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:15.019300,0.219375,tcp,147.32.84.170,47885.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:16.668707,0.018785,tcp,147.32.84.170,43825.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:16.761565,0.000279,udp,147.32.86.6,61808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:20.039364,0.000326,udp,147.32.84.164,42628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:20.087598,0.000461,udp,147.32.84.164,47592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:20.088566,249.403641,tcp,147.32.84.164,42232.0,->,209.85.149.139,80.0,FSPA_FSPA,0.0,0.0,36,16494,7396,9098,458.1666666666667,0.44840548078089004,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:21.405454,61.961079,tcp,147.32.84.59,4472.0,->,69.171.229.24,443.0,SRPA_SPA,0.0,0.0,16,6287,1220,5067,392.9375,0.19405121679656434,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:12:21.913372,0.002123,udp,147.32.84.170,41056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.021143,51.753094,tcp,147.32.84.170,43929.0,->,92.123.64.154,80.0,FSPA_FSPA,0.0,0.0,46,35607,2985,32622,774.0652173913044,0.08383183081978263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.172880,0.000465,udp,147.32.84.170,39129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.201074,0.002263,udp,147.32.84.170,55304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.204961,51.569012,tcp,147.32.84.170,43939.0,->,92.123.64.154,80.0,FSPA_FSPA,0.0,0.0,20,9446,1069,8377,472.3,0.11316959559601948,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.339775,51.425179,tcp,147.32.84.170,40437.0,->,80.239.149.26,80.0,FSPA_FSPA,0.0,0.0,24,11302,1984,9318,470.9166666666667,0.17554415147761457,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.349211,0.000344,udp,147.32.84.170,34777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,81,213,147.0,0.2755102040816326,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.358294,301.41629,tcp,147.32.84.170,34770.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,40,19519,1707,17812,487.975,0.08745325067882576,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.359103,301.415497,tcp,147.32.84.170,34772.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,37,20451,1443,19008,552.7297297297297,0.07055889687545841,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:22.386763,0.799298,tcp,88.102.89.225,1461.0,->,147.32.87.36,80.0,FSRPA_SPA,0.0,0.0,50,47479,1462,46017,949.58,0.030792560921670632,16,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 16:12:24.310404,19.462461,tcp,147.32.84.170,59749.0,->,92.123.64.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:24.310518,19.462606,tcp,147.32.84.170,43953.0,->,92.123.64.154,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:24.310935,19.462175,tcp,147.32.84.170,34447.0,->,92.123.64.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:24.311485,19.544821,tcp,147.32.84.170,33894.0,->,69.171.242.39,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:25.054641,0.000383,udp,147.32.84.59,41894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:25.433653,0.000228,udp,147.32.84.170,50462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.061468,0.000374,udp,147.32.84.138,49912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:26.087907,0.000369,udp,147.32.84.170,45774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.321758,0.001856,udp,147.32.84.170,58841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,81,401,241.0,0.16804979253112035,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.324270,307.450653,tcp,147.32.84.170,39389.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,37,20913,1581,19332,565.2162162162163,0.07559890976904318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.336450,0.000266,udp,147.32.84.170,45110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,79,137,108.0,0.36574074074074076,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.356516,0.020617,udp,147.32.84.170,43957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:26.667040,0.000506,udp,147.32.84.170,39422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:27.846653,0.000596,udp,24.130.74.16,63579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:28.313937,2855.488525,udp,81.81.36.217,35421.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,468,344,124,117.0,0.7350427350427351,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:30.353040,0.000242,udp,147.32.84.170,39373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:30.821136,302.953674,tcp,147.32.84.170,50350.0,->,195.113.232.73,80.0,FSPA_FSPA,0.0,0.0,24,5833,1336,4497,243.04166666666666,0.22904165952340133,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:30.848952,0.035613,udp,147.32.84.170,37823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,76,204,140.0,0.2714285714285714,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:30.856823,0.130585,udp,147.32.84.170,47231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,86,150,118.0,0.3644067796610169,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:31.775927,0.000359,udp,147.32.84.59,34999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:32.204009,0.000225,udp,147.32.84.170,55241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,73,176,124.5,0.2931726907630522,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:33.161083,0.000262,udp,147.32.84.138,57507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:33.699693,0.013074,tcp,147.32.84.59,4793.0,->,90.183.39.85,80.0,FSPA_FSPA,0.0,0.0,11,4508,1007,3501,409.8181818181818,0.22338065661047027,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:12:36.603613,0.00021,udp,147.32.84.138,41217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:36.667688,0.00034,udp,147.32.84.170,42730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:36.668751,0.018394,tcp,147.32.84.170,39531.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:39.329702,3172.125488,udp,194.175.222.211,64034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:42.550067,0.000835,udp,62.240.71.77,2943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:43.530547,487.169037,udp,78.141.181.42,21219.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3345,124,3221,557.5,0.037070254110612856,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:46.667114,0.000473,udp,147.32.84.170,59096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:46.868881,0.000288,udp,147.32.84.59,57637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:46.941513,0.000782,udp,222.149.23.45,57375.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,607,76,531,303.5,0.12520593080724876,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:12:51.572750,0.000318,udp,147.32.84.164,40394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:52.092763,0.000349,udp,147.32.85.26,52703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:52.585137,0.000258,udp,147.32.84.170,40310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:52.808758,0.007596,udp,147.32.87.252,51012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:52.936405,416.560883,tcp,147.32.84.164,47568.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,41,12952,4546,8406,315.9024390243902,0.3509882643607165,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:12:54.580452,0.000205,udp,147.32.84.138,34482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:12:54.678322,189.828308,tcp,147.32.84.132,58042.0,->,195.24.232.163,80.0,SRPA_FSPA,0.0,0.0,2983,3420835,46116,3374719,1146.7767348307073,0.01348091913231711,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:12:56.667829,0.000301,udp,147.32.84.170,39488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:56.668689,0.000289,udp,147.32.84.170,55188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:56.669743,0.018153,tcp,147.32.84.170,49240.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:12:57.563975,61.282379,tcp,147.32.84.165,3266.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:13:00.693167,0.00032,udp,147.32.84.59,50781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:00.885745,0.438412,tcp,147.32.85.37,4005.0,->,109.123.210.40,80.0,FSPA_FSPA,0.0,0.0,16,8065,896,7169,504.0625,0.1110973341599504,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:02.616520,0.004676,udp,147.32.84.170,42844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,71,126,98.5,0.3604060913705584,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.616658,0.000884,udp,147.32.84.170,40354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.617668,0.000881,udp,147.32.84.170,54239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.619022,0.000505,udp,147.32.84.170,59690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.621143,0.000403,udp,147.32.84.170,47259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.621360,250.032806,tcp,147.32.84.170,40252.0,->,74.125.232.203,443.0,SRPA_FSPA,0.0,0.0,27,2579,1483,1096,95.51851851851852,0.5750290810391625,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.625233,8.129995,tcp,147.32.84.170,57157.0,->,78.24.9.178,80.0,FSPA_FSPA,0.0,0.0,116,124005,4528,119477,1069.0086206896551,0.03651465666706988,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.625388,8.129825,tcp,147.32.84.170,57161.0,->,78.24.9.178,80.0,FSPA_FSPA,0.0,0.0,20,9107,2398,6709,455.35,0.2633139343362249,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.657169,311.121124,tcp,147.32.84.170,34810.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,25,3814,2156,1658,152.56,0.5652857891976927,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.689150,0.002087,udp,147.32.84.170,39509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,85,175,130.0,0.3269230769230769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.691820,93.199051,tcp,147.32.84.170,55962.0,->,89.187.141.81,80.0,S_,0.0,,6,444,444,0,74.0,1.0,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:02.790407,0.000314,udp,147.32.84.170,55278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:03.075141,10.728633,tcp,147.32.84.170,60378.0,->,192.150.8.200,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:03.230261,0.023001,udp,147.32.84.170,51639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,79,148,113.5,0.34801762114537443,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:03.253669,0.00214,udp,147.32.84.170,39099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:03.256568,0.003602,udp,147.32.84.170,38079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,76,135,105.5,0.36018957345971564,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:03.270122,0.001919,udp,147.32.84.170,59168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,78,210,144.0,0.2708333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:05.571311,0.000366,udp,147.32.84.59,42736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:06.668684,0.000329,udp,147.32.84.170,57959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:09.352716,0.366968,tcp,147.32.86.77,37152.0,->,174.129.30.226,80.0,FSPA_FSPA,0.0,0.0,12,2490,1685,805,207.5,0.6767068273092369,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:10.762195,0.019585,tcp,147.32.84.170,38894.0,->,62.168.44.119,80.0,FSPA_FSPA,0.0,0.0,10,1477,853,624,147.7,0.5775220040622884,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.826552,12.932437,tcp,147.32.84.170,50380.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.826760,12.948192,tcp,147.32.84.170,35634.0,->,92.123.64.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.826943,12.948059,tcp,147.32.84.170,34493.0,->,92.123.64.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.827281,12.947675,tcp,147.32.84.170,44007.0,->,92.123.64.154,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.834674,13.023482,tcp,147.32.84.170,33948.0,->,69.171.242.39,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.834740,13.02341,tcp,147.32.84.170,33949.0,->,69.171.242.39,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.835940,0.94349,tcp,147.32.84.170,57198.0,->,78.24.9.178,80.0,FSPA_FSPA,0.0,0.0,221,233767,7959,225808,1057.7692307692307,0.034046721735745425,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:10.995652,0.201141,udp,147.32.84.170,45443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,80,205,142.5,0.2807017543859649,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:13.525216,23.253763,tcp,147.32.84.59,37828.0,->,77.78.110.96,80.0,FSPA_FSPA,0.0,0.0,41,20118,6866,13252,490.6829268292683,0.3412864101799384,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:13:15.567398,0.000172,udp,147.32.84.138,52183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:15.802187,0.002473,udp,147.32.84.59,52943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:16.562109,0.000801,udp,74.72.10.107,18910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,252,190,62,126.0,0.753968253968254,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:13:16.684116,2772.479004,udp,147.32.84.94,7103.0,->,118.179.250.56,7221.0,INT,0.0,,16,1344,1344,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:13:17.741245,0.000139,udp,147.32.84.138,40036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:18.395267,0.125199,udp,147.32.87.135,2698.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:13:22.580895,2.326895,tcp,66.249.66.154,34026.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1552,720,832,155.2,0.4639175257731959,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:25.815741,0.000394,udp,147.32.85.26,64448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:26.669073,0.018434,tcp,147.32.84.170,49301.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:26.958224,115.109383,tcp,147.32.84.59,51018.0,->,209.85.146.95,80.0,FSPA_FSPA,0.0,0.0,40,35166,1201,33965,879.15,0.034152306204856965,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:13:27.008258,0.000766,udp,24.213.130.196,15163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:13:28.893657,0.000235,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,16,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 16:13:30.165843,4.406669,udp,121.54.58.149,6167.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,435,252,183,72.5,0.5793103448275863,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:13:36.125483,0.019599,tcp,147.32.85.123,60679.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:36.665407,0.000484,udp,147.32.84.170,60469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:13:36.866631,0.000395,udp,147.32.84.164,58401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,74,485,279.5,0.13237924865831843,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:36.890098,302.595734,tcp,147.32.84.164,40416.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,173,110381,31726,78655,638.0404624277456,0.28742265426115,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:36.890189,312.595795,tcp,147.32.84.164,40417.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,208,131117,39424,91693,630.3701923076923,0.30067802039399927,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:36.890414,302.595428,tcp,147.32.84.164,39225.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,260,155227,50112,105115,597.026923076923,0.32283043542682655,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:37.522140,0.752686,tcp,208.115.111.74,51351.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,22,11005,1023,9982,500.22727272727275,0.09295774647887324,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:37.971381,0.333773,tcp,147.32.84.59,63592.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1539,699,840,171.0,0.45419103313840153,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:13:38.862853,3.004313,tcp,147.32.84.21,45502.0,->,77.75.76.46,,S_,0.0,,2,148,148,0,74.0,1.0,16,,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:13:39.432354,2775.950928,udp,147.32.84.229,13363.0,<->,71.49.154.83,33636.0,CON,0.0,0.0,6,1220,604,616,203.33333333333334,0.49508196721311476,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:13:39.648193,15.323683,udp,147.32.84.94,7103.0,->,188.81.169.203,50535.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:13:39.766256,0.000333,udp,147.32.84.138,36885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:41.154028,0.115377,udp,147.32.84.164,54596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:41.269805,0.000351,udp,147.32.84.164,40386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:41.715325,0.00032,udp,147.32.84.164,33076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:41.716600,2.773747,tcp,147.32.84.164,32964.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,12,3504,839,2665,292.0,0.2394406392694064,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:41.919046,0.000291,udp,147.32.84.164,35493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,84,150,117.0,0.358974358974359,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:41.990808,0.000292,udp,147.32.84.164,43766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,78,144,111.0,0.35135135135135137,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:42.001365,0.000246,udp,147.32.84.164,58762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,78,142,110.0,0.35454545454545455,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:42.001845,0.154653,udp,147.32.84.164,39788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,78,144,111.0,0.35135135135135137,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:42.026874,0.034637,udp,147.32.84.164,41917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:42.061950,0.048782,udp,147.32.84.164,44818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:42.524459,2676.5271,udp,147.32.84.229,13363.0,->,87.97.153.249,39385.0,INT,0.0,,24,3372,3372,0,140.5,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:13:44.369397,3.021319,tcp,147.32.84.164,32974.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,12,3504,839,2665,292.0,0.2394406392694064,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:45.774126,1947.023315,udp,41.212.71.185,6216.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,690,390,300,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:13:46.253459,0.000228,udp,147.32.84.138,44814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:47.265732,128.242599,tcp,147.32.84.164,44353.0,->,212.23.170.40,80.0,SPA_SRPA,0.0,0.0,33,18039,4725,13314,546.6363636363636,0.2619324796274738,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:49.728491,125.78006,tcp,147.32.84.164,44359.0,->,212.23.170.40,80.0,SPA_SRPA,0.0,0.0,15,4940,1243,3697,329.3333333333333,0.2516194331983806,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:49.741645,127.050201,tcp,147.32.84.164,44360.0,->,212.23.170.40,80.0,SPA_SRPA,0.0,0.0,18,7340,2020,5320,407.77777777777777,0.27520435967302453,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:13:50.122943,0.000314,udp,147.32.84.59,60512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:52.834254,0.000387,udp,147.32.85.7,60024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,570,75,495,285.0,0.13157894736842105,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:53.071707,0.000242,udp,147.32.84.138,47817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:54.759468,0.000326,udp,147.32.84.138,49745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:55.096227,0.000192,udp,147.32.85.25,33015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:13:58.421007,61.303291,tcp,147.32.84.165,3282.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:13:58.665992,192.031799,tcp,64.40.10.54,2122.0,->,147.32.84.62,2122.0,SA_,0.0,,2,120,120,0,60.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:13:59.627781,44.09626,tcp,147.32.86.6,51349.0,->,147.32.192.34,993.0,FSPA_FSPA,0.0,0.0,42,9805,2154,7651,233.45238095238096,0.2196838347781744,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:14:00.852492,0.000294,udp,147.32.85.34,53524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:00.890471,0.00036,udp,147.32.85.34,51068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:01.753851,0.000209,udp,147.32.84.138,41466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:02.969274,0.000266,udp,147.32.84.138,40753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:06.215687,0.067364,udp,147.32.84.170,42408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,84,144,114.0,0.3684210526315789,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:06.249017,3.449218,udp,173.132.215.27,40728.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:14:06.307586,0.000459,udp,147.32.84.164,33591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:14:07.284520,0.000316,udp,147.32.84.164,51888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:14:07.331309,0.286219,udp,147.32.84.170,50166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,79,137,108.0,0.36574074074074076,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:07.331613,0.031051,udp,147.32.84.170,57697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,76,158,117.0,0.3247863247863248,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:07.381707,0.000387,udp,147.32.84.170,45356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,75,161,118.0,0.3177966101694915,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:07.612797,0.000265,udp,147.32.84.170,39001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,81,139,110.0,0.36818181818181817,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:07.851967,0.000195,udp,147.32.84.170,53440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,85,143,114.0,0.37280701754385964,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:07.977489,0.347479,udp,147.32.84.170,50376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,84,201,142.5,0.29473684210526313,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:08.061883,0.371762,tcp,147.32.84.170,57412.0,->,184.72.106.140,80.0,FSPA_FSPA,0.0,0.0,10,1873,828,1045,187.3,0.4420715429791778,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:08.307288,0.368786,tcp,147.32.84.170,57413.0,->,184.72.106.140,80.0,FSPA_FSPA,0.0,0.0,11,2962,823,2139,269.27272727272725,0.27785280216070224,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:08.556284,0.371099,tcp,147.32.84.170,57417.0,->,184.72.106.140,80.0,FSPA_FSPA,0.0,0.0,10,1730,828,902,173.0,0.47861271676300576,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:10.280564,279.213318,tcp,147.32.84.164,39252.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,178,123554,34714,88840,694.123595505618,0.28096217038703725,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:14:13.450804,110.342354,tcp,147.32.84.168,57888.0,->,80.239.149.19,443.0,SRPA_SPA,0.0,0.0,27,14816,2538,12278,548.7407407407408,0.17130129589632828,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:14:16.210226,0.000302,udp,147.32.84.170,55487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:16.512340,17.259293,tcp,147.32.84.170,43960.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:16.667736,0.000295,udp,147.32.84.170,53314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:17.000000,0.000215,udp,147.32.85.7,47880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:17.023198,0.000353,udp,147.32.85.7,50898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,75,133,104.0,0.3605769230769231,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:18.568093,2851.677979,udp,118.101.248.233,16952.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:14:18.749482,0.000506,udp,147.32.85.34,59353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:22.080199,0.000321,udp,147.32.84.170,58899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,80,148,114.0,0.3508771929824561,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.084007,0.000305,udp,147.32.84.170,50533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,80,148,114.0,0.3508771929824561,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.088652,0.000126,udp,147.32.84.170,36162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.090629,0.000154,udp,147.32.84.170,41945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.091152,0.000274,udp,147.32.84.170,42467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.355807,0.000185,udp,147.32.84.170,45998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.358579,0.000224,udp,147.32.84.170,59087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.384074,0.000185,udp,147.32.84.170,57731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,81,154,117.5,0.3446808510638298,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.422267,0.000379,udp,147.32.84.170,56356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,87,503,295.0,0.14745762711864407,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:22.601376,0.020773,udp,147.32.84.170,40752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:23.620883,0.000253,udp,147.32.84.138,57192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:26.093455,0.120006,udp,147.32.84.170,55893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.217275,0.001032,udp,147.32.84.170,40775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.220190,0.00063,udp,147.32.84.170,41137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.350102,0.017977,udp,147.32.84.170,43802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.368396,0.000363,udp,147.32.84.170,58595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.499263,0.000159,udp,147.32.84.170,38755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:26.629871,0.000291,udp,147.32.85.25,52406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:27.370148,22.177641,tcp,147.32.84.59,52567.0,->,195.184.117.150,80.0,SRPA_FSPA,0.0,0.0,27,13263,4411,8852,491.22222222222223,0.3325793561034457,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:14:27.483616,0.000275,udp,147.32.84.59,58905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,82,185,133.5,0.30711610486891383,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:27.642575,11.031268,tcp,147.32.84.59,56384.0,->,202.137.235.27,80.0,FSA_FSA,0.0,0.0,6,362,242,120,60.333333333333336,0.6685082872928176,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:14:27.763749,10.876496,tcp,147.32.84.59,56397.0,->,119.252.154.10,80.0,FSA_FSA,0.0,0.0,6,362,242,120,60.333333333333336,0.6685082872928176,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:14:29.134888,0.000353,udp,147.32.84.138,43496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:30.054222,0.000216,udp,147.32.84.170,42878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,84,157,120.5,0.34854771784232363,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:30.117824,8e-06,icmp,147.32.86.96,,<-,147.32.87.3,45652.0,ECR,,0.0,2,196,0,196,98.0,0.0,16,0,flow=Background,Background,-1 2011-08-16 16:14:30.782157,0.017564,udp,147.32.84.170,33987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:30.801493,0.000259,udp,147.32.84.170,52912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:30.802983,0.000311,udp,147.32.84.170,47125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:31.490548,0.000154,udp,147.32.84.170,60495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,84,157,120.5,0.34854771784232363,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:31.491075,0.000242,udp,147.32.84.170,56002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,84,157,120.5,0.34854771784232363,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:31.492012,0.000253,udp,147.32.84.170,52630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,84,157,120.5,0.34854771784232363,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:34.512467,0.309485,tcp,147.32.86.20,4264.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,28165,798,27367,853.4848484848485,0.028333037457837742,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:14:37.320033,1.070409,udp,147.32.84.170,49209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:37.930352,1.070512,udp,147.32.84.170,56093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.458590,245.32959,tcp,147.32.84.170,43967.0,->,209.85.148.106,80.0,FSPA_FSPA,0.0,0.0,80,43324,8374,34950,541.55,0.19328778506139785,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.670170,0.000147,udp,147.32.84.170,40185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.670488,0.000351,udp,147.32.84.170,45449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.670846,0.000409,udp,147.32.84.170,39112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.671715,0.000196,udp,147.32.84.170,56435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.673479,0.000267,udp,147.32.84.170,33320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.676250,0.00017,udp,147.32.84.170,41025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.680587,0.000427,udp,147.32.84.170,40768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.681823,243.978851,tcp,147.32.84.170,55433.0,->,74.125.232.204,443.0,SRPA_FSPA,0.0,0.0,27,2580,1484,1096,95.55555555555556,0.5751937984496124,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:38.923593,0.247524,udp,147.32.84.170,54248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.462006,1.071091,udp,147.32.84.170,57032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.643937,0.008406,tcp,147.32.84.170,57328.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,18,11978,957,11021,665.4444444444445,0.0798964768742695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.644546,0.029093,tcp,147.32.84.170,57332.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,13,6691,910,5781,514.6923076923077,0.13600358690778658,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.653023,0.006117,tcp,147.32.84.170,57337.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,17,11715,931,10784,689.1176470588235,0.07947076397780622,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.666898,0.000402,udp,147.32.84.170,60674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.673547,0.008053,tcp,147.32.84.170,57342.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,2377,827,1550,237.7,0.34791754312158185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.680133,0.012463,tcp,147.32.84.170,57346.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,25,18408,1166,17242,736.32,0.06334202520643199,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.890497,0.00019,udp,147.32.84.170,42450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.908142,0.007463,tcp,147.32.84.170,57347.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,1744,838,906,174.4,0.4805045871559633,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.908663,0.0176,tcp,147.32.84.170,57350.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,66,57930,2222,55708,877.7272727272727,0.03835663732090454,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.919258,0.018417,tcp,147.32.84.170,57355.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,40,31260,1629,29631,781.5,0.052111324376199614,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.923129,0.019429,tcp,147.32.84.170,57356.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,45,37129,1695,35434,825.0888888888888,0.045651646960596835,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.934734,0.01209,tcp,147.32.84.170,57360.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,14,7655,892,6763,546.7857142857143,0.11652514696276943,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.944974,0.014571,tcp,147.32.84.170,57365.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,13,4892,904,3988,376.3076923076923,0.1847914963205233,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:39.947393,0.015581,tcp,147.32.84.170,57367.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,26,19545,1237,18308,751.7307692307693,0.0632898439498593,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:40.073438,1.077208,udp,147.32.84.170,39419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:40.198087,0.000379,udp,147.32.86.20,58342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:40.664124,0.079635,tcp,147.32.86.168,50285.0,->,81.91.86.11,80.0,FSPA_FSA,0.0,0.0,9,2203,967,1236,244.77777777777777,0.4389468906037222,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:14:42.223792,1.074504,udp,147.32.84.170,51918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:42.227787,1.116683,udp,147.32.84.170,43428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,86,86,86.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:42.239061,0.000253,udp,147.32.85.25,54457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:14:43.187545,27.210541,tcp,147.32.85.6,53167.0,->,77.75.77.155,80.0,FSPA_FSPA,0.0,0.0,105,81657,4929,76728,777.6857142857143,0.060362246959844226,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:14:43.297484,1.321984,udp,147.32.84.170,35678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:43.344650,1.095949,udp,147.32.84.170,59801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,86,86,86.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:46.259802,63.946285,udp,147.32.84.229,13363.0,<->,68.174.70.92,57829.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:14:46.666906,0.000354,udp,147.32.84.170,36490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:46.668032,0.017879,tcp,147.32.84.170,50938.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:47.837720,1.075402,udp,147.32.84.170,33418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:49.017328,0.000333,udp,147.32.84.170,42835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:49.984706,1.074629,udp,147.32.84.170,42537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:51.059593,1.070498,udp,147.32.84.170,42238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:51.303009,0.012767,tcp,147.32.84.170,57376.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,31,22128,1651,20477,713.8064516129032,0.07461135213304411,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:52.130245,1.071634,udp,147.32.84.170,49638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:56.346518,0.168717,udp,147.32.84.59,22975.0,<->,69.10.126.168,7946.0,CON,0.0,0.0,2,596,78,518,298.0,0.13087248322147652,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:14:56.666833,0.010015,udp,147.32.84.170,36431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:56.678630,0.01809,tcp,147.32.84.170,38933.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:58.639963,0.140603,tcp,147.32.84.170,57378.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,32,21520,1676,19844,672.5,0.0778810408921933,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:58.866246,0.028439,tcp,147.32.84.170,57379.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,1896,1040,856,189.6,0.5485232067510548,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:58.866785,0.010945,tcp,147.32.84.170,57382.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,1867,1068,799,186.7,0.5720407070166041,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.072011,0.007894,tcp,147.32.84.170,57385.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,12,4174,1133,3041,347.8333333333333,0.2714422616195496,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.078047,0.030877,tcp,147.32.84.170,57390.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,1865,1068,797,186.5,0.5726541554959785,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.088519,0.000818,udp,147.32.84.170,55965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,75,122,98.5,0.38071065989847713,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.090404,0.169987,udp,147.32.84.170,55157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,81,143,112.0,0.36160714285714285,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.092058,0.000282,udp,147.32.84.170,36543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,73,139,106.0,0.3443396226415094,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.092758,0.001801,udp,147.32.84.170,56419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,73,172,122.5,0.2979591836734694,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.289256,61.294067,tcp,147.32.84.165,3283.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:14:59.415095,0.017458,udp,147.32.84.170,56189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:14:59.937348,0.037782,udp,147.32.84.170,50866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,381,74,307,190.5,0.1942257217847769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:01.577494,2862.483398,tcp,128.93.183.99,46850.0,->,147.32.84.13,22.0,FPA_FPA,0.0,0.0,651567,593502702,18408462,575094240,910.8851461169764,0.03101664396466387,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:15:02.202477,0.000279,udp,147.32.84.138,49826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:02.204219,0.000267,udp,147.32.84.138,46147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:05.970736,3209.968018,udp,147.32.84.94,7103.0,<->,213.47.87.190,7572.0,CON,0.0,0.0,195,163266,160392,2874,837.2615384615384,0.9823968248134946,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:15:06.667498,0.000412,udp,147.32.84.170,60459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:06.972377,0.000284,udp,147.32.84.138,58084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:06.992211,0.000259,udp,147.32.84.138,60250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:16.665594,0.000415,udp,147.32.84.170,39233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:16.666682,0.000244,udp,147.32.84.170,56693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.723526,0.000301,udp,147.32.84.170,49529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,70,152,111.0,0.3153153153153153,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.725667,0.014534,udp,147.32.84.170,39776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.756204,0.000244,udp,147.32.84.170,49661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.756822,0.02018,udp,147.32.84.170,41586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,79,179,129.0,0.3062015503875969,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.789521,0.006091,udp,147.32.84.170,37230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,71,158,114.5,0.31004366812227074,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:19.796031,0.002746,udp,147.32.84.170,35682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,71,247,159.0,0.22327044025157233,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:20.104682,243.692581,tcp,147.32.84.170,55510.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,43,18618,1866,16752,432.9767441860465,0.10022558814050918,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:20.146789,0.984573,udp,147.32.84.170,51400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:21.628997,0.01029,tcp,147.32.84.170,57402.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,12,6828,1073,5755,569.0,0.15714704159343879,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:21.743433,0.00502,udp,147.32.84.170,35457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,75,144,109.5,0.3424657534246575,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:21.743521,0.011732,udp,147.32.84.170,58330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:24.155041,0.000231,udp,147.32.84.138,55395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:26.667774,0.00044,udp,147.32.84.170,60045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:28.092775,0.000374,udp,147.32.84.59,58056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:28.740798,0.000278,udp,147.32.86.168,46422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,68,129,98.5,0.34517766497461927,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:29.264005,0.000416,udp,147.32.85.25,45062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:30.235868,0.000393,udp,147.32.84.166,55723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:33.612742,0.000337,udp,147.32.84.164,54642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:15:34.082522,0.166985,udp,147.32.84.25,54574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:35.077898,0.00191,udp,147.32.84.59,44850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,72,381,226.5,0.15894039735099338,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:35.078102,0.038527,udp,147.32.84.59,51681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,455,72,383,227.5,0.15824175824175823,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:36.668262,0.000312,udp,147.32.84.170,54202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:37.746898,0.000346,udp,147.32.85.7,59865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,74,217,145.5,0.2542955326460481,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:38.609889,0.000342,udp,147.32.84.59,41189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,71,237,154.0,0.2305194805194805,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:42.383898,0.615946,udp,147.32.85.36,51215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:42.577201,0.00988,udp,147.32.84.164,43741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:15:45.124060,0.000391,udp,147.32.84.170,53254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,86,152,119.0,0.36134453781512604,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:45.127513,0.006033,tcp,147.32.84.170,40514.0,->,80.79.23.93,80.0,FSPA_FSPA,0.0,0.0,10,1739,759,980,173.9,0.43645773433007473,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:45.183657,248.607559,tcp,147.32.84.170,36224.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,24,3982,2966,1016,165.91666666666666,0.7448518332496233,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:15:45.854037,0.001814,udp,201.120.137.6,51098.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,479,60,269.5,0.8886827458256029,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:15:46.442621,15.168982,udp,147.32.84.94,7103.0,->,84.129.94.180,7543.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:15:50.635298,0.000281,udp,147.32.85.5,41966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:51.889882,0.000409,icmp,147.32.86.96,,<-,147.32.87.4,21877.0,RED,,0.0,2,130,0,130,65.0,0.0,16,0,flow=Background,Background,-1 2011-08-16 16:15:54.863371,0.000149,udp,147.32.84.138,35532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:15:57.106133,164.600784,tcp,147.32.86.17,2174.0,->,74.125.232.211,80.0,SRPA_SPA,0.0,0.0,222,177740,20811,156929,800.6306306306307,0.11708675593563632,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:15:57.775357,0.00039,udp,147.32.84.164,60555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:15:59.468612,0.000637,udp,213.87.120.38,40288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:00.158121,61.282078,tcp,147.32.84.165,3284.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:16:00.580429,0.000241,udp,147.32.85.34,52881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:01.822234,0.364472,udp,147.32.85.36,52450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,77,184,130.5,0.2950191570881226,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:06.665899,0.000467,udp,147.32.84.170,39078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:06.668032,0.017784,tcp,147.32.84.170,43658.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:09.263029,0.000305,udp,147.32.84.138,58213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:10.359386,0.000249,udp,147.32.84.138,48833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:12.300277,0.00069,udp,95.30.188.43,13963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:16.325401,1201.33606,udp,147.32.84.229,13363.0,<->,203.101.161.8,39817.0,CON,0.0,0.0,7,2211,1973,238,315.85714285714283,0.8923563998190864,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:20.813105,11.052141,tcp,147.32.85.7,34498.0,->,80.250.15.9,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:16:21.018895,0.251563,tcp,147.32.84.170,34377.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:21.670774,0.000778,udp,79.141.229.65,46072.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,76,483,279.5,0.13595706618962433,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:21.863591,0.003824,udp,147.32.85.7,51807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,71,149,110.0,0.32272727272727275,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:26.669046,0.018016,tcp,147.32.84.170,33905.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:28.014559,0.00073,udp,98.109.42.161,62521.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:31.654192,2364.655518,udp,147.32.84.94,7103.0,<->,83.169.3.27,7494.0,CON,0.0,0.0,86,72807,71595,1212,846.5930232558139,0.9833532490007829,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:32.176958,0.000728,udp,140.116.155.157,17244.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,78,469,273.5,0.1425959780621572,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:33.861270,0.000719,udp,74.103.139.150,54383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,608,80,528,304.0,0.13157894736842105,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:36.668441,0.018097,tcp,147.32.84.170,43664.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:36.897838,1886.441406,udp,123.192.209.38,57122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,751,565,186,125.16666666666667,0.7523302263648469,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:43.024879,0.00082,udp,87.246.110.210,60222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:44.957979,55.537987,tcp,147.32.85.26,60746.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,24,5533,4146,1387,230.54166666666666,0.7493222483282126,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:16:46.667257,0.000345,udp,147.32.84.170,49388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:46.669287,0.0185,tcp,147.32.84.170,40207.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:48.467260,0.012133,udp,93.155.199.54,16020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3035,60,2975,758.75,0.019769357495881382,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:49.324150,0.000163,udp,147.32.84.138,60377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:49.407625,0.041752,udp,147.32.84.229,13363.0,<->,77.239.25.218,13036.0,CON,0.0,0.0,2,521,461,60,260.5,0.8848368522072937,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:49.590026,0.000268,udp,147.32.86.168,33037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:51.411396,0.377021,udp,147.32.84.229,13363.0,<->,118.169.129.47,4019.0,CON,0.0,0.0,4,3021,60,2961,755.25,0.019860973187686197,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:52.018706,0.320985,tcp,147.32.84.170,34381.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:52.098604,0.00036,udp,147.32.84.138,45082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:52.116917,0.000142,udp,147.32.84.138,37965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:16:52.663903,0.000596,udp,91.61.77.211,59790.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:55.728217,1243.765869,icmp,67.166.248.203,771.0,->,147.32.84.94,38643.0,URP,0.0,,8,560,560,0,70.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:16:56.258211,1286.617065,udp,114.243.128.219,55232.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:56.666348,0.000471,udp,147.32.84.170,54921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:16:59.053614,0.060421,udp,147.32.84.229,13363.0,<->,213.21.8.97,58817.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:16:59.098307,19.39712,tcp,147.32.84.59,56498.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:17:01.015064,61.298431,tcp,147.32.84.165,3285.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:17:09.472995,0.000327,udp,147.32.84.138,47036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:11.792100,0.000284,udp,147.32.85.89,44572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:12.227327,2834.545166,udp,193.34.73.70,61170.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:12.376781,0.000681,udp,85.161.147.163,2319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:13.665338,0.000238,udp,147.32.85.25,59948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:16.087749,0.211882,udp,92.62.224.28,54468.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,256,182,74,128.0,0.7109375,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:16.476164,0.000136,udp,147.32.84.138,37740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:16.668982,0.018793,tcp,147.32.84.170,58683.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:17.807941,2238.433838,udp,147.32.84.229,13363.0,<->,95.158.234.139,58732.0,CON,0.0,0.0,8,1407,1159,248,175.875,0.8237384506041222,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:20.748417,0.000366,udp,147.32.84.138,34367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:21.955881,0.129573,udp,147.32.84.138,36835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,83,141,112.0,0.3705357142857143,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:23.017046,0.000358,udp,147.32.84.170,43553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:24.472908,0.000398,udp,147.32.87.36,40153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,84,227,155.5,0.27009646302250806,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:17:26.666698,0.000313,udp,147.32.84.170,55760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:28.313577,245.50145,tcp,147.32.84.170,47770.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,7042,6617857,157586,6460271,939.7695257029253,0.023812240125466597,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:29.120765,0.000283,udp,147.32.85.25,38473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:29.462227,0.00015,udp,147.32.84.138,56711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:30.223462,0.000196,udp,147.32.84.138,33887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:30.829338,0.000474,udp,147.32.86.20,54771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:33.791936,3075.918213,udp,147.32.86.111,63488.0,<->,89.212.198.121,51679.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:45.455682,0.205345,tcp,147.32.86.20,4399.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30124,1029,29095,772.4102564102565,0.034158810250962686,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:17:46.606728,3412.013672,udp,95.180.190.71,11285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1086,731,355,135.75,0.6731123388581952,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:46.666028,0.000291,udp,147.32.84.170,41628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:48.830665,0.019225,udp,147.32.86.179,53327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,521,83,438,260.5,0.15930902111324377,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:54.017711,0.000286,udp,147.32.84.170,54678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:55.141989,6.1e-05,udp,147.32.85.25,36977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:17:55.633771,2363.021484,udp,147.32.84.94,7103.0,->,85.139.243.105,7510.0,INT,0.0,,12,1008,1008,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:17:56.665970,0.00049,udp,147.32.84.170,52637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:56.668157,0.018778,tcp,147.32.84.170,40219.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:17:57.928137,0.000805,udp,195.234.75.140,7671.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:17:58.009446,603.141907,udp,82.54.198.148,22249.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,474,350,124,118.5,0.7383966244725738,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:18:01.882952,61.298084,tcp,147.32.84.165,3286.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:18:02.254384,76.642357,tcp,147.32.86.17,2211.0,->,209.85.148.105,80.0,SRPA_SPA,0.0,0.0,11,3874,2304,1570,352.1818181818182,0.5947341249354672,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:18:04.904118,0.000254,udp,147.32.85.8,45666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:06.017050,61.125725,tcp,147.32.85.7,46183.0,->,80.239.149.27,80.0,FSPA_FSPA,0.0,0.0,15,6811,1002,5809,454.06666666666666,0.14711496109235062,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:18:06.667635,0.000366,udp,147.32.84.170,42880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:06.668745,0.017823,tcp,147.32.84.170,39447.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:07.258933,240.244812,tcp,147.32.84.59,41891.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,13,3284,1984,1300,252.6153846153846,0.6041412911084044,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:18:07.261225,0.000189,udp,147.32.87.36,58424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:18:12.223616,0.001687,udp,89.201.103.95,58352.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:18:14.060729,240.307877,tcp,147.32.84.170,42100.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,85,32285,23209,9076,379.8235294117647,0.7188787362552269,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:14.060846,248.6129,tcp,147.32.84.170,42102.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:14.221921,0.218011,tcp,147.32.84.170,44686.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:23.934436,0.000643,udp,24.57.161.130,53476.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:18:25.016920,0.000375,udp,147.32.84.170,40996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:25.017914,0.000398,udp,147.32.84.170,34664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:26.668687,0.017972,tcp,147.32.84.170,39462.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:30.307634,19.345737,tcp,147.32.85.8,57887.0,->,171.64.64.64,80.0,FSPA_FSPA,0.0,0.0,13,1993,1262,731,153.30769230769232,0.6332162568991471,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:18:31.630605,0.000264,udp,147.32.85.25,42375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:35.788794,12.412426,tcp,147.32.84.59,51094.0,->,78.24.9.4,80.0,FSPA_FSPA,0.0,0.0,43,33048,3056,29992,768.5581395348837,0.0924715565238441,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:18:36.668498,0.017702,tcp,147.32.84.170,58708.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:18:36.805529,0.000394,udp,147.32.87.238,1094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:36.957569,0.000546,udp,147.32.85.7,56028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:44.545829,438.759369,tcp,147.32.84.59,47393.0,->,88.86.102.50,5222.0,FSPA_FSPA,0.0,0.0,301,57747,14592,43155,191.85049833887044,0.25268845134812196,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:18:47.017962,0.002015,udp,187.2.8.5,22931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:18:48.900488,2.019017,tcp,66.249.66.154,60058.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,13,1867,1001,866,143.6153846153846,0.5361542581681843,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:18:49.091650,0.029383,udp,147.32.84.123,56471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,76,201,138.5,0.2743682310469314,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:50.225197,0.000401,icmp,147.32.87.249,,<-,147.32.87.4,2.0,RED,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:18:52.061036,0.000194,udp,147.32.84.138,56565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:18:56.401380,3464.391846,udp,147.32.84.229,13363.0,<->,90.157.15.224,9551.0,CON,0.0,0.0,6,986,615,371,164.33333333333334,0.6237322515212982,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:18:57.950916,0.000674,udp,217.12.58.71,30967.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:00.076726,0.000279,udp,147.32.84.138,52599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:00.105272,0.000235,udp,147.32.84.138,51302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:00.270280,240.488831,tcp,147.32.84.59,50001.0,->,74.125.39.103,443.0,FSPA_FSPA,0.0,0.0,37,9000,4539,4461,243.24324324324326,0.5043333333333333,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:19:00.314373,0.246294,udp,147.32.85.7,40014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:02.750658,61.304752,tcp,147.32.84.165,3287.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:19:04.076862,61.527336,tcp,147.32.86.17,2263.0,->,2.21.92.124,80.0,SRPA_SPA,0.0,0.0,31,22979,3825,19154,741.258064516129,0.16645632969232776,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:19:05.724793,2.163565,udp,147.32.84.59,17320.0,->,46.73.47.126,33175.0,INT,0.0,,2,150,150,0,75.0,1.0,16,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 16:19:08.998639,2101.510254,udp,84.228.178.68,34214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:09.725109,7e-06,udp,147.32.87.48,2949.0,->,147.32.86.245,161.0,INT,0.0,,2,262,262,0,131.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:19:10.357447,0.0,udp,195.113.45.28,2962.0,->,239.255.255.253,11427.0,INT,0.0,,1,195,195,0,195.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:19:10.940111,0.000773,udp,219.186.133.55,53410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,74,493,283.5,0.13051146384479717,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:15.893719,0.001742,udp,78.153.28.11,22199.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:18.273158,0.000379,udp,147.32.84.138,55448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:21.300522,0.001328,udp,46.10.96.138,14457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,701,76,625,350.5,0.10841654778887304,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:21.487213,0.111136,tcp,147.32.84.59,55841.0,->,78.141.177.75,80.0,FSPA_FSPA,0.0,0.0,12,1413,796,617,117.75,0.5633404104741684,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:19:21.996712,0.000253,udp,147.32.84.134,34257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:19:22.145833,0.345925,tcp,147.32.86.20,4469.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,27521,798,26723,833.969696969697,0.02899603938810363,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:19:24.474461,3561.02832,udp,147.32.86.111,62281.0,->,192.168.1.99,161.0,REQ,0.0,,180,21600,21600,0,120.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:19:24.629194,120.063087,tcp,147.32.84.3,41031.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,27,12534,2070,10464,464.22222222222223,0.16515078985160364,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:19:26.016626,0.000248,udp,147.32.84.170,37498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:28.907613,0.000171,udp,147.32.85.25,44719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:30.196161,3574.246826,udp,147.32.84.5,47231.0,<->,83.167.232.159,123.0,CON,0.0,0.0,226,20340,10170,10170,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:19:31.368742,1.561408,tcp,147.32.84.59,63044.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,19,6881,1551,5330,362.1578947368421,0.22540328440633628,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:19:31.558469,3599.998047,tcp,92.26.146.75,17047.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,165,13951,8637,5314,84.55151515151515,0.6190954053472869,16,0,flow=Background,Background,-1 2011-08-16 16:19:33.781867,3412.764404,tcp,147.32.86.110,34896.0,,139.91.179.30,49484.0,PA_RPA,0.0,0.0,208,18405,10027,8378,88.48557692307692,0.5447976093452866,16,0,flow=Background,Background,-1 2011-08-16 16:19:33.796057,0.027279,tcp,147.32.84.59,4894.0,->,90.183.39.85,80.0,FSPA_FSPA,0.0,0.0,20,16230,1127,15103,811.5,0.06943930991990142,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:19:33.804036,0.000226,udp,147.32.84.138,49916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:36.601716,3599.260986,tcp,147.32.84.229,13363.0,,160.44.239.12,47275.0,PA_PA,0.0,0.0,421,33421,19155,14266,79.38479809976248,0.5731426348702912,16,0,flow=Background,Background,-1 2011-08-16 16:19:36.611628,6.334343,tcp,66.249.72.50,37818.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18000,1883,16117,580.6451612903226,0.10461111111111111,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:19:38.610321,0.247785,udp,147.32.85.7,60666.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:38.725904,0.000339,udp,147.32.84.138,54517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:40.825805,247.096939,tcp,147.32.84.59,51019.0,->,74.125.232.205,443.0,SRPA_FSPA,0.0,0.0,27,4509,1191,3318,167.0,0.26413838988689287,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:19:40.964477,3584.671143,tcp,147.32.84.170,53897.0,,205.188.11.14,443.0,PA_PA,0.0,0.0,294,36204,8804,27400,123.14285714285714,0.2431775494420506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:44.508473,0.000659,udp,87.21.201.104,36122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:45.962307,3020.037354,udp,24.20.161.151,21609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:46.960796,0.045471,udp,147.32.84.59,59863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:47.651778,6.924407,tcp,147.32.85.114,49857.0,->,77.75.72.57,80.0,SRPA_FSPA,0.0,0.0,53,37720,3016,34704,711.6981132075472,0.0799575821845175,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:19:53.972256,1215.200439,udp,188.120.196.217,24128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,414,234,180,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:19:54.011643,0.000352,udp,147.32.84.138,51468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:19:56.016629,0.000257,udp,147.32.84.170,37674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:56.017461,0.000307,udp,147.32.84.170,38624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:56.018722,0.312938,tcp,147.32.84.170,34419.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:56.665834,0.020427,udp,147.32.84.170,45511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:19:56.686822,0.000354,udp,147.32.84.170,60327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:20:00.373457,0.000207,udp,147.32.85.34,54238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:01.093925,3453.745117,udp,24.144.150.55,55886.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:01.744063,0.000674,udp,220.3.2.244,44763.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:03.620344,61.291451,tcp,147.32.84.165,3288.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:20:04.595687,0.000177,udp,147.32.84.138,58775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:06.203613,0.000251,udp,147.32.84.138,42008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:06.668508,0.00044,udp,147.32.84.170,36625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:20:07.340164,0.000677,udp,84.185.63.125,25504.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,77,467,272.0,0.14154411764705882,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:09.276707,3005.996338,udp,84.135.93.28,7860.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1446,1074,372,120.5,0.7427385892116183,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:09.802916,0.003723,udp,120.29.148.128,23278.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3035,60,2975,758.75,0.019769357495881382,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:12.795393,27.154312,tcp,147.32.85.26,60762.0,->,91.198.174.234,80.0,SRPA_FSPA,0.0,0.0,13,4392,858,3534,337.84615384615387,0.1953551912568306,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:20:17.174731,0.000373,udp,147.32.84.138,57102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:23.602045,0.000299,udp,147.32.84.138,39593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:24.440627,0.996714,udp,147.32.84.229,13363.0,<->,111.251.14.76,22846.0,CON,0.0,0.0,6,604,193,411,100.66666666666667,0.3195364238410596,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:26.023036,6.955259,tcp,92.98.52.199,37753.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:20:26.333932,0.000561,udp,147.32.85.114,60596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,120,191,155.5,0.3858520900321543,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:26.668044,0.000501,udp,147.32.84.170,32927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:20:29.401186,0.000257,udp,147.32.84.138,48711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:31.673161,0.541267,udp,192.168.88.79,56489.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:20:42.779827,0.000301,udp,147.32.84.59,47405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:49.521331,0.000225,udp,147.32.84.138,60039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:54.302846,0.000137,udp,147.32.84.138,44048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:20:58.275345,4.690663,tcp,147.32.85.113,50235.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,18,3650,1636,2014,202.77777777777777,0.4482191780821918,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:20:59.300859,203.31871,udp,98.253.68.202,39735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,532,292,240,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:20:59.915166,0.000289,udp,147.32.84.138,49065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:02.936648,0.366596,tcp,147.32.86.17,2571.0,->,173.192.226.215,80.0,FSPA_FSPA,0.0,0.0,9,1620,950,670,180.0,0.5864197530864198,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:21:04.250362,58.718704,tcp,147.32.84.59,55026.0,->,77.75.72.22,80.0,SRPA_FSPA,0.0,0.0,10,1313,853,460,131.3,0.6496572734196496,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:04.485981,61.2985,tcp,147.32.84.165,3289.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:21:04.585546,0.425104,tcp,67.195.115.151,35672.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,12,3523,802,2721,293.5833333333333,0.22764689185353393,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:21:05.089511,0.000444,udp,147.32.84.138,40312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:05.776652,0.00033,udp,147.32.84.59,57367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:16.670206,0.018172,tcp,147.32.84.170,41590.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:21:19.154279,0.139401,tcp,147.32.84.118,50954.0,->,217.163.21.36,80.0,FSPA_FSPA,0.0,0.0,10,1514,796,718,151.4,0.5257595772787318,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:21:20.355334,0.33369,tcp,147.32.84.59,64055.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1536,699,837,170.66666666666666,0.455078125,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:21.985479,893.956299,icmp,82.247.145.90,259.0,->,147.32.84.94,21239.0,URH,0.0,,8,896,896,0,112.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:21:23.110179,0.000163,udp,147.32.85.25,49712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:23.142922,2681.804443,udp,147.32.84.229,13363.0,<->,78.90.194.252,2554.0,CON,0.0,0.0,6,1642,995,647,273.6666666666667,0.6059683313032886,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:28.015643,0.000196,udp,147.32.84.170,41212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:21:29.969686,0.000733,udp,213.102.159.218,38744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:30.870035,0.000338,udp,147.32.84.138,45285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:35.916907,10.373668,tcp,147.32.84.59,54499.0,->,184.73.247.29,80.0,FSA_FSA,0.0,0.0,7,482,276,206,68.85714285714286,0.5726141078838174,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:36.668755,0.000353,udp,147.32.84.170,59714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:21:36.669921,0.018042,tcp,147.32.84.170,58947.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:21:36.956745,2770.77417,udp,212.5.200.52,51313.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,989,729,260,123.625,0.737108190091001,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:38.822919,0.000317,udp,147.32.84.138,34983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:39.286008,114.97876,tcp,147.32.84.59,4868.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,20,7010,5374,1636,350.5,0.7666191155492154,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:21:40.721385,9.761736,tcp,147.32.84.59,65020.0,->,77.75.72.22,80.0,SRPA_FSPA,0.0,0.0,35,30145,1212,28933,861.2857142857143,0.04020567258251783,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:41.272019,0.001641,udp,217.164.28.123,12691.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,480,60,270.0,0.8888888888888888,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:43.947308,0.000557,udp,68.99.52.249,59135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,80,481,280.5,0.14260249554367202,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:45.699531,0.181988,udp,147.32.84.59,62429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,71,195,133.0,0.2669172932330827,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:21:46.668079,0.000696,udp,147.32.84.170,52786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:21:46.700531,64.40274,tcp,147.32.84.59,52686.0,->,74.125.43.109,993.0,FSPA_FSPA,0.0,0.0,1111,348322,35405,312917,313.5211521152115,0.10164445541768823,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:47.463219,3047.889648,udp,76.89.209.184,10823.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1500,1068,432,125.0,0.712,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:21:55.925278,12.785393,tcp,147.32.84.59,56586.0,->,198.185.19.195,80.0,FSA_FSA,0.0,0.0,7,424,242,182,60.57142857142857,0.5707547169811321,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:21:59.041140,0.000282,udp,147.32.84.170,51055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:00.690926,0.000279,udp,147.32.85.34,53462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:00.731855,0.000333,udp,147.32.85.34,61977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:00.734604,0.000285,udp,147.32.85.34,53674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,86,242,164.0,0.2621951219512195,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:01.089694,0.000285,udp,147.32.84.138,43915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:03.201660,0.000312,udp,147.32.84.138,60738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:05.354364,61.282791,tcp,147.32.84.165,3290.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:22:06.009603,0.020388,udp,147.32.84.170,59891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,586,78,508,293.0,0.13310580204778158,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:08.336918,0.348567,udp,147.32.85.26,60764.0,<->,111.240.217.48,58438.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:11.342336,53.746342,tcp,147.32.85.120,42338.0,->,147.32.192.34,465.0,FSRPA_FSPA,0.0,0.0,39,9039,1731,7308,231.76923076923077,0.19150348489877198,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:22:12.527305,2493.479004,udp,149.5.45.4,43031.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,300,180,120,75.0,0.6,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:13.055525,0.312769,tcp,147.32.84.59,52690.0,->,69.175.85.162,80.0,SRPA_FSPA,0.0,0.0,10,3150,1146,2004,315.0,0.3638095238095238,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:22:14.281062,2486.31543,udp,147.32.84.94,7103.0,<->,213.234.248.230,7128.0,CON,0.0,0.0,112,90966,89520,1446,812.1964285714286,0.9841039509267199,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:14.858688,128.587448,tcp,147.32.86.183,58334.0,->,216.52.242.80,80.0,FSPA_FSPA,0.0,0.0,115,73839,18651,55188,642.0782608695653,0.2525900946654207,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:22:15.538988,0.00665,tcp,147.32.84.132,58208.0,->,77.78.99.22,80.0,SRPA_FSPA,0.0,0.0,8,2091,1123,968,261.375,0.537063605930177,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:22:15.662493,0.000552,udp,147.32.84.59,61610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,71,198,134.5,0.26394052044609667,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:16.668518,0.000288,udp,147.32.84.170,52509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:17.096365,3393.487305,udp,147.32.84.94,7103.0,<->,88.198.5.134,55012.0,CON,0.0,0.0,1083,928233,17967,910266,857.0941828254847,0.0193561314885379,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:17.098038,3013.928223,udp,147.32.84.94,7103.0,<->,46.4.102.183,53012.0,CON,0.0,0.0,783,657611,13821,643790,839.8607918263091,0.02101698420494791,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:22.224197,3555.977783,udp,147.32.84.94,7103.0,<->,46.4.33.67,54012.0,CON,0.0,0.0,519,444324,8850,435474,856.1156069364162,0.01991789775029033,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:22.994342,3502.39502,udp,132.199.48.36,36244.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,345,105,240,69.0,0.30434782608695654,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:26.435965,0.247906,udp,147.32.84.164,36600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:22:26.669315,0.017921,tcp,147.32.84.170,58953.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:26.932609,0.000367,udp,147.32.84.164,53791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:22:30.016679,0.000274,udp,147.32.84.170,37055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:30.156013,3316.720947,udp,90.197.56.175,57855.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1033,288,745,129.125,0.2787996127783156,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:31.833054,1.836755,tcp,147.32.85.114,50138.0,->,90.183.38.22,80.0,SRPA_FSPA,0.0,0.0,10,2658,1465,1193,265.8,0.5511662904439428,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:22:38.663614,0.000307,udp,147.32.84.138,40503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:40.840925,0.00028,udp,147.32.84.170,47676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.841339,0.000299,udp,147.32.84.170,40214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.841770,0.021563,udp,147.32.84.170,35531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.842140,0.001678,udp,147.32.84.170,44028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.842268,0.001671,udp,147.32.84.170,41467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.844429,75.342636,tcp,147.32.84.170,56191.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,69,53830,3027,50803,780.1449275362319,0.05623258406093257,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.844640,15.342971,tcp,147.32.84.170,60165.0,->,62.168.44.117,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.844651,0.666161,tcp,147.32.84.170,60166.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,3322,1452,1870,276.8333333333333,0.4370860927152318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.844756,15.342649,tcp,147.32.84.170,60167.0,->,62.168.44.117,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.845010,6.410092,tcp,147.32.84.170,43430.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.845956,75.341194,tcp,147.32.84.170,56205.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,65,48129,5468,42661,740.4461538461538,0.11361133620062748,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.846152,75.341301,tcp,147.32.84.170,56209.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,47,30800,5820,24980,655.3191489361702,0.18896103896103897,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.863052,405.345367,tcp,147.32.84.170,40059.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,32,5576,3258,2318,174.25,0.5842898134863702,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.866438,15.323509,tcp,147.32.84.170,32924.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.877277,0.001891,udp,147.32.84.170,54543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,74,439,256.5,0.1442495126705653,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.882054,315.418121,tcp,147.32.84.170,34237.0,->,66.220.153.15,80.0,FSPA_FSPA,0.0,0.0,51,23191,4953,18238,454.72549019607845,0.21357423138286405,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.882187,315.417725,tcp,147.32.84.170,34239.0,->,66.220.153.15,80.0,FSPA_FSPA,0.0,0.0,58,28752,7408,21344,495.7241379310345,0.2576516416249304,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.883800,315.324005,tcp,147.32.84.170,50167.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,28,6766,4768,1998,241.64285714285714,0.7046999704404375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:40.883896,15.304698,tcp,147.32.84.170,50169.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.006537,0.000158,udp,147.32.84.170,51132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.125204,0.003544,udp,147.32.84.170,42851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.131805,15.049637,tcp,147.32.84.170,55518.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.134862,15.054039,tcp,147.32.84.170,39702.0,->,2.20.182.8,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.134945,0.000391,udp,147.32.84.170,39432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.135041,15.053856,tcp,147.32.84.170,39706.0,->,2.20.182.8,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.138003,315.063385,tcp,147.32.84.170,40548.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,23,4068,1717,2351,176.8695652173913,0.4220747295968535,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.138065,15.044213,tcp,147.32.84.170,40549.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.138144,15.044127,tcp,147.32.84.170,40550.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.138156,15.044126,tcp,147.32.84.170,40551.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.299772,14.897617,tcp,147.32.84.170,37392.0,->,92.123.64.154,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.588192,0.000409,udp,147.32.84.170,36272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.589550,0.000402,udp,147.32.84.170,34053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.594850,0.000349,udp,147.32.84.170,58796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.595300,0.00017,udp,147.32.84.170,46602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.595622,0.000207,udp,147.32.84.170,54658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.596938,0.000262,udp,147.32.84.170,50249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:41.597193,0.019291,udp,147.32.84.170,32973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:42.581044,0.000257,udp,147.32.84.164,56048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:22:43.141039,0.000496,udp,147.32.84.170,39145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,74,439,256.5,0.1442495126705653,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:43.258820,12.929482,tcp,147.32.84.170,53745.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:45.324962,1847.308105,udp,147.32.84.229,13363.0,<->,78.141.179.7,34020.0,CON,0.0,0.0,4,268,144,124,67.0,0.5373134328358209,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:45.611361,0.149457,udp,147.32.87.252,61272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,86,314,200.0,0.215,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:46.669640,0.018059,tcp,147.32.84.170,41834.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:46.679065,69.50808,tcp,147.32.84.170,56263.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,20,6037,2154,3883,301.85,0.3567997349676992,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:46.983661,0.000217,udp,147.32.85.25,46055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:46.988439,0.000412,udp,147.32.84.170,40913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:47.233462,0.000317,udp,147.32.84.170,55495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:47.424253,0.00023,udp,147.32.84.170,54420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:47.424783,0.000297,udp,147.32.84.170,52975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:48.494701,0.038417,udp,147.32.84.170,38282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:48.533584,0.000611,udp,147.32.84.170,55368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,529,82,447,264.5,0.15500945179584122,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:48.716587,0.000666,udp,109.132.23.87,8964.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,636,75,561,318.0,0.1179245283018868,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:22:49.412003,0.017197,udp,147.32.84.170,41309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,83,169,126.0,0.32936507936507936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:50.123382,0.000237,udp,147.32.84.138,47363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:50.160801,0.000244,udp,147.32.84.170,60711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:50.236292,0.0,udp,192.168.88.173,59970.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:22:50.852991,28.546474,tcp,147.32.84.59,55108.0,->,77.75.76.68,80.0,SRPA_FSPA,0.0,0.0,13,4042,908,3134,310.9230769230769,0.22464126669965365,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:22:50.997709,0.001686,udp,147.32.84.59,64764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,91,214,152.5,0.2983606557377049,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:51.924178,5.447289,tcp,210.194.126.219,50467.0,->,147.32.87.238,39371.0,FSPA_SA,0.0,0.0,7,494,308,186,70.57142857142857,0.6234817813765182,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:22:55.194381,0.000221,udp,147.32.84.138,55270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:22:56.666079,0.000403,udp,147.32.84.170,51935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:56.667017,0.000321,udp,147.32.84.170,46324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:22:56.668070,0.018041,tcp,147.32.84.170,48446.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:02.415848,538.617615,tcp,183.60.152.252,80.0,->,147.32.87.116,26631.0,SA_RA,0.0,0.0,4,252,132,120,63.0,0.5238095238095238,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:23:03.401031,0.020004,udp,147.32.85.8,42513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:03.784027,0.00068,udp,147.32.84.59,50656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:05.625940,0.009276,udp,147.32.84.132,60448.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,179,73,106,89.5,0.40782122905027934,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:05.852425,0.049664,udp,147.32.84.229,13363.0,<->,89.76.242.104,2118.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:06.185717,0.000249,udp,147.32.84.138,38384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:06.211903,61.284431,tcp,147.32.84.165,3291.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:23:06.666628,0.000399,udp,147.32.84.170,55174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:06.668704,0.017934,tcp,147.32.84.170,59050.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:13.608051,0.275603,tcp,147.32.84.170,56733.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:13.841158,0.000339,udp,147.32.85.7,46305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:13.841876,0.030989,udp,147.32.85.7,53078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,81,210,145.5,0.27835051546391754,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:13.962376,0.330793,tcp,147.32.84.170,41670.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:15.152103,0.000346,udp,147.32.84.138,57872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:16.666991,0.000293,udp,147.32.84.170,57069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:17.122075,3030.120361,udp,186.220.183.180,59653.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:17.770923,0.000275,udp,147.32.85.25,39910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:19.863552,0.000219,udp,147.32.84.138,42518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:19.974126,0.105213,udp,147.32.84.59,33113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,84,166,125.0,0.336,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:20.007241,0.000749,udp,212.126.216.194,2612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:21.589727,2697.866943,udp,173.9.188.118,12488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,657,471,186,109.5,0.7168949771689498,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:21.885826,39.310196,tcp,147.32.84.59,52053.0,->,78.46.51.208,443.0,SRPA_SPA,0.0,0.0,3069,3105341,3036812,68529,1011.8413163897035,0.9779318921818893,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:23:26.074757,0.000185,udp,147.32.84.138,36667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:26.667822,0.000935,udp,147.32.84.170,57017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:28.240538,0.000273,udp,147.32.85.42,37776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,77,188,132.5,0.29056603773584905,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:28.627606,0.000747,udp,89.229.220.250,28980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:31.017145,0.000404,udp,147.32.84.170,59903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:36.152542,0.000415,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:23:36.570655,0.0,icmp,69.4.233.55,2563.0,->,147.32.86.31,,URHPRO,0.0,,1,90,90,0,90.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:23:38.833534,3043.206055,udp,147.32.84.229,13363.0,<->,121.80.188.212,55364.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:39.497699,4.810034,tcp,147.32.84.59,57670.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,118,53674,12875,40799,454.864406779661,0.23987405447702798,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:23:42.500254,0.000268,udp,147.32.85.26,57032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:44.021888,0.00087,udp,62.228.35.123,58962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,72,477,274.5,0.13114754098360656,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:46.223121,0.00035,udp,147.32.84.134,36401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:23:46.261532,0.000449,udp,147.32.84.134,38619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:23:46.262588,250.043228,tcp,147.32.84.134,48701.0,->,209.85.149.113,80.0,FSPA_FSPA,0.0,0.0,56,36259,5772,30487,647.4821428571429,0.15918806365316196,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:23:46.667604,0.000313,udp,147.32.84.170,42306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:23:46.882633,4.039745,tcp,147.32.86.110,42664.0,->,147.32.192.127,443.0,FSRPA_FSPA,0.0,0.0,25,9926,2243,7683,397.04,0.22597219423735643,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:23:47.628574,0.00087,udp,89.102.77.10,6725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,77,499,288.0,0.13368055555555555,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:23:47.724638,0.000242,udp,147.32.84.138,50996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:48.593059,0.000316,udp,147.32.84.186,54504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:49.483285,0.190133,tcp,197.28.175.90,1065.0,->,147.32.84.229,80.0,SRA_SRA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:23:51.537209,0.000205,udp,147.32.84.138,54711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:54.815526,115.689697,tcp,147.32.84.59,51167.0,->,92.123.147.139,80.0,FSPA_FSPA,0.0,0.0,50,45791,1398,44393,915.82,0.030530016815531438,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:23:56.363058,0.000486,udp,147.32.84.138,41594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:23:56.668321,0.000378,udp,147.32.84.170,43006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:00.099564,0.000328,udp,147.32.85.34,53220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:02.019670,0.000324,udp,147.32.84.170,40103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:03.374777,2427.008057,udp,147.32.86.44,10966.0,<->,217.171.57.43,8255.0,CON,0.0,0.0,6,714,528,186,119.0,0.7394957983193278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:05.275474,116.312683,tcp,147.32.85.123,36499.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,21,6435,2042,4393,306.42857142857144,0.3173271173271173,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:05.765025,3550.109375,tcp,81.247.179.65,52967.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,155,12979,8045,4934,83.73548387096774,0.6198474458741043,16,0,flow=Background,Background,-1 2011-08-16 16:24:06.090992,9.182126,tcp,87.117.190.76,49612.0,->,147.32.84.229,443.0,SRA_SA,0.0,0.0,10,632,314,318,63.2,0.49683544303797467,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:06.367092,0.000285,udp,147.32.86.183,59349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:07.070636,61.282684,tcp,147.32.84.165,3292.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:24:09.647617,3197.984619,udp,69.123.171.179,60149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,801,596,205,114.42857142857143,0.7440699126092385,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:10.570741,132.397629,tcp,147.32.86.179,64808.0,->,92.122.212.216,80.0,FSPA_FSPA,0.0,0.0,73,59493,2724,56769,814.972602739726,0.0457868992990772,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:12.114546,0.000626,udp,178.240.167.47,28523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:12.658521,0.000297,udp,147.32.84.170,47241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:12.757967,5.006907,tcp,147.32.86.89,3090.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,1562,1050,512,142.0,0.6722151088348272,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:12.847923,0.000347,udp,147.32.84.138,55096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:14.330091,0.000353,udp,147.32.84.170,53161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:14.516444,0.000437,udp,147.32.84.170,47605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.466981,0.242673,tcp,147.32.86.20,4666.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,33173,1029,32144,809.0975609756098,0.0310192023633678,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:15.571513,10.625751,tcp,147.32.84.170,59068.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.572580,0.000362,udp,147.32.84.170,51891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.574681,10.621303,tcp,147.32.84.170,32857.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.663733,0.000479,udp,147.32.84.170,41887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.826602,0.000402,udp,147.32.84.170,33300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.827540,0.000874,udp,147.32.84.170,40717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.830865,0.000543,udp,147.32.84.170,39797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.834892,0.000576,udp,147.32.84.170,52602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:15.961864,2415.469971,udp,62.50.197.28,33036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,723,537,186,120.5,0.7427385892116183,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:16.110144,0.000269,udp,147.32.84.170,59902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.110877,0.00039,udp,147.32.84.170,39321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.195172,0.028763,udp,147.32.84.170,41661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,77,144,110.5,0.34841628959276016,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.208050,0.000366,udp,147.32.84.138,54312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:16.392903,0.161675,udp,147.32.84.170,48478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,81,149,115.0,0.3521739130434783,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.421788,29.784632,tcp,147.32.84.170,33962.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,47,34191,3288,30903,727.468085106383,0.09616565762920067,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.423221,0.000422,udp,147.32.84.170,46174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.423896,19.782202,tcp,147.32.84.170,51078.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,51,32941,3728,29213,645.9019607843137,0.1131720348501867,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.537290,0.075653,udp,147.32.84.170,37910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.568654,0.061645,tcp,147.32.84.170,55363.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,10,1525,772,753,152.5,0.5062295081967213,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.581073,0.000313,udp,147.32.84.170,50229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,78,189,133.5,0.29213483146067415,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.581774,0.000429,udp,147.32.84.170,55739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.582888,0.111546,udp,147.32.84.170,58250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,78,136,107.0,0.3644859813084112,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.669000,0.020629,tcp,147.32.84.170,55383.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.694886,0.000369,udp,147.32.84.170,41283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,78,136,107.0,0.3644859813084112,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.711890,0.000381,udp,147.32.84.170,39761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,74,118,96.0,0.3854166666666667,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.813034,29.393335,tcp,147.32.84.170,51085.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,31,18078,2267,15811,583.1612903225806,0.12540103993804624,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.813316,29.392939,tcp,147.32.84.170,51087.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,47,29441,3193,26248,626.4042553191489,0.10845419652865051,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.813420,29.393005,tcp,147.32.84.170,51088.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,25,9565,2219,7346,382.6,0.2319916361735494,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.813498,19.392609,tcp,147.32.84.170,51089.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,27,12601,2246,10355,466.7037037037037,0.17823982223633045,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:16.837662,0.000432,udp,147.32.84.170,50813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.007230,0.000269,udp,147.32.84.170,46365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.007739,0.000236,udp,147.32.84.170,33510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.073623,0.000431,udp,147.32.84.170,50483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.074905,0.000352,udp,147.32.84.170,37575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.075731,0.034902,udp,147.32.84.170,48629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.111496,0.080353,udp,147.32.84.170,53323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.192148,0.000331,udp,147.32.84.170,36019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.201189,0.000271,udp,147.32.84.170,33529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.290944,0.159578,udp,147.32.84.170,53379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,75,137,106.0,0.35377358490566035,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.330777,0.000454,udp,147.32.84.170,48968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,70,126,98.0,0.35714285714285715,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.517933,0.06739,udp,147.32.84.170,34115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,75,135,105.0,0.35714285714285715,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.551750,0.031204,udp,147.32.84.170,55105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,78,205,141.5,0.2756183745583039,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.654199,0.000233,udp,147.32.84.170,59817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,78,135,106.5,0.36619718309859156,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.699480,0.055666,udp,147.32.84.170,32898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,79,136,107.5,0.3674418604651163,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.756024,0.133361,udp,147.32.84.170,36881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:17.811725,0.000429,udp,147.32.85.7,33078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:17.878753,0.029318,udp,147.32.84.170,46173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,79,154,116.5,0.33905579399141633,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:18.829480,0.002865,udp,147.32.84.170,37029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,471,78,393,235.5,0.16560509554140126,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:18.842699,17.36903,tcp,147.32.84.170,53277.0,->,4.23.47.126,80.0,FSPA_FSPA,0.0,0.0,106,82365,7054,75311,777.0283018867924,0.08564317367813999,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:18.924324,247.287659,tcp,147.32.84.170,48496.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,28,6943,4808,2135,247.96428571428572,0.6924960391761487,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.113594,0.000255,udp,147.32.84.170,58722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.114378,0.002863,udp,147.32.84.170,47276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,457,74,383,228.5,0.16192560175054704,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.115793,0.01923,udp,147.32.84.170,54646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.118003,307.090515,tcp,147.32.84.170,43097.0,->,195.113.232.75,80.0,FSPA_FSPA,0.0,0.0,31,11719,1399,10320,378.03225806451616,0.11937878658588617,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.137118,133.698441,tcp,147.32.84.170,40272.0,->,69.64.154.198,80.0,SPA_SRPA,0.0,0.0,17,5224,1648,3576,307.29411764705884,0.31546707503828486,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.564099,16.647636,tcp,147.32.84.170,53284.0,->,4.23.47.126,80.0,FSPA_FSPA,0.0,0.0,17,7156,1786,5370,420.94117647058823,0.2495807713806596,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.564772,306.643738,tcp,147.32.84.170,58015.0,->,195.113.232.88,80.0,FSPA_FSPA,0.0,0.0,22,2730,1199,1531,124.0909090909091,0.4391941391941392,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.633143,0.027709,udp,147.32.84.170,42056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,78,145,111.5,0.34977578475336324,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.681597,0.000335,udp,147.32.84.170,60956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:19.829232,0.000255,udp,147.32.84.170,60456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,82,148,115.0,0.3565217391304348,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:22.302796,0.000257,udp,147.32.84.170,44178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:22.303331,0.000439,udp,147.32.84.170,37895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:26.254541,0.000338,udp,147.32.84.171,48422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,96,146,121.0,0.39669421487603307,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:26.667917,0.000465,udp,147.32.84.170,54966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:27.936043,0.000281,udp,147.32.86.183,60711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:27.939527,0.002803,udp,147.32.86.183,57547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:30.603686,0.000184,udp,147.32.84.138,55730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:33.020138,0.254017,tcp,147.32.84.170,47672.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:33.442727,9.2e-05,udp,147.32.84.138,46532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:33.889458,0.003712,tcp,147.32.84.59,4917.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2044,1049,995,227.11111111111111,0.5132093933463796,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:24:34.537343,0.00023,udp,147.32.84.138,42129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:34.555388,0.010087,udp,147.32.84.170,37258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,108,267,187.5,0.288,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:36.305978,0.000213,udp,147.32.84.138,52627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:36.668300,0.000288,udp,147.32.84.170,58330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:24:37.109218,0.000167,udp,147.32.84.59,60505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:38.270130,0.000159,udp,147.32.84.138,49291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:38.280463,0.000264,udp,147.32.84.138,46479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:41.852799,0.000631,udp,94.36.230.97,50935.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:44.333909,3581.530762,udp,95.158.244.187,35999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1706,1260,446,121.85714285714286,0.738569753810082,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:45.379980,0.269038,udp,147.32.84.59,33556.0,<->,190.247.169.187,18575.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:24:45.500027,0.000335,udp,147.32.85.25,60573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:46.801673,60.160049,tcp,147.32.85.114,50176.0,->,90.183.38.22,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:24:50.021757,0.000169,icmp,147.32.86.96,,<-,147.32.87.38,39771.0,ECR,,0.0,2,196,0,196,98.0,0.0,16,0,flow=Background,Background,-1 2011-08-16 16:24:50.104146,0.000384,udp,147.32.84.164,45807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:50.942477,3162.505615,udp,98.181.15.79,25811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,3346,478,2868,278.8333333333333,0.14285714285714285,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:52.395820,21.742466,udp,147.32.84.59,17349.0,<->,208.107.49.183,58663.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:24:52.427486,250.030975,tcp,147.32.84.164,58702.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,86,47498,7764,39734,552.3023255813954,0.16345951408480358,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.427647,10.019057,tcp,147.32.84.164,58704.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.427659,0.000138,udp,147.32.84.164,60349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.428064,0.000436,udp,147.32.84.164,45454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.429512,0.00041,udp,147.32.84.164,46414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.657738,0.000426,udp,147.32.84.164,37594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,432,80,352,216.0,0.18518518518518517,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.659023,0.00026,udp,147.32.84.164,33296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.660588,0.000364,udp,147.32.84.164,40060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.662960,0.000305,udp,147.32.84.164,48495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.664374,0.000568,udp,147.32.84.164,54810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.665665,0.000453,udp,147.32.84.164,53373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:52.666223,0.000446,udp,147.32.84.164,54575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:53.296340,0.000538,rtcp,201.8.187.151,47257.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:54.314149,0.048063,tcp,147.32.84.164,39614.0,->,74.125.232.197,80.0,FSRPA_FSPA,0.0,0.0,10,2004,1302,702,200.4,0.6497005988023952,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:54.624764,0.000268,udp,147.32.84.138,54890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:24:54.778137,0.069353,tcp,147.32.84.164,39616.0,->,74.125.232.197,80.0,FSRPA_FSPA,0.0,0.0,10,1993,1304,689,199.3,0.6542900150526844,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.149590,0.000315,udp,147.32.84.164,34911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.150278,0.010395,udp,147.32.84.164,44258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.161181,0.118838,udp,147.32.84.164,53751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,81,166,123.5,0.32793522267206476,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.170618,0.000351,udp,147.32.84.164,48909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.234212,0.002722,udp,147.32.84.164,35198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,82,159,120.5,0.34024896265560167,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.280423,0.028512,udp,147.32.84.164,44750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,81,240,160.5,0.2523364485981308,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.284285,2784.111328,udp,83.244.246.242,31358.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1609,1010,599,268.1666666666667,0.6277190801740211,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:24:56.584006,0.154638,udp,147.32.84.164,46934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.672853,0.000348,udp,147.32.84.164,49214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,76,120,98.0,0.3877551020408163,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:56.673416,0.346531,udp,147.32.84.164,37169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,76,145,110.5,0.3438914027149321,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:24:59.314057,1831.780396,udp,147.32.84.229,13363.0,<->,89.236.148.156,23721.0,CON,0.0,0.0,5,352,292,60,70.4,0.8295454545454546,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:01.801806,28.789246,tcp,80.243.106.148,30984.0,->,147.32.84.36,443.0,FSPA_FSPA,0.0,0.0,21,3554,2028,1526,169.23809523809524,0.5706246482836241,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:06.668476,0.000494,udp,147.32.84.170,47585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:06.764821,0.000237,udp,147.32.84.164,46744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:06.765392,0.000316,udp,147.32.84.164,51506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:06.796416,245.669586,tcp,147.32.84.164,47045.0,->,74.125.232.211,80.0,FSPA_FSRPA,0.0,0.0,21,3006,2027,979,143.14285714285714,0.6743180306054558,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:06.964223,0.110905,tcp,147.32.84.164,35654.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,10,2277,762,1515,227.7,0.3346508563899868,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.303244,0.133538,tcp,147.32.84.164,35656.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,10,1687,975,712,168.7,0.5779490219324244,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.303314,0.133462,tcp,147.32.84.164,35657.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,10,1916,977,939,191.6,0.5099164926931107,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.303492,0.116806,tcp,147.32.84.164,35660.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,12,2902,1034,1868,241.83333333333334,0.35630599586492073,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.303546,0.09776,tcp,147.32.84.164,35661.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,14,4695,1106,3589,335.35714285714283,0.23556975505857294,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.338331,0.250891,udp,147.32.84.164,42831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,81,157,119.0,0.3403361344537815,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.384951,0.111318,tcp,147.32.84.164,35664.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,10,2121,973,1148,212.1,0.45874587458745875,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.396281,0.2195,tcp,147.32.84.164,35666.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,82,71098,2694,68404,867.0487804878048,0.03789136121972489,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.502103,0.029208,udp,147.32.84.164,49876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,166,83,83,83.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.586691,0.253926,tcp,147.32.84.164,35675.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,22,14649,1245,13404,665.8636363636364,0.08498873643252099,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.589537,0.038902,udp,147.32.84.164,35368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,81,495,288.0,0.140625,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.628936,0.024959,udp,147.32.84.164,44763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.653112,0.028441,udp,147.32.84.164,38769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.713267,0.030436,udp,147.32.84.164,45479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,96,96,96.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.775265,0.000435,udp,147.32.84.164,41557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,492,73,419,246.0,0.1483739837398374,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.776380,0.084735,udp,147.32.84.164,50346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.780379,0.030287,udp,147.32.84.164,58106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,72,182,127.0,0.28346456692913385,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:07.928060,61.282711,tcp,147.32.84.165,3293.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:25:07.935750,0.027295,udp,147.32.84.164,54346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,86,157,121.5,0.35390946502057613,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:08.611158,0.039532,udp,147.32.84.229,13363.0,<->,80.6.62.132,42230.0,CON,0.0,0.0,2,566,77,489,283.0,0.13604240282685512,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:09.500723,0.455601,tcp,147.32.84.164,35687.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,23,13206,1370,11836,574.1739130434783,0.1037407239133727,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.500728,0.439615,tcp,147.32.84.164,35688.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,21,13544,1238,12306,644.952380952381,0.09140578854105139,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.500882,12.946108,tcp,147.32.84.164,33875.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.500932,12.947085,tcp,147.32.84.164,33876.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.902690,0.127958,tcp,147.32.84.164,35695.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,24,15739,1371,14368,655.7916666666666,0.0871084566999174,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.916046,0.149996,tcp,147.32.84.164,35697.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,22,14204,1297,12907,645.6363636363636,0.09131230639256548,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:09.994558,0.171611,tcp,147.32.84.164,35700.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,25,15344,1436,13908,613.76,0.09358706986444212,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:10.000060,0.127384,tcp,147.32.84.164,35701.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,14,8178,1036,7142,584.1428571428571,0.12668134018097335,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:10.174982,0.131329,tcp,147.32.84.164,35711.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,28,19337,1431,17906,690.6071428571429,0.07400320628846253,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:10.252247,0.183857,tcp,147.32.84.164,35714.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,33,21145,1632,19513,640.7575757575758,0.07718136675336959,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:13.068776,0.000505,udp,147.32.84.59,61135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:13.862728,38.854542,tcp,147.32.84.59,64344.0,->,147.32.80.7,80.0,FSPA_FSPA,0.0,0.0,18,4904,970,3934,272.44444444444446,0.19779771615008157,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:25:14.443551,0.111176,udp,147.32.85.120,21619.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,516,80,436,258.0,0.15503875968992248,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:14.950270,2973.286133,udp,88.83.170.22,49935.0,<->,147.32.85.8,57989.0,CON,0.0,0.0,18,2665,2588,77,148.05555555555554,0.9711069418386492,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:15.068450,3468.585938,udp,147.32.84.94,7103.0,<->,46.4.101.72,50012.0,CON,0.0,0.0,871,761124,13890,747234,873.8507462686567,0.018249325996815235,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:16.669354,0.018384,tcp,147.32.84.170,55420.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:18.449440,0.000891,udp,78.36.141.1,54604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,74,476,275.0,0.13454545454545455,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:18.588017,3598.478516,udp,147.32.84.94,7103.0,<->,188.40.14.55,50012.0,CON,0.0,0.0,1075,900373,19533,880840,837.5562790697675,0.021694342233718692,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:21.138069,3591.251465,udp,147.32.84.94,7103.0,<->,213.239.193.3,55012.0,CON,0.0,0.0,1044,838069,20085,817984,802.7480842911878,0.023965807111347635,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:23.889116,0.000684,udp,91.187.5.231,36016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:25:27.529641,0.000281,udp,147.32.85.26,55975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:27.586636,0.006753,tcp,147.32.84.132,58260.0,->,194.79.54.61,80.0,SRPA_FSPA,0.0,0.0,9,2456,968,1488,272.8888888888889,0.3941368078175896,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:33.424986,0.247609,udp,147.32.85.8,36220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:34.823858,4.952459,tcp,147.32.84.164,35726.0,->,94.236.108.221,80.0,FSPA_FSPA,0.0,0.0,105,89790,3300,86490,855.1428571428571,0.03675242231874373,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:34.823930,17.655582,tcp,147.32.84.164,35727.0,->,94.236.108.221,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:34.824162,0.000321,udp,147.32.84.164,53759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:35.022905,0.000262,udp,147.32.84.170,50604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:36.638667,0.002959,udp,147.32.85.6,54793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:36.667273,0.000468,udp,147.32.84.170,56496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:36.745318,0.000212,udp,147.32.84.170,50277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:36.746642,0.000307,udp,147.32.84.170,55257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:38.972458,198.1819,tcp,147.32.84.59,38613.0,->,2.21.98.110,443.0,FSRPA_FSPA,0.0,0.0,82,52762,10385,42377,643.439024390244,0.19682726204465334,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:25:39.395840,21.157843,tcp,80.141.8.225,1135.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,12,888,495,393,74.0,0.5574324324324325,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:42.642660,0.000186,udp,147.32.84.138,49615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:43.518155,0.000193,udp,147.32.84.138,37232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:46.668913,0.000353,udp,147.32.84.170,58276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:46.669822,0.0004,udp,147.32.84.170,46070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:46.671024,0.01821,tcp,147.32.84.170,33966.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:25:48.130251,67.387939,tcp,147.32.86.17,3165.0,->,195.113.232.75,80.0,SRPA_SPA,0.0,0.0,11,2486,1752,734,226.0,0.7047465808527755,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:48.925480,9.891712,tcp,147.32.86.17,3187.0,->,93.184.220.33,80.0,FSPA_FSRPA,0.0,0.0,18,7092,4290,2802,394.0,0.6049069373942471,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:51.022408,0.016942,udp,147.32.86.179,57773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,78,183,130.5,0.2988505747126437,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:52.822144,0.000495,udp,147.32.85.6,51046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:52.907184,7.491973,tcp,147.32.86.147,42016.0,->,74.125.232.217,80.0,FSRPA_FSPA,0.0,0.0,23,9806,5766,4040,426.3478260869565,0.588007342443402,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:53.688597,37.550629,tcp,147.32.85.6,53262.0,->,80.239.149.35,80.0,FSPA_FSPA,0.0,0.0,13,2099,1341,758,161.46153846153845,0.6388756550738447,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:57.037263,0.963295,tcp,147.32.86.20,4737.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,105,105545,1766,103779,1005.1904761904761,0.016732199535743047,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:25:58.019393,0.000662,udp,147.32.84.164,41882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,337,81,256,168.5,0.2403560830860534,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.178869,0.000232,udp,147.32.84.164,33967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.179031,0.000217,udp,147.32.84.164,44065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.228796,0.00049,udp,147.32.84.59,61943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:25:59.461575,0.000508,udp,147.32.84.164,36357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.463417,0.000304,udp,147.32.84.164,58788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.464054,0.000443,udp,147.32.84.164,48377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.464068,0.01982,udp,147.32.84.164,36221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.467058,0.021038,udp,147.32.84.164,35978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.510711,0.111831,udp,147.32.84.164,54445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.518253,0.000308,udp,147.32.84.164,43470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.666989,0.106634,udp,147.32.84.164,35524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.668041,0.000344,udp,147.32.84.164,60809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:25:59.732331,0.247533,udp,147.32.84.164,49218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.130873,0.118846,udp,147.32.84.164,58088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,84,222,153.0,0.27450980392156865,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.412472,0.282878,udp,147.32.84.164,39238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.475019,0.000453,udp,147.32.84.164,59542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.476754,0.000352,udp,147.32.84.164,55158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.564106,0.339653,udp,147.32.84.164,60344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,75,133,104.0,0.3605769230769231,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.896363,0.00151,udp,147.32.84.164,60257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.898067,0.000318,udp,147.32.84.164,58698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:00.899528,0.000159,udp,147.32.84.164,37790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:01.237269,0.155553,udp,147.32.84.164,42390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,74,136,105.0,0.3523809523809524,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:26:02.692937,995.657715,tcp,90.84.144.234,43591.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,36,3103,1930,1173,86.19444444444444,0.6219787302610377,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:26:06.669476,0.000321,udp,147.32.84.170,54356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:06.670575,0.017909,tcp,147.32.84.170,58571.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:07.840551,0.000238,udp,147.32.84.138,39651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:08.786039,61.282738,tcp,147.32.84.165,3294.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:26:09.586544,3587.938721,udp,147.32.84.94,7103.0,<->,188.40.100.106,50012.0,CON,0.0,0.0,3004,2731239,38696,2692543,909.2007323568575,0.014167928914313248,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:12.156162,3535.648682,udp,147.32.84.94,7103.0,<->,88.198.22.3,51012.0,CON,0.0,0.0,1063,921709,17565,904144,867.0827845719662,0.01905699087239031,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:12.425232,0.000394,udp,147.32.87.254,60043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,73,243,158.0,0.2310126582278481,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:14.108497,0.000263,udp,147.32.84.138,49128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:15.367217,0.224211,udp,117.198.155.55,41382.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,277,157,120,69.25,0.5667870036101083,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:15.401668,0.000624,udp,69.112.114.102,22941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:16.667920,0.000418,udp,147.32.84.170,55471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:16.668839,0.000377,udp,147.32.84.170,45199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:19.950016,5.966592,tcp,66.249.72.233,40059.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,32,18545,1400,17145,579.53125,0.07549204637368563,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:26:20.600790,2452.641846,udp,219.96.25.247,24871.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:21.304510,0.000244,udp,147.32.84.138,52338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:22.826962,0.000216,udp,147.32.84.170,42573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:23.482409,2767.444824,udp,46.9.101.76,46882.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1245,825,420,103.75,0.6626506024096386,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:26.668811,0.000473,udp,147.32.84.170,45519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:26.669633,0.0004,udp,147.32.84.170,60180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:28.558155,2507.667969,udp,62.100.67.159,13486.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1215,905,310,121.5,0.7448559670781894,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:31.865775,0.000133,udp,147.32.84.21,53102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:33.066389,0.178678,udp,147.32.84.170,43938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.843708,0.000294,udp,147.32.84.170,36550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.843879,0.000232,udp,147.32.84.170,54792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.844545,0.000451,udp,147.32.84.170,49692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.845716,12.359118,tcp,147.32.84.170,34977.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.848271,0.000181,udp,147.32.84.170,54684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,64,139,101.5,0.31527093596059114,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:33.905492,0.006901,tcp,147.32.84.59,4927.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1919,1031,888,213.22222222222223,0.5372589890568004,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:26:34.058512,0.000265,udp,147.32.84.170,39494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.058531,0.000254,udp,147.32.84.170,44759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.059053,0.000396,udp,147.32.84.170,50551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.060403,0.000292,udp,147.32.84.170,38077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.307476,0.247234,udp,147.32.84.170,52785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.379912,0.000215,udp,147.32.84.170,34234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.382499,0.000358,udp,147.32.84.170,48365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.508219,0.107795,udp,147.32.84.170,42566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.554956,0.24691,udp,147.32.84.170,55512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.644493,0.058252,udp,147.32.84.170,59157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,85,167,126.0,0.3373015873015873,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.701848,0.029937,udp,147.32.84.170,49758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.710604,19.547785,tcp,147.32.84.170,42022.0,->,91.198.174.232,80.0,FSPA_FSPA,0.0,0.0,87,82001,2662,79339,942.5402298850574,0.032463018743673855,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.710953,11.502925,tcp,147.32.84.170,42023.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.711454,0.000355,udp,147.32.84.170,42721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.711822,0.000335,udp,147.32.84.170,60047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.713235,11.500329,tcp,147.32.84.170,54540.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1550,929,621,140.9090909090909,0.5993548387096774,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.713359,11.500101,tcp,147.32.84.170,54542.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.713719,41.50108,tcp,147.32.84.170,40712.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,68,55098,4007,51091,810.2647058823529,0.07272496279356783,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:34.731076,0.544389,udp,147.32.84.170,59960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.421771,0.000194,udp,147.32.84.170,42643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.462086,0.000226,udp,147.32.84.170,57871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,76,131,103.5,0.3671497584541063,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.495638,0.020193,tcp,147.32.85.74,56992.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:26:35.648610,0.095226,udp,147.32.84.170,60350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.744091,0.000252,udp,147.32.84.170,57071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.800253,0.187028,udp,147.32.84.170,51038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.815299,0.255127,udp,147.32.84.170,56332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,80,187,133.5,0.299625468164794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.930063,0.037936,udp,147.32.84.170,35873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,71,265,168.0,0.2113095238095238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:35.987497,0.187471,udp,147.32.84.170,59635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.378418,0.127762,udp,147.32.84.170,44430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,81,140,110.5,0.3665158371040724,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.507465,0.187545,udp,147.32.84.170,38067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,81,177,129.0,0.313953488372093,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.548160,0.175673,udp,147.32.84.170,52138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,87,232,159.5,0.2727272727272727,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.562433,0.000206,udp,147.32.84.170,55072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,85,143,114.0,0.37280701754385964,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.563071,0.115746,udp,147.32.84.170,34378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,85,146,115.5,0.36796536796536794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.679586,0.10163,udp,147.32.84.170,45934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,79,138,108.5,0.3640552995391705,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.781672,0.000228,udp,147.32.84.170,34454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,79,138,108.5,0.3640552995391705,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:36.782299,0.099535,udp,147.32.84.170,51268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,79,188,133.5,0.2958801498127341,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:37.312859,0.198843,udp,147.32.84.170,52618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:37.362196,0.000359,udp,147.32.85.26,49524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,69,182,125.5,0.2749003984063745,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:37.482543,0.00032,udp,147.32.85.26,63204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,74,187,130.5,0.2835249042145594,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:37.673258,0.000373,udp,147.32.84.170,49022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,75,126,100.5,0.373134328358209,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:37.711028,0.097918,udp,147.32.84.170,41234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,80,184,132.0,0.30303030303030304,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:38.200168,136.998779,tcp,147.32.84.170,58888.0,->,209.237.151.18,80.0,SPA_SRPA,0.0,0.0,255,105280,11405,93875,412.8627450980392,0.10833016717325228,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:45.224240,10.981558,tcp,147.32.84.170,44883.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:45.380592,3496.141846,udp,147.32.84.147,48134.0,<->,77.78.110.71,123.0,CON,0.0,0.0,58,5220,2610,2610,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:26:46.669147,0.000304,udp,147.32.84.170,59897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:46.670363,0.018483,tcp,147.32.84.170,52171.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:47.760595,0.000635,udp,188.222.104.32,51544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:48.014042,15.484138,udp,147.32.85.84,13716.0,<->,123.100.140.157,3637.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:54.200833,12.013492,tcp,147.32.84.170,54566.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:54.200887,12.013433,tcp,147.32.84.170,54567.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:54.201003,12.013682,tcp,147.32.84.170,42054.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:54.542201,0.000323,udp,147.32.84.170,39504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:54.544752,0.000382,udp,147.32.84.170,40821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.118036,0.281957,udp,147.32.84.170,40184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.698970,0.000359,udp,147.32.84.170,38029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.699697,0.000368,udp,147.32.84.170,60703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.701719,0.000517,udp,147.32.84.170,54992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.706695,0.32861,udp,147.32.84.170,37339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,76,189,132.5,0.28679245283018867,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.707174,0.172306,udp,147.32.84.170,38178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.879913,0.000255,udp,147.32.84.170,47911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:55.922358,0.000725,udp,147.32.84.138,53859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:26:56.158853,0.00057,udp,178.41.185.201,17448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:26:56.266179,0.281403,udp,147.32.84.170,38016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:56.547823,0.28118,udp,147.32.84.170,42041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:26:57.897747,0.00058,udp,61.24.119.150,48940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:27:05.194940,0.331628,tcp,147.32.84.59,64493.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1539,699,840,171.0,0.45419103313840153,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:27:06.670485,0.018876,tcp,147.32.84.170,40586.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:06.913619,19.3018,tcp,147.32.84.170,42065.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:06.913681,19.30142,tcp,147.32.84.170,42066.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.015526,0.000314,udp,147.32.84.170,40113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.016255,0.000253,udp,147.32.84.170,39933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.017044,0.216876,tcp,147.32.84.170,57631.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.241453,0.000298,udp,147.32.84.170,34960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.241701,0.000233,udp,147.32.84.170,46204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.244395,0.000315,udp,147.32.84.170,36877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,77,249,163.0,0.2361963190184049,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:07.245380,0.198163,udp,147.32.84.170,47752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,76,135,105.5,0.36018957345971564,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:09.643938,61.284115,tcp,147.32.84.165,3295.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:27:11.244658,0.00036,udp,147.32.84.138,40267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:11.838824,2772.475342,udp,187.114.124.92,20913.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:27:12.364450,0.106349,udp,147.32.84.229,13363.0,<->,78.138.188.237,4616.0,CON,0.0,0.0,2,537,72,465,268.5,0.1340782122905028,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:27:16.667867,0.000333,udp,147.32.84.170,54791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:18.775691,0.000229,udp,147.32.84.138,38711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:18.780029,0.000323,udp,147.32.84.138,44795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:18.985099,0.379262,tcp,147.32.85.26,60954.0,->,204.11.51.34,80.0,FSRPA_FSPA,0.0,0.0,10,1605,935,670,160.5,0.5825545171339563,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:27:19.737316,3.125683,tcp,147.32.86.89,3148.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,46,36176,1550,34626,786.4347826086956,0.04284608580274215,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:27:21.898888,0.000412,udp,147.32.84.19,57757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,85,220,152.5,0.2786885245901639,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:26.670122,0.018442,tcp,147.32.84.170,44911.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:26.675377,0.000284,udp,147.32.84.138,50320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:27.147264,0.247926,udp,147.32.84.164,49566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:27:28.138681,0.000437,udp,147.32.84.164,52405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:27:30.979506,0.000741,udp,93.36.141.103,27200.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,77,476,276.5,0.13924050632911392,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:27:31.521863,117.070168,tcp,147.32.84.181,52133.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,10,2960,1506,1454,296.0,0.5087837837837837,16,1,flow=Background-google-analytics5,Background,-1 2011-08-16 16:27:32.196917,0.032203,udp,147.32.84.59,51127.0,<->,81.164.117.201,55498.0,CON,0.0,0.0,2,134,73,61,67.0,0.5447761194029851,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:27:37.015359,0.000318,udp,147.32.84.170,52251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:27:45.176399,0.000237,udp,147.32.84.138,40930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:46.436432,0.000664,udp,147.32.84.59,62223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:27:50.385710,584.91687,tcp,147.32.84.59,51078.0,->,209.85.148.106,80.0,SRPA_FSPA,0.0,0.0,213,112886,32013,80873,529.981220657277,0.28358698155661466,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:27:59.090735,15.300926,udp,147.32.84.94,7103.0,->,82.239.56.211,7444.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:28:00.259536,0.000362,udp,147.32.85.34,64283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:00.311527,0.000246,udp,147.32.85.34,60382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:01.430682,0.000346,udp,147.32.85.8,53508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:03.079417,4.547691,tcp,147.32.84.59,42775.0,->,69.63.190.31,443.0,FSPA_FSPA,0.0,0.0,21,7241,1833,5408,344.8095238095238,0.25314183123877915,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:28:05.691041,0.000297,udp,147.32.85.7,46254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,72,198,135.0,0.26666666666666666,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:06.051879,0.026029,tcp,147.32.85.123,52338.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:28:08.023480,0.213784,tcp,147.32.84.170,57639.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:10.311722,60.001652,tcp,147.32.86.44,4208.0,->,147.32.80.13,3128.0,FSPA_FSA,0.0,0.0,9,1237,997,240,137.44444444444446,0.8059822150363783,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:28:10.503533,61.281376,tcp,147.32.84.165,3296.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:28:13.561073,0.306669,tcp,147.32.84.170,57278.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:14.061085,0.000387,udp,147.32.84.170,36687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:15.457940,0.000224,udp,147.32.84.138,49751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:16.669892,0.018387,tcp,147.32.84.170,40621.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:23.872243,0.00041,udp,147.32.84.170,45283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:23.873679,12.347254,tcp,147.32.84.170,54610.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1551,929,622,141.0,0.5989684074790458,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.540021,0.000496,udp,147.32.84.170,55023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.541699,0.000281,udp,147.32.84.170,47670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,76,131,103.5,0.3671497584541063,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.542188,0.000247,udp,147.32.84.170,51145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,76,131,103.5,0.3671497584541063,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.542906,0.000326,udp,147.32.84.170,34700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,81,259,170.0,0.23823529411764705,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.544029,0.000245,udp,147.32.84.170,37289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.544532,0.000226,udp,147.32.84.170,56793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.545309,0.000257,udp,147.32.84.170,38458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,77,177,127.0,0.3031496062992126,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.547518,0.000292,udp,147.32.84.170,54982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.554402,0.000278,udp,147.32.84.170,45617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,85,143,114.0,0.37280701754385964,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.555395,0.000189,udp,147.32.84.170,42971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,81,140,110.5,0.3665158371040724,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.555487,0.000321,udp,147.32.84.170,36442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,85,146,115.5,0.36796536796536794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.555991,0.00034,udp,147.32.84.170,36225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,81,177,129.0,0.313953488372093,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.559733,0.203963,udp,147.32.84.170,43109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:24.569247,0.139613,tcp,147.32.84.59,52269.0,->,217.163.21.37,80.0,FSPA_FSPA,0.0,0.0,10,2602,1366,1236,260.2,0.5249807840122982,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:28:24.776282,3023.342041,udp,188.23.219.171,36222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1440,1068,372,120.0,0.7416666666666667,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:28:25.140203,0.164029,udp,147.32.84.170,35222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:25.164662,3.193759,udp,147.32.84.170,44026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:25.605019,0.138865,udp,147.32.84.170,60030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,80,143,111.5,0.35874439461883406,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:25.783111,0.032275,udp,147.32.84.170,36726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:25.975340,0.000256,udp,147.32.84.170,41869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,75,119,97.0,0.3865979381443299,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:26.668869,0.000507,udp,147.32.84.170,55487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:26.891695,0.414569,tcp,147.32.84.59,52280.0,->,64.22.112.109,80.0,FSPA_FSPA,0.0,0.0,11,2819,907,1912,256.27272727272725,0.321745299751685,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:28:26.945108,0.221823,tcp,147.32.84.59,55352.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,19,3124,1654,1470,164.42105263157896,0.529449423815621,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:28:27.665991,0.0,udp,147.32.84.134,4444.0,->,192.168.88.162,4444.0,INT,0.0,,1,87,87,0,87.0,1.0,16,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:28:29.908616,0.000738,udp,84.38.18.128,45695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:28:36.089956,0.000141,udp,147.32.84.138,37532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:38.014078,0.206622,tcp,147.32.84.170,57660.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:39.129087,15.224574,udp,147.32.84.94,7103.0,->,76.25.113.171,7418.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:28:43.279986,8.130875,tcp,147.32.84.189,34430.0,->,77.75.76.3,80.0,FSPA_FSPA,0.0,0.0,11,1480,985,495,134.54545454545453,0.6655405405405406,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:28:45.606249,0.000254,udp,147.32.84.138,46147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:28:46.686592,0.000579,udp,77.255.110.144,13255.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:28:49.183883,7.038664,tcp,147.32.84.170,54618.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1557,930,627,141.54545454545453,0.5973025048169557,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.184025,17.03945,tcp,147.32.84.170,54619.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.184325,17.0394,tcp,147.32.84.170,42110.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.184591,17.039286,tcp,147.32.84.170,42114.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.185084,0.018161,udp,147.32.84.170,54083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.185214,25.903908,tcp,147.32.84.170,40797.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,26,17952,1099,16853,690.4615384615385,0.06121880570409982,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.186966,17.037086,tcp,147.32.84.170,48286.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.203585,0.017874,udp,147.32.84.170,58924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,85,270,177.5,0.23943661971830985,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.684318,0.000178,udp,147.32.84.170,55520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.684861,0.00032,udp,147.32.84.170,59059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.686565,0.000373,udp,147.32.84.170,59310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.688972,0.000262,udp,147.32.84.170,41664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.690171,0.000258,udp,147.32.84.170,51122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.694073,0.000435,udp,147.32.84.170,46403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.695133,0.000305,udp,147.32.84.170,49934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.695706,0.000424,udp,147.32.84.170,41660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.697458,0.000406,udp,147.32.84.170,49044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.698662,0.000263,udp,147.32.84.170,47752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.701582,0.000322,udp,147.32.84.170,36723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,87,259,173.0,0.2514450867052023,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:49.702506,0.000338,udp,147.32.84.170,38031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:50.249705,0.284036,udp,147.32.84.170,58711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:50.533975,0.28574,udp,147.32.84.170,45578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:50.933569,152.559845,udp,147.32.84.229,13363.0,<->,89.41.96.89,7756.0,CON,0.0,0.0,6,1662,497,1165,277.0,0.2990373044524669,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:28:51.412115,0.066932,udp,147.32.84.229,13363.0,<->,109.160.87.74,55974.0,CON,0.0,0.0,4,3044,60,2984,761.0,0.01971090670170828,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:28:54.939452,0.043754,tcp,147.32.86.96,40129.0,->,147.32.87.52,12489.0,_FSPA,,0.0,8,546,0,546,68.25,0.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:28:56.667495,0.000341,udp,147.32.84.170,40622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:28:58.227387,0.309919,tcp,147.32.86.20,4861.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,27998,798,27200,848.4242424242424,0.028502035859704265,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:29:01.529421,0.000347,udp,147.32.84.164,46375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,337,81,256,168.5,0.2403560830860534,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:06.669511,0.018366,tcp,147.32.84.170,46508.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:06.704281,0.000186,udp,147.32.84.138,52310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:08.315405,0.005611,tcp,147.32.84.132,58367.0,->,194.79.54.61,80.0,SRPA_FSPA,0.0,0.0,10,2519,1029,1490,251.9,0.40849543469630806,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:29:08.326439,17.898092,tcp,147.32.84.170,54640.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:08.326643,17.898146,tcp,147.32.84.170,54643.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:08.326703,17.897821,tcp,147.32.84.170,54644.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:08.327054,17.897867,tcp,147.32.84.170,42135.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:08.597991,30.88863,tcp,147.32.85.7,35281.0,->,81.2.194.166,80.0,FSPA_FSPA,0.0,0.0,10,1703,814,889,170.3,0.47798003523194366,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:29:08.659201,0.000454,udp,147.32.84.170,50832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,80,185,132.5,0.3018867924528302,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:08.660074,0.000399,udp,147.32.84.170,38669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,80,252,166.0,0.24096385542168675,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:09.456224,0.000586,udp,202.225.235.163,55340.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:09.473857,0.000405,udp,147.32.84.164,35838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.474421,0.000292,udp,147.32.84.164,48815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,399,81,318,199.5,0.20300751879699247,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.475402,0.000348,udp,147.32.84.164,52713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.475993,0.00041,udp,147.32.84.164,50048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.476105,0.000443,udp,147.32.84.164,39441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.476765,0.000322,udp,147.32.84.164,59850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.477013,0.000391,udp,147.32.84.164,48891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.478522,0.248215,udp,147.32.84.164,50269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.478574,0.000419,udp,147.32.84.164,37376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,578,80,498,289.0,0.1384083044982699,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.479412,0.000437,udp,147.32.84.164,58130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.481240,0.000393,udp,147.32.84.164,51442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.481290,0.00035,udp,147.32.84.164,45842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.745398,0.000265,udp,147.32.84.164,40301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:09.745915,252.883057,tcp,147.32.84.164,54746.0,->,74.125.239.31,80.0,FSPA_FSPA,0.0,0.0,37,5841,3570,2271,157.86486486486487,0.6111967128916281,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:10.441994,0.000205,udp,147.32.85.7,41869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:11.360026,61.298885,tcp,147.32.84.165,3297.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:29:11.728531,0.000215,udp,147.32.84.138,47619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:12.076804,250.397781,tcp,147.32.84.164,46814.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,33,9250,6292,2958,280.3030303030303,0.6802162162162162,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:29:13.347201,0.000405,udp,147.32.84.138,46308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:13.627460,0.000243,udp,147.32.84.186,54843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:14.331276,0.000602,udp,74.83.169.202,10425.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:14.790260,0.000219,udp,147.32.84.59,53786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:14.811753,0.000352,udp,147.32.84.59,45180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,73,185,129.0,0.28294573643410853,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:15.696516,0.286022,udp,147.32.84.170,52499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:15.982779,0.282138,udp,147.32.84.170,58339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:16.263019,0.2833,udp,147.32.84.170,45981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:16.567449,0.000371,udp,147.32.84.170,40571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:16.568281,0.000276,udp,147.32.84.170,58155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:16.568343,0.000403,udp,147.32.84.170,55515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:16.852473,0.280301,udp,147.32.84.170,54062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:20.482617,0.000148,udp,147.32.84.138,58084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:20.487449,0.000271,udp,147.32.84.138,41554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:20.752651,0.288175,udp,147.32.84.229,13363.0,<->,189.18.255.129,13073.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:22.761190,809.260986,udp,177.40.9.85,27669.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1131,153,978,282.75,0.13527851458885942,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:25.622883,0.000433,udp,147.32.86.147,54975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,73,162,117.5,0.31063829787234043,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:26.670702,0.019191,tcp,147.32.84.170,58708.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:26.918852,2657.526855,udp,91.52.181.22,1384.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1236,876,360,103.0,0.7087378640776699,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:29.736286,1365.751099,tcp,147.32.84.134,37123.0,->,205.188.17.129,443.0,PA_RPA,0.0,0.0,177,14844,6116,8728,83.86440677966101,0.41201832390191323,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:29:31.991817,0.519831,udp,94.138.64.39,35623.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,177,76,126.5,0.6996047430830039,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:32.060005,0.000263,udp,147.32.84.21,40771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:36.669606,0.00036,udp,147.32.84.170,38469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:38.008026,0.000235,udp,147.32.84.138,42735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:39.018540,0.000236,udp,147.32.84.170,33568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:40.185415,0.000477,udp,147.32.84.189,56911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:40.837361,0.002421,udp,147.32.84.189,52398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,79,177,128.0,0.30859375,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:42.834057,0.000482,udp,147.32.84.170,45142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.691632,12.535926,tcp,147.32.84.170,42151.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.691743,0.000362,udp,147.32.84.170,50847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.691852,12.535713,tcp,147.32.84.170,42153.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.693225,12.533722,tcp,147.32.84.170,54668.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.693239,12.533701,tcp,147.32.84.170,54669.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.712104,22.516354,tcp,147.32.84.170,40838.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,60,49519,3230,46289,825.3166666666667,0.06522748843878107,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:43.712188,22.51597,tcp,147.32.84.170,40841.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,73,64883,3335,61548,888.8082191780821,0.05140021269053527,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.129750,0.139776,udp,147.32.84.170,50323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,81,135,108.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.159353,0.221,udp,147.32.84.170,45181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,75,126,100.5,0.373134328358209,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.259234,0.14225,udp,147.32.84.170,52189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,83,180,131.5,0.3155893536121673,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.270409,0.293545,udp,147.32.84.170,34811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.556812,0.016406,udp,147.32.84.170,55225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.610630,0.000217,udp,147.32.84.170,36557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,80,187,133.5,0.299625468164794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.611637,0.000289,udp,147.32.84.170,41739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,75,155,115.0,0.32608695652173914,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.612324,0.000437,udp,147.32.84.170,44191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,75,240,157.5,0.23809523809523808,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.692783,0.000297,udp,147.32.84.170,52648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,70,197,133.5,0.26217228464419473,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.693501,0.001868,udp,147.32.84.170,56770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,448,70,378,224.0,0.15625,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:44.712816,0.025398,udp,147.32.84.170,42022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.046244,0.188566,udp,147.32.84.170,45943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,74,232,153.0,0.24183006535947713,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.124343,0.127981,udp,147.32.84.170,42157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,73,140,106.5,0.3427230046948357,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.202428,0.929243,udp,147.32.84.170,47826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,77,153,115.0,0.3347826086956522,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.284198,0.001427,udp,147.32.84.170,37994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,77,209,143.0,0.2692307692307692,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.285959,0.001948,udp,147.32.84.170,53470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,77,393,235.0,0.16382978723404254,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.375641,0.000224,udp,147.32.84.170,35217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:45.376270,0.121424,udp,147.32.84.170,55896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,80,145,112.5,0.35555555555555557,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:48.137476,0.000231,udp,147.32.84.138,45440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:49.570456,0.04013,udp,147.32.84.59,62195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,77,188,132.5,0.29056603773584905,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:50.589432,0.121085,udp,147.32.84.59,56577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,531,79,452,265.5,0.1487758945386064,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:54.022032,0.000665,udp,151.66.54.36,10141.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:55.027256,983.785645,udp,147.32.84.229,13363.0,<->,114.45.99.242,30150.0,CON,0.0,0.0,22,2788,2071,717,126.72727272727273,0.7428263988522238,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:55.928173,3379.786377,udp,91.196.38.244,49505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,471,347,124,117.75,0.7367303609341825,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:56.779869,0.018493,tcp,147.32.84.170,45004.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:29:57.199700,0.000322,udp,147.32.84.59,33510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,82,243,162.5,0.2523076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:58.354968,3196.102783,udp,87.95.80.47,37893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1256,890,366,125.6,0.7085987261146497,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:29:59.302462,0.000237,udp,147.32.85.34,62906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:59.308119,0.000201,udp,147.32.85.34,60590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:29:59.594684,123.124313,tcp,147.32.84.59,58442.0,->,2.21.111.139,80.0,FSPA_FSPA,0.0,0.0,10,1480,945,535,148.0,0.6385135135135135,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:30:00.685291,0.148016,udp,147.32.84.59,55054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,586,73,513,293.0,0.12457337883959044,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:01.239396,0.000323,udp,147.32.87.36,42482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:30:01.239564,0.000302,udp,147.32.87.36,42482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:30:01.249772,15.242392,icmp,217.92.30.236,3331.0,->,147.32.84.94,,URFIL,0.0,,4,280,280,0,70.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:30:01.572300,0.000631,udp,2.218.142.99,16694.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:02.110736,6e-06,icmp,147.32.86.96,,<-,147.32.87.2,1375.0,ECR,,0.0,2,196,0,196,98.0,0.0,16,0,flow=Background,Background,-1 2011-08-16 16:30:03.042639,0.000185,udp,147.32.84.138,42823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:06.670153,0.000518,udp,147.32.84.170,55452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:08.109651,5.894063,tcp,147.32.84.59,50752.0,->,208.122.31.4,80.0,FSPA_FSPA,0.0,0.0,11,1775,789,986,161.36363636363637,0.4445070422535211,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:30:10.020098,0.000351,udp,147.32.84.170,60795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:10.108721,0.000193,udp,147.32.87.36,60467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:30:11.404512,2531.208008,udp,41.132.30.42,6825.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1175,865,310,117.5,0.7361702127659574,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:12.228584,61.301796,tcp,147.32.84.165,3298.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:30:13.259717,0.000557,udp,147.32.84.59,37870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,498,81,417,249.0,0.16265060240963855,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:16.221631,20.00938,tcp,147.32.84.170,42180.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.222924,0.018185,udp,147.32.84.170,33755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.431234,0.000329,udp,147.32.84.170,41265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.431373,0.000358,udp,147.32.84.170,48866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.431948,0.000409,udp,147.32.84.170,51968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.432232,0.000335,udp,147.32.84.170,35160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.433928,0.000205,udp,147.32.84.170,47580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.434126,0.000336,udp,147.32.84.170,58906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.434523,0.000384,udp,147.32.84.170,44824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.435567,0.000224,udp,147.32.84.170,51682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.435735,0.000306,udp,147.32.84.170,35893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.436116,0.000306,udp,147.32.84.170,52184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.437186,0.000369,udp,147.32.84.170,50813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.438012,0.030967,udp,147.32.84.170,42001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.442509,0.366085,udp,147.32.84.170,35339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,80,94,87.0,0.45977011494252873,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.499926,0.028449,udp,147.32.84.170,59739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.529938,0.000369,udp,147.32.84.170,33579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,77,249,163.0,0.2361963190184049,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.597158,0.000382,udp,147.32.84.170,42427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,87,259,173.0,0.2514450867052023,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.669741,0.000494,udp,147.32.84.170,50067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.671902,0.017665,tcp,147.32.84.170,34147.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.679844,0.000314,udp,147.32.84.170,36929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.811146,0.180594,udp,147.32.84.170,53262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:16.992018,0.183027,udp,147.32.84.170,37072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,82,148,115.0,0.3565217391304348,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:17.080590,0.000178,udp,147.32.84.59,61883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:18.731979,0.000319,udp,147.32.84.170,35602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,82,254,168.0,0.24404761904761904,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:18.738672,0.000349,udp,147.32.84.170,44825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:18.747881,0.914253,udp,147.32.84.170,37396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,176,65,111,88.0,0.3693181818181818,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:18.890592,0.000417,udp,147.32.84.170,51820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,69,129,99.0,0.3484848484848485,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:18.987407,0.000345,udp,147.32.84.170,38065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.017206,0.280279,udp,147.32.84.170,59454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.424008,0.092012,tcp,147.32.86.178,1105.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,9,2068,1595,473,229.77777777777777,0.7712765957446809,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:30:19.662354,0.000274,udp,147.32.84.170,57082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,176,65,111,88.0,0.3693181818181818,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.718652,0.000321,udp,147.32.84.170,36838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.803661,0.052823,udp,147.32.84.170,40561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,70,125,97.5,0.358974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.857344,0.295589,udp,147.32.84.170,58178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,72,141,106.5,0.3380281690140845,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:19.864417,0.018046,udp,147.32.84.170,42255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:20.130683,0.000228,udp,147.32.84.170,33875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,78,145,111.5,0.34977578475336324,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:21.416211,0.00116,udp,99.65.218.211,1025.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,314,64,250,157.0,0.20382165605095542,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:24.744648,15.012337,tcp,147.32.86.74,2028.0,->,147.32.30.4,80.0,FSPA_FSPA,0.0,0.0,11,1511,902,609,137.36363636363637,0.5969556585043018,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:30:26.237232,0.502766,tcp,147.32.84.168,58039.0,->,65.55.7.141,80.0,FSRPA_FSPA,0.0,0.0,13,4265,3802,463,328.0769230769231,0.8914419695193435,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:30:27.249841,0.000674,udp,122.170.54.216,29305.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:29.523372,0.000756,udp,118.168.160.63,21341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,168,83,85,84.0,0.49404761904761907,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:29.750556,0.000394,udp,80.156.204.20,33251.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:31.705997,0.010171,udp,147.32.86.147,44252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:31.960401,243.060028,tcp,147.32.84.164,54883.0,->,74.125.232.198,443.0,SRPA_FSPA,0.0,0.0,27,2580,1484,1096,95.55555555555556,0.5751937984496124,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:30:32.147184,0.000618,udp,189.102.7.241,61608.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:32.486934,0.124757,udp,147.32.84.170,41834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,70,147,108.5,0.3225806451612903,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.489123,0.000463,udp,147.32.84.170,37388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.489959,0.000343,udp,147.32.84.170,49151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.506164,0.084171,udp,147.32.84.170,45718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,178,74,104,89.0,0.4157303370786517,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.620828,0.000352,udp,147.32.84.170,37090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.621589,0.000354,udp,147.32.84.170,34677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.691846,0.067941,udp,147.32.84.170,57773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,72,168,120.0,0.3,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.779200,0.285384,udp,147.32.84.170,57053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:32.958339,0.00033,udp,147.32.84.138,59722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:33.093218,0.177108,udp,147.32.84.170,44439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,82,165,123.5,0.3319838056680162,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.423773,0.01661,udp,147.32.84.170,57392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,75,175,125.0,0.3,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.650182,0.219049,udp,147.32.84.170,40553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,81,139,110.0,0.36818181818181817,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.829337,0.083104,udp,147.32.84.170,51740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.869641,0.063977,udp,147.32.84.170,54335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,81,179,130.0,0.31153846153846154,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.934647,0.06267,udp,147.32.84.170,34250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,79,126,102.5,0.3853658536585366,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:33.970497,0.159751,udp,147.32.84.170,35771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:34.116968,0.001995,udp,147.32.84.170,42505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,488,79,409,244.0,0.16188524590163936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:35.486960,0.1984,udp,147.32.84.229,13363.0,<->,24.252.118.202,49107.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:37.944579,0.000337,udp,147.32.84.138,60630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:30:38.565190,10.751033,udp,147.32.84.229,13363.0,<->,68.6.228.235,64110.0,CON,0.0,0.0,4,288,168,120,72.0,0.5833333333333334,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:39.954093,0.000717,udp,188.138.139.2,57554.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,75,494,284.5,0.13181019332161686,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:41.019022,0.00025,udp,147.32.84.170,39675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:41.019838,0.000309,udp,147.32.84.170,59050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.571695,13.660716,tcp,147.32.84.170,58935.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.571927,13.661284,tcp,147.32.84.170,51680.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.572033,13.660704,tcp,147.32.84.170,51681.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.767738,0.000306,udp,147.32.84.170,41008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.770042,0.000333,udp,147.32.84.170,54862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.770046,0.000466,udp,147.32.84.170,53834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:42.770434,0.000194,udp,147.32.84.170,47353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,75,134,104.5,0.3588516746411483,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:46.669140,0.00044,udp,147.32.84.170,37609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:46.671138,0.018235,tcp,147.32.84.170,51902.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:51.414850,3009.501709,udp,160.44.239.12,48893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1614,1182,432,134.5,0.7323420074349443,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:30:56.669613,0.000424,udp,147.32.84.170,34791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:56.670647,0.000235,udp,147.32.84.170,43103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:30:58.279635,0.000588,udp,94.231.114.28,64898.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:00.836736,0.053593,tcp,147.32.86.178,1273.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,13,5032,1949,3083,387.0769230769231,0.38732114467408585,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:31:03.644986,1.591084,tcp,147.32.86.178,1295.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,218,206699,5430,201269,948.1605504587156,0.026270083551444372,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:31:06.618289,0.000514,udp,147.32.84.171,54698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:06.625555,18.762703,tcp,147.32.84.59,4954.0,->,74.125.232.217,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:31:06.671633,0.000476,udp,147.32.84.170,36984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:06.672864,0.019808,tcp,147.32.84.170,53795.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:07.500653,0.000228,udp,147.32.84.138,58059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:08.775386,0.000231,udp,147.32.84.138,41536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:08.827808,0.120619,udp,147.32.84.229,13363.0,<->,208.88.187.90,33033.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:09.963478,0.000242,udp,147.32.84.138,45714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:11.018746,0.000271,udp,147.32.84.170,37866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:12.429521,0.000382,udp,147.32.84.138,40108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:13.096461,61.293446,tcp,147.32.84.165,3299.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:31:16.671382,0.000349,udp,147.32.84.170,36291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:16.673496,0.018095,tcp,147.32.84.170,44110.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:20.587657,0.000301,udp,147.32.84.164,46675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:21.003123,0.127303,tcp,147.32.84.59,52292.0,->,91.209.196.169,80.0,FSPA_FSPA,0.0,0.0,10,1658,533,1125,165.8,0.32147165259348615,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:31:26.670828,0.000387,udp,147.32.84.170,45218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:26.925232,9.309536,tcp,147.32.84.170,58954.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1570,948,622,142.72727272727272,0.6038216560509554,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:27.066084,0.000323,udp,147.32.84.170,52718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:27.066857,0.018247,udp,147.32.84.170,54144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:27.242305,0.000207,udp,147.32.84.170,54514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:27.912697,0.000276,udp,147.32.84.138,59896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:28.059386,0.00033,udp,147.32.84.164,59922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.059925,0.000886,udp,147.32.84.164,50181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.060993,0.000514,udp,147.32.84.164,48690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.061169,254.424881,tcp,147.32.84.164,53018.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,126,90720,13517,77203,720.0,0.14899691358024691,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.061463,14.423862,tcp,147.32.84.164,37868.0,->,209.85.149.132,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.061995,14.407058,tcp,147.32.84.164,37284.0,->,74.125.232.207,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.062120,0.019694,udp,147.32.84.164,43237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,74,485,279.5,0.13237924865831843,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.062127,254.42366,tcp,147.32.84.164,36346.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,82,29215,24168,5047,356.280487804878,0.8272462775971248,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.062191,264.424011,tcp,147.32.84.164,36347.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,77,26890,22190,4700,349.2207792207792,0.8252138341390851,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.069782,0.020217,udp,147.32.84.164,35173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,570,74,496,285.0,0.12982456140350876,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082303,264.404236,tcp,147.32.84.164,34937.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,82,41766,15468,26298,509.3414634146341,0.370349087774745,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082312,254.403854,tcp,147.32.84.164,34939.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,59,32305,8086,24219,547.542372881356,0.25030181086519115,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082415,254.403717,tcp,147.32.84.164,34940.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,115,70526,20396,50130,613.2695652173913,0.2891983098431784,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082525,14.387023,tcp,147.32.84.164,34944.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082695,14.387008,tcp,147.32.84.164,34949.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082853,14.386258,tcp,147.32.84.164,57773.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.082860,244.401886,tcp,147.32.84.164,57774.0,->,74.125.232.223,80.0,FSPA_FSPA,0.0,0.0,36,13218,2630,10588,367.1666666666667,0.19897110001513088,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.090465,254.395584,tcp,147.32.84.164,53061.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,80,48481,5251,43230,606.0125,0.10831047214372641,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.090742,14.386177,tcp,147.32.84.164,53068.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.736126,0.00035,udp,147.32.84.164,51043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.736795,0.000523,udp,147.32.84.164,49373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.737233,0.028077,udp,147.32.84.229,13363.0,<->,83.87.249.19,62515.0,CON,0.0,0.0,2,563,77,486,281.5,0.13676731793960922,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:28.737858,0.000475,udp,147.32.84.164,44429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.738340,0.000402,udp,147.32.84.164,49399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.739136,0.246606,udp,147.32.84.164,41308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.739505,0.00063,udp,147.32.84.164,36467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.742513,0.000371,udp,147.32.84.164,51728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.764950,0.000528,udp,147.32.84.164,45440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,337,77,260,168.5,0.228486646884273,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:28.985991,0.251158,udp,147.32.84.164,59613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:29.486074,0.248187,udp,147.32.84.164,51476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:29.846946,3184.302979,udp,219.99.106.22,34191.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1353,448,905,112.75,0.3311160384331116,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:31.114955,0.074331,tcp,147.32.86.17,3495.0,->,95.172.94.29,80.0,FSPA_FSPA,0.0,0.0,8,1413,952,461,176.625,0.6737438075017693,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:31:31.310133,14.925915,tcp,147.32.84.170,58957.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.310569,14.925644,tcp,147.32.84.170,51704.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.310810,14.9254,tcp,147.32.84.170,41081.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.310935,14.92568,tcp,147.32.84.170,41083.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.312452,0.000172,udp,147.32.84.170,51191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.514455,0.000491,udp,147.32.84.170,52450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.517764,0.000483,udp,147.32.84.170,58054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.675791,0.000345,udp,147.32.84.170,34136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.676459,0.000375,udp,147.32.84.170,34981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.680704,0.000247,udp,147.32.84.170,45919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,82,172,127.0,0.3228346456692913,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.681721,0.001928,udp,147.32.84.170,43256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,73,200,136.5,0.2673992673992674,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:31.684079,0.001937,udp,147.32.84.170,38179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,457,73,384,228.5,0.15973741794310722,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:32.014380,34.059929,udp,114.174.50.163,36922.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,915,143,772,228.75,0.15628415300546447,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:32.825512,50.17762,udp,213.61.241.82,31693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1283,1161,122,160.375,0.9049103663289166,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:35.164760,0.000207,udp,147.32.84.138,53000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:36.355373,0.00023,udp,147.32.84.138,49272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:36.671208,0.000356,udp,147.32.84.170,49914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:36.746063,0.001944,udp,188.230.39.98,53047.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,489,60,274.5,0.8907103825136612,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:36.959316,0.000382,udp,147.32.84.170,38190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:37.078907,0.002818,udp,147.32.84.170,52752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:37.084869,0.00033,udp,147.32.84.170,51911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,87,192,139.5,0.3118279569892473,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:37.086726,0.000281,udp,147.32.84.170,55492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:37.087487,0.021937,udp,147.32.84.170,53769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,75,175,125.0,0.3,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:41.020544,0.000212,udp,147.32.84.170,37017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:42.494001,0.000293,udp,147.32.84.138,34589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:42.606758,17.022268,tcp,147.32.80.13,18984.0,->,147.32.84.4,80.0,FSPA_FSPA,0.0,0.0,167,121472,17943,103529,727.377245508982,0.14771305321390937,16,1,flow=From-Background-CVUT-Proxy,Background,-1 2011-08-16 16:31:46.265278,0.000469,udp,147.32.84.170,39772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:48.623159,87.350739,tcp,147.32.85.114,50255.0,->,81.95.96.148,80.0,SRPA_FSPA,0.0,0.0,2578,3232161,78975,3153186,1253.7474786656323,0.02443411698860298,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:31:49.236162,36.982056,tcp,147.32.84.123,57079.0,->,80.239.149.24,80.0,FSPA_FSRPA,0.0,0.0,13,3740,1052,2688,287.6923076923077,0.2812834224598931,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:31:51.851871,0.000306,udp,147.32.84.170,41992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:52.027363,0.04929,udp,147.32.84.123,55121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,463,71,392,231.5,0.15334773218142547,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:52.826678,0.000298,udp,147.32.84.138,58706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:52.922998,0.00052,udp,147.32.86.20,65131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,85,293,189.0,0.22486772486772486,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:53.275372,0.528096,tcp,147.32.86.178,1339.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,10,1423,831,592,142.3,0.583977512297962,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:31:53.770622,0.230733,udp,147.32.84.164,50750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,72,163,117.5,0.30638297872340425,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:53.880457,0.00036,udp,147.32.84.164,53070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:53.880962,0.109606,udp,147.32.84.164,35782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,70,168,119.0,0.29411764705882354,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:53.980950,0.128159,tcp,147.32.84.164,43814.0,->,91.213.146.11,80.0,FSPA_FSPA,0.0,0.0,9,1870,1218,652,207.77777777777777,0.651336898395722,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:54.001721,0.223749,udp,147.32.84.164,40744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:31:55.680531,0.000498,udp,213.89.236.199,18882.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:31:56.671699,0.01836,tcp,147.32.84.170,37772.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:31:57.797481,0.170611,tcp,147.32.86.20,4982.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,65,59290,1453,57837,912.1538461538462,0.02450666216899983,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:31:58.693659,0.00031,udp,147.32.84.138,36613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:31:59.574088,57.971703,tcp,147.32.84.59,52394.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,23,4829,3442,1387,209.95652173913044,0.7127769724580658,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:31:59.911686,3475.185791,udp,147.32.84.94,7103.0,<->,46.4.101.71,51012.0,CON,0.0,0.0,797,697083,12597,684486,874.633626097867,0.018071018802638998,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:01.045384,0.000289,udp,147.32.85.34,57206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:01.091647,0.000376,udp,147.32.85.34,50908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:01.594711,0.000474,udp,147.32.85.34,59659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:02.331551,59.380177,udp,147.32.84.229,13363.0,->,193.106.200.150,50906.0,INT,0.0,,6,450,450,0,75.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:32:05.274179,8.756965,tcp,147.32.84.170,58984.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.274826,10.963409,tcp,147.32.84.170,51733.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.275128,30.965683,tcp,147.32.84.170,33892.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,25,17553,1041,16512,702.12,0.059306101521107504,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.276737,0.000148,udp,147.32.84.170,48512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.458602,0.000207,udp,147.32.84.170,40432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.458732,0.000216,udp,147.32.84.170,54133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.459252,0.000434,udp,147.32.84.170,52171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.460239,0.000331,udp,147.32.84.170,55295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.460485,0.000281,udp,147.32.84.170,47908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.460922,0.000326,udp,147.32.84.170,56096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.461133,0.000724,udp,147.32.84.170,51323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.463145,0.000393,udp,147.32.84.170,52161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.463546,0.000257,udp,147.32.84.170,41616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.464215,0.000571,udp,147.32.84.170,41629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.466136,0.000244,udp,147.32.84.170,43505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.618028,0.000203,udp,147.32.84.170,34632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.618671,0.000366,udp,147.32.84.170,52032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.618678,0.000366,udp,147.32.84.170,56125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,82,146,114.0,0.35964912280701755,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.619623,0.000265,udp,147.32.84.170,45657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,82,165,123.5,0.3319838056680162,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.620072,0.000281,udp,147.32.84.170,57127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,75,133,104.0,0.3605769230769231,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.620770,0.00031,udp,147.32.84.170,36086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.623168,0.000332,udp,147.32.84.170,35075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:05.623187,0.000436,udp,147.32.84.170,41418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,79,126,102.5,0.3853658536585366,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:06.421408,0.193541,tcp,147.32.86.17,3591.0,->,217.163.21.37,80.0,FSPA_FSPA,0.0,0.0,15,7658,2497,5161,510.53333333333336,0.32606424653956645,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:32:06.597349,74.475204,tcp,147.32.86.17,3593.0,->,195.113.232.82,80.0,SRPA_SPA,0.0,0.0,22,13890,2435,11455,631.3636363636364,0.17530597552195826,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:32:06.672492,0.018192,tcp,147.32.84.170,59663.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:12.018860,0.000412,udp,147.32.84.170,46090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:12.021114,0.272218,tcp,147.32.84.170,37945.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:13.429529,0.083554,udp,147.32.84.229,13363.0,<->,109.121.249.127,16274.0,CON,0.0,0.0,4,3004,60,2944,751.0,0.019973368841544607,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:13.964967,61.282059,tcp,147.32.84.165,3300.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:32:14.164916,0.000234,udp,147.32.84.170,52321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:20.525286,5.380371,tcp,147.32.86.17,3653.0,->,67.202.66.172,80.0,FSPA_FSPA,0.0,0.0,10,1355,928,427,135.5,0.6848708487084871,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:32:21.054203,815.721313,udp,192.108.76.176,20977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1287,925,362,128.7,0.7187257187257188,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:24.711371,0.000579,udp,147.32.86.168,37563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,82,169,125.5,0.32669322709163345,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:26.474239,949.732422,udp,147.32.84.229,13363.0,<->,119.42.117.137,15523.0,CON,0.0,0.0,6,426,246,180,71.0,0.5774647887323944,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:28.488005,0.541473,udp,192.168.88.79,56308.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:32:28.627483,0.001656,udp,173.61.122.118,19029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:30.539770,0.00083,udp,91.64.88.198,9622.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:33.033536,18.408117,tcp,147.32.84.189,58596.0,->,74.125.232.195,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=Background-google-analytics4,Background,-1 2011-08-16 16:32:33.107216,0.000602,udp,120.138.88.22,11561.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:33.721547,0.000553,udp,77.161.59.243,63359.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:39.434354,1408.559448,udp,147.32.84.94,7103.0,->,78.86.229.56,7553.0,INT,0.0,,8,672,672,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:32:39.477929,0.189012,tcp,147.32.86.53,39797.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,22,5221,2094,3127,237.3181818181818,0.4010725914575752,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:32:39.755690,0.000166,udp,147.32.85.25,46659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:43.021384,0.000245,udp,147.32.84.170,57402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:43.140395,0.185389,udp,147.32.84.229,13363.0,<->,24.85.76.158,65392.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:43.773226,0.002177,udp,147.32.86.168,44967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,71,182,126.5,0.28063241106719367,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:44.747446,0.000628,udp,213.61.241.82,35631.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,257,195,62,128.5,0.7587548638132295,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:46.673184,0.01832,tcp,147.32.84.170,51958.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:47.140125,0.000667,udp,71.202.25.46,65143.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,592,75,517,296.0,0.1266891891891892,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:47.687715,0.001683,udp,121.44.253.47,57536.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:51.197268,82.859543,tcp,147.32.86.17,3699.0,->,74.125.232.192,80.0,SRPA_SPA,0.0,0.0,20,9582,3455,6127,479.1,0.36057190565643915,16,1,flow=Background-google-analytics1,Background,-1 2011-08-16 16:32:51.512310,0.000384,udp,147.32.86.15,57258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:53.342460,319.975708,tcp,147.32.86.17,3770.0,->,209.85.148.103,80.0,SRPA_SPA,0.0,0.0,82,48674,23515,25159,593.5853658536586,0.48311213378805934,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:32:53.524532,0.000285,udp,147.32.84.189,34839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:32:53.669107,0.046196,udp,147.32.84.229,13363.0,<->,149.5.45.8,43015.0,CON,0.0,0.0,2,256,193,63,128.0,0.75390625,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:53.669219,0.071366,udp,147.32.84.229,13363.0,<->,151.67.188.212,41324.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:55.944054,2217.233154,udp,147.32.84.229,13363.0,<->,76.110.190.34,48924.0,CON,0.0,0.0,6,3168,3047,121,528.0,0.9618055555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:32:56.547710,0.000341,udp,147.32.84.164,33189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:32:56.671790,0.000431,udp,147.32.84.170,33445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:32:56.672951,0.018747,tcp,147.32.84.170,53850.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:02.320418,129.48436,tcp,147.32.84.164,41976.0,->,212.23.170.40,80.0,SPA_SRPA,0.0,0.0,11,2151,1121,1030,195.54545454545453,0.5211529521152952,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:33:02.346981,0.000209,udp,147.32.84.164,46926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,74,126,100.0,0.37,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:33:05.355687,62.804012,tcp,88.255.149.67,37926.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,27,6558,2092,4466,242.88888888888889,0.31899969502897224,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:33:06.672605,0.018569,tcp,147.32.84.170,41237.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:13.064019,0.308138,tcp,147.32.84.170,50979.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:13.127759,0.159743,tcp,147.32.84.164,43820.0,->,91.213.146.11,80.0,FSPA_FSPA,0.0,0.0,10,1630,978,652,163.0,0.6,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:33:13.648606,0.231386,tcp,147.32.84.170,43763.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:14.021827,0.231788,tcp,147.32.84.170,37959.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:14.822140,61.281769,tcp,147.32.84.165,3301.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:33:16.351228,2444.351074,udp,41.143.28.231,48967.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:33:16.672155,0.018041,tcp,147.32.84.170,37804.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:19.612186,0.017065,udp,147.32.84.59,59611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:33:23.434753,3356.885742,udp,99.112.28.139,30811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:33:26.670562,0.000409,udp,147.32.84.170,45639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:31.557272,0.000269,udp,147.32.84.138,33769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:33:32.586204,0.000261,udp,147.32.84.59,46581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:33:34.169059,0.000539,udp,147.32.84.59,55495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:33:35.017865,0.000166,udp,147.32.84.138,42434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:33:36.671653,0.000312,udp,147.32.84.170,42617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:36.672773,0.018207,tcp,147.32.84.170,59681.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:37.121399,1216.802612,udp,82.1.86.204,48396.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,494,370,124,123.5,0.7489878542510121,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:33:37.533378,31.432524,tcp,147.32.84.59,55425.0,->,204.154.94.81,443.0,FSPA_FSPA,0.0,0.0,40,8081,2950,5131,202.025,0.3650538299715382,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:33:40.860943,0.000669,udp,193.190.63.129,35020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:33:45.023932,0.238644,tcp,147.32.84.170,37963.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:46.670855,0.000397,udp,147.32.84.170,41481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:50.197652,3593.132812,udp,147.32.85.63,123.0,<->,193.85.174.5,123.0,CON,0.0,0.0,30,2700,1350,1350,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:33:56.669702,0.000429,udp,147.32.84.170,33538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:56.671818,0.017896,tcp,147.32.84.170,37809.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:33:59.135559,0.000148,udp,147.32.84.138,40847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:00.439618,0.000283,udp,147.32.85.34,54331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:03.184716,0.000183,udp,147.32.85.25,37451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:06.671713,0.000367,udp,147.32.84.170,52952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:10.505716,0.000259,udp,147.32.84.138,49919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:11.269105,80.387756,udp,192.168.88.79,65068.0,->,192.168.95.255,137.0,INT,0.0,,4,368,368,0,92.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:34:14.369844,1.714797,tcp,49.134.169.200,55547.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,13,1133,659,474,87.15384615384616,0.5816416593115622,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:14.392184,0.000758,udp,91.149.133.122,15324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,595,74,521,297.5,0.12436974789915967,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:15.679046,61.298454,tcp,147.32.84.165,3302.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:34:15.683614,0.000267,udp,147.32.84.170,43559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:16.025905,0.218719,tcp,147.32.84.170,37968.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:16.670495,0.000349,udp,147.32.84.170,33741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:17.884259,0.000303,udp,147.32.84.170,44556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,70,198,134.0,0.26119402985074625,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:18.437881,0.000379,udp,147.32.84.170,49626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,75,240,157.5,0.23809523809523808,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:21.196060,8.981919,tcp,197.30.20.28,62082.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,4,264,66,198,66.0,0.25,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:23.403984,2068.103271,udp,94.33.17.25,46926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:26.670519,0.000385,udp,147.32.84.170,60784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:26.672387,0.018769,tcp,147.32.84.170,37814.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:29.938105,0.0007,udp,46.70.218.66,11323.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:31.563277,0.000349,udp,147.32.84.170,51356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.564162,5.963776,tcp,147.32.84.170,59024.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1631,1003,628,148.27272727272728,0.6149601471489884,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.564392,5.963805,tcp,147.32.84.170,59026.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,46,43676,2514,41162,949.4782608695652,0.05756021613700888,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.818398,0.000243,udp,147.32.84.170,53500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.819107,0.000489,udp,147.32.84.170,33472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.820024,0.000373,udp,147.32.84.170,40506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,81,259,170.0,0.23823529411764705,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.822086,0.000321,udp,147.32.84.170,55237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.822710,0.000449,udp,147.32.84.170,60276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.823897,0.000247,udp,147.32.84.170,40513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.824056,0.000291,udp,147.32.84.170,48442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.824466,0.000429,udp,147.32.84.170,41623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.824989,0.000322,udp,147.32.84.170,56414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.825829,0.000295,udp,147.32.84.170,38966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.826511,0.00045,udp,147.32.84.170,55920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.826657,0.000387,udp,147.32.84.170,55607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.828924,0.000314,udp,147.32.84.170,59558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.830902,0.000238,udp,147.32.84.170,33146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.831968,0.000432,udp,147.32.84.170,33673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.832408,0.000407,udp,147.32.84.170,60103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.833658,0.000432,udp,147.32.84.170,42906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.834494,0.000333,udp,147.32.84.170,48928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.835289,0.000218,udp,147.32.84.170,48336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.835863,0.000328,udp,147.32.84.170,56872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.837275,0.000366,udp,147.32.84.170,51023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.838526,0.000327,udp,147.32.84.170,38341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.838687,0.000309,udp,147.32.84.170,39328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.839652,0.000775,udp,147.32.84.170,44070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,77,249,163.0,0.2361963190184049,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:31.840105,0.000413,udp,147.32.84.170,56999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:33.802522,0.153984,tcp,147.32.86.20,1117.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,60,55008,1331,53677,916.8,0.02419648051192554,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:34.899265,16.538818,tcp,147.32.84.189,37278.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:35.597968,0.040883,tcp,147.32.86.15,2395.0,->,82.99.173.173,80.0,FSPA_FSPA,0.0,0.0,12,4476,1139,3337,373.0,0.25446827524575516,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:36.958418,787.576233,udp,95.25.213.89,31799.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,839,641,198,139.83333333333334,0.7640047675804529,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:39.058596,0.000281,udp,147.32.84.138,55556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:39.950404,0.179598,udp,147.32.84.59,59618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,564,82,482,282.0,0.1453900709219858,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:40.856196,0.214781,tcp,147.32.84.59,53636.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1575,695,880,196.875,0.44126984126984126,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:34:41.511940,64.359024,tcp,147.32.86.15,2469.0,->,74.125.232.205,443.0,SRPA_SPA,0.0,0.0,18,7536,1271,6265,418.6666666666667,0.16865711252653928,16,1,flow=Background-google-analytics14,Background,-1 2011-08-16 16:34:41.780135,162.642075,tcp,147.32.86.111,33775.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,16,5285,3947,1338,330.3125,0.7468306527909176,16,1,flow=Background-google-analytics13,Background,-1 2011-08-16 16:34:46.669384,0.000433,udp,147.32.84.170,37217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:46.671558,0.018252,tcp,147.32.84.170,53880.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:51.325925,0.007295,udp,147.32.84.189,57338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,74,206,140.0,0.2642857142857143,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:51.558012,17.169514,tcp,147.32.84.59,54754.0,->,92.123.64.195,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:34:53.322925,0.000219,udp,147.32.84.138,46960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:54.721600,0.000625,udp,78.157.72.149,46863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:56.681109,0.01866,tcp,147.32.84.170,51991.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:34:57.486599,0.000289,udp,147.32.86.15,52540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,70,162,116.0,0.3017241379310345,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:58.006625,0.000405,udp,147.32.84.138,44669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:34:58.793087,21.256481,tcp,147.32.86.15,2630.0,->,95.168.214.77,80.0,FSPA_FSPA,0.0,0.0,14,4772,1668,3104,340.85714285714283,0.3495389773679799,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:34:59.428902,0.36616,udp,147.32.84.229,13363.0,<->,111.254.3.215,27255.0,CON,0.0,0.0,4,2997,60,2937,749.25,0.02002002002002002,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:34:59.453873,0.001066,udp,213.106.156.237,25675.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,2114,187,1927,704.6666666666666,0.08845789971617786,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:01.651769,1385.746094,udp,129.24.51.42,36821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,849,364,485,84.9,0.4287396937573616,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:06.669533,0.000617,udp,147.32.84.170,52951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:12.708907,0.030213,tcp,85.132.143.37,1932.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,9,698,402,296,77.55555555555556,0.5759312320916905,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:35:14.228679,23.304171,tcp,147.32.84.170,41153.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,31,19978,1866,18112,644.4516129032259,0.09340274301731905,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:14.319962,23.21279,tcp,147.32.84.170,33939.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,26,17232,1245,15987,662.7692307692307,0.07224930362116992,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:14.330796,0.000315,udp,147.32.84.170,43180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,82,187,134.5,0.3048327137546468,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:14.400900,0.137954,udp,147.32.84.170,58643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:14.679922,0.138012,udp,147.32.84.170,37469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,72,139,105.5,0.3412322274881517,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:16.547238,61.301899,tcp,147.32.84.165,3303.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:35:22.809103,0.000283,udp,147.32.84.138,51065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:28.574453,0.000367,udp,147.32.84.25,53377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:29.011692,2550.030518,udp,65.60.253.2,5876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,6058,120,5938,757.25,0.019808517662594914,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:30.818660,0.000701,udp,202.92.125.132,26738.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:31.843254,1004.689453,udp,147.32.84.94,7103.0,<->,81.14.227.249,37118.0,CON,0.0,0.0,137,111380,109328,2052,812.992700729927,0.9815765846651104,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:32.403948,609.939941,udp,94.167.216.113,56132.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,505,381,124,126.25,0.7544554455445545,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:36.557116,0.001374,udp,111.240.135.25,6895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,1990,182,1808,663.3333333333334,0.0914572864321608,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:36.669373,0.000344,udp,147.32.84.164,51339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:36.672059,0.018401,tcp,147.32.84.170,43717.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:37.629913,0.267367,udp,147.32.86.147,56244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:37.729442,0.000441,udp,147.32.86.147,37626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:41.099147,0.00022,udp,147.32.84.164,60834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,105,191,148.0,0.3547297297297297,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:41.100612,240.115753,tcp,147.32.84.164,42850.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,42,14832,2233,12599,353.14285714285717,0.15055285868392665,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:41.451903,0.011,udp,147.32.84.164,34068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:43.498883,3253.468994,udp,86.32.112.13,59057.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1645,1211,434,117.5,0.7361702127659574,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:43.596010,0.000286,udp,147.32.84.170,57442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:44.712776,247.788116,tcp,147.32.84.164,54935.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,55,23841,6949,16892,433.4727272727273,0.29147267312612724,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.909525,0.000349,udp,147.32.84.164,55922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.910112,0.000273,udp,147.32.84.164,57089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.910661,0.000352,udp,147.32.84.164,33563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.911308,0.000116,udp,147.32.84.164,59869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.911596,0.000436,udp,147.32.84.164,47246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.912809,0.000298,udp,147.32.84.164,52096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.913024,0.00051,udp,147.32.84.164,43441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.913270,0.000424,udp,147.32.84.164,43352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,578,80,498,289.0,0.1384083044982699,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.914026,0.000204,udp,147.32.84.164,56000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.914356,0.000493,udp,147.32.84.164,48148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:44.914580,0.000435,udp,147.32.84.164,56614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:35:46.369903,0.000116,udp,147.32.84.138,59612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:46.673106,0.017996,tcp,147.32.84.170,43718.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:48.019861,0.234008,tcp,147.32.84.170,42509.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:35:48.296442,0.000766,udp,79.25.210.121,7262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:49.127300,19.524963,tcp,118.22.138.242,49935.0,->,147.32.84.188,80.0,SRPA_FSPA,0.0,0.0,15,5767,1469,4298,384.46666666666664,0.25472516039535287,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:35:52.045411,0.120511,udp,147.32.84.229,13363.0,<->,2.133.128.17,5366.0,CON,0.0,0.0,2,161,101,60,80.5,0.6273291925465838,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:55.872970,0.000858,udp,64.13.161.119,33086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,600,78,522,300.0,0.13,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:57.493639,0.000317,udp,147.32.86.20,65502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:35:57.753739,15.000948,tcp,147.32.86.89,3342.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,1563,1051,512,142.0909090909091,0.672424824056302,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:35:58.372745,4.723569,tcp,147.32.85.113,35808.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,22,5097,2144,2953,231.6818181818182,0.4206395919168138,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:35:58.721909,1.164989,udp,59.162.110.74,60382.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,260,188,72,130.0,0.7230769230769231,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:35:59.937629,0.142309,udp,147.32.84.229,13363.0,<->,24.14.188.119,60927.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:01.562501,29.407974,udp,126.131.61.56,34243.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1013,640,373,168.83333333333334,0.631786771964462,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:02.437883,0.003554,udp,147.32.85.114,55295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,77,178,127.5,0.30196078431372547,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:02.533331,0.001693,udp,147.32.85.114,53322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,80,146,113.0,0.35398230088495575,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:06.677555,0.000473,udp,147.32.84.170,42967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:09.785755,0.000185,udp,147.32.84.138,54897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:14.180363,0.004183,udp,147.32.85.114,63558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,75,193,134.0,0.2798507462686567,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:14.602162,0.063543,udp,147.32.84.59,28902.0,<->,95.87.48.30,16875.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:36:14.831932,0.000603,udp,149.5.45.251,43039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,86,60,73.0,0.589041095890411,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:15.790480,0.140476,udp,62.44.135.31,44612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,283,163,120,70.75,0.5759717314487632,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:16.671943,0.000365,udp,147.32.84.170,33683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:17.418335,61.296185,tcp,147.32.84.165,3304.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:36:19.025130,0.261707,tcp,147.32.84.170,42513.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:24.764953,3057.084473,udp,212.117.3.22,9106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:26.671322,0.00039,udp,147.32.84.170,44415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:30.602991,0.000317,udp,147.32.84.59,50643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:34.711036,3011.251953,udp,213.146.167.16,14479.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:36.673092,0.018008,tcp,147.32.84.170,43725.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:46.672523,0.018126,tcp,147.32.84.170,55399.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:46.907462,0.190932,tcp,147.32.84.59,1240.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,19,11346,1201,10145,597.1578947368421,0.10585228274281686,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:36:49.426682,0.000139,udp,147.32.84.138,60941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:50.022146,0.000409,udp,147.32.84.170,37777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:50.023483,0.216201,tcp,147.32.84.170,42517.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:53.783273,3016.905273,udp,147.32.84.229,13363.0,<->,91.224.252.149,18824.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:36:56.670580,0.000513,udp,147.32.84.170,50533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:56.672605,0.018043,tcp,147.32.84.170,54270.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:36:57.709496,0.000173,udp,147.32.87.34,36910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,88,140,114.0,0.38596491228070173,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:36:59.898389,0.126435,tcp,147.32.86.178,1527.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,10,3066,1546,1520,306.6,0.5042400521852577,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:37:05.912981,0.00024,udp,147.32.84.138,33944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:07.083884,0.228612,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,73,165,119.0,0.3067226890756303,16,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 16:37:07.382516,0.424101,tcp,147.32.84.165,3305.0,->,137.254.16.78,80.0,SRPA_SPA,0.0,0.0,6,888,579,309,148.0,0.652027027027027,16,1,flow=From-Botnet-V49-TCP-WEB-Established,Botnet,1 2011-08-16 16:37:10.509847,0.000284,udp,147.32.84.138,43821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:11.041790,6.42824,tcp,66.249.72.50,63548.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18192,1915,16277,586.8387096774194,0.1052660510114336,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:37:15.564739,0.043239,udp,147.32.84.229,13363.0,<->,77.222.237.21,57732.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:37:16.671644,0.000436,udp,147.32.84.170,43735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:18.284734,61.282837,tcp,147.32.84.165,3306.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:37:19.366975,0.000334,udp,147.32.84.138,57340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:20.019502,0.000331,udp,147.32.84.170,37463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:25.498666,2816.079346,udp,212.5.157.106,37469.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:37:26.670793,0.00035,udp,147.32.84.170,37960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:26.671733,0.000389,udp,147.32.84.170,34157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:26.672922,0.018062,tcp,147.32.84.170,52955.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:28.007020,0.000793,udp,77.29.151.17,59791.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:37:32.401614,0.152932,udp,147.32.84.229,13363.0,<->,97.82.186.0,16724.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:37:32.815006,0.232249,udp,147.32.84.59,62189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,75,494,284.5,0.13181019332161686,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:33.770912,209.7173,tcp,188.54.20.31,1809.0,->,147.32.84.229,443.0,SPA_SPA,0.0,0.0,147,39815,26829,12986,270.8503401360544,0.6738415170161999,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:37:33.997853,0.000357,udp,147.32.84.164,45168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:37:34.013854,0.000333,udp,147.32.84.164,60917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:37:35.331627,0.000216,udp,147.32.84.138,56136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:35.356177,81.546768,tcp,147.32.84.59,47586.0,->,188.40.97.5,38088.0,SRPA_SPA,0.0,0.0,8159,8224971,8041403,183568,1008.0856722637578,0.977681623436727,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:37:36.414307,0.000422,udp,147.32.84.164,44182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,80,493,286.5,0.13961605584642234,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:37:42.651073,0.000403,udp,147.32.84.59,62330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,89,271,180.0,0.24722222222222223,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:46.670159,0.000408,udp,147.32.84.170,35337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:46.671238,0.000338,udp,147.32.84.170,38796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:47.518976,46.510517,tcp,178.241.12.24,54467.0,,147.32.84.229,13363.0,FRPA_FPA,0.0,0.0,38,5088,3144,1944,133.89473684210526,0.6179245283018868,16,0,flow=Background,Background,-1 2011-08-16 16:37:47.910355,0.15926,udp,147.32.84.59,17349.0,<->,24.29.246.36,17998.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:37:50.021534,0.000253,udp,147.32.84.170,36496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:50.022308,0.000259,udp,147.32.84.170,54236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:53.987896,0.000385,udp,147.32.85.25,40829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:37:56.671430,0.000328,udp,147.32.84.170,47452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:37:58.222889,0.000648,udp,81.84.240.38,30657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,266,181,85,133.0,0.6804511278195489,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:00.895838,0.000201,udp,147.32.85.34,52807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:00.904320,0.000519,udp,147.32.85.34,57703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:06.671122,0.000284,udp,147.32.84.170,57159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:07.547544,0.00363,tcp,147.32.84.59,5123.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1908,1049,859,212.0,0.54979035639413,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:38:07.587965,0.0,udp,147.32.84.94,7103.0,->,80.254.183.9,62878.0,INT,0.0,,1,84,84,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:38:07.931472,1.316217,udp,147.32.84.94,7103.0,<->,82.68.247.6,7279.0,CON,0.0,0.0,3,696,636,60,232.0,0.9137931034482759,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:10.359636,0.000379,udp,147.32.84.170,51435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:10.360832,247.187363,tcp,147.32.84.170,38850.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,24,4991,3060,1931,207.95833333333334,0.6131035864556201,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:12.035688,0.000697,udp,178.222.175.55,22858.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,74,469,271.5,0.13627992633517497,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:13.068793,0.228081,tcp,147.32.84.170,51813.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:13.346609,0.261304,tcp,147.32.84.170,59580.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:13.517998,0.261996,tcp,147.32.84.170,51816.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:16.671728,0.018855,tcp,147.32.84.170,32792.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:19.142379,61.282314,tcp,147.32.84.165,3307.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:38:19.557482,2.433596,tcp,66.249.66.154,45459.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1168,707,461,116.8,0.6053082191780822,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:38:21.654924,2.34385,tcp,50.22.233.223,80.0,->,147.32.86.82,9895.0,SA_,0.0,,2,120,120,0,60.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:38:24.619221,0.000609,udp,213.221.220.127,23018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:25.825561,0.000193,udp,147.32.84.138,38560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:26.672435,0.018249,tcp,147.32.84.170,55421.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:32.827773,0.000272,udp,147.32.84.59,54232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:32.983431,0.014642,tcp,147.32.85.114,50506.0,->,77.78.99.21,80.0,FSRPA_FSPA,0.0,0.0,9,2176,1272,904,241.77777777777777,0.5845588235294118,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:38:35.087013,2.00981,udp,109.239.31.252,15283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,620,128,492,155.0,0.2064516129032258,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:36.672377,0.000501,udp,147.32.84.170,57095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:36.682194,0.000373,udp,147.32.84.138,36693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:38.319546,1604.075684,udp,88.134.132.14,65159.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:42.236689,0.006876,udp,147.32.85.114,50249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,74,217,145.5,0.2542955326460481,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:43.982961,1398.777466,udp,147.32.84.229,13363.0,<->,201.255.238.184,14992.0,CON,0.0,0.0,6,1190,1010,180,198.33333333333334,0.8487394957983193,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:46.671559,0.000363,udp,147.32.84.170,38723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:52.020923,0.000213,udp,147.32.84.170,35743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:52.153524,0.000797,udp,108.18.197.47,6151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:52.240076,0.00027,udp,147.32.84.138,44005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:55.240311,0.00027,udp,147.32.84.138,48604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:56.671423,0.000307,udp,147.32.84.170,39223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:56.672460,0.018435,tcp,147.32.84.170,55425.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:38:56.771280,0.00163,udp,69.207.93.87,34023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:38:58.183810,3559.144287,udp,147.32.87.4,1024.0,<->,147.32.80.9,123.0,CON,0.0,0.0,42,3780,1890,1890,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:38:58.744635,0.000226,udp,147.32.84.186,42338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:59.708023,0.000185,udp,147.32.84.59,54915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:38:59.978495,0.000816,udp,81.214.111.219,11262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:00.762421,0.03866,udp,147.32.84.59,65028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,70,130,100.0,0.35,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:01.124578,0.000311,udp,147.32.86.20,50499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:02.687420,0.00039,udp,147.32.84.138,39989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:05.187180,0.232711,tcp,147.32.86.20,1304.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,32715,1029,31686,817.875,0.03145346171480972,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:39:08.194524,0.331268,tcp,147.32.84.59,65188.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1540,699,841,171.11111111111111,0.4538961038961039,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:39:08.948538,1.498858,udp,147.32.87.11,137.0,->,147.32.87.63,137.0,INT,0.0,,3,276,276,0,92.0,1.0,16,1,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-16 16:39:13.391451,24.154839,tcp,147.32.84.170,47936.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,33,23111,1908,21203,700.3333333333334,0.0825580892215828,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.391928,0.000318,udp,147.32.84.170,46776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.392465,0.000249,udp,147.32.84.170,41110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.393549,14.152219,tcp,147.32.84.170,56811.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1669,1048,621,151.72727272727272,0.627920910724985,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.393613,14.151894,tcp,147.32.84.170,56812.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.393887,14.151963,tcp,147.32.84.170,56814.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.394013,24.15274,tcp,147.32.84.170,38001.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,23,12061,1750,10311,524.3913043478261,0.14509576320371445,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.613256,0.000228,udp,147.32.84.170,37484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.613590,0.00035,udp,147.32.84.170,52963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.614906,0.000219,udp,147.32.84.170,34638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.614956,0.000268,udp,147.32.84.170,40217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.616700,0.000335,udp,147.32.84.170,36967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.619402,0.00041,udp,147.32.84.170,42752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.620049,0.000438,udp,147.32.84.170,51564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.626287,0.000172,udp,147.32.84.170,60783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.628525,0.000268,udp,147.32.84.170,59791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.639046,0.000264,udp,147.32.84.170,60836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.650432,0.000288,udp,147.32.84.170,37597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,70,140,105.0,0.3333333333333333,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.702235,0.000654,udp,147.32.84.170,33063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.706427,0.001293,udp,147.32.84.170,37984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.710032,0.000538,udp,147.32.84.170,56876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.710974,0.000338,udp,147.32.84.170,59326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.711583,0.000425,udp,147.32.84.170,57692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.713408,0.000366,udp,147.32.84.170,54772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.715447,0.000363,udp,147.32.84.170,56040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,584,83,501,292.0,0.1421232876712329,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.756433,0.007345,udp,147.32.84.170,45729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:13.879568,0.180428,udp,147.32.84.170,43551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,71,164,117.5,0.3021276595744681,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:14.060440,0.047875,udp,147.32.84.170,32860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,71,202,136.5,0.2600732600732601,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:16.328105,7.723621,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,5,488,284,204,97.6,0.5819672131147541,16,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 16:39:19.999564,61.300373,tcp,147.32.84.165,3308.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:39:23.021722,0.000334,udp,147.32.84.170,34551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:23.773371,0.00026,udp,147.32.84.138,34010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:24.052475,1.950789,tcp,147.32.84.165,3309.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,904,461,443,100.44444444444444,0.5099557522123894,16,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 16:39:25.691320,0.000684,udp,84.228.170.174,1531.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,73,464,268.5,0.13594040968342644,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:26.672329,0.000441,udp,147.32.84.170,41423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:29.940294,0.000522,udp,113.90.93.19,9298.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:32.384330,70.330917,tcp,147.32.86.17,4091.0,->,80.87.128.34,80.0,FSPA_FSPA,0.0,0.0,281,288904,5890,283014,1028.1281138790036,0.0203873951208706,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:39:33.943362,0.000259,udp,147.32.84.138,53280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:34.127335,0.541794,tcp,147.32.84.59,35156.0,->,50.16.231.96,80.0,FSPA_FSPA,0.0,0.0,9,1563,994,569,173.66666666666666,0.635956493921945,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:39:34.854842,2893.72998,udp,78.90.254.95,35938.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,727,541,186,121.16666666666667,0.7441540577716643,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:35.653904,0.000224,udp,147.32.84.138,45343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:36.672587,0.000463,udp,147.32.84.170,54280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:36.946549,0.000155,udp,147.32.84.138,48705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:36.958452,0.000196,udp,147.32.84.138,37293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:37.038907,3016.980225,udp,24.222.244.211,56104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,3891,325,3566,389.1,0.0835260858391159,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:40.497778,0.000228,udp,147.32.84.138,44648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:43.321668,3055.27417,udp,82.246.18.233,12877.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1861,1482,379,155.08333333333334,0.7963460505104782,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:46.672124,0.000415,udp,147.32.84.170,54542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:47.312362,0.035592,udp,147.32.84.59,64808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:49.165490,0.246579,udp,147.32.84.134,54717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:39:54.293968,0.000294,udp,147.32.84.59,41110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:56.692624,0.000414,udp,147.32.84.170,45946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:39:57.592009,3074.38916,udp,147.32.84.229,13363.0,<->,84.52.37.248,63756.0,CON,0.0,0.0,6,406,198,208,67.66666666666667,0.4876847290640394,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:57.825160,0.000321,udp,147.32.84.59,50240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:39:57.902825,63.390774,udp,99.50.188.112,53620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,427,303,124,106.75,0.7096018735362998,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:39:58.325181,182.758179,udp,109.205.249.119,45058.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,42,6545,1344,5201,155.83333333333334,0.2053475935828877,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:00.703283,0.000208,udp,147.32.85.34,61384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:03.122238,250.035568,tcp,147.32.84.164,55176.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,135,86681,14624,72057,642.0814814814814,0.1687105594074826,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.122243,0.000217,udp,147.32.84.164,53206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.122246,20.01932,tcp,147.32.84.164,55177.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.122388,0.00027,udp,147.32.84.164,41223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.122791,0.000372,udp,147.32.84.164,48413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.311301,0.000141,udp,147.32.84.164,57615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.311305,0.000245,udp,147.32.84.164,40113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.311359,0.000433,udp,147.32.84.164,56145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,432,80,352,216.0,0.18518518518518517,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.314773,0.000449,udp,147.32.84.164,33684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.317269,0.000293,udp,147.32.84.164,55265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.317921,0.000422,udp,147.32.84.164,37106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:03.319451,0.000396,udp,147.32.84.164,54476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.055380,0.25876,udp,147.32.84.164,41581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.191764,0.146456,udp,147.32.84.164,34261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.192377,0.000307,udp,147.32.84.164,55160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,78,182,130.0,0.3,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.193284,0.005031,udp,147.32.84.164,32942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.198406,0.020475,udp,147.32.84.164,57104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.219039,0.002763,udp,147.32.84.164,37162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,75,170,122.5,0.30612244897959184,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.222254,0.007709,udp,147.32.84.164,35753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,71,134,102.5,0.3463414634146341,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.230324,0.000215,udp,147.32.84.164,48792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,71,134,102.5,0.3463414634146341,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.230836,0.005523,udp,147.32.84.164,59625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,71,187,129.0,0.2751937984496124,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.237679,0.000328,udp,147.32.84.164,55765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.245131,0.044757,udp,147.32.84.164,35638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,83,177,130.0,0.3192307692307692,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.292946,0.155346,udp,147.32.84.164,49346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,72,227,149.5,0.2408026755852843,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.315499,0.000234,udp,147.32.84.164,59193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,75,153,114.0,0.32894736842105265,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.324409,0.005269,udp,147.32.84.164,37332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,75,218,146.5,0.25597269624573377,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.339167,0.121212,udp,147.32.84.164,48396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,74,173,123.5,0.29959514170040485,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.624250,248.532898,tcp,147.32.84.164,39331.0,->,74.125.232.212,80.0,FSPA_FSRPA,0.0,0.0,23,3436,1282,2154,149.3913043478261,0.3731082654249127,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.643354,0.000856,udp,147.32.84.164,37241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.644396,0.000403,udp,147.32.84.164,41065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.651010,0.004623,udp,147.32.84.164,48335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,84,160,122.0,0.3442622950819672,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.655704,0.002367,udp,147.32.84.164,57523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,85,143,114.0,0.37280701754385964,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.658618,0.022673,udp,147.32.84.164,47416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,84,167,125.5,0.3346613545816733,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.678092,0.000417,udp,147.32.84.164,48875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,83,183,133.0,0.31203007518796994,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.681598,0.002252,udp,147.32.84.164,39346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,84,191,137.5,0.3054545454545455,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:04.683713,0.00499,udp,147.32.84.164,50953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,75,180,127.5,0.29411764705882354,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:05.096488,248.060318,tcp,147.32.84.164,56865.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,27,5686,3728,1958,210.59259259259258,0.655645444952515,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:07.012582,0.001495,udp,59.121.194.6,18883.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:07.689366,0.282444,udp,147.32.84.164,35357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:07.691505,0.005639,udp,147.32.84.164,50428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,70,135,102.5,0.34146341463414637,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:07.736970,0.006829,udp,147.32.84.164,34966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,73,167,120.0,0.30416666666666664,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:07.759905,0.001678,udp,147.32.84.164,34729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,75,173,124.0,0.3024193548387097,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.036849,0.000326,udp,147.32.84.164,39341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.036928,14.104238,tcp,147.32.84.164,58151.0,->,74.125.232.208,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.228926,9.154405,tcp,147.32.84.164,57592.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,87,70344,6603,63741,808.551724137931,0.09386728079153872,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.244753,9.138628,tcp,147.32.84.164,57595.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,37,21811,3999,17812,589.4864864864865,0.18334785200128376,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.355832,0.027263,udp,147.32.84.164,59643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.355878,0.032361,udp,147.32.84.164,46548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.388243,0.034796,udp,147.32.84.164,55614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,81,138,109.5,0.3698630136986301,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.388377,0.000289,udp,147.32.84.164,48938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.388818,0.001884,udp,147.32.84.164,48716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:09.451561,0.000234,udp,147.32.84.164,50764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,82,141,111.5,0.36771300448430494,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:10.488996,0.000246,udp,147.32.84.164,60353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:10.498791,0.030639,udp,147.32.84.164,43644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:10.531544,0.152244,tcp,147.32.84.164,57815.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1431,712,719,143.1,0.4975541579315164,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:10.846071,0.000403,udp,147.32.84.170,58931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:11.847370,0.016911,udp,147.32.84.59,52267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:13.442616,0.000265,udp,147.32.86.20,64318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:13.564528,0.000232,udp,147.32.84.170,51798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:13.590669,0.000694,udp,113.80.68.51,26564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,231,169,62,115.5,0.7316017316017316,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:18.382445,6.040992,tcp,147.32.84.164,57600.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,116,103489,6760,96729,892.1465517241379,0.06532095198523515,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:18.465252,5.958181,tcp,147.32.84.164,57604.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,78,64366,5457,58909,825.2051282051282,0.08478078488643072,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:20.869237,61.280827,tcp,147.32.84.165,3310.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:40:23.017574,0.000306,udp,147.32.84.170,49153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:26.299041,0.035653,udp,147.32.85.7,55693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:26.525542,0.0,tcp,113.105.171.56,80.0,->,147.32.85.51,18961.0,SA_,0.0,,1,66,66,0,66.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:40:26.672053,0.000529,udp,147.32.84.170,38355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:26.674686,0.018061,tcp,147.32.84.170,53005.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:30.455053,13.781192,tcp,72.46.129.147,80.0,->,147.32.87.56,22644.0,SA_,0.0,,2,124,124,0,62.0,1.0,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:40:30.832224,0.000126,udp,147.32.84.138,42657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:32.780502,9.013642,tcp,217.23.7.119,56750.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:40:36.674100,0.018101,tcp,147.32.84.170,44444.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:38.819204,0.000414,udp,147.32.84.164,37003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:40:39.538260,0.000303,udp,147.32.84.138,60802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:40:39.704388,3561.300781,udp,46.40.62.161,17993.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,668,548,120,167.0,0.8203592814371258,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:44.751912,189.553925,icmp,99.97.84.47,771.0,->,147.32.84.94,7671.0,URP,0.0,,8,896,896,0,112.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:40:46.154282,0.00064,udp,173.61.114.71,27712.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:46.674610,0.018612,tcp,147.32.84.170,39147.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:48.889220,0.000707,udp,94.11.113.34,63162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:48.967618,0.000784,udp,78.22.162.30,26109.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:50.012801,0.000688,udp,89.123.127.152,44693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:53.385760,0.281729,udp,140.203.154.5,30943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,283,185,98,141.5,0.6537102473498233,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:54.020999,0.000282,udp,147.32.84.170,32843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:40:57.075790,0.000802,udp,99.35.94.108,44223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:40:59.302858,0.000226,udp,147.32.84.164,46450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:41:00.072509,0.000286,udp,147.32.84.138,51317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:01.072793,0.00015,udp,147.32.85.25,47754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:02.786363,8.996617,tcp,109.236.80.143,51742.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:41:02.931525,14.939448,tcp,147.32.86.111,33833.0,->,67.201.31.128,80.0,SRPA_FSPA,0.0,0.0,11,2006,797,1209,182.36363636363637,0.39730807577268196,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:41:04.301390,0.008021,udp,147.32.85.114,51644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,75,177,126.0,0.2976190476190476,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:05.911007,0.000499,udp,72.94.14.149,15215.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:06.131046,0.000526,udp,147.32.84.59,55214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:06.673111,0.018784,tcp,147.32.84.170,44448.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:12.642593,0.003707,udp,147.32.84.189,43107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:12.754369,0.000358,udp,147.32.84.59,57892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:13.279164,1237.716187,udp,190.237.233.37,1829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,737,551,186,122.83333333333333,0.7476255088195387,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:15.420441,2602.830078,udp,147.32.84.229,13363.0,<->,79.1.73.29,21963.0,CON,0.0,0.0,6,3573,569,3004,595.5,0.15924993003078644,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:15.728032,0.008417,udp,147.32.85.26,63863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,80,426,253.0,0.15810276679841898,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:15.926251,0.00014,udp,147.32.84.138,47333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:15.980724,64.115372,tcp,147.32.85.26,61362.0,->,184.73.179.49,80.0,SRPA_FSPA,0.0,0.0,45,37383,2232,35151,830.7333333333333,0.05970628360484712,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:41:17.451541,0.248197,tcp,147.32.85.26,61386.0,->,208.78.169.230,80.0,SRPA_FSPA,0.0,0.0,8,1630,1097,533,203.75,0.6730061349693252,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:41:18.927325,18.627399,tcp,147.32.84.170,55523.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.927869,0.000263,udp,147.32.84.170,50421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,85,203,144.0,0.2951388888888889,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.929121,18.62532,tcp,147.32.84.170,57967.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.929527,18.625021,tcp,147.32.84.170,57969.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.947988,20.420238,tcp,147.32.84.170,50192.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,11,1704,960,744,154.9090909090909,0.5633802816901409,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.948177,18.606892,tcp,147.32.84.170,50195.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:18.948192,18.606777,tcp,147.32.84.170,50196.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.061870,0.000562,udp,147.32.84.170,49718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.062978,0.000292,udp,147.32.84.170,34884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.063355,0.000298,udp,147.32.84.170,56885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.070949,0.000272,udp,147.32.84.170,36690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.071534,0.000388,udp,147.32.84.170,34401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.072413,0.000269,udp,147.32.84.170,49876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.086405,0.000263,udp,147.32.84.170,57847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.087045,0.000377,udp,147.32.84.170,58590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.092191,0.000255,udp,147.32.84.170,38298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.094712,0.000402,udp,147.32.84.170,55566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.097805,0.000272,udp,147.32.84.170,41817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.099446,0.000246,udp,147.32.84.170,53805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.100076,0.000261,udp,147.32.84.170,45275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.106392,0.000385,udp,147.32.84.170,56352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.107173,0.000327,udp,147.32.84.170,48514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.110144,0.000259,udp,147.32.84.170,34663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.139812,0.000326,udp,147.32.84.170,53324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.146621,0.000202,udp,147.32.84.170,59557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.148178,0.000381,udp,147.32.84.170,47768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.148966,0.000354,udp,147.32.84.170,35825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.360877,0.280357,udp,147.32.84.170,51568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:19.922665,0.282954,udp,147.32.84.170,34279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:20.205933,0.01809,udp,147.32.84.170,49250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:21.049436,0.325614,tcp,147.32.84.59,65318.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1540,699,841,171.11111111111111,0.4538961038961039,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:41:21.725157,61.315102,tcp,147.32.84.165,3311.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:41:21.992443,0.002036,udp,166.248.0.142,14482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,710,650,60,355.0,0.9154929577464789,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:30.264073,0.000285,udp,147.32.84.59,38106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,84,118,101.0,0.4158415841584158,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:35.176793,3261.605713,udp,147.32.84.229,13363.0,<->,80.233.248.84,63793.0,CON,0.0,0.0,20,3337,1343,1994,166.85,0.4024572969733293,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:36.674008,0.018291,tcp,147.32.84.170,54109.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:36.879633,130.003616,tcp,147.32.84.59,55525.0,->,193.245.32.18,80.0,SPA_SRPA,0.0,0.0,231,202123,16699,185424,874.991341991342,0.0826180098257002,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:41:38.449068,0.000676,udp,89.142.252.191,65473.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,675,75,600,337.5,0.1111111111111111,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:39.253827,0.000317,udp,147.32.84.170,48844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.254463,0.000316,udp,147.32.84.170,51306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.255280,8.299774,tcp,147.32.84.170,57980.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1585,963,622,144.0909090909091,0.6075709779179811,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.255336,8.299338,tcp,147.32.84.170,57981.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1660,1038,622,150.9090909090909,0.6253012048192771,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.379968,0.00041,udp,147.32.84.170,38312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.380217,0.058585,udp,147.32.84.170,47185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.380797,0.000524,udp,147.32.84.170,42353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.655312,0.000358,udp,147.32.84.19,59676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,82,168,125.0,0.328,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:39.664489,0.286996,udp,147.32.84.170,39398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:39.760304,0.000278,udp,147.32.84.170,33173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:40.528178,0.336615,udp,147.32.84.59,55702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,80,167,123.5,0.32388663967611336,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:40.883006,16.671963,tcp,147.32.84.170,57988.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:40.883109,16.672014,tcp,147.32.84.170,57990.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:40.883324,16.672205,tcp,147.32.84.170,55554.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.056978,0.000309,udp,147.32.84.170,50543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.057277,0.000259,udp,147.32.84.170,56150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.057901,0.000514,udp,147.32.84.170,37547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.059114,0.000296,udp,147.32.84.170,39322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.059174,0.000319,udp,147.32.84.170,36095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.059718,0.000507,udp,147.32.84.170,32789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.060851,0.000261,udp,147.32.84.170,47796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,74,158,116.0,0.31896551724137934,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.061534,0.00037,udp,147.32.84.170,48807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.062390,0.000326,udp,147.32.84.170,35179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,74,238,156.0,0.23717948717948717,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.065460,0.000378,udp,147.32.84.170,50779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,70,230,150.0,0.23333333333333334,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.165140,0.00037,udp,147.32.84.170,53387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.165304,0.000274,udp,147.32.84.170,57265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.166009,0.000328,udp,147.32.84.170,36187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.167368,0.000166,udp,147.32.84.170,55706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.168042,0.003423,udp,147.32.84.170,53551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.168048,0.000456,udp,147.32.84.170,60930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.168716,0.000307,udp,147.32.84.170,38880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.169628,0.000162,udp,147.32.84.170,59376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,78,119,98.5,0.39593908629441626,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.171458,0.00033,udp,147.32.84.170,52964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.172207,0.00025,udp,147.32.84.170,41124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:41.173378,0.032353,udp,147.32.84.170,53825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,71,164,117.5,0.3021276595744681,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:42.349466,0.000324,udp,147.32.85.34,49781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:43.989653,0.000646,udp,60.48.229.192,55045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:45.294936,0.000173,udp,147.32.84.138,41437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:45.984037,0.000351,udp,147.32.85.7,43922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:46.018099,32.289982,tcp,147.32.85.7,36461.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,22,6735,1602,5133,306.1363636363636,0.2378619153674833,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:41:46.347191,0.000205,udp,147.32.84.138,57162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:47.649765,0.199514,tcp,147.32.84.59,1259.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,24,16250,2807,13443,677.0833333333334,0.17273846153846154,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:41:49.022410,0.000254,udp,147.32.84.138,56987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:53.987791,0.072643,udp,147.32.84.229,13363.0,<->,77.122.182.208,6930.0,CON,0.0,0.0,2,543,76,467,271.5,0.13996316758747698,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:41:56.024789,0.214742,tcp,147.32.84.170,33572.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:56.672817,0.000414,udp,147.32.84.170,46714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:56.673809,0.000349,udp,147.32.84.170,50518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:58.219426,0.00026,udp,147.32.84.138,43903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:41:59.273208,18.28413,tcp,147.32.84.170,55566.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:59.729255,0.283931,udp,147.32.84.170,41033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:41:59.796849,1796.011475,udp,147.32.84.59,65520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,12,1356,528,828,113.0,0.3893805309734513,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:00.569747,0.017803,udp,147.32.84.170,48681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:00.588457,0.000327,udp,147.32.84.170,58933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:00.594938,0.286053,udp,147.32.84.170,40994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:01.151816,0.280666,udp,147.32.84.170,60938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:01.355281,0.000279,udp,147.32.85.34,62145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:04.947684,0.25414,tcp,147.32.85.26,61424.0,->,50.17.243.165,80.0,SRPA_FSPA,0.0,0.0,9,1423,958,465,158.11111111111111,0.6732255797610681,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:42:10.363173,3009.056641,udp,131.227.233.115,61209.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:42:14.704131,0.000258,udp,147.32.84.138,58155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:15.777816,15.706467,tcp,147.32.84.189,33636.0,->,77.75.73.86,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:42:16.611530,0.017318,udp,147.32.84.189,54760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:16.671474,0.000385,udp,147.32.84.170,46923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:16.672643,0.018046,tcp,147.32.84.170,44498.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:17.823367,0.000305,udp,147.32.84.59,33032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:21.701858,0.229061,tcp,147.32.84.189,60183.0,->,217.66.178.101,80.0,FSPA_FSPA,0.0,0.0,11,2672,1445,1227,242.9090909090909,0.5407934131736527,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:42:21.932727,0.062845,udp,147.32.84.229,13363.0,<->,89.178.185.42,58520.0,CON,0.0,0.0,2,138,77,61,69.0,0.5579710144927537,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:42:22.593207,61.307629,tcp,147.32.84.165,3312.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:42:24.715361,0.000282,udp,147.32.84.138,40670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:26.023692,0.249802,tcp,147.32.84.170,33584.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:29.805799,0.000638,udp,95.224.45.92,29550.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:42:30.953226,0.042515,udp,147.32.84.59,33556.0,<->,82.46.176.140,22001.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:42:31.272342,602.658386,udp,147.32.84.59,52996.0,<->,149.5.45.253,43028.0,CON,0.0,0.0,4,1194,150,1044,298.5,0.12562814070351758,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:42:34.591041,8.409648,tcp,147.32.84.59,65368.0,->,92.123.64.154,80.0,FSPA_FSPA,0.0,0.0,33,22454,2232,20222,680.4242424242424,0.09940322436982275,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:42:34.682861,0.000259,udp,147.32.84.138,54608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:37.952803,0.000751,udp,77.66.223.112,28611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:42:42.121083,27.117485,tcp,147.32.84.170,50233.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,11,1654,916,738,150.36363636363637,0.5538089480048367,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.128814,0.000275,udp,147.32.84.170,35645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.129376,0.000461,udp,147.32.84.170,48029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.131663,0.000631,udp,147.32.84.170,52463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.133057,0.000379,udp,147.32.84.170,47974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.135085,0.000306,udp,147.32.84.170,41273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,77,249,163.0,0.2361963190184049,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.415408,0.279929,udp,147.32.84.170,40068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:42.978389,0.2834,udp,147.32.84.170,34812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:42:44.103286,0.247564,udp,147.32.84.164,55404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:42:45.685195,0.000149,udp,147.32.84.138,52261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:49.469987,0.020715,udp,147.32.84.59,50666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:50.361494,0.000341,udp,147.32.85.36,42100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:42:52.706788,0.922835,tcp,147.86.193.34,48809.0,->,147.32.84.111,48922.0,FSPA_FSPA,0.0,0.0,20,1644,974,670,82.2,0.5924574209245742,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:42:54.093158,3.021823,tcp,65.52.227.217,50379.0,->,147.32.85.100,3126.0,S_,0.0,,2,124,124,0,62.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:42:55.718693,15.301729,udp,147.32.84.94,7103.0,->,85.244.249.168,62813.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:42:58.698177,0.000287,udp,147.32.84.59,49249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:03.409956,6.8e-05,tcp,113.105.171.58,80.0,->,147.32.84.9,24639.0,SA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:43:04.457221,0.000704,udp,183.37.217.104,61926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,621,78,543,310.5,0.12560386473429952,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:05.270699,0.000697,udp,2.123.194.147,30256.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,149,76,73,74.5,0.5100671140939598,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:06.673378,0.018076,tcp,147.32.84.170,44040.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:13.070080,0.029848,tcp,147.32.84.170,35888.0,->,209.85.148.106,443.0,FSRPA_FSPA,0.0,0.0,14,1237,656,581,88.35714285714286,0.5303152789005658,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:13.356108,0.235059,tcp,147.32.84.170,33573.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:13.582732,0.0,tcp,192.168.88.158,50722.0,?>,74.125.232.201,80.0,RA_,0.0,,1,60,60,0,60.0,1.0,16,1,flow=Background-google-analytics10,Background,-1 2011-08-16 16:43:15.285999,0.094931,udp,147.32.84.170,53047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,71,202,136.5,0.2600732600732601,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:16.429442,0.007434,udp,147.32.84.170,59141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,156,78,78,78.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:17.028983,0.000268,udp,147.32.84.170,40733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,78,119,98.5,0.39593908629441626,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:17.029531,2e-05,udp,147.32.84.170,51471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,78,119,98.5,0.39593908629441626,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:17.029689,0.000228,udp,147.32.84.170,45766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,78,164,121.0,0.32231404958677684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:17.101540,0.000315,udp,147.32.84.170,34643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,71,178,124.5,0.285140562248996,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:17.320568,0.000415,udp,147.32.84.189,60376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,76,207,141.5,0.26855123674911663,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:19.700356,4.279687,tcp,147.32.84.3,34327.0,->,147.32.80.13,80.0,FSPA_FSRPA,0.0,0.0,25,7204,2266,4938,288.16,0.31454747362576346,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:43:20.431992,0.00255,udp,147.32.84.59,64338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,79,141,110.0,0.35909090909090907,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:22.213571,0.000316,udp,147.32.84.170,50135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:22.228962,0.141121,udp,147.32.84.170,37087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:22.775532,18.72616,tcp,147.32.84.189,35067.0,->,92.123.64.185,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:43:23.470827,61.29892,tcp,147.32.84.165,3313.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:43:23.473261,0.00163,udp,147.32.84.170,39942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,448,70,378,224.0,0.15625,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:24.672923,3091.311035,udp,134.109.185.19,31101.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1185,875,310,118.5,0.7383966244725738,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:25.553409,0.00036,udp,147.32.84.170,45371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:25.950207,0.009999,udp,147.32.84.170,48793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:25.961033,253.348999,tcp,147.32.84.170,41936.0,->,209.85.149.117,80.0,FSPA_FSPA,0.0,0.0,6438,6480336,139496,6340840,1006.5759552656104,0.02152604432856568,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:26.590969,0.000385,udp,147.32.85.7,55089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,481,75,406,240.5,0.15592515592515593,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:26.673104,0.000379,udp,147.32.84.170,49343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:27.244554,1417.48999,udp,76.95.80.123,63861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,273,153,120,68.25,0.5604395604395604,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:27.730018,24.752781,tcp,147.32.84.59,40775.0,->,195.122.131.207,443.0,FSPA_FSPA,0.0,0.0,16,3063,1575,1488,191.4375,0.5142017629774731,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:43:28.906320,0.000497,udp,59.100.74.20,44466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:33.713589,652.277039,udp,147.32.85.26,60764.0,<->,78.141.181.221,34055.0,CON,0.0,0.0,4,520,354,166,130.0,0.6807692307692308,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:34.119348,0.000218,udp,147.32.84.170,60988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.119890,0.000353,udp,147.32.84.170,42340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.197960,45.090912,tcp,147.32.84.170,50251.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,21,7322,1629,5693,348.6666666666667,0.22248019666757715,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.205877,0.000242,udp,147.32.84.170,36077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.206185,0.000257,udp,147.32.84.170,41079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.206887,0.000296,udp,147.32.84.170,56700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.207606,0.000331,udp,147.32.84.170,34702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:34.208599,0.000239,udp,147.32.84.170,55601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:35.643352,0.0,tcp,110.4.84.134,4935.0,->,147.32.85.68,3389.0,S_,0.0,,1,66,66,0,66.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:43:36.674179,0.018275,tcp,147.32.84.170,38309.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:36.682972,12.817774,udp,147.32.84.229,13363.0,<->,2.102.167.95,62812.0,CON,0.0,0.0,4,759,149,610,189.75,0.1963109354413702,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:42.631530,3006.061768,udp,190.166.100.189,28933.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:43.659820,0.000385,udp,147.32.84.138,44045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:47.413285,2533.09375,udp,87.123.129.129,21606.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:49.650012,0.000285,udp,147.32.84.170,57858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.651150,0.000258,udp,147.32.84.170,33465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.651673,0.000474,udp,147.32.84.170,54599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.653667,0.000339,udp,147.32.84.170,60239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.653673,0.00055,udp,147.32.84.170,48801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.654917,0.000244,udp,147.32.84.170,38230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.655097,0.000292,udp,147.32.84.170,44189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.655400,0.000507,udp,147.32.84.170,38986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.656423,0.0003,udp,147.32.84.170,52255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.657021,0.000372,udp,147.32.84.170,59807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.668397,0.280459,udp,147.32.84.170,44520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:49.954912,0.285273,udp,147.32.84.170,34664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.322263,18.965433,tcp,147.32.84.170,58036.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.322526,18.965164,tcp,147.32.84.170,58039.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.322907,18.965267,tcp,147.32.84.170,55602.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.516008,0.281805,udp,147.32.84.170,47514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.818800,0.000246,udp,147.32.84.170,54891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.820032,0.000325,udp,147.32.84.170,34438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.820951,0.000347,udp,147.32.84.170,54948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.821659,0.00032,udp,147.32.84.170,42458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.822882,0.000381,udp,147.32.84.170,47641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.826169,0.003806,udp,147.32.84.170,51572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.827737,0.000483,udp,147.32.84.170,59535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.829868,0.000429,udp,147.32.84.170,51910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.831543,0.00037,udp,147.32.84.170,58090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.832747,0.000492,udp,147.32.84.170,48016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,80,185,132.5,0.3018867924528302,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.833473,0.000281,udp,147.32.84.170,44149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,80,252,166.0,0.24096385542168675,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.833927,0.000361,udp,147.32.84.170,45312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.834683,0.000335,udp,147.32.84.170,53309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.835837,0.000206,udp,147.32.84.170,34428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.845908,0.000395,udp,147.32.84.170,40970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.879618,0.00027,udp,147.32.84.170,58062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,72,125,98.5,0.36548223350253806,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:50.964874,0.000178,udp,147.32.84.170,33158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,78,140,109.0,0.3577981651376147,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:51.126560,0.000669,udp,84.3.122.141,50759.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,191,62,126.5,0.7549407114624506,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:43:51.681222,0.000218,udp,147.32.84.170,59722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,68,128,98.0,0.3469387755102041,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:43:51.772335,15.098068,tcp,147.32.84.123,40278.0,->,77.75.73.135,80.0,FSPA_FSPA,0.0,0.0,20,9352,1073,8279,467.6,0.11473481608212147,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:43:54.458213,0.000207,udp,147.32.84.59,59546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:43:54.946136,0.596589,tcp,147.32.84.123,34311.0,->,77.75.77.152,80.0,FSPA_FSPA,0.0,0.0,55,36169,2734,33435,657.6181818181818,0.07558959329812823,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:43:57.579199,5.954057,tcp,147.32.84.123,39001.0,->,77.75.77.155,80.0,FSPA_FSPA,0.0,0.0,53,34541,2670,31871,651.7169811320755,0.07729944124373933,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:44:01.126943,0.000219,udp,147.32.85.34,54300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:01.141400,0.000259,udp,147.32.85.34,51681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:02.946761,0.000325,udp,147.32.84.170,44406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:02.969964,306.330414,tcp,147.32.84.170,46747.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,22,3378,1364,2014,153.54545454545453,0.40378922439313203,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:03.094336,0.00075,udp,173.228.38.204,18325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:44:03.621032,0.021258,udp,147.32.85.7,47082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,82,200,141.0,0.2907801418439716,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:04.142646,0.00026,udp,147.32.85.7,55388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,78,144,111.0,0.35135135135135137,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:05.453619,0.000336,udp,147.32.84.170,60257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,83,173,128.0,0.32421875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.454224,0.000268,udp,147.32.84.170,35835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,83,191,137.0,0.3029197080291971,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.530872,303.762604,tcp,147.32.84.170,40321.0,->,90.183.38.26,80.0,FSPA_FSPA,0.0,0.0,61,27516,3009,24507,451.08196721311475,0.10935455734845181,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.557454,0.000429,udp,147.32.84.170,44855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,75,181,128.0,0.29296875,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.636167,0.004553,tcp,147.32.84.170,56255.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2170,1154,1016,241.11111111111111,0.5317972350230414,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.668541,0.000176,udp,147.32.84.170,50025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.704012,0.000319,udp,147.32.84.170,50391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.704761,0.000398,udp,147.32.84.170,48427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,83,135,109.0,0.38073394495412843,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.710769,0.000396,udp,147.32.84.170,40290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.711514,13.561184,tcp,147.32.84.170,39214.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.711557,13.56141,tcp,147.32.84.170,39215.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.712782,53.568707,tcp,147.32.84.170,43103.0,->,2.20.182.42,80.0,FSPA_FSPA,0.0,0.0,28,15399,3183,12216,549.9642857142857,0.2067017338788233,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.712899,63.568913,tcp,147.32.84.170,43105.0,->,2.20.182.42,80.0,FSPA_FSPA,0.0,0.0,18,7803,1760,6043,433.5,0.22555427399718056,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.712903,63.569283,tcp,147.32.84.170,43106.0,->,2.20.182.42,80.0,FSPA_FSPA,0.0,0.0,22,10959,2471,8488,498.1363636363636,0.22547677707820057,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.728888,243.56633,tcp,147.32.84.170,45543.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,21,2794,1802,992,133.04761904761904,0.6449534717251253,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.749795,143.537918,tcp,147.32.84.170,36090.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,19,5786,1334,4452,304.5263157894737,0.2305565157276184,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.750679,0.000714,udp,81.185.253.136,38283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,75,472,273.5,0.13711151736745886,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:44:05.770527,0.001699,udp,147.32.84.170,47836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,80,399,239.5,0.16701461377870563,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.848140,303.445862,tcp,147.32.84.170,48214.0,->,90.183.38.80,80.0,FSPA_FSPA,0.0,0.0,24,3263,1306,1957,135.95833333333334,0.4002451731535397,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.901963,0.000349,udp,147.32.84.170,52281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.901971,0.000349,udp,147.32.84.170,58856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.906565,240.092743,tcp,147.32.84.170,33315.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,28,2626,1464,1162,93.78571428571429,0.5575019040365575,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.917232,0.002291,udp,147.32.84.170,51576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.919512,0.000207,udp,147.32.84.170,46090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,79,136,107.5,0.3674418604651163,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.920683,0.000308,udp,147.32.84.170,48894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,79,173,126.0,0.3134920634920635,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.923899,0.000418,udp,147.32.84.170,36120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,77,173,125.0,0.308,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.924592,0.000249,udp,147.32.84.170,48709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,79,187,133.0,0.29699248120300753,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.926742,0.000255,udp,147.32.84.170,56070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,78,172,125.0,0.312,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.926990,0.000265,udp,147.32.84.170,60426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.929899,0.000293,udp,147.32.84.170,46596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,77,184,130.5,0.2950191570881226,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.930435,0.019532,udp,147.32.84.170,49811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.931129,0.000355,udp,147.32.84.170,41376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,84,191,137.5,0.3054545454545455,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.933613,0.000282,udp,147.32.84.170,58214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.950349,0.000363,udp,147.32.84.170,42254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.951034,0.020408,udp,147.32.84.170,37923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:05.985760,0.000418,udp,147.32.84.170,43650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,79,391,235.0,0.16808510638297872,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:06.191760,0.000223,udp,147.32.85.7,40471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:06.229524,0.000386,udp,147.32.84.170,55374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,532,83,449,266.0,0.15601503759398497,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:06.483450,0.000384,udp,147.32.85.7,54792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:06.540405,52.74107,tcp,147.32.84.170,43127.0,->,2.20.182.42,80.0,FSPA_FSPA,0.0,0.0,19,8208,1766,6442,432.0,0.21515594541910332,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:06.672045,0.000448,udp,147.32.84.170,50076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:06.794842,302.597412,tcp,147.32.84.170,42331.0,->,69.63.190.14,80.0,FSPA_FSPA,0.0,0.0,34,11303,2426,8877,332.44117647058823,0.21463328319915068,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:07.332762,0.000286,udp,147.32.84.138,41334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:08.275780,0.00039,udp,147.32.84.138,37092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:14.231392,115.198296,tcp,147.32.84.189,51520.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,20,5253,1987,3266,262.65,0.37826004188083,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:44:16.672673,0.018556,tcp,147.32.84.170,39308.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:18.091378,6.285441,udp,147.32.85.26,60764.0,->,95.143.31.44,48025.0,INT,0.0,,3,240,240,0,80.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:44:19.202401,0.0003,udp,147.32.84.138,59710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:22.792551,0.000267,udp,147.32.84.138,48958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:24.339880,61.293064,tcp,147.32.84.165,3314.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:44:24.690855,0.000305,udp,147.32.84.171,46909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:28.938412,0.000301,udp,147.32.84.138,43922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:30.022374,0.000193,udp,147.32.84.170,53075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:30.023106,0.000406,udp,147.32.84.170,58366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:30.252720,1.515618,tcp,147.32.84.123,51903.0,->,77.75.73.153,80.0,FSPA_FSPA,0.0,0.0,53,35468,2670,32798,669.2075471698113,0.07527912484493064,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:44:32.668019,2318.987305,udp,147.32.84.94,7103.0,->,178.199.208.123,7155.0,INT,0.0,,12,1008,1008,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:44:33.690858,0.000205,udp,147.32.84.138,53996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:36.672300,0.000364,udp,147.32.84.170,46565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:37.228503,0.002288,udp,147.32.84.181,58400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,87,174,130.5,0.3333333333333333,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:39.236442,0.000159,udp,147.32.84.138,45279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:39.645046,0.000315,udp,147.32.84.138,49442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:42.684357,0.000376,udp,147.32.84.138,36875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:46.671835,0.000366,udp,147.32.84.170,44405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:46.672733,0.000327,udp,147.32.84.170,60068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:47.416962,0.004408,udp,91.139.230.39,31765.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3033,60,2973,758.25,0.019782393669634024,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:44:51.812874,0.000311,udp,147.32.84.138,58067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:54.347696,0.000288,udp,147.32.84.164,38344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.348348,0.00046,udp,147.32.84.164,34455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.351096,0.0003,udp,147.32.84.164,38856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.351295,80.452179,tcp,147.32.84.164,38878.0,->,209.85.148.103,80.0,FSRPA_FSPA,0.0,0.0,63,31189,10154,21035,495.06349206349205,0.32556349995190614,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.351345,18.810139,tcp,147.32.84.164,38879.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.351782,0.000249,udp,147.32.84.164,54217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.351796,0.000458,udp,147.32.84.164,48068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.352426,0.000504,udp,147.32.84.164,33874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.352489,79.563301,tcp,147.32.84.164,49087.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,85,47317,12470,34847,556.6705882352941,0.26354164465202784,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.352496,18.807793,tcp,147.32.84.164,49088.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.352999,18.807497,tcp,147.32.84.164,53295.0,->,74.125.232.210,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.353056,250.06691,tcp,147.32.84.164,55878.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.357868,0.000177,udp,147.32.84.164,42587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.361803,0.000357,udp,147.32.84.164,56095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.363160,18.79734,tcp,147.32.84.164,59958.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.547085,0.000419,udp,147.32.84.164,49732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.548936,0.000236,udp,147.32.84.164,46664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.549480,0.000308,udp,147.32.84.164,53226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.550130,0.000238,udp,147.32.84.164,42594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.550720,0.24718,udp,147.32.84.164,44591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.551730,0.000248,udp,147.32.84.164,52339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:54.553211,0.000375,udp,147.32.84.164,54021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:55.534383,0.000246,udp,147.32.85.25,45579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:44:56.682264,0.000361,udp,147.32.84.170,59996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:44:57.485375,0.005016,udp,147.32.84.164,59048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,83,176,129.5,0.3204633204633205,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:57.489913,0.000471,udp,147.32.84.164,36306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:57.491296,15.662806,tcp,147.32.84.164,53253.0,->,81.0.214.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:57.773106,0.000364,udp,147.32.84.164,36217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:59.586265,0.000314,udp,147.32.84.164,45308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:59.588068,0.026591,udp,147.32.84.164,45615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,73,128,100.5,0.36318407960199006,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:59.596219,0.000218,udp,147.32.84.164,51220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,71,140,105.5,0.33649289099526064,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:44:59.610174,0.002517,udp,147.32.84.164,46713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,73,192,132.5,0.27547169811320754,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.194103,0.004265,udp,147.32.84.164,59448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.198593,0.089535,udp,147.32.84.164,33786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,73,99,86.0,0.42441860465116277,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.199139,0.003133,udp,147.32.84.164,48319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,67,134,100.5,0.3333333333333333,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.202724,0.007766,udp,147.32.84.164,55640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.210831,0.00524,udp,147.32.84.164,39973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,77,188,132.5,0.29056603773584905,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.222725,0.00029,udp,147.32.84.164,42562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,80,133,106.5,0.3755868544600939,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.224485,0.00237,udp,147.32.84.164,33333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,70,142,106.0,0.330188679245283,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.227042,0.000396,udp,147.32.84.164,58729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,379,70,309,189.5,0.18469656992084432,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.230837,0.000383,udp,147.32.84.164,45686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,74,313,193.5,0.19121447028423771,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:00.288298,0.033754,udp,147.32.84.164,41206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,73,194,133.5,0.27340823970037453,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:45:01.017112,0.000239,udp,147.32.84.170,59393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:01.018022,0.563594,tcp,147.32.84.170,33697.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:01.559745,0.000206,udp,147.32.84.138,37216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:01.816737,0.249435,tcp,147.32.84.123,45998.0,->,77.75.73.154,80.0,FSPA_FSPA,0.0,0.0,37,24496,2076,22420,662.0540540540541,0.08474853037230569,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:45:05.158138,1.184757,tcp,147.32.84.123,39251.0,->,77.75.77.155,80.0,FSPA_FSPA,0.0,0.0,29,15638,1880,13758,539.2413793103449,0.12021997697915335,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:45:06.673820,0.019322,tcp,147.32.84.170,39315.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:11.280799,0.131774,tcp,147.32.84.123,39277.0,->,77.75.77.155,80.0,FSPA_FSPA,0.0,0.0,30,17983,1878,16105,599.4333333333333,0.10443196352110326,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:45:16.672447,0.000427,udp,147.32.84.170,34252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:21.567018,140.292068,tcp,147.32.86.168,53978.0,->,74.125.232.200,443.0,FSPA_FSPA,0.0,0.0,82,27993,18884,9109,341.3780487804878,0.6745972207337548,16,1,flow=Background-google-analytics9,Background,-1 2011-08-16 16:45:23.066526,3180.821533,udp,217.132.96.11,44067.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1884,958,926,134.57142857142858,0.5084925690021231,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:45:24.498897,3072.000977,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,16,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 16:45:25.196949,61.298004,tcp,147.32.84.165,3315.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:45:26.673153,0.000432,udp,147.32.84.170,43917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:26.744473,0.00028,udp,147.32.85.114,54494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,72,213,142.5,0.25263157894736843,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:30.226884,0.000349,udp,147.32.84.171,59228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,86,231,158.5,0.27129337539432175,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:30.609731,0.020452,udp,147.32.85.7,42853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,439,76,363,219.5,0.17312072892938496,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:30.632936,11.993675,tcp,147.32.85.7,57380.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=Background-google-analytics10,Background,-1 2011-08-16 16:45:32.290428,0.97656,tcp,147.32.84.123,52145.0,->,77.75.73.153,80.0,FSPA_FSPA,0.0,0.0,35,20168,2078,18090,576.2285714285714,0.10303451011503371,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:45:36.673464,0.018461,tcp,147.32.84.170,35001.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:37.694354,0.001173,udp,149.5.45.252,43028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,453,112,341,226.5,0.24724061810154527,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:45:40.381959,0.000273,udp,147.32.84.138,44542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:44.506402,0.000182,udp,147.32.84.138,59484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:46.672563,0.000411,udp,147.32.84.170,35144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:45:48.093202,0.001707,udp,24.57.203.30,44528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:45:52.976723,0.000353,udp,147.32.84.59,52371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:45:54.440144,1111.405884,udp,147.32.84.229,13363.0,<->,77.126.16.61,4391.0,CON,0.0,0.0,4,279,155,124,69.75,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:45:57.318023,0.000252,udp,147.32.84.138,56544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:00.951946,0.000413,udp,147.32.85.34,51413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:00.970834,0.000227,udp,147.32.85.34,63505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:02.318341,0.000381,udp,147.32.84.118,56323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:02.898240,6.9e-05,udp,147.32.85.25,57587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:07.153831,0.722805,udp,66.87.105.58,11828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1319,1074,245,164.875,0.8142532221379833,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:08.560121,0.000348,udp,147.32.84.164,40360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.562567,0.000271,udp,147.32.84.164,35396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.562726,6.621136,tcp,147.32.84.164,35893.0,->,209.85.148.103,80.0,FSRPA_FSPA,0.0,0.0,34,18198,3525,14673,535.2352941176471,0.19370260468183317,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.562737,0.000282,udp,147.32.84.164,47637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.563011,14.602798,tcp,147.32.84.164,35896.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.563445,0.000255,udp,147.32.84.164,49338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.564517,14.599757,tcp,147.32.84.164,36938.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.565810,0.010254,udp,147.32.84.164,55182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.792219,0.000324,udp,147.32.84.164,54217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.792350,0.00041,udp,147.32.84.164,33424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.793001,0.000252,udp,147.32.84.164,42297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.793019,0.000453,udp,147.32.84.164,33900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.794201,0.020152,udp,147.32.84.164,53865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.794266,0.248514,udp,147.32.84.164,44825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.801418,0.000408,udp,147.32.84.164,34356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:08.804264,0.010541,udp,147.32.84.164,48092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.609598,0.000313,udp,147.32.84.164,60182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.610852,0.002009,udp,147.32.84.164,52401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.613045,0.001661,udp,147.32.84.164,37938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.623282,0.005219,udp,147.32.84.164,60842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.629116,0.000233,udp,147.32.84.164,52401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.630690,0.174301,udp,147.32.84.164,56132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,72,227,149.5,0.2408026755852843,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.649969,0.000296,udp,147.32.84.164,32848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.657654,0.036137,udp,147.32.84.164,57966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:09.694250,0.009423,udp,147.32.84.164,37176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,71,140,105.5,0.33649289099526064,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:10.340475,0.0,tcp,147.32.84.165,3316.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.356865,0.0,tcp,147.32.84.165,3317.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.357539,0.0,tcp,147.32.84.165,3319.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.531565,0.0,tcp,147.32.84.165,3320.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.531885,0.0,tcp,147.32.84.165,3321.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.532924,0.0,tcp,147.32.84.165,3323.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.732322,0.0,tcp,147.32.84.165,3324.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.732647,0.0,tcp,147.32.84.165,3325.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:10.951781,0.207415,tcp,147.32.86.20,1600.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31126,1089,30037,778.15,0.034986827732442334,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:46:11.283841,0.0,tcp,147.32.84.165,3327.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:12.076948,120.650009,tcp,147.32.84.59,57946.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,40,15599,8802,6797,389.975,0.5642669401884736,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:46:12.484335,0.0,tcp,147.32.84.165,3328.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:12.577031,0.000232,udp,147.32.84.164,59968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.577756,0.000435,udp,147.32.84.164,42125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,73,183,128.0,0.28515625,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.582268,0.001842,udp,147.32.84.164,45501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,158,79,79,79.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.583685,0.000185,udp,147.32.84.164,37768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.667692,0.00013,udp,147.32.84.164,57834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.798760,0.002223,udp,62.2.130.141,55661.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1416,80,1336,708.0,0.05649717514124294,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:12.809303,10.34733,tcp,147.32.84.164,55154.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,46,35133,1692,33441,763.7608695652174,0.04815984971394416,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.810601,10.346683,tcp,147.32.84.164,48163.0,->,77.75.77.212,80.0,FSPA_FSPA,0.0,0.0,14,3856,857,2999,275.42857142857144,0.22225103734439833,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.922758,0.003715,udp,147.32.84.164,51663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.924674,0.000253,udp,147.32.84.164,55740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.926555,0.00034,udp,147.32.84.164,50968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.933671,0.000325,udp,147.32.84.164,48488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.937397,0.000463,udp,147.32.84.164,44491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,77,187,132.0,0.2916666666666667,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.938317,0.000412,udp,147.32.84.164,44012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.939291,0.000219,udp,147.32.84.164,41584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,70,132,101.0,0.3465346534653465,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.939628,0.000578,udp,147.32.84.164,33506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.940582,0.001999,udp,147.32.84.164,38212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.942354,0.003765,udp,147.32.84.164,35637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.942661,0.001876,udp,147.32.84.164,37512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.949285,0.00183,udp,147.32.84.164,55338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.950684,0.002388,udp,147.32.84.164,47434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.950775,0.000581,udp,147.32.84.164,55327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.952876,0.000371,udp,147.32.84.164,50862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,74,195,134.5,0.275092936802974,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.958933,0.002356,udp,147.32.84.164,59574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.960218,0.000258,udp,147.32.84.164,53350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.961903,0.003542,udp,147.32.84.164,34333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.966621,0.000463,udp,147.32.84.164,33678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:12.968252,0.002567,udp,147.32.84.164,38312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:14.258533,0.055482,tcp,147.32.84.164,42607.0,->,74.125.232.207,80.0,SRPA_SPA,0.0,0.0,8,1855,1247,608,231.875,0.6722371967654986,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:14.916243,0.811186,udp,147.32.84.164,34764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,76,161,118.5,0.3206751054852321,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:14.921570,0.825381,udp,147.32.84.164,53758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,73,127,100.0,0.365,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:14.930917,0.002572,udp,147.32.84.164,56789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,81,220,150.5,0.2691029900332226,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:14.950835,0.03612,udp,147.32.84.164,47830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:15.032720,0.005682,udp,147.32.84.164,59416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,75,142,108.5,0.3456221198156682,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:15.747526,0.002126,udp,147.32.84.164,35376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:15.770863,6.531519,tcp,66.249.72.50,41268.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18000,1883,16117,580.6451612903226,0.10461111111111111,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:46:15.828230,0.000328,udp,147.32.86.20,59127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:16.671072,0.000393,udp,147.32.84.170,41111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:16.671948,0.000315,udp,147.32.84.170,51127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:16.673014,0.018305,tcp,147.32.84.170,38469.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:17.776115,0.000234,udp,147.32.84.138,43357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:18.933218,0.000299,udp,147.32.84.138,51339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:20.755353,22.411259,tcp,147.32.84.164,47556.0,->,82.99.173.157,80.0,FSPA_FSPA,0.0,0.0,63,36039,6205,29834,572.047619047619,0.17217458864008436,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.666345,0.000215,udp,147.32.84.164,45742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.666727,0.000253,udp,147.32.84.164,58422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.666738,0.040366,udp,147.32.84.164,41935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.672975,21.493641,tcp,147.32.84.164,47558.0,->,82.99.173.157,80.0,FSPA_FSPA,0.0,0.0,37,15373,4754,10619,415.4864864864865,0.30924347882651404,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.675808,0.004188,udp,147.32.84.164,38293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.683038,0.003946,udp,147.32.84.164,53116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,77,144,110.5,0.34841628959276016,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.683042,0.010244,udp,147.32.84.164,34526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,76,143,109.5,0.3470319634703196,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.686473,0.376752,tcp,147.32.84.164,48206.0,->,75.101.162.204,80.0,FSPA_FSA,0.0,0.0,9,2812,778,2034,312.44444444444446,0.27667140825035563,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.798315,0.023336,udp,147.32.84.164,37418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,76,143,109.5,0.3470319634703196,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.798326,21.367756,tcp,147.32.84.164,47571.0,->,82.99.173.157,80.0,FSPA_FSPA,0.0,0.0,15,5130,924,4206,342.0,0.18011695906432748,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.801772,0.00035,udp,147.32.84.164,34677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,78,239,158.5,0.24605678233438485,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.818750,0.012975,tcp,147.32.84.164,52757.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,10,2025,1070,955,202.5,0.528395061728395,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.822022,0.000325,udp,147.32.84.164,54811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,76,237,156.5,0.24281150159744408,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.952280,0.007377,udp,147.32.84.164,51160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,77,144,110.5,0.34841628959276016,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:21.959964,0.00033,udp,147.32.84.164,49739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,76,237,156.5,0.24281150159744408,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:22.099276,3045.881836,udp,95.102.221.136,59147.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:22.152598,0.040931,udp,147.32.84.164,58887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,79,230,154.5,0.255663430420712,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:46:23.955981,0.209459,tcp,147.32.86.20,1609.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,30936,969,29967,814.1052631578947,0.03132273079906905,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:46:24.100689,0.0,tcp,147.32.84.165,3554.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.100819,0.0,tcp,147.32.84.165,3556.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.100939,0.0,tcp,147.32.84.165,3555.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.100992,0.0,tcp,147.32.84.165,3560.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.101047,0.0,tcp,147.32.84.165,3559.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.702125,0.0,tcp,147.32.84.165,3567.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.702201,0.0,tcp,147.32.84.165,3566.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:24.702262,0.0,tcp,147.32.84.165,3568.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:26.629304,1948.72583,udp,68.109.156.28,40385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1064,944,120,266.0,0.8872180451127819,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:26.670820,0.000391,udp,147.32.84.170,50046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:26.671762,0.000434,udp,147.32.84.170,56049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:27.383466,0.052269,udp,147.32.84.229,13363.0,<->,178.140.233.157,45402.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:29.351607,0.000368,udp,147.32.84.138,53471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:31.051936,0.099192,udp,86.136.119.29,53823.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,174,74,124.0,0.7016129032258065,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:32.926328,0.000248,udp,147.32.84.138,51270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:34.024546,0.282658,tcp,147.32.84.170,33776.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:35.467343,0.243835,udp,147.32.84.94,7103.0,<->,85.2.248.118,7599.0,CON,0.0,0.0,37,29479,28873,606,796.7297297297297,0.9794429933172767,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:36.118330,0.0,tcp,147.32.84.165,3796.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:36.118344,0.0,tcp,147.32.84.165,3795.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:36.118349,63.581959,tcp,147.32.84.165,3633.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:46:36.118353,0.0,tcp,147.32.84.165,3797.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:36.673215,0.01781,tcp,147.32.84.170,41372.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:36.719527,0.0,tcp,147.32.84.165,3808.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:36.719596,0.0,tcp,147.32.84.165,3807.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:36.719603,0.0,tcp,147.32.84.165,3809.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:38.459227,0.000154,udp,147.32.84.138,45296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:38.832869,0.0,tcp,147.32.84.165,3851.0,->,192.168.0.134,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:43.150873,156.280777,tcp,147.32.84.123,53728.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,16,5456,4062,1394,341.0,0.7445014662756598,16,1,flow=Background-google-analytics3,Background,-1 2011-08-16 16:46:45.053564,0.000444,udp,147.32.85.25,57906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:46.672284,0.000274,udp,147.32.84.170,41926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:46.672974,0.018755,tcp,147.32.84.170,38473.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:48.135971,0.0,tcp,147.32.84.165,4035.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.136089,0.0,tcp,147.32.84.165,4037.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.136266,0.0,tcp,147.32.84.165,4036.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.136336,0.0,tcp,147.32.84.165,4041.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.736615,0.0,tcp,147.32.84.165,4049.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.736765,0.0,tcp,147.32.84.165,4048.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:48.736846,0.0,tcp,147.32.84.165,4047.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:49.193284,1259.21875,udp,31.192.204.246,50811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,401,234,167,100.25,0.5835411471321695,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:46:50.538762,0.0,tcp,147.32.84.165,4085.0,->,147.33.84.192,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:46:55.438561,0.00037,udp,147.32.84.138,59870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:46:56.671413,0.0003,udp,147.32.84.170,59617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:46:57.046132,0.000404,udp,147.32.85.89,60672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:47:00.152788,0.0,tcp,147.32.84.165,4276.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:00.152792,0.0,tcp,147.32.84.165,4275.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:00.152796,0.0,tcp,147.32.84.165,4277.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:00.753917,0.0,tcp,147.32.84.165,4288.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:00.753931,0.0,tcp,147.32.84.165,4287.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:00.753947,0.0,tcp,147.32.84.165,4289.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:01.196914,0.000114,udp,147.32.85.25,33963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:47:02.556347,0.0,tcp,147.32.84.165,4324.0,->,192.168.0.252,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:02.648048,0.033735,tcp,147.32.84.59,65512.0,->,78.24.14.148,80.0,SRPA_FSPA,0.0,0.0,10,3905,880,3025,390.5,0.22535211267605634,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:47:03.134782,0.032325,tcp,147.32.84.59,49203.0,->,78.24.14.148,80.0,SRPA_FSPA,0.0,0.0,9,2573,882,1691,285.8888888888889,0.342790516906335,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:47:05.022586,0.000242,udp,147.32.84.170,54807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:05.024682,0.212554,tcp,147.32.84.170,33780.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:08.205419,0.000269,udp,147.32.85.26,51970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:47:08.215118,115.047913,tcp,147.32.85.26,61492.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,22,9783,2695,7088,444.6818181818182,0.27547786977409794,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:47:12.170083,0.0,tcp,147.32.84.165,4470.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:12.170262,0.0,tcp,147.32.84.165,4471.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:12.170316,0.0,tcp,147.32.84.165,4474.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:12.771450,0.0,tcp,147.32.84.165,4480.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:12.771590,0.0,tcp,147.32.84.165,4479.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:12.771698,0.0,tcp,147.32.84.165,4482.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:14.574217,0.0,tcp,147.32.84.165,4506.0,->,147.32.80.58,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:16.673159,0.018525,tcp,147.32.84.170,35014.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:18.413057,0.000338,udp,147.32.84.19,53015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,70,246,158.0,0.22151898734177214,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:47:24.188086,0.0,tcp,147.32.84.165,4651.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:24.188168,0.0,tcp,147.32.84.165,4650.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:24.188332,0.0,tcp,147.32.84.165,4653.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:24.788436,0.0,tcp,147.32.84.165,4659.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:24.788646,0.0,tcp,147.32.84.165,4660.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:24.788698,0.0,tcp,147.32.84.165,4663.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:26.670900,0.000285,udp,147.32.84.170,39178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:26.673001,0.018136,tcp,147.32.84.170,36373.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:32.684969,39.226879,tcp,117.195.245.39,1522.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,4093,4082502,83185,3999317,997.4351331541657,0.020375985118929518,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:47:33.524541,0.428875,udp,147.32.87.48,3232.0,->,147.32.87.116,161.0,INT,0.0,,22,2882,2882,0,131.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:47:34.937508,0.00038,udp,147.32.87.33,60131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:47:35.022674,0.000295,udp,147.32.84.170,47102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:35.023526,0.000308,udp,147.32.84.170,58890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:35.024799,0.217935,tcp,147.32.84.170,33784.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:36.204842,0.0,tcp,147.32.84.165,4831.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:36.204891,0.0,tcp,147.32.84.165,4830.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:36.204988,0.0,tcp,147.32.84.165,4833.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:36.205000,0.0,tcp,147.32.84.165,4834.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:36.674310,0.018274,tcp,147.32.84.170,41380.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:36.805864,0.0,tcp,147.32.84.165,4840.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:36.805872,0.0,tcp,147.32.84.165,4839.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:38.608625,0.0,tcp,147.32.84.165,4867.0,->,192.168.1.178,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:45.151811,10.17981,udp,67.80.63.154,58593.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,795,675,120,198.75,0.8490566037735849,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:47:45.622660,0.372551,tcp,67.195.111.228,42893.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,3671,779,2892,305.9166666666667,0.2122037591936802,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:47:46.672961,0.000302,udp,147.32.84.170,52577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:48.222070,0.0,tcp,147.32.84.165,1066.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:48.222136,61.299812,tcp,147.32.84.165,4904.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:47:48.222194,0.0,tcp,147.32.84.165,1067.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:48.222205,0.0,tcp,147.32.84.165,1070.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:48.823568,0.0,tcp,147.32.84.165,1076.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:48.823634,0.0,tcp,147.32.84.165,1075.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:48.823706,0.0,tcp,147.32.84.165,1078.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:50.625697,0.0,tcp,147.32.84.165,1102.0,->,147.32.80.238,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:47:52.194709,104.650139,tcp,147.32.86.168,41375.0,->,178.238.38.21,80.0,FSPA_FSPA,0.0,0.0,187,145721,13780,131941,779.2566844919786,0.09456427007775133,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:47:56.673850,0.000336,udp,147.32.84.170,39734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:47:56.674930,0.017809,tcp,147.32.84.170,38482.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:00.239946,0.0,tcp,147.32.84.165,1215.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:00.239960,0.0,tcp,147.32.84.165,1217.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:00.241575,0.0,tcp,147.32.84.165,1219.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:00.638393,0.000381,udp,147.32.85.34,57179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:00.642485,0.000285,udp,147.32.85.34,58604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:00.661227,0.000272,udp,147.32.85.34,57071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:00.840943,0.0,tcp,147.32.84.165,1221.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:00.840948,0.0,tcp,147.32.84.165,1223.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:01.402822,0.000308,udp,147.32.85.74,38807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:02.350459,0.000585,udp,94.122.91.224,17133.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:04.626982,61.954052,tcp,147.32.85.7,34025.0,->,199.59.149.198,443.0,SRPA_FSPA,0.0,0.0,25,11632,2175,9457,465.28,0.18698418156808802,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:48:05.784531,0.020164,udp,147.32.85.7,51281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,72,318,195.0,0.18461538461538463,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:06.020176,0.000353,udp,147.32.84.170,35494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:06.020922,0.000276,udp,147.32.84.170,55816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.117516,0.000375,udp,147.32.84.170,37604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.374509,21.931208,tcp,147.32.84.170,40869.0,->,91.198.174.232,80.0,FSPA_FSPA,0.0,0.0,24,13005,2147,10858,541.875,0.16509034986543636,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.446906,11.857938,tcp,147.32.84.170,57862.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1591,970,621,144.63636363636363,0.6096794468887492,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.679860,0.000316,udp,147.32.84.170,45401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.681986,0.000233,udp,147.32.84.170,50431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.682446,0.000153,udp,147.32.84.170,52897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.683001,0.000408,udp,147.32.84.170,49180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.683553,0.000201,udp,147.32.84.170,56155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.683940,0.000358,udp,147.32.84.170,53493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:07.684143,0.000301,udp,147.32.84.170,57051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:09.506197,1537.647461,udp,147.32.84.229,13363.0,<->,152.3.155.248,13056.0,CON,0.0,0.0,10,3840,3599,241,384.0,0.9372395833333333,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:09.506308,0.044305,udp,147.32.84.229,13363.0,<->,178.76.153.135,3593.0,CON,0.0,0.0,2,305,64,241,152.5,0.2098360655737705,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:09.919373,0.00034,udp,147.32.84.138,44172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:12.257389,0.0,tcp,147.32.84.165,1335.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:12.257587,0.0,tcp,147.32.84.165,1337.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:12.257718,0.0,tcp,147.32.84.165,1339.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:12.571634,16.73394,tcp,147.32.84.170,57865.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.571715,16.73374,tcp,147.32.84.170,57866.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.571924,16.733845,tcp,147.32.84.170,40879.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.573474,0.000377,udp,147.32.84.170,54270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.756482,0.000354,udp,147.32.84.170,34929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.757382,0.000226,udp,147.32.84.170,60026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.759119,0.000198,udp,147.32.84.170,59051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.759706,0.000234,udp,147.32.84.170,56538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.759947,0.000467,udp,147.32.84.170,40807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.760728,0.000227,udp,147.32.84.170,45803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,78,158,118.0,0.3305084745762712,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.761090,0.177018,udp,147.32.84.170,55441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,80,94,87.0,0.45977011494252873,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.761217,0.000577,udp,147.32.84.170,45743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.761225,0.000628,udp,147.32.84.170,36967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,87,149,118.0,0.3686440677966102,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.764705,0.184325,udp,147.32.84.170,58382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:12.857814,0.0,tcp,147.32.84.165,1341.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:12.857943,0.0,tcp,147.32.84.165,1343.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:13.960883,0.376514,tcp,147.32.84.170,40941.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:14.066664,0.00028,udp,147.32.84.170,52203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:14.071587,241.936401,tcp,147.32.84.170,40943.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:14.072946,241.936188,tcp,147.32.84.170,40947.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:14.660510,0.0,tcp,147.32.84.165,1359.0,->,147.32.81.104,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:16.084530,0.000374,udp,147.32.86.20,56083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,85,293,189.0,0.22486772486772486,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:19.870540,0.020743,udp,147.32.84.181,64493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:19.940450,0.000277,udp,147.32.84.138,45511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:24.274588,0.0,tcp,147.32.84.165,1455.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:24.274697,0.0,tcp,147.32.84.165,1457.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:24.875471,0.0,tcp,147.32.84.165,1461.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:24.875485,0.0,tcp,147.32.84.165,1463.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:24.900766,0.38012,udp,149.254.187.125,47546.0,<->,147.32.84.229,443.0,CON,0.0,0.0,6,386,185,201,64.33333333333333,0.4792746113989637,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:26.673407,0.00047,udp,147.32.84.170,54613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:26.675564,0.017987,tcp,147.32.84.170,38517.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:26.677669,0.0,tcp,147.32.84.165,1479.0,->,147.32.81.164,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:27.235244,0.000815,udp,101.109.231.118,18350.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:33.738874,36.484772,udp,112.198.79.207,16488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,871,748,123,145.16666666666666,0.8587830080367393,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:34.063247,8.4e-05,udp,147.32.84.138,35609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:34.886389,0.043166,udp,147.32.87.238,1060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,70,161,115.5,0.30303030303030304,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:36.291928,0.0,tcp,147.32.84.165,1575.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:36.292003,0.0,tcp,147.32.84.165,1577.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:36.401712,0.000359,udp,147.32.84.138,53126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:36.673371,0.018223,tcp,147.32.84.170,38518.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:36.752628,0.35091,tcp,67.195.111.228,48119.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1566,700,866,156.6,0.44699872286079184,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:48:36.892880,0.0,tcp,147.32.84.165,1581.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:36.893075,0.0,tcp,147.32.84.165,1583.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:37.021776,0.000331,udp,147.32.84.170,38425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:37.772654,0.005839,tcp,147.32.86.96,43383.0,->,147.32.87.4,80.0,_FSPA,,0.0,10,3782,0,3782,378.2,0.0,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:48:38.694859,0.0,tcp,147.32.84.165,1599.0,->,147.32.81.224,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:40.343357,0.00021,udp,147.32.84.138,44661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:41.230845,0.000288,udp,147.32.85.25,54542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:41.504595,3170.999268,udp,147.32.87.214,123.0,<->,147.32.30.28,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,16,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 16:48:45.211679,0.000752,udp,212.93.105.45,24833.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:46.674904,0.018373,tcp,147.32.84.170,38520.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:48.309281,0.0,tcp,147.32.84.165,1695.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:48.309339,0.0,tcp,147.32.84.165,1697.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:48.338075,0.00026,udp,147.32.84.170,50018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,75,155,115.0,0.32608695652173914,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:48.339125,0.000684,udp,147.32.84.170,42748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:48.430735,0.06141,udp,147.32.84.170,43484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,72,194,133.0,0.2706766917293233,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:48.516901,0.000252,udp,147.32.84.138,46541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:48.910292,0.0,tcp,147.32.84.165,1701.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:48.910400,0.0,tcp,147.32.84.165,1703.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:50.315411,0.000655,udp,46.178.78.9,30906.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:50.712680,0.0,tcp,147.32.84.165,1719.0,->,147.32.82.30,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:48:50.789457,0.019985,udp,147.32.84.59,62276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,87,503,295.0,0.14745762711864407,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:48:56.673408,0.000397,udp,147.32.84.170,56638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:57.883739,20.060799,tcp,147.32.84.170,59349.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,44,31581,2552,29029,717.75,0.08080808080808081,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:57.884101,20.060686,tcp,147.32.84.170,59352.0,->,91.198.174.234,80.0,FSPA_FSPA,0.0,0.0,70,67611,2248,65363,965.8714285714286,0.03324902752510686,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:57.923211,0.129082,udp,147.32.84.170,44223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:57.953844,0.162597,udp,147.32.84.170,54021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:58.053455,0.204045,udp,147.32.84.170,57534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,75,200,137.5,0.2727272727272727,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:58.426526,0.114106,udp,147.32.84.170,44474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,80,157,118.5,0.33755274261603374,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:58.475234,0.380785,udp,147.32.84.170,49528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:58.541686,0.114636,udp,147.32.84.170,60626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,70,197,133.5,0.26217228464419473,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:58.611839,0.248567,udp,147.32.84.164,51078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:48:58.783497,0.160793,udp,147.32.84.229,13363.0,<->,70.189.114.189,18805.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:58.986941,0.281025,udp,147.32.84.170,48348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:59.424740,0.000541,udp,109.157.199.20,58522.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:48:59.479001,0.213709,udp,147.32.84.170,58719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,160,80,80,80.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:48:59.904446,0.097422,udp,147.32.84.170,34164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,79,214,146.5,0.2696245733788396,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:00.326244,61.312622,tcp,147.32.84.165,1722.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:49:00.326360,0.0,tcp,147.32.84.165,1815.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.326445,0.0,tcp,147.32.84.165,1816.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.326452,0.0,tcp,147.32.84.165,1817.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.326527,0.0,tcp,147.32.84.165,1818.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.769579,0.0,tcp,147.32.84.165,1819.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.927362,0.0,tcp,147.32.84.165,1822.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.927582,0.0,tcp,147.32.84.165,1821.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.927633,0.0,tcp,147.32.84.165,1824.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:00.927734,0.0,tcp,147.32.84.165,1823.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:01.259172,0.000151,udp,147.32.84.138,48539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:01.701878,0.000173,udp,147.32.85.25,43599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:02.729689,0.0,tcp,147.32.84.165,1840.0,->,147.32.82.90,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:02.748212,0.002123,udp,147.32.84.59,61469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,503,80,423,251.5,0.15904572564612326,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:03.263347,0.000577,udp,66.49.183.26,60492.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:06.307516,15.209098,udp,147.32.84.94,7103.0,->,82.216.107.136,7204.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:49:06.672092,0.000362,udp,147.32.84.170,52258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:12.344019,0.0,tcp,147.32.84.165,1936.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:12.344200,0.0,tcp,147.32.84.165,1938.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:12.944648,0.0,tcp,147.32.84.165,1942.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:12.944842,0.0,tcp,147.32.84.165,1944.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:14.037308,0.000355,udp,147.32.84.138,33245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:14.747150,0.0,tcp,147.32.84.165,1960.0,->,147.32.82.150,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:15.047733,1.48145,udp,60.229.65.63,52337.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,274,183,91,137.0,0.6678832116788321,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:15.393106,980.583801,udp,147.32.84.229,13363.0,<->,88.135.135.11,9704.0,CON,0.0,0.0,8,1247,601,646,155.875,0.48195669607056935,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:17.817706,11.493095,tcp,147.32.84.170,57906.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1673,1051,622,152.0909090909091,0.6282127913927077,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.942114,0.000248,udp,147.32.84.170,36937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.942787,0.000352,udp,147.32.84.170,34118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.967690,0.000267,udp,147.32.84.170,57334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.967873,0.00027,udp,147.32.84.170,53577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.968583,0.000402,udp,147.32.84.170,47303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.969074,0.000429,udp,147.32.84.170,36368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,81,259,170.0,0.23823529411764705,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:17.969875,0.000353,udp,147.32.84.170,49779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:18.147933,0.002268,udp,147.32.84.170,60459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,462,78,384,231.0,0.16883116883116883,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:18.263883,0.000332,udp,147.32.84.170,39079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:18.315174,0.431504,tcp,147.32.84.59,49409.0,->,69.171.242.13,80.0,FSPA_FSPA,0.0,0.0,15,7038,1958,5080,469.2,0.2782040352372833,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:49:19.755300,9.555493,tcp,147.32.84.170,57911.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.755379,9.55515,tcp,147.32.84.170,57912.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.755590,9.555215,tcp,147.32.84.170,57915.0,->,91.198.174.233,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.755733,19.556536,tcp,147.32.84.170,40927.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.755958,19.555998,tcp,147.32.84.170,40931.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.756519,0.000261,udp,147.32.84.170,40260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,85,203,144.0,0.2951388888888889,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:19.756684,0.000181,udp,147.32.84.170,60552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,78,189,133.5,0.29213483146067415,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:21.068710,0.815435,udp,147.32.84.170,43659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,74,141,107.5,0.34418604651162793,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:21.143684,0.329222,udp,147.32.84.170,41387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,77,144,110.5,0.34841628959276016,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:21.300036,992.222412,udp,147.32.84.229,13363.0,<->,208.88.186.5,34001.0,CON,0.0,0.0,7,5431,126,5305,775.8571428571429,0.023200147302522556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:21.422823,0.12196,udp,147.32.84.170,47242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:21.771721,0.000345,udp,147.32.84.170,38211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:22.181646,0.214744,udp,147.32.84.170,42885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,75,121,98.0,0.3826530612244898,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:22.499337,0.130523,udp,147.32.84.170,49925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,80,139,109.5,0.365296803652968,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:24.361075,0.0,tcp,147.32.84.165,2056.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:24.361173,0.0,tcp,147.32.84.165,2058.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:24.961841,0.0,tcp,147.32.84.165,2062.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:24.961954,0.0,tcp,147.32.84.165,2064.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:26.652997,0.000348,udp,147.32.85.26,55318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,77,224,150.5,0.2558139534883721,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:26.674264,0.018031,tcp,147.32.84.170,41451.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:26.764858,0.0,tcp,147.32.84.165,2080.0,->,147.32.82.210,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:29.549157,2179.968262,udp,95.134.192.224,15125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,792,432,360,66.0,0.5454545454545454,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:31.405007,0.0,icmp,189.90.241.66,8.0,->,147.32.87.144,11776.0,ECO,0.0,,1,60,60,0,60.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:49:32.550690,0.000165,udp,147.32.84.138,55807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:33.658740,0.000275,udp,147.32.84.59,60329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,97,191,144.0,0.3368055555555556,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:36.378492,0.0,tcp,147.32.84.165,2175.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.378507,0.0,tcp,147.32.84.165,2176.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.378540,0.0,tcp,147.32.84.165,2177.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.378592,0.0,tcp,147.32.84.165,2178.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.378674,0.0,tcp,147.32.84.165,2179.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.636678,14.794916,tcp,147.32.84.59,55652.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:49:36.891604,0.000211,udp,147.32.84.138,54279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:36.978988,0.0,tcp,147.32.84.165,2182.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.979102,0.0,tcp,147.32.84.165,2181.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.979109,0.0,tcp,147.32.84.165,2184.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:36.979175,0.0,tcp,147.32.84.165,2183.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:37.873176,0.000287,udp,147.32.84.59,51687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,84,144,114.0,0.3684210526315789,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:38.013649,0.235244,tcp,147.32.84.170,33858.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:49:38.783395,0.0,tcp,147.32.84.165,2200.0,->,147.32.83.16,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:41.224968,250.032303,tcp,147.32.84.59,56749.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:49:43.871224,0.000274,udp,147.32.84.59,41766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,87,137,112.0,0.38839285714285715,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:48.396933,0.0,tcp,147.32.84.165,2295.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.397011,0.0,tcp,147.32.84.165,2296.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.397084,0.0,tcp,147.32.84.165,2297.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.397095,0.0,tcp,147.32.84.165,2298.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.397145,0.0,tcp,147.32.84.165,2299.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.997618,0.0,tcp,147.32.84.165,2302.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.997801,0.0,tcp,147.32.84.165,2301.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.997815,0.0,tcp,147.32.84.165,2304.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:48.997820,0.0,tcp,147.32.84.165,2303.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:49.297904,2106.334229,udp,147.32.84.94,7103.0,<->,77.246.109.221,7449.0,CON,0.0,0.0,339,308808,304980,3828,910.9380530973451,0.9876039480842466,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:49:50.800127,0.0,tcp,147.32.84.165,2320.0,->,147.32.83.76,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:49:55.691134,0.000266,udp,147.32.84.138,48858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:49:56.684272,0.00049,udp,147.32.84.170,43044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:00.002050,2.796348,udp,113.254.30.198,19918.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,683,562,121,170.75,0.8228404099560761,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:00.413828,0.0,tcp,147.32.84.165,2415.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:00.413913,0.0,tcp,147.32.84.165,2416.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:00.413966,0.0,tcp,147.32.84.165,2417.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:00.414011,0.0,tcp,147.32.84.165,2418.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:00.414061,0.0,tcp,147.32.84.165,2419.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:01.015381,0.0,tcp,147.32.84.165,2422.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:01.015527,0.0,tcp,147.32.84.165,2421.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:01.015534,0.0,tcp,147.32.84.165,2424.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:01.015613,0.0,tcp,147.32.84.165,2423.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:01.282765,0.0,icmp,147.32.84.189,771.0,->,109.172.66.44,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:50:01.359506,0.000289,udp,147.32.85.34,55290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:02.817997,0.0,tcp,147.32.84.165,2440.0,->,147.32.83.136,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:03.151130,0.394033,udp,147.32.87.238,1060.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,250,81,169,125.0,0.324,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:04.575746,0.015057,udp,147.32.84.189,44076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:04.654848,331.746002,udp,147.32.84.229,13363.0,<->,50.83.12.139,63358.0,CON,0.0,0.0,8,2179,1075,1104,272.375,0.49334557136301055,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:06.675706,0.018188,tcp,147.32.84.170,36451.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:08.413282,0.009239,udp,94.7.78.243,40021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:12.431769,61.282547,tcp,147.32.84.165,2443.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:50:12.431834,0.0,tcp,147.32.84.165,2536.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:12.431839,0.0,tcp,147.32.84.165,2537.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:12.431889,0.0,tcp,147.32.84.165,2538.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:12.431894,0.0,tcp,147.32.84.165,2539.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:12.529848,115.469475,tcp,147.32.84.59,57981.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,12,3569,2077,1492,297.4166666666667,0.5819557298963295,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:50:12.856742,0.0,tcp,147.32.84.165,2540.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:13.032526,0.0,tcp,147.32.84.165,2543.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:13.032612,0.0,tcp,147.32.84.165,2542.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:13.032615,0.0,tcp,147.32.84.165,2545.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:13.032710,0.0,tcp,147.32.84.165,2544.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:14.834913,0.0,tcp,147.32.84.165,2561.0,->,147.32.83.196,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:15.563327,0.303824,udp,147.32.84.229,13363.0,<->,200.90.97.41,21153.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:16.673734,0.000409,udp,147.32.84.170,55769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:16.675824,0.018477,tcp,147.32.84.170,38558.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:19.392778,0.000193,udp,147.32.84.138,47414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:19.409499,0.000236,udp,147.32.84.138,58963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:19.797859,0.000184,udp,147.32.85.25,33710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:20.312544,0.039768,tcp,147.32.85.34,51115.0,->,147.32.80.7,25.0,FSPA_FSPA,0.0,0.0,40,21740,19952,1788,543.5,0.9177552897884085,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:50:21.403666,0.000266,udp,147.32.84.138,40340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:24.449076,0.0,tcp,147.32.84.165,2656.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:24.449143,0.0,tcp,147.32.84.165,2657.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:24.449150,0.0,tcp,147.32.84.165,2658.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:24.449194,0.0,tcp,147.32.84.165,2659.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:24.449201,0.0,tcp,147.32.84.165,2660.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:24.922950,0.000172,udp,147.32.85.25,33919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:25.050014,0.0,tcp,147.32.84.165,2663.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:25.050094,0.0,tcp,147.32.84.165,2662.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:25.050100,0.0,tcp,147.32.84.165,2665.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:25.050148,0.0,tcp,147.32.84.165,2664.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,16,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 16:50:25.273115,3139.998291,udp,147.32.84.232,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,7,630,360,270,90.0,0.5714285714285714,16,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 16:50:26.674224,0.000642,udp,147.32.84.170,60175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:30.714225,0.348886,tcp,147.32.84.59,44567.0,->,204.154.111.32,80.0,FSPA_FSPA,0.0,0.0,10,1506,997,509,150.6,0.6620185922974767,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:50:34.746895,0.000352,udp,147.32.84.59,54734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:39.395118,0.000248,udp,147.32.84.138,37079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:40.025585,0.00023,udp,147.32.84.170,38680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:40.058631,806.343872,udp,41.204.111.25,29116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,753,545,208,125.5,0.7237715803452855,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:41.337375,27.979662,tcp,147.32.84.170,35574.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,99,94271,3554,90717,952.2323232323232,0.03769982285114192,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.409347,7.906534,tcp,147.32.84.170,42652.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1567,939,628,142.45454545454547,0.599234205488194,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.410185,0.000224,udp,147.32.84.170,50720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.426751,0.000611,udp,98.211.44.247,26806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:41.483264,5.6e-05,udp,147.32.84.170,55119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.483774,0.000347,udp,147.32.84.170,36635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.484751,27.832575,tcp,147.32.84.170,36517.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,135,135726,5660,130066,1005.3777777777777,0.04170166364587478,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.547743,27.769302,tcp,147.32.84.170,36518.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,75,59703,4972,54731,796.04,0.0832788972078455,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.547813,27.769522,tcp,147.32.84.170,36520.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,80,65328,4942,60386,816.6,0.07564903257408769,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.610473,0.000334,udp,147.32.84.170,34177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.610597,0.000217,udp,147.32.84.170,40359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.643983,0.231322,udp,147.32.84.170,47482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,79,148,113.5,0.34801762114537443,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.858530,0.116952,udp,147.32.84.170,34362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,79,157,118.0,0.3347457627118644,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.971189,0.024424,udp,147.32.84.170,34072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,81,165,123.0,0.32926829268292684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.976363,0.061062,udp,147.32.84.170,56838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:41.996478,0.055389,udp,147.32.84.170,49007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,73,99,86.0,0.42441860465116277,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:42.110300,0.000327,udp,147.32.84.170,54201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:42.488052,0.192086,udp,147.32.84.170,47389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,78,159,118.5,0.3291139240506329,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:42.507624,0.10379,udp,147.32.84.170,43221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,71,164,117.5,0.3021276595744681,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:42.679193,0.533424,udp,147.32.84.170,47578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,74,175,124.5,0.2971887550200803,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:43.643206,0.0,tcp,212.156.16.14,9488.0,->,147.32.86.94,3389.0,S_,0.0,,1,66,66,0,66.0,1.0,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:50:46.673711,0.000414,udp,147.32.84.170,46451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:50:49.315083,0.000256,udp,147.32.84.138,56919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:52.231746,0.000602,tcp,50.22.233.223,80.0,->,147.32.87.53,1024.0,SA_R,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:50:53.349178,0.000184,udp,147.32.84.138,50753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:50:55.853745,0.000682,udp,82.51.174.190,29401.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:50:56.674592,0.000425,udp,147.32.84.170,36315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:02.101217,0.002046,udp,147.32.84.170,47414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:02.103691,0.00237,udp,147.32.84.170,54490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:03.181982,0.000257,udp,147.32.84.168,52359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:06.673423,0.000498,udp,147.32.84.170,36119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:06.674723,0.01826,tcp,147.32.84.170,54913.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:08.340955,11.552022,udp,207.224.101.177,18125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1113,570,543,278.25,0.5121293800539084,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:51:10.086566,0.000453,udp,147.32.84.170,47133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,76,178,127.0,0.2992125984251969,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:13.289612,61.273293,tcp,147.32.84.165,2678.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:51:16.428247,0.242423,tcp,147.32.84.59,38048.0,->,109.123.80.160,80.0,FSPA_FSPA,0.0,0.0,10,2309,962,1347,230.9,0.41663057600692943,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:51:16.672355,0.000262,udp,147.32.84.170,36643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:16.673147,0.000364,udp,147.32.84.170,33872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:16.763640,0.000184,udp,147.32.84.59,56036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,83,136,109.5,0.3789954337899543,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:18.626842,0.174957,tcp,147.32.84.59,49895.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1625,879,746,162.5,0.540923076923077,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:51:19.857646,0.007735,tcp,147.32.84.170,34592.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2199,1440,759,219.9,0.654843110504775,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.990344,0.021547,udp,147.32.84.170,46169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.990724,0.000581,udp,147.32.84.170,45826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.990920,0.000439,udp,147.32.84.170,50817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.991616,0.000367,udp,147.32.84.170,58749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.991677,0.000348,udp,147.32.84.170,48172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.992244,0.000248,udp,147.32.84.170,34272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993119,0.000376,udp,147.32.84.170,57028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993125,19.310707,tcp,147.32.84.170,44544.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993286,19.316193,tcp,147.32.84.170,51508.0,->,62.168.44.115,80.0,FSA_FSA,0.0,0.0,10,692,404,288,69.2,0.5838150289017341,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993414,19.310415,tcp,147.32.84.170,44548.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993515,19.310307,tcp,147.32.84.170,44551.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993630,0.000392,udp,147.32.84.170,35966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.993732,19.316813,tcp,147.32.84.170,52390.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:19.994507,19.3176,tcp,147.32.84.170,51917.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.015667,19.294462,tcp,147.32.84.170,58600.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.015809,19.294691,tcp,147.32.84.170,58603.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.281453,0.020523,udp,147.32.84.170,34447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.282665,0.000393,udp,147.32.84.170,34112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.283306,0.000786,udp,147.32.84.170,51050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.284526,19.019455,tcp,147.32.84.170,58100.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.284731,19.025394,tcp,147.32.84.170,39009.0,->,2.20.182.25,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.612085,0.000285,udp,147.32.84.170,59443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.613080,0.000325,udp,147.32.84.170,49458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.613663,0.000345,udp,147.32.84.170,52793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.616106,0.002221,udp,147.32.84.170,58759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.618232,0.000393,udp,147.32.84.170,36179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.619299,0.00034,udp,147.32.84.170,50608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.619917,0.002341,udp,147.32.84.170,38993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.620519,0.002613,udp,147.32.84.170,56265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.623393,0.00039,udp,147.32.84.170,57732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.624126,0.000265,udp,147.32.84.170,44800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:20.624787,0.000337,udp,147.32.84.170,47979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:21.707308,17.603182,tcp,147.32.84.170,41023.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:26.674586,0.000423,udp,147.32.84.170,41610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:27.980901,0.000181,udp,147.32.84.138,57442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:28.034236,0.000296,udp,147.32.85.25,35044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:31.671412,0.24737,udp,147.32.84.170,36581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:31.920179,240.172653,tcp,147.32.84.170,45401.0,->,74.125.232.195,443.0,FSPA_FSPA,0.0,0.0,38,8030,3656,4374,211.31578947368422,0.4552926525529265,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:34.032939,0.00104,udp,178.209.168.88,14721.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,333,81,252,166.5,0.24324324324324326,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:51:36.675188,0.00037,udp,147.32.84.170,51254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:36.676323,0.018256,tcp,147.32.84.170,42692.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:39.272918,3153.997803,udp,147.32.84.232,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:51:40.686539,1439.544922,udp,192.168.88.173,53195.0,->,192.168.95.255,137.0,INT,0.0,,2,184,184,0,92.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:51:42.024782,0.000342,udp,147.32.84.170,34321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:42.025681,0.000388,udp,147.32.84.170,56269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:42.027028,0.235761,tcp,147.32.84.170,43224.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:42.606717,1810.924683,udp,147.32.84.94,7103.0,->,82.227.111.156,7330.0,INT,0.0,,8,672,672,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:51:43.415628,0.000238,udp,147.32.85.25,59967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:46.674355,0.000426,udp,147.32.84.170,41719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:46.675313,0.000262,udp,147.32.84.170,59161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:51:47.032960,0.131187,udp,147.32.84.59,33556.0,<->,129.237.246.105,17257.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:51:49.687468,0.104553,tcp,147.32.82.164,59511.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,10,2395,922,1473,239.5,0.38496868475991647,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:51:50.125318,0.000348,udp,147.32.84.138,38064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:52.454600,0.000407,udp,147.32.84.134,39087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:51:52.456796,240.063904,tcp,147.32.84.134,51738.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,24,4469,2164,2305,186.20833333333334,0.4842246587603491,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:51:52.493629,0.000253,udp,147.32.84.134,56753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:51:52.494359,0.000451,udp,147.32.84.134,39315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,16,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 16:51:54.874236,0.000284,udp,147.32.84.59,56513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:51:55.830563,0.000622,udp,95.97.52.42,40033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,263,201,62,131.5,0.7642585551330798,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:51:56.092130,1152.153931,udp,140.124.62.252,9318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,835,230,605,139.16666666666666,0.2754491017964072,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:51:56.908756,0.000355,udp,147.32.84.138,48114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:00.947765,0.544199,tcp,147.32.86.50,53417.0,->,65.55.184.152,443.0,SRPA_SPA,0.0,0.0,18,9130,2912,6218,507.22222222222223,0.31894852135815993,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:52:01.030546,0.00018,udp,147.32.85.34,64893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:01.052563,0.000396,udp,147.32.85.34,57566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:04.321904,0.00032,udp,147.32.84.138,32902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:05.083821,0.00162,udp,147.32.84.138,56948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:05.798987,15.29886,udp,147.32.84.94,7103.0,->,60.241.41.84,28282.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:52:06.532404,1360.689087,udp,80.27.101.78,27640.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,820,569,251,102.5,0.6939024390243902,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:06.673489,0.000322,udp,147.32.84.170,51462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:06.674327,0.000336,udp,147.32.84.170,56200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:06.675167,0.018425,tcp,147.32.84.170,46620.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:10.588235,0.032999,udp,27.17.7.150,58535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,748,627,121,187.0,0.8382352941176471,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:10.700556,3034.29834,udp,90.231.159.207,58183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:11.020521,0.000243,udp,147.32.84.138,50708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:12.301280,0.000275,udp,147.32.84.138,42500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:14.138308,61.282688,tcp,147.32.84.165,2679.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:52:14.443337,0.000275,udp,147.32.85.25,53353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:16.450224,0.328635,tcp,147.32.84.59,49963.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1536,699,837,170.66666666666666,0.455078125,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:52:16.673864,0.000354,udp,147.32.84.170,38271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:16.675845,0.017847,tcp,147.32.84.170,54982.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:18.514057,0.165122,udp,147.32.84.229,13363.0,<->,76.108.174.141,29752.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:18.697966,0.067876,udp,147.32.84.229,13363.0,<->,95.30.241.89,30815.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:21.130119,0.0003,udp,147.32.84.138,41889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:26.370438,0.000189,tcp,194.236.225.213,18979.0,->,147.32.86.110,80.0,S_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,16,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:52:26.513143,0.056979,tcp,147.32.86.74,2084.0,->,90.183.38.22,80.0,FSPA_FSPA,0.0,0.0,12,2745,1420,1325,228.75,0.517304189435337,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:52:26.674676,0.000491,udp,147.32.84.170,57169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:29.466087,0.861144,udp,109.164.142.22,10112.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,47,37194,36432,762,791.3617021276596,0.9795128246491369,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:34.470392,0.000428,udp,147.32.86.20,63708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:34.623125,0.000211,udp,147.32.84.138,58118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:36.673915,0.000441,udp,147.32.84.170,53915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:41.496325,0.000431,udp,147.32.84.59,55436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:41.858707,0.215119,tcp,147.32.84.59,53832.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1576,695,881,197.0,0.440989847715736,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:52:43.606360,0.000379,udp,147.32.84.138,57636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:44.025996,0.000428,udp,147.32.84.170,44332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:44.027348,0.282258,tcp,147.32.84.170,43233.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:46.675552,0.018439,tcp,147.32.84.170,54986.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:47.496066,0.0,tcp,61.191.61.238,26344.0,?>,147.32.84.225,30046.0,R_,0.0,,1,60,60,0,60.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:52:49.286026,0.011261,udp,147.32.84.59,65221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,69,136,102.5,0.33658536585365856,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:49.302432,0.00179,udp,147.32.84.59,50337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:49.705351,0.000302,udp,147.32.84.59,42093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:51.458659,0.042559,icmp,147.32.84.59,8.0,<->,157.24.2.203,256.0,ECO,0.0,0.0,2,148,74,74,74.0,0.5,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:52:52.323673,0.003955,udp,89.216.225.86,56937.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3023,60,2963,755.75,0.01984783327820046,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:55.089257,1836.750854,udp,147.32.84.229,13363.0,<->,130.238.140.149,34674.0,CON,0.0,0.0,8,911,665,246,113.875,0.7299670691547749,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:56.674514,0.018035,tcp,147.32.84.170,50166.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:52:57.386371,1442.865723,udp,147.32.84.229,13363.0,<->,201.53.139.30,38675.0,CON,0.0,0.0,6,3633,571,3062,605.5,0.15717038260390861,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:52:58.322476,0.020227,udp,147.32.84.59,51858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:52:58.447199,0.000285,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,16,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 16:53:08.296057,117.059464,tcp,147.32.86.17,4502.0,->,74.125.232.209,80.0,SRPA_SPA,0.0,0.0,117,86802,13824,72978,741.8974358974359,0.15925900324877307,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:53:13.481962,0.325829,tcp,147.32.84.170,40282.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:14.298265,0.002418,udp,147.32.86.147,55326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,80,197,138.5,0.2888086642599278,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:14.995902,61.298122,tcp,147.32.84.165,2710.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:53:15.423680,302.91507,tcp,147.32.86.74,2096.0,->,90.183.38.65,993.0,SPA_SRPA,0.0,0.0,29,3560,1685,1875,122.75862068965517,0.47331460674157305,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:53:16.153176,0.000365,udp,147.32.84.138,36015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:16.674222,0.018242,tcp,147.32.84.170,40301.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:17.530520,0.000347,udp,147.32.86.20,57476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:19.290217,0.000287,udp,147.32.84.59,51144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:20.489072,37.030933,tcp,124.122.127.169,46099.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,12,720,420,300,60.0,0.5833333333333334,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:53:26.673659,0.000357,udp,147.32.84.170,42256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:26.674540,0.000313,udp,147.32.84.170,55379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:26.675592,0.019003,tcp,147.32.84.170,35191.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:30.736331,3290.580078,udp,147.32.84.229,13363.0,<->,114.40.125.108,21904.0,CON,0.0,0.0,8,714,280,434,89.25,0.39215686274509803,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:53:31.819258,0.000375,udp,147.32.84.138,42412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:32.309470,115.643715,tcp,147.32.86.168,42852.0,->,74.125.232.254,443.0,FSPA_FSPA,0.0,0.0,16,4086,3021,1065,255.375,0.7393538913362702,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:53:32.916590,15.037072,tcp,147.32.86.168,42605.0,->,178.238.38.19,80.0,FSPA_FSPA,0.0,0.0,17,5291,2855,2436,311.2352941176471,0.5395955395955396,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:53:33.039411,0.000307,udp,147.32.84.138,55286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:35.842328,0.000275,udp,147.32.84.138,59554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:36.674568,0.000322,udp,147.32.84.170,57048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:36.675643,0.018112,tcp,147.32.84.170,35192.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:37.224879,0.000178,udp,147.32.85.25,36906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:40.988583,3067.586914,udp,82.161.0.111,62048.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,735,549,186,122.5,0.746938775510204,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:53:42.949936,0.000354,udp,147.32.84.138,60081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:44.432755,15.299916,udp,147.32.84.94,7103.0,->,80.148.15.66,53081.0,INT,0.0,,4,336,336,0,84.0,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:53:45.456170,94.556282,udp,84.228.163.95,6844.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3295,199,3096,411.875,0.06039453717754173,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:53:46.027876,0.29323,tcp,147.32.84.170,43247.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:48.259573,0.000238,udp,147.32.84.138,51479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:53:48.832383,458.317963,tcp,147.32.84.59,57997.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,89,33310,16871,16439,374.2696629213483,0.5064845391774242,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:53:49.065923,3043.3479,udp,184.40.56.4,26102.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:53:56.675891,0.033549,tcp,147.32.84.170,50180.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:53:57.134164,250.1586,tcp,147.32.84.164,53858.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,55,24018,6949,17069,436.6909090909091,0.28932467316179533,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.248329,14.179862,tcp,147.32.84.59,55800.0,->,62.44.29.30,80.0,FSA_FSA,0.0,0.0,10,696,408,288,69.6,0.5862068965517241,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:53:57.368087,0.000416,udp,147.32.84.164,38704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.389176,249.903564,tcp,147.32.84.164,43517.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,23,3310,2294,1016,143.91304347826087,0.6930513595166163,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.481405,0.112102,udp,147.32.84.164,40626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.481416,0.0004,udp,147.32.84.164,56863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.484234,0.000367,udp,147.32.84.164,35100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.486008,0.107908,udp,147.32.84.164,59389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.486605,0.000319,udp,147.32.84.164,42734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.487281,0.000378,udp,147.32.84.164,51565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.518968,0.000273,udp,147.32.84.164,60003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:53:57.665465,0.01025,udp,147.32.84.164,51780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:54:00.098925,0.00044,udp,147.32.84.138,46732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:00.732835,0.000313,udp,147.32.85.34,62770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:00.763847,0.000312,udp,147.32.84.138,46410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:01.862456,0.000146,udp,147.32.84.138,49288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:02.862059,0.000248,udp,147.32.84.164,42770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:54:04.224275,0.000557,udp,212.101.17.210,43512.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:05.222736,0.000285,udp,147.32.84.170,53475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:54:06.598887,466.542664,udp,147.32.84.229,13363.0,<->,114.38.156.134,20320.0,CON,0.0,0.0,4,659,538,121,164.75,0.8163884673748103,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:06.674916,0.018213,tcp,147.32.84.170,55003.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:54:13.643300,0.000727,udp,92.78.112.148,63266.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,81,487,284.0,0.1426056338028169,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:15.863300,61.298443,tcp,147.32.84.165,2711.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:54:16.674792,0.018277,tcp,147.32.84.170,40309.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:54:24.995839,0.000279,udp,147.32.84.138,50564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:25.425966,389.066772,tcp,147.32.84.59,46625.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,37,21760,8446,13314,588.1081081081081,0.38814338235294116,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:54:27.113048,0.000292,udp,147.32.85.89,50333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:27.338566,0.0,igmp,147.32.87.24,,->,239.255.255.250,,INT,0.0,,1,60,60,0,60.0,1.0,16,,flow=Background,Background,-1 2011-08-16 16:54:28.843247,0.000689,udp,95.9.32.101,34729.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:33.211402,19.247316,udp,190.236.196.181,35964.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:35.850689,0.234945,tcp,69.228.132.130,58108.0,->,147.32.84.229,13363.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:54:36.060326,0.00038,udp,147.32.84.59,58063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:36.674052,0.000457,udp,147.32.84.170,55932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:54:38.875251,3534.32959,udp,147.32.84.229,13363.0,<->,74.84.22.149,4810.0,CON,0.0,0.0,4,687,149,538,171.75,0.21688500727802038,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:42.066086,2124.703857,udp,147.32.84.229,13363.0,<->,95.159.155.151,4237.0,CON,0.0,0.0,4,856,734,122,214.0,0.8574766355140186,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:42.728517,3134.532471,udp,141.51.40.164,46051.0,->,147.32.86.165,12114.0,INT,0.0,,18,2778,2778,0,154.33333333333334,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:54:46.673799,0.000476,udp,147.32.84.170,60807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:54:50.658992,0.000214,udp,147.32.84.138,41239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:51.383333,0.069933,udp,147.32.84.229,13363.0,<->,85.227.183.101,12413.0,CON,0.0,0.0,4,3010,60,2950,752.5,0.019933554817275746,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:54:53.794973,24.972073,tcp,147.32.86.147,46188.0,->,77.75.73.135,80.0,FSPA_FSPA,0.0,0.0,11,2304,940,1364,209.45454545454547,0.4079861111111111,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:54:55.050983,0.000271,udp,147.32.86.20,63110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:54:56.693351,0.000329,udp,147.32.84.170,51938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:55:00.482699,432.423096,tcp,147.32.84.59,46090.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,78,46108,5902,40206,591.1282051282051,0.12800381712501085,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:55:01.170904,0.000615,udp,86.212.209.29,26120.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:02.651286,0.027662,tcp,147.32.85.114,51094.0,->,77.75.73.27,80.0,FSRPA_FSPA,0.0,0.0,11,2707,764,1943,246.0909090909091,0.28223125230882895,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:55:03.383606,71.236626,tcp,147.32.85.114,51122.0,->,77.75.73.134,80.0,SRPA_FSPA,0.0,0.0,10,1474,770,704,147.4,0.5223880597014925,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:55:03.838763,0.000304,udp,147.32.85.114,61247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:07.241419,0.334455,tcp,147.32.86.20,1965.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,32346,1089,31257,788.9268292682926,0.033667223149693934,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:55:09.025221,0.000393,udp,147.32.84.138,49842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:10.491074,0.000416,udp,147.32.86.20,51246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:11.297903,16.018126,tcp,147.32.84.59,50190.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,308,186,122,61.6,0.6038961038961039,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:55:12.454669,0.000448,udp,147.32.84.25,35605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:15.947200,3573.560791,udp,147.32.84.229,13363.0,<->,86.52.24.122,15526.0,CON,0.0,0.0,17,3099,1652,1447,182.2941176470588,0.5330751855437238,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:16.731495,61.298069,tcp,147.32.84.165,2712.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:55:17.288453,0.000852,udp,70.162.42.143,6084.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,77,493,285.0,0.13508771929824562,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:18.169489,19.192448,udp,147.32.84.229,13363.0,<->,97.97.68.85,5711.0,CON,0.0,0.0,10,2098,1177,921,209.8,0.5610104861773118,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:19.454171,0.000266,udp,147.32.84.138,45538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:21.685238,1016.159302,arp,147.32.87.36,,who,147.32.87.1,,CON,,,6,360,180,180,60.0,0.5,16,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 16:55:22.240356,0.000351,udp,147.32.84.138,39874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:22.766075,0.923636,tcp,147.32.84.59,63099.0,->,74.125.39.109,995.0,FSPA_FSPA,0.0,0.0,30,4340,1260,3080,144.66666666666666,0.2903225806451613,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:55:28.798940,0.069362,udp,147.32.84.59,34059.0,<->,93.123.127.91,62036.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:55:31.880066,0.000403,udp,147.32.84.138,34829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:33.364207,0.256924,tcp,147.32.86.44,4351.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,10,2426,1523,903,242.6,0.6277823577906018,16,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:55:35.047298,0.000211,udp,147.32.84.138,47724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:36.674626,0.017619,tcp,147.32.84.170,34197.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:55:43.379239,0.14182,tcp,147.32.84.123,54878.0,->,2.16.34.124,80.0,FSPA_FSPA,0.0,0.0,11,1665,973,692,151.36363636363637,0.5843843843843843,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:55:44.442894,0.166849,tcp,147.32.84.59,58013.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,17,2678,1594,1084,157.52941176470588,0.5952203136669156,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:55:46.230806,210.197311,udp,213.180.37.74,36649.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:47.860514,0.000363,udp,147.32.84.164,46109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.860599,0.000399,udp,147.32.84.164,59520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.860747,0.000477,udp,147.32.84.164,39411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.861106,0.000366,udp,147.32.84.164,56730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.861228,0.010781,udp,147.32.84.164,34568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,87,268,177.5,0.24507042253521127,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.861847,0.248455,udp,147.32.84.164,43355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.862420,332.394592,tcp,147.32.84.164,45479.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,43,4781,2655,2126,111.18604651162791,0.5553231541518511,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.862478,646.92572,tcp,147.32.84.164,37007.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,73,8285,5104,3181,113.4931506849315,0.616053108026554,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.862520,247.252701,tcp,147.32.84.164,37008.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:47.883356,247.230881,tcp,147.32.84.164,42777.0,->,74.125.232.223,443.0,FSPA_FSRPA,0.0,0.0,28,2620,1464,1156,93.57142857142857,0.5587786259541985,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:55:49.025244,0.000286,udp,147.32.84.170,53825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:55:49.386211,1098.668823,udp,46.126.240.72,7404.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,60,49382,762,48620,823.0333333333333,0.015430723745494309,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:52.922703,0.000233,udp,147.32.84.138,60670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:53.965214,0.000689,udp,201.201.154.0,64166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,76,480,278.0,0.1366906474820144,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:54.623790,0.000393,udp,147.32.85.114,64988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:56.673397,0.000537,udp,147.32.84.170,48859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:55:57.030895,2940.976074,udp,126.60.215.78,31956.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3261,235,3026,543.5,0.07206378411530205,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:57.134211,0.001897,udp,212.93.105.47,21411.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,484,60,272.0,0.8897058823529411,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:55:58.092240,0.000223,udp,147.32.84.138,59332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:58.106592,0.000216,udp,147.32.84.138,56940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:55:59.706071,2.69109,tcp,41.251.181.68,50290.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1520,728,792,76.0,0.4789473684210526,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:56:00.650275,0.000374,udp,147.32.86.147,49152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:01.361846,0.00019,udp,147.32.84.138,58237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:01.462260,0.000252,udp,147.32.85.34,61765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:01.487697,0.000311,udp,147.32.85.34,63955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:01.491278,0.000237,udp,147.32.85.34,59410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:02.537634,16.791161,tcp,147.32.84.170,47453.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.537647,16.791151,tcp,147.32.84.170,47454.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.537772,16.791466,tcp,147.32.84.170,47455.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.538195,0.000227,udp,147.32.84.170,33857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.539777,16.788023,tcp,147.32.84.170,42054.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.780309,0.000427,udp,147.32.84.170,56224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.781570,0.000355,udp,147.32.84.170,40627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.782343,0.000356,udp,147.32.84.170,51865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.784956,0.246626,udp,147.32.84.170,45649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.787937,0.000271,udp,147.32.84.170,55273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.788107,0.000313,udp,147.32.84.170,56477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.788475,0.000365,udp,147.32.84.170,36326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.788587,0.000379,udp,147.32.84.170,57429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.789778,0.000279,udp,147.32.84.170,38180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.789871,0.000412,udp,147.32.84.170,35067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:02.970113,0.083553,udp,147.32.84.59,42054.0,<->,80.116.227.109,54390.0,CON,0.0,0.0,2,539,74,465,269.5,0.137291280148423,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:56:02.971943,3158.657471,udp,147.32.84.59,42054.0,<->,77.127.141.144,56275.0,CON,0.0,0.0,4,275,152,123,68.75,0.5527272727272727,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:56:03.050663,0.000246,udp,147.32.84.170,57613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:03.056582,0.001003,udp,147.32.84.170,52781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:03.099361,600.025146,tcp,147.32.84.130,42831.0,->,80.94.54.32,5269.0,FSPA_FSPA,0.0,0.0,31,7949,3473,4476,256.4193548387097,0.4369103031827903,16,0,flow=Background-TCP-Established,Background,-1 2011-08-16 16:56:03.212338,0.377825,tcp,147.32.84.59,56685.0,->,204.9.163.158,80.0,FSPA_FSPA,0.0,0.0,10,1214,517,697,121.4,0.4258649093904448,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:56:03.345519,3459.964844,udp,147.32.84.59,42054.0,->,98.118.44.183,34136.0,INT,0.0,,17,2516,2516,0,148.0,1.0,16,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 16:56:03.481194,0.000255,udp,147.32.84.170,36214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:03.655168,0.335727,udp,147.32.84.170,44633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:04.114955,0.168706,udp,147.32.84.170,51762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:04.132275,0.000208,udp,147.32.84.170,55697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:04.132845,0.037572,udp,147.32.84.170,56738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,79,283,181.0,0.21823204419889503,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:04.144507,0.00021,udp,147.32.84.170,55028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,71,123,97.0,0.36597938144329895,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:05.172334,5.996329,icmp,85.53.132.96,259.0,->,147.32.84.229,21813.0,URH,0.0,,3,546,546,0,182.0,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:56:06.672690,0.000425,udp,147.32.84.170,52770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:08.780025,0.819785,tcp,147.32.84.170,34410.0,->,128.2.217.13,80.0,FSRPA_SA,0.0,0.0,21,14848,1042,13806,707.047619047619,0.07017780172413793,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:09.015016,0.000276,udp,147.32.85.25,37422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:09.805148,0.170918,tcp,147.32.86.20,2007.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,63,59083,1393,57690,937.8253968253969,0.023577001844862312,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:56:13.291699,246.053726,tcp,147.32.84.170,37001.0,->,74.125.232.212,80.0,FSPA_FSRPA,0.0,0.0,27,8217,2263,5954,304.3333333333333,0.2754046488986248,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.662188,0.000247,udp,147.32.84.170,48809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,78,122,100.0,0.39,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.716516,0.001606,udp,147.32.84.170,53403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,76,209,142.5,0.26666666666666666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.720931,0.000271,udp,147.32.84.170,38460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.742533,0.000345,udp,147.32.84.170,44074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,79,285,182.0,0.21703296703296704,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.743670,0.05082,udp,147.32.84.170,36891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:13.794972,0.00041,udp,147.32.84.170,39156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,361,72,289,180.5,0.1994459833795014,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:14.508570,0.000176,udp,147.32.84.138,59929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:15.829098,0.000446,udp,147.32.85.34,59079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:16.672918,0.000429,udp,147.32.84.170,35418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:16.674997,0.017973,tcp,147.32.84.170,33463.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:17.290747,0.000628,udp,24.138.131.214,2660.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:56:17.598903,61.299633,tcp,147.32.84.165,2713.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:56:17.983894,0.00025,udp,147.32.84.138,46485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:20.017381,0.233547,tcp,147.32.84.170,46162.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:20.759308,0.298277,udp,213.151.95.134,56092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,870,722,148,217.5,0.8298850574712644,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:56:22.337816,0.00047,udp,147.32.86.147,57898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:24.690229,0.000326,udp,147.32.85.25,35962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:25.499745,0.000286,udp,147.32.84.181,58337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,77,152,114.5,0.33624454148471616,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:27.090684,0.000144,udp,147.32.84.138,53033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:33.006841,1548.354126,udp,147.32.84.229,13363.0,<->,24.44.76.201,40303.0,CON,0.0,0.0,12,796,412,384,66.33333333333333,0.5175879396984925,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:56:33.497301,0.000203,udp,147.32.84.5,49500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:34.821862,1444.137085,tcp,147.32.87.5,524.0,?>,147.32.85.37,2727.0,FPA_,0.0,,14,904,904,0,64.57142857142857,1.0,16,0,flow=Background,Background,-1 2011-08-16 16:56:36.673764,0.000386,udp,147.32.84.170,52610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:46.672827,0.000404,udp,147.32.84.170,43118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:49.274170,0.047242,tcp,147.32.84.170,51807.0,->,74.125.232.207,80.0,FSRPA_FSPA,0.0,0.0,10,2289,1611,678,228.9,0.7038007863695938,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:49.498483,0.890567,tcp,147.32.84.170,51808.0,->,74.125.232.207,80.0,FSRPA_FSPA,0.0,0.0,17,6046,4322,1724,355.6470588235294,0.71485279523652,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:50.699482,18.633421,tcp,147.32.84.170,47478.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:50.699540,18.633396,tcp,147.32.84.170,47479.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:50.699710,18.757389,tcp,147.32.84.170,47080.0,->,209.237.151.18,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.012863,0.23181,tcp,147.32.84.170,46177.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.205172,0.000276,udp,147.32.84.170,45630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.205440,0.022941,udp,147.32.84.170,35214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,77,125,101.0,0.3811881188118812,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.205857,0.00131,udp,147.32.84.170,35370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.229331,0.022731,udp,147.32.84.170,57171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,77,169,123.0,0.3130081300813008,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.522643,17.817984,tcp,147.32.84.170,50657.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.523356,0.000523,udp,147.32.84.170,41736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,78,244,161.0,0.2422360248447205,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.523569,0.000431,udp,147.32.84.170,41204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,85,203,144.0,0.2951388888888889,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.524350,0.000371,udp,147.32.84.170,32861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,85,270,177.5,0.23943661971830985,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.525365,0.000376,udp,147.32.84.170,55984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.525474,17.815376,tcp,147.32.84.170,55909.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.525478,17.815414,tcp,147.32.84.170,55910.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.525564,17.815283,tcp,147.32.84.170,55911.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.525573,17.815329,tcp,147.32.84.170,55912.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.693252,0.07142,udp,147.32.84.170,51734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,94,176,135.0,0.34814814814814815,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:51.765056,0.024098,udp,147.32.84.170,47204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,94,179,136.5,0.3443223443223443,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.164673,0.000498,udp,147.32.84.170,59535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.164787,0.111609,udp,147.32.84.170,55711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,69,133,101.0,0.3415841584158416,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.167954,0.000222,udp,147.32.84.170,50348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.178826,0.000205,udp,147.32.84.170,56057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.181283,0.000228,udp,147.32.84.170,53901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.184106,0.268789,udp,147.32.84.170,60800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,82,124,103.0,0.39805825242718446,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.277465,0.000334,udp,147.32.84.170,44482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,69,216,142.5,0.24210526315789474,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.287589,0.00029,udp,147.32.84.170,57102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.288761,0.000296,udp,147.32.84.170,33601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.289407,0.000344,udp,147.32.84.170,54783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.292038,0.000389,udp,147.32.84.170,59358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.294857,0.00026,udp,147.32.84.170,55143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.296561,0.000226,udp,147.32.84.170,37519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.297227,0.000405,udp,147.32.84.170,43327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.375115,0.000283,udp,147.32.84.170,44209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,77,122,99.5,0.3869346733668342,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.398263,0.186081,udp,147.32.84.170,47884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,80,135,107.5,0.37209302325581395,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.453327,0.000258,udp,147.32.84.170,41386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,82,124,103.0,0.39805825242718446,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.488556,0.00034,udp,147.32.84.170,45693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.494511,0.000186,udp,147.32.84.170,41686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.495121,0.000261,udp,147.32.84.170,50681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.496800,0.000324,udp,147.32.84.170,53637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.505120,0.000248,udp,147.32.84.170,34358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.750133,0.000288,udp,147.32.84.170,54059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.750815,0.000182,udp,147.32.84.170,43131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.751393,0.000327,udp,147.32.84.170,52463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,83,211,147.0,0.282312925170068,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:52.866862,0.03301,udp,147.32.84.170,40744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,76,206,141.0,0.2695035460992908,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.058240,0.016691,udp,147.32.84.170,48754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,77,222,149.5,0.25752508361204013,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.075864,0.200413,udp,147.32.84.170,36656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,74,161,117.5,0.3148936170212766,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.217416,0.200398,udp,147.32.84.170,56703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.274331,0.000235,udp,147.32.84.59,43771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,78,223,150.5,0.2591362126245847,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:56:53.276694,0.018176,udp,147.32.84.170,45801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,74,194,134.0,0.27611940298507465,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.418757,0.0881,udp,147.32.84.170,57953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,70,178,124.0,0.28225806451612906,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:53.549539,0.181847,udp,147.32.84.170,46935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,72,272,172.0,0.20930232558139536,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:56:58.138407,132.40715,tcp,147.32.84.59,55879.0,->,77.93.200.36,80.0,SPA_SRPA,0.0,0.0,13,7744,801,6943,595.6923076923077,0.1034349173553719,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:56:59.599924,0.000904,udp,62.53.164.158,40422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,80,489,284.5,0.140597539543058,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:01.858819,3202.963867,udp,46.118.73.214,55159.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,732,546,186,122.0,0.7459016393442623,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:04.163228,3038.293701,udp,88.216.93.50,3870.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:04.673369,0.251012,udp,217.118.66.102,25122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,300,166,134,75.0,0.5533333333333333,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:04.716313,0.000783,udp,122.30.90.44,11361.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,582,76,506,291.0,0.13058419243986255,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:05.288427,0.073661,udp,147.32.84.229,13363.0,<->,109.229.149.195,42511.0,CON,0.0,0.0,2,259,179,80,129.5,0.6911196911196911,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:05.662177,0.0003,udp,147.32.85.25,44040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:07.108434,0.000349,udp,147.32.84.170,40422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:07.109117,0.000335,udp,147.32.84.170,42852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:07.113099,0.000246,udp,147.32.84.170,58721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:07.115009,532.252991,tcp,147.32.84.170,40053.0,->,74.125.232.197,80.0,FSPA_FSPA,0.0,0.0,61,20421,15014,5407,334.7704918032787,0.7352235443905784,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:12.994169,0.000361,udp,147.32.84.138,50830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:13.751542,0.000169,udp,147.32.84.138,37791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:15.961727,0.000323,udp,147.32.85.25,34155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:18.467745,61.299042,tcp,147.32.84.165,2714.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:57:18.494099,0.000316,udp,147.32.84.138,43789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:18.772698,0.246785,udp,147.32.84.164,44166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:57:22.028388,0.226618,tcp,147.32.84.170,46205.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:22.195108,0.000416,udp,147.32.84.59,51771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:24.163891,0.000218,udp,147.32.84.138,41122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:26.343325,0.000567,udp,200.75.80.88,65512.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,16,1,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:26.474224,0.000337,udp,147.32.84.164,34117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:57:26.474538,0.00014,udp,147.32.84.164,51883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:57:28.356387,6e-06,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,16,1,flow=Background,Background,-1 2011-08-16 16:57:29.134578,0.00089,udp,92.145.47.236,34185.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,617,84,533,308.5,0.13614262560777957,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:29.690409,0.00026,udp,147.32.84.138,39149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:29.804978,0.001113,udp,90.212.113.225,60072.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,311,66,245,155.5,0.21221864951768488,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:34.679924,0.000294,udp,147.32.85.26,61115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,84,193,138.5,0.30324909747292417,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:36.676533,0.018599,tcp,147.32.84.170,34265.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:37.131274,0.073202,tcp,147.32.84.59,42405.0,->,62.44.29.56,110.0,FSPA_FSPA,0.0,0.0,22,1624,781,843,73.81818181818181,0.48091133004926107,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:57:39.042857,2461.656738,udp,147.32.84.229,13363.0,<->,24.250.241.41,19199.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:41.539060,0.000275,udp,147.32.86.50,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:42.027047,114.747879,tcp,147.32.84.59,63108.0,->,67.221.35.146,443.0,FSPA_FSRPA,0.0,0.0,55,40575,12246,28329,737.7272727272727,0.30181146025878003,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:57:43.144807,0.000207,udp,147.32.84.138,55377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:43.919594,0.000649,udp,78.92.172.193,58478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:57:45.789213,0.523755,tcp,194.39.218.10,41604.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1630,849,781,163.0,0.5208588957055215,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:57:47.650155,29.305489,tcp,147.32.84.59,55898.0,->,88.86.105.115,80.0,FSPA_FSPA,0.0,0.0,125,113395,14144,99251,907.16,0.12473213104634243,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:57:49.555206,0.000421,udp,147.32.84.138,50555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:51.997364,0.000237,udp,147.32.84.138,60507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:57:53.020655,0.000426,udp,147.32.84.170,44565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:53.022060,0.221487,tcp,147.32.84.170,46209.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:57:54.922386,9.099124,tcp,147.32.84.59,52435.0,->,217.198.115.56,80.0,FSPA_FSPA,0.0,0.0,19,2495,1642,853,131.31578947368422,0.6581162324649299,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:57:56.114509,0.000402,udp,147.32.84.164,47621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:58:02.172895,3105.186035,udp,147.32.84.229,13363.0,<->,188.242.48.222,12782.0,CON,0.0,0.0,8,964,716,248,120.5,0.7427385892116183,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:02.654658,2408.731201,udp,98.167.198.23,47949.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,589,220,369,98.16666666666667,0.3735144312393888,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:04.293489,1.094684,udp,49.98.9.6,49038.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,675,554,121,168.75,0.8207407407407408,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:06.580425,3396.931396,udp,61.225.3.2,63783.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:06.673807,0.000398,udp,147.32.84.170,33217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:06.674724,0.000242,udp,147.32.84.170,57368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:08.845593,0.003343,udp,147.32.84.59,54121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:08.852064,0.000351,udp,147.32.84.59,37819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:08.934161,50.039852,tcp,147.32.84.59,57327.0,->,194.79.52.98,80.0,SPA_FSPA,0.0,0.0,8,2144,905,1239,268.0,0.4221082089552239,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:58:09.579857,0.000184,udp,147.32.84.138,37897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:10.311495,0.000834,udp,88.18.58.116,6024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,80,482,281.0,0.1423487544483986,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:11.817556,0.000716,udp,72.51.87.71,7124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:13.418831,0.308847,tcp,147.32.84.170,42727.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:13.908905,0.277462,tcp,147.32.84.170,49748.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:14.075508,240.049347,tcp,147.32.84.170,38379.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:14.076722,240.048355,tcp,147.32.84.170,38382.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:14.372143,0.000169,udp,147.32.84.138,45645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:15.774018,173.813599,udp,149.13.32.130,33033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:16.677087,0.000286,udp,147.32.84.170,43336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:17.462732,0.001985,udp,147.32.84.59,43010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:19.336062,61.282444,tcp,147.32.84.165,2715.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:58:20.092496,0.000211,udp,147.32.84.138,44917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:23.017272,0.000287,udp,147.32.84.170,48714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:25.736416,3179.937744,udp,89.252.229.89,37432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,431,225,206,71.83333333333333,0.5220417633410673,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:26.677831,0.018363,tcp,147.32.84.170,41055.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:28.748719,0.311072,tcp,147.32.86.20,2103.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,45,35613,1211,34402,791.4,0.03400443658214697,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:58:28.788738,0.187906,tcp,147.32.86.141,2451.0,->,217.163.21.41,80.0,FSPA_FSPA,0.0,0.0,10,1412,693,719,141.2,0.49079320113314445,16,1,flow=Background-TCP-Established,Background,-1 2011-08-16 16:58:28.945950,0.000308,udp,147.32.85.25,48966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:31.134365,0.013384,tcp,147.32.84.59,49256.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,24,22337,1299,21038,930.7083333333334,0.05815463132918476,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:58:31.889647,0.00644,tcp,147.32.84.59,49267.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,3495,1085,2410,388.3333333333333,0.3104434907010014,16,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:58:33.205722,0.000202,udp,147.32.85.114,56179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:35.677408,0.102514,udp,147.32.84.59,60528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:58:46.676936,0.000391,udp,147.32.84.170,45526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:46.677892,0.018325,tcp,147.32.84.170,43691.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:58:46.823405,569.478516,udp,221.83.176.223,34223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,859,678,181,143.16666666666666,0.789289871944121,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:53.377382,0.214609,udp,193.2.48.135,30054.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,171,73,122.0,0.7008196721311475,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:55.137086,1690.144043,udp,68.2.41.213,13038.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,406,168,238,101.5,0.41379310344827586,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:58:58.896641,0.000321,udp,147.32.84.164,50378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,16,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 16:59:01.547667,0.0006,udp,62.29.108.155,52766.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:06.275974,0.000209,udp,147.32.84.138,43338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:06.460154,7.989245,udp,147.32.87.48,3351.0,->,147.32.86.251,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,16,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:59:13.089940,115.659691,tcp,147.32.84.59,43743.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,22,9389,7077,2312,426.77272727272725,0.7537543934391309,16,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 16:59:16.232953,0.000261,udp,147.32.84.188,35603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:16.675799,0.000463,udp,147.32.84.170,58881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:59:16.677354,0.01841,tcp,147.32.84.170,39580.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:59:20.193336,61.283386,tcp,147.32.84.165,2716.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,16,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 16:59:20.377948,0.000379,udp,147.32.84.138,51247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:25.021573,0.000274,udp,147.32.84.170,59482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:59:30.498474,0.000318,udp,147.32.86.20,63144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:31.651296,0.000593,udp,14.222.144.16,34000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:32.497373,0.00024,udp,147.32.84.138,41049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:34.132860,0.000595,udp,98.14.145.182,1024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:35.243931,0.190632,udp,147.32.84.59,51127.0,<->,76.87.15.216,55661.0,CON,0.0,0.0,2,556,73,483,278.0,0.13129496402877697,16,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 16:59:36.675987,0.018224,tcp,147.32.84.170,34293.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:59:36.752475,0.015813,tcp,147.32.85.74,34525.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,16,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 16:59:38.622143,3154.381348,udp,147.32.84.229,13363.0,->,24.229.151.253,63776.0,INT,0.0,,15,2784,2784,0,185.6,1.0,16,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 16:59:46.346136,2568.898438,udp,109.80.62.221,41788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2520,1892,628,140.0,0.7507936507936508,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:46.677981,0.01856,tcp,147.32.84.170,33538.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,16,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 16:59:47.347824,0.002155,udp,178.122.143.128,53858.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:48.348183,0.001951,udp,77.221.77.156,54242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 16:59:48.856292,0.000231,udp,147.32.84.138,33777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:51.952636,0.000404,udp,147.32.84.59,59525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,16,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 16:59:52.430935,0.000714,udp,186.210.174.28,61794.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,16,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:00.126465,0.000765,udp,183.89.1.68,13322.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:00.949499,0.000297,udp,147.32.85.34,49917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:01.295894,0.000281,udp,147.32.87.36,33366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,17,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 17:00:01.376047,0.000321,udp,147.32.86.20,64873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:02.148956,0.000626,udp,178.49.150.109,34881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:05.339747,601.286743,udp,109.149.64.124,38795.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,948,141,807,237.0,0.14873417721518986,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:17.629065,6.02093,udp,147.32.84.229,13363.0,->,178.210.15.28,2094.0,INT,0.0,,3,549,549,0,183.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:00:20.275124,0.000911,udp,46.70.34.115,10012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,579,72,507,289.5,0.12435233160621761,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:21.051253,61.28326,tcp,147.32.84.165,2717.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:00:21.574101,0.024767,udp,147.32.84.59,51873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,80,314,197.0,0.20304568527918782,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:26.676456,0.000328,udp,147.32.84.170,56156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:26.677710,0.018674,tcp,147.32.84.170,39589.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:27.029222,0.000285,udp,147.32.84.170,56454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:27.796529,0.000164,udp,147.32.85.25,34896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:28.148861,0.000124,udp,147.32.84.138,36350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:29.171994,3488.262207,udp,178.75.221.45,37420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,536,266,270,67.0,0.4962686567164179,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:31.079025,0.000347,udp,147.32.84.59,55754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,77,194,135.5,0.28413284132841327,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:33.068718,1764.520508,tcp,90.194.76.167,58000.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,294,26358,15050,11308,89.65306122448979,0.5709841414371348,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:00:33.671762,0.00031,udp,147.32.84.138,36658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:34.481663,0.000509,udp,147.32.85.76,60787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:34.718026,150.198929,tcp,147.32.85.76,2099.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,15,4557,1284,3273,303.8,0.2817643186306781,17,1,flow=Background-google-analytics4,Background,-1 2011-08-16 17:00:34.718949,36.125362,tcp,147.32.85.76,2101.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,22,10450,1811,8639,475.0,0.17330143540669857,17,1,flow=Background-google-analytics5,Background,-1 2011-08-16 17:00:36.265702,0.000278,udp,147.32.84.138,51227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:37.884340,0.000199,udp,147.32.85.25,60920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:43.191884,0.000382,udp,147.32.85.25,59542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:46.673984,0.000339,udp,147.32.84.170,45321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:46.674636,0.000334,udp,147.32.84.170,58194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:54.689941,3088.02832,udp,71.174.186.67,35028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:56.906571,0.00017,udp,147.32.84.138,41399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:00:58.023770,0.242535,tcp,147.32.84.170,60574.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:00:59.293399,19.645941,tcp,147.32.84.189,46952.0,->,77.75.73.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:00:59.308366,0.000816,udp,108.28.179.175,25906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,73,472,272.5,0.13394495412844037,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:00:59.518356,1309.940918,tcp,178.148.11.6,44139.0,->,147.32.84.171,6881.0,FSPA_FSPA,0.0,0.0,31965,32607496,744352,31863144,1020.0999843578915,0.02282763448012077,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:01:05.311276,0.147721,udp,147.32.84.59,50662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:07.465758,51.481388,tcp,147.32.84.189,38219.0,->,2.21.111.139,80.0,FSPA_FSPA,0.0,0.0,11,1474,872,602,134.0,0.5915875169606513,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:01:08.354186,0.015801,udp,147.32.84.189,37327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:09.936713,0.000273,udp,147.32.84.138,36181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:09.943564,0.000273,udp,147.32.84.138,56582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:09.995535,1.115226,tcp,147.32.85.76,2162.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,15,8317,1462,6855,554.4666666666667,0.17578453769388,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:01:11.738986,0.000457,udp,147.32.84.138,41037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:13.050029,0.083316,udp,147.32.84.59,51127.0,<->,81.3.170.127,47327.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:01:13.130418,7.473311,tcp,147.32.85.114,51303.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,248,126,122,62.0,0.5080645161290323,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:01:14.134218,0.000276,udp,147.32.84.138,36624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:15.115747,54.173264,udp,146.115.38.3,4726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,532,292,240,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:16.676765,0.000271,udp,147.32.84.170,36446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:01:20.075894,0.000265,udp,147.32.84.138,35516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:21.065621,0.000308,udp,147.32.84.171,39993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,85,158,121.5,0.3497942386831276,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:21.909532,61.281986,tcp,147.32.84.165,2718.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:01:25.119855,0.000374,udp,147.32.84.138,43344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:26.676101,0.000408,udp,147.32.84.170,54893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:01:30.291223,0.000349,udp,147.32.84.170,41937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:01:32.439095,0.020518,udp,147.32.84.59,59425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,64,133,98.5,0.3248730964467005,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:33.028687,0.000852,udp,111.217.106.15,41299.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,591,76,515,295.5,0.12859560067681894,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:33.758544,0.558555,tcp,188.175.113.50,21214.0,->,147.32.84.36,80.0,SRPA_FSPA,0.0,0.0,12,2645,1538,1107,220.41666666666666,0.5814744801512287,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:01:35.349069,0.000175,udp,147.32.86.77,48308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:36.678085,0.018068,tcp,147.32.84.170,42932.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:01:38.594827,0.364258,udp,147.32.84.229,13363.0,<->,60.249.27.217,44879.0,CON,0.0,0.0,2,1534,198,1336,767.0,0.1290743155149935,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:40.505102,0.000305,udp,147.32.86.20,63155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:41.632509,0.159837,udp,147.32.84.229,13363.0,<->,71.62.6.63,62917.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:42.017540,0.150142,udp,147.32.84.229,13363.0,<->,98.209.195.134,25675.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:45.495270,3279.318604,udp,212.50.0.56,30496.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3300,210,3090,412.5,0.06363636363636363,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:46.124878,3047.980225,udp,173.48.45.50,39906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:46.675892,0.000407,udp,147.32.84.170,37825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:01:48.317225,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,4581.0,URP,0.0,,1,70,70,0,70.0,1.0,17,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:01:48.430867,1241.934692,udp,147.32.84.94,7103.0,->,88.153.152.190,7167.0,INT,0.0,,8,672,672,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:01:51.208089,10.675674,tcp,147.32.84.59,55108.0,->,195.113.232.88,80.0,FSRPA_SPA,0.0,0.0,31,20662,1960,18702,666.516129032258,0.09486012970670797,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:01:51.221145,10.661996,tcp,147.32.84.59,55111.0,->,195.113.232.88,80.0,FSRPA_SPA,0.0,0.0,35,24394,2084,22310,696.9714285714285,0.08543084365007789,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:01:51.519336,0.000659,udp,189.19.7.219,18812.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:52.141972,0.000319,udp,147.32.84.138,34857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:52.289331,0.000363,udp,147.32.84.189,53603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:52.435803,1713.319336,udp,147.32.84.229,13363.0,<->,184.161.33.94,3772.0,CON,0.0,0.0,16,1860,994,866,116.25,0.5344086021505376,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:53.390347,0.041534,udp,147.32.84.59,38035.0,<->,149.5.45.254,43037.0,CON,0.0,0.0,2,649,74,575,324.5,0.1140215716486903,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:01:54.430978,0.000204,udp,147.32.84.138,46942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:55.679932,0.001332,udp,147.32.84.59,39342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,84,242,163.0,0.25766871165644173,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:01:55.879865,0.000817,udp,186.146.12.235,1028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:56.639415,0.000859,udp,121.108.2.83,13537.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,307,64,243,153.5,0.20846905537459284,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:01:58.640365,0.043301,tcp,147.32.84.59,40963.0,->,217.198.115.56,60132.0,FSA_FSPA,0.0,0.0,8,796,272,524,99.5,0.3417085427135678,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:02:00.657814,0.000267,udp,147.32.85.34,55381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:00.707582,0.000217,udp,147.32.85.34,57889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:02.756149,0.166941,udp,147.32.84.189,47081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:05.081020,0.000378,udp,147.32.86.192,53505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:05.893450,0.000345,udp,147.32.84.138,55294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:06.676778,0.000394,udp,147.32.84.170,51653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:06.677939,0.018257,tcp,147.32.84.170,42936.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:10.349601,2375.150879,udp,79.119.231.216,52733.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,726,540,186,121.0,0.743801652892562,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:02:13.006704,0.972142,tcp,147.32.86.20,2258.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,105,106591,1766,104825,1015.152380952381,0.016568002927076393,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:02:14.064583,0.563896,tcp,147.32.84.171,39526.0,->,91.121.11.190,51899.0,FSPA_FSPA,0.0,0.0,12,1518,596,922,126.5,0.3926218708827404,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:02:16.677694,0.018261,tcp,147.32.84.170,42937.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:17.533020,0.000212,udp,147.32.85.25,45368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:22.766816,61.282997,tcp,147.32.84.165,2719.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:02:24.933543,0.000298,udp,147.32.84.138,36699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:25.343351,2975.457764,udp,68.228.182.139,54890.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1575,1203,372,131.25,0.7638095238095238,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:02:26.077258,0.000291,udp,147.32.84.138,37093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:26.676535,0.000465,udp,147.32.84.170,54510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:27.088279,0.000255,udp,147.32.84.138,50195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:28.412946,5.767226,tcp,147.32.86.141,2473.0,->,94.100.187.194,80.0,SRPA_FSPA,0.0,0.0,10,1600,779,821,160.0,0.486875,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:02:31.026113,0.000344,udp,147.32.84.170,32939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:31.026977,0.000401,udp,147.32.84.170,47117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:31.333393,0.007354,udp,147.32.84.164,51052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.336966,0.000785,udp,147.32.84.164,58571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.339377,0.000561,udp,147.32.84.164,44428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.343805,165.752686,tcp,147.32.84.164,38601.0,->,80.250.15.41,80.0,SPA_SRPA,0.0,0.0,78,60555,5984,54571,776.3461538461538,0.09881925522252498,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.343808,0.000366,udp,147.32.84.164,34089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.343816,10.004224,tcp,147.32.84.164,38603.0,->,80.250.15.41,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.344523,0.000306,udp,147.32.84.164,52494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.344990,0.000334,udp,147.32.84.164,58468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.345005,20.007818,tcp,147.32.84.164,39713.0,->,80.250.15.9,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.358820,19.998451,tcp,147.32.84.164,51521.0,->,209.85.148.96,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.459364,0.000275,udp,147.32.84.164,58556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.467342,19.888577,tcp,147.32.84.164,33802.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.467403,19.888603,tcp,147.32.84.164,33804.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.467653,279.90567,tcp,147.32.84.164,51245.0,->,209.85.148.147,80.0,FSPA_FSPA,0.0,0.0,137,81057,13960,67097,591.6569343065694,0.17222448400508283,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.467925,0.000606,udp,147.32.84.164,48948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.779074,0.000372,udp,147.32.84.164,39700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.779622,0.000475,udp,147.32.84.164,57706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.780311,0.000241,udp,147.32.84.164,44933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.780957,0.000405,udp,147.32.84.164,42460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.781369,0.000325,udp,147.32.84.164,33877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.782326,0.246123,udp,147.32.84.164,43967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.783020,0.000238,udp,147.32.84.164,33539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.783596,0.000555,udp,147.32.84.164,55261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.785302,0.000236,udp,147.32.84.164,55111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.785824,0.000435,udp,147.32.84.164,43550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:31.787459,0.000303,udp,147.32.84.164,47296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:32.285536,0.000433,udp,147.32.84.25,47397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:33.526342,0.000307,udp,147.32.84.164,51082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.516755,0.004008,udp,147.32.84.164,45980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.524215,0.000227,udp,147.32.84.164,60733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.524864,0.037411,udp,147.32.84.164,34515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.562792,0.036149,udp,147.32.84.164,47714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,70,166,118.0,0.2966101694915254,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.583960,0.002203,udp,147.32.84.164,33360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,69,167,118.0,0.2923728813559322,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.586602,0.210729,udp,147.32.84.164,50746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,78,252,165.0,0.23636363636363636,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:34.965928,0.000193,udp,147.32.84.164,33765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,182,66,116,91.0,0.3626373626373626,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.006555,16.376734,tcp,147.32.84.164,47742.0,->,195.198.34.30,80.0,FSA_FSA,0.0,0.0,7,434,254,180,62.0,0.5852534562211982,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.081190,0.02856,udp,147.32.84.164,42687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.147580,303.082825,tcp,147.32.84.164,39746.0,->,195.198.34.30,443.0,FSRPA_FSPA,0.0,0.0,34,6426,1578,4848,189.0,0.24556489262371614,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.147594,34.468166,tcp,147.32.84.164,39747.0,->,195.198.34.30,443.0,FSRPA_FSPA,0.0,0.0,55,15633,3206,12427,284.23636363636365,0.20507899955222925,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.381391,0.456118,udp,147.32.84.164,36630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,74,173,123.5,0.29959514170040485,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.394771,0.115114,udp,147.32.84.164,35012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.395122,0.000388,udp,147.32.84.164,38689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.395134,0.000461,udp,147.32.84.164,32999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.395969,0.000365,udp,147.32.84.164,44012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.511171,0.104366,udp,147.32.84.164,53898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,76,153,114.5,0.3318777292576419,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.615942,15.845613,tcp,147.32.84.164,43676.0,->,74.113.233.133,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.721555,0.020688,udp,147.32.84.164,41317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.721559,0.220517,udp,147.32.84.164,41724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,85,157,121.0,0.3512396694214876,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.742647,0.00025,udp,147.32.84.164,40737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.763015,0.146996,udp,147.32.84.164,59139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,77,209,143.0,0.2692307692307692,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.787419,0.000207,udp,147.32.84.164,54021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,81,144,112.5,0.36,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.787945,0.017421,udp,147.32.84.164,43239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,81,181,131.0,0.30916030534351147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.806011,0.000239,udp,147.32.84.164,33859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,75,144,109.5,0.3424657534246575,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.822897,0.000247,udp,147.32.84.164,36653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:35.943085,0.149458,udp,147.32.84.164,40751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,85,212,148.5,0.28619528619528617,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:36.155220,0.000173,udp,147.32.84.164,53515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:36.155734,0.093338,udp,147.32.84.164,49726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,77,185,131.0,0.29389312977099236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:36.678026,0.01858,tcp,147.32.84.170,51468.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:37.488432,0.000355,udp,147.32.84.164,58500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,367,82,285,183.5,0.22343324250681199,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.489684,0.001272,udp,147.32.84.164,49467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.491245,0.000356,udp,147.32.84.164,32882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,75,143,109.0,0.3440366972477064,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.491253,0.000464,udp,147.32.84.164,59314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.492064,0.000256,udp,147.32.84.164,41823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,76,142,109.0,0.3486238532110092,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.495342,0.00016,udp,147.32.84.164,37613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.495948,0.000407,udp,147.32.84.164,56502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,366,82,284,183.0,0.22404371584699453,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.496642,0.000245,udp,147.32.84.164,43903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.499688,0.000248,udp,147.32.84.164,55492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,83,161,122.0,0.3401639344262295,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.501462,0.002098,udp,147.32.84.164,53701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,75,196,135.5,0.2767527675276753,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.522096,0.000457,udp,147.32.84.164,57520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,79,155,117.0,0.33760683760683763,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.522746,0.01468,udp,147.32.84.164,39107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,72,128,100.0,0.36,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.523295,0.116707,udp,147.32.84.164,33687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,78,125,101.5,0.3842364532019704,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.531051,0.000307,udp,147.32.84.164,58029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,75,138,106.5,0.352112676056338,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.531559,0.000194,udp,147.32.84.164,47087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,75,138,106.5,0.352112676056338,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.613167,0.000435,udp,147.32.84.164,39196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.846043,0.016957,udp,147.32.84.164,59796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:37.864048,9.282238,tcp,147.32.84.164,44153.0,->,199.7.57.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:41.858619,0.000208,udp,147.32.84.164,40452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:41.859158,0.000209,udp,147.32.84.164,56757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:02:46.676058,0.00037,udp,147.32.84.170,60414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:47.528567,0.000205,udp,147.32.84.138,41484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:49.541955,0.000386,udp,147.32.84.189,49162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:49.542188,19.404385,tcp,147.32.84.189,37729.0,->,77.75.76.3,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:02:53.638876,0.00023,udp,147.32.85.25,44408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:56.675289,0.000437,udp,147.32.84.170,50624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:56.676861,0.018022,tcp,147.32.84.170,51470.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:02:57.544091,0.000302,udp,147.32.84.138,52838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:58.445515,0.65448,tcp,147.32.84.59,55176.0,->,199.59.148.87,80.0,FSPA_FSPA,0.0,0.0,13,3879,2074,1805,298.38461538461536,0.5346738850219128,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:02:59.510641,0.000448,udp,147.32.84.189,44818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:02:59.637702,0.000828,udp,93.62.176.94,52857.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,270,186,84,135.0,0.6888888888888889,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:00.758879,0.000281,udp,147.32.84.138,58439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:02.801655,3490.135498,udp,61.205.220.228,33203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:04.275642,0.00019,udp,147.32.84.138,35300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:05.781356,10.24956,tcp,166.205.10.138,11378.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,22,1766,933,833,80.27272727272727,0.5283125707814269,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:03:07.865906,13.483481,tcp,147.32.84.164,39862.0,->,80.250.15.9,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:07.865993,13.484224,tcp,147.32.84.164,38766.0,->,80.250.15.41,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:07.866082,13.483859,tcp,147.32.84.164,38768.0,->,80.250.15.41,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:07.866298,13.491494,tcp,147.32.84.164,51672.0,->,209.85.148.96,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:08.005332,13.351982,tcp,147.32.84.164,33955.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:08.005635,0.0002,udp,147.32.84.164,51314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:08.981812,0.000223,udp,147.32.84.138,59279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:09.682670,0.000577,udp,212.240.180.118,61854.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:09.859880,0.000178,udp,147.32.84.164,52275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:09.861007,0.000169,udp,147.32.84.164,36639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:12.263102,0.001942,udp,207.54.104.42,19985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,504,60,282.0,0.8936170212765957,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:13.857163,0.396129,tcp,147.32.84.170,48475.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:13.921453,0.000587,udp,147.32.84.59,61463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:14.706564,0.038372,udp,147.32.85.7,53734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,71,165,118.0,0.3008474576271186,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:14.924580,14.025606,tcp,147.32.84.189,37510.0,->,81.0.233.200,80.0,FSPA_FSPA,0.0,0.0,80,73687,2736,70951,921.0875,0.03713002293484604,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:03:15.935848,0.000298,udp,147.32.84.138,46302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:19.284037,3195.962646,udp,89.233.152.219,1026.0,<->,147.32.85.56,44076.0,CON,0.0,0.0,193,12393,6597,5796,64.21243523316062,0.5323166303558461,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:19.518579,0.000204,udp,147.32.84.138,37857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:20.865391,0.000261,udp,147.32.84.59,37433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:22.142147,0.000374,udp,147.32.84.138,60364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:22.850250,0.0007,udp,97.93.108.90,31454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,153,87,66,76.5,0.5686274509803921,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:23.624739,61.293251,tcp,147.32.84.165,2720.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:03:26.675133,0.00038,udp,147.32.84.170,60373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:32.611349,0.000627,udp,184.163.137.130,16610.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:33.027334,0.000421,udp,147.32.84.170,39181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:34.183085,0.000729,udp,117.194.227.143,61963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,79,488,283.5,0.13932980599647266,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:34.779996,0.000403,udp,147.32.85.25,46578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:34.904760,0.000934,udp,61.56.148.88,22088.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,77,478,277.5,0.13873873873873874,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:35.936140,9.6e-05,udp,147.32.84.138,36918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:39.440071,0.000319,udp,147.32.84.164,54875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:03:44.712946,0.000272,udp,147.32.84.138,48905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:46.676379,0.00037,udp,147.32.84.170,48156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:46.677452,0.018395,tcp,147.32.84.170,45007.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:46.946859,5.986878,udp,147.32.84.229,13363.0,->,82.41.44.206,23277.0,INT,0.0,,3,567,567,0,189.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:03:50.988338,0.000357,udp,147.32.84.138,35918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:53.026286,1470.359131,udp,78.141.179.7,34034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,761,416,345,76.1,0.5466491458607096,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:03:56.675743,0.00044,udp,147.32.84.170,52244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:03:56.983186,0.000228,udp,147.32.84.138,47651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:03:58.841643,0.000226,udp,147.32.84.138,43125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:01.338902,0.000237,udp,147.32.85.34,62378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:01.392698,0.000288,udp,147.32.85.34,61498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:03.786538,0.000186,udp,147.32.84.138,43605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:04.031037,0.22982,tcp,147.32.84.170,60605.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:05.028041,0.0003,udp,147.32.86.192,64398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,75,180,127.5,0.29411764705882354,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:05.225406,0.000191,udp,147.32.84.170,37689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:06.675350,0.000382,udp,147.32.84.170,44504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:07.758230,0.526373,tcp,147.32.84.59,5324.0,->,208.109.162.190,80.0,FSPA_FSPA,0.0,0.0,10,1944,834,1110,194.4,0.42901234567901236,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:04:09.113802,0.000249,udp,147.32.84.138,50936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:09.312517,3043.954346,udp,195.230.109.6,65024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:04:10.368342,0.042585,udp,147.32.84.59,51034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:11.648425,17.277353,tcp,147.32.84.59,56825.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,364,242,122,60.666666666666664,0.6648351648351648,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:04:14.310475,25.027643,udp,147.32.84.229,13363.0,->,132.199.49.152,6012.0,INT,0.0,,4,805,805,0,201.25,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:04:17.107786,0.000559,udp,74.94.170.133,43885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:04:21.024321,0.000367,udp,147.32.84.59,36169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:22.017442,0.000734,udp,71.239.4.224,49178.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,78,479,278.5,0.1400359066427289,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:04:24.493033,61.298252,tcp,147.32.84.165,2721.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:04:24.527103,0.153232,udp,147.32.84.171,34424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,74,119,96.5,0.38341968911917096,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:26.922515,0.0,icmp,68.85.178.82,259.0,->,147.32.84.229,25316.0,URH,0.0,,1,70,70,0,70.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:04:31.970051,0.000121,udp,147.32.85.25,54811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:35.017617,0.315518,tcp,147.32.84.170,60610.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:36.676422,0.018044,tcp,147.32.84.170,50053.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:39.249916,0.000246,udp,147.32.84.138,35320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:41.523693,3443.276855,udp,147.32.84.229,13363.0,<->,218.173.240.123,21363.0,CON,0.0,0.0,8,541,301,240,67.625,0.55637707948244,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:04:42.248000,0.000179,udp,147.32.85.25,50984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:42.700553,0.000155,tcp,67.195.115.95,40191.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 17:04:43.385941,0.000362,udp,147.32.84.59,52707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,77,265,171.0,0.22514619883040934,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:46.059003,0.0,udp,147.32.80.9,53.0,->,147.32.84.138,37976.0,INT,0.0,,1,133,133,0,133.0,1.0,17,0,flow=From-Normal-V49-UDP-CVUT-DNS-Server,Normal,0 2011-08-16 17:04:46.063305,0.000408,udp,147.32.84.138,37690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:46.676174,0.000411,udp,147.32.84.170,55114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:52.296848,0.000403,udp,147.32.86.208,62673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:56.675080,0.010157,udp,147.32.84.170,60056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:56.685726,0.000472,udp,147.32.84.170,46682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:04:56.806017,0.000331,udp,147.32.84.189,51134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,79,196,137.5,0.2872727272727273,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:58.246024,0.005796,udp,147.32.84.189,37996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,71,142,106.5,0.3333333333333333,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:04:58.261241,0.00238,udp,147.32.84.189,51491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:02.383014,6.017456,udp,147.32.84.229,13363.0,->,68.194.251.194,13649.0,INT,0.0,,3,1392,1392,0,464.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:05:03.040044,0.076432,tcp,147.32.84.59,61358.0,->,195.24.232.208,80.0,SRPA_FSPA,0.0,0.0,9,1047,633,414,116.33333333333333,0.6045845272206304,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:05:03.674731,0.000147,udp,147.32.84.138,47768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:04.889294,0.0002,udp,147.32.84.138,36115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:06.030809,0.307301,tcp,147.32.84.170,60614.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:06.675392,0.000377,udp,147.32.84.170,56971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:09.705931,0.012569,udp,147.32.84.189,60804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:13.386666,0.000192,udp,147.32.84.138,44952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:19.084746,0.000186,udp,147.32.85.25,55890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:19.277838,194.22406,udp,147.32.84.13,49073.0,<->,82.208.56.89,123.0,CON,0.0,0.0,3,270,180,90,90.0,0.6666666666666666,17,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 17:05:21.670271,0.001655,udp,211.2.156.86,51800.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:21.766213,98.041824,udp,213.87.121.73,19792.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:24.348100,0.000263,udp,147.32.84.138,56723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:25.361043,61.282913,tcp,147.32.84.165,2722.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:05:25.369985,3537.467529,udp,78.141.179.8,34003.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,615,247,368,102.5,0.4016260162601626,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:26.675277,0.000354,udp,147.32.84.170,58225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:26.676365,0.018693,tcp,147.32.84.170,45021.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:31.073940,0.000314,udp,147.32.85.6,50753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,76,221,148.5,0.2558922558922559,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:31.637447,2252.735352,udp,86.91.109.35,19438.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,435,229,206,72.5,0.5264367816091954,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:36.273555,0.148035,udp,147.32.84.189,46038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,78,124,101.0,0.38613861386138615,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:36.677329,0.018168,tcp,147.32.84.170,37316.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:37.020855,0.000243,udp,147.32.84.170,47202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:42.023941,2567.361084,udp,71.7.234.112,47823.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,4382,962,3420,313.0,0.21953445915107256,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:42.503153,3382.55835,udp,192.76.7.192,41234.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:44.198712,1144.988159,udp,149.5.45.6,43056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,420,278,142,105.0,0.6619047619047619,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:45.187957,15.286452,udp,147.32.84.94,7103.0,->,93.129.178.173,7573.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:05:45.243850,0.000349,udp,147.32.85.25,57744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:46.675738,0.000312,udp,147.32.84.170,51208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:05:47.350905,14.527663,tcp,147.32.84.59,5446.0,->,72.32.240.28,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:05:49.227690,0.00042,udp,147.32.84.5,47800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,86,138,112.0,0.38392857142857145,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:50.024115,0.000363,udp,147.32.84.59,60361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,545,79,466,272.5,0.14495412844036698,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:05:50.069950,3167.996338,udp,77.98.209.227,56187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1494,1122,372,124.5,0.751004016064257,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:55.802663,3266.114746,udp,84.242.78.250,10867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2321,1590,731,128.94444444444446,0.6850495476087893,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:05:56.257018,0.000185,udp,147.32.84.138,59353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:01.039596,0.000244,udp,147.32.85.34,56455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:03.154988,0.00034,udp,147.32.84.138,37937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:05.754574,246.00473,tcp,147.32.84.59,5460.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,42,29635,1329,28306,705.5952380952381,0.04484562173106125,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:06:05.872746,0.000344,udp,147.32.84.59,63060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:06.285253,3291.602051,udp,94.156.68.73,36562.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:06.375015,0.000393,udp,147.32.85.25,54536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:06.675683,0.000323,udp,147.32.84.170,50436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:06.755458,0.609413,tcp,67.195.115.43,48995.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,14,6782,936,5846,484.42857142857144,0.1380123857269242,17,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 17:06:07.050103,0.000221,udp,147.32.84.59,38633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:07.129356,0.00066,udp,201.235.242.228,60406.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:08.026402,0.131347,udp,147.32.84.170,53078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:08.158377,0.035284,udp,147.32.84.170,53080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:08.194629,0.224535,tcp,147.32.84.170,52421.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:09.355043,0.001009,udp,213.165.187.114,48990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,437,80,357,218.5,0.18306636155606407,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:10.698266,2269.698242,udp,60.238.191.139,60989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2292,2051,241,286.5,0.8948516579406631,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:14.465492,0.000315,udp,147.32.84.138,53754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:14.766168,1037.200073,udp,109.64.192.224,14693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,628,128,500,157.0,0.20382165605095542,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:20.623038,0.000315,udp,147.32.84.138,56024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:22.003628,0.000266,udp,147.32.85.25,51307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:24.096396,0.269153,udp,147.32.84.59,55456.0,<->,24.232.101.100,42194.0,CON,0.0,0.0,2,304,242,62,152.0,0.7960526315789473,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:06:25.546155,0.30963,udp,147.32.84.229,13363.0,<->,114.41.235.1,13859.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:26.218500,61.298176,tcp,147.32.84.165,2723.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:06:26.675399,0.000306,udp,147.32.84.170,55404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:27.418117,3457.290771,udp,78.62.3.162,33159.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,551,311,240,68.875,0.5644283121597096,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:30.869094,0.000854,udp,121.110.43.108,44082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,74,488,281.0,0.13167259786476868,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:33.060096,135.525833,tcp,41.190.90.40,49471.0,->,147.32.84.229,80.0,SRPA_FSPA,0.0,0.0,19,1362,503,859,71.6842105263158,0.36930983847283405,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:06:33.660389,0.000277,udp,147.32.84.170,49663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:35.540624,15.786581,udp,147.32.84.94,7103.0,->,190.41.175.56,17173.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:06:36.104592,0.000713,udp,72.230.250.120,60804.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:36.678390,0.018697,tcp,147.32.84.170,34899.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:37.095669,0.000502,udp,147.32.84.138,34916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:39.019103,0.00026,udp,147.32.84.170,53493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:39.021057,0.31449,tcp,147.32.84.170,52427.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:39.222918,0.000604,udp,90.84.146.209,53979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:40.764916,0.000165,udp,147.32.84.138,54246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:41.655758,0.10457,udp,192.118.11.124,56919.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,475,353,122,118.75,0.7431578947368421,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:42.955239,0.00039,udp,147.32.84.79,35790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:43.500031,0.02389,udp,147.32.84.59,57069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:43.812445,0.224468,tcp,147.32.84.59,52827.0,->,194.79.52.199,80.0,FSPA_FSPA,0.0,0.0,57,39939,4086,35853,700.6842105263158,0.10230601667543003,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:06:44.307215,3051.002441,udp,87.224.28.130,50252.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:46.677169,0.01856,tcp,147.32.84.170,34901.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:46.923618,1.499243,udp,147.32.87.51,137.0,->,147.32.87.255,137.0,INT,0.0,,4,368,368,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:06:48.225604,3043.94043,udp,24.247.219.28,30749.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:48.515341,0.000305,udp,147.32.84.184,40413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:50.712023,0.000278,udp,147.32.84.138,52424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:52.114827,0.00031,udp,147.32.84.59,46187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:54.558975,0.384096,udp,147.32.84.229,13363.0,<->,112.104.99.227,6198.0,CON,0.0,0.0,2,578,75,503,289.0,0.12975778546712802,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:06:54.658397,5.951109,tcp,147.32.84.59,56535.0,->,74.125.232.192,443.0,FSRPA_FSPA,0.0,0.0,86,24103,8938,15165,280.2674418604651,0.3708252084802722,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:06:54.922396,8.969173,tcp,84.1.153.2,1499.0,->,147.32.84.131,51413.0,S_,0.0,,3,186,186,0,62.0,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:06:56.033494,123.279373,tcp,147.32.84.59,56542.0,->,74.125.232.192,443.0,FSPA_FSPA,0.0,0.0,16,4323,3361,962,270.1875,0.777469349988434,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:06:56.107729,0.000262,udp,147.32.84.164,42623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:06:56.108272,0.000164,udp,147.32.84.164,36261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:06:56.327461,0.00045,udp,147.32.84.59,64843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,88,308,198.0,0.2222222222222222,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:56.677188,0.000384,udp,147.32.84.170,57223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:06:56.764223,0.000326,udp,147.32.84.138,54868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:06:57.691474,0.00043,udp,147.32.84.138,58675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:03.727756,29.688082,tcp,147.32.84.59,49821.0,->,92.123.64.195,80.0,FSPA_FSPA,0.0,0.0,63,50741,3480,47261,805.4126984126984,0.06858359117873121,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:07:06.126053,0.023745,udp,70.173.222.243,36198.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,726,605,121,181.5,0.8333333333333334,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:06.678065,0.000357,udp,147.32.84.170,45238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:07.262849,0.20035,udp,62.133.64.4,48042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,394,209,185,65.66666666666667,0.5304568527918782,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:08.213772,0.000708,udp,204.9.163.214,1079.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,179,117,62,89.5,0.6536312849162011,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:10.026585,0.000335,udp,147.32.84.170,39238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:10.027493,0.00025,udp,147.32.84.170,59938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:10.452278,3103.558105,udp,95.210.176.2,57436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1919,1305,614,137.07142857142858,0.6800416883793643,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:11.136406,0.000325,udp,147.32.84.138,54181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:12.108088,0.014353,udp,147.32.84.59,61149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,70,186,128.0,0.2734375,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:16.676449,0.000246,udp,147.32.84.170,33001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:16.677406,0.017989,tcp,147.32.84.170,39293.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:16.892246,0.00042,udp,147.32.86.20,52455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:18.384745,3.353233,tcp,147.32.84.59,5509.0,->,46.28.105.11,80.0,FSPA_FSPA,0.0,0.0,20,11741,1495,10246,587.05,0.12733157311983648,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:07:18.852613,0.138653,udp,147.32.84.59,49901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:26.396693,0.000899,udp,88.251.13.245,65241.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,77,475,276.0,0.13949275362318841,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:26.674614,0.000381,udp,147.32.84.170,38350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:26.675590,0.000356,udp,147.32.84.170,42041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:26.977144,4.681734,tcp,147.32.86.17,4811.0,->,209.17.73.28,80.0,FSPA_FSPA,0.0,0.0,14,4784,1461,3323,341.7142857142857,0.30539297658862874,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:07:27.085968,61.283253,tcp,147.32.84.165,2724.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:07:27.876932,0.00055,udp,84.0.209.40,24894.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:27.908378,2.951019,tcp,147.32.84.59,49856.0,->,92.123.64.178,80.0,FSPA_FSPA,0.0,0.0,17,10423,881,9542,613.1176470588235,0.08452460903770508,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:07:27.949287,123.321091,tcp,147.32.84.123,56601.0,->,209.85.149.95,80.0,FSPA_FSPA,0.0,0.0,90,66020,3867,62153,733.5555555555555,0.05857315964859133,17,1,flow=Background-ajax.google,Background,-1 2011-08-16 17:07:32.838973,1638.32605,udp,92.234.161.39,15413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,938,452,486,78.16666666666667,0.48187633262260127,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:33.544517,0.000307,udp,147.32.84.59,55958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:34.356670,166.041489,tcp,147.32.84.59,58113.0,->,90.183.38.80,80.0,FSPA_FSPA,0.0,0.0,88,38077,7922,30155,432.6931818181818,0.20805210494524254,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:07:34.471831,0.022314,udp,147.32.84.59,62179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,85,227,156.0,0.2724358974358974,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:36.677244,0.000413,udp,147.32.84.170,55268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:38.846367,0.000232,udp,147.32.84.138,35991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:39.378118,0.031006,udp,147.32.84.229,13363.0,<->,92.247.195.170,20385.0,CON,0.0,0.0,4,3036,60,2976,759.0,0.019762845849802372,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:40.439596,249.995483,tcp,147.32.86.141,2500.0,->,209.85.149.113,80.0,FSPA_FSPA,0.0,0.0,48,24101,8422,15679,502.1041666666667,0.34944608107547404,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:07:41.029204,0.359556,tcp,147.32.84.170,52435.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:41.281873,0.000773,udp,187.79.69.210,64868.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:42.225477,0.000394,udp,147.32.85.89,39692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:42.430587,0.001287,udp,82.200.120.94,1774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:43.024222,0.000355,udp,147.32.84.59,36720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,84,242,163.0,0.25766871165644173,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:43.064267,0.151238,tcp,147.32.84.123,51500.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,56,20823,2714,18109,371.8392857142857,0.13033664697690053,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:07:43.378765,0.000703,udp,84.61.45.56,60079.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,180,74,127.0,0.7086614173228346,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:47.081350,0.000633,udp,84.210.28.94,48946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:47.703559,0.000193,udp,147.32.84.138,57882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:48.345251,0.000308,udp,147.32.84.59,41325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:07:49.854048,0.000812,udp,86.100.101.251,57734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,74,471,272.5,0.13577981651376148,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:07:51.063716,0.000244,udp,147.32.84.164,42715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.068002,0.000169,udp,147.32.84.164,36429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.207232,165.9048,tcp,147.32.84.164,53680.0,->,80.250.15.41,80.0,SPA_SRPA,0.0,0.0,58,42990,9435,33555,741.2068965517242,0.21946964410327982,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.207613,0.000374,udp,147.32.84.164,34209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,68,155,111.5,0.30493273542600896,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.207705,0.000359,udp,147.32.84.164,46559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.208196,0.000364,udp,147.32.84.164,42632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,71,181,126.0,0.28174603174603174,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.208858,153.809998,tcp,147.32.84.164,48044.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,162,177936,13642,164294,1098.3703703703704,0.07666801546623506,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.208876,133.807602,tcp,147.32.84.164,48045.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,140,147689,13393,134296,1054.9214285714286,0.09068380177264386,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.209875,138.807693,tcp,147.32.84.164,48046.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,34,21158,2164,18994,622.2941176470588,0.10227809811891483,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.209925,153.808212,tcp,147.32.84.164,48047.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,60,45276,4292,40984,754.6,0.09479636010248255,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.573048,133.44342,tcp,147.32.84.164,48051.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,100,97724,10478,87246,977.24,0.10722033482051492,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.712274,0.005346,udp,147.32.84.164,60713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,78,167,122.5,0.3183673469387755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.712336,0.004409,udp,147.32.84.164,51200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,71,149,110.0,0.32272727272727275,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.714777,0.001652,udp,147.32.84.164,43195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,156,78,78,78.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:51.787957,0.000206,udp,147.32.84.164,40038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:52.325730,0.002548,udp,147.32.84.164,53080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:52.336349,18.733961,tcp,147.32.84.164,53698.0,->,80.250.15.41,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:52.336364,0.000258,udp,147.32.84.164,43374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:07:54.535694,3549.56543,tcp,79.106.109.75,10007.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,214,20394,13109,7285,95.29906542056075,0.642787094243405,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:07:56.676065,0.000468,udp,147.32.84.170,48603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:07:57.740886,15.000201,tcp,147.32.86.89,3622.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,1562,1050,512,142.0,0.6722151088348272,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:07:59.773342,0.02695,tcp,147.32.84.123,36066.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,12,3366,1410,1956,280.5,0.41889483065953653,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:01.221673,3408.097168,udp,95.111.19.235,56071.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,949,709,240,118.625,0.7471022128556375,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:08:02.288738,0.058704,udp,147.32.85.103,49932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,76,220,148.0,0.25675675675675674,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:02.399893,1480.474609,udp,85.2.102.212,33340.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,676,490,186,112.66666666666667,0.7248520710059172,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:08:02.953203,142.064651,tcp,147.32.84.164,48059.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,72,60970,4054,56916,846.8055555555555,0.0664917172379859,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:02.953227,142.064407,tcp,147.32.84.164,48061.0,->,80.250.15.9,80.0,SPA_SRPA,0.0,0.0,47,27673,3512,24161,588.7872340425532,0.1269107071875113,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:06.671785,0.000237,udp,147.32.84.59,60528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:06.677147,0.000356,udp,147.32.84.170,37998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:07.987692,21.786995,tcp,147.32.84.123,47719.0,->,194.79.52.99,80.0,FSPA_FSPA,0.0,0.0,16,6280,2117,4163,392.5,0.3371019108280255,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:08.888929,5.092063,tcp,147.32.84.59,63970.0,->,82.208.47.218,80.0,FSPA_FSPA,0.0,0.0,11,1758,1019,739,159.8181818181818,0.5796359499431172,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:08:10.519308,0.205568,tcp,147.32.86.20,2503.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,28597,1029,27568,752.5526315789474,0.03598279539811868,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:12.141027,0.079084,udp,147.32.84.59,28902.0,<->,95.29.124.54,38638.0,CON,0.0,0.0,2,137,76,61,68.5,0.5547445255474452,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:08:12.519282,0.51657,tcp,147.32.86.168,37229.0,->,72.52.77.3,80.0,FSPA_FSPA,0.0,0.0,12,2895,784,2111,241.25,0.27081174438687394,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:13.059034,0.346985,tcp,147.32.84.170,46071.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:13.398280,0.29926,tcp,147.32.84.170,46072.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:13.453254,0.031175,tcp,147.32.84.170,55234.0,->,209.85.148.105,443.0,FSRPA_FSPA,0.0,0.0,14,1237,656,581,88.35714285714286,0.5303152789005658,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:14.671260,0.000423,udp,147.32.84.164,54548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:15.080142,0.000415,udp,147.32.84.164,44613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:15.081221,0.000251,udp,147.32.84.164,51095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:15.081787,243.132477,tcp,147.32.84.164,42322.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:15.598470,0.000294,udp,147.32.85.25,60027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:18.645503,0.000263,udp,147.32.86.20,63195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:22.834827,0.001934,udp,178.93.155.48,58957.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,495,60,277.5,0.8918918918918919,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:08:24.750224,0.000375,udp,147.32.84.59,53179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:24.786233,0.00031,udp,147.32.84.59,34805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:26.676128,0.000312,udp,147.32.84.170,50886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:27.038635,0.247825,udp,147.32.84.134,33863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:08:27.286898,0.246877,udp,147.32.84.134,43240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:08:27.943863,61.30064,tcp,147.32.84.165,2725.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:08:28.222427,322.87616,tcp,147.32.84.164,45755.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,36,10962,7763,3199,304.5,0.7081736909323116,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:28.762349,242.331955,tcp,147.32.84.164,47391.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,44,18241,2393,15848,414.5681818181818,0.1311879831149608,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:28.944270,5.378077,tcp,147.32.86.141,2502.0,->,94.100.187.197,80.0,SRPA_FSPA,0.0,0.0,36,24228,1380,22848,673.0,0.05695889053987122,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:29.496634,0.000242,udp,147.32.84.138,52783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:32.591427,0.00053,udp,147.32.84.164,49102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,87,170,128.5,0.33852140077821014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:32.709854,318.388733,tcp,147.32.84.164,44112.0,->,74.125.232.197,80.0,FSPA_FSPA,0.0,0.0,29,7397,5765,1632,255.06896551724137,0.7793700148708936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:08:33.715114,0.000663,udp,82.227.82.180,32384.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:08:34.012854,0.000159,udp,147.32.84.138,58423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:35.476466,6.007626,icmp,95.135.124.91,771.0,->,147.32.84.229,34361.0,URP,0.0,,3,210,210,0,70.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:08:35.526753,0.000211,tcp,67.195.115.95,36035.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 17:08:36.026969,276.186554,tcp,147.32.84.170,59625.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,34,10436,7643,2793,306.94117647058823,0.7323687236489076,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:36.081729,0.000389,udp,147.32.85.25,44496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:36.676480,0.000541,udp,147.32.84.170,45938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:36.677636,0.000549,udp,147.32.84.170,45797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:36.678981,0.019322,tcp,147.32.84.170,34501.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:38.639603,0.127292,tcp,147.32.84.59,57373.0,->,213.171.219.145,80.0,FSPA_FSPA,0.0,0.0,10,2043,778,1265,204.3,0.3808125305922663,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:08:43.027228,0.000263,udp,147.32.84.170,47132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:45.230731,3567.999756,tcp,147.32.84.229,13363.0,,138.40.68.17,52218.0,PA_PA,0.0,0.0,225,18576,8165,10411,82.56,0.43954565030146425,17,0,flow=Background,Background,-1 2011-08-16 17:08:50.382419,9.378646,tcp,197.30.18.25,50741.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,19,1437,612,825,75.63157894736842,0.42588726513569936,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:08:51.810114,0.000345,udp,147.32.86.77,44871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:53.984067,0.002032,udp,122.24.250.202,35939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:08:55.109260,0.000256,udp,147.32.84.59,58673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:55.322860,0.000208,udp,147.32.84.138,60430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:55.373464,0.000254,udp,147.32.84.59,42399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:08:56.676701,0.000439,udp,147.32.84.170,59533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:08:57.369385,5.999301,udp,147.32.84.229,13363.0,->,95.81.195.101,4955.0,INT,0.0,,3,180,180,0,60.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:09:01.068104,66.394615,tcp,200.19.160.1,55903.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,70,44634,6780,37854,637.6285714285714,0.151902137384057,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:03.876289,0.000312,udp,147.32.86.77,48664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:06.833007,2077.874512,udp,147.32.84.229,13363.0,<->,208.120.116.8,49407.0,CON,0.0,0.0,4,735,599,136,183.75,0.8149659863945579,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:07.253520,0.000252,udp,147.32.84.138,50037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:09.268557,3384.927002,udp,96.22.102.225,19205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2020,405,1615,168.33333333333334,0.2004950495049505,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:10.926118,0.000204,udp,147.32.84.138,40335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:13.277043,2426.077881,udp,216.249.233.110,32808.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,499,147,352,124.75,0.29458917835671344,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:14.020717,0.298858,tcp,147.32.84.170,52454.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:09:14.312548,0.000764,udp,94.120.143.103,13448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,76,484,280.0,0.1357142857142857,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:14.494164,0.000523,udp,99.9.67.220,42108.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:14.526708,0.352031,tcp,67.195.111.228,59153.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1561,745,816,156.1,0.47725816784112746,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:15.520313,0.000302,udp,147.32.86.20,63200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:16.678450,0.018094,tcp,147.32.84.170,34928.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:09:18.573877,0.0,tcp,113.105.171.56,80.0,->,147.32.85.8,34922.0,SA_,0.0,,1,66,66,0,66.0,1.0,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:25.032077,2960.488281,udp,122.16.18.77,38989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:26.675822,0.000387,udp,147.32.84.170,34884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:09:27.448941,20.397915,tcp,147.32.84.184,35497.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,23,8282,2266,6016,360.0869565217391,0.27360540932141997,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:28.507077,0.000214,udp,147.32.84.138,32988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:28.595131,0.000436,udp,147.32.85.114,54203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:28.814055,61.283501,tcp,147.32.84.165,2726.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:09:29.375351,0.377646,udp,147.32.84.229,13363.0,<->,125.224.133.175,28768.0,CON,0.0,0.0,4,3025,60,2965,756.25,0.019834710743801654,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:30.790333,0.000344,udp,147.32.84.59,54412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:35.729263,0.000798,udp,124.43.95.41,49734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:38.995507,0.000224,udp,147.32.84.138,52556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:39.163962,29.642775,tcp,147.32.86.147,56569.0,->,77.75.73.153,80.0,FSPA_FSPA,0.0,0.0,60,39737,3290,36447,662.2833333333333,0.08279437300249139,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:40.918146,0.000347,udp,147.32.84.59,35119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:42.812897,2.996537,tcp,147.32.84.59,49946.0,->,159.148.134.7,443.0,S_,0.0,,2,132,132,0,66.0,1.0,17,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:09:43.968521,3599.755859,udp,178.63.89.8,13203.0,->,147.32.84.59,17344.0,REQ,0.0,,15,1065,1065,0,71.0,1.0,17,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:09:46.336245,0.000239,udp,147.32.84.138,37295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:46.678987,0.000341,udp,147.32.84.170,50539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:09:49.730074,0.000175,udp,147.32.85.25,47497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:50.421123,0.000389,udp,147.32.84.164,49581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:09:50.453915,2.594934,tcp,147.32.84.164,56937.0,->,173.194.16.93,80.0,FSPA_FSPA,0.0,0.0,4300,4759248,85272,4673976,1106.8018604651163,0.01791711631753588,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:09:50.739483,0.0006,udp,189.83.24.4,5631.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:09:51.766744,2.896402,tcp,147.32.84.25,56432.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,8203,2396,5807,292.9642857142857,0.2920882603925393,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:52.627124,0.248282,udp,147.32.84.25,47615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:52.876301,0.002305,udp,147.32.84.189,39329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:09:53.070663,221.916229,tcp,147.32.84.25,50707.0,->,74.125.232.216,80.0,FSPA_FSPA,0.0,0.0,114,29652,18126,11526,260.10526315789474,0.6112909753136382,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:55.501574,329.221954,tcp,147.32.84.68,50800.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,68,20483,8210,12273,301.22058823529414,0.40082019235463556,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:09:56.068959,0.000784,udp,62.107.155.81,21169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:10:04.232434,0.000372,udp,147.32.84.138,43708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:05.373887,0.00084,udp,82.212.71.226,39190.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:10:06.023715,0.000151,udp,147.32.84.138,43540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:06.677578,0.000554,udp,147.32.84.170,59344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:06.679839,0.018374,tcp,147.32.84.170,39322.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:10.561843,0.000417,udp,147.32.84.19,48691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:11.489314,0.000217,udp,147.32.84.138,37021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:11.510545,0.783997,tcp,147.32.84.59,5712.0,->,80.239.246.117,443.0,SRPA_SPA,0.0,0.0,2498,2956686,35370,2921316,1183.62129703763,0.011962717718418527,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:12.731085,1249.029175,udp,147.32.84.229,13363.0,<->,123.0.233.154,24305.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:10:16.029154,0.262409,tcp,147.32.84.170,52462.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:19.820970,0.020259,udp,147.32.84.59,49720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,83,132,107.5,0.386046511627907,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:20.972863,3.22636,tcp,147.32.84.59,5743.0,->,80.239.177.80,443.0,SRPA_SPA,0.0,0.0,5690,6666458,82776,6583682,1171.6094903339192,0.012416788645484603,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:21.228040,0.000338,udp,147.32.84.59,60462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:21.805727,0.000226,udp,147.32.84.138,57558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:26.676119,0.000495,udp,147.32.84.170,53794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:26.677156,0.00038,udp,147.32.84.170,59590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:26.939274,21.270651,tcp,85.26.186.66,43332.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,15,1113,601,512,74.2,0.5399820305480683,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:10:29.671116,61.317436,tcp,147.32.84.165,2727.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:10:34.416801,0.000319,udp,147.32.84.59,63000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:35.934526,0.000879,udp,147.32.84.25,47317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,78,264,171.0,0.22807017543859648,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:36.677976,0.000369,udp,147.32.84.170,40190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:40.306038,0.000361,udp,147.32.85.34,55850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:41.543228,37.48848,tcp,147.32.84.59,56902.0,->,140.98.193.112,80.0,FSPA_FSPA,0.0,0.0,16,6959,1695,5264,434.9375,0.2435694783733295,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:42.332564,0.019871,udp,147.32.84.25,50910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,406,92,314,203.0,0.22660098522167488,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:46.473308,0.575359,tcp,147.32.84.59,5841.0,->,62.67.6.83,443.0,SRPA_SPA,0.0,0.0,344,414913,4915,409998,1206.1424418604652,0.011845856842277779,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:49.115858,11.974943,tcp,147.32.84.164,51540.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.116050,11.974732,tcp,147.32.84.164,51543.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.116572,0.000161,udp,147.32.84.164,53482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.116624,0.000228,udp,147.32.84.164,50250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.304322,0.000431,udp,147.32.84.164,40369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.305938,0.000442,udp,147.32.84.164,33005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.306639,0.000423,udp,147.32.84.164,38826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.308584,0.000931,udp,147.32.84.164,35803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.309329,0.000589,udp,147.32.84.164,40187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.316322,0.000524,udp,147.32.84.164,53916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.317001,0.000509,udp,147.32.84.164,38017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.560303,0.251102,udp,147.32.84.164,40089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:49.811688,0.249908,udp,147.32.84.164,55601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:50.132168,0.00029,udp,147.32.84.138,47574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:50.463960,0.020428,udp,147.32.84.59,56123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,83,269,176.0,0.23579545454545456,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:50.735326,980.93927,udp,187.17.38.135,19681.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,550,310,240,68.75,0.5636363636363636,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:10:51.034403,0.002156,udp,147.32.84.164,36593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.035229,0.000507,udp,147.32.84.164,45039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.036828,0.003021,udp,147.32.84.164,56333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.037286,0.000546,udp,147.32.84.164,49863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.044741,0.002904,udp,147.32.84.164,34510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,70,141,105.5,0.33175355450236965,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.065876,0.002357,udp,147.32.84.164,52483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,82,153,117.5,0.34893617021276596,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.071580,0.008279,udp,147.32.84.164,56780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.779925,0.00072,udp,147.32.84.164,43732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,84,154,119.0,0.35294117647058826,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.787513,0.006781,udp,147.32.84.164,42323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,84,167,125.5,0.3346613545816733,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.864300,0.00057,udp,147.32.84.164,43621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:51.865572,0.000565,udp,147.32.84.164,58711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.142391,0.000377,udp,147.32.84.164,42642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.142397,0.000375,udp,147.32.84.164,52484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.142498,0.000403,udp,147.32.84.164,33344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,81,138,109.5,0.3698630136986301,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.142913,0.000256,udp,147.32.84.164,43665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.143065,0.000297,udp,147.32.84.164,54592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,81,138,109.5,0.3698630136986301,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.143480,0.000293,udp,147.32.84.164,48288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,81,139,110.0,0.36818181818181817,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.144514,0.000379,udp,147.32.84.164,37148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.145797,0.000527,udp,147.32.84.164,54954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,82,142,112.0,0.36607142857142855,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:10:52.169955,0.056237,tcp,147.32.84.170,44895.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,10,2287,1605,682,228.7,0.7017927415828596,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.749931,19.459496,tcp,147.32.84.170,51774.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.749935,0.000283,udp,147.32.84.170,57765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.750577,0.439411,udp,147.32.84.170,45537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.750673,0.001804,udp,147.32.84.170,60532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.855379,0.000543,udp,147.32.84.170,39365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.961699,0.000701,udp,147.32.84.59,55210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:52.975100,0.000495,udp,147.32.84.170,43678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.975802,0.000748,udp,147.32.84.170,36388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.979567,0.000569,udp,147.32.84.170,44852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.984720,0.000414,udp,147.32.84.170,45588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.986132,0.000387,udp,147.32.84.170,46122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.988388,0.000402,udp,147.32.84.170,37926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.989208,0.000518,udp,147.32.84.170,45251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.994541,0.000465,udp,147.32.84.170,34689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:52.996297,0.000312,udp,147.32.84.170,41847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.086101,50.912357,tcp,147.32.84.59,40949.0,->,92.123.64.147,443.0,FSPA_FSPA,0.0,0.0,28,13126,2139,10987,468.7857142857143,0.1629590126466555,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:53.140634,9.3e-05,udp,147.32.84.170,60781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.140649,0.000285,udp,147.32.84.170,49972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.142247,249.0793,tcp,147.32.84.170,34622.0,->,74.125.232.208,80.0,FSPA_FSRPA,0.0,0.0,23,4308,1269,3039,187.30434782608697,0.2945682451253482,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.303349,0.000405,udp,147.32.84.170,38970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.308786,0.001984,udp,147.32.84.170,33446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,75,172,123.5,0.30364372469635625,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.398082,3599.882812,udp,147.32.84.59,17344.0,<->,78.46.33.51,54012.0,CON,0.0,0.0,30137,28308332,9503765,18804567,939.321498490228,0.3357232421889075,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:10:53.502133,0.002111,udp,147.32.84.170,50842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,80,145,112.5,0.35555555555555557,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.504592,0.000426,udp,147.32.84.170,60014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,80,145,112.5,0.35555555555555557,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.511139,0.000608,udp,147.32.84.170,57123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.512514,0.000488,udp,147.32.84.170,58086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.513773,0.000558,udp,147.32.84.170,38446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,338,76,262,169.0,0.22485207100591717,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.515121,0.000444,udp,147.32.84.170,42829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,84,151,117.5,0.3574468085106383,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.516711,0.000486,udp,147.32.84.170,34902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,84,215,149.5,0.2809364548494983,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.518141,0.00042,udp,147.32.84.170,45729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,85,142,113.5,0.3744493392070485,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:53.642208,0.017675,udp,147.32.84.170,46365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,79,270,174.5,0.22636103151862463,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:54.110871,8.089615,tcp,147.32.84.170,38619.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,58,38710,6725,31985,667.4137931034483,0.17372771893567554,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:54.136978,0.000432,udp,147.32.84.170,53407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:54.178727,0.000277,udp,147.32.84.170,55860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,81,139,110.0,0.36818181818181817,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:54.180004,0.000304,udp,147.32.84.170,60532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:54.181385,0.000244,udp,147.32.84.170,50510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,82,142,112.0,0.36607142857142855,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:10:55.005755,0.000273,udp,147.32.85.34,51467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,81,219,150.0,0.27,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:10:56.677769,0.000611,udp,147.32.84.170,59367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:11:01.737970,3599.965088,udp,147.32.84.59,17344.0,<->,46.4.68.180,56012.0,CON,0.0,0.0,21592,20058404,1190480,18867924,928.9738792145239,0.05935068413219716,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:02.017670,0.000615,udp,147.32.86.74,60920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:02.950877,387.437225,udp,94.220.133.149,61134.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1052,932,120,263.0,0.8859315589353612,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:11:06.678613,0.019156,tcp,147.32.84.170,36671.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:11:11.445819,0.000362,udp,147.32.84.138,35930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:15.105196,5.611184,tcp,147.32.84.59,5940.0,->,80.239.236.131,443.0,SRPA_SPA,0.0,0.0,9583,11360745,133101,11227644,1185.5102786183868,0.011715868985704724,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:16.677449,0.000355,udp,147.32.84.170,53684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:11:17.710273,0.00052,udp,147.32.84.59,56762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:17.716528,0.000302,udp,147.32.85.25,32958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:18.989868,0.000325,udp,147.32.84.138,53104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:19.191343,114.860931,tcp,147.32.84.59,42970.0,->,77.93.192.144,80.0,FSPA_FSPA,0.0,0.0,17,8792,1290,7502,517.1764705882352,0.1467242948134668,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:19.655717,2635.825195,udp,147.32.84.59,17344.0,<->,188.40.100.100,50012.0,CON,0.0,0.0,12720,12034200,11905614,128586,946.0849056603773,0.9893149523857008,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:21.071426,7e-06,icmp,147.32.86.96,,<-,147.32.87.3,10619.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:11:21.751699,955.737427,udp,147.32.84.59,17344.0,<->,188.40.168.138,50012.0,CON,0.0,0.0,491,392240,384362,7878,798.8594704684318,0.9799153579441159,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:23.069508,8e-06,icmp,147.32.86.96,,<-,147.32.87.3,10619.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:11:24.293404,0.000527,udp,147.32.84.138,48368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:26.678627,0.019005,tcp,147.32.84.170,51173.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:11:27.564090,0.342488,tcp,147.32.84.59,51468.0,->,67.195.186.236,80.0,FSPA_FSPA,0.0,0.0,9,1820,978,842,202.22222222222223,0.5373626373626373,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:27.727981,0.000248,udp,147.32.84.138,42510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:28.356205,0.000675,udp,147.32.84.138,49230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:29.220734,4.837663,tcp,147.32.84.59,5982.0,->,80.231.211.162,443.0,SRPA_SPA,0.0,0.0,9261,11018969,126323,10892646,1189.8249649065976,0.011464139703088374,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:29.890906,0.000584,udp,83.145.64.161,5519.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:11:30.558420,61.282906,tcp,147.32.84.165,2728.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:11:33.019033,3031.431641,udp,147.32.84.229,13363.0,<->,212.117.33.90,24572.0,CON,0.0,0.0,6,1278,660,618,213.0,0.5164319248826291,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:11:33.019136,7.653249,udp,147.32.84.229,13363.0,<->,59.126.34.162,35847.0,CON,0.0,0.0,4,684,563,121,171.0,0.8230994152046783,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:11:33.804414,0.000191,udp,147.32.84.138,49923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:35.540554,0.00038,udp,147.32.84.164,60997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:11:35.578168,245.543167,tcp,147.32.84.164,57285.0,->,209.85.149.101,80.0,FSPA_FSPA,0.0,0.0,49,29153,12751,16402,594.9591836734694,0.43738208760676434,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:11:36.877992,0.117628,tcp,217.212.224.181,56000.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,6804,812,5992,486.0,0.11934156378600823,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:11:38.110468,0.000706,udp,147.32.85.25,50901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:42.521193,0.000259,udp,147.32.84.138,40156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:43.039299,824.394775,udp,147.32.84.59,17344.0,<->,188.40.110.231,50012.0,CON,0.0,0.0,710,573538,562420,11118,807.8,0.9806150595078269,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:43.050531,66.681252,tcp,217.174.229.226,56413.0,->,147.32.84.229,80.0,FSA_FSA,0.0,0.0,7,424,242,182,60.57142857142857,0.5707547169811321,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:11:51.570106,0.337823,udp,147.32.84.229,13363.0,<->,183.182.82.46,33033.0,CON,0.0,0.0,2,139,77,62,69.5,0.5539568345323741,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:11:54.072112,0.00033,udp,147.32.85.25,51069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:56.166219,0.000399,udp,147.32.84.138,56883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:11:58.442669,0.120273,tcp,147.32.84.59,59180.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,19,5125,1912,3213,269.7368421052632,0.3730731707317073,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:11:59.708682,0.000648,udp,31.31.117.89,1199.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:12:03.122991,0.040378,tcp,147.32.84.123,33670.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,12,3148,1578,1570,262.3333333333333,0.5012706480304956,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:12:06.679688,0.021046,tcp,147.32.84.170,57678.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:08.580034,0.00055,udp,147.32.84.181,64317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,77,156,116.5,0.33047210300429186,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:09.577257,0.632971,tcp,147.32.84.59,6098.0,->,80.239.189.60,443.0,SRPA_SPA,0.0,0.0,518,650706,6038,644668,1256.1891891891892,0.00927915218239881,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:11.120554,0.000325,udp,147.32.84.59,32962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:12.006746,147.228775,tcp,147.32.84.59,56263.0,->,216.239.116.50,80.0,FSPA_FSPA,0.0,0.0,15,4858,3718,1140,323.8666666666667,0.7653355290242898,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:12.096176,147.049011,tcp,147.32.84.59,49844.0,->,2.21.92.239,80.0,FSPA_FSPA,0.0,0.0,112,82088,5207,76881,732.9285714285714,0.06343192671279603,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:14.342750,990.834351,udp,147.32.84.59,17344.0,<->,176.9.23.171,56012.0,CON,0.0,0.0,972,856614,843846,12768,881.2901234567901,0.9850948034937557,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:17.592698,0.000223,udp,147.32.84.138,41226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:19.025881,0.000245,udp,147.32.84.170,55832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:19.086601,0.001421,udp,147.32.84.59,33243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,77,157,117.0,0.32905982905982906,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:21.470457,923.659363,udp,147.32.84.59,17344.0,<->,213.239.192.180,51012.0,CON,0.0,0.0,1111,900513,882987,17526,810.5427542754276,0.9805377601433849,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:26.406209,36.804794,udp,80.255.245.237,11085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1205,895,310,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:12:26.679917,0.018315,tcp,147.32.84.170,57681.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:28.931584,0.000344,udp,147.32.84.138,43279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:31.416891,61.285843,tcp,147.32.84.165,2729.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:12:36.676445,0.000388,udp,147.32.84.170,40214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:40.278955,0.197548,tcp,147.32.86.20,2694.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,61,55835,1391,54444,915.327868852459,0.024912689173457507,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:12:41.278868,884.268982,udp,147.32.84.59,17344.0,<->,88.198.33.76,52012.0,CON,0.0,0.0,646,510712,500200,10512,790.5758513931888,0.979416970817212,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:12:43.263800,7.825395,tcp,147.32.84.164,60011.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.263972,0.000455,udp,147.32.84.164,48443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.264063,7.824876,tcp,147.32.84.164,60014.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.264074,7.825125,tcp,147.32.84.164,60015.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.264863,0.000705,udp,147.32.84.164,39592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,74,485,279.5,0.13237924865831843,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.265660,337.850342,tcp,147.32.84.164,36812.0,->,74.125.232.202,80.0,FSPA_FSPA,0.0,0.0,1031,931018,152149,778869,903.0242483026188,0.16342218947431736,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.265666,0.000217,udp,147.32.84.164,41879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.265671,337.849915,tcp,147.32.84.164,36813.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,732,680753,105167,575586,929.99043715847,0.15448628210231904,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.266689,0.000209,udp,147.32.84.164,50772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,70,137,103.5,0.33816425120772947,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.267967,0.00045,udp,147.32.84.164,46825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.285140,0.000279,udp,147.32.84.164,45545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.285733,0.000348,udp,147.32.84.164,55090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,76,235,155.5,0.24437299035369775,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.746136,0.111361,tcp,147.32.84.164,53782.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,14,5357,1822,3535,382.64285714285717,0.3401157364196379,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.849263,0.000237,udp,147.32.84.164,58663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.849332,17.24861,tcp,147.32.84.164,43541.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.849684,0.000443,udp,147.32.84.164,38559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.850455,0.10884,udp,147.32.84.164,43223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.851336,0.000181,udp,147.32.84.164,52092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.859630,0.000257,udp,147.32.84.164,40044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.958496,0.000269,udp,147.32.84.164,60089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:43.959700,17.137655,tcp,147.32.84.164,38268.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.040475,0.000194,udp,147.32.84.164,58810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.043382,0.019545,udp,147.32.84.164,37498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.051900,0.009798,udp,147.32.84.164,57093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.061258,0.000363,udp,147.32.84.164,60089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.061900,0.000559,udp,147.32.84.164,43120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.087065,0.000399,udp,147.32.84.164,46770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.310493,0.248706,udp,147.32.84.164,40879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.559371,0.246153,udp,147.32.84.164,35603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843110,16.253696,tcp,147.32.84.164,53791.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843117,0.019707,udp,147.32.84.164,51046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843162,16.253151,tcp,147.32.84.164,53792.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843169,0.000495,udp,147.32.84.164,35860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843173,16.253124,tcp,147.32.84.164,53793.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843374,16.253988,tcp,147.32.84.164,38277.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843818,336.272003,tcp,147.32.84.164,38731.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,658,589287,95658,493629,895.5729483282674,0.16232837310173143,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.843864,356.273468,tcp,147.32.84.164,38732.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,732,632774,118492,514282,864.4453551912568,0.18725800996880404,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.844203,0.020075,udp,147.32.84.164,42746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,74,143,108.5,0.34101382488479265,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.864063,336.251495,tcp,147.32.84.164,54387.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,972,1057982,106938,951044,1088.4588477366256,0.10107733401891525,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.864111,336.251251,tcp,147.32.84.164,54389.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,592,594844,55365,539479,1004.8040540540541,0.09307482297879781,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.864183,336.251312,tcp,147.32.84.164,54391.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,564,574612,58113,516499,1018.8156028368794,0.10113433064398238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.865500,16.23101,tcp,147.32.84.164,54750.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.865511,16.231289,tcp,147.32.84.164,54752.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.865580,16.231579,tcp,147.32.84.164,32942.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:44.865629,16.231129,tcp,147.32.84.164,32943.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.051947,0.000473,udp,147.32.84.164,57604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.397503,0.000301,udp,147.32.84.164,34769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.398198,0.000478,udp,147.32.84.164,45146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.398202,0.000666,udp,147.32.84.164,43530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.399137,0.000187,udp,147.32.84.164,34528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.399154,0.000216,udp,147.32.84.164,46312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:45.400385,0.000243,udp,147.32.84.164,55727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,80,151,115.5,0.3463203463203463,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:46.678417,0.018866,tcp,147.32.84.170,39973.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:50.027285,0.000309,udp,147.32.84.170,55012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:50.029527,0.247756,tcp,147.32.84.170,50413.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:52.483622,0.000257,udp,147.32.85.25,50637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:12:55.535979,0.000763,udp,46.0.37.125,23285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:12:56.677419,0.000422,udp,147.32.84.170,51058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:12:57.970338,240.034134,tcp,147.32.84.164,40230.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:58.164533,322.950745,tcp,147.32.84.164,54410.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,758,842088,83001,759087,1110.934036939314,0.098565708097016,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:58.185309,322.930023,tcp,147.32.84.164,44311.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,1010,1091704,95157,996547,1080.8950495049505,0.0871637366905315,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:12:58.673338,1061.815674,udp,147.32.84.229,13363.0,<->,201.83.144.220,13672.0,CON,0.0,0.0,4,655,133,522,163.75,0.20305343511450383,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:12:58.831256,0.000277,udp,147.32.84.59,44810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:03.234763,0.000728,udp,195.139.122.249,16843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:06.678666,0.000367,udp,147.32.84.170,39457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:06.679826,0.018143,tcp,147.32.84.170,51806.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:09.416820,0.000231,udp,147.32.84.138,60208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:10.660646,2995.694336,udp,85.65.126.146,40743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:11.884489,0.00036,udp,147.32.84.138,48006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:13.063120,0.266424,tcp,147.32.84.170,47836.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:13.321552,0.434783,tcp,147.32.84.170,47837.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:13.369097,0.310478,tcp,147.32.84.170,37324.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,20,4138,1132,3006,206.9,0.2735621072982117,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:14.489526,0.000307,udp,147.32.84.59,39571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:16.677400,0.000399,udp,147.32.84.170,40424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:19.036298,0.000214,udp,147.32.84.138,34634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:19.843907,0.000264,udp,147.32.84.181,53406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:21.022763,0.000396,udp,147.32.84.170,56422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:21.023580,0.000343,udp,147.32.84.170,34996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:21.647226,3006.951416,udp,62.42.50.241,54055.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:22.067616,0.000364,udp,147.32.84.59,51338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,578,80,498,289.0,0.1384083044982699,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:22.253101,0.000261,udp,147.32.84.138,50474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:24.063048,0.000282,udp,147.32.84.138,58858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:26.409073,0.198335,udp,147.32.84.59,49896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,73,143,108.0,0.33796296296296297,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:27.954727,3042.142334,udp,147.32.84.229,13363.0,<->,111.255.15.17,41772.0,CON,0.0,0.0,12,1431,619,812,119.25,0.43256464011180995,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:29.512804,3020.567627,udp,188.174.87.2,22056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:31.437993,3018.575439,udp,147.32.84.229,13363.0,<->,89.110.230.134,64909.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:31.581092,115.21582,tcp,147.32.84.59,58413.0,->,69.171.242.40,80.0,FSPA_FSPA,0.0,0.0,15,5652,1596,4056,376.8,0.2823779193205945,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:13:32.276901,61.280853,tcp,147.32.84.165,2730.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:13:34.973412,2421.640381,udp,87.202.181.200,21359.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,956,708,248,119.5,0.7405857740585774,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:36.276380,0.000178,udp,147.32.84.138,34863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:39.731158,0.000418,udp,147.32.84.59,46056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:40.520942,0.000172,udp,147.32.84.138,52038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:40.795609,310.321777,tcp,147.32.84.164,53838.0,->,74.125.232.203,80.0,FSPA_FSRPA,0.0,0.0,93,44666,25396,19270,480.2795698924731,0.5685756503828415,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:43.411153,3483.041016,udp,147.32.84.59,17344.0,<->,46.4.116.182,55012.0,CON,0.0,0.0,514,415650,407424,8226,808.6575875486382,0.9802093107181523,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:13:43.576216,0.000274,udp,147.32.84.164,50688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:43.869479,252.57724,tcp,147.32.84.59,56251.0,->,74.125.232.201,80.0,SPA_FSPA,0.0,0.0,25,5787,3099,2688,231.48,0.5355106272680145,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:13:45.474526,0.000245,udp,147.32.84.59,59480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:46.482019,0.029876,udp,147.32.86.77,44445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:46.677676,0.018172,tcp,147.32.84.170,39988.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:47.799269,0.000862,udp,46.47.68.21,10429.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1037,76,961,518.5,0.07328833172613308,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:47.946825,16.461733,tcp,213.173.165.130,45324.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,300,228097,12736,215361,760.3233333333334,0.05583589437826889,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:13:47.979552,2601.109131,udp,194.158.197.10,62705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:48.534109,0.000269,udp,147.32.86.20,64593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:49.277747,0.000321,udp,147.32.84.164,39808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:49.278283,0.000322,udp,147.32.84.164,32978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:49.355428,0.000356,udp,147.32.84.59,57564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:53.220689,0.000334,udp,147.32.86.92,41083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:53.440030,267.675964,tcp,147.32.84.164,43211.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,68,32843,17725,15118,482.9852941176471,0.539688822580154,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:53.454961,257.659576,tcp,147.32.84.164,40241.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,27,7383,3461,3922,273.44444444444446,0.4687796288771502,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:53.455081,267.661224,tcp,147.32.84.164,40242.0,->,74.125.232.197,80.0,FSPA_FSPA,0.0,0.0,57,26559,13491,13068,465.94736842105266,0.50796340223653,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.191116,0.000608,udp,147.32.84.164,45868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,562,75,487,281.0,0.13345195729537365,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.191124,0.000975,udp,147.32.84.164,33541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,562,75,487,281.0,0.13345195729537365,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.192048,295.925018,tcp,147.32.84.164,38665.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,568,469501,40232,429269,826.5862676056338,0.08569097829397594,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.461527,285.655762,tcp,147.32.84.164,38671.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,457,413570,27047,386523,904.9671772428884,0.06539884421016999,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.461599,285.655731,tcp,147.32.84.164,54438.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,646,522062,39872,482190,808.1455108359133,0.07637407051269772,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:55.514200,0.000225,udp,147.32.85.25,34949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:13:56.503953,0.010136,udp,147.32.84.164,52297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,80,224,152.0,0.2631578947368421,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:56.503957,0.019998,udp,147.32.84.164,39206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:56.525118,264.590881,tcp,147.32.84.164,57106.0,->,74.125.232.206,80.0,FSPA_FSPA,0.0,0.0,70,33175,14051,19124,473.92857142857144,0.4235418236623964,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:56.676386,0.000378,udp,147.32.84.170,49412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:13:57.316861,273.799927,tcp,147.32.84.164,49001.0,->,209.85.148.132,80.0,FSPA_FSPA,0.0,0.0,33,9716,2539,7177,294.42424242424244,0.26132153149444215,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:57.336036,0.354301,udp,147.32.84.164,44762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,83,200,141.5,0.29328621908127206,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:13:57.517443,1839.267334,udp,79.140.31.48,22420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,3050,2465,585,152.5,0.8081967213114755,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:13:58.550586,0.000834,udp,193.68.217.106,61098.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:00.734993,0.000185,udp,147.32.85.25,33563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:00.850083,0.00027,udp,147.32.85.34,63798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:05.232752,0.000321,udp,147.32.84.170,58739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:06.677264,0.000428,udp,147.32.84.170,59792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:07.176621,0.000307,udp,147.32.84.59,44406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:07.746367,273.370514,tcp,147.32.84.164,44354.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,316,239464,19041,220423,757.7974683544304,0.07951508368690074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:08.059383,1.000027,udp,78.128.185.18,61647.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:14:10.159107,0.000337,udp,147.32.84.138,51061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:16.676680,0.000288,udp,147.32.84.170,60070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:18.822307,262.2948,tcp,147.32.84.164,57114.0,->,74.125.232.206,80.0,FSPA_FSPA,0.0,0.0,420,315380,29201,286179,750.9047619047619,0.09258989155938867,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:21.102597,0.00032,udp,147.32.84.164,35449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,73,157,115.0,0.3173913043478261,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:23.940431,0.000636,udp,78.141.181.225,34037.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,87,60,73.5,0.5918367346938775,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:25.735342,0.108666,udp,147.32.85.7,59804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,70,133,101.5,0.3448275862068966,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:25.989858,0.000199,udp,147.32.84.138,43456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:26.676415,0.000447,udp,147.32.84.170,49036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:26.677453,0.000362,udp,147.32.84.170,44020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:26.678621,0.018623,tcp,147.32.84.170,51827.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:27.020724,0.00023,udp,147.32.84.138,60089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:27.505083,0.000285,udp,147.32.84.164,56227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,73,259,166.0,0.21987951807228914,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:29.130850,0.000737,udp,84.133.196.3,24660.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,72,69,70.5,0.5106382978723404,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:33.132525,61.298004,tcp,147.32.84.165,2731.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:14:33.177827,3186.779297,udp,93.56.58.131,58430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1446,1074,372,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:36.573799,0.000195,udp,147.32.85.25,38852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:37.331994,0.000589,udp,173.58.129.180,39148.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:42.065773,0.000208,udp,147.32.85.25,47263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:50.307413,3008.746582,udp,147.32.84.59,34059.0,<->,71.72.219.180,41316.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:14:52.502044,0.000179,udp,147.32.85.25,37741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:53.343138,1.070018,udp,58.34.100.202,26499.0,->,147.32.87.218,29018.0,INT,0.0,,2,144,144,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:14:54.029513,0.000334,udp,147.32.84.170,60154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:54.694998,0.24625,udp,147.32.84.164,33338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:55.435394,0.247069,udp,147.32.84.164,40611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:14:56.205729,0.001822,udp,147.32.84.59,53345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,83,399,241.0,0.17219917012448133,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:56.697922,0.018161,tcp,147.32.84.170,51831.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:14:57.248862,0.001926,udp,85.64.207.221,40659.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,484,60,272.0,0.8897058823529411,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:14:57.989147,0.001998,udp,147.32.84.59,55976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:59.112414,0.000242,udp,147.32.84.59,64915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:14:59.190199,2553.7229,udp,208.88.186.7,34056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,306,186,120,76.5,0.6078431372549019,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:02.330427,0.000299,udp,147.32.85.89,53460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:03.695852,0.000291,udp,147.32.84.138,38092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:05.996392,0.000219,udp,147.32.84.59,56663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:06.375315,0.000293,udp,147.32.87.40,43162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:06.677024,0.000382,udp,147.32.84.170,55168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:15.583379,0.000254,udp,147.32.84.138,45777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:16.909770,94.236008,tcp,147.32.84.59,4827.0,->,66.220.151.92,443.0,S_SA,0.0,0.0,7,462,66,396,66.0,0.14285714285714285,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:15:18.079338,0.00047,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,17,1,flow=Background,Background,-1 2011-08-16 17:15:18.207233,0.000151,udp,147.32.84.138,49066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:25.035291,0.304136,tcp,147.32.84.170,50443.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:26.676330,0.000363,udp,147.32.84.170,59108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:31.625983,0.125427,udp,147.32.87.135,2760.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,17,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 17:15:31.634799,0.008393,tcp,147.32.84.181,52597.0,->,147.32.253.253,6665.0,FSPA_FSPA,0.0,0.0,21,11704,625,11079,557.3333333333334,0.053400546821599455,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:15:31.947818,0.000156,udp,147.32.84.138,55601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:32.984948,0.000649,udp,31.163.77.40,32829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:34.000119,61.283203,tcp,147.32.84.165,2732.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:15:36.677183,0.000348,udp,147.32.84.170,60760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:42.566772,0.000231,udp,147.32.84.138,39513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:46.518393,3380.141602,udp,98.207.40.196,38259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:46.678565,0.018443,tcp,147.32.84.170,53472.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:47.032134,0.000775,udp,81.32.89.246,11270.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:50.389050,0.339592,udp,58.172.240.158,25455.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3179,120,3059,529.8333333333334,0.03774771940861906,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:53.371965,0.045987,udp,147.32.84.229,13363.0,<->,77.56.154.155,64994.0,CON,0.0,0.0,4,3038,60,2978,759.5,0.019749835418038184,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:15:53.442931,0.000297,udp,147.32.84.138,41787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:15:53.646054,126.077675,tcp,147.32.84.59,42143.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,36,23366,3135,20231,649.0555555555555,0.1341693058289823,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:15:56.032449,0.000294,udp,147.32.84.170,39500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:56.033098,0.000293,udp,147.32.84.170,40426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:56.034258,0.288581,tcp,147.32.84.170,59665.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:15:56.678843,0.000282,udp,147.32.84.170,59363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:02.716600,0.157249,udp,147.32.84.229,13363.0,<->,206.188.245.55,58869.0,CON,0.0,0.0,2,569,80,489,284.5,0.140597539543058,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:02.774087,238.127426,udp,114.43.236.248,23130.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:05.220949,0.00013,udp,147.32.85.25,59762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:16:06.680028,0.018338,tcp,147.32.84.170,45070.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:08.113218,0.000579,udp,200.119.45.18,12213.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,255,193,62,127.5,0.7568627450980392,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:08.301866,0.000279,udp,147.32.84.138,50462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:16:14.275090,1481.71936,udp,109.185.221.89,61972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,451,142,309,112.75,0.3148558758314856,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:15.937901,0.000413,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,17,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 17:16:16.007345,0.961754,tcp,84.42.140.191,42496.0,->,147.32.87.214,22.0,FSPA_FSPA,0.0,0.0,193,159922,152788,7134,828.6113989637306,0.9553907529920836,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:16:16.218019,115.50853,tcp,147.32.86.208,4595.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,90,87230,2106,85124,969.2222222222222,0.024143070044709388,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:16:18.046821,0.011054,tcp,147.32.84.59,50075.0,->,88.86.101.2,80.0,SRPA_FSPA,0.0,0.0,9,1473,787,686,163.66666666666666,0.5342837746096402,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:16:26.676572,0.000376,udp,147.32.84.170,46102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:26.677473,0.000258,udp,147.32.84.170,44211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:29.374059,23.52133,tcp,147.32.84.229,443.0,?>,109.237.0.158,35127.0,PA_,0.0,,8,615,615,0,76.875,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:16:33.244511,0.001786,udp,117.198.152.215,13707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:34.857981,61.299099,tcp,147.32.84.165,2733.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:16:35.587109,0.007995,tcp,147.32.84.59,58463.0,->,109.123.222.21,80.0,FSPA_FSPA,0.0,0.0,16,9653,1089,8564,603.3125,0.11281466901481405,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:16:35.734012,0.0003,udp,147.32.84.59,57958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,78,173,125.5,0.3107569721115538,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:16:36.478634,3583.233398,tcp,147.32.87.252,1140.0,->,147.32.87.3,524.0,_SPA,,0.0,90,11408,0,11408,126.75555555555556,0.0,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:16:36.678477,0.000454,udp,147.32.84.170,33074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:36.679451,0.000334,udp,147.32.84.170,39859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:36.680516,0.018209,tcp,147.32.84.170,45075.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:36.897965,0.000652,udp,145.53.36.130,10872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:39.385682,0.000807,udp,178.41.84.197,10114.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,74,473,273.5,0.13528336380255943,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:40.541162,2.288553,tcp,66.249.66.154,43652.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1543,713,830,154.3,0.46208684381075826,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:16:46.678580,0.000556,udp,147.32.84.170,54331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:46.679632,0.018377,tcp,147.32.84.170,51188.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:53.611412,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,9448.0,URP,0.0,,1,70,70,0,70.0,1.0,17,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:16:54.607480,0.00024,udp,147.32.84.138,51068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:16:56.678776,0.000405,udp,147.32.84.170,47178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:56.680860,0.017984,tcp,147.32.84.170,55082.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:16:57.435342,0.836995,tcp,147.32.84.59,50086.0,->,78.24.14.148,80.0,FSRPA_FSPA,0.0,0.0,157,198568,2083,196485,1264.7643312101911,0.010490109181741267,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:16:57.616367,3374.9646,udp,147.32.84.229,13363.0,<->,85.228.159.71,22921.0,CON,0.0,0.0,9,1204,1008,196,133.77777777777777,0.8372093023255814,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:16:58.018014,0.00034,udp,147.32.84.170,48324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:01.247850,0.000234,udp,147.32.84.138,58514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:06.009992,0.000405,udp,147.32.84.164,37646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.013743,15.0982,tcp,147.32.84.164,54274.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.014167,0.000834,udp,147.32.84.164,44667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.014439,0.000935,udp,147.32.84.164,41755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.338188,0.000221,udp,147.32.84.164,38169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.339522,0.000236,udp,147.32.84.164,43557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.340107,0.000414,udp,147.32.84.164,43551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.341623,0.000378,udp,147.32.84.164,35079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.347279,0.000244,udp,147.32.84.164,40875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.365754,0.000251,udp,147.32.84.164,55302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.367180,0.00019,udp,147.32.84.164,43213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.369431,0.000325,udp,147.32.84.164,53509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.380278,0.00048,udp,147.32.84.164,48561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:06.680727,0.018597,tcp,147.32.84.170,53485.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:07.340506,0.000413,udp,147.32.84.164,51726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.941514,0.017206,udp,147.32.84.164,52982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.958925,0.332161,udp,147.32.84.164,37472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,70,135,102.5,0.34146341463414637,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.959502,0.000605,udp,147.32.84.164,43049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.961121,0.000308,udp,147.32.84.164,38551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,73,167,120.0,0.30416666666666664,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.963047,0.000188,udp,147.32.84.164,58154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.966600,0.000159,udp,147.32.84.164,40652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,75,141,108.0,0.3472222222222222,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:07.968402,0.000304,udp,147.32.84.164,42712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.761080,0.000314,udp,147.32.84.164,40787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.761743,0.000316,udp,147.32.84.164,50136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,78,193,135.5,0.2878228782287823,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.762518,0.002125,udp,147.32.84.164,47219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.762724,0.000393,udp,147.32.84.164,41271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.763393,0.000326,udp,147.32.84.164,60226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,77,216,146.5,0.2627986348122867,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.765354,0.00037,udp,147.32.84.164,34187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,85,143,114.0,0.37280701754385964,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.766217,0.000284,udp,147.32.84.164,46743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.766793,0.000489,udp,147.32.84.164,34619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,75,180,127.5,0.29411764705882354,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.767289,0.010473,udp,147.32.84.164,33686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,84,167,125.5,0.3346613545816733,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.767643,0.000502,udp,147.32.84.164,55069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:08.869180,0.00023,udp,147.32.84.164,58019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:09.102069,0.000357,udp,147.32.84.164,57171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,81,138,109.5,0.3698630136986301,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:09.102593,0.000144,udp,147.32.84.164,47586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,81,138,109.5,0.3698630136986301,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:09.102745,0.000309,udp,147.32.84.164,59057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,72,124,98.0,0.3673469387755102,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:09.105033,0.000244,udp,147.32.84.164,49720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,82,141,111.5,0.36771300448430494,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:10.402954,0.000853,udp,94.143.240.31,17913.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,76,483,279.5,0.13595706618962433,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:11.331043,249.796143,tcp,147.32.84.164,44881.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,21,2937,1750,1187,139.85714285714286,0.595846101464079,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:11.711012,0.020447,udp,147.32.84.59,65014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:12.678292,0.001783,udp,41.203.132.29,58965.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,509,60,284.5,0.8945518453427065,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:13.852824,0.000275,udp,147.32.84.189,36149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:14.527957,492.712006,udp,141.2.136.195,2874.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,452,141,311,113.0,0.31194690265486724,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:16.235674,0.000223,udp,147.32.84.138,42749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:16.678178,0.000428,udp,147.32.84.170,36133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:16.680329,0.018376,tcp,147.32.84.170,46282.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:18.358158,12.746875,tcp,147.32.84.164,42192.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,94,87042,2894,84148,925.9787234042553,0.03324831690448289,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:18.367460,0.001597,udp,147.32.84.164,49921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:19.492729,0.000712,udp,184.32.175.97,50023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:20.344589,2597.509766,udp,147.32.84.229,13363.0,<->,149.5.45.252,43037.0,CON,0.0,0.0,16,2122,939,1183,132.625,0.44250706880301605,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:28.714635,61.240398,tcp,200.55.38.234,39941.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,34,7861,2230,5631,231.2058823529412,0.2836789212568376,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:17:29.091673,0.000682,udp,78.58.74.165,64216.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:31.243381,0.070166,udp,147.32.84.59,53810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,86,231,158.5,0.27129337539432175,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:35.668118,0.000215,udp,147.32.84.138,41777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:35.726569,61.297485,tcp,147.32.84.165,2734.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:17:36.679402,0.000382,udp,147.32.84.170,52588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:40.739161,0.000203,udp,58.253.78.107,8090.0,->,147.32.85.120,30247.0,INT,0.0,,1,72,72,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:17:41.144388,19.962629,tcp,147.32.84.164,42193.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,370,338409,11667,326742,914.6189189189189,0.034476033438826985,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:41.144604,0.000426,udp,147.32.84.164,47303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:41.144757,19.96286,tcp,147.32.84.164,42198.0,->,81.0.213.114,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:41.145841,0.000427,udp,147.32.84.164,52546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:17:45.556378,1.49692,tcp,147.32.84.59,58536.0,->,68.232.43.5,80.0,FSPA_FSPA,0.0,0.0,10,1402,865,537,140.2,0.6169757489300999,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:17:46.678883,0.000314,udp,147.32.84.170,48874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:17:47.362574,10.262938,tcp,147.32.84.59,44124.0,->,81.0.213.114,80.0,FSPA_FSPA,0.0,0.0,48,28874,5987,22887,601.5416666666666,0.20734917226570618,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:17:47.488406,0.000181,udp,147.32.84.138,35123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:47.501427,0.000294,udp,147.32.86.168,34562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:47.590772,0.020888,udp,147.32.84.59,60797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,114,203,158.5,0.35962145110410093,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:49.811385,3335.970947,udp,147.32.84.8,58858.0,<->,82.208.56.89,123.0,CON,0.0,0.0,39,3510,1800,1710,90.0,0.5128205128205128,17,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 17:17:51.615849,0.000331,udp,147.32.84.138,39616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:52.808259,1258.599976,udp,206.191.21.204,4110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:54.020285,982.542847,udp,99.98.90.141,2224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,420,240,180,70.0,0.5714285714285714,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:55.189710,53.950489,tcp,147.32.84.59,50105.0,->,80.239.149.25,80.0,FSPA_FSPA,0.0,0.0,30,15443,3769,11674,514.7666666666667,0.24405879686589393,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:17:56.661305,0.203394,udp,147.32.85.103,25532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:56.808678,0.000551,udp,147.32.84.59,53348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:57.268106,7e-06,icmp,147.32.86.11,,<-,147.32.87.3,2.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,1,flow=Background,Background,-1 2011-08-16 17:17:57.682541,0.000591,udp,147.32.86.111,54952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,458,73,385,229.0,0.15938864628820962,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:17:59.623414,0.140332,udp,147.32.84.229,13363.0,<->,74.215.188.121,5384.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:17:59.923115,0.331946,tcp,147.32.84.59,51529.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1536,699,837,170.66666666666666,0.455078125,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:18:00.033873,0.000416,udp,147.32.84.170,50266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:01.003167,0.000448,udp,147.32.85.34,58447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:01.048549,0.000293,udp,147.32.85.34,59369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:01.722546,0.001672,udp,147.32.84.59,60097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:03.127176,1.124244,tcp,147.32.84.59,53540.0,->,195.113.232.83,80.0,FSPA_FSRPA,0.0,0.0,18,6905,2474,4431,383.6111111111111,0.358291093410572,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:18:04.203149,0.10681,tcp,147.32.84.59,4878.0,->,109.123.94.117,843.0,FSPA_FSPA,0.0,0.0,9,652,323,329,72.44444444444444,0.495398773006135,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:18:06.022403,0.001776,udp,147.32.85.7,47203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,422,72,350,211.0,0.17061611374407584,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:06.641709,0.00022,udp,147.32.84.164,33445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:18:06.642992,240.056549,tcp,147.32.84.164,58751.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,32,4643,3058,1585,145.09375,0.658625888434202,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:18:06.676565,0.000335,udp,147.32.84.170,37302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:07.263575,0.00028,udp,147.32.87.36,44338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 17:18:08.155392,0.000739,udp,118.108.251.32,14260.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,77,493,285.0,0.13508771929824562,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:18:10.467093,0.019193,tcp,147.32.84.59,50141.0,->,94.124.105.23,80.0,FSRPA_FSPA,0.0,0.0,10,1836,1016,820,183.6,0.5533769063180828,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:18:11.052680,0.00024,udp,147.32.84.138,51996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:11.453253,0.002939,udp,147.32.84.170,54149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:11.529057,0.000249,udp,147.32.84.170,58222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:12.030577,0.000345,udp,147.32.84.170,50833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:12.596452,0.000255,udp,147.32.84.138,37441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:13.903051,18.335094,tcp,147.32.84.170,46298.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:13.903142,18.334875,tcp,147.32.84.170,46299.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:13.903802,0.000343,udp,147.32.84.170,33831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:13.904686,0.00046,udp,147.32.84.170,58318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,75,202,138.5,0.27075812274368233,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:13.904897,18.332617,tcp,147.32.84.170,60747.0,->,74.125.232.210,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.079519,0.000382,udp,147.32.84.170,42459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.082127,240.041641,tcp,147.32.84.170,60212.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.165808,0.000403,udp,147.32.84.170,60867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.184037,0.246595,udp,147.32.84.170,38555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.191310,0.000454,udp,147.32.84.170,58846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.368236,0.000328,udp,147.32.84.170,56946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.368925,0.000352,udp,147.32.84.170,33655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.500656,0.000364,udp,147.32.84.170,35845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.501892,0.037073,udp,147.32.84.170,47491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,76,179,127.5,0.2980392156862745,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.568066,0.24688,udp,147.32.84.170,53388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,85,153,119.0,0.35714285714285715,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.763873,27.481829,tcp,147.32.84.170,50475.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,46,37050,2541,34509,805.4347826086956,0.06858299595141701,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.765130,0.000242,udp,147.32.84.170,43732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.765659,0.000285,udp,147.32.84.170,52711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.782718,0.000474,udp,147.32.84.170,59780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,78,196,137.0,0.2846715328467153,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.783944,7.461111,tcp,147.32.84.170,34799.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1546,919,627,140.54545454545453,0.5944372574385511,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.784080,7.460968,tcp,147.32.84.170,34801.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1544,916,628,140.36363636363637,0.5932642487046632,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.784141,17.461235,tcp,147.32.84.170,34803.0,->,91.198.174.233,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.784740,17.461073,tcp,147.32.84.170,41175.0,->,91.198.174.224,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.865813,0.753061,udp,147.32.84.170,53437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,71,154,112.5,0.31555555555555553,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.902007,27.343752,tcp,147.32.84.170,43976.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,41,17159,4324,12835,418.5121951219512,0.25199603706509704,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:14.902021,27.344032,tcp,147.32.84.170,43977.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,54,36869,3668,33201,682.7592592592592,0.09948737421682172,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.172770,0.000322,udp,147.32.84.170,52684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.382213,0.000412,udp,147.32.84.170,59530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.383661,0.000373,udp,147.32.84.170,39604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.573300,0.000333,udp,147.32.84.170,57131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.577627,0.000305,udp,147.32.84.170,51332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.579283,0.00034,udp,147.32.84.170,50419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.631213,0.000188,udp,147.32.84.170,57693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.632275,0.000217,udp,147.32.84.170,53980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.634617,0.000286,udp,147.32.84.170,49493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.641503,0.000266,udp,147.32.84.170,52960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.646714,0.000306,udp,147.32.84.170,56097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.827354,0.000266,udp,147.32.84.170,32986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.828662,0.000335,udp,147.32.84.170,35563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.829291,0.000247,udp,147.32.84.170,45127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,76,200,138.0,0.2753623188405797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.830096,0.000269,udp,147.32.84.170,52310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.887394,0.120656,udp,147.32.84.170,35243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,84,184,134.0,0.31343283582089554,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.947504,0.000337,udp,147.32.84.170,43131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.949313,0.0003,udp,147.32.84.170,39122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.950386,0.000313,udp,147.32.84.170,60764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:15.952284,0.000257,udp,147.32.84.170,55470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:16.182758,0.283853,udp,147.32.84.170,49266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:16.367722,0.168694,udp,147.32.84.170,45665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,80,190,135.0,0.2962962962962963,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:16.734615,0.195178,udp,147.32.84.170,50154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,84,156,120.0,0.35,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:16.751454,0.283668,udp,147.32.84.170,39472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:16.931328,0.000309,udp,147.32.84.170,49077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,84,259,171.5,0.24489795918367346,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:18.580551,0.000596,udp,107.62.229.76,18570.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:18:21.930887,32.545464,tcp,217.174.130.30,65271.0,->,147.32.87.238,39371.0,SRA_RA,0.0,0.0,4,271,211,60,67.75,0.7785977859778598,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:18:25.568628,0.000378,udp,147.32.84.170,51321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:25.569569,246.69548,tcp,147.32.84.170,44186.0,->,209.85.149.116,80.0,FSPA_FSPA,0.0,0.0,9648,9629652,213757,9415895,998.0982587064676,0.022197790740516896,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:26.679723,0.000367,udp,147.32.84.170,42484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:30.073483,0.000332,udp,147.32.85.34,63912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:31.031621,0.000303,udp,147.32.84.170,48436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:36.593316,61.283089,tcp,147.32.84.165,2735.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:18:36.678273,0.000392,udp,147.32.84.170,35136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:37.600335,6.724774,tcp,66.249.72.170,47600.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,9951,1119,8832,497.55,0.11245100994874888,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:18:42.113432,0.000256,udp,147.32.84.138,38125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:43.077096,0.000261,udp,147.32.84.134,45391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:18:45.641510,0.000217,udp,147.32.84.138,40562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:46.679816,0.017949,tcp,147.32.84.170,46347.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:49.881362,0.001003,udp,195.59.12.170,18368.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:18:54.679268,0.327356,tcp,147.32.84.59,51577.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1535,699,836,170.55555555555554,0.4553745928338762,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:18:56.583502,116.38945,tcp,147.32.84.166,56720.0,->,209.85.149.100,80.0,FSPA_FSPA,0.0,0.0,40,17958,12749,5209,448.95,0.7099342911237332,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:18:56.679165,0.000374,udp,147.32.84.170,36265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:18:57.266494,0.000186,udp,147.32.84.138,37777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:18:57.439527,3570.381836,tcp,147.32.84.164,53377.0,,205.188.8.253,443.0,PA_PA,0.0,0.0,277,24632,8789,15843,88.92418772563177,0.3568122767132186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:19:02.022082,0.00039,udp,147.32.84.170,33513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:04.318896,0.000785,udp,193.110.115.62,56822.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,77,491,284.0,0.13556338028169015,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:19:06.607440,0.000236,udp,147.32.84.138,41253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:06.678056,0.000316,udp,147.32.84.170,58900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:06.683063,0.000184,udp,147.32.85.25,58198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:13.302900,0.000243,udp,147.32.84.138,56964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:16.842580,0.000245,udp,147.32.85.25,47080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:17.239452,0.001775,udp,147.32.84.59,59075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:17.560400,0.141496,udp,147.32.86.44,10966.0,<->,66.103.45.2,24547.0,CON,0.0,0.0,2,561,76,485,280.5,0.1354723707664884,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:19:21.002809,0.2333,udp,78.128.207.246,34413.0,->,239.255.255.250,1900.0,INT,0.0,,3,1144,1144,0,381.3333333333333,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:19:22.226440,0.000287,udp,147.32.85.25,39208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:27.443902,3570.886475,tcp,147.32.84.164,59646.0,,74.125.39.125,5222.0,PA_PA,0.0,0.0,374,99143,21503,77640,265.0882352941176,0.2168887364715613,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:19:32.907272,0.000613,udp,78.173.146.7,48895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:19:33.033214,0.000271,udp,147.32.84.170,60042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:34.573564,0.137465,udp,147.32.84.229,13363.0,<->,67.193.18.251,21053.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:19:34.573572,3213.76709,udp,147.32.84.229,13363.0,<->,77.209.124.138,62530.0,CON,0.0,0.0,6,408,288,120,68.0,0.7058823529411765,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:19:35.933504,0.000252,udp,147.32.84.59,59220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:36.678161,0.000358,udp,147.32.84.170,43471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:36.680550,0.018545,tcp,147.32.84.170,46354.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:37.451075,61.298759,tcp,147.32.84.165,2736.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:19:41.773331,0.000243,udp,147.32.84.138,41115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:42.777422,0.000405,udp,147.32.84.59,51838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:48.022153,0.000263,udp,147.32.84.138,33746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:53.840854,0.000211,udp,147.32.84.138,45433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:19:56.678333,0.009785,udp,147.32.84.170,49120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:56.688658,0.000434,udp,147.32.84.170,41977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:19:59.830813,0.000247,udp,147.32.84.134,58776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:19:59.832735,240.062515,tcp,147.32.84.134,53785.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,22,4194,2098,2096,190.63636363636363,0.5002384358607534,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:19:59.870029,0.000375,udp,147.32.84.134,35461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:01.107050,0.000298,udp,147.32.85.34,61118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:01.138307,0.000391,udp,147.32.85.34,54407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:01.153426,0.000272,udp,147.32.85.34,60003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:01.452261,60.001488,tcp,147.32.86.44,4477.0,->,147.32.80.13,3128.0,FSPA_FSA,0.0,0.0,9,1237,997,240,137.44444444444446,0.8059822150363783,17,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:20:02.496871,0.00072,udp,188.97.135.201,34540.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,77,492,284.5,0.13532513181019332,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:05.799039,0.002235,udp,147.32.84.59,52479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:07.622979,15.437927,udp,147.32.84.94,7103.0,->,74.109.125.79,64239.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:20:08.353700,0.000215,udp,147.32.85.25,56750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:09.616431,0.156445,udp,147.32.86.92,46891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,361,88,273,180.5,0.24376731301939059,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:11.148000,0.000293,udp,147.32.84.138,55671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:11.618650,0.020793,tcp,147.32.84.134,41606.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:14.103318,0.000366,udp,147.32.84.59,53643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,76,151,113.5,0.33480176211453744,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:15.415303,0.0,udp,218.80.240.126,10005.0,->,147.32.85.114,4647.0,INT,0.0,,1,72,72,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:20:20.666893,0.000346,udp,147.32.84.134,50959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:21.834210,73.172119,tcp,147.32.84.59,4892.0,->,2.20.182.41,443.0,SRPA_FSPA,0.0,0.0,22,7983,1454,6529,362.8636363636364,0.18213704121257673,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:20:24.050963,3516.679932,tcp,147.32.84.59,60060.0,,213.146.189.204,80.0,PA_PA,0.0,0.0,120,8332,5490,2842,69.43333333333334,0.6589054248679789,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:20:26.678442,0.000321,udp,147.32.84.170,50306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:26.679320,0.000432,udp,147.32.84.170,45260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:26.680513,0.019087,tcp,147.32.84.170,48562.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:28.840546,8.983095,tcp,88.170.110.66,49329.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:20:29.111948,0.334316,tcp,147.32.86.20,3023.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,35109,1151,33958,797.9318181818181,0.03278361673644934,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:20:29.687273,0.007328,tcp,147.32.84.134,41608.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:29.891683,0.000258,udp,147.32.84.59,39076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:35.029859,0.00024,udp,147.32.84.170,51748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:35.399290,3515.486816,udp,221.252.137.77,51387.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,136,25005,12266,12739,183.86029411764707,0.49054189162167566,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:36.585098,0.338946,udp,147.32.84.59,64784.0,<->,140.113.218.177,26485.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:20:36.677385,0.000318,udp,147.32.84.170,49198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:38.319155,63.973454,tcp,147.32.84.165,2737.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:20:39.915892,3027.158447,udp,213.128.237.210,53175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:42.943229,3089.448242,udp,62.31.242.34,61255.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:44.113452,0.000204,udp,147.32.85.25,43106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:46.677777,0.000433,udp,147.32.84.170,58568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:46.679484,0.017998,tcp,147.32.84.170,42088.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:47.200447,0.000587,udp,95.54.64.36,22367.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:47.658483,2492.297119,udp,83.185.20.143,52072.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:47.725462,0.000222,udp,147.32.84.134,59048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:47.726228,0.000244,udp,147.32.84.134,40253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:47.727084,0.014989,tcp,147.32.84.134,41610.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:20:53.026121,0.000742,udp,24.121.77.177,7072.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:55.495967,2109.874023,udp,82.176.151.77,5936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,709,357,352,101.28571428571429,0.5035260930888575,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:20:56.678017,0.000355,udp,147.32.84.170,41614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:20:56.811500,0.196097,udp,147.32.84.59,57621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,90,151,120.5,0.37344398340248963,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:57.220938,0.000315,udp,147.32.84.138,53916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:20:58.704206,4.722093,tcp,147.32.85.113,53204.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,23,4615,2220,2395,200.65217391304347,0.4810400866738895,17,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:20:59.935554,0.000653,udp,77.97.207.115,18345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:01.374048,0.000217,udp,147.32.84.138,38200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:06.637390,607.045044,udp,109.185.221.140,60639.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,486,362,124,121.5,0.7448559670781894,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:06.677936,0.000458,udp,147.32.84.170,59711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:10.532581,2247.925049,tcp,161.76.107.114,3981.0,,147.32.84.229,13363.0,FPA_FPA,0.0,0.0,1231,109443,57328,52115,88.90576766856215,0.5238160503641165,17,0,flow=Background,Background,-1 2011-08-16 17:21:13.651204,75.954124,tcp,147.32.84.25,56109.0,->,80.74.153.204,80.0,FSPA_FSPA,0.0,0.0,123,97634,5789,91845,793.7723577235772,0.05929286928733843,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:21:14.793118,0.000334,udp,147.32.84.134,39101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:14.793964,0.000286,udp,147.32.84.134,35647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:15.220032,0.000209,udp,147.32.84.138,47943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:19.359913,2148.781738,udp,147.32.84.94,7103.0,->,94.195.246.35,7352.0,INT,0.0,,16,1344,1344,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:21:21.662325,3110.393311,udp,2.49.19.46,33341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1002,754,248,125.25,0.7524950099800399,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:23.815489,0.000465,udp,147.32.84.134,39388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:29.752872,0.000265,udp,147.32.84.138,49640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:31.560123,0.000189,udp,147.32.84.134,43035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:31.560990,0.000328,udp,147.32.84.134,39193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:31.561880,0.000368,udp,147.32.84.134,57350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:32.837793,0.000283,udp,147.32.84.134,50534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:32.838560,0.000312,udp,147.32.84.134,33115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:35.112378,0.000214,udp,147.32.84.138,33688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:35.953819,3423.018311,udp,188.36.161.150,6326.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,40,4332,3092,1240,108.3,0.7137580794090489,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:36.232904,2582.625488,udp,147.32.84.94,7103.0,->,85.53.218.38,7455.0,INT,0.0,,16,1344,1344,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:21:36.679949,0.018189,tcp,147.32.84.170,48518.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:37.019944,0.255027,tcp,147.32.84.170,49972.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:38.637389,2983.827148,udp,147.32.84.94,7103.0,<->,188.40.73.108,50012.0,CON,0.0,0.0,1210,1031231,20584,1010647,852.2570247933884,0.019960610183363377,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:40.224376,0.541323,udp,192.168.88.173,57594.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:21:40.661041,1207.321899,udp,82.104.210.185,45811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,705,519,186,117.5,0.7361702127659574,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:21:41.851151,61.30769,tcp,147.32.84.165,2738.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:21:41.868753,0.000216,udp,147.32.84.134,34629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:41.869496,0.000287,udp,147.32.84.134,34585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:41.870326,0.011013,tcp,147.32.84.134,41617.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:41.926534,0.982675,udp,147.32.87.48,3573.0,->,147.32.87.100,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:21:44.958573,0.000409,udp,147.32.84.138,51593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:46.678411,0.000417,udp,147.32.84.170,56499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:46.680356,0.018056,tcp,147.32.84.170,42096.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:47.054920,0.32171,tcp,147.32.84.59,51788.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1535,699,836,170.55555555555554,0.4553745928338762,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:21:47.257118,0.000318,udp,147.32.84.138,50630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:50.893105,0.000282,udp,147.32.84.134,33061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:21:52.001279,6.9e-05,udp,147.32.85.25,58656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:52.366381,0.0,tcp,173.192.70.82,58647.0,->,147.32.85.188,21.0,S_,0.0,,1,74,74,0,74.0,1.0,17,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:21:56.677910,0.000391,udp,147.32.84.170,35321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:21:56.917666,0.000236,udp,147.32.84.138,34266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:21:59.911071,0.000368,udp,147.32.84.134,44117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:01.140730,0.000246,udp,147.32.84.59,45416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:01.262854,0.000231,udp,147.32.85.34,60496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:01.292753,0.000315,udp,147.32.85.34,58195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:01.328373,0.000301,udp,147.32.85.34,59416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:01.907569,0.24656,udp,147.32.84.134,49655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:05.253640,0.041074,tcp,147.32.84.13,58221.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1811,963,848,201.22222222222223,0.5317504141358366,17,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:22:06.459659,0.0,udp,218.81.167.98,10002.0,->,147.32.85.114,4647.0,INT,0.0,,1,72,72,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:22:06.638705,2435.585205,udp,85.71.140.234,10065.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:06.898340,0.016906,udp,147.32.84.59,44510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:08.017714,0.000179,udp,147.32.84.170,46839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:08.018476,0.000317,udp,147.32.84.170,60190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:08.019713,0.243037,tcp,147.32.84.170,49976.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:08.942426,0.014035,tcp,147.32.84.134,41621.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:13.739462,0.002061,udp,147.32.84.59,64386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,388,80,308,194.0,0.20618556701030927,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:22:15.752202,0.404778,udp,147.32.84.94,7103.0,<->,46.103.23.65,7148.0,CON,0.0,0.0,53,40783,39709,1074,769.4905660377359,0.9736654978790182,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:16.673879,2964.751465,udp,95.43.121.164,1827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1675,1080,595,139.58333333333334,0.6447761194029851,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:16.678193,0.000491,udp,147.32.84.170,49167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:16.679253,0.000312,udp,147.32.84.170,60697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:17.968772,0.007387,tcp,147.32.84.134,41622.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:18.384899,1323.735962,udp,87.160.9.1,27024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,401,221,180,66.83333333333333,0.5511221945137157,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:20.990448,0.000702,udp,61.227.78.239,24182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:22.225294,2.476622,tcp,66.249.66.165,55586.0,->,147.32.87.27,443.0,FSRPA_FSPA,0.0,0.0,23,7939,1591,6348,345.17391304347825,0.20040307343494143,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:22:31.051276,0.002041,udp,89.249.167.153,61013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,482,60,271.0,0.8892988929889298,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:31.676832,0.329636,tcp,147.32.84.59,51835.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1539,699,840,171.0,0.45419103313840153,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:22:36.679843,0.017861,tcp,147.32.84.170,41344.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:22:39.029665,2473.648682,udp,147.32.84.94,7103.0,->,89.182.179.25,7188.0,INT,0.0,,8,672,672,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:22:42.728502,61.283062,tcp,147.32.84.165,2739.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:22:45.028064,0.000314,udp,147.32.84.134,35557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:45.996428,2359.612061,udp,147.32.84.229,13363.0,<->,80.110.54.246,59274.0,CON,0.0,0.0,16,4472,3916,556,279.5,0.8756708407871199,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:47.298652,3012.470703,udp,147.32.84.229,13363.0,<->,93.72.189.46,13050.0,CON,0.0,0.0,11,1601,1281,320,145.54545454545453,0.8001249219237976,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:47.582520,3.428242,tcp,147.32.86.50,53437.0,->,65.54.89.7,80.0,SRPA_FSPA,0.0,0.0,10,1076,535,541,107.6,0.4972118959107807,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:22:49.453203,10.048499,tcp,147.32.84.59,64311.0,->,173.194.16.100,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:22:54.049808,0.000403,udp,147.32.84.134,60888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:22:55.416613,1458.020996,udp,111.235.201.57,1767.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1301,1181,120,325.25,0.9077632590315142,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:22:57.731856,15.00235,tcp,147.32.86.89,3749.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,1562,1050,512,142.0,0.6722151088348272,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:23:06.677803,0.000291,udp,147.32.84.170,55467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:08.018353,2746.699219,udp,147.32.84.94,7103.0,<->,213.239.196.180,53012.0,CON,0.0,0.0,910,779086,15474,763612,856.1384615384616,0.019861735418169497,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:08.290933,6.248193,tcp,66.249.72.50,42535.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18160,1867,16293,585.8064516129032,0.10280837004405287,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:23:09.526988,0.002177,udp,147.32.84.134,35137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:09.777947,2919.160889,udp,147.32.84.94,7103.0,<->,188.40.121.99,50012.0,CON,0.0,0.0,936,801450,16158,785292,856.25,0.020160958263148045,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:10.020089,1.1e-05,udp,147.32.84.170,43649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:10.020621,0.000326,udp,147.32.84.170,35186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:10.029289,0.155299,udp,147.32.84.229,13363.0,<->,76.107.224.47,10674.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:10.080426,0.00023,udp,147.32.84.134,54549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,65,140,102.5,0.3170731707317073,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.082166,0.000441,udp,147.32.84.134,53106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.082228,19.81348,tcp,147.32.84.134,57456.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.085304,0.000154,udp,147.32.84.134,47372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.086041,0.108404,udp,147.32.84.134,42632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.091530,0.000196,udp,147.32.84.134,55666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,65,140,102.5,0.3170731707317073,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.195503,240.034805,tcp,147.32.84.134,58989.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,26,2494,1398,1096,95.92307692307692,0.5605453087409783,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.211139,0.000301,udp,147.32.84.134,60954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.211795,0.000339,udp,147.32.84.134,44781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.211866,0.000482,udp,147.32.84.134,35064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.214795,0.000613,udp,147.32.84.134,41528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.217410,0.00987,udp,147.32.84.134,34584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.226463,0.000383,udp,147.32.84.134,55627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.248699,0.000611,udp,147.32.84.134,36522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.250416,0.000237,udp,147.32.84.134,39468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.251150,0.00033,udp,147.32.84.134,59245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.482008,0.000433,udp,147.32.84.134,47818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.482928,0.00035,udp,147.32.84.134,46705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.485103,0.002598,udp,147.32.84.134,50439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.485161,0.00293,udp,147.32.84.134,44228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.488233,0.002331,udp,147.32.84.134,47905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.491205,0.000259,udp,147.32.84.134,55234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.493772,0.000272,udp,147.32.84.134,41367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,75,150,112.5,0.3333333333333333,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.494571,0.001994,udp,147.32.84.134,57070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.496068,0.000232,udp,147.32.84.134,50676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.499181,0.00197,udp,147.32.84.134,57807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.502800,0.002102,udp,147.32.84.134,35997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,78,169,123.5,0.3157894736842105,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.505343,0.000402,udp,147.32.84.134,42123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,78,176,127.0,0.30708661417322836,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.506343,0.000232,udp,147.32.84.134,34096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:10.710498,0.246623,udp,147.32.84.134,57291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.207183,0.000393,udp,147.32.84.134,60744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.693871,0.007275,tcp,147.32.84.134,34291.0,->,194.79.52.193,80.0,FSPA_FSPA,0.0,0.0,9,1422,906,516,158.0,0.6371308016877637,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.700603,0.016546,tcp,147.32.84.134,52905.0,->,194.79.52.192,80.0,FSPA_FSPA,0.0,0.0,66,33854,2453,31401,512.939393939394,0.0724582028711526,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.701003,0.000348,udp,147.32.84.134,35621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.701492,0.000886,udp,147.32.84.134,34178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.701540,0.000852,udp,147.32.84.134,34822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.702665,18.18387,tcp,147.32.84.134,54311.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.702852,0.000311,udp,147.32.84.134,54286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.702858,18.18368,tcp,147.32.84.134,35395.0,->,194.79.52.195,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.702937,18.184126,tcp,147.32.84.134,47112.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.703357,18.18977,tcp,147.32.84.134,54739.0,->,62.168.44.116,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.703485,0.000385,udp,147.32.84.134,49878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.703596,18.184311,tcp,147.32.84.134,50458.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.703669,0.00045,udp,147.32.84.134,35981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.704042,18.183849,tcp,147.32.84.134,50467.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.704114,0.000266,udp,147.32.84.134,60931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.787288,90.276894,tcp,147.32.84.134,47148.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,81,64377,4233,60144,794.7777777777778,0.06575329698494804,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.823918,0.102293,tcp,147.32.84.134,50487.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,11,2718,1132,1586,247.0909090909091,0.41648270787343633,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.826589,18.617849,tcp,147.32.84.134,54360.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.841679,129.424698,tcp,147.32.84.134,47155.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,11,1635,957,678,148.63636363636363,0.5853211009174312,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.845606,129.835098,tcp,147.32.84.134,47158.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,23,11694,1378,10316,508.4347826086956,0.11783820762784333,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.846048,90.217735,tcp,147.32.84.134,47160.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,14,5225,1114,4111,373.2142857142857,0.21320574162679426,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.919231,0.000261,udp,147.32.84.134,36340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.919761,0.000483,udp,147.32.84.134,58135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.920494,0.000246,udp,147.32.84.134,36514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.921295,0.000342,udp,147.32.84.134,34166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.921867,0.000217,udp,147.32.84.134,39363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.922092,0.000295,udp,147.32.84.134,52322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.922680,0.00025,udp,147.32.84.134,60658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.923892,0.000288,udp,147.32.84.134,59361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.924537,0.000372,udp,147.32.84.134,52339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:11.926623,0.00036,udp,147.32.84.134,48829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:12.036143,0.004813,tcp,147.32.84.134,52065.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1841,985,856,204.55555555555554,0.5350353068984248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:12.128421,0.000214,udp,147.32.84.134,57195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:13.322137,0.297373,tcp,147.32.84.170,59875.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:14.009139,0.296474,tcp,147.32.84.170,60224.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:14.534782,3087.268799,tcp,147.32.86.74,4350.0,,147.32.192.34,993.0,PA_PA,0.0,0.0,31,2745,1332,1413,88.54838709677419,0.4852459016393443,17,1,flow=Background,Background,-1 2011-08-16 17:23:16.676756,0.000441,udp,147.32.84.170,46264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:16.677741,0.000243,udp,147.32.84.170,57718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:17.581193,5.424651,udp,77.254.6.19,44614.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,956,552,404,239.0,0.5774058577405857,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:19.229753,0.000155,udp,147.32.85.25,53287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:23:21.146949,0.000193,udp,147.32.84.134,33556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:22.669180,0.00084,udp,113.87.88.169,41056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:24.175359,0.000272,udp,147.32.84.138,51908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:23:26.678129,0.00045,udp,147.32.84.170,59756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:28.460882,0.328489,tcp,147.32.84.59,51893.0,->,76.13.114.90,80.0,FSPA_FSPA,0.0,0.0,9,1539,699,840,171.0,0.45419103313840153,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:23:34.525020,0.173857,udp,147.32.85.25,48764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:23:36.677581,0.000388,udp,147.32.84.170,32844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:39.183971,0.000257,udp,147.32.84.134,32937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:41.038292,0.000337,udp,147.32.84.170,34137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:42.612760,0.000325,udp,147.32.84.138,39527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:23:43.586832,61.297543,tcp,147.32.84.165,2740.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:23:45.358434,0.00203,udp,84.193.22.96,29920.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:46.679478,0.018315,tcp,147.32.84.170,42295.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:23:48.204172,0.00809,tcp,147.32.84.134,45739.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:48.884758,0.000733,udp,77.52.181.214,8681.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,722,76,646,361.0,0.10526315789473684,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:23:56.864290,0.016241,tcp,90.183.39.17,38864.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1392,917,475,139.2,0.6587643678160919,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:23:57.222947,0.000217,udp,147.32.84.134,50571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:23:57.224526,0.008843,tcp,147.32.84.134,45740.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:00.781870,0.0,tcp,46.105.183.210,80.0,->,147.32.86.82,47289.0,SA_,0.0,,1,74,74,0,74.0,1.0,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:24:01.248900,0.00029,udp,147.32.85.34,59363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:04.710468,0.000338,udp,147.32.86.168,48627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,68,129,98.5,0.34517766497461927,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:06.245437,0.000259,udp,147.32.84.134,59390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:06.492261,0.0,udp,192.168.88.138,53801.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:24:08.173394,0.000259,udp,147.32.84.138,57064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:09.307888,0.169596,tcp,147.32.86.20,3176.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,64,58106,1451,56655,907.90625,0.024971603620968574,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:24:10.853989,0.007742,udp,147.32.84.164,59720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,83,176,129.5,0.3204633204633205,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.861881,0.000262,udp,147.32.84.164,40882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,83,196,139.5,0.2974910394265233,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.863730,0.000362,udp,147.32.84.164,39624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.863793,10.003059,tcp,147.32.84.164,36753.0,->,81.0.214.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.990862,0.01103,udp,147.32.84.164,58124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.991120,0.00088,udp,147.32.84.164,43978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.992220,0.000432,udp,147.32.84.164,59794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.992367,0.00039,udp,147.32.84.164,40374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.992465,0.000386,udp,147.32.84.164,46738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.993029,19.881508,tcp,147.32.84.164,47370.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:10.993079,0.000287,udp,147.32.84.164,53160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.011478,0.000333,udp,147.32.84.164,53355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.179977,0.000406,udp,147.32.84.164,44328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.179988,0.000446,udp,147.32.84.164,53051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.180543,0.000231,udp,147.32.84.164,33014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.180931,0.000387,udp,147.32.84.164,36830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.213144,0.019642,udp,147.32.84.164,33171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.215446,0.247746,udp,147.32.84.164,58116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.221390,0.000368,udp,147.32.84.164,37450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.233953,0.000467,udp,147.32.84.164,44909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.710879,0.247133,udp,147.32.84.164,43150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:11.958165,0.247802,udp,147.32.84.164,55049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:12.028887,0.000313,udp,147.32.84.170,33463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:13.858149,17.508402,tcp,147.32.84.164,34055.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,26,9942,6582,3360,382.38461538461536,0.6620398310199155,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:15.270121,0.009476,tcp,147.32.84.134,45742.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:16.168948,0.000159,udp,147.32.85.25,48179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:16.449324,0.181113,udp,147.32.84.164,41818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,79,176,127.5,0.30980392156862746,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:16.468453,0.000314,udp,147.32.84.164,38991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,82,246,164.0,0.25,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:16.678781,0.018482,tcp,147.32.84.170,42123.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:16.721766,0.135033,udp,147.32.84.164,55462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,483,78,405,241.5,0.16149068322981366,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:16.858785,0.188298,udp,147.32.84.164,48391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,72,175,123.5,0.291497975708502,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.230281,0.000202,udp,147.32.84.164,49970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.279206,0.000362,udp,147.32.84.164,50651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.279921,0.108886,udp,147.32.84.164,48436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,71,164,117.5,0.3021276595744681,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.302484,0.228469,udp,147.32.84.164,59909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.637793,0.105937,udp,147.32.84.164,50382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:17.675527,0.136503,udp,147.32.84.164,49505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,81,206,143.5,0.28222996515679444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:21.208082,0.000973,udp,80.90.232.120,1517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,944,77,867,472.0,0.0815677966101695,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:24:24.291392,0.000216,udp,147.32.84.134,38986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:26.510882,0.480893,udp,147.32.85.120,13617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,71,256,163.5,0.21712538226299694,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:26.678331,0.000367,udp,147.32.84.170,51599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:31.842445,0.059186,tcp,147.32.84.164,34056.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,10,2039,1322,717,203.9,0.6483570377636096,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:32.066055,0.146261,tcp,147.32.84.164,34057.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,11,2106,1323,783,191.45454545454547,0.6282051282051282,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:33.310023,0.006668,tcp,147.32.84.134,45744.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:34.032522,0.218561,udp,147.32.84.164,46262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,80,194,137.0,0.291970802919708,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:34.127405,0.039471,udp,147.32.84.164,34377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,365,74,291,182.5,0.20273972602739726,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:34.167509,0.29197,udp,147.32.84.164,34213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,90,166,128.0,0.3515625,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:34.178201,0.000299,udp,147.32.84.164,51452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,83,144,113.5,0.3656387665198238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:34.251533,0.322185,udp,147.32.84.164,57957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,81,159,120.0,0.3375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:34.380836,0.000341,udp,147.32.84.170,52152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:34.952840,45.928379,udp,147.32.84.229,13363.0,<->,174.62.203.130,26444.0,CON,0.0,0.0,4,1100,561,539,275.0,0.51,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:24:36.678212,0.00037,udp,147.32.84.170,45514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:38.395241,0.370827,udp,147.32.84.164,46088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,76,155,115.5,0.329004329004329,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:38.395812,0.000442,udp,147.32.84.164,32920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:38.397252,0.868377,udp,147.32.84.164,39949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:38.896033,0.127084,udp,147.32.84.164,55181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,80,216,148.0,0.2702702702702703,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:38.914853,1.700967,tcp,147.32.84.164,34061.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,23,8488,5696,2792,369.04347826086956,0.6710650329877474,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:38.959447,245.375977,tcp,147.32.84.170,52956.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,27,6740,4717,2023,249.62962962962962,0.6998516320474777,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:39.293275,0.218766,udp,147.32.84.164,41978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:39.440606,0.000606,udp,41.66.4.252,8332.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:24:39.599965,0.175817,udp,147.32.84.164,47236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,73,183,128.0,0.28515625,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:41.480706,0.000255,udp,147.32.84.170,41958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.480940,902.898438,tcp,147.32.84.170,42308.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,178,90442,24394,66048,508.1011235955056,0.2697198204374074,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.480957,12.839773,tcp,147.32.84.170,42310.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.481099,0.000506,udp,147.32.84.170,41143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.481320,0.000345,udp,147.32.84.170,51353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.481915,0.000339,udp,147.32.84.170,52076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.482661,0.000383,udp,147.32.84.170,49278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,75,202,138.5,0.27075812274368233,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.482704,12.837244,tcp,147.32.84.170,36099.0,->,74.125.232.210,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.482784,12.836938,tcp,147.32.84.170,36100.0,->,74.125.232.210,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.513205,12.806748,tcp,147.32.84.170,33737.0,->,74.125.232.208,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.724438,0.000136,udp,147.32.84.170,33125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.725276,0.00032,udp,147.32.84.170,47844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.727730,0.245969,udp,147.32.84.170,47856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.731063,0.000296,udp,147.32.84.170,46861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.731251,0.00023,udp,147.32.84.170,57094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.733190,0.000304,udp,147.32.84.170,51868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.733798,0.000476,udp,147.32.84.170,41267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:41.735574,0.0004,udp,147.32.84.170,46527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.008941,0.000386,udp,147.32.84.170,46097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.013487,0.526415,udp,147.32.84.170,59171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,81,130,105.5,0.38388625592417064,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.138824,0.000586,udp,189.152.197.134,24659.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:24:42.292747,0.00021,udp,147.32.84.170,59058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.293294,0.000354,udp,147.32.84.170,58407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,365,74,291,182.5,0.20273972602739726,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.462981,0.000277,udp,147.32.84.170,35573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.468731,0.247016,udp,147.32.84.170,60416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.550732,0.331115,udp,147.32.84.164,44355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:42.587022,0.116387,udp,147.32.84.170,38497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,72,180,126.0,0.2857142857142857,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.612973,1.405286,udp,147.32.84.164,33011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:42.704266,0.000302,udp,147.32.84.170,58329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.707208,1.7e-05,udp,147.32.84.170,40828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,75,261,168.0,0.22321428571428573,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:42.715952,0.000439,udp,147.32.84.170,57669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:43.027456,0.26658,tcp,147.32.84.170,50018.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:43.197615,0.000335,udp,147.32.84.164,42422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,87,147,117.0,0.3717948717948718,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:43.228455,0.000321,udp,147.32.84.164,44627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,75,229,152.0,0.24671052631578946,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:44.454096,61.298668,tcp,147.32.84.165,2741.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:24:44.959415,0.361615,tcp,147.32.84.164,45671.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,10,1728,824,904,172.8,0.47685185185185186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:44.992525,0.000485,udp,147.32.84.164,56084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,70,126,98.0,0.35714285714285715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.120921,0.397634,udp,147.32.84.164,39684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.210844,0.37846,tcp,147.32.84.164,45672.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,12,2007,1060,947,167.25,0.5281514698555058,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.213792,0.391333,tcp,147.32.84.164,45673.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,13,5484,1059,4425,421.84615384615387,0.19310722100656455,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.518886,0.201117,udp,147.32.84.164,41183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,72,148,110.0,0.32727272727272727,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.584958,0.002086,udp,147.32.84.164,46274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,74,423,248.5,0.1488933601609658,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.628159,0.017187,udp,147.32.84.164,33968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,74,416,245.0,0.1510204081632653,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:45.909981,0.0,tcp,76.164.193.170,80.0,->,147.32.85.61,17706.0,SA_,0.0,,1,62,62,0,62.0,1.0,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:24:46.677118,0.000299,udp,147.32.84.170,49345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:46.940396,15.471982,tcp,147.32.84.164,38857.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:46.940569,15.472809,tcp,147.32.84.164,49328.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:46.940619,0.000232,udp,147.32.84.164,33584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:46.941710,0.000301,udp,147.32.84.164,46360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:51.346640,0.00085,udp,147.32.84.134,42507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:24:52.067883,550.38092,tcp,147.32.84.164,49524.0,->,209.85.148.104,80.0,FSPA_FSPA,0.0,0.0,67,21791,10739,11052,325.23880597014926,0.49281813592767654,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:52.186451,242.14975,tcp,147.32.84.170,43141.0,->,74.125.232.207,80.0,FSPA_FSPA,0.0,0.0,21,3250,2057,1193,154.76190476190476,0.6329230769230769,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:52.231904,0.000251,udp,147.32.84.170,55290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:52.236419,0.001164,udp,147.32.84.170,53015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,73,119,96.0,0.3802083333333333,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:52.240543,0.000253,udp,147.32.84.170,49797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:52.345884,0.010089,udp,147.32.84.164,50039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,78,159,118.5,0.3291139240506329,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:52.376301,250.053101,tcp,147.32.84.164,50680.0,->,74.125.232.219,80.0,FSPA_FSRPA,0.0,0.0,21,2557,1473,1084,121.76190476190476,0.5760657019945248,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:52.402061,0.000585,udp,70.230.156.43,51173.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:24:52.669027,0.000391,udp,147.32.84.170,46111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,80,208,144.0,0.2777777777777778,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:53.029568,0.020211,udp,147.32.84.164,47012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:53.030426,0.000389,udp,147.32.84.170,49290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:24:53.304917,0.000226,udp,147.32.84.138,38974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:24:53.474940,0.000316,udp,147.32.84.164,50996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:53.656520,0.127609,udp,147.32.84.164,37297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,78,193,135.5,0.2878228782287823,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:53.663715,0.000221,udp,147.32.84.164,39847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:55.967146,0.135817,udp,147.32.84.164,51179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,454,87,367,227.0,0.19162995594713655,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:24:59.137438,0.000889,udp,68.175.14.148,42409.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,75,471,273.0,0.13736263736263737,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:00.369823,0.00034,udp,147.32.84.134,39844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:25:05.950654,0.079376,tcp,91.113.27.44,61038.0,->,147.32.84.229,80.0,FSA_FSA,0.0,0.0,7,424,242,182,60.57142857142857,0.5707547169811321,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:25:06.677830,0.000348,udp,147.32.84.170,33883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:06.679049,0.018096,tcp,147.32.84.170,45201.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:07.812644,0.0,udp,58.41.86.205,20627.0,->,147.32.85.114,4647.0,INT,0.0,,1,72,72,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:25:11.673475,0.00042,udp,147.32.84.138,56286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:13.736703,2790.084961,udp,147.32.84.94,7103.0,<->,188.40.128.60,50012.0,CON,0.0,0.0,973,807916,18102,789814,830.3350462487153,0.022405794661821278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:15.575570,0.000249,udp,147.32.84.170,48562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:15.577358,268.761383,tcp,147.32.84.170,55791.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,34,10445,7643,2802,307.20588235294116,0.7317376735280038,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:15.916147,248.437332,tcp,147.32.84.170,37810.0,->,209.85.149.117,80.0,FSPA_FSPA,0.0,0.0,8699,8572308,195642,8376666,985.4360271295551,0.022822558405507596,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:16.676927,0.000423,udp,147.32.84.170,49220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:16.678916,0.01859,tcp,147.32.84.170,48573.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:16.690281,0.056183,udp,147.32.84.164,58344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:16.696786,0.000372,udp,147.32.84.164,57191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:16.745501,0.017658,udp,147.32.84.164,45181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:16.747345,0.000274,udp,147.32.84.164,56054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:16.747993,15.770197,tcp,147.32.84.164,34068.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,11,1799,870,929,163.54545454545453,0.48360200111172874,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:16.757835,415.363434,tcp,147.32.84.164,45037.0,->,209.85.149.95,443.0,FSPA_FSPA,0.0,0.0,118,89387,3862,85525,757.5169491525423,0.043205387808070525,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:17.557569,130.245804,tcp,147.32.84.164,37299.0,->,192.231.246.213,443.0,SPA_SRPA,0.0,0.0,19,7071,1756,5315,372.1578947368421,0.2483382831282704,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:17.557689,128.961136,tcp,147.32.84.164,37300.0,->,192.231.246.213,443.0,SPA_SRPA,0.0,0.0,20,9324,1677,7647,466.2,0.17985842985842987,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:25:22.891404,0.000532,udp,109.61.148.134,10726.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:26.677050,0.000573,udp,147.32.84.170,37026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:26.678094,0.000331,udp,147.32.84.170,47782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:27.439396,0.000304,udp,147.32.84.134,39597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:25:28.761872,1.36872,udp,94.255.89.66,19168.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1254,640,614,209.0,0.5103668261562998,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:32.417049,0.000304,udp,147.32.85.89,39317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:32.774335,0.000381,udp,147.32.84.59,49246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,75,206,140.5,0.2669039145907473,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:35.993707,30.270061,tcp,147.32.84.59,38577.0,->,188.40.16.205,80.0,FSPA_FSPA,0.0,0.0,14,5748,1229,4519,410.57142857142856,0.2138135003479471,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:25:36.676886,0.000406,udp,147.32.84.170,41880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:39.913350,0.0,tcp,147.32.84.165,2742.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:39.922527,0.0,tcp,147.32.84.165,2743.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:39.940003,0.0,tcp,147.32.84.165,2745.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.093960,0.0,tcp,147.32.84.165,2746.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.103863,0.0,tcp,147.32.84.165,2747.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.124159,0.0,tcp,147.32.84.165,2749.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.294102,0.0,tcp,147.32.84.165,2750.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.304103,0.0,tcp,147.32.84.165,2751.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:40.907854,0.0,tcp,147.32.84.165,2754.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:41.105549,0.0,tcp,147.32.84.165,2753.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:43.802731,0.000661,udp,77.163.18.207,14430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:49.317804,0.000278,udp,147.32.84.138,32775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:50.043596,0.000585,udp,205.201.246.194,42447.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:50.979998,0.000308,udp,147.32.84.138,60064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:51.893665,0.000212,udp,147.32.87.212,41615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:25:53.310367,0.309545,tcp,147.32.86.20,3249.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30252,1029,29223,775.6923076923077,0.03401428004760016,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:25:53.422526,61.283722,tcp,147.32.84.165,2850.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:25:53.422692,0.0,tcp,147.32.84.165,2976.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:53.847383,0.0,tcp,147.32.84.165,2983.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:54.023875,0.0,tcp,147.32.84.165,2989.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:54.024001,0.0,tcp,147.32.84.165,2988.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:54.024008,0.0,tcp,147.32.84.165,2987.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:54.024056,0.0,tcp,147.32.84.165,2993.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:54.024150,0.0,tcp,147.32.84.165,2992.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:25:56.677763,0.000305,udp,147.32.84.170,39315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:25:57.882411,2718.135498,udp,147.32.84.94,7103.0,<->,85.10.207.87,53012.0,CON,0.0,0.0,965,797001,18027,778974,825.9077720207254,0.022618541256535438,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:25:58.538713,2.994552,tcp,93.148.168.208,56488.0,->,147.32.86.58,48784.0,S_,0.0,,2,148,148,0,74.0,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:26:01.803407,0.00028,udp,147.32.85.34,57664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:01.822256,0.00017,udp,147.32.85.34,64946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:02.905629,0.000324,udp,147.32.84.138,33708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:03.540812,0.000283,udp,147.32.84.134,33212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:05.440124,0.0,tcp,147.32.84.165,3215.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:05.440167,0.0,tcp,147.32.84.165,3217.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.040752,0.0,tcp,147.32.84.165,3228.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.040827,0.0,tcp,147.32.84.165,3227.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.040833,0.0,tcp,147.32.84.165,3229.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.040975,0.0,tcp,147.32.84.165,3232.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.040983,0.0,tcp,147.32.84.165,3231.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:06.041053,0.0,tcp,147.32.84.165,3233.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:10.375797,2678.10376,udp,147.32.84.229,13363.0,->,213.22.187.101,26160.0,INT,0.0,,18,3393,3393,0,188.5,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:26:11.208530,0.000471,udp,147.32.84.59,56535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:13.478439,0.000563,udp,70.130.37.142,57503.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:26:16.680400,0.019017,tcp,147.32.84.170,37606.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:17.457407,0.0,tcp,147.32.84.165,3457.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:17.457421,0.0,tcp,147.32.84.165,3456.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:18.058622,0.0,tcp,147.32.84.165,3470.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:18.058740,0.0,tcp,147.32.84.165,3469.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:18.058747,0.0,tcp,147.32.84.165,3468.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:18.058798,0.0,tcp,147.32.84.165,3474.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:18.058860,0.0,tcp,147.32.84.165,3473.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:21.597078,0.000285,udp,147.32.84.134,51790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:21.598658,0.010342,tcp,147.32.84.134,45756.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:21.838058,0.000338,udp,147.32.84.138,49776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:26.678388,0.000331,udp,147.32.84.170,43829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:29.475159,0.0,tcp,147.32.84.165,3696.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:29.475235,0.0,tcp,147.32.84.165,3698.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.075726,0.0,tcp,147.32.84.165,3709.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.075836,0.0,tcp,147.32.84.165,3708.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.075892,0.0,tcp,147.32.84.165,3710.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.075969,0.0,tcp,147.32.84.165,3713.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.075975,0.0,tcp,147.32.84.165,3712.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:30.076032,0.0,tcp,147.32.84.165,3714.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:31.330839,2283.113281,udp,147.32.84.94,7103.0,->,174.30.251.56,7129.0,INT,0.0,,8,672,672,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:26:36.259512,0.000706,udp,178.192.153.104,53656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,151,91,60,75.5,0.6026490066225165,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:26:36.679345,0.000349,udp,147.32.84.170,52168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:39.640333,0.000179,udp,147.32.84.134,41436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:39.641046,0.000237,udp,147.32.84.134,40238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:39.641722,0.006495,tcp,147.32.84.134,45758.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:41.492083,0.0,tcp,147.32.84.165,3893.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:41.492197,0.0,tcp,147.32.84.165,3892.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:42.093296,0.0,tcp,147.32.84.165,3902.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:42.093303,0.0,tcp,147.32.84.165,3901.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:42.093457,0.0,tcp,147.32.84.165,3905.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:42.093464,0.0,tcp,147.32.84.165,3904.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:46.630840,0.000294,udp,147.32.84.138,33576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:46.678185,0.000315,udp,147.32.84.170,60098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:47.026298,0.000317,udp,147.32.84.170,37362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:47.721394,0.000186,udp,147.32.84.138,35603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:48.661276,0.014154,tcp,147.32.84.134,45759.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:26:50.312193,0.000252,udp,147.32.84.19,41560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:50.887296,3255.135986,arp,147.32.87.52,,who,147.32.87.49,,RSP,,,9,540,0,540,60.0,0.0,17,,flow=Background,Background,-1 2011-08-16 17:26:53.509284,0.0,tcp,147.32.84.165,4073.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:53.509345,0.0,tcp,147.32.84.165,4072.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.110396,0.0,tcp,147.32.84.165,4082.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.110465,0.0,tcp,147.32.84.165,4081.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.110609,0.0,tcp,147.32.84.165,4085.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.110623,0.0,tcp,147.32.84.165,4084.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.110628,0.0,tcp,147.32.84.165,4088.0,->,192.168.1.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:26:54.942354,0.000719,udp,174.48.247.37,63758.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,78,483,280.5,0.13903743315508021,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:26:56.039832,5.366074,udp,80.21.55.70,13735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,390,314,76,130.0,0.8051282051282052,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:26:56.678502,0.000248,udp,147.32.84.170,37880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:26:57.049597,28.966087,tcp,147.32.84.59,51374.0,->,95.172.89.143,80.0,SPA_SRPA,0.0,0.0,10,3703,875,2828,370.3,0.23629489603024575,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:26:57.220238,0.000218,udp,147.32.85.25,56803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:59.569649,0.247646,udp,147.32.84.164,52419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:26:59.709253,0.000394,udp,147.32.84.138,46859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:26:59.839811,8.940558,tcp,80.187.96.214,48795.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,588,222,366,73.5,0.37755102040816324,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:27:00.312399,0.000392,udp,147.32.84.164,36764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:01.825800,0.465308,tcp,147.32.80.7,26894.0,->,147.32.84.19,25.0,FSPA_FSPA,0.0,0.0,64,50544,48558,1986,789.75,0.960707502374169,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:27:03.453520,0.000425,udp,147.32.84.170,53039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:03.469490,0.000283,udp,147.32.84.170,58343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:03.470132,0.000247,udp,147.32.84.170,48525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:05.526939,0.0,tcp,147.32.84.165,4253.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:05.526996,61.285343,tcp,147.32.84.165,4114.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:27:05.952320,0.0,tcp,147.32.84.165,4260.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.127759,0.0,tcp,147.32.84.165,4262.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.127885,0.0,tcp,147.32.84.165,4263.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.127901,0.0,tcp,147.32.84.165,4265.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.127949,0.0,tcp,147.32.84.165,4266.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.128003,0.0,tcp,147.32.84.165,4268.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:06.416910,0.000837,udp,80.21.55.70,13785.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,276,192,84,138.0,0.6956521739130435,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:06.679124,0.000573,udp,147.32.84.170,48975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:08.534267,3057.800049,udp,93.62.241.181,55665.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1494,1122,372,124.5,0.751004016064257,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:10.912481,0.000394,udp,147.32.84.164,40726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.912632,0.000562,udp,147.32.84.164,55159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.913363,0.000842,udp,147.32.84.164,49878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,89,271,180.0,0.24722222222222223,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.913367,0.001076,udp,147.32.84.164,54281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914137,0.002167,udp,147.32.84.164,60027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,80,216,148.0,0.2702702702702703,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914200,11.524501,tcp,147.32.84.164,48965.0,->,209.85.149.95,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914782,0.000684,udp,147.32.84.164,57327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914883,11.508937,tcp,147.32.84.164,33666.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914890,11.508758,tcp,147.32.84.164,33667.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:10.914894,11.507621,tcp,147.32.84.164,41955.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.029203,0.002155,udp,147.32.84.164,46631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,103,468,285.5,0.18038528896672504,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.044423,0.000187,udp,147.32.84.164,44174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,96,168,132.0,0.36363636363636365,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.044900,0.017334,udp,147.32.84.164,38347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,96,196,146.0,0.3287671232876712,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.232553,0.250006,udp,147.32.84.164,36617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,78,165,121.5,0.32098765432098764,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.233144,0.000376,udp,147.32.84.164,34731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.233795,0.000434,udp,147.32.84.164,36724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,354,73,281,177.0,0.2062146892655367,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.235150,0.000296,udp,147.32.84.164,37736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,77,194,135.5,0.28413284132841327,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:11.237399,0.000343,udp,147.32.84.164,55366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:14.896882,0.00016,udp,147.32.84.164,58014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:15.364458,0.000171,udp,147.32.84.138,33119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:16.040390,0.00049,udp,147.32.84.164,40070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.040884,0.000384,udp,147.32.84.164,51007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.041397,0.000324,udp,147.32.84.164,59604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.041401,16.384007,tcp,147.32.84.164,46137.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.042006,16.382092,tcp,147.32.84.164,38523.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.049916,0.000199,udp,147.32.84.164,52699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.051090,16.373169,tcp,147.32.84.164,58886.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.100635,0.01984,udp,147.32.84.164,59948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.116486,0.00033,udp,147.32.84.164,45149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.117306,0.009775,udp,147.32.84.164,56625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.124477,0.000213,udp,147.32.84.164,57141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.124982,0.000292,udp,147.32.84.164,39732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.129014,0.007623,udp,147.32.84.164,49361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.132024,0.000475,udp,147.32.84.164,36131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.343751,6.017863,udp,147.32.84.229,13363.0,->,201.58.248.163,51422.0,INT,0.0,,3,324,324,0,108.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:27:16.343844,0.135799,udp,147.32.84.229,13363.0,<->,24.57.9.183,22252.0,CON,0.0,0.0,2,213,141,72,106.5,0.6619718309859155,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:16.583510,0.000267,udp,147.32.84.164,36125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,84,144,114.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.583517,0.127903,udp,147.32.84.164,33619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.584079,0.000357,udp,147.32.84.164,56048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,84,144,114.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.584700,0.000303,udp,147.32.84.164,57932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.584706,0.000396,udp,147.32.84.164,52416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,370,83,287,185.0,0.22432432432432434,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.585497,0.000272,udp,147.32.84.164,55799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.585549,0.00032,udp,147.32.84.164,46747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.586109,0.000432,udp,147.32.84.164,33359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.587958,0.000187,udp,147.32.84.164,45029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.588012,0.000238,udp,147.32.84.164,58462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.589271,0.000227,udp,147.32.84.164,57971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.589336,0.000228,udp,147.32.84.164,52445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,87,147,117.0,0.3717948717948718,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.589840,0.0003,udp,147.32.84.164,60496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,87,262,174.5,0.2492836676217765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.590318,0.000227,udp,147.32.84.164,38456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,78,171,124.5,0.3132530120481928,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.591712,0.000235,udp,147.32.84.164,60614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,81,206,143.5,0.28222996515679444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:16.678536,0.000289,udp,147.32.84.170,42726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:17.544438,0.0,tcp,147.32.84.165,4434.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:17.544453,0.0,tcp,147.32.84.165,4433.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:18.144829,0.0,tcp,147.32.84.165,4443.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:18.144873,0.0,tcp,147.32.84.165,4442.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:18.144975,0.0,tcp,147.32.84.165,4446.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:18.145068,0.0,tcp,147.32.84.165,4445.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:26.164945,1.152571,tcp,147.32.84.164,57656.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,65,52319,2593,49726,804.9076923076923,0.04956134482692712,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:26.611495,0.215597,icmp,147.32.84.59,771.0,->,85.70.218.23,50499.0,URP,0.0,,2,196,196,0,98.0,1.0,17,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:27:26.850301,0.050159,udp,147.32.84.229,13363.0,<->,87.52.82.151,24888.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:26.868534,0.548798,tcp,147.32.84.164,57657.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,10,1723,833,890,172.3,0.4834590829947766,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.351546,0.453334,tcp,147.32.84.164,57658.0,->,64.238.147.56,80.0,FSPA_FSPA,0.0,0.0,10,1729,825,904,172.9,0.47715442452284557,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.371935,0.000179,udp,147.32.84.164,56637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.371947,0.000369,udp,147.32.84.164,33379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,75,155,115.0,0.32608695652173914,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.372517,0.00015,udp,147.32.84.164,47301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,70,126,98.0,0.35714285714285715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.372940,0.000315,udp,147.32.84.164,47324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,70,245,157.5,0.2222222222222222,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.373751,0.000326,udp,147.32.84.164,39927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,77,212,144.5,0.2664359861591695,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.374258,0.002493,udp,147.32.84.164,46903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,527,73,454,263.5,0.13851992409867173,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.375387,0.000216,udp,147.32.84.164,56228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:27.469948,2568.145508,udp,147.32.84.94,7103.0,<->,88.198.60.194,55012.0,CON,0.0,0.0,898,768109,15309,752800,855.3552338530067,0.01993076503465003,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:27.886156,0.008458,udp,147.32.84.164,42703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,74,423,248.5,0.1488933601609658,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:29.562731,0.0,tcp,147.32.84.165,4583.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:29.562881,0.0,tcp,147.32.84.165,4585.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:30.163438,0.0,tcp,147.32.84.165,4589.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:30.163506,0.0,tcp,147.32.84.165,4591.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:30.163567,0.0,tcp,147.32.84.165,4593.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:32.655642,0.000294,udp,147.32.85.34,60401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:32.845351,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.49,1032.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:27:33.774422,0.000287,udp,147.32.84.134,33875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:27:33.775142,0.000231,udp,147.32.84.134,55179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:27:34.952897,278.956604,udp,62.194.251.32,3138.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,330,210,120,82.5,0.6363636363636364,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:35.368195,0.362015,udp,147.32.84.229,13363.0,<->,114.24.184.3,21187.0,CON,0.0,0.0,4,2997,60,2937,749.25,0.02002002002002002,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:36.678754,0.000237,udp,147.32.84.170,43189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:40.883957,0.00025,udp,147.32.84.138,52092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:41.580075,0.0,tcp,147.32.84.165,4703.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:41.580200,0.0,tcp,147.32.84.165,4705.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:42.180692,0.0,tcp,147.32.84.165,4709.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:42.180767,0.0,tcp,147.32.84.165,4711.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:42.180838,0.0,tcp,147.32.84.165,4713.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:42.585433,2444.635254,udp,147.32.86.44,10966.0,<->,46.0.142.73,58124.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:42.781817,0.0,tcp,147.32.84.165,4715.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:42.789700,0.00025,udp,147.32.84.134,42687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:27:42.791444,0.00571,tcp,147.32.84.134,45765.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:27:46.489656,0.000803,udp,82.244.151.26,62348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,945,74,871,472.5,0.07830687830687831,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:27:51.079538,0.000227,udp,147.32.84.138,36390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:52.591179,0.000196,udp,147.32.84.164,53805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:52.591183,19.835581,tcp,147.32.84.164,58894.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:52.591516,0.000211,udp,147.32.84.164,55032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:52.592118,0.000231,udp,147.32.84.164,41772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:53.596942,0.0,tcp,147.32.84.165,4823.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:53.891562,0.000163,udp,147.32.85.25,41276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:54.079269,0.000447,udp,147.32.84.25,41885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:54.197922,0.0,tcp,147.32.84.165,4829.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:54.198058,0.0,tcp,147.32.84.165,4831.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:54.198130,0.0,tcp,147.32.84.165,4833.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:54.798717,0.0,tcp,147.32.84.165,4835.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:27:54.872616,0.000178,udp,147.32.84.138,60414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:27:56.243102,0.000277,udp,147.32.84.164,47955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.244599,0.000368,udp,147.32.84.164,49104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.468109,0.293,udp,147.32.84.164,54753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.546640,0.021114,udp,147.32.84.164,52167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,186,93,93,93.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.678045,0.000462,udp,147.32.84.170,56354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:56.679063,0.000365,udp,147.32.84.170,36299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:27:56.761508,0.091458,udp,147.32.84.164,37287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.855547,0.071236,udp,147.32.84.164,48104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,79,162,120.5,0.3278008298755187,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.927045,0.020007,udp,147.32.84.164,45340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,79,229,154.0,0.2564935064935065,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:56.947557,0.182736,udp,147.32.84.164,45691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.065388,0.109069,udp,147.32.84.164,46520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.175923,0.000302,udp,147.32.84.164,52294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,83,148,115.5,0.3593073593073593,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.176917,0.091205,udp,147.32.84.164,55254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,78,148,113.0,0.34513274336283184,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.238532,0.019541,udp,147.32.84.164,46578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,74,192,133.0,0.2781954887218045,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.439753,0.000383,udp,147.32.84.164,40907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,76,209,142.5,0.26666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.440316,0.001808,udp,147.32.84.164,43700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,466,76,390,233.0,0.1630901287553648,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.442655,0.257749,udp,147.32.84.164,49980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.700711,0.149048,udp,147.32.84.164,54189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,80,181,130.5,0.3065134099616858,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.953863,0.179398,udp,147.32.84.164,40440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:27:57.990283,0.0,icmp,68.85.134.134,259.0,->,147.32.84.229,18376.0,URH,0.0,,1,70,70,0,70.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:27:59.250373,2600.380615,udp,147.32.84.94,7103.0,<->,46.4.83.41,54012.0,CON,0.0,0.0,1361,1128315,25239,1103076,829.0337986774431,0.02236875340662847,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:28:00.230402,0.000684,udp,178.121.12.47,50049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:28:00.828716,0.00036,udp,147.32.84.134,33694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:00.830491,0.00994,tcp,147.32.84.134,45767.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:01.943826,0.401668,tcp,147.32.84.164,35259.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,11,2764,2093,671,251.27272727272728,0.7572358900144718,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.223345,0.167777,udp,147.32.84.164,40407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.226918,0.031162,udp,147.32.84.164,52597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,77,141,109.0,0.3532110091743119,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.230204,0.045305,udp,147.32.84.164,58472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.377838,0.000341,udp,147.32.84.164,49577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.502084,0.047882,udp,147.32.84.164,52206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,77,155,116.0,0.33189655172413796,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:02.923455,0.275961,udp,147.32.84.164,57723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,74,151,112.5,0.3288888888888889,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:03.596994,0.725226,tcp,147.32.84.164,35272.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2851,2181,670,237.58333333333334,0.7649947386881796,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:03.597099,0.725382,tcp,147.32.84.164,35273.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2847,2178,669,237.25,0.7650158061116965,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:03.597474,0.736515,tcp,147.32.84.164,35275.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2848,2178,670,237.33333333333334,0.764747191011236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:03.598685,0.000327,udp,147.32.84.164,39771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.188818,0.706204,tcp,147.32.84.164,35277.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2855,2183,672,237.91666666666666,0.7646234676007005,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.189405,0.705564,tcp,147.32.84.164,35280.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2852,2182,670,237.66666666666666,0.7650771388499299,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.189563,0.70484,tcp,147.32.84.164,35281.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2854,2182,672,237.83333333333334,0.764540995094604,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.189745,0.706671,tcp,147.32.84.164,35282.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2846,2177,669,237.16666666666666,0.7649332396345748,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.761534,0.403654,tcp,147.32.84.164,35284.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,11,2793,2124,669,253.9090909090909,0.7604726100966702,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.761760,0.682286,tcp,147.32.84.164,35285.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,19,8007,5625,2382,421.42105263157896,0.7025103034844511,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:04.762452,0.591877,tcp,147.32.84.164,35287.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,16,5861,3988,1873,366.3125,0.6804299607575499,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:05.117291,6.347366,tcp,147.32.84.164,60772.0,->,198.185.19.46,80.0,FSRPA_FSPA,0.0,0.0,684,638232,20785,617447,933.0877192982456,0.032566527532308,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:05.300784,0.401231,tcp,147.32.84.164,35296.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,11,2775,2106,669,252.27272727272728,0.7589189189189189,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:05.308164,0.402546,tcp,147.32.84.164,35298.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,11,2781,2112,669,252.8181818181818,0.7594390507011867,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:05.614526,0.0,tcp,147.32.84.165,4944.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:06.215456,0.0,tcp,147.32.84.165,4950.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:06.215735,0.0,tcp,147.32.84.165,4952.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:06.215901,0.0,tcp,147.32.84.165,4954.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:06.566153,0.308525,tcp,147.32.86.20,3342.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31644,1029,30615,791.1,0.032518012893439516,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:28:06.678766,0.000435,udp,147.32.84.170,34510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:06.816558,61.2827,tcp,147.32.84.165,4972.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:28:07.241718,0.0,tcp,147.32.84.165,4960.0,->,147.32.81.219,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:08.461942,0.000158,tcp,67.195.115.95,38220.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 17:28:09.193108,0.278027,udp,147.32.84.164,49599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:09.378269,0.143592,udp,147.32.84.164,52113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,86,211,148.5,0.2895622895622896,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:09.655815,0.000306,udp,147.32.84.164,59813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,81,206,143.5,0.28222996515679444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:09.786193,0.640805,tcp,147.32.84.164,35305.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,12,2873,2201,672,239.41666666666666,0.7660981552384267,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:10.293845,0.408297,tcp,147.32.84.164,35307.0,->,198.81.200.2,80.0,FSPA_FSPA,0.0,0.0,11,2804,2131,673,254.9090909090909,0.7599857346647646,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:28:13.778603,0.298788,tcp,147.32.84.170,49570.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:13.832646,0.335155,tcp,147.32.84.170,46609.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:14.083326,250.035263,tcp,147.32.84.170,44497.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:15.090571,0.000185,udp,147.32.86.111,63795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,81,162,121.5,0.3333333333333333,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:15.638362,0.244718,tcp,147.32.86.111,34111.0,->,31.170.160.156,80.0,SRPA_FSPA,0.0,0.0,9,2034,738,1296,226.0,0.36283185840707965,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:28:16.224023,0.000372,udp,147.32.84.138,36009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:16.228386,0.000321,udp,147.32.84.138,49732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:17.633355,0.0,tcp,147.32.84.165,1117.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:17.637686,0.000149,udp,147.32.84.102,36211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:18.232640,0.0,tcp,147.32.84.165,1123.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:18.232654,0.0,tcp,147.32.84.165,1125.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:18.232741,0.0,tcp,147.32.84.165,1127.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:18.307787,0.000264,udp,147.32.84.170,42102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:18.309469,16.128885,tcp,147.32.84.170,39372.0,->,128.2.217.13,80.0,FSA_FSA,0.0,0.0,10,614,374,240,61.4,0.6091205211726385,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:18.833888,0.0,tcp,147.32.84.165,1129.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:18.872455,0.000286,udp,147.32.84.134,59214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:20.029059,0.000451,udp,147.32.84.170,43281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.038378,0.00024,udp,147.32.84.170,59984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.039033,0.000385,udp,147.32.84.170,46120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.039086,0.00041,udp,147.32.84.170,40438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.039178,0.000334,udp,147.32.84.170,56860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.039608,0.000419,udp,147.32.84.170,39176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.039611,0.000599,udp,147.32.84.170,41394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.040918,14.294426,tcp,147.32.84.170,53708.0,->,74.125.232.208,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.041214,14.294645,tcp,147.32.84.170,42788.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.060331,14.274744,tcp,147.32.84.170,51350.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.170811,0.000384,udp,147.32.84.138,47008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:20.245222,0.000308,udp,147.32.84.170,58862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.245750,0.000427,udp,147.32.84.170,39221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.248071,0.000233,udp,147.32.84.170,36126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.250571,0.000259,udp,147.32.84.170,41946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.251171,0.000251,udp,147.32.84.170,60459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.253531,0.000271,udp,147.32.84.170,32984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.254228,0.00046,udp,147.32.84.170,48535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.256527,0.000275,udp,147.32.84.170,58109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.380030,0.000204,udp,147.32.84.170,57796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.380184,0.000252,udp,147.32.84.170,40620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.380638,0.000218,udp,147.32.84.170,36202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,75,128,101.5,0.3694581280788177,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.388169,0.000421,udp,147.32.84.170,53477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,78,190,134.0,0.291044776119403,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.390189,0.000325,udp,147.32.84.170,50563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:20.741949,0.246888,udp,147.32.84.170,38638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.243706,0.478189,udp,147.32.84.170,59921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.433892,0.000558,udp,147.32.84.170,45299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,73,119,96.0,0.3802083333333333,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.435323,0.000267,udp,147.32.84.170,46907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.436376,0.000293,udp,147.32.84.170,41592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.437705,0.000371,udp,147.32.84.170,32972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,79,251,165.0,0.23939393939393938,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.439586,0.00027,udp,147.32.84.170,49999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,71,235,153.0,0.23202614379084968,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:21.722290,0.001192,udp,147.32.84.170,36244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:22.016615,3599.98999,udp,147.32.84.94,7103.0,<->,178.63.29.131,54012.0,CON,0.0,0.0,1318,1108864,23541,1085323,841.3232169954476,0.02122983521874639,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:28:27.891954,0.000246,udp,147.32.84.134,58897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:29.649176,0.0,tcp,147.32.84.165,1238.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:29.649298,0.0,tcp,147.32.84.165,1237.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:29.649354,0.0,tcp,147.32.84.165,1240.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:29.797444,4e-06,icmp,147.32.86.96,,<-,147.32.87.54,54536.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:28:30.249773,0.0,tcp,147.32.84.165,1243.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.249849,0.0,tcp,147.32.84.165,1244.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.249855,0.0,tcp,147.32.84.165,1245.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.249899,0.0,tcp,147.32.84.165,1246.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.249994,0.0,tcp,147.32.84.165,1247.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.850540,0.0,tcp,147.32.84.165,1250.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:30.850628,0.0,tcp,147.32.84.165,1249.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:31.628116,12.888573,tcp,147.32.84.170,34989.0,->,207.57.106.77,80.0,FSPA_FSPA,0.0,0.0,764,687095,17105,669990,899.3390052356021,0.024894665220966533,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:32.795197,2.2e-05,icmp,147.32.86.96,,<-,147.32.87.54,54536.0,ECR,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:28:33.647718,4.100003,tcp,147.32.84.170,36889.0,->,171.64.68.11,80.0,FSPA_FSPA,0.0,0.0,1296,1533100,20015,1513085,1182.9475308641975,0.013055247537668777,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:37.611764,0.000261,udp,147.32.84.138,59835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:37.630274,0.000534,udp,85.141.112.85,59229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:28:38.460527,0.000215,udp,147.32.84.138,56407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:39.260155,0.000553,udp,76.111.48.44,51816.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:28:41.666623,0.0,tcp,147.32.84.165,1357.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:42.267656,0.0,tcp,147.32.84.165,1363.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:42.267803,0.0,tcp,147.32.84.165,1365.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:42.267984,0.0,tcp,147.32.84.165,1367.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:42.868447,0.0,tcp,147.32.84.165,1369.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:44.036381,0.000218,udp,147.32.84.138,45998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:45.927606,0.000274,udp,147.32.84.134,49576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:45.929114,0.005815,tcp,147.32.84.134,39412.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:28:48.753932,6.391166,tcp,151.55.235.235,49633.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1416,748,668,78.66666666666667,0.5282485875706214,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:28:51.031842,0.000221,udp,147.32.84.170,52530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:53.683607,0.0,tcp,147.32.84.165,1477.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:54.284495,0.0,tcp,147.32.84.165,1483.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:54.284515,0.0,tcp,147.32.84.165,1485.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:54.284567,0.0,tcp,147.32.84.165,1487.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:54.859443,0.000311,udp,147.32.84.138,42792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:28:54.885546,0.0,tcp,147.32.84.165,1489.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:28:56.677875,0.000411,udp,147.32.84.170,45997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.606500,16.723383,tcp,147.32.84.170,43613.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,89,79970,4825,75145,898.5393258426966,0.060335125672127045,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.606508,16.723637,tcp,147.32.84.170,43614.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,80,71241,4601,66640,890.5125,0.06458359652447326,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.727806,16.602362,tcp,147.32.84.170,43616.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,21,7376,2595,4781,351.23809523809524,0.35181670281995664,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.730960,0.00038,udp,147.32.84.170,55136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.731637,0.002364,udp,147.32.84.170,55533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.732483,0.000264,udp,147.32.84.170,45253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.732692,0.000328,udp,147.32.84.170,38156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,75,144,109.5,0.3424657534246575,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.949683,0.002016,udp,147.32.84.170,43737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.952266,0.000217,udp,147.32.84.170,56665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.952890,0.001883,udp,147.32.84.170,36686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.953253,0.000356,udp,147.32.84.170,57879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.954050,0.001627,udp,147.32.84.170,58810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.955393,6.374609,tcp,147.32.84.170,60552.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,32,21514,1931,19583,672.3125,0.08975550804127545,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:57.956238,0.021138,tcp,147.32.84.170,54977.0,->,77.75.77.80,80.0,FSPA_FSPA,0.0,0.0,12,3266,1009,2257,272.1666666666667,0.308940600122474,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.063530,0.000406,udp,147.32.84.170,53712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.084485,26.246307,tcp,147.32.84.170,43629.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,24,8195,3946,4249,341.4583333333333,0.4815131177547285,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.086152,0.000371,udp,147.32.84.170,54534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.086880,6.24328,tcp,147.32.84.170,60559.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,15,4629,1035,3594,308.6,0.2235904082955282,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.324050,0.003423,udp,147.32.84.170,33377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,70,127,98.5,0.3553299492385787,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.324376,0.000713,udp,147.32.84.170,33312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.324499,0.000605,udp,147.32.84.170,45777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.327198,0.000363,udp,147.32.84.170,38161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.327664,6.002721,tcp,147.32.84.170,48670.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,18,7960,2329,5631,442.22222222222223,0.29258793969849245,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.327719,0.000232,udp,147.32.84.170,53615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,70,127,98.5,0.3553299492385787,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.328485,0.003819,udp,147.32.84.170,42969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.332226,0.000314,udp,147.32.84.170,50492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.333515,0.000219,udp,147.32.84.170,43896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.345988,716.027283,tcp,147.32.84.170,36647.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,82,25733,17475,8258,313.8170731707317,0.6790891073718571,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.348909,0.00256,udp,147.32.84.170,37621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.358082,5.972299,tcp,147.32.84.170,48674.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2042,1121,921,185.63636363636363,0.548971596474045,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:28:58.358589,5.971849,tcp,147.32.84.170,48676.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2042,1121,921,185.63636363636363,0.548971596474045,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:05.011300,0.004845,udp,147.32.84.59,52188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,71,142,106.5,0.3333333333333333,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:05.040777,0.000461,udp,147.32.86.192,55919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,75,180,127.5,0.29411764705882354,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:05.701484,0.0,tcp,147.32.84.165,1598.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:05.701612,0.0,tcp,147.32.84.165,1597.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:05.701665,0.0,tcp,147.32.84.165,1600.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.302317,0.0,tcp,147.32.84.165,1603.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.302331,0.0,tcp,147.32.84.165,1604.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.302351,0.0,tcp,147.32.84.165,1605.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.302422,0.0,tcp,147.32.84.165,1606.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.302431,0.0,tcp,147.32.84.165,1607.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.679471,0.000419,udp,147.32.84.170,44598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:06.681552,0.017774,tcp,147.32.84.170,42833.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:06.902828,0.0,tcp,147.32.84.165,1610.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:06.902848,0.0,tcp,147.32.84.165,1609.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:10.015964,0.001011,udp,147.32.84.164,45832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.017481,12.540977,tcp,147.32.84.164,34595.0,->,198.185.19.213,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.017938,0.000353,udp,147.32.84.164,52994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,527,86,441,263.5,0.16318785578747627,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.018533,10.405253,tcp,147.32.84.164,41094.0,->,138.108.6.20,80.0,SPA_SRPA,0.0,0.0,8,1773,1089,684,221.625,0.6142131979695431,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.067332,0.000217,udp,147.32.84.164,40543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,77,141,109.0,0.3532110091743119,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.068342,0.00031,udp,147.32.84.164,56127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,77,281,179.0,0.21508379888268156,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.211413,0.000339,udp,147.32.84.164,43117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,70,126,98.0,0.35714285714285715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.211455,0.000412,udp,147.32.84.164,57692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,89,166,127.5,0.34901960784313724,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.212040,0.000285,udp,147.32.84.164,45171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,80,205,142.5,0.2807017543859649,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.213161,0.000211,udp,147.32.84.164,58881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,74,151,112.5,0.3288888888888889,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.213731,0.0003,udp,147.32.84.164,41190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,74,199,136.5,0.27106227106227104,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.375260,3005.174072,udp,80.80.116.165,35866.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:29:10.465266,0.000239,udp,147.32.84.164,44679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.465680,0.000373,udp,147.32.84.164,50709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,86,211,148.5,0.2895622895622896,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.466265,0.000399,udp,147.32.84.164,42156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,76,280,178.0,0.21348314606741572,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.782443,0.000186,udp,147.32.84.164,52809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.782505,0.000218,udp,147.32.84.164,42591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.785466,0.043681,udp,147.32.84.164,50266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,83,192,137.5,0.3018181818181818,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.992060,0.000229,udp,147.32.84.164,46813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.992129,0.000363,udp,147.32.84.164,42176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:10.992588,0.000522,udp,147.32.84.164,59058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.009720,0.000282,udp,147.32.84.188,34589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:11.379521,0.00031,udp,147.32.84.164,56895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.379526,0.000309,udp,147.32.84.164,44145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,84,144,114.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.380398,0.000396,udp,147.32.84.164,48728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.381577,0.000583,udp,147.32.84.164,58512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.382523,0.000401,udp,147.32.84.164,54994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,79,285,182.0,0.21703296703296704,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.404215,0.021336,udp,147.32.84.164,55184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,186,93,93,93.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.435544,0.00029,udp,147.32.84.164,54470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.436069,0.000231,udp,147.32.84.164,35803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.436632,0.000295,udp,147.32.84.164,59828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,365,74,291,182.5,0.20273972602739726,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.446362,0.020214,udp,147.32.84.164,54021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,366,89,277,183.0,0.24316939890710382,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.467078,0.000248,udp,147.32.84.164,52699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.467653,0.000376,udp,147.32.84.164,49166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.469008,0.000184,udp,147.32.84.164,43657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.469355,0.000337,udp,147.32.84.164,52939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.472807,0.00025,udp,147.32.84.164,42739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.476328,0.0002,udp,147.32.84.164,38635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,84,156,120.0,0.35,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.477464,0.000219,udp,147.32.84.164,38009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:11.663800,0.247376,udp,147.32.84.164,57298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:13.847122,0.215452,tcp,147.32.84.59,54120.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1576,695,881,197.0,0.440989847715736,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:29:15.189817,17.348913,tcp,147.32.84.164,49330.0,->,140.98.193.112,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.190123,0.164995,udp,147.32.84.164,55406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,89,152,120.5,0.36929460580912865,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.190137,0.125138,udp,147.32.84.164,41232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.190605,0.000583,udp,147.32.84.164,40517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.191857,0.000233,udp,147.32.84.164,46117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.355456,0.000196,udp,147.32.84.164,42688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,89,152,120.5,0.36929460580912865,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.355924,0.000352,udp,147.32.84.164,50811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,89,187,138.0,0.322463768115942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:15.356692,74.210327,tcp,147.32.84.164,55043.0,->,207.207.31.146,80.0,SPA_SRPA,0.0,0.0,11,3338,1917,1421,303.45454545454544,0.5742959856201318,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.090029,15.342585,tcp,147.32.84.164,35908.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.090040,0.00039,udp,147.32.84.164,41436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.090044,15.342845,tcp,147.32.84.164,35909.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.090672,0.010092,udp,147.32.84.164,56671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.154815,0.000487,udp,147.32.84.164,36138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.155447,0.010433,udp,147.32.84.164,36542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.166906,0.000506,udp,147.32.84.164,53433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.275846,0.000279,udp,147.32.84.164,42436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.413913,0.000176,udp,147.32.84.164,33819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,83,147,115.0,0.36086956521739133,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.413963,0.000249,udp,147.32.84.164,41512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.414871,0.000202,udp,147.32.84.164,49346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,78,133,105.5,0.3696682464454976,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.415134,0.000223,udp,147.32.84.164,52920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,87,147,117.0,0.3717948717948718,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.416173,0.000351,udp,147.32.84.164,49491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.718344,61.284519,tcp,147.32.84.165,1637.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:29:17.718497,0.0,tcp,147.32.84.165,1719.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:17.718501,0.0,tcp,147.32.84.165,1718.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:17.720832,0.12089,udp,147.32.84.164,32829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.801192,0.923276,udp,147.32.84.164,59654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,78,284,181.0,0.2154696132596685,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.821680,0.0018,udp,147.32.84.164,59561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,485,72,413,242.5,0.14845360824742268,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.842044,0.000354,udp,147.32.84.164,35828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:17.842641,0.12393,udp,147.32.84.164,43377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,76,282,179.0,0.2122905027932961,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:18.143406,0.0,tcp,147.32.84.165,1723.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.318990,0.0,tcp,147.32.84.165,1724.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.319046,0.0,tcp,147.32.84.165,1725.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.319199,0.0,tcp,147.32.84.165,1726.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.319204,0.0,tcp,147.32.84.165,1727.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.319213,0.0,tcp,147.32.84.165,1728.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.920420,0.0,tcp,147.32.84.165,1731.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:18.920511,0.0,tcp,147.32.84.165,1730.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:22.034200,0.273157,tcp,147.32.84.170,36690.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:23.032944,0.000401,udp,147.32.84.134,57051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:23.045820,0.000329,udp,147.32.84.59,39397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:23.472093,0.000236,udp,147.32.84.134,51807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:23.473592,0.000201,udp,147.32.84.134,42619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,72,290,181.0,0.19889502762430938,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:24.229777,308.353058,tcp,147.32.84.164,60831.0,->,198.185.19.46,80.0,FSPA_FSPA,0.0,0.0,91,71267,5302,65965,783.1538461538462,0.07439628439530217,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:26.230320,0.000771,udp,83.77.250.60,6137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:29:26.679400,0.000449,udp,147.32.84.170,33758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:27.389609,0.000186,udp,147.32.84.138,36330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:29.735731,0.0,tcp,147.32.84.165,1839.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:29.735821,0.0,tcp,147.32.84.165,1838.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:29.735957,0.0,tcp,147.32.84.165,1841.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.256483,12.176235,tcp,147.32.84.164,58998.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:30.258305,0.000193,udp,147.32.84.164,47504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:30.336742,0.0,tcp,147.32.84.165,1844.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.336829,0.0,tcp,147.32.84.165,1845.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.337005,0.0,tcp,147.32.84.165,1846.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.337009,0.0,tcp,147.32.84.165,1847.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.337014,0.0,tcp,147.32.84.165,1848.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.937711,0.0,tcp,147.32.84.165,1851.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:30.937863,0.0,tcp,147.32.84.165,1850.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:31.038609,0.000352,udp,147.32.84.134,39655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:31.039493,0.000353,udp,147.32.84.134,53315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:35.255497,0.000241,udp,147.32.84.138,60628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:35.733554,0.000261,udp,147.32.84.164,57258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:36.677944,0.000366,udp,147.32.84.170,59989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:36.730002,0.00034,udp,147.32.84.164,41901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:36.824616,26.03067,tcp,147.32.84.164,44578.0,->,211.151.89.45,80.0,FSPA_FSPA,0.0,0.0,48,30389,5490,24899,633.1041666666666,0.18065747474415084,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:36.825761,26.034227,tcp,147.32.84.164,44581.0,->,211.151.89.45,80.0,FSPA_FSPA,0.0,0.0,22,8689,2957,5732,394.95454545454544,0.34031534123604557,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:36.826002,0.437337,udp,147.32.84.164,35125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:37.264279,0.430678,udp,147.32.84.164,59549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,74,167,120.5,0.3070539419087137,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:37.695383,25.159575,tcp,147.32.84.164,44582.0,->,211.151.89.45,80.0,FSPA_FSPA,0.0,0.0,26,8250,3862,4388,317.3076923076923,0.4681212121212121,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:38.039208,24.414623,tcp,147.32.84.164,38982.0,->,193.28.145.36,80.0,FSPA_FSPA,0.0,0.0,104,97928,5676,92252,941.6153846153846,0.05796095090270403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:38.039320,24.414516,tcp,147.32.84.164,38984.0,->,193.28.145.36,80.0,FSPA_FSPA,0.0,0.0,79,61705,6271,55434,781.0759493670886,0.10162871728385058,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:38.330239,0.021816,udp,147.32.84.164,37849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:38.457709,0.02684,udp,147.32.84.164,52709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,74,275,174.5,0.21203438395415472,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:38.605771,0.000949,udp,41.218.250.30,17727.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,616,73,543,308.0,0.1185064935064935,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:29:39.501482,23.353146,tcp,147.32.84.164,44590.0,->,211.151.89.45,80.0,FSPA_FSPA,0.0,0.0,11,1711,796,915,155.54545454545453,0.4652250146113384,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:39.501538,23.35335,tcp,147.32.84.164,44591.0,->,211.151.89.45,80.0,FSPA_FSPA,0.0,0.0,14,3217,1624,1593,229.78571428571428,0.5048181535592167,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:41.346050,0.428435,udp,147.32.84.164,60186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,79,146,112.5,0.3511111111111111,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:41.346221,0.000549,udp,147.32.84.164,47474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,79,145,112.0,0.35267857142857145,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:41.752832,0.0,tcp,147.32.84.165,1959.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:41.752970,0.0,tcp,147.32.84.165,1958.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:41.752977,0.0,tcp,147.32.84.165,1961.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:41.775606,0.000295,udp,147.32.84.164,50259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:42.354423,0.0,tcp,147.32.84.165,1964.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.354438,0.0,tcp,147.32.84.165,1965.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.354443,0.0,tcp,147.32.84.165,1966.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.354585,0.0,tcp,147.32.84.165,1967.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.354597,0.0,tcp,147.32.84.165,1968.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.954544,0.0,tcp,147.32.84.165,1971.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:42.954615,0.0,tcp,147.32.84.165,1970.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:46.578777,0.000945,udp,77.5.187.62,25535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:29:46.680481,0.018336,tcp,147.32.84.170,40621.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:49.082206,0.000313,udp,147.32.84.134,34117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:49.217872,3599.088867,udp,147.32.84.94,7103.0,<->,88.198.15.210,51012.0,CON,0.0,0.0,1219,1041224,20904,1020320,854.1624282198524,0.020076371654898464,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:29:51.169363,0.000235,udp,147.32.84.138,40231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:51.290372,21.159737,tcp,147.32.84.164,48930.0,->,136.199.55.186,80.0,FSPA_FSPA,0.0,0.0,17,6186,1492,4694,363.88235294117646,0.24118978338182995,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.365588,11.084411,tcp,147.32.84.164,48934.0,->,136.199.55.186,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.389487,0.0002,udp,147.32.84.164,52842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,75,118,96.5,0.38860103626943004,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.390086,0.000367,udp,147.32.84.164,39233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,72,299,185.5,0.1940700808625337,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.390688,0.02685,udp,147.32.84.164,59793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.547736,0.000377,udp,147.32.84.59,34353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:51.580967,0.0003,udp,147.32.84.164,37587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.581628,0.000202,udp,147.32.84.164,50490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.582248,0.000243,udp,147.32.84.164,46452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:51.582803,0.000159,udp,147.32.84.164,42841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:53.770445,0.0,tcp,147.32.84.165,2079.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:53.770540,0.0,tcp,147.32.84.165,2078.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:53.770547,0.0,tcp,147.32.84.165,2081.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.305696,0.000315,udp,147.32.84.138,36793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:29:54.370988,0.0,tcp,147.32.84.165,2084.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.371099,0.0,tcp,147.32.84.165,2085.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.371111,0.0,tcp,147.32.84.165,2086.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.371130,0.0,tcp,147.32.84.165,2087.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.371203,0.0,tcp,147.32.84.165,2088.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.972608,0.0,tcp,147.32.84.165,2091.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:54.972675,0.0,tcp,147.32.84.165,2090.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,17,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 17:29:55.756803,0.000368,udp,147.32.84.164,35222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,72,124,98.0,0.3673469387755102,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:55.758191,0.000184,udp,147.32.84.164,37226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,81,149,115.0,0.3521739130434783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:55.759241,0.000163,udp,147.32.84.164,34114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,81,149,115.0,0.3521739130434783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:55.926039,0.00026,udp,147.32.84.164,52399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,83,136,109.5,0.3789954337899543,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:56.003609,0.010134,udp,147.32.84.164,53905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:56.013914,0.020157,udp,147.32.84.164,32985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:29:57.883651,0.95969,tcp,147.32.86.20,3419.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,106,104995,1886,103109,990.5188679245283,0.01796276013143483,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:29:58.014141,0.009189,tcp,147.32.84.170,59968.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2200,1441,759,220.0,0.655,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:29:58.104835,0.000484,udp,147.32.84.134,43307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:29:59.099779,2581.463623,udp,147.32.84.94,7103.0,<->,46.4.89.202,53012.0,CON,0.0,0.0,1286,1083432,22944,1060488,842.4821150855365,0.02117714817358173,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:30:01.000355,0.005392,tcp,147.32.84.170,59970.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2246,1441,805,224.6,0.6415850400712377,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:01.567198,3599.875244,udp,147.32.84.59,55091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,504,200,304,126.0,0.3968253968253968,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:01.822700,0.000362,udp,147.32.85.34,54338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:01.920199,0.007324,tcp,147.32.86.92,59287.0,->,88.86.102.51,80.0,FSPA_FSPA,0.0,0.0,10,1016,554,462,101.6,0.5452755905511811,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:30:04.272273,3598.177734,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,16,1440,720,720,90.0,0.5,17,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 17:30:04.483320,2757.062012,udp,212.235.185.142,58552.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1380,1008,372,115.0,0.7304347826086957,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:30:05.072316,0.005751,tcp,147.32.84.170,59972.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2246,1441,805,224.6,0.6415850400712377,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:05.177046,0.000227,udp,147.32.84.170,35916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:05.177659,0.000255,udp,147.32.84.170,43869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:06.662788,0.000292,udp,147.32.84.138,57238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:06.677926,0.000288,udp,147.32.84.170,42650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:06.679952,0.018104,tcp,147.32.84.170,42487.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:07.265707,0.000304,udp,147.32.84.59,53157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:07.512256,0.045675,udp,147.32.84.59,51060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,504,76,428,252.0,0.15079365079365079,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:07.911981,0.010758,tcp,147.32.84.170,59975.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2080,1321,759,208.0,0.6350961538461538,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:08.303575,0.0083,tcp,147.32.84.170,59976.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2126,1321,805,212.6,0.621354656632173,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:08.343537,6.096838,udp,147.32.84.229,13363.0,->,91.79.65.100,43843.0,INT,0.0,,3,276,276,0,92.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:30:08.955081,1469.529663,udp,147.32.84.229,13363.0,<->,130.15.73.115,52881.0,CON,0.0,0.0,10,1147,729,418,114.7,0.6355710549258936,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:30:08.968189,0.009853,tcp,147.32.84.170,59977.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2201,1442,759,220.1,0.6551567469332121,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:09.142576,0.000222,udp,147.32.84.170,34517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:09.143197,0.000262,udp,147.32.84.170,32892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:09.527881,0.007545,tcp,147.32.84.170,59978.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2077,1318,759,207.7,0.6345690900337024,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:10.291431,0.000329,udp,147.32.87.36,50452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 17:30:12.504808,0.00017,udp,147.32.84.138,33875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:15.758319,0.16957,tcp,147.32.86.20,3431.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,64,57743,1513,56230,902.234375,0.026202310236738652,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:30:16.144543,0.000331,udp,147.32.84.134,51455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:16.681534,0.017862,tcp,147.32.84.170,37712.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:18.577823,61.282028,tcp,147.32.84.165,2102.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:30:23.982171,3134.727783,udp,147.32.84.174,42806.0,<->,84.42.234.250,123.0,CON,0.0,0.0,21,1890,990,900,90.0,0.5238095238095238,17,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 17:30:24.032021,0.000386,udp,147.32.84.170,52517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:26.678823,0.000377,udp,147.32.84.170,45428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:26.680850,0.018198,tcp,147.32.84.170,37714.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.589829,17.577873,tcp,147.32.84.170,43674.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,36,21025,6702,14323,584.0277777777778,0.31876337693222356,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.651331,14.685266,tcp,147.32.84.170,60602.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,34,24848,2247,22601,730.8235294117648,0.09042981326464906,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.676896,0.000247,udp,147.32.84.170,50465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.677149,0.00034,udp,147.32.84.170,41676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.677323,17.490294,tcp,147.32.84.170,43677.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,39,28124,5365,22759,721.1282051282051,0.19076233821646993,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.678277,0.00027,udp,147.32.84.170,40077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.678838,14.657744,tcp,147.32.84.170,60608.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,12,3728,1057,2671,310.6666666666667,0.28353004291845496,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.679309,0.000534,udp,147.32.84.170,52658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.679576,0.003606,tcp,147.32.84.170,55553.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2117,1101,1016,235.22222222222223,0.5200755786490316,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.680273,0.000254,udp,147.32.84.170,43518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.680985,0.000339,udp,147.32.84.170,36971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.683453,0.000305,udp,147.32.84.170,33308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.919672,0.000238,udp,147.32.84.170,55044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,76,165,120.5,0.3153526970954357,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.920325,0.000228,udp,147.32.84.170,39189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.921298,4.418598,tcp,147.32.84.170,41155.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,27,14165,2814,11351,524.6296296296297,0.19865866572537946,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.925470,0.003598,udp,147.32.84.170,34613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.929493,0.000207,udp,147.32.84.170,60834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.930011,0.00177,udp,147.32.84.170,48538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:29.941643,14.394719,tcp,147.32.84.170,48727.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,3476,1906,1570,248.28571428571428,0.5483314154200231,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.003327,14.333526,tcp,147.32.84.170,60148.0,->,80.250.10.21,80.0,FSPA_FSPA,0.0,0.0,11,2433,772,1661,221.1818181818182,0.3173037402383888,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.003673,14.333191,tcp,147.32.84.170,60150.0,->,80.250.10.21,80.0,FSPA_FSPA,0.0,0.0,17,4296,1813,2483,252.7058823529412,0.42202048417132215,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.129915,0.000244,udp,147.32.84.170,53834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.130748,14.205226,tcp,147.32.84.170,53508.0,->,77.75.72.22,80.0,FSPA_FSPA,0.0,0.0,57,43935,3251,40684,770.7894736842105,0.07399567542961193,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.819676,0.001878,udp,147.32.84.170,39646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,79,185,132.0,0.29924242424242425,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:30.822143,3.517985,tcp,147.32.84.170,41170.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,26,20628,1307,19321,793.3846153846154,0.06336048089974791,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:32.193579,0.00042,udp,147.32.87.212,53260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:34.180953,0.000265,udp,147.32.84.134,36479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:36.679500,0.000317,udp,147.32.84.170,55510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:36.680415,0.000412,udp,147.32.84.170,53032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:38.138277,0.000406,udp,147.32.84.59,50020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,85,194,139.5,0.3046594982078853,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:39.283600,0.000234,udp,147.32.85.34,55309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:39.859648,0.000212,udp,147.32.84.134,54950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:41.524641,0.000259,udp,147.32.84.138,57490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:43.198974,0.000282,udp,147.32.84.134,56274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:43.199807,0.000241,udp,147.32.84.134,54695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:43.369905,0.00041,udp,147.32.84.59,45147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,86,212,149.0,0.28859060402684567,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:46.322399,0.000246,udp,147.32.84.164,36161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.323404,0.000258,udp,147.32.84.164,45692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.324020,0.000262,udp,147.32.84.164,35799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.325212,0.00025,udp,147.32.84.164,57717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,80,155,117.5,0.3404255319148936,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.435042,0.000206,udp,147.32.84.164,48365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.435582,0.000256,udp,147.32.84.164,40224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:46.436162,0.000501,udp,147.32.84.164,56083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:30:47.343107,0.000335,udp,147.32.84.170,52730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:47.696780,0.121831,tcp,147.32.84.170,43132.0,->,94.138.111.180,80.0,FSRPA_SPA,0.0,0.0,67,69087,2448,66639,1031.1492537313434,0.035433583742238046,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:47.702399,0.001922,udp,147.32.84.170,44288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:49.805947,0.00491,tcp,147.32.84.170,50691.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2193,1388,805,219.3,0.6329229366165071,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:50.453496,0.000232,udp,147.32.84.138,58036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:52.467621,0.007921,tcp,147.32.84.170,50692.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2146,1387,759,214.6,0.6463187325256291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:55.570949,0.000277,udp,147.32.84.138,33669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:30:56.680296,0.000327,udp,147.32.84.170,46741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.230476,6.159165,tcp,147.32.84.170,48052.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,18,8852,2195,6657,491.77777777777777,0.24796656122910077,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.280480,6.066634,tcp,147.32.84.170,48039.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,17,9333,2820,6513,549.0,0.30215364834458375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.281480,17.057123,tcp,147.32.84.170,48043.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,22,12855,3233,9622,584.3181818181819,0.2514974718008557,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.369468,0.338414,udp,147.32.84.229,13363.0,<->,114.41.201.191,6241.0,CON,0.0,0.0,4,3020,60,2960,755.0,0.019867549668874173,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:30:57.470097,6.872604,tcp,147.32.84.170,43156.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,38,30999,2619,28380,815.7631578947369,0.08448659634181747,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.470876,6.199661,tcp,147.32.84.170,43159.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,56,52651,2193,50458,940.1964285714286,0.04165163054832767,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.505798,5.924685,tcp,147.32.84.170,38503.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2548,1627,921,231.63636363636363,0.6385400313971743,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.505969,5.924416,tcp,147.32.84.170,38504.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2548,1627,921,231.63636363636363,0.6385400313971743,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:57.835216,0.000297,udp,147.32.84.134,46871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:57.917645,0.000225,udp,147.32.84.134,34025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,80,190,135.0,0.2962962962962963,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:57.921810,0.000403,udp,147.32.84.134,33042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:57.923881,0.000237,udp,147.32.84.134,44871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,80,190,135.0,0.2962962962962963,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:30:58.124792,0.005488,tcp,147.32.84.170,50719.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,12,3526,2655,871,293.8333333333333,0.7529778786159954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:30:59.460466,0.00015,udp,147.32.84.138,45705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:01.237762,0.000377,udp,147.32.84.134,60664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:01.238592,0.000357,udp,147.32.84.134,46410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:02.986387,0.00038,udp,147.32.84.170,42558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.388984,6.317282,tcp,147.32.84.170,48076.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,15,7130,1501,5629,475.3333333333333,0.21051893408134642,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.429601,10.908739,tcp,147.32.84.170,38513.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,33,20912,5073,15839,633.6969696969697,0.24258798775822493,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.431002,10.907896,tcp,147.32.84.170,48064.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,12,3998,1259,2739,333.1666666666667,0.3149074537268634,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.431099,10.90749,tcp,147.32.84.170,48066.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,12,4213,1259,2954,351.0833333333333,0.29883693330168526,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.696496,10.6421,tcp,147.32.84.170,38519.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,17,8943,1416,7527,526.0588235294117,0.15833612881583362,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.696741,10.641587,tcp,147.32.84.170,38521.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,17,8718,1416,7302,512.8235294117648,0.1624225739848589,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:03.696916,10.641428,tcp,147.32.84.170,38523.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,15,6307,1350,4957,420.46666666666664,0.2140478833042651,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:04.037935,0.005511,tcp,147.32.84.170,50735.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,12,3465,2594,871,288.75,0.7486291486291486,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:07.320767,0.000309,udp,147.32.84.170,43270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:07.565375,0.121551,udp,147.32.84.170,37897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,76,414,245.0,0.15510204081632653,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:08.077757,0.227694,udp,147.32.84.170,56836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,73,157,115.0,0.3173913043478261,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:08.306133,306.099762,tcp,147.32.84.170,54901.0,->,192.150.8.200,80.0,FSPA_FSPA,0.0,0.0,25,2466,1395,1071,98.64,0.5656934306569343,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:09.542585,2.65615,tcp,147.32.84.170,50763.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2535,1730,805,253.5,0.6824457593688363,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:09.542947,14.797152,tcp,147.32.84.170,37443.0,->,77.75.76.30,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:09.543091,14.796882,tcp,147.32.84.170,37445.0,->,77.75.76.30,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:09.543556,5.017276,tcp,147.32.84.170,50252.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,11,3080,2140,940,280.0,0.6948051948051948,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:09.543560,0.020222,udp,147.32.84.170,33056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,532,83,449,266.0,0.15601503759398497,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:11.278138,0.000752,udp,78.157.169.198,3177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:12.341663,9.81049,tcp,147.32.84.170,50783.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,12,3465,2594,871,288.75,0.7486291486291486,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:13.016587,0.000437,udp,95.35.163.146,29493.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:14.831374,9.507966,tcp,147.32.84.170,38590.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2261,1340,921,205.54545454545453,0.5926581158779302,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:18.604789,0.010968,udp,147.32.84.170,39119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,76,165,120.5,0.3153526970954357,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:18.737702,5.602711,tcp,147.32.84.170,40797.0,->,81.0.235.16,80.0,FSPA_FSPA,0.0,0.0,98,89298,7753,81545,911.204081632653,0.08682165334050035,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:18.738226,5.602134,tcp,147.32.84.170,40800.0,->,81.0.235.16,80.0,FSPA_FSPA,0.0,0.0,289,297830,10970,286860,1030.5536332179931,0.036833092703891485,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:19.276826,0.000319,udp,147.32.84.134,49440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:19.434763,61.283058,tcp,147.32.84.165,2103.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:31:19.996823,2660.93042,tcp,84.42.140.191,36528.0,->,147.32.87.214,22.0,FSPA_FSPA,0.0,0.0,2430,298828,139026,159802,122.97448559670782,0.46523752794249534,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:31:21.122369,0.343616,tcp,147.32.84.170,43259.0,->,94.138.111.180,80.0,FSRPA_SA,0.0,0.0,10,5725,1043,4682,572.5,0.18218340611353712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:26.030473,0.000328,udp,147.32.84.170,52015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:26.527118,1311.256958,udp,109.125.200.246,55442.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,440,316,124,110.0,0.7181818181818181,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:27.974845,0.000171,udp,147.32.84.134,38689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:27.975469,0.000224,udp,147.32.84.134,32996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:28.059387,0.000294,udp,147.32.84.134,59572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,80,190,135.0,0.2962962962962963,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:28.060883,0.000244,udp,147.32.84.134,56144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:28.063653,0.000226,udp,147.32.84.134,49845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:28.305572,0.000252,udp,147.32.84.134,55900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:29.474402,573.724854,udp,147.32.84.229,13363.0,<->,131.188.94.162,31640.0,CON,0.0,0.0,4,383,150,233,95.75,0.391644908616188,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:29.591416,0.000254,udp,147.32.84.170,38313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:29.592129,0.00053,udp,147.32.84.170,35250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:29.593604,274.772034,tcp,147.32.84.170,49463.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,36,10569,7709,2860,293.5833333333333,0.7293972939729397,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:29.967797,0.009523,udp,147.32.84.170,58798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,97,304,200.5,0.24189526184538654,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:31.781489,0.000278,udp,147.32.85.25,32810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:31.890971,0.000467,udp,147.32.86.111,53041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:34.919811,0.000513,udp,147.32.84.25,60304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:36.679641,0.000346,udp,147.32.84.170,56700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:36.680548,0.000415,udp,147.32.84.170,55447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:37.325602,0.000268,udp,147.32.84.134,37723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:31:38.998570,1880.393555,udp,147.32.84.229,13363.0,<->,46.146.47.109,31268.0,CON,0.0,0.0,8,1514,308,1206,189.25,0.20343461030383092,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:45.951434,0.000408,udp,147.32.84.164,40419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:31:45.951963,0.000345,udp,147.32.84.164,43898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:31:46.679352,0.000457,udp,147.32.84.170,60668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:46.680378,0.000359,udp,147.32.84.170,54785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:47.485450,0.000309,udp,147.32.85.25,40738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:47.499774,0.049962,udp,147.32.84.59,53815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:31:47.737606,0.000761,udp,178.134.73.144,20249.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,675,74,601,337.5,0.10962962962962963,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:47.901130,0.000556,udp,84.24.91.35,3245.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:49.385293,0.000741,udp,95.168.225.30,15946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,713,77,636,356.5,0.10799438990182328,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:31:50.088051,0.000297,udp,147.32.84.164,37110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:31:54.105320,0.310234,tcp,147.32.86.20,3503.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,35,29662,858,28804,847.4857142857143,0.028925898455936887,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:31:56.680345,0.017976,tcp,147.32.84.170,50771.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:57.024190,0.000349,udp,147.32.84.170,57990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:31:57.234346,6.592821,tcp,66.249.72.170,34548.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,9780,1099,8681,489.0,0.1123721881390593,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:31:59.915243,3353.991211,udp,147.32.84.111,48922.0,<->,78.141.181.223,34017.0,CON,0.0,0.0,10,1227,912,315,122.7,0.7432762836185819,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:01.859069,0.000307,udp,147.32.85.34,53852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,86,212,149.0,0.28859060402684567,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:03.251050,0.000735,udp,95.42.81.61,47904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,578,76,502,289.0,0.1314878892733564,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:04.390488,0.000322,udp,147.32.84.134,45307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:06.471006,0.000672,udp,95.134.109.245,14927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:06.630953,0.000382,udp,147.32.84.170,46883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,71,123,97.0,0.36597938144329895,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:06.678509,0.000313,udp,147.32.84.170,54396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:06.679341,0.000336,udp,147.32.84.170,43311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:08.425666,0.24,tcp,147.32.84.170,33142.0,->,161.67.136.169,80.0,FSRPA_SA,0.0,0.0,23,14525,1541,12984,631.5217391304348,0.10609294320137694,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:09.177386,3576.774658,udp,147.32.84.94,7103.0,<->,46.4.89.202,52012.0,CON,0.0,0.0,923,793306,15378,777928,859.486457204767,0.019384701489715193,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:14.140632,0.000524,udp,72.94.14.113,3294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:16.040104,0.000193,udp,147.32.84.138,49653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:20.292801,61.298103,tcp,147.32.84.165,2104.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:32:22.435182,0.007002,tcp,147.32.84.134,39440.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:22.543601,0.000611,udp,147.32.86.20,64703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:24.156879,0.005611,tcp,147.32.84.59,54144.0,->,77.75.73.9,80.0,SRPA_FSPA,0.0,0.0,9,2419,1712,707,268.77777777777777,0.7077304671351798,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:32:24.792045,0.000463,udp,147.32.84.59,49004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,79,285,182.0,0.21703296703296704,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:26.469569,15.300518,udp,147.32.84.94,7103.0,->,188.250.0.12,63063.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:32:27.022685,0.000546,udp,77.5.93.163,13972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:27.346530,15.301152,udp,147.32.84.94,7103.0,->,84.226.254.206,7248.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:32:28.036611,0.000485,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,17,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 17:32:28.636956,0.000243,udp,147.32.84.138,40904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:29.266872,378.429993,tcp,147.32.84.59,37792.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,56,26345,3753,22592,470.44642857142856,0.14245587397988232,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:32:30.679546,1144.192383,udp,78.141.181.20,21219.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,678,378,300,67.8,0.5575221238938053,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:31.019931,0.000869,udp,86.21.249.248,54338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,74,476,275.0,0.13454545454545455,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:31.032117,3056.797607,udp,93.44.65.177,36285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1260,950,310,126.0,0.753968253968254,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:31.454261,0.007715,tcp,147.32.84.134,39441.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:31.613110,0.00028,udp,147.32.84.138,35606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:35.265742,0.000153,udp,147.32.84.170,34320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,79,142,110.5,0.3574660633484163,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:35.266224,0.00035,udp,147.32.84.170,47833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:35.920754,0.000633,udp,147.32.84.170,51319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:35.922186,0.051318,tcp,147.32.84.170,53643.0,->,74.125.232.200,80.0,FSRPA_FSPA,0.0,0.0,10,2269,1606,663,226.9,0.7078007933010136,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:37.684281,1875.045654,udp,189.102.146.166,38872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1604,394,1210,160.4,0.2456359102244389,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:38.368781,245.998764,tcp,147.32.84.170,53645.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,21,2982,1954,1028,142.0,0.6552649228705567,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:40.128020,2514.591797,udp,147.32.84.229,13363.0,<->,184.167.212.12,2305.0,CON,0.0,0.0,14,1969,1076,893,140.64285714285714,0.5464702894870492,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:40.474481,0.006409,tcp,147.32.84.134,39442.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:41.905088,0.000228,udp,147.32.84.170,60769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.905101,12.448396,tcp,147.32.84.170,42081.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.905167,12.448511,tcp,147.32.84.170,42082.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.905717,0.000398,udp,147.32.84.170,44504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.905841,0.000355,udp,147.32.84.170,48647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.906344,0.000277,udp,147.32.84.170,56584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:41.907117,12.445108,tcp,147.32.84.170,59377.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.149180,0.000171,udp,147.32.84.170,36221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.149892,0.000656,udp,147.32.84.170,50648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.151523,0.00033,udp,147.32.84.170,45330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.151988,0.000323,udp,147.32.84.170,58973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.153167,0.247316,udp,147.32.84.170,47194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.153604,0.000332,udp,147.32.84.170,49443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.591721,0.000284,udp,147.32.84.170,44941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.612880,0.000243,udp,147.32.84.170,45351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,81,141,111.0,0.36486486486486486,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.748589,0.000327,udp,147.32.84.170,47459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:42.860262,0.000214,udp,147.32.84.170,57440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,72,131,101.5,0.35467980295566504,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:43.006353,0.024146,udp,147.32.84.170,53977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:43.056527,0.139792,udp,147.32.84.170,54353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:43.196655,0.000243,udp,147.32.84.170,39515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:43.197343,0.159201,udp,147.32.84.170,50488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:43.357381,0.024651,udp,147.32.84.170,47159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:47.482543,0.000322,udp,147.32.85.89,36992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:32:48.134059,15.328173,tcp,90.180.83.253,59340.0,->,147.32.87.37,80.0,SPA_FSPA,0.0,0.0,46,40008,1894,38114,869.7391304347826,0.04734053189362127,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:32:48.735282,15.254454,tcp,90.180.83.253,59342.0,->,147.32.87.37,80.0,SPA_FSPA,0.0,0.0,121,116986,3610,113376,966.8264462809917,0.03085839331202024,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:32:53.217713,0.000158,udp,147.32.84.170,36227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:53.218318,0.000329,udp,147.32.84.170,58578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:56.679173,0.000299,udp,147.32.84.170,47534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:56.681109,0.018183,tcp,147.32.84.170,56295.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:57.349141,0.054345,udp,147.32.85.84,13716.0,<->,194.42.192.126,48956.0,CON,0.0,0.0,2,566,78,488,283.0,0.13780918727915195,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:32:58.510417,0.000325,udp,147.32.84.134,57700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:58.511372,0.000369,udp,147.32.84.134,38140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:32:59.079515,0.02952,udp,147.32.84.170,44352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:32:59.109661,0.00036,udp,147.32.84.170,55523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:05.593457,0.000669,udp,188.2.128.145,9991.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:06.156006,0.119941,tcp,147.32.85.7,53691.0,->,4.23.39.254,80.0,FSPA_FSPA,0.0,0.0,16,5260,1052,4208,328.75,0.2,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:33:06.219117,0.097643,tcp,147.32.85.7,53694.0,->,4.23.39.254,80.0,FSPA_FSPA,0.0,0.0,18,6156,1140,5016,342.0,0.18518518518518517,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:33:06.679617,0.000376,udp,147.32.84.170,33237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:07.979085,0.000492,udp,147.32.84.134,52830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:07.980883,0.000387,udp,147.32.84.134,44610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:07.982441,0.000287,udp,147.32.84.134,48142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:07.983401,0.000333,udp,147.32.84.134,55471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:11.576186,0.004478,udp,89.102.175.196,26810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3024,60,2964,756.0,0.01984126984126984,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:13.727468,0.598805,tcp,147.32.84.170,37578.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:15.060221,0.000184,udp,147.32.84.138,43788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:15.529387,0.000448,udp,147.32.84.59,52702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:16.549800,0.000238,udp,147.32.84.134,58890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:18.186236,0.000371,udp,147.32.84.134,54513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:18.262058,0.000289,udp,147.32.84.134,58430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:18.263792,0.000278,udp,147.32.84.134,40367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:18.265979,0.000328,udp,147.32.84.134,47039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:18.370961,0.000258,udp,147.32.84.138,46339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,82,132,107.0,0.38317757009345793,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:20.703789,3003.165283,udp,147.32.84.59,34059.0,<->,87.254.187.69,50382.0,CON,0.0,0.0,6,1555,1435,120,259.1666666666667,0.9228295819935691,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:33:21.160504,61.283489,tcp,147.32.84.165,2120.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:33:22.206080,0.003754,udp,95.25.32.250,31224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3024,60,2964,756.0,0.01984126984126984,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:24.733571,250.039963,tcp,147.32.84.164,37787.0,->,74.125.232.198,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:33:24.808918,0.000208,udp,147.32.84.164,41315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:33:24.809487,0.000398,udp,147.32.84.164,38519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:33:25.389081,0.063973,udp,147.32.84.229,13363.0,<->,213.114.102.98,33263.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:26.668278,0.293841,udp,147.32.84.229,13363.0,<->,110.165.181.121,43807.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:26.681468,0.018124,tcp,147.32.84.170,43973.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:27.343375,17.826422,tcp,85.126.85.254,51139.0,->,147.32.87.36,80.0,SRPA_FSPA,0.0,0.0,69,58563,2520,56043,848.7391304347826,0.043030582449669584,17,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 17:33:30.031858,0.000333,udp,147.32.84.170,50227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:34.049516,0.000384,udp,147.32.86.20,50240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:34.614225,0.00037,udp,147.32.84.134,52393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:34.616001,0.007604,tcp,147.32.84.134,60543.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:35.930485,0.000578,udp,86.161.27.186,52224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:36.677975,0.00042,udp,147.32.84.170,39415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:37.881589,16.48527,tcp,147.32.84.59,64553.0,->,95.100.248.33,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:33:43.634812,0.000232,udp,147.32.84.134,34598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:43.635568,0.000245,udp,147.32.84.134,32964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:33:43.756719,2407.000488,udp,79.100.223.48,32840.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1368,906,462,136.8,0.6622807017543859,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:33:46.679055,0.000327,udp,147.32.84.170,38308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:33:47.184213,0.002256,udp,147.32.85.6,55523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:47.212524,0.002099,udp,147.32.85.6,52184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:47.235135,0.001822,udp,147.32.85.6,57879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:33:47.983709,2207.453125,udp,147.32.84.94,7103.0,->,68.207.249.212,7313.0,INT,0.0,,12,1008,1008,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:33:49.431665,7.997313,udp,147.32.87.48,3691.0,->,147.32.86.241,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:33:56.681430,0.018129,tcp,147.32.84.170,59889.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:01.030912,0.000235,udp,147.32.84.170,50591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:01.032263,0.244806,tcp,147.32.84.170,49720.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:01.719837,0.000168,udp,147.32.85.25,48787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:02.527562,0.000266,udp,147.32.84.138,51766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:03.510202,0.000245,udp,147.32.84.138,59853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:05.237117,0.000353,udp,147.32.84.170,37386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:05.239059,245.342484,tcp,147.32.84.170,54966.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,34,7519,5317,2202,221.14705882352942,0.7071419071685064,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:07.496186,0.000658,udp,31.31.114.219,57360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:09.651262,8.996496,tcp,151.77.179.59,53950.0,->,147.32.87.220,64719.0,S_,0.0,,3,186,186,0,62.0,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:34:09.888759,1541.509155,udp,90.146.177.175,24197.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3186,120,3066,531.0,0.03766478342749529,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:10.693918,0.000318,udp,147.32.84.134,37901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:34:13.703771,0.000645,udp,90.49.95.64,19563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,255,193,62,127.5,0.7568627450980392,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:18.862938,0.000268,udp,147.32.84.138,43453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:19.703970,0.000261,udp,147.32.84.138,37920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:19.718004,0.00027,udp,147.32.84.134,38356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:34:20.265273,0.003952,udp,147.32.84.170,47156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.265671,0.000543,udp,147.32.84.170,51776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,76,165,120.5,0.3153526970954357,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.266459,0.000272,udp,147.32.84.170,56781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.266538,0.000386,udp,147.32.84.170,35623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.266837,0.003201,udp,147.32.84.170,36395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.266916,0.000609,udp,147.32.84.170,36964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.267832,0.000393,udp,147.32.84.170,56529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.268099,0.000275,udp,147.32.84.170,50582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.268110,4.08868,tcp,147.32.84.170,43320.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,11,1601,942,659,145.54545454545453,0.5883822610868208,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.268268,0.000351,udp,147.32.84.170,42333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.268274,14.091331,tcp,147.32.84.170,43322.0,->,94.138.111.180,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.268796,6.259477,tcp,147.32.84.170,40965.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2305,1500,805,230.5,0.6507592190889371,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.269324,14.083189,tcp,147.32.84.170,38673.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2099,1178,921,190.8181818181818,0.5612196283944736,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.269554,14.082971,tcp,147.32.84.170,38676.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2094,1173,921,190.36363636363637,0.5601719197707736,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.269673,14.082848,tcp,147.32.84.170,38677.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2093,1172,921,190.27272727272728,0.5599617773530817,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.269839,6.414124,tcp,147.32.84.170,46866.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.270900,0.0019,udp,147.32.84.170,35143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.272374,14.080753,tcp,147.32.84.170,37574.0,->,77.75.76.30,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.272381,24.080347,tcp,147.32.84.170,37575.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,22,11246,2072,9174,511.1818181818182,0.18424328650186733,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.272389,24.080589,tcp,147.32.84.170,37577.0,->,77.75.76.30,80.0,FSPA_FSPA,0.0,0.0,11,1777,1087,690,161.54545454545453,0.6117051209904333,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.272500,14.136973,tcp,147.32.84.170,52420.0,->,77.75.72.107,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.272552,14.080742,tcp,147.32.84.170,52425.0,->,77.75.72.107,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.273320,14.079282,tcp,147.32.84.170,54503.0,->,77.75.77.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.434014,0.001812,udp,147.32.84.170,47617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.436106,0.000312,udp,147.32.84.170,34774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.439307,0.013446,tcp,147.32.84.170,46078.0,->,77.75.73.27,80.0,FSPA_FSPA,0.0,0.0,16,3169,960,2209,198.0625,0.30293467970968757,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.481173,0.000555,udp,92.9.102.65,6306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,152,86,66,76.0,0.5657894736842105,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:20.551653,0.000307,udp,147.32.84.170,34671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.620894,0.002031,udp,147.32.84.170,42335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.623174,0.000334,udp,147.32.84.170,47656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.630326,0.000342,udp,147.32.84.170,48982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:20.632419,0.001685,udp,147.32.84.170,43373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:21.442808,0.000238,udp,147.32.84.138,48261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:22.018852,61.282032,tcp,147.32.84.165,2121.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:34:24.354994,0.00019,udp,147.32.84.138,43503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:26.680488,0.018619,tcp,147.32.84.170,56356.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:27.040107,3028.1521,udp,84.220.170.71,20490.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:31.201003,0.00177,udp,147.32.84.59,54324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,81,213,147.0,0.2755102040816326,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:32.034324,0.000343,udp,147.32.84.170,42818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:32.137936,1037.138184,icmp,210.50.139.141,771.0,->,147.32.84.94,40221.0,URP,0.0,,8,896,896,0,112.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:34:32.902488,0.000122,udp,147.32.84.138,42283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:35.967590,0.004736,tcp,147.32.84.170,41002.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2176,1371,805,217.6,0.6300551470588235,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:36.678703,0.000462,udp,147.32.84.170,50473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:36.679664,0.000351,udp,147.32.84.170,45787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:43.749575,0.000265,udp,147.32.84.164,33706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,97,183,140.0,0.3464285714285714,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:34:43.750054,0.111572,udp,147.32.84.164,56686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,97,285,191.0,0.25392670157068065,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:34:44.518088,277.952423,tcp,147.32.84.164,38646.0,->,74.125.232.242,80.0,FSPA_FSRPA,0.0,0.0,33,10043,7812,2231,304.3333333333333,0.7778552225430648,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:34:46.678597,0.000493,udp,147.32.84.170,51288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:34:46.779406,0.000243,udp,147.32.84.134,35599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:34:49.097977,0.000192,udp,147.32.84.59,58585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:34:50.031212,0.0,tcp,147.32.84.59,52481.0,->,188.40.102.74,80.0,S_,0.0,,1,74,74,0,74.0,1.0,17,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:34:50.556226,0.000647,udp,85.47.237.138,29052.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,262,180,82,131.0,0.6870229007633588,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:51.660643,151.031738,udp,147.32.84.94,7103.0,->,89.97.90.230,7440.0,INT,0.0,,5,420,420,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:34:51.826297,0.004344,udp,125.224.189.251,40222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3024,60,2964,756.0,0.01984126984126984,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:34:55.794826,0.000246,udp,147.32.84.134,44093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:34:55.795502,0.000321,udp,147.32.84.134,34420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:00.311434,0.000268,udp,147.32.84.138,44240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:00.746658,0.000278,udp,147.32.85.34,53761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,71,137,104.0,0.34134615384615385,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:01.574249,0.020331,udp,147.32.84.170,50765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:01.595026,0.024913,udp,147.32.84.170,37880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,74,270,172.0,0.21511627906976744,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:03.022089,0.000354,udp,147.32.84.170,51690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:03.643349,0.046958,udp,147.32.84.229,13363.0,<->,149.5.45.253,43046.0,CON,0.0,0.0,2,204,64,140,102.0,0.3137254901960784,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:04.810355,0.000345,udp,147.32.84.134,42740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:04.811267,0.007788,tcp,147.32.84.134,60553.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:05.866436,0.000637,udp,95.223.204.16,64936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,76,468,272.0,0.13970588235294118,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:06.678353,0.000532,udp,147.32.84.170,43826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:06.680639,0.018499,tcp,147.32.84.170,44033.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:06.862005,1252.740845,udp,83.8.21.219,37971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1076,146,930,269.0,0.13568773234200743,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:07.111788,0.000171,udp,147.32.84.170,36219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:10.207587,0.000322,udp,147.32.86.92,52570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,87,273,180.0,0.24166666666666667,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:11.234176,1423.372803,udp,31.211.144.199,41906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,932,600,332,116.5,0.6437768240343348,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:12.244645,0.000249,udp,147.32.84.138,50807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:13.827721,0.01656,tcp,147.32.84.134,60554.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:14.746561,0.00019,udp,147.32.85.25,59558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:15.465224,3351.838623,udp,147.32.84.94,7103.0,<->,46.4.100.40,56012.0,CON,0.0,0.0,1512,1312242,24026,1288216,867.8849206349206,0.01830912285996028,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:16.490417,0.054113,udp,147.32.84.229,13363.0,<->,217.210.78.65,26341.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:16.680795,0.018394,tcp,147.32.84.170,50862.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:17.158068,2117.96167,icmp,84.57.27.184,3331.0,->,147.32.84.94,,URFIL,0.0,,20,1400,1400,0,70.0,1.0,17,,flow=Background,Background,-1 2011-08-16 17:35:19.178506,117.889275,tcp,147.32.84.59,50482.0,->,92.123.68.122,80.0,FSPA_FSPA,0.0,0.0,28,26662,1010,25652,952.2142857142857,0.037881629285124896,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:35:22.854815,0.000198,udp,147.32.84.134,59664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:22.855512,0.000347,udp,147.32.84.134,41885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:22.875613,61.283142,tcp,147.32.84.165,2122.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:35:24.126399,1934.298706,udp,147.32.84.229,13363.0,->,46.162.113.250,12166.0,INT,0.0,,12,1740,1740,0,145.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:35:25.130460,0.000256,udp,147.32.84.138,47991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:26.678366,0.000521,udp,147.32.84.170,49007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:27.386247,0.000287,udp,147.32.84.138,58138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:31.405942,6.041496,udp,147.32.84.229,13363.0,->,78.106.239.215,64740.0,INT,0.0,,3,180,180,0,60.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:35:34.030114,0.000374,udp,147.32.84.170,46989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:36.678909,0.000291,udp,147.32.84.170,51118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:40.481313,3574.004883,udp,220.150.47.235,29197.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,28,1890,1050,840,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:40.896039,0.000218,udp,147.32.84.134,42657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:35:41.662483,0.000928,udp,87.119.105.49,57287.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:43.809037,3020.166748,udp,147.32.86.44,10966.0,<->,195.222.126.134,7889.0,CON,0.0,0.0,6,733,547,186,122.16666666666667,0.7462482946793997,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:35:44.864573,0.059755,udp,147.32.84.170,42169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:44.955301,0.000251,udp,147.32.84.170,49806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:44.975807,9.394947,tcp,147.32.84.170,40704.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,24,13587,1174,12413,566.125,0.0864061235004048,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.422026,8.95149,tcp,147.32.84.170,44977.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,31,13253,2315,10938,427.51612903225805,0.17467743152493775,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.423672,8.949328,tcp,147.32.84.170,44981.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,16,3927,993,2934,245.4375,0.25286478227654696,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.423728,18.950724,tcp,147.32.84.170,44982.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,41,13684,3474,10210,333.7560975609756,0.2538731365097925,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.694338,0.000236,udp,147.32.84.170,36288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,76,211,143.5,0.26480836236933797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.695479,0.000643,udp,147.32.84.170,45352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.705811,0.21081,udp,147.32.84.170,50182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,73,159,116.0,0.3146551724137931,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.707123,18.806082,tcp,147.32.84.170,55489.0,->,173.193.138.228,80.0,FSPA_FSRPA,0.0,0.0,55,36916,9714,27202,671.2,0.2631379347708311,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.715006,0.020378,udp,147.32.84.170,60214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.805338,0.019866,udp,147.32.84.170,42816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,82,172,127.0,0.3228346456692913,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.815364,0.020365,udp,147.32.84.170,44502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,84,174,129.0,0.32558139534883723,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.921911,8.450986,tcp,147.32.84.170,40733.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,29,13754,2206,11548,474.2758620689655,0.16038970481314527,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.923101,8.449357,tcp,147.32.84.170,45002.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,14,3473,940,2533,248.07142857142858,0.27065937230060466,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.923278,8.449439,tcp,147.32.84.170,45003.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,17,5901,1072,4829,347.11764705882354,0.18166412472462296,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.923814,8.448329,tcp,147.32.84.170,40741.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,14,3777,940,2837,269.7857142857143,0.24887476833465713,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:45.926105,8.445748,tcp,147.32.84.170,45011.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,17,5623,1006,4617,330.7647058823529,0.1789080561977592,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.160845,0.001833,udp,147.32.84.170,56952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,491,84,407,245.5,0.1710794297352342,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.175901,0.019802,udp,147.32.84.170,57461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,78,273,175.5,0.2222222222222222,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.176217,0.020285,udp,147.32.84.170,50226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,85,175,130.0,0.3269230769230769,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.196796,0.000347,udp,147.32.84.170,48492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.316549,0.164316,udp,147.32.84.170,45872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,498,75,423,249.0,0.15060240963855423,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.341210,0.000404,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,17,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 17:35:46.348979,0.001719,udp,147.32.84.170,37023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,476,79,397,238.0,0.16596638655462184,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.368700,308.004822,tcp,147.32.84.170,34284.0,->,195.113.232.96,80.0,FSPA_FSPA,0.0,0.0,22,2782,1592,1190,126.45454545454545,0.5722501797268152,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.651752,0.00038,udp,147.32.84.170,48960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.672961,307.707031,tcp,147.32.84.170,37961.0,->,2.21.111.139,80.0,FSPA_FSPA,0.0,0.0,59,46847,1803,45044,794.0169491525423,0.03848698956176489,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.679030,0.000386,udp,147.32.84.170,51537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.680557,0.000199,udp,147.32.84.170,57161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.821366,0.019839,udp,147.32.84.170,48807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:46.842831,17.523624,tcp,147.32.84.170,38348.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.092109,7.279501,tcp,147.32.84.170,40759.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,16,5259,992,4267,328.6875,0.18862901692336947,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.109233,0.000336,udp,147.32.84.170,34568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,82,210,146.0,0.2808219178082192,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.110071,7.261527,tcp,147.32.84.170,40763.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,16,4190,992,3198,261.875,0.23675417661097853,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.129601,0.000335,udp,147.32.84.170,44215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,82,210,146.0,0.2808219178082192,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.130566,15.84891,tcp,147.32.84.170,45030.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,25,9394,1712,7682,375.76,0.18224398552267404,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.180811,15.819105,tcp,147.32.84.170,40766.0,->,93.188.130.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.207826,0.000369,udp,147.32.84.170,58874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,85,213,149.0,0.28523489932885904,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.254936,0.122556,udp,147.32.84.170,46259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.320829,0.056929,udp,147.32.84.170,48653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.349297,16.004538,tcp,147.32.84.170,40771.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,147,136996,4942,132054,931.9455782312925,0.03607404595754621,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.349456,7.022375,tcp,147.32.84.170,40772.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,24,15202,1060,14142,633.4166666666666,0.0697276674121826,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.349744,7.021862,tcp,147.32.84.170,40774.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,26,15336,1192,14144,589.8461538461538,0.07772561293688054,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.377822,0.002042,udp,147.32.84.170,45499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.380186,647.018311,tcp,147.32.84.170,40305.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,90,51316,8186,43130,570.1777777777778,0.15952139683529504,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:47.438997,0.0,udp,147.32.84.199,427.0,->,192.168.88.186,52358.0,INT,0.0,,1,325,325,0,325.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:35:48.197239,0.000167,udp,147.32.84.170,33479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,72,140,106.0,0.33962264150943394,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:48.199275,0.400419,tcp,147.32.84.170,47861.0,->,67.221.235.123,80.0,FSPA_FSPA,0.0,0.0,10,1714,1144,570,171.4,0.6674445740956826,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:48.219516,16.154497,tcp,147.32.84.170,55552.0,->,93.188.130.108,80.0,FSPA_FSPA,0.0,0.0,18,4953,1528,3425,275.1666666666667,0.30849989905108016,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:48.712037,0.000197,udp,147.32.84.170,39446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,81,126,103.5,0.391304347826087,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:48.750326,0.00024,udp,147.32.84.138,59782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:35:48.927532,1.188856,tcp,147.32.86.20,3669.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,101,104957,1586,103371,1039.1782178217823,0.015110950198652781,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:35:48.949711,10.304746,tcp,147.32.84.170,45695.0,->,68.232.37.39,80.0,FSPA_FSRPA,0.0,0.0,13,2661,866,1795,204.69230769230768,0.32544156332205937,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:49.362055,9.807919,tcp,147.32.84.170,35509.0,->,93.184.220.29,80.0,FSPA_FSRPA,0.0,0.0,11,1747,597,1150,158.8181818181818,0.341728677733257,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:49.595478,194.919144,tcp,147.32.84.170,50348.0,->,173.193.59.175,80.0,FSPA_FSPA,0.0,0.0,21,3602,2208,1394,171.52380952380952,0.6129927817878956,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:55.150992,9.223026,tcp,147.32.84.170,45061.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,19,3620,1570,2050,190.52631578947367,0.43370165745856354,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:55.236611,3225.360107,udp,147.32.84.94,7103.0,->,84.193.204.64,7505.0,INT,0.0,,8,672,672,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:35:56.678896,0.000369,udp,147.32.84.170,53310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:35:56.680073,0.018385,tcp,147.32.84.170,34123.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:01.308688,3405.63208,udp,147.32.84.94,7103.0,<->,46.4.33.67,56012.0,CON,0.0,0.0,1210,1038443,20386,1018057,858.2173553719008,0.019631313418261763,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:02.526815,0.000926,udp,178.167.33.139,25086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1022,75,947,511.0,0.07338551859099804,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:02.961138,0.020337,udp,147.32.84.170,43610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,83,173,128.0,0.32421875,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:02.981837,0.000482,udp,147.32.84.170,44119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,83,211,147.0,0.282312925170068,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:02.982187,11.389957,tcp,147.32.84.170,45067.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,16,4884,992,3892,305.25,0.2031122031122031,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:02.994314,11.37794,tcp,147.32.84.170,45071.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,16,4606,992,3614,287.875,0.2153712548849327,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.019133,11.354553,tcp,147.32.84.170,45072.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,14,3735,926,2809,266.7857142857143,0.24792503346720215,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.309190,11.064477,tcp,147.32.84.170,45073.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,13,2770,928,1842,213.07692307692307,0.33501805054151623,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.339919,11.033482,tcp,147.32.84.170,40811.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,13,2773,928,1845,213.30769230769232,0.3346556076451497,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.341244,11.032047,tcp,147.32.84.170,40812.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,13,2770,928,1842,213.07692307692307,0.33501805054151623,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.341417,11.031989,tcp,147.32.84.170,45078.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,13,2742,928,1814,210.92307692307693,0.3384390955506929,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.398939,10.974174,tcp,147.32.84.170,40815.0,->,93.188.130.105,80.0,FSPA_FSPA,0.0,0.0,13,2739,928,1811,210.69230769230768,0.3388097845929171,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:03.481376,10.892515,tcp,147.32.84.170,45081.0,->,93.188.130.47,80.0,FSPA_FSPA,0.0,0.0,13,2770,928,1842,213.07692307692307,0.33501805054151623,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:04.329651,0.000534,udp,147.32.84.138,54755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:05.031576,0.000319,udp,147.32.84.170,40963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:05.033809,0.249458,tcp,147.32.84.170,58289.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:05.285507,70.072235,udp,147.32.84.229,13363.0,->,151.54.200.94,37491.0,INT,0.0,,6,1077,1077,0,179.5,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:36:07.970442,0.000231,udp,147.32.84.134,47851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:36:07.971364,0.000183,udp,147.32.84.134,39313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:36:16.678936,0.000454,udp,147.32.84.170,42195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:17.356301,0.000264,udp,147.32.85.25,37754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:23.267233,2757.775146,udp,80.76.163.245,41204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,702,516,186,117.0,0.7350427350427351,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:23.733405,61.282749,tcp,147.32.84.165,2123.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:36:24.951334,0.000287,udp,147.32.84.59,55767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:25.857011,18.512037,tcp,147.32.84.59,64624.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:36:26.011432,0.000264,udp,147.32.84.134,59896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:36:26.012258,0.019072,tcp,147.32.84.134,60562.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:36:26.680082,0.00029,udp,147.32.84.170,47929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:36.680664,0.000403,udp,147.32.84.170,42877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:38.057978,0.000177,udp,147.32.84.138,52338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:41.149498,304.779846,tcp,86.89.96.133,51199.0,->,147.32.86.92,80.0,FSPA_FSRPA,0.0,0.0,33,24685,1147,23538,748.030303030303,0.04646546485720073,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:36:42.406299,0.000224,udp,147.32.84.170,40630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:42.406931,0.000377,udp,147.32.84.170,51968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:36:45.183991,1.899717,udp,110.163.9.254,26477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,821,538,283,205.25,0.6552984165651644,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:46.667069,0.000256,udp,147.32.84.138,58902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:47.774665,0.100087,udp,195.91.110.98,1138.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,398,213,185,66.33333333333333,0.535175879396985,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:49.529328,3144.82959,udp,85.178.30.42,18920.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,715,529,186,119.16666666666667,0.7398601398601399,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:50.433903,0.000893,udp,61.11.164.164,45810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,596,73,523,298.0,0.12248322147651007,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:53.082249,0.011159,tcp,147.32.84.134,60565.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:36:57.425285,0.000278,udp,147.32.84.138,52820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:36:58.004145,3005.629639,udp,77.22.21.219,38222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:36:58.475307,240.057953,tcp,147.32.84.164,44390.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,33,4714,3051,1663,142.84848484848484,0.6472210436996182,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:37:01.133522,0.000698,udp,111.88.58.89,64263.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,64,246,155.0,0.2064516129032258,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:37:03.180813,0.000716,udp,94.41.187.161,61308.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,578,77,501,289.0,0.13321799307958476,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:37:04.656069,0.000265,udp,147.32.84.138,42756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:06.680624,0.000359,udp,147.32.84.170,58545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.184118,26.195726,tcp,147.32.84.170,50871.0,->,91.198.174.232,80.0,FSPA_FSRPA,0.0,0.0,38,24519,3061,21458,645.2368421052631,0.12484195929687181,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.282096,0.00044,udp,147.32.84.170,38020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.477858,25.902214,tcp,147.32.84.170,55465.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,14,3365,963,2402,240.35714285714286,0.2861812778603269,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.543952,0.000253,udp,147.32.84.170,38849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.544548,0.000332,udp,147.32.84.170,50477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,79,197,138.0,0.286231884057971,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.545284,0.000272,udp,147.32.84.170,52862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.545562,0.282263,udp,147.32.84.170,34160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.546163,0.000278,udp,147.32.84.170,56657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.546909,0.000433,udp,147.32.84.170,38367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.547930,0.000245,udp,147.32.84.170,35996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.548361,0.000386,udp,147.32.84.170,33589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.551812,0.000313,udp,147.32.84.170,37809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:08.558370,0.13517,tcp,147.32.86.20,3719.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,24062,913,23149,729.1515151515151,0.03794364558224587,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:37:08.833126,0.280262,udp,147.32.84.170,59821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.404510,0.280896,udp,147.32.84.170,49103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.685620,0.01818,udp,147.32.84.170,34801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.695874,0.283895,udp,147.32.84.170,39732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.697631,0.000348,udp,147.32.84.170,51675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.700620,0.000276,udp,147.32.84.170,59352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.701313,0.000446,udp,147.32.84.170,56739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.702550,0.283226,udp,147.32.84.170,57596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.704474,0.000376,udp,147.32.84.170,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.707208,0.000444,udp,147.32.84.170,60697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:09.980008,0.282113,udp,147.32.84.170,54332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:10.262341,0.282531,udp,147.32.84.170,58587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:10.268579,0.284166,udp,147.32.84.170,35258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:10.552934,0.283544,udp,147.32.84.170,49661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:10.837786,0.018027,udp,147.32.84.170,37340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.541215,12.838291,tcp,147.32.84.170,50880.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.541800,12.837973,tcp,147.32.84.170,55473.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.542496,0.000222,udp,147.32.84.170,33788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,85,136,110.5,0.38461538461538464,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.543095,0.000468,udp,147.32.84.170,58788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.804226,0.000364,udp,147.32.84.170,59772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,77,122,99.5,0.3869346733668342,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.804594,0.000249,udp,147.32.84.170,33632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,69,133,101.0,0.3415841584158416,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.804748,0.000352,udp,147.32.84.170,39671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.805208,0.000346,udp,147.32.84.170,33616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,69,232,150.5,0.2292358803986711,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.805815,0.285713,udp,147.32.84.170,55949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.807679,0.000329,udp,147.32.84.170,44857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,82,182,132.0,0.3106060606060606,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:11.809547,0.0004,udp,147.32.84.170,60613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.098215,0.286011,udp,147.32.84.170,36877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.372207,0.28208,udp,147.32.84.170,56441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.372847,0.280332,udp,147.32.84.170,51028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.937923,0.017851,udp,147.32.84.170,54763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.941976,0.017862,udp,147.32.84.170,47036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.958951,0.000335,udp,147.32.84.170,39691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,80,135,107.5,0.37209302325581395,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.960236,0.000446,udp,147.32.84.170,56502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,80,172,126.0,0.31746031746031744,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.969461,0.000352,udp,147.32.84.170,60676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.970978,0.000334,udp,147.32.84.170,49764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.971929,0.000205,udp,147.32.84.170,47485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:12.975343,0.000269,udp,147.32.84.170,42225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:13.072063,0.00023,udp,147.32.84.170,47743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,78,131,104.5,0.37320574162679426,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:13.308722,0.135755,udp,147.32.84.170,54981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,68,159,113.5,0.29955947136563876,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:16.993160,0.000398,udp,147.32.84.138,55495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:20.145767,0.000163,udp,147.32.84.134,54576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:20.146435,0.000286,udp,147.32.84.134,33531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:20.220211,0.000406,udp,147.32.84.170,39414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.220352,0.105228,udp,147.32.84.170,56921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.220820,0.001023,udp,147.32.84.170,53138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.325919,0.000369,udp,147.32.84.170,48476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,72,250,161.0,0.2236024844720497,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.330501,0.10301,udp,147.32.84.170,51227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,75,239,157.0,0.23885350318471338,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.715076,0.000277,udp,147.32.84.170,56828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.795943,0.061812,udp,147.32.84.170,40650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,68,185,126.5,0.26877470355731226,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.974704,0.009615,udp,147.32.84.170,41735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:20.984685,0.000341,udp,147.32.84.170,59844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,350,83,267,175.0,0.23714285714285716,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.022952,0.000171,udp,147.32.84.170,53263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,71,144,107.5,0.3302325581395349,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.024305,0.32207,udp,147.32.84.170,33331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.202258,0.000302,udp,147.32.84.134,46119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:21.278577,0.000261,udp,147.32.84.134,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:21.280317,0.000273,udp,147.32.84.134,58290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:21.281549,0.000331,udp,147.32.84.134,54961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:21.282481,0.000366,udp,147.32.84.134,33481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:37:21.288797,0.019765,udp,147.32.84.170,47828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.378353,0.029354,udp,147.32.84.170,52830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,74,193,133.5,0.27715355805243447,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.389973,0.000271,udp,147.32.84.170,34891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.467525,0.0261,udp,147.32.84.170,49811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.520477,0.003509,udp,147.32.84.170,59237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,397,76,321,198.5,0.19143576826196473,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:21.619148,0.035981,udp,147.32.84.170,35320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:22.098569,0.067454,udp,147.32.84.170,60304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.349383,0.136361,udp,147.32.84.170,35396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,79,134,106.5,0.37089201877934275,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.486416,0.000299,udp,147.32.84.170,52694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,79,134,106.5,0.37089201877934275,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.487447,0.111998,udp,147.32.84.170,54934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,79,205,142.0,0.27816901408450706,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.600366,0.308106,udp,147.32.84.170,43039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.612714,0.000253,udp,147.32.84.138,51474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:23.615303,0.029376,udp,147.32.84.170,44033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,80,165,122.5,0.32653061224489793,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:23.749144,0.000508,udp,147.32.84.170,56399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,81,265,173.0,0.23410404624277456,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:24.417991,0.000816,udp,81.201.17.17,60446.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,76,487,281.5,0.1349911190053286,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:37:24.591130,61.299416,tcp,147.32.84.165,2124.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:37:26.219278,3054.953125,udp,94.225.34.247,61466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:37:26.376008,17.993855,tcp,147.32.84.170,57340.0,->,62.168.44.115,80.0,FSA_FSA,0.0,0.0,10,692,404,288,69.2,0.5838150289017341,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:26.376524,33.375935,tcp,147.32.84.170,45894.0,->,62.168.44.115,443.0,FSPA_FSPA,0.0,0.0,19,5700,1058,4642,300.0,0.1856140350877193,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:26.531602,0.104043,udp,147.32.84.170,42164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:26.636321,0.810183,tcp,147.32.84.170,45593.0,->,199.7.57.72,80.0,FSPA_FSPA,0.0,0.0,13,2891,798,2093,222.3846153846154,0.27602905569007263,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:26.646892,0.017068,udp,147.32.84.170,37347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:26.664239,0.000377,udp,147.32.84.170,36135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:36.090700,3101.14624,tcp,79.178.6.188,54058.0,->,147.32.84.229,13363.0,SRPA_FSPA,0.0,0.0,274,56491,46708,9783,206.17153284671534,0.8268219716415004,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:37:36.287778,0.000294,udp,147.32.84.59,37458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:36.681812,0.019396,tcp,147.32.84.170,54438.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:40.810471,0.0,tcp,76.164.193.170,80.0,->,147.32.87.54,5748.0,SA_,0.0,,1,62,62,0,62.0,1.0,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:37:41.388459,0.000602,udp,147.32.85.6,64117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:45.155147,0.000316,udp,147.32.84.59,60070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:46.268019,0.000197,udp,147.32.85.25,59331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:46.680645,0.000317,udp,147.32.84.170,47280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:46.681754,0.018135,tcp,147.32.84.170,54440.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:49.718275,0.000311,udp,147.32.84.138,35914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:50.681211,273.704071,tcp,147.32.84.170,59085.0,->,74.125.232.195,80.0,FSPA_FSRPA,0.0,0.0,34,10451,7643,2808,307.38235294117646,0.7313175772653334,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:37:56.633023,0.000264,udp,147.32.84.138,58267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:37:57.672700,18.904009,tcp,147.32.85.6,53561.0,->,143.128.224.40,80.0,FSPA_FSPA,0.0,0.0,35,22277,1390,20887,636.4857142857143,0.06239619338331014,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:37:59.003571,0.00371,udp,114.45.56.197,3452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3022,60,2962,755.5,0.01985440105890139,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:06.681694,0.017735,tcp,147.32.84.170,54444.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:11.860064,0.001768,udp,147.32.86.50,59887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:38:12.090088,0.000597,udp,89.204.155.128,32333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:13.618546,0.266387,tcp,147.32.84.170,57962.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:13.763048,0.249743,tcp,147.32.84.170,48408.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:14.081775,0.000323,udp,147.32.84.170,54646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:14.082738,245.680771,tcp,147.32.84.170,35637.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:14.082802,282.012207,tcp,147.32.84.170,35638.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,96,40220,30181,10039,418.9583333333333,0.7503978120338141,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:14.678857,8.998696,tcp,96.31.69.231,56407.0,->,147.32.85.100,3126.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:38:16.679709,0.000394,udp,147.32.84.170,36990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:16.681844,0.01839,tcp,147.32.84.170,55099.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:18.263935,0.000389,udp,147.32.84.138,42780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:38:22.364441,0.00065,udp,77.74.67.255,6128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:23.287816,0.000377,udp,147.32.84.134,35741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:23.565588,116.314934,tcp,147.32.84.59,1809.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,45,38237,1930,36307,849.7111111111111,0.050474671130057276,17,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:38:25.459762,61.298965,tcp,147.32.84.165,2125.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:38:25.552582,0.000435,udp,147.32.84.59,60082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:38:32.306807,0.063572,tcp,147.32.84.134,41992.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:32.880691,0.000211,udp,147.32.85.25,41530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:38:34.695643,632.094238,udp,147.32.84.229,13363.0,->,78.8.137.163,2130.0,INT,0.0,,6,882,882,0,147.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:38:35.937265,3063.25293,udp,190.205.115.27,48294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:36.680431,0.017716,tcp,147.32.84.170,54460.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:37.550817,0.001902,udp,66.66.193.245,11960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,479,60,269.5,0.8886827458256029,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:41.381636,0.000334,udp,147.32.84.134,58115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:41.383415,0.006947,tcp,147.32.84.134,41993.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:42.327887,2162.648682,tcp,80.121.92.227,65344.0,->,147.32.84.229,13363.0,FPA_FPA,0.0,0.0,263,28873,13948,14925,109.78326996197718,0.48308107920894955,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:38:43.103842,0.000687,udp,218.225.72.194,64820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,592,77,515,296.0,0.13006756756756757,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:44.734261,29.635958,tcp,147.32.84.170,45871.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,29,6123,2239,3884,211.13793103448276,0.36567042299526376,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.805468,0.000345,udp,147.32.84.170,54727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.806403,0.000338,udp,147.32.84.170,60595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,68,189,128.5,0.26459143968871596,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.806792,0.000323,udp,147.32.84.170,50726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,75,283,179.0,0.20949720670391062,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.807455,0.000187,udp,147.32.84.170,37300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.807784,0.000393,udp,147.32.84.170,41074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,74,335,204.5,0.18092909535452323,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.808022,0.137052,udp,147.32.84.170,36466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.808423,0.00055,udp,147.32.84.170,40647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,74,311,192.5,0.19220779220779222,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.812699,0.000221,udp,147.32.84.170,33569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,69,169,119.0,0.28991596638655465,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.813690,0.000239,udp,147.32.84.170,32843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.819595,0.000269,udp,147.32.84.170,40172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.819952,0.000199,udp,147.32.84.170,60351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,71,144,107.5,0.3302325581395349,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.820759,0.000144,udp,147.32.84.170,49044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.822892,0.000381,udp,147.32.84.170,50165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,381,74,307,190.5,0.1942257217847769,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.827149,0.000312,udp,147.32.84.170,37802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,75,206,140.5,0.2669039145907473,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.829874,0.000268,udp,147.32.84.170,42326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,74,160,117.0,0.3162393162393162,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.831220,0.000269,udp,147.32.84.170,48425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.831691,0.000267,udp,147.32.84.170,55024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.831948,0.020035,udp,147.32.84.170,59643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,89,271,180.0,0.24722222222222223,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.832145,0.017457,udp,147.32.84.170,47410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.844426,0.024804,udp,147.32.84.170,60481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.850595,0.000316,udp,147.32.84.170,41026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.870440,0.000254,udp,147.32.84.170,58163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:44.920874,0.00029,udp,147.32.84.170,55432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.106720,0.019645,udp,147.32.84.170,37066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,87,170,128.5,0.33852140077821014,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.126824,0.020046,udp,147.32.84.170,49316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.184160,0.009708,udp,147.32.84.170,57669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,121,171,146.0,0.4143835616438356,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.476173,248.912567,tcp,147.32.84.170,33706.0,->,74.125.232.220,80.0,FSPA_FSRPA,0.0,0.0,23,4035,1878,2157,175.43478260869566,0.4654275092936803,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.476401,18.900631,tcp,147.32.84.170,33707.0,->,74.125.232.220,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:45.481108,1027.648804,udp,60.63.201.118,1392.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:45.651036,0.000357,udp,147.32.84.19,33213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:38:46.939303,1.942978,tcp,147.32.84.170,46008.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,3085,1330,1755,257.0833333333333,0.43111831442463533,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:46.939310,0.147452,tcp,147.32.84.170,46009.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,3005,1342,1663,250.41666666666666,0.4465890183028286,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:46.940086,0.000364,udp,147.32.84.170,47258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,78,218,148.0,0.2635135135135135,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:48.958369,0.005302,udp,147.32.84.170,39606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,73,140,106.5,0.3427230046948357,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:49.098621,0.022344,udp,147.32.84.170,56256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:49.122037,0.025982,udp,147.32.84.170,57408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,395,77,318,197.5,0.1949367088607595,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:49.148690,128.578064,tcp,147.32.84.170,47754.0,->,83.167.233.153,80.0,SPA_SRPA,0.0,0.0,26,19367,1080,18287,744.8846153846154,0.05576496101616151,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:49.914651,0.001763,icmp,147.32.86.96,,<-,147.32.87.52,62991.0,RED,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:38:50.402465,0.000208,udp,147.32.84.134,36574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:50.403995,0.00843,tcp,147.32.84.134,41994.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:38:51.657472,2.399614,tcp,147.32.84.170,46016.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2873,1300,1573,239.41666666666666,0.45248868778280543,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:38:52.894294,1882.402466,udp,94.25.156.175,33407.0,->,147.32.86.114,51546.0,INT,0.0,,9,1539,1539,0,171.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:38:53.898276,9.537047,tcp,180.168.3.130,20332.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:38:57.902526,0.000624,udp,80.177.146.34,55968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,223,150,73,111.5,0.672645739910314,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:38:58.939861,13.510379,tcp,177.24.238.110,35611.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,588,222,366,73.5,0.37755102040816324,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:38:59.140579,5.234586,tcp,147.32.84.170,46020.0,->,62.168.44.117,80.0,FSA_FSA,0.0,0.0,7,434,254,180,62.0,0.5852534562211982,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:01.238619,0.000416,udp,147.32.85.74,46124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:06.518144,0.0,udp,192.168.88.138,60947.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:39:07.900543,128.110901,tcp,147.32.84.59,49187.0,->,2.21.103.249,443.0,FSPA_FSPA,0.0,0.0,20,6823,2119,4704,341.15,0.3105671991792467,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:39:08.449894,0.010107,tcp,147.32.84.134,41996.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:10.799255,13.571547,tcp,147.32.84.170,60287.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.674821,0.000343,udp,147.32.84.170,36009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.677638,0.000253,udp,147.32.84.170,40247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.678399,72.710236,tcp,147.32.84.170,52584.0,->,92.123.64.121,80.0,FSPA_FSPA,0.0,0.0,24,14449,1632,12817,602.0416666666666,0.11294899300989687,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.736261,0.002912,udp,147.32.84.170,53288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.739464,0.000205,udp,147.32.84.170,33291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:11.739676,62.639301,tcp,147.32.84.170,45777.0,->,80.239.149.27,80.0,FSPA_FSRPA,0.0,0.0,35,23804,3446,20358,680.1142857142858,0.1447655856158629,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:12.465812,0.016923,udp,147.32.84.170,35342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:12.483889,0.035629,udp,147.32.84.170,42233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:12.520001,151.94043,tcp,147.32.84.170,54976.0,->,69.63.180.43,80.0,FSPA_FSPA,0.0,0.0,21,5555,4361,1194,264.5238095238095,0.785058505850585,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:13.555554,0.030112,udp,147.32.84.170,54498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:13.557670,0.39816,udp,147.32.84.170,54149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:13.586080,0.00019,udp,147.32.84.170,42275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:13.586756,0.03041,udp,147.32.84.170,55933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,76,204,140.0,0.2714285714285714,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:13.956174,0.17652,udp,147.32.84.170,47357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,73,167,120.0,0.30416666666666664,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:15.486199,0.001884,udp,212.91.105.70,59504.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,602,542,60,301.0,0.9003322259136213,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:16.681220,0.000425,udp,147.32.84.170,43044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:16.936934,1.019282,tcp,147.32.86.20,3810.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,102,104767,1646,103121,1027.1274509803923,0.015711054053280136,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:39:17.139020,377.263153,tcp,147.32.84.170,50023.0,->,92.123.68.107,80.0,FSPA_FSPA,0.0,0.0,144,134677,3983,130694,935.2569444444445,0.02957446334563437,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:17.470567,0.000194,udp,147.32.84.134,54488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:17.488739,0.341742,udp,147.32.84.170,45860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:17.998499,0.052103,udp,147.32.84.170,56333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:18.049776,0.017201,udp,147.32.84.170,37696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,82,180,131.0,0.31297709923664124,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:18.050807,0.03541,udp,147.32.84.170,48813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:19.765983,600.669373,udp,82.83.228.132,39178.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,540,300,240,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:21.729532,0.00037,udp,147.32.84.138,55364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:23.796123,362.737213,udp,147.32.84.229,13363.0,<->,76.101.45.179,48533.0,CON,0.0,0.0,4,432,284,148,108.0,0.6574074074074074,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:23.911062,10.45984,tcp,147.32.84.170,36970.0,->,195.113.232.74,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912176,0.000392,udp,147.32.84.170,60712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912560,10.458734,tcp,147.32.84.170,60322.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912629,10.458671,tcp,147.32.84.170,60323.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912689,10.458672,tcp,147.32.84.170,60324.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912816,10.557499,tcp,147.32.84.170,38487.0,->,69.63.190.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.912890,0.000437,udp,147.32.84.170,44257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.914029,10.473008,tcp,147.32.84.170,42042.0,->,92.123.64.137,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.914207,50.473873,tcp,147.32.84.170,38291.0,->,92.123.64.115,80.0,FSPA_FSPA,0.0,0.0,20,10935,1136,9799,546.75,0.10388660265203475,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:23.914260,10.472723,tcp,147.32.84.170,38292.0,->,92.123.64.115,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:24.199318,3045.698486,udp,174.111.41.15,63301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,544,304,240,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:26.328278,61.282486,tcp,147.32.84.165,2126.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:39:26.681217,0.017757,tcp,147.32.84.170,36369.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:26.899548,0.114978,udp,147.32.84.229,13363.0,<->,213.155.212.153,19648.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:27.695941,0.499817,tcp,147.32.80.13,54279.0,->,147.32.84.188,8080.0,FSPA_FSPA,0.0,0.0,86,61696,10016,51680,717.3953488372093,0.16234439834024897,17,0,flow=From-Background-CVUT-Proxy,Background,-1 2011-08-16 17:39:32.021057,0.001653,udp,147.32.84.170,32851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:32.024114,292.379272,tcp,147.32.84.170,43677.0,->,92.123.64.176,80.0,FSPA_FSPA,0.0,0.0,52,31642,3457,28185,608.5,0.10925352379748436,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:32.145412,0.00212,udp,147.32.84.170,55567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:32.635679,0.996192,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,346,142,204,115.33333333333333,0.41040462427745666,17,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 17:39:33.310617,0.000288,udp,147.32.84.138,55968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:33.632595,4.905963,tcp,147.32.84.165,2127.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,12,1312,740,572,109.33333333333333,0.5640243902439024,17,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 17:39:35.361599,0.241816,udp,147.32.84.229,13363.0,<->,173.180.9.184,16443.0,CON,0.0,0.0,4,3030,60,2970,757.5,0.019801980198019802,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:36.621005,0.000299,udp,147.32.84.138,32946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:36.680224,0.000306,udp,147.32.84.170,44287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:36.681267,0.017945,tcp,147.32.84.170,54546.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:40.186741,0.000446,udp,109.157.227.208,57380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,74,463,268.5,0.1378026070763501,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:42.033338,0.000256,udp,147.32.84.170,42256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:42.208655,9.8e-05,udp,147.32.84.138,49458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:44.537031,0.000354,udp,147.32.84.134,38492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:44.537858,0.000281,udp,147.32.84.134,45892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:44.538674,0.011024,tcp,147.32.84.134,42000.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:45.431657,0.000289,udp,147.32.84.138,36961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:45.519568,0.000655,udp,82.32.99.212,34254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:46.218161,0.000219,udp,147.32.84.59,53920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:46.957873,0.000581,udp,119.230.24.31,18497.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:48.118972,0.000665,udp,212.199.141.102,33900.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,17,1,flow=Background-UDP-Established,Background,-1 2011-08-16 17:39:53.358746,0.000312,udp,147.32.84.138,42659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:39:53.559625,0.000444,udp,147.32.84.134,47655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:53.561455,0.006451,tcp,147.32.84.134,42001.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:39:56.691230,0.000376,udp,147.32.84.170,60820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:56.692403,0.018408,tcp,147.32.84.170,55190.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:39:57.143222,0.000413,tcp,147.32.87.36,80.0,->,147.32.86.74,2255.0,SA_,0.0,,2,124,124,0,62.0,1.0,17,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 17:40:00.338947,0.00085,udp,89.232.246.250,30852.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,74,485,279.5,0.13237924865831843,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:00.830448,0.000196,udp,147.32.84.138,43320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:02.580649,0.013781,tcp,147.32.84.134,42003.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:40:03.443538,0.001914,udp,147.32.84.170,58956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:04.897194,38.744522,udp,86.183.172.205,54852.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:05.324090,0.000332,udp,147.32.84.170,37852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:06.674187,0.022435,udp,147.32.84.170,53307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,505,83,422,252.5,0.16435643564356436,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:06.680190,0.000478,udp,147.32.84.170,38248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:06.977323,17.405005,tcp,147.32.84.170,34133.0,->,92.123.68.155,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:06.980326,17.491306,tcp,147.32.84.170,42579.0,->,66.220.153.30,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:09.387074,0.000309,udp,147.32.84.59,53329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:11.276235,0.00879,icmp,147.32.86.92,8.0,<->,209.85.148.99,16966.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,17,0,flow=Background,Background,-1 2011-08-16 17:40:11.569346,16.730986,tcp,180.246.110.218,47912.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,14,1154,601,553,82.42857142857143,0.5207972270363952,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:40:11.606877,0.006762,tcp,147.32.84.134,42004.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:40:11.621157,0.000618,udp,187.2.111.16,22298.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:11.759848,0.032663,udp,147.32.84.170,51356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,609,83,526,304.5,0.13628899835796388,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:13.028004,0.000332,udp,147.32.84.170,54757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:13.031214,0.23701,tcp,147.32.84.170,58481.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:13.059612,0.000416,udp,147.32.85.6,58621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,74,195,134.5,0.275092936802974,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:14.147843,0.012036,tcp,147.32.84.59,50578.0,->,193.84.47.225,443.0,SRPA_FSPA,0.0,0.0,12,2518,1434,1084,209.83333333333334,0.5694996028594123,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:40:16.682616,0.018137,tcp,147.32.84.170,54579.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:17.539227,0.000316,udp,147.32.85.25,58319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:17.900899,0.220777,udp,147.32.86.77,51220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:19.125651,15.253776,tcp,147.32.84.170,55710.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:22.513251,11.868052,tcp,147.32.84.170,60033.0,->,92.123.68.179,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:23.924415,2722.844238,tcp,87.88.26.150,57362.0,->,147.32.84.229,13363.0,FSPA_FSRPA,0.0,0.0,169,13780,7253,6527,81.53846153846153,0.5263425253991292,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:40:26.680599,0.000305,udp,147.32.84.170,37794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:26.783408,0.000248,udp,147.32.84.19,56227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:27.185814,61.282642,tcp,147.32.84.165,2128.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:40:27.709617,16.762177,tcp,147.32.84.170,38545.0,->,69.63.190.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:27.712583,16.660774,tcp,147.32.84.170,40553.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:27.712640,16.660723,tcp,147.32.84.170,40554.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:28.438983,0.00032,udp,147.32.86.20,56052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:29.351287,9.2e-05,udp,147.32.84.138,34182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:29.643983,0.000381,udp,147.32.84.134,57287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:40:29.644969,0.00036,udp,147.32.84.134,54409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:40:31.379063,0.000725,udp,178.16.134.53,43435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,600,78,522,300.0,0.13,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:32.411704,0.009949,udp,147.32.85.6,60195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:33.116690,0.02163,udp,147.32.84.170,33120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.155758,0.016967,udp,147.32.84.170,39656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,82,180,131.0,0.31297709923664124,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.210726,0.035025,udp,147.32.84.170,48798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.245980,0.034848,udp,147.32.84.170,54033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.927502,10.454109,tcp,147.32.84.170,45546.0,->,92.123.68.145,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.928063,0.00031,udp,147.32.84.170,45391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:33.928717,0.002033,udp,147.32.84.170,41016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:34.894711,0.000363,udp,147.32.84.138,59059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:36.104759,0.109702,udp,147.32.84.229,13363.0,<->,77.124.19.232,46089.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:36.515309,0.00195,udp,147.32.84.170,51836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:36.672253,0.000216,udp,147.32.84.170,42242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,77,122,99.5,0.3869346733668342,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:36.679281,0.000341,udp,147.32.84.170,43326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:36.680175,0.000274,udp,147.32.84.170,44687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:37.460625,9.3e-05,udp,147.32.84.170,50987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:37.761187,0.000252,udp,147.32.84.170,56278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:37.902926,0.000224,udp,147.32.84.138,44932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:43.450776,0.000364,udp,147.32.85.34,54250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:44.027349,0.000237,udp,147.32.84.170,38059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:44.028154,0.000312,udp,147.32.84.170,42852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:45.378549,0.02033,udp,147.32.84.170,47053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:45.417351,0.000278,udp,147.32.84.170,44859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,81,220,150.5,0.2691029900332226,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:45.417580,45.747242,tcp,147.32.84.170,42922.0,->,80.239.149.16,80.0,FSPA_FSPA,0.0,0.0,23,12116,2012,10104,526.7826086956521,0.16606140640475403,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:46.683067,0.018452,tcp,147.32.84.170,52821.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:47.688613,0.000141,udp,147.32.84.134,48721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:40:47.960848,0.00022,udp,147.32.84.138,43632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:47.983680,0.000249,udp,147.32.84.138,49654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:40:52.196032,15.32808,udp,147.32.84.94,7103.0,->,91.138.75.77,61098.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:40:52.999387,15.302405,icmp,201.241.89.70,771.0,->,147.32.84.94,1028.0,URP,0.0,,4,448,448,0,112.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:40:54.540224,11.263877,udp,46.107.124.125,21094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1254,1134,120,313.5,0.9043062200956937,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:40:57.759729,0.470531,tcp,147.32.86.44,4657.0,->,147.32.87.54,2222.0,_FSPA,,0.0,96,6472,0,6472,67.41666666666667,0.0,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:40:58.836669,15.546469,tcp,147.32.84.170,40302.0,->,92.123.68.145,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:58.837583,0.00026,udp,147.32.84.170,33693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:58.837835,15.536835,tcp,147.32.84.170,47175.0,->,195.113.232.80,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:40:58.838193,15.635312,tcp,147.32.84.170,57468.0,->,66.220.158.18,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:03.647241,0.000552,udp,217.121.142.141,3028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:04.014969,0.000441,udp,147.32.85.25,45189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:05.745723,0.000529,udp,147.32.84.134,34688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:06.296790,0.00045,udp,147.32.84.170,32807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.297789,0.000374,udp,147.32.84.170,53067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.298944,0.000417,udp,147.32.84.170,51277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.299357,0.007284,udp,147.32.84.170,60258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,80,150,115.0,0.34782608695652173,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.300938,0.000691,udp,147.32.84.170,36014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.302104,0.000323,udp,147.32.84.170,54305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.302847,0.000358,udp,147.32.84.170,38759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.304706,0.00046,udp,147.32.84.170,50823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,73,138,105.5,0.3459715639810427,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.307892,0.002818,udp,147.32.84.170,60786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,80,256,168.0,0.23809523809523808,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.493788,0.000308,udp,147.32.84.170,53412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:06.680766,0.00029,udp,147.32.84.170,54673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:07.569712,0.000646,udp,147.32.84.170,43849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:07.570837,0.021668,udp,147.32.84.170,57369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,83,486,284.5,0.14586994727592267,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.775274,15.60795,tcp,147.32.84.170,43503.0,->,92.123.68.160,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.775849,15.615578,tcp,147.32.84.170,48303.0,->,92.123.64.186,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.775917,15.615118,tcp,147.32.84.170,48304.0,->,92.123.64.186,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.776849,0.000338,udp,147.32.84.170,42623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.776853,15.59895,tcp,147.32.84.170,44261.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.776861,0.000335,udp,147.32.84.170,35861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.790330,15.600818,tcp,147.32.84.170,53566.0,->,92.123.64.178,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.790403,15.600774,tcp,147.32.84.170,53568.0,->,92.123.64.178,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:08.919478,15.471704,tcp,147.32.84.170,43971.0,->,92.123.64.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:11.917855,0.000574,udp,66.17.120.142,59016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:12.626955,54.657387,udp,213.88.104.144,47660.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:14.768988,0.000318,udp,147.32.84.134,53135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:15.036082,0.000385,udp,147.32.84.170,49708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:15.065718,0.000252,udp,147.32.84.138,33750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:16.682703,0.018283,tcp,147.32.84.170,44444.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:18.917515,240.057907,tcp,147.32.84.164,39651.0,->,74.125.232.199,80.0,FSPA_FSPA,0.0,0.0,22,4086,2356,1730,185.72727272727272,0.5766030347528145,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:41:18.952939,0.000368,udp,147.32.84.164,40440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:41:19.005476,1829.395996,udp,147.32.84.229,13363.0,<->,173.171.35.185,8740.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:21.672814,0.000237,udp,147.32.84.138,42133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:23.790096,0.00031,udp,147.32.84.134,40308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:25.519777,0.125256,udp,147.32.84.229,13363.0,<->,84.111.45.187,8472.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:26.046818,0.000278,udp,147.32.84.138,33316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:28.043246,61.299637,tcp,147.32.84.165,2129.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:41:28.209220,0.000908,udp,114.39.156.47,20811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:28.468558,0.000311,udp,147.32.84.138,35173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:31.228894,0.006071,udp,147.32.84.170,58645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,76,217,146.5,0.2593856655290102,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:31.327971,73.067703,tcp,147.32.84.170,49032.0,->,92.123.64.130,80.0,FSPA_FSRPA,0.0,0.0,19,9437,1048,8389,496.6842105263158,0.11105224117834057,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:31.328588,43.064705,tcp,147.32.84.170,39204.0,->,92.123.64.184,80.0,FSPA_FSPA,0.0,0.0,21,10827,1618,9209,515.5714285714286,0.14944121178535144,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:31.486433,2598.829346,udp,122.18.254.67,48601.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:31.600591,52.792992,tcp,147.32.84.170,53855.0,->,92.123.64.121,80.0,FSPA_FSPA,0.0,0.0,20,11158,1555,9603,557.9,0.13936189281233197,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:31.641038,0.000369,udp,147.32.84.170,54764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:31.642823,82.744965,tcp,147.32.84.170,42969.0,->,80.239.149.16,80.0,FSPA_FSPA,0.0,0.0,19,7882,1513,6369,414.8421052631579,0.19195635625475768,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:33.531662,0.001108,udp,147.32.86.111,61600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:34.174269,50.210724,tcp,147.32.84.170,42971.0,->,80.239.149.16,80.0,FSPA_FSPA,0.0,0.0,13,4656,825,3831,358.15384615384613,0.17719072164948454,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:34.312805,10.063633,tcp,147.32.84.170,44281.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:35.132202,0.661989,udp,97.96.51.142,22079.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,710,589,121,177.5,0.8295774647887324,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:40.924253,0.523696,tcp,199.87.232.115,24941.0,->,147.32.85.100,80.0,FSPA_FSPA,0.0,0.0,9,2314,1678,636,257.1111111111111,0.7251512532411409,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:41:41.669003,0.000335,udp,147.32.84.59,51709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:41.828870,0.00023,udp,147.32.84.134,40508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:42.842088,0.000236,udp,147.32.84.138,36817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:43.387435,0.107585,udp,147.32.84.229,13363.0,<->,91.185.83.22,4761.0,CON,0.0,0.0,4,3027,60,2967,756.75,0.019821605550049554,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:45.669903,0.122583,udp,147.32.84.229,13363.0,<->,74.79.39.234,12340.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:45.827463,0.000266,udp,147.32.85.25,52309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:46.243197,0.00014,udp,147.32.85.25,56065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:46.680512,0.000335,udp,147.32.84.170,57304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:46.681346,0.000339,udp,147.32.84.170,60204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:41:47.068226,0.000221,udp,147.32.84.138,34677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:47.462896,0.00022,udp,147.32.84.59,54607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,75,162,118.5,0.31645569620253167,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:50.851361,0.009243,tcp,147.32.84.134,42015.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:51.381594,0.000334,udp,147.32.85.25,41049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:54.510528,0.000779,udp,190.18.139.141,19128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,76,465,270.5,0.14048059149722736,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:41:55.666111,0.000322,udp,147.32.84.138,57138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:41:59.867748,0.000214,udp,147.32.84.134,33738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:59.868609,0.000318,udp,147.32.84.134,54680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:41:59.869428,0.007087,tcp,147.32.84.134,42016.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:01.215504,0.000237,udp,147.32.85.34,53974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:01.224959,0.000284,udp,147.32.85.34,51805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:02.082173,29.087713,udp,89.245.209.163,36981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1054,934,120,263.5,0.8861480075901328,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:06.613673,0.927321,tcp,147.32.84.59,49683.0,->,90.183.38.26,80.0,FSRPA_FSPA,0.0,0.0,67,47118,3534,43584,703.2537313432836,0.07500318349675283,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:42:08.887914,0.000288,udp,147.32.84.134,50884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:09.881611,0.003294,udp,147.32.84.59,54129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,74,178,126.0,0.29365079365079366,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:11.099850,0.000258,udp,147.32.84.59,55991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,79,173,126.0,0.3134920634920635,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:17.034194,0.00037,udp,147.32.84.170,34329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:17.909284,0.007318,tcp,147.32.84.134,42018.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:18.007346,0.000756,udp,126.159.3.34,7789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,77,66,71.5,0.5384615384615384,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:18.199341,0.000419,udp,147.32.84.170,41068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:18.200591,246.204147,tcp,147.32.84.170,45193.0,->,74.125.232.195,80.0,FSPA_FSRPA,0.0,0.0,24,4773,3060,1713,198.875,0.6411062225015713,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:18.238596,246.182404,tcp,147.32.84.170,38214.0,->,209.85.149.139,80.0,FSPA_FSPA,0.0,0.0,37,13121,8653,4468,354.6216216216216,0.6594771739958845,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:25.145344,2.316315,tcp,58.165.72.158,59908.0,->,147.32.84.171,6881.0,FSPA_FSPA,0.0,0.0,16,1528,850,678,95.5,0.556282722513089,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:42:26.928206,0.000276,udp,147.32.84.134,35112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:26.966143,0.003678,udp,141.89.226.149,21827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:28.912719,61.296562,tcp,147.32.84.165,2130.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:42:29.437336,0.000927,udp,85.3.98.51,52668.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:29.696403,0.000177,udp,147.32.84.138,32854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:32.557147,0.000173,udp,147.32.85.25,51941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:32.889441,0.156977,udp,117.26.235.15,1336.0,->,147.32.86.113,33975.0,INT,0.0,,2,144,144,0,72.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:42:35.946386,0.000236,udp,147.32.84.134,39839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:35.948048,0.005774,tcp,147.32.84.134,42020.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:36.681206,0.0004,udp,147.32.84.170,47942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:36.682085,0.018431,tcp,147.32.84.170,44470.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:37.302639,66.450455,tcp,213.7.101.62,57322.0,->,147.32.86.44,443.0,FSPA_FSRPA,0.0,0.0,43,3043,1381,1662,70.76744186046511,0.4538284587578048,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:42:39.313648,0.000637,udp,31.36.25.234,16943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:41.542176,2432.953369,udp,218.212.243.154,11037.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:41.649007,0.002521,udp,147.32.84.19,46754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,87,199,143.0,0.3041958041958042,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:42:44.552520,15.274322,tcp,90.181.127.73,50560.0,->,147.32.84.36,80.0,SPA_FSPA,0.0,0.0,17,8958,1564,7394,526.9411764705883,0.17459254297834337,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:42:46.200462,3588.815918,udp,75.130.164.72,43529.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3158,120,3038,526.3333333333334,0.03799873337555415,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:47.026281,1904.801147,udp,109.58.222.174,58984.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,13,1756,1415,341,135.07692307692307,0.8058086560364465,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:42:51.840786,0.247151,udp,147.32.84.164,42237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:42:53.994717,0.000319,udp,147.32.84.134,38263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:42:56.680695,0.000412,udp,147.32.84.170,36188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:42:59.994934,0.000239,udp,147.32.84.138,54080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:01.067190,0.670211,udp,147.32.84.94,7103.0,<->,89.217.14.64,7184.0,CON,0.0,0.0,40,28675,27913,762,716.875,0.9734263295553618,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:03.013303,0.000248,udp,147.32.84.134,39705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:03.014083,0.010487,tcp,147.32.84.134,42023.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:04.652685,61.967258,tcp,147.32.85.7,39738.0,->,199.59.149.198,443.0,SRPA_FSPA,0.0,0.0,25,12032,2175,9857,481.28,0.1807679521276596,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:43:05.680162,0.001769,udp,108.49.90.241,51904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:06.682072,0.018176,tcp,147.32.84.170,36414.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:06.846033,3484.426758,udp,67.86.77.149,54961.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,34,2276,1244,1032,66.94117647058823,0.546572934973638,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:12.035575,0.000253,udp,147.32.84.134,37347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:13.492565,0.281026,tcp,147.32.84.170,42508.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:13.952058,240.536758,tcp,147.32.84.59,35332.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,39,7790,4935,2855,199.74358974358975,0.6335044929396663,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:43:15.160118,0.223391,udp,147.32.84.229,13363.0,<->,75.179.15.181,51488.0,CON,0.0,0.0,4,702,581,121,175.5,0.8276353276353277,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:15.362483,0.222581,udp,147.32.84.229,13363.0,<->,50.81.184.141,6815.0,CON,0.0,0.0,4,3076,60,3016,769.0,0.01950585175552666,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:16.680362,0.000456,udp,147.32.84.170,46935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:18.273631,0.000199,udp,147.32.84.138,47759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:19.033919,0.000345,udp,147.32.84.170,55891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:19.034959,0.000287,udp,147.32.84.170,40252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:20.500696,0.149324,udp,147.32.84.229,13363.0,<->,76.112.222.133,63332.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:21.062389,0.000374,udp,147.32.84.134,58250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:21.063282,0.024588,tcp,147.32.84.134,50460.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:23.331971,0.327351,udp,147.32.85.6,53267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:23.933376,3511.509766,icmp,79.204.137.188,3331.0,->,147.32.84.94,,URFIL,0.0,,23,1610,1610,0,70.0,1.0,17,,flow=Background,Background,-1 2011-08-16 17:43:23.935463,0.000548,udp,72.220.60.241,39021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:26.680586,0.000434,udp,147.32.84.170,48387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:29.779006,61.298603,tcp,147.32.84.165,2131.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:43:30.099046,0.000375,udp,147.32.84.134,49302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:43:30.480273,15.953404,tcp,123.167.5.21,1121.0,->,147.32.84.168,3389.0,FSPA_SRPA,0.0,0.0,91,11104,4580,6524,122.02197802197803,0.41246397694524495,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:43:32.120050,0.111637,udp,147.32.84.164,53455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:43:32.531834,0.005903,tcp,147.32.84.59,6310.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1908,1049,859,212.0,0.54979035639413,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:43:34.334528,40.254185,udp,90.213.25.155,47328.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:36.679738,0.000359,udp,147.32.84.170,50145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:40.040705,0.000148,udp,147.32.85.25,57379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:46.346260,0.000268,udp,147.32.84.138,52786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:46.557482,2730.760986,udp,217.172.18.235,2641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1350,980,370,112.5,0.725925925925926,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:48.893675,0.038645,udp,147.32.84.229,13363.0,<->,139.153.96.173,3834.0,CON,0.0,0.0,2,135,74,61,67.5,0.5481481481481482,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:49.849185,0.945021,tcp,67.195.112.175,34451.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,54,44686,1928,42758,827.5185185185185,0.04314550418475585,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:43:50.032434,0.000346,udp,147.32.84.170,57806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:43:51.159635,168.150513,tcp,147.32.84.59,56856.0,->,74.125.232.219,80.0,FSPA_FSPA,0.0,0.0,25,5551,3927,1624,222.04,0.7074401008827238,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:43:56.426182,0.000889,udp,173.78.141.166,37275.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,74,469,271.5,0.13627992633517497,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:43:56.628339,0.000211,udp,147.32.84.138,57605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:43:57.716256,0.203363,udp,77.91.63.182,29558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1071,539,532,267.75,0.5032679738562091,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:01.234592,0.00027,udp,147.32.85.34,60483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:01.393806,0.000228,udp,147.32.85.74,49463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,72,171,121.5,0.2962962962962963,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:01.452303,1678.668457,udp,189.7.154.82,27905.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3600,553,3047,600.0,0.15361111111111111,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:03.609268,0.010019,udp,147.32.84.170,57027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:03.640187,250.788086,tcp,147.32.84.170,60566.0,->,209.85.149.117,80.0,FSPA_FSPA,0.0,0.0,7276,7103474,156596,6946878,976.2883452446399,0.022044988128343962,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:04.170238,15.298894,udp,147.32.84.94,7103.0,->,93.139.248.147,63894.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:44:06.182711,0.011667,tcp,147.32.84.134,50465.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:09.142726,1.366774,tcp,83.218.114.94,1056.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,22,1645,861,784,74.77272727272727,0.5234042553191489,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:44:11.894778,3056.374023,udp,208.53.67.210,1075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:13.292859,0.0,icmp,180.87.38.10,11.0,->,147.32.84.229,,TXD,0.0,,1,182,182,0,182.0,1.0,17,,flow=Background,Background,-1 2011-08-16 17:44:14.707440,0.000619,udp,89.204.153.97,42723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:16.680699,0.000353,udp,147.32.84.170,44553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:16.681842,0.017962,tcp,147.32.84.170,49286.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:17.104461,77.44368,udp,213.146.167.65,29007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:19.262576,0.000598,udp,86.47.100.66,37409.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:24.139556,0.000249,udp,147.32.84.138,57503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:24.225494,0.000206,udp,147.32.84.134,41974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:24.618304,0.000315,udp,147.32.84.171,59646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,78,248,163.0,0.2392638036809816,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:25.362266,0.450682,udp,147.32.84.229,13363.0,<->,114.27.209.178,6353.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:26.637122,2607.170166,udp,147.32.84.111,48922.0,<->,190.195.42.198,47235.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:26.681741,0.018602,tcp,147.32.84.170,44494.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:29.944775,0.4648,udp,147.32.85.6,57006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,82,156,119.0,0.3445378151260504,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:30.647415,61.282295,tcp,147.32.84.165,2132.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:44:33.245815,0.000257,udp,147.32.84.134,35446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:33.246593,0.000252,udp,147.32.84.134,34546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:33.441024,2.08474,tcp,147.32.84.171,40671.0,->,90.192.40.13,60388.0,FSPA_FSPA,0.0,0.0,12,1534,596,938,127.83333333333333,0.38852672750977835,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:44:39.603112,0.000364,udp,147.32.84.138,37579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:40.341113,0.000525,udp,147.32.86.20,53571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:40.979240,0.584762,tcp,147.32.84.59,50845.0,->,195.113.232.74,80.0,FSPA_FSPA,0.0,0.0,12,3727,1688,2039,310.5833333333333,0.45291118862355784,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:44:43.260308,15.298927,udp,147.32.84.94,7103.0,->,70.187.35.227,7316.0,REQ,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:44:44.073769,68.288712,tcp,147.32.84.59,50876.0,->,74.125.79.120,80.0,FSPA_FSPA,0.0,0.0,10,1475,1020,455,147.5,0.6915254237288135,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:44:45.091571,0.000852,udp,109.237.82.114,20783.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,316,64,252,158.0,0.20253164556962025,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:46.681724,0.018737,tcp,147.32.84.170,37751.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:44:46.794099,0.755939,tcp,147.32.84.59,50877.0,->,50.16.252.217,80.0,FSRPA_FSPA,0.0,0.0,11,2243,1271,972,203.9090909090909,0.5666518056174766,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:44:47.989036,1456.617554,udp,147.32.84.94,7103.0,<->,194.123.222.235,45106.0,CON,0.0,0.0,45,32178,31650,528,715.0666666666667,0.9835912735409286,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:50.091705,0.310236,tcp,147.32.86.20,4050.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,29760,798,28962,875.2941176470588,0.026814516129032257,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:44:50.500345,0.000411,udp,147.32.84.138,38118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:44:51.379488,0.00022,udp,147.32.84.134,46172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:51.380268,0.000309,udp,147.32.84.134,41558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:44:52.963886,0.135346,udp,147.32.84.229,13363.0,<->,31.163.42.11,47294.0,CON,0.0,0.0,2,549,76,473,274.5,0.1384335154826958,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:44:59.532656,18.292961,tcp,147.32.86.50,53459.0,->,212.67.66.238,80.0,FSPA_FSPA,0.0,0.0,18,6545,2938,3607,363.6111111111111,0.4488922841864018,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:45:00.401509,0.000319,udp,147.32.84.134,59543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:00.402342,0.000376,udp,147.32.84.134,37750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:01.939351,16.428267,tcp,120.60.35.83,10366.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,22,10383,1805,8578,471.95454545454544,0.17384185688144083,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:45:02.167363,0.000324,udp,147.32.84.59,42684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:02.927476,0.000282,udp,147.32.84.138,47465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:04.198621,0.000653,udp,152.7.26.179,2940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:06.486140,0.000319,udp,147.32.85.74,34697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:06.516053,2394.23877,tcp,200.42.236.13,52710.0,->,147.32.84.229,443.0,SRPA_FSPA,0.0,0.0,660,103389,74811,28578,156.65,0.7235876157037983,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:45:09.423122,0.017882,tcp,147.32.84.134,50472.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:09.769428,0.022359,udp,147.32.86.168,57412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,81,194,137.5,0.29454545454545455,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:11.915369,0.808949,tcp,147.32.84.59,64745.0,->,199.59.148.20,443.0,FSPA_FSPA,0.0,0.0,20,4214,2171,2043,210.7,0.515187470336972,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:45:13.989199,6.303997,udp,147.32.84.229,13363.0,->,201.19.96.238,6404.0,INT,0.0,,3,537,537,0,179.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:45:16.680664,0.000406,udp,147.32.84.170,60766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:18.452489,0.000233,udp,147.32.84.134,38056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:18.478690,0.000114,udp,147.32.84.138,37341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:23.027212,0.000645,udp,147.32.84.170,41451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:26.810595,0.14495,udp,147.32.84.229,13363.0,<->,184.58.2.205,27598.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:27.472503,0.000299,udp,147.32.84.134,56818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:27.473248,0.000266,udp,147.32.84.134,53142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:27.718066,0.346674,udp,147.32.84.229,13363.0,<->,61.64.85.156,28379.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:29.237572,0.000163,udp,147.32.84.138,38883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:30.800640,0.0,icmp,88.247.30.206,8.0,->,147.32.86.191,2.0,ECO,0.0,,1,60,60,0,60.0,1.0,17,1,flow=Background,Background,-1 2011-08-16 17:45:31.018509,0.000649,udp,77.232.142.201,58077.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:31.504648,61.274208,tcp,147.32.84.165,2133.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:45:32.798399,0.000323,udp,147.32.84.138,41000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:36.507633,0.000302,udp,147.32.84.134,48467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:36.508493,0.009333,tcp,147.32.84.134,50475.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:36.679728,0.000462,udp,147.32.84.170,54929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:36.680751,0.000365,udp,147.32.84.170,35341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:42.430782,0.025315,udp,147.32.84.229,13363.0,<->,78.141.181.220,34061.0,CON,0.0,0.0,2,243,180,63,121.5,0.7407407407407407,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:46.546736,0.000249,udp,147.32.84.138,36444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:46.679685,0.000368,udp,147.32.84.170,56770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:46.681871,0.018241,tcp,147.32.84.170,36159.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:45:46.968214,0.17012,tcp,147.32.86.20,4087.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,63,56557,1451,55106,897.7301587301587,0.025655533355729617,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:45:51.029766,0.000548,udp,82.26.20.69,38176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:53.343337,276.526001,tcp,94.252.180.183,4522.0,->,147.32.84.229,443.0,FSPA_FSRPA,0.0,0.0,17,1712,400,1312,100.70588235294117,0.2336448598130841,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:45:53.433782,0.000196,udp,147.32.85.6,50063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:53.438946,0.00178,udp,147.32.85.6,52206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:53.471678,0.000352,udp,147.32.86.20,59945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:45:54.579462,0.000214,udp,147.32.84.134,37145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:45:56.587796,0.004588,udp,69.14.223.78,51744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3024,60,2964,756.0,0.01984126984126984,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:45:57.811916,9.015258,tcp,217.23.7.119,53065.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:46:00.930211,0.00038,udp,147.32.84.138,47413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:01.370598,0.000228,udp,147.32.85.34,54802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:01.540661,0.000398,udp,147.32.85.74,44143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:04.235990,0.000568,udp,188.123.240.161,2038.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:46:06.679747,0.000217,udp,147.32.84.170,57019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:11.449623,0.000254,udp,147.32.84.138,45590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:12.628546,0.000309,udp,147.32.84.134,59274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:46:15.458063,0.376749,tcp,147.32.84.59,54250.0,->,38.102.136.104,80.0,FSRPA_FSPA,0.0,0.0,12,2384,1888,496,198.66666666666666,0.7919463087248322,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:46:16.681187,0.000332,udp,147.32.84.170,38612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:18.150313,0.041602,udp,147.32.84.59,59001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,436,81,355,218.0,0.18577981651376146,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:20.031825,0.000265,udp,147.32.85.25,50515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:23.304345,0.000339,udp,147.32.84.138,45957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:25.034434,0.270916,tcp,147.32.84.170,39644.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:25.299644,3114.794922,udp,68.145.104.80,37622.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,1330,730,600,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:46:26.131503,0.278024,tcp,137.191.234.98,8538.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,11,969,505,464,88.0909090909091,0.5211558307533539,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:46:29.089553,2685.54126,tcp,147.32.84.170,54639.0,->,64.12.73.165,443.0,SPA_SPA,0.0,0.0,161,13260,6509,6751,82.36024844720497,0.49087481146304673,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:30.124727,0.000305,udp,147.32.84.138,56084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:30.692834,0.007698,tcp,147.32.84.134,50481.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:46:32.354029,61.296711,tcp,147.32.84.165,2134.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:46:35.414114,30.974756,tcp,147.32.84.162,53256.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,21,10928,3923,7005,520.3809523809524,0.3589860907759883,17,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:46:35.753688,0.000147,udp,147.32.84.138,41121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:35.861583,0.000283,udp,147.32.84.164,55421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.019455,0.000378,udp,147.32.84.164,47109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.020379,2.133851,tcp,147.32.84.164,47728.0,->,209.85.148.147,80.0,FSRPA_FSPA,0.0,0.0,52,27237,7528,19709,523.7884615384615,0.27638873591070967,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.020449,0.000358,udp,147.32.84.164,59250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.020602,2.451429,tcp,147.32.84.164,47732.0,->,209.85.148.147,80.0,FSRPA_FSPA,0.0,0.0,13,2722,1650,1072,209.3846153846154,0.6061719324026451,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.021555,0.00031,udp,147.32.84.164,42414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.218535,0.000271,udp,147.32.84.164,40474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.225450,0.000307,udp,147.32.84.164,60315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.225513,0.000251,udp,147.32.84.164,36338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.225951,0.000328,udp,147.32.84.164,54916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.236876,0.000348,udp,147.32.84.164,51841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.237518,0.000315,udp,147.32.84.164,34306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.245437,0.020015,udp,147.32.84.164,47732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,432,80,352,216.0,0.18518518518518517,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.261584,0.009897,udp,147.32.84.164,46068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.337079,0.00024,udp,147.32.84.164,55467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.339794,0.019919,udp,147.32.84.164,53857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.360037,0.009961,udp,147.32.84.164,55956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.372561,0.000358,udp,147.32.84.164,52310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.514135,0.246755,udp,147.32.84.164,39956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:36.761203,0.247251,udp,147.32.84.164,58464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:37.256613,0.000281,udp,147.32.84.164,55204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:38.302264,6.915108,tcp,147.32.84.164,47736.0,->,209.85.148.147,80.0,FSRPA_FSPA,0.0,0.0,32,16195,3500,12695,506.09375,0.21611608521148504,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:39.707657,0.000202,udp,147.32.84.134,43690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:46:40.114861,0.025781,udp,147.32.84.164,45759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,67,125,96.0,0.3489583333333333,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.114939,0.028139,udp,147.32.84.164,41600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.123149,0.036358,udp,147.32.84.164,54144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,88,229,158.5,0.277602523659306,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.141027,0.000562,udp,147.32.84.164,56542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,67,125,96.0,0.3489583333333333,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.143412,0.000355,udp,147.32.84.164,32869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.168953,0.000413,udp,147.32.84.164,59317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.185886,0.0003,udp,147.32.84.164,33397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,86,145,115.5,0.3722943722943723,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.196390,0.000186,udp,147.32.84.164,60178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.196657,0.000352,udp,147.32.84.164,56822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:40.603626,0.000268,udp,147.32.84.138,40073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:46:42.074393,353.816498,tcp,147.32.84.164,45707.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,37,9022,6028,2994,243.83783783783784,0.6681445355796941,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:44.908641,0.004344,udp,147.32.84.164,59005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:44.913372,0.000356,udp,147.32.84.164,40126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:44.913973,0.006882,udp,147.32.84.164,47872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:44.913980,0.002477,udp,147.32.84.164,35676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,72,171,121.5,0.2962962962962963,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:46.679704,0.000305,udp,147.32.84.170,57983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:48.725270,0.006202,tcp,147.32.84.134,50483.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:46:52.637798,0.016119,udp,147.32.84.164,39312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,72,169,120.5,0.2987551867219917,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:52.651040,0.000303,udp,147.32.84.164,37660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:52.651620,0.001847,udp,147.32.84.164,44780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,75,251,163.0,0.23006134969325154,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:46:56.033873,0.000248,udp,147.32.84.170,40356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:56.681999,0.000392,udp,147.32.84.170,53865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:46:57.191532,1642.820557,udp,91.11.31.56,32317.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,524,369,155,131.0,0.7041984732824428,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:46:57.739020,0.000366,udp,147.32.84.134,56977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:46:57.740732,0.007249,tcp,147.32.84.134,50484.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:47:03.035062,0.00014,udp,147.32.84.138,49367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:06.680838,0.000363,udp,147.32.84.170,49271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:06.681566,0.000354,udp,147.32.84.170,52002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:07.221168,0.011258,udp,147.32.84.164,37392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,70,147,108.5,0.3225806451612903,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:07.224520,0.013909,udp,147.32.84.164,58593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,183,71,112,91.5,0.3879781420765027,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:07.239793,0.009193,udp,147.32.84.164,35448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,75,247,161.0,0.2329192546583851,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:07.249353,0.002355,udp,147.32.84.164,34826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,75,235,155.0,0.24193548387096775,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:07.264630,0.019485,udp,147.32.84.164,51183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,74,270,172.0,0.21511627906976744,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:11.550080,14.32657,tcp,147.32.84.164,52827.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:11.550693,0.000205,udp,147.32.84.164,58475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:11.550978,14.326409,tcp,147.32.84.164,47749.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:11.551517,14.326391,tcp,147.32.84.164,47752.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:11.617363,14.252039,tcp,147.32.84.164,60570.0,->,146.102.17.94,80.0,FSPA_FSPA,0.0,0.0,113,105108,5207,99901,930.1592920353983,0.04953952125432888,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:12.840709,0.107637,udp,147.32.84.164,41632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:12.841751,0.018358,udp,147.32.84.164,32886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:12.969348,972.963318,tcp,147.32.84.164,57297.0,->,74.125.232.212,80.0,FSPA_FSPA,0.0,0.0,92,37729,29453,8276,410.0978260869565,0.7806461872829918,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:13.129929,0.007015,udp,147.32.84.164,42769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:13.136951,0.002803,udp,147.32.84.164,60141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,73,239,156.0,0.23397435897435898,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:13.507784,0.000226,udp,147.32.84.138,42518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:16.679963,0.000422,udp,147.32.84.170,34748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:19.333751,0.000296,udp,147.32.84.138,48792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:21.295237,0.000415,udp,147.32.84.170,33921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,68,169,118.5,0.2869198312236287,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.295342,0.268293,udp,147.32.84.170,33694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.295349,0.000886,udp,147.32.84.170,40773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296151,0.000964,udp,147.32.84.170,59765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296317,13.106609,tcp,147.32.84.170,43679.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296440,13.106479,tcp,147.32.84.170,43681.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296606,13.106127,tcp,147.32.84.170,43684.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296897,103.111366,tcp,147.32.84.170,43689.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,129,100426,12649,87777,778.4961240310078,0.12595343835261785,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.296904,83.11026,tcp,147.32.84.170,43690.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,79,53455,11572,41883,676.6455696202531,0.2164811523711533,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.297209,13.112396,tcp,147.32.84.170,34885.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.297542,0.000408,udp,147.32.84.170,43246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.298645,0.35604,tcp,147.32.84.170,42757.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2077,1061,1016,230.77777777777777,0.5108329321136255,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.298967,13.11158,tcp,147.32.84.170,45470.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.318204,13.093301,tcp,147.32.84.170,55731.0,->,209.85.148.96,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.584118,12.825496,tcp,147.32.84.170,33364.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.623258,0.00039,udp,147.32.84.170,35648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.623409,0.064062,udp,147.32.84.170,40763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.623910,0.00089,udp,147.32.84.170,42590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,80,399,239.5,0.16701461377870563,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.624079,0.000819,udp,147.32.84.170,52645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.624627,0.003849,udp,147.32.84.170,39758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.624709,0.006032,udp,147.32.84.170,59552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,81,394,237.5,0.1705263157894737,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.625218,0.001802,udp,147.32.84.170,43155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.625305,0.007822,udp,147.32.84.170,39228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.625311,0.004988,udp,147.32.84.170,45475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.628978,12.773282,tcp,147.32.84.170,57610.0,->,195.113.232.74,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.630567,0.000414,udp,147.32.84.170,39958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.630897,12.787284,tcp,147.32.84.170,34972.0,->,92.123.64.169,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.630914,12.787655,tcp,147.32.84.170,34974.0,->,92.123.64.169,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.630922,12.787189,tcp,147.32.84.170,34975.0,->,92.123.64.169,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.631153,12.770914,tcp,147.32.84.170,54385.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.633235,12.769861,tcp,147.32.84.170,51060.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.633310,12.769891,tcp,147.32.84.170,51062.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.633318,12.769887,tcp,147.32.84.170,51063.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.633770,12.78452,tcp,147.32.84.170,54885.0,->,92.123.64.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.633822,12.784355,tcp,147.32.84.170,54886.0,->,92.123.64.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.634251,12.775051,tcp,147.32.84.170,37679.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.634303,12.774979,tcp,147.32.84.170,37680.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.634310,12.774967,tcp,147.32.84.170,37681.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.634425,12.774924,tcp,147.32.84.170,37683.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.687909,0.020216,udp,147.32.84.170,55939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,79,391,235.0,0.16808510638297872,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.936577,0.000352,udp,147.32.84.170,57966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,78,197,137.5,0.28363636363636363,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.937317,0.000371,udp,147.32.84.170,53625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.937429,0.000309,udp,147.32.84.170,41202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.942723,0.000243,udp,147.32.84.170,39290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.942852,0.000226,udp,147.32.84.170,35692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.943310,0.000418,udp,147.32.84.170,59718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.943447,0.000348,udp,147.32.84.170,59553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.944184,0.000379,udp,147.32.84.170,55039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.944191,0.002411,udp,147.32.84.170,36300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.944886,0.000362,udp,147.32.84.170,55066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.947225,0.000223,udp,147.32.84.170,43904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.947692,0.000447,udp,147.32.84.170,55470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,74,193,133.5,0.27715355805243447,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.948863,0.000206,udp,147.32.84.170,56659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:21.950867,0.000203,udp,147.32.84.170,34304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:22.213585,302.213257,tcp,147.32.84.170,34944.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,25,3865,1599,2266,154.6,0.41371280724450193,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:22.443590,0.000177,udp,147.32.84.170,56706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:22.444210,0.000385,udp,147.32.84.170,57786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,79,181,130.0,0.3038461538461538,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:22.481340,0.005492,tcp,147.32.84.170,39557.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1832,952,880,203.55555555555554,0.519650655021834,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:23.680683,0.107418,tcp,147.32.84.170,33408.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,12,1879,1058,821,156.58333333333334,0.5630654603512507,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:26.368546,12.132429,tcp,147.32.84.164,47765.0,->,209.85.148.147,80.0,FSRPA_FSPA,0.0,0.0,61,30293,10956,19337,496.60655737704917,0.3616677120126762,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:26.681324,0.000533,udp,147.32.84.170,53032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:27.025215,0.000223,udp,147.32.84.170,39411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:31.968556,0.000224,udp,147.32.84.138,43668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:33.134656,0.000279,udp,147.32.84.164,51504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.135241,0.000633,udp,147.32.84.164,57588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.135248,0.000768,udp,147.32.84.164,38599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.136331,0.001922,udp,147.32.84.164,36211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,75,93,84.0,0.44642857142857145,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.136341,0.038976,udp,147.32.84.164,48359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,70,128,99.0,0.35353535353535354,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.138427,0.000366,udp,147.32.84.164,38378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,75,210,142.5,0.2631578947368421,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.139835,0.002321,udp,147.32.84.164,36085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,72,198,135.0,0.26666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.151978,0.294321,udp,147.32.84.164,54148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.158638,11.245185,tcp,147.32.84.170,43763.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,14,3481,1932,1549,248.64285714285714,0.5550129273197357,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:33.159168,0.000398,udp,147.32.84.170,52969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:33.159773,0.012532,udp,147.32.84.170,39214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,80,426,253.0,0.15810276679841898,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:33.175523,0.000225,udp,147.32.84.164,47811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,70,128,99.0,0.35353535353535354,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.176067,0.00553,udp,147.32.84.164,35781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,70,138,104.0,0.33653846153846156,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.179657,0.000453,udp,147.32.84.164,45164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,86,151,118.5,0.3628691983122363,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.181913,0.00658,udp,147.32.84.164,39364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:33.220392,61.299644,tcp,147.32.84.165,2135.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:47:33.403235,0.001949,udp,147.32.84.170,53248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:33.409277,10.993182,tcp,147.32.84.170,60315.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,22,13569,2201,11368,616.7727272727273,0.16220797405851572,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:33.934309,10.469534,tcp,147.32.84.170,43770.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,11,1669,1078,591,151.72727272727272,0.6458957459556621,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.000165,0.000309,udp,147.32.84.170,52161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.001748,0.000229,udp,147.32.84.170,58564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.001925,0.000179,udp,147.32.84.170,49727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.002362,0.000294,udp,147.32.84.170,57227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,79,198,138.5,0.2851985559566787,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.238305,0.000405,udp,147.32.84.170,47058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.479006,0.002074,udp,147.32.84.170,39499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.482060,0.001925,udp,147.32.84.170,43355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,77,194,135.5,0.28413284132841327,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.790497,0.430297,tcp,147.32.84.170,59879.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2308,1198,1110,192.33333333333334,0.5190641247833622,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.793057,19.609877,tcp,147.32.84.170,51105.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.841200,0.000238,udp,147.32.84.170,47917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.842634,0.000452,udp,147.32.84.170,41897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.846032,240.078003,tcp,147.32.84.170,59177.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,28,2626,1464,1162,93.78571428571429,0.5575019040365575,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.862315,240.06131,tcp,147.32.84.170,34308.0,->,74.125.232.207,443.0,FSPA_FSPA,0.0,0.0,27,2579,1417,1162,95.51851851851852,0.5494377665761924,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.879050,0.017243,udp,147.32.84.170,60536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:34.908394,569.539795,tcp,147.32.84.170,33440.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,44,7974,5193,2781,181.22727272727272,0.6512415349887133,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:36.391150,0.0018,udp,72.184.231.136,33833.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:47:36.505503,67.907722,tcp,147.32.84.170,37724.0,->,80.239.149.16,80.0,FSPA_FSPA,0.0,0.0,17,7703,2165,5538,453.11764705882354,0.28105932753472673,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:36.681291,0.000411,udp,147.32.84.170,60484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:37.520825,0.000342,udp,147.32.84.170,37837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:38.402714,0.000324,udp,147.32.84.164,36771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,71,157,114.0,0.31140350877192985,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.403594,0.00025,udp,147.32.84.164,37345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.405688,0.345583,udp,147.32.84.164,40149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,79,142,110.5,0.3574660633484163,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.445339,0.029423,udp,147.32.84.164,49184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,74,145,109.5,0.3378995433789954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.508540,0.00027,udp,147.32.84.164,56673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.521155,0.000621,udp,147.32.84.164,39276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.552438,0.000361,udp,147.32.84.164,37381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.555505,0.000412,udp,147.32.84.164,45757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.743636,0.000402,udp,147.32.84.164,35356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:38.752085,0.121377,udp,147.32.84.164,46848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,79,210,144.5,0.27335640138408307,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:39.265487,0.247011,udp,147.32.84.164,45648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:39.512638,0.000453,udp,147.32.84.164,59342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:40.935614,15.206356,icmp,91.15.236.147,3331.0,->,147.32.84.94,,URFIL,0.0,,4,280,280,0,70.0,1.0,17,,flow=Background,Background,-1 2011-08-16 17:47:41.581189,3599.908203,udp,147.32.84.94,7103.0,<->,88.198.22.3,53012.0,CON,0.0,0.0,1023,866427,18579,847848,846.9472140762464,0.02144323757223632,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:47:42.351476,0.000368,udp,147.32.86.20,63454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:42.841988,0.00913,tcp,147.32.84.134,50489.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:47:43.229629,0.003428,tcp,147.32.84.170,39600.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2146,1266,880,238.44444444444446,0.5899347623485555,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:43.442201,0.004981,tcp,147.32.84.170,39607.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2386,1506,880,265.1111111111111,0.6311818943839062,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:43.587953,0.020721,udp,147.32.84.170,59833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,86,299,192.5,0.22337662337662337,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:43.905703,0.108631,udp,147.32.84.170,53956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:44.448121,309.973969,tcp,147.32.84.170,33332.0,->,195.113.232.90,80.0,FSPA_FSPA,0.0,0.0,22,2379,1513,866,108.13636363636364,0.6359815048339639,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:45.026150,3.472856,tcp,147.32.84.170,55403.0,->,94.245.121.177,80.0,FSPA_FSPA,0.0,0.0,8,1674,833,841,209.25,0.497610513739546,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:45.026213,0.178062,tcp,147.32.84.170,55405.0,->,94.245.121.177,80.0,FSPA_FSPA,0.0,0.0,8,1673,832,841,209.125,0.49731022115959356,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:45.088289,0.000417,udp,147.32.84.164,60748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.088913,0.000371,udp,147.32.84.164,42290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.090270,0.00066,udp,147.32.84.164,52593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,71,147,109.0,0.3256880733944954,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.093918,0.003804,udp,147.32.84.164,34032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.117731,0.000266,udp,147.32.84.164,46253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,82,146,114.0,0.35964912280701755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.135138,0.002346,udp,147.32.84.164,51645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:45.538008,0.000303,udp,147.32.84.138,48336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:45.599123,0.939838,tcp,147.32.86.20,4175.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,108,108413,1826,106587,1003.824074074074,0.01684299853338622,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:47:46.062662,1.241954,tcp,147.32.84.170,59924.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2308,1198,1110,192.33333333333334,0.5190641247833622,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:46.681327,0.000461,udp,147.32.84.170,49393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:46.683575,0.01863,tcp,147.32.84.170,36320.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:47.057032,0.005867,tcp,147.32.84.170,34508.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2403,1644,759,240.3,0.6841448189762797,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:47.193875,1.125521,tcp,147.32.84.170,59928.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2306,1196,1110,192.16666666666666,0.5186470078057241,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:47.921112,0.006488,tcp,147.32.84.170,34511.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2404,1645,759,240.4,0.6842762063227953,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:48.221865,1.518326,tcp,147.32.84.170,59931.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2307,1197,1110,192.25,0.5188556566970091,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:48.749885,17.128847,tcp,147.32.84.164,58230.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:48.749891,17.128567,tcp,147.32.84.164,58231.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:48.954485,6.919526,tcp,147.32.84.164,53917.0,->,178.77.214.10,80.0,FSPA_FSPA,0.0,0.0,17,6580,960,5620,387.05882352941177,0.1458966565349544,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.188916,0.002415,udp,147.32.84.164,35743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,422,72,350,211.0,0.17061611374407584,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.190822,0.002255,udp,147.32.84.164,54931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,423,72,351,211.5,0.1702127659574468,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.191766,46.685223,tcp,147.32.84.164,32942.0,->,80.239.149.27,80.0,FSPA_FSRPA,0.0,0.0,12,2849,830,2019,237.41666666666666,0.2913302913302913,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.194368,0.002387,udp,147.32.84.164,60346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,422,72,350,211.0,0.17061611374407584,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.196290,46.681019,tcp,147.32.84.164,39941.0,->,80.239.149.18,80.0,FSPA_FSRPA,0.0,0.0,13,4999,837,4162,384.53846153846155,0.16743348669733946,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.197312,306.694061,tcp,147.32.84.164,32948.0,->,80.239.149.27,80.0,FSPA_FSPA,0.0,0.0,30,12021,1363,10658,400.7,0.11338490974128608,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.239730,0.019832,udp,147.32.84.164,50776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,66,126,96.0,0.34375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.261410,0.025115,udp,147.32.84.164,40510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,83,249,166.0,0.25,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.287390,0.182253,udp,147.32.84.164,52979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,72,181,126.5,0.2845849802371542,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.468091,0.000287,udp,147.32.84.164,59010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,85,154,119.5,0.35564853556485354,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.469994,0.045788,udp,147.32.84.164,42393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,72,207,139.5,0.25806451612903225,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:49.646184,14.762998,tcp,147.32.84.170,59935.0,->,62.168.44.117,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:50.063074,0.008249,udp,147.32.84.164,41411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:50.071637,0.008319,udp,147.32.84.164,41839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,472,77,395,236.0,0.163135593220339,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:50.720114,347.271332,udp,86.61.23.115,58960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,3092,2399,693,618.4,0.7758732212160414,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:47:51.863400,0.011213,tcp,147.32.84.134,50490.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:47:51.973620,0.004723,tcp,147.32.84.170,39639.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2145,1265,880,238.33333333333334,0.5897435897435898,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:52.238798,240.167465,tcp,147.32.84.164,43150.0,->,74.125.232.198,443.0,FSPA_FSPA,0.0,0.0,36,5164,3187,1977,143.44444444444446,0.617157242447715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:52.888102,0.000141,udp,147.32.84.138,57931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:53.784193,0.006738,tcp,147.32.84.164,51679.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,11,3333,841,2492,303.0,0.25232523252325234,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.784293,0.006844,tcp,147.32.84.164,51681.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,11,3897,866,3031,354.27272727272725,0.2222222222222222,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.789192,0.004425,tcp,147.32.84.164,51684.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,20,13229,1088,12141,661.45,0.08224355582432534,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.790275,0.004455,tcp,147.32.84.164,51685.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,14,5947,963,4984,424.7857142857143,0.16193038506810156,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.790447,0.029928,tcp,147.32.84.164,51686.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,203,206339,4923,201416,1016.448275862069,0.023858795477345533,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.792772,0.004667,tcp,147.32.84.164,51687.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,19,12231,1051,11180,643.7368421052631,0.08592919630447224,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:53.793658,0.005629,tcp,147.32.84.164,51688.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,2587,822,1765,258.7,0.3177425589485891,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.050041,0.012753,tcp,147.32.84.164,51692.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,1589,832,757,158.9,0.5235997482693517,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.061641,0.204004,tcp,147.32.84.164,51696.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,12,4343,870,3473,361.9166666666667,0.20032235781717705,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.172015,0.150837,tcp,147.32.84.164,51701.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,14,9804,811,8993,700.2857142857143,0.08272133822929417,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.172022,0.193604,tcp,147.32.84.164,51702.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,25,18450,1189,17261,738.0,0.06444444444444444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.192340,0.507743,tcp,147.32.84.164,40919.0,->,75.101.154.43,80.0,FSPA_FSA,0.0,0.0,10,2966,775,2191,296.6,0.2612946729602158,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.199758,0.14813,tcp,147.32.84.164,51704.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,12,4698,875,3823,391.5,0.18624946785866325,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.223727,0.000196,udp,147.32.84.164,43893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.224090,0.017434,udp,147.32.84.164,39413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.243385,0.000365,udp,147.32.84.164,60210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,73,124,98.5,0.37055837563451777,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.249399,0.000412,udp,147.32.84.164,43101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,74,167,120.5,0.3070539419087137,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.270361,0.003491,tcp,147.32.84.164,51710.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,1730,1069,661,173.0,0.6179190751445087,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.276473,0.003335,tcp,147.32.84.164,51713.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,1731,1071,660,173.1,0.6187175043327556,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.276681,0.003649,tcp,147.32.84.164,51714.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,1835,1070,765,183.5,0.5831062670299727,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.299445,0.002104,udp,147.32.84.164,34494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.301563,0.001884,udp,147.32.84.164,37652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,74,214,144.0,0.2569444444444444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.646937,0.003761,tcp,147.32.84.164,51720.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,10,2417,838,1579,241.7,0.34671079851055026,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.653357,0.001815,udp,147.32.84.164,53506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.809820,3077.14209,udp,96.43.9.230,39387.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:47:54.858083,0.000195,udp,147.32.84.164,57458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.858603,0.017236,udp,147.32.84.164,49251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,77,177,127.0,0.3031496062992126,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:54.989216,0.110515,udp,147.32.84.164,51950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,84,152,118.0,0.3559322033898305,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:47:56.116672,0.004101,tcp,147.32.84.170,39642.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2146,1266,880,238.44444444444446,0.5899347623485555,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:56.680100,0.000323,udp,147.32.84.170,37671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:57.225370,17.185642,tcp,147.32.84.170,35034.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:57.225386,17.185631,tcp,147.32.84.170,35035.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:57.260960,17.150043,tcp,147.32.84.170,37779.0,->,80.239.149.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:57.261133,17.14345,tcp,147.32.84.170,51171.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:58.494817,0.000585,udp,147.32.84.138,60421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:47:58.969606,0.004838,tcp,147.32.84.170,34538.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2525,1720,805,252.5,0.6811881188118812,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:47:59.846618,0.003168,udp,199.101.178.83,47900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:00.205788,24.000933,udp,147.32.84.164,50813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:00.886277,0.000288,udp,147.32.84.134,39015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:48:01.591600,10.169947,udp,147.32.84.94,7103.0,->,68.228.39.25,7261.0,INT,0.0,,3,252,252,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:48:01.839352,0.000267,udp,147.32.85.34,51940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:01.892748,0.000288,udp,147.32.85.34,60051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:03.026944,0.000241,udp,147.32.84.164,60913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.027320,0.00026,udp,147.32.84.164,54039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.250592,0.000223,udp,147.32.84.164,48814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.250604,0.000217,udp,147.32.84.164,59242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.251067,0.000378,udp,147.32.84.164,34496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.251725,0.000386,udp,147.32.84.164,35718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:03.500772,0.003861,udp,147.32.84.164,53316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,77,144,110.5,0.34841628959276016,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:06.383630,0.000386,udp,147.32.85.7,58829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,422,72,350,211.0,0.17061611374407584,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:08.136288,1771.13623,udp,96.23.116.58,33247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1259,269,990,314.75,0.2136616362192216,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:10.113335,0.159547,tcp,147.32.84.164,36129.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,15,7431,1007,6424,495.4,0.13551338985331718,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.113451,0.230577,tcp,147.32.84.164,36130.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1846,854,992,184.6,0.4626218851570964,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.340489,0.005145,tcp,147.32.84.164,36136.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,2612,854,1758,261.2,0.32695252679938747,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.341333,0.00031,udp,147.32.84.164,37081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,81,157,119.0,0.3403361344537815,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.341759,0.00057,udp,147.32.84.164,39698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.359122,0.000267,udp,147.32.84.164,37727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,81,126,103.5,0.391304347826087,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.359779,0.002799,udp,147.32.84.164,47204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.363015,2.014476,tcp,147.32.84.164,36138.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,2281,745,1536,228.1,0.32661113546690046,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.456357,0.007275,tcp,147.32.84.164,36140.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,19,10612,1107,9505,558.5263157894736,0.10431586882774217,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.484278,0.024882,udp,147.32.84.164,57095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,76,142,109.0,0.3486238532110092,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.495232,0.004793,tcp,147.32.84.164,36148.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1517,851,666,151.7,0.5609756097560976,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.499453,0.005587,tcp,147.32.84.164,36150.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,13,4437,915,3522,341.3076923076923,0.20622041920216364,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.509366,0.000232,udp,147.32.84.164,44644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,76,142,109.0,0.3486238532110092,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.509950,0.002578,udp,147.32.84.164,55395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,76,159,117.5,0.32340425531914896,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.511043,0.005449,tcp,147.32.84.164,36156.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,2784,846,1938,253.0909090909091,0.30387931034482757,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.515343,0.004245,tcp,147.32.84.164,36157.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,3421,847,2574,311.0,0.24758842443729903,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.518665,0.004621,tcp,147.32.84.164,36159.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1494,848,646,149.4,0.5676037483266398,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.524771,0.004179,tcp,147.32.84.164,36162.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,2237,843,1394,223.7,0.3768439874832365,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.525948,0.005626,tcp,147.32.84.164,36164.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,2775,858,1917,252.27272727272728,0.3091891891891892,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.527554,0.010844,udp,147.32.84.164,56891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.544234,0.021184,udp,147.32.84.164,49960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.566265,0.002174,udp,147.32.84.164,60887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,76,174,125.0,0.304,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.681766,0.001925,udp,147.32.84.164,49915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.964615,0.007435,tcp,147.32.84.164,36170.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1563,848,715,156.3,0.5425463851567498,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.975004,0.00033,udp,147.32.84.164,60300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,84,161,122.5,0.34285714285714286,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:10.983347,0.000228,udp,147.32.84.164,41179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:11.198443,1.323011,tcp,147.32.84.164,36171.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,2143,736,1407,214.3,0.34344377041530566,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.522662,0.092292,tcp,147.32.84.164,36173.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,3489,872,2617,317.1818181818182,0.24992834623101176,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.522908,0.127224,tcp,147.32.84.164,36175.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,3727,872,2855,338.8181818181818,0.23396833914676685,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.540679,0.11996,tcp,147.32.84.164,36177.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,11,3078,905,2173,279.8181818181818,0.2940220922677063,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.576374,0.004306,tcp,147.32.84.164,36179.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1520,850,670,152.0,0.5592105263157895,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.577185,0.000225,udp,147.32.84.164,60072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.577769,0.094159,tcp,147.32.84.164,56051.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,11,1770,1024,746,160.9090909090909,0.5785310734463277,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.641727,0.006648,udp,147.32.84.164,55074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,76,231,153.5,0.247557003257329,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.648999,0.000352,udp,147.32.84.164,40499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.651064,0.041596,udp,147.32.84.164,35838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,82,151,116.5,0.351931330472103,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.693057,0.002672,udp,147.32.84.164,45651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,82,237,159.5,0.25705329153605017,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:12.733420,0.007018,tcp,147.32.84.164,36181.0,->,81.91.82.42,80.0,FSPA_FSPA,0.0,0.0,10,1626,1037,589,162.6,0.6377613776137762,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:13.167699,2600.874756,udp,95.42.52.180,59471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1366,152,1214,341.5,0.11127379209370425,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:13.348227,0.296956,tcp,147.32.84.170,40685.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:14.083775,0.000561,udp,147.32.84.170,60319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:14.085731,240.832626,tcp,147.32.84.170,58647.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:14.085840,240.832626,tcp,147.32.84.170,58650.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:14.085972,240.833344,tcp,147.32.84.170,58651.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:16.154102,3279.86084,udp,188.54.111.15,7782.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,938,518,420,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:17.811395,928.781494,udp,147.32.84.94,7103.0,<->,111.68.37.42,7497.0,CON,0.0,0.0,128,109348,108214,1134,854.28125,0.989629439953177,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:18.929704,0.000245,udp,147.32.84.134,42123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:48:20.262300,0.000211,udp,147.32.84.138,42587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:21.013285,0.000261,udp,147.32.84.138,60062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:24.206793,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,46810.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:25.070429,3014.065674,udp,82.226.248.147,26798.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:26.681615,0.000391,udp,147.32.84.170,48920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:26.682584,0.000373,udp,147.32.84.170,40227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:27.448258,18.430338,tcp,147.32.84.164,52976.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.448285,18.433168,tcp,147.32.84.164,58356.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.448289,18.43099,tcp,147.32.84.164,58357.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.448399,18.430887,tcp,147.32.84.164,58360.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.448487,240.037521,tcp,147.32.84.164,38565.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,26,2494,1398,1096,95.92307692307692,0.5605453087409783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.448521,240.03772,tcp,147.32.84.164,38567.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,26,2494,1398,1096,95.92307692307692,0.5605453087409783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:27.950910,0.000297,udp,147.32.84.134,41109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:48:28.035826,0.268082,tcp,147.32.84.170,39847.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:28.096892,0.014166,udp,147.32.84.164,38828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:28.096907,0.000378,udp,147.32.84.164,35007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:28.098303,0.000162,udp,147.32.84.164,33792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:28.109852,0.00288,udp,147.32.84.164,37588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,71,239,155.0,0.22903225806451613,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:28.117047,0.000259,udp,147.32.84.164,47924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,80,187,133.5,0.299625468164794,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:30.449716,0.496908,tcp,147.32.84.164,34829.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,15,9599,888,8711,639.9333333333333,0.09250963642046046,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:30.954574,0.000389,udp,147.32.84.164,48153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:30.955045,0.000325,udp,147.32.84.164,56724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:30.955823,0.112061,tcp,147.32.84.164,60099.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1408,698,710,140.8,0.49573863636363635,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:32.346505,2.482891,tcp,147.32.84.164,55510.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,11,3244,774,2470,294.90909090909093,0.23859432799013564,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:32.520104,0.002609,udp,147.32.84.164,38838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,70,216,143.0,0.24475524475524477,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:34.078044,61.308521,tcp,147.32.84.165,2136.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:48:34.176239,2372.514404,udp,79.218.125.97,14195.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1299,897,402,129.9,0.6905311778290993,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:34.236912,19.971249,udp,147.32.84.164,41245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:36.683144,0.000348,udp,147.32.84.170,58947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:36.965735,0.000213,udp,147.32.84.134,60337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:48:37.106046,0.035302,tcp,147.32.84.164,34859.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,10,2140,965,1175,214.0,0.45093457943925236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:39.053146,0.000299,udp,147.32.84.138,49712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:40.232062,13.976322,udp,147.32.84.164,48732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:44.246013,9.96231,udp,147.32.84.164,34843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:46.212865,7.995462,udp,147.32.84.164,57539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:46.683005,0.017942,tcp,147.32.84.170,36234.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:46.897940,2609.813721,udp,147.32.84.229,13363.0,<->,82.231.235.118,9300.0,CON,0.0,0.0,4,380,137,243,95.0,0.3605263157894737,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:47.851495,0.000339,udp,147.32.84.134,36836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:48:51.167870,0.000126,udp,147.32.85.25,55012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:54.208461,30.001329,udp,147.32.84.164,45476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:48:56.137273,0.00017,udp,147.32.84.138,34943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:48:56.682303,0.000324,udp,147.32.84.170,51509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:48:56.954076,0.000556,udp,77.127.249.136,15930.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:48:59.027807,0.316627,tcp,147.32.84.170,39851.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:02.221040,0.000258,udp,147.32.84.138,47051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:02.225951,0.000219,udp,147.32.84.138,56681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:04.218699,19.991312,udp,147.32.84.164,41050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:06.327022,0.000235,udp,147.32.84.134,49111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:08.013913,0.000256,udp,147.32.84.59,33135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:09.012617,0.039531,udp,147.32.84.229,13363.0,<->,85.214.202.219,15467.0,CON,0.0,0.0,2,578,518,60,289.0,0.8961937716262975,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:10.207064,0.000245,udp,147.32.84.138,56761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:14.221996,9.98814,udp,147.32.84.164,35955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:15.820068,0.006957,tcp,147.32.84.134,55034.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:16.328280,0.153316,udp,147.32.86.208,11289.0,<->,96.27.17.218,36138.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:16.682611,0.018226,tcp,147.32.84.170,36373.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:18.384400,1420.773071,udp,147.32.86.96,57746.0,<->,82.208.56.89,123.0,CON,0.0,0.0,91,8190,4140,4050,90.0,0.5054945054945055,17,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 17:49:19.743210,0.029324,udp,147.32.84.170,44679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,97,186,141.5,0.34275618374558303,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:21.692479,0.000239,udp,147.32.84.138,52855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:23.137388,0.421919,udp,147.32.85.84,13716.0,<->,122.121.8.232,19385.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:24.209786,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,42150.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:24.209790,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,42161.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:24.836359,0.00727,tcp,147.32.84.134,55036.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:26.355151,0.000332,udp,147.32.86.20,63468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:26.681930,0.018499,tcp,147.32.84.170,46562.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:30.023642,0.000351,udp,147.32.84.170,34552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:31.046127,0.000206,udp,147.32.84.138,33885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:33.851672,0.000346,udp,147.32.84.134,44086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:33.853734,0.008698,tcp,147.32.84.134,55037.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:34.956201,61.298801,tcp,147.32.84.165,2137.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:49:37.377432,0.000337,udp,147.32.84.138,36569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:38.034282,0.051991,tcp,147.32.84.59,50432.0,->,91.198.174.232,80.0,FSPA_FSPA,0.0,0.0,11,1948,863,1085,177.0909090909091,0.4430184804928131,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:49:40.032526,0.000611,udp,46.55.79.73,1029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:41.608667,3032.668701,udp,110.0.28.181,17401.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,28,4035,916,3119,144.10714285714286,0.22701363073110284,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:42.873666,0.000377,udp,147.32.84.134,47886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:43.196717,2452.416504,udp,89.15.252.102,40248.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:49:43.305380,0.000323,udp,147.32.84.164,42303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:43.305817,0.000142,udp,147.32.84.164,33968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:43.306119,0.00032,udp,147.32.84.164,55277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,71,217,144.0,0.2465277777777778,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:44.221650,19.995087,udp,147.32.84.164,40111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:49:46.681334,0.000387,udp,147.32.84.170,43565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:46.682419,0.000371,udp,147.32.84.170,51063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:49.104299,0.000368,udp,147.32.86.20,57946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:50.011024,0.000208,udp,147.32.84.138,49501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:49:51.895731,0.000325,udp,147.32.84.134,37414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:49:52.757459,0.000318,udp,147.32.84.170,53485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.814508,0.000175,udp,147.32.84.170,46740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.944775,78.473099,tcp,147.32.84.170,43884.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,34,21509,1810,19699,632.6176470588235,0.08415082058673114,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.945745,0.000243,udp,147.32.84.170,38716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.946006,18.469721,tcp,147.32.84.170,43888.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.946172,18.468809,tcp,147.32.84.170,43889.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.946176,18.469555,tcp,147.32.84.170,43890.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.946274,0.000666,udp,147.32.84.170,37771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.947000,0.021091,udp,147.32.84.170,44691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.947069,0.00034,udp,147.32.84.170,59525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.947246,0.000351,udp,147.32.84.170,41496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.947808,0.002712,udp,147.32.84.170,56081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,481,74,407,240.5,0.15384615384615385,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.947815,78.469994,tcp,147.32.84.170,43893.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,75,61329,3406,57923,817.72,0.05553653247240294,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.948815,18.466761,tcp,147.32.84.170,43902.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,14,3431,1211,2220,245.07142857142858,0.35295832118915765,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.949166,0.000478,udp,147.32.84.170,36236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.968495,0.00193,udp,147.32.84.170,38206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,80,429,254.5,0.15717092337917485,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.971367,18.541866,tcp,147.32.84.170,44496.0,->,69.63.190.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:55.980627,18.4331,tcp,147.32.84.170,54573.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.121897,0.02484,udp,147.32.84.170,60753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.134772,0.000465,udp,147.32.84.170,60701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.144230,0.002073,udp,147.32.84.170,60485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.144897,0.002351,udp,147.32.84.170,44271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.147043,18.273937,tcp,147.32.84.170,58306.0,->,80.239.149.32,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.147099,18.273853,tcp,147.32.84.170,58307.0,->,80.239.149.32,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.147884,308.281494,tcp,147.32.84.170,45664.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,23,3998,1665,2333,173.82608695652175,0.41645822911455727,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.147938,18.266768,tcp,147.32.84.170,45665.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.147945,18.267132,tcp,147.32.84.170,45666.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.148036,18.266743,tcp,147.32.84.170,45667.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.182439,0.045231,tcp,147.32.84.170,34540.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,11,3591,1441,2150,326.45454545454544,0.4012809802283486,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.184176,0.000177,udp,147.32.84.170,54946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.184766,0.000217,udp,147.32.84.170,34736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.185755,0.000212,udp,147.32.84.170,56719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.185814,0.000268,udp,147.32.84.170,48569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.188502,0.000273,udp,147.32.84.170,58349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,70,189,129.5,0.2702702702702703,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.193248,0.000234,udp,147.32.84.170,46319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.193712,0.000242,udp,147.32.84.170,34562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.194423,0.000236,udp,147.32.84.170,53078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.657206,0.000206,udp,147.32.84.170,46460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:56.767318,0.000177,udp,147.32.84.170,53383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:57.110417,11.234901,tcp,147.32.84.170,55524.0,->,94.245.121.177,80.0,SA_SRA,0.0,0.0,4,270,140,130,67.5,0.5185185185185185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:49:57.296012,0.000277,udp,147.32.84.170,52082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:00.118106,2459.072998,udp,147.32.84.94,7103.0,->,94.219.86.88,5053.0,INT,0.0,,8,672,672,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:50:00.179744,0.039205,tcp,147.32.84.164,34861.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,10,1724,966,758,172.4,0.5603248259860789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:00.914283,0.000279,udp,147.32.84.134,45110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:50:01.038314,0.224128,tcp,147.32.84.170,39915.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:01.869881,0.000222,udp,147.32.85.34,54183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:02.209564,0.000403,udp,147.32.84.130,61007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,77,235,156.0,0.2467948717948718,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:02.345189,12.070515,tcp,147.32.84.170,60490.0,->,77.75.73.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:04.295452,0.039372,tcp,147.32.84.164,34865.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,10,2038,964,1074,203.8,0.4730127576054956,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:04.295584,0.04651,tcp,147.32.84.164,34867.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,10,2026,964,1062,202.6,0.47581441263573543,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:06.683563,0.017644,tcp,147.32.84.170,47408.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:07.319527,0.000262,udp,147.32.84.138,38313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:09.800705,0.00034,udp,147.32.84.164,41367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:09.801325,0.000317,udp,147.32.84.164,46240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:12.123324,0.0,icmp,147.32.86.92,8.0,->,213.29.198.144,26700.0,ECO,0.0,,1,98,98,0,98.0,1.0,17,0,flow=Background,Background,-1 2011-08-16 17:50:12.681721,0.000379,udp,147.32.84.164,33372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:12.682397,0.000351,udp,147.32.84.164,48900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:13.847434,0.003635,tcp,147.32.84.170,43006.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2154,1274,880,239.33333333333334,0.5914577530176416,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:15.131122,69.396912,udp,147.32.84.229,13363.0,<->,110.133.234.90,2483.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:16.587444,0.00021,udp,147.32.84.138,40917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:16.681999,0.000237,udp,147.32.84.170,42565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:16.682812,0.000439,udp,147.32.84.170,41935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:18.335962,0.000321,udp,147.32.84.164,52218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.336624,0.000259,udp,147.32.84.164,39074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.336714,17.650949,tcp,147.32.84.164,33715.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,15,3083,1432,1651,205.53333333333333,0.4644826467726241,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.337262,0.119363,tcp,147.32.84.164,60141.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1405,696,709,140.5,0.49537366548042705,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.410169,7.46657,tcp,147.32.84.164,35377.0,->,146.102.17.54,80.0,FSPA_FSPA,0.0,0.0,51,43663,2329,41334,856.1372549019608,0.05334035682385544,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.597866,0.000445,udp,147.32.84.164,37963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,73,239,156.0,0.23397435897435898,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.598544,0.00034,udp,147.32.84.164,44252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.632532,0.38797,tcp,147.32.84.164,36826.0,->,75.101.162.204,80.0,FSPA_FSA,0.0,0.0,9,3087,772,2315,343.0,0.25008098477486235,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:18.955636,0.000234,udp,147.32.84.134,56139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:50:21.603994,0.206548,tcp,147.32.86.20,4290.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31460,1089,30371,786.5,0.03461538461538462,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:50:26.307276,0.013919,tcp,147.32.85.74,36727.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:50:26.734669,0.534898,udp,27.2.209.211,37624.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,350,140,210,87.5,0.4,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:27.977533,0.00023,udp,147.32.84.134,49038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:50:31.948951,0.000636,udp,208.54.39.204,10897.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:32.032167,0.228802,tcp,147.32.84.170,39928.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:35.824740,61.296974,tcp,147.32.84.165,2138.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:50:36.684177,0.017988,tcp,147.32.84.170,46635.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:36.996199,0.01188,tcp,147.32.84.134,55046.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:50:37.133849,0.000682,udp,86.135.164.25,28829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:37.220247,3105.927002,udp,114.37.6.247,24848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:37.419593,0.000301,udp,147.32.84.138,34755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:37.443708,2700.843506,udp,81.84.240.38,47041.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,759,550,209,126.5,0.7246376811594203,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:40.371470,0.000629,udp,72.235.254.207,50514.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:40.494344,0.259224,tcp,147.32.84.59,35364.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,15,3235,2240,995,215.66666666666666,0.6924265842349304,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:50:40.525633,64.909943,tcp,147.32.84.59,50476.0,->,207.171.166.37,80.0,SRPA_SPA,0.0,0.0,11,5548,1575,3973,504.3636363636364,0.28388608507570295,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:50:41.773026,0.000857,udp,193.227.184.1,44124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:43.761411,12.125909,tcp,147.32.84.164,46480.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.761440,0.009738,udp,147.32.84.164,34776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.772952,12.112852,tcp,147.32.84.164,48172.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.907628,0.000233,udp,147.32.84.164,52859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.908643,0.000401,udp,147.32.84.164,51295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.909326,0.000303,udp,147.32.84.164,55980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.910136,0.000327,udp,147.32.84.164,44596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.911704,0.000387,udp,147.32.84.164,49767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:43.911711,0.000504,udp,147.32.84.164,49406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.094089,0.008009,udp,147.32.84.164,45494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,69,134,101.5,0.3399014778325123,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.094139,0.000393,udp,147.32.84.164,37402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,78,172,125.0,0.312,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.094653,0.000439,udp,147.32.84.164,47588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,78,190,134.0,0.291044776119403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.095967,0.000496,udp,147.32.84.164,44261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,78,239,158.5,0.24605678233438485,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.110348,0.000257,udp,147.32.84.164,36197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.110722,0.000199,udp,147.32.84.164,52521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.112973,0.012487,udp,147.32.84.164,47175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,79,253,166.0,0.23795180722891565,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.117170,0.005409,udp,147.32.84.164,42765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,80,147,113.5,0.3524229074889868,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.122852,0.00209,udp,147.32.84.164,38160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,80,179,129.5,0.3088803088803089,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:44.356828,0.000366,udp,147.32.86.20,59381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:44.524780,14.963117,tcp,159.148.202.70,3579.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,12,795,458,337,66.25,0.5761006289308176,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:50:44.875328,0.000257,udp,147.32.85.25,48833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:50:44.901646,0.000346,udp,147.32.84.164,42357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:46.680097,0.000499,udp,147.32.84.170,42222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:46.681066,0.000398,udp,147.32.84.170,35209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:52.148678,54.929703,tcp,147.32.86.151,2984.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,23,4945,3600,1345,215.0,0.7280080889787665,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:50:55.061785,0.000333,udp,147.32.84.134,44866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:50:55.882542,19.998257,tcp,147.32.84.164,52389.0,->,81.0.237.218,80.0,FSPA_FSPA,0.0,0.0,187,177837,5841,171996,951.0,0.03284468361477083,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:56.354152,3055.060059,udp,41.226.194.196,9531.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1392,1020,372,116.0,0.7327586206896551,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:56.683622,0.018216,tcp,147.32.84.170,54186.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:50:56.793158,0.389698,udp,147.32.84.229,13363.0,<->,125.224.3.112,10921.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:50:56.836754,0.128352,tcp,147.32.84.164,37131.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1359,696,663,135.9,0.5121412803532008,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.020465,18.860132,tcp,147.32.84.164,52394.0,->,81.0.237.218,80.0,FSPA_FSPA,0.0,0.0,17,5743,1483,4260,337.8235294117647,0.2582274072784259,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.020623,18.86018,tcp,147.32.84.164,52396.0,->,81.0.237.218,80.0,FSPA_FSPA,0.0,0.0,31,18896,2933,15963,609.5483870967741,0.15521803556308214,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.020699,18.860094,tcp,147.32.84.164,52397.0,->,81.0.237.218,80.0,FSPA_FSPA,0.0,0.0,106,93177,4022,89155,879.0283018867924,0.04316515878382004,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.226398,0.02911,udp,147.32.84.164,45183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,76,129,102.5,0.37073170731707317,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.238190,0.000388,udp,147.32.84.164,55966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,76,196,136.0,0.27941176470588236,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.268819,8.620224,tcp,147.32.84.164,40995.0,->,212.57.32.49,80.0,FSPA_FSPA,0.0,0.0,28,14426,2181,12245,515.2142857142857,0.1511853597670872,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.293340,8.602269,tcp,147.32.84.164,40432.0,->,188.165.209.26,80.0,FSPA_FSPA,0.0,0.0,11,1936,813,1123,176.0,0.4199380165289256,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.327197,8.567841,tcp,147.32.84.164,46386.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,11,1572,891,681,142.9090909090909,0.566793893129771,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.327243,8.567803,tcp,147.32.84.164,46389.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,13,3512,951,2561,270.15384615384613,0.2707858769931663,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.327247,8.567874,tcp,147.32.84.164,46390.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,16,4012,1441,2571,250.75,0.35917248255234296,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.333328,0.000576,udp,147.32.84.164,53463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.334034,0.000292,udp,147.32.84.164,49774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,71,217,144.0,0.2465277777777778,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.334864,0.000348,udp,147.32.84.164,35890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,73,138,105.5,0.3459715639810427,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.348795,0.000393,udp,147.32.84.164,48083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.355054,0.010211,udp,147.32.84.164,44482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,79,157,118.0,0.3347457627118644,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.365595,0.00812,udp,147.32.84.164,33802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.707382,0.010022,udp,147.32.84.164,45668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,76,249,162.5,0.23384615384615384,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:57.720390,0.006853,udp,147.32.84.164,43571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,75,135,105.0,0.35714285714285715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:50:59.313157,0.000382,udp,147.32.86.17,25955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,493,91,402,246.5,0.1845841784989858,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:51:01.493527,4.41312,udp,41.232.132.1,48443.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1062,535,527,265.5,0.5037664783427496,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:01.822934,2428.25708,udp,200.107.151.141,39075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:02.745156,749.949585,udp,89.79.58.117,41361.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,463,339,124,115.75,0.7321814254859611,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:02.907325,0.000608,udp,77.76.144.110,58361.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:05.569770,0.000541,udp,147.32.84.164,34734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:05.570793,10.317325,tcp,147.32.84.164,52850.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:05.571418,0.000458,udp,147.32.84.164,35092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:05.936429,0.000311,udp,147.32.85.25,52205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:51:06.255248,0.0,udp,192.168.88.138,58579.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:51:06.265070,0.0,udp,192.168.88.138,54285.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:51:06.727867,0.000407,udp,147.32.84.164,37401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:13.074787,0.151267,tcp,147.32.84.164,50957.0,->,149.5.128.169,80.0,FSPA_FSPA,0.0,0.0,12,2031,802,1229,169.25,0.3948793697685869,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:13.101083,0.000259,udp,147.32.84.134,60390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:13.101940,0.087062,tcp,147.32.84.134,55053.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:15.123074,240.060898,tcp,147.32.84.134,47443.0,->,74.125.232.207,80.0,FSPA_FSPA,0.0,0.0,22,3795,2098,1697,172.5,0.552832674571805,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:15.158810,0.000324,udp,147.32.84.134,59767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:15.170121,250.030579,tcp,147.32.84.134,50786.0,->,209.85.149.138,80.0,FSPA_FSPA,0.0,0.0,29,9859,5075,4784,339.9655172413793,0.5147580890556852,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:16.482802,0.025978,tcp,147.32.84.164,53180.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,17,5442,1487,3955,320.11764705882354,0.27324513046674015,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:16.482879,0.049354,tcp,147.32.84.164,53181.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,18,7428,1569,5859,412.6666666666667,0.21122778675282713,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:16.668589,0.072236,tcp,147.32.84.164,53187.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,16,2720,1487,1233,170.0,0.5466911764705882,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:16.668673,0.064881,tcp,147.32.84.164,53188.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,16,2736,1487,1249,171.0,0.5434941520467836,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:16.669053,0.000323,udp,147.32.84.164,37776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:16.681880,0.000364,udp,147.32.84.170,41573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:51:16.708451,0.041909,tcp,147.32.84.164,53190.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,16,2720,1487,1233,170.0,0.5466911764705882,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:17.312064,44.998959,tcp,66.249.67.105,53939.0,->,147.32.86.52,80.0,S_,0.0,,5,370,370,0,74.0,1.0,17,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:51:22.196575,0.000375,udp,147.32.84.134,35289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:26.681896,0.017825,tcp,147.32.84.170,38128.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:51:27.125784,0.129424,udp,147.32.84.229,13363.0,<->,24.185.189.249,12020.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:31.213083,0.000229,udp,147.32.84.134,40475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:31.213862,0.000227,udp,147.32.84.134,44633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:51:32.490468,29.614592,udp,84.15.191.201,53650.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:33.775775,0.172295,udp,147.32.84.229,13363.0,<->,70.114.175.51,16634.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:35.284431,0.000222,udp,147.32.85.6,57769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:51:35.302929,0.000312,udp,147.32.84.138,59933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:51:36.680567,0.000479,udp,147.32.84.170,45383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:51:36.691204,61.298237,tcp,147.32.84.165,2139.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:51:37.529241,0.107614,tcp,147.32.84.164,43877.0,->,77.93.216.163,80.0,SRPA_SPA,0.0,0.0,126,143555,2475,141080,1139.3253968253969,0.017240778795583573,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:37.565628,0.000337,udp,147.32.84.164,40481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:37.566183,0.000222,udp,147.32.84.164,35409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:37.567240,0.558258,tcp,147.32.84.164,44637.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,10,1642,848,794,164.2,0.5164433617539586,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:37.602586,0.113439,tcp,147.32.84.164,37189.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1380,706,674,138.0,0.5115942028985507,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:37.679388,0.128712,tcp,147.32.84.164,37190.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1380,706,674,138.0,0.5115942028985507,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:38.018200,0.003582,tcp,147.32.84.164,43886.0,->,77.93.216.163,80.0,FSPA_FSPA,0.0,0.0,10,1480,676,804,148.0,0.45675675675675675,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:51:38.453216,0.000186,udp,147.32.84.138,42571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:51:42.891509,1345.279785,udp,87.226.49.94,13772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,1232,952,280,136.88888888888889,0.7727272727272727,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:51:46.681220,0.00044,udp,147.32.84.170,55664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:51:47.830824,0.065445,tcp,147.32.84.59,5141.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,11,2700,1902,798,245.45454545454547,0.7044444444444444,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:51:54.261493,62.390373,tcp,147.32.86.17,5658.0,->,74.125.232.203,80.0,SRPA_SPA,0.0,0.0,12,6242,860,5382,520.1666666666666,0.13777635373277797,17,1,flow=Background-google-analytics12,Background,-1 2011-08-16 17:51:56.681307,0.000288,udp,147.32.84.170,48352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.323519,0.000165,udp,147.32.84.170,51356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.555536,6.099183,tcp,147.32.84.170,52419.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2293,1488,805,229.3,0.6489315307457479,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.555938,0.000252,udp,147.32.84.170,39135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.556387,0.000398,udp,147.32.84.170,45080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.556391,0.000535,udp,147.32.84.170,53104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,73,174,123.5,0.29554655870445345,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.557549,0.000332,udp,147.32.84.170,45028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.557556,0.000435,udp,147.32.84.170,50759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,72,173,122.5,0.2938775510204082,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.558304,13.862402,tcp,147.32.84.170,53569.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.558708,13.862608,tcp,147.32.84.170,53575.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.559003,13.861291,tcp,147.32.84.170,53580.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.560457,6.062973,tcp,147.32.84.170,43006.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.579042,13.84762,tcp,147.32.84.170,40753.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.579096,13.847577,tcp,147.32.84.170,40754.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.581784,13.844485,tcp,147.32.84.170,56963.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.581847,13.844533,tcp,147.32.84.170,56964.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.581903,13.84447,tcp,147.32.84.170,56965.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.581915,13.844628,tcp,147.32.84.170,56966.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.742768,0.020167,udp,147.32.84.170,59630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.763415,0.00216,udp,147.32.84.170,58706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,80,399,239.5,0.16701461377870563,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.779836,0.000173,udp,147.32.84.170,51053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.781398,13.638509,tcp,147.32.84.170,55430.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,21,13085,2135,10950,623.0952380952381,0.16316392816201758,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.794882,13.62501,tcp,147.32.84.170,55431.0,->,77.75.73.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.809927,13.616206,tcp,147.32.84.170,45328.0,->,80.239.149.26,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:00.810034,13.616074,tcp,147.32.84.170,45330.0,->,80.239.149.26,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.002798,0.000308,udp,147.32.84.170,39815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.003496,0.000187,udp,147.32.84.170,51572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.003574,0.000273,udp,147.32.84.170,40561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,78,197,137.5,0.28363636363636363,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.006634,0.000384,udp,147.32.84.170,38941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.007604,0.000334,udp,147.32.84.170,53962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.008354,0.000361,udp,147.32.84.170,59812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,68,169,118.5,0.2869198312236287,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.010046,0.000283,udp,147.32.84.170,55143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.010342,0.000195,udp,147.32.84.170,54679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.012785,0.000346,udp,147.32.84.170,34218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.013753,0.000144,udp,147.32.84.170,45990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.014634,0.000325,udp,147.32.84.170,56426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.016043,0.000727,udp,147.32.84.170,41922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.295191,0.000357,udp,147.32.84.170,46723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.415519,0.000176,udp,147.32.84.170,40718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.416224,0.020713,udp,147.32.84.170,49070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,504,83,421,252.0,0.16468253968253968,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.416423,0.000771,udp,147.32.84.170,34688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,86,299,192.5,0.22337662337662337,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.889697,0.000251,udp,147.32.84.170,35486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:01.969759,0.000247,udp,147.32.85.34,50949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:02.427917,0.05025,udp,147.32.84.59,16838.0,<->,94.169.226.7,41946.0,CON,0.0,0.0,2,549,74,475,274.5,0.13479052823315119,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:52:02.677637,3422.675781,udp,147.32.84.59,34059.0,<->,76.183.172.39,61404.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,17,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:52:02.742869,0.000288,udp,147.32.84.170,47404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:03.030515,0.031527,tcp,147.32.84.170,34184.0,->,62.168.44.117,80.0,FSPA_FSPA,0.0,0.0,12,2307,1197,1110,192.25,0.5188556566970091,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:03.996654,0.000337,udp,147.32.84.170,40693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:04.033574,0.000377,udp,147.32.84.170,36788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:04.034213,0.000473,udp,147.32.84.170,41280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,82,431,256.5,0.15984405458089668,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:04.767836,0.00022,udp,147.32.84.138,42580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:05.032706,0.000274,udp,147.32.84.170,38761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:05.033599,0.000238,udp,147.32.84.170,58120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:05.509807,1.865339,tcp,147.32.84.170,52466.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2245,1486,759,224.5,0.6619153674832963,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:06.681548,0.000338,udp,147.32.84.170,42499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:07.283542,0.000257,udp,147.32.84.134,49928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:52:07.640029,16.780777,tcp,147.32.84.170,52469.0,->,77.75.73.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:08.274597,3.002132,tcp,46.4.81.119,58585.0,->,147.32.85.100,3126.0,S_,0.0,,2,148,148,0,74.0,1.0,17,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:52:09.357357,0.000315,udp,147.32.84.59,57314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:09.828114,0.00441,udp,111.254.123.188,17521.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3023,60,2963,755.75,0.01984783327820046,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:12.330193,0.000173,udp,147.32.84.138,32980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:16.163155,0.00073,udp,84.252.14.125,63623.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:16.302910,0.009434,tcp,147.32.84.134,55066.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:52:16.680847,0.000426,udp,147.32.84.170,55643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:18.665998,3181.880127,udp,147.32.84.94,7103.0,<->,93.125.165.109,7122.0,CON,0.0,0.0,93,76498,75130,1368,822.5591397849462,0.9821171795341055,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:19.722735,0.000223,udp,147.32.84.19,42899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:19.786346,0.000337,udp,147.32.84.164,42098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,71,217,144.0,0.2465277777777778,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:52:21.426884,0.03461,udp,147.32.84.170,56065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.427897,13.001103,tcp,147.32.84.170,38995.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.429420,0.000704,udp,147.32.84.170,49346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.430524,0.000493,udp,147.32.84.170,54600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.430665,22.991112,tcp,147.32.84.170,43995.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,12,2749,774,1975,229.08333333333334,0.2815569297926519,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.433418,0.003347,udp,147.32.84.170,42945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.435490,0.254966,tcp,147.32.84.170,53702.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,9,2513,904,1609,279.22222222222223,0.35972940708316753,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.435599,12.98611,tcp,147.32.84.170,53704.0,->,77.78.99.25,80.0,FSA_FSA,0.0,0.0,9,556,314,242,61.77777777777778,0.564748201438849,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.461791,0.000303,udp,147.32.84.170,35868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.780081,0.000152,udp,147.32.84.170,49370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.962239,0.004575,udp,147.32.84.170,45277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.970982,0.002166,udp,147.32.84.170,45652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,73,222,147.5,0.24745762711864408,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.971160,0.003565,udp,147.32.84.170,40972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.973676,0.000386,udp,147.32.84.170,35593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:21.983614,0.010551,udp,147.32.84.170,59588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.005438,0.005381,udp,147.32.84.170,44505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.007253,0.002572,udp,147.32.84.170,37471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,75,226,150.5,0.24916943521594684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.011835,0.002746,udp,147.32.84.170,58797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.015095,0.009978,udp,147.32.84.170,47996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.017441,0.002331,udp,147.32.84.170,56751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,72,223,147.5,0.2440677966101695,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.025935,0.003322,udp,147.32.84.170,51763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.039292,0.000636,udp,147.32.84.170,36879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.040364,0.002341,udp,147.32.84.170,60655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.041733,0.002878,udp,147.32.84.170,54714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.043567,0.000338,udp,147.32.84.170,41378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.143727,0.000264,udp,147.32.84.170,38278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,70,174,122.0,0.28688524590163933,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.217443,0.00282,udp,147.32.84.170,58582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,73,236,154.5,0.23624595469255663,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.218835,0.000285,udp,147.32.84.170,46930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.221694,0.024693,udp,147.32.84.170,49519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,64,133,98.5,0.3248730964467005,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.230276,0.003961,udp,147.32.84.170,53579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:22.257470,0.000261,udp,147.32.84.170,37993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:23.868232,0.000229,udp,147.32.84.138,54382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:25.384145,0.00791,tcp,147.32.84.134,55067.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:52:26.326795,60.644672,tcp,147.32.86.17,5764.0,->,195.113.232.96,80.0,SRPA_SPA,0.0,0.0,10,2520,1028,1492,252.0,0.40793650793650793,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:52:26.681249,0.000345,udp,147.32.84.170,44195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:26.683206,0.017935,tcp,147.32.84.170,54288.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:28.016113,0.208728,udp,147.32.84.229,13363.0,<->,67.187.246.77,36632.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:29.905537,0.000313,udp,147.32.84.138,57523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:31.302142,1.574835,udp,82.132.242.227,49907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,386,201,185,64.33333333333333,0.5207253886010362,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:31.784241,0.000853,udp,92.40.253.40,5341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:36.030289,0.000134,udp,147.32.84.170,46998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:36.030969,0.000232,udp,147.32.84.170,57785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:36.680704,0.000286,udp,147.32.84.170,46286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:36.681577,0.000263,udp,147.32.84.170,38921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:37.158497,0.000223,udp,147.32.84.170,51267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:37.559698,61.282547,tcp,147.32.84.165,2140.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:52:38.168985,0.000258,udp,147.32.84.170,41861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,82,133,107.5,0.3813953488372093,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:40.250686,15.322252,udp,147.32.84.94,7103.0,->,188.127.199.131,7370.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:52:47.017441,705.901917,udp,123.201.206.211,63978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,625,374,251,156.25,0.5984,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:47.145685,0.000435,udp,147.32.84.59,61764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,79,451,265.0,0.1490566037735849,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:52.434586,0.000318,udp,147.32.84.134,47539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:52:53.153349,0.247448,udp,147.32.84.164,52736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:52:53.400955,0.000371,udp,147.32.84.164,46125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:52:56.013185,0.000155,udp,147.32.85.25,53126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:56.682912,0.017767,tcp,147.32.84.170,56876.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:52:56.693094,0.000199,udp,147.32.84.138,50201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:52:58.359277,0.183264,udp,147.32.84.229,13363.0,<->,64.150.232.156,54313.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:52:59.657768,0.001896,udp,178.95.145.128,46222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:01.454920,0.000436,udp,147.32.84.134,49454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:02.341499,0.0009,udp,112.105.79.166,57391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,74,467,270.5,0.1367837338262477,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:04.086706,0.000244,udp,147.32.84.138,55024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:04.640862,3047.687744,udp,70.80.254.64,19770.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1200,890,310,120.0,0.7416666666666667,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:07.032099,0.000315,udp,147.32.84.170,39353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:11.687520,14.042465,tcp,201.242.241.204,34143.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,15,1196,668,528,79.73333333333333,0.5585284280936454,17,0,flow=Background-TCP-Established,Background,-1 2011-08-16 17:53:13.442079,0.242592,tcp,147.32.84.170,53470.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:16.680581,0.000518,udp,147.32.84.170,58338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:19.518594,0.00036,udp,147.32.84.134,44633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:28.548068,0.008749,tcp,147.32.84.134,35929.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:28.868775,0.000382,udp,147.32.85.21,39177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:28.904399,2442.239014,udp,94.167.103.75,63945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,960,712,248,120.0,0.7416666666666667,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:29.129189,0.001745,udp,88.213.230.245,50789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,518,458,60,259.0,0.8841698841698842,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:32.283533,3.342639,udp,147.32.84.59,37422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,345,70,275,172.5,0.2028985507246377,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:32.375733,2740.400146,udp,93.100.147.162,36165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:33.232699,0.000297,udp,147.32.84.170,39519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:36.683131,0.017989,tcp,147.32.84.170,54312.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:36.905444,2.456464,tcp,66.249.66.119,45084.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,12,3090,811,2279,257.5,0.26245954692556633,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:53:37.618210,0.00015,udp,147.32.85.25,34587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:37.804925,8e-06,udp,147.32.87.48,3884.0,->,147.32.86.235,161.0,INT,0.0,,2,262,262,0,131.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:53:38.033615,0.262554,tcp,147.32.84.170,37458.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:38.417425,61.283405,tcp,147.32.84.165,2141.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:53:42.056985,2910.779541,udp,147.32.84.229,13363.0,<->,88.152.245.204,45383.0,CON,0.0,0.0,12,4093,3743,350,341.0833333333333,0.9144881505008551,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:46.604348,0.00021,udp,147.32.84.134,39828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:46.606033,0.026207,tcp,147.32.84.134,35931.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:46.680749,0.000377,udp,147.32.84.170,36426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:46.681687,0.000261,udp,147.32.84.170,39782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:46.682807,0.018572,tcp,147.32.84.170,54314.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:47.845114,0.000248,udp,147.32.84.138,32902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:48.801919,0.019737,udp,147.32.84.164,42777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.270041,0.000317,udp,147.32.84.164,59458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.270045,0.000386,udp,147.32.84.164,35537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.270618,0.000508,udp,147.32.84.164,39043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.271608,0.000304,udp,147.32.84.164,41777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.272108,0.000299,udp,147.32.84.164,40959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.272198,0.020368,udp,147.32.84.164,59568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.285156,0.000438,udp,147.32.84.164,42751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.285750,0.000248,udp,147.32.84.164,51478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.348546,0.000448,udp,147.32.84.164,37096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,74,119,96.5,0.38341968911917096,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.349305,0.000586,udp,147.32.84.164,54330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.350740,0.004243,udp,147.32.84.164,57260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,70,134,102.0,0.3431372549019608,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.355325,0.000357,udp,147.32.84.164,53921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,70,134,102.0,0.3431372549019608,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.357069,0.010733,udp,147.32.84.164,60782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.364894,0.000926,udp,147.32.84.164,36811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,79,241,160.0,0.246875,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.366137,0.000582,udp,147.32.84.164,36192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:49.368059,0.003911,udp,147.32.84.164,59728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,80,133,106.5,0.3755868544600939,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:53.216032,0.000371,udp,147.32.84.164,58707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:53.216576,0.000295,udp,147.32.84.164,42365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:53:55.645178,0.007884,tcp,147.32.84.134,35932.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:53:56.299456,0.001819,udp,78.98.182.12,61924.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:53:56.681625,0.000421,udp,147.32.84.170,57248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:56.682747,0.017832,tcp,147.32.84.170,56888.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:53:57.323146,0.0,udp,61.189.184.76,5060.0,->,147.32.85.31,5060.0,INT,0.0,,1,451,451,0,451.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:53:58.112328,0.000243,udp,147.32.84.138,37775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:59.333413,0.000207,udp,147.32.84.138,46659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:53:59.493316,0.000785,udp,76.115.14.106,53237.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:54:02.403746,0.000356,udp,147.32.84.164,47924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.403754,0.000354,udp,147.32.84.164,35388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.403886,13.494148,tcp,147.32.84.164,46560.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.403900,13.494718,tcp,147.32.84.164,46561.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.403904,13.494126,tcp,147.32.84.164,46562.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.405421,13.491383,tcp,147.32.84.164,48254.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:02.405466,240.032104,tcp,147.32.84.164,59192.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,26,2494,1398,1096,95.92307692307692,0.5605453087409783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.520660,0.038152,udp,147.32.84.164,47407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.521228,0.000395,udp,147.32.84.164,41759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.521882,21.479298,tcp,147.32.84.164,45513.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,11,1774,854,920,161.27272727272728,0.4813979706877114,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.522801,2.889173,tcp,147.32.84.164,37774.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,11,1997,840,1157,181.54545454545453,0.42063094641962945,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.533839,0.113144,udp,147.32.84.164,48657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.647888,0.112729,udp,147.32.84.164,51158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,76,175,125.5,0.30278884462151395,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:04.665528,0.015466,tcp,147.32.84.134,35933.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:54:04.784615,11.216476,tcp,147.32.84.164,46432.0,->,70.32.100.210,443.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:05.134971,0.034793,udp,147.32.84.164,40312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,77,188,132.5,0.29056603773584905,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:05.188683,0.301886,tcp,147.32.84.164,46552.0,->,69.58.183.140,80.0,FSPA_FSPA,0.0,0.0,13,4415,787,3628,339.61538461538464,0.1782559456398641,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:05.394985,0.111718,udp,147.32.84.164,44594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,84,194,139.0,0.302158273381295,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:05.507072,0.099119,udp,147.32.84.164,46507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,518,84,434,259.0,0.16216216216216217,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:05.645816,0.000289,udp,147.32.84.164,34565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,84,194,139.0,0.302158273381295,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.549607,0.000591,udp,147.32.84.164,39403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,74,159,116.5,0.31759656652360513,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550039,0.011171,udp,147.32.84.164,33330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,341,85,256,170.5,0.24926686217008798,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550365,249.361664,tcp,147.32.84.164,38648.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,50,22818,3757,19061,456.36,0.16465071434832151,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550380,0.001371,udp,147.32.84.164,44831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,71,495,283.0,0.1254416961130742,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550438,279.363251,tcp,147.32.84.164,38650.0,->,74.125.232.202,80.0,FSPA_FSPA,0.0,0.0,92,50786,9237,41549,552.0217391304348,0.18188083330051588,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550539,19.348249,tcp,147.32.84.164,38651.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.550621,19.348061,tcp,147.32.84.164,38653.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.551755,19.346514,tcp,147.32.84.164,52926.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.551932,19.346485,tcp,147.32.84.164,53921.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.552070,249.359955,tcp,147.32.84.164,39274.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,319,330824,7248,323576,1037.065830721003,0.02190893042826397,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.552162,19.345907,tcp,147.32.84.164,39276.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.554964,0.117061,udp,147.32.84.164,46767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.555040,0.134213,udp,147.32.84.164,35538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.555101,0.000693,udp,147.32.84.164,56682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.555421,0.21398,udp,147.32.84.164,59627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.557065,249.35495,tcp,147.32.84.164,45638.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,24,4216,2822,1394,175.66666666666666,0.6693548387096774,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.561086,0.01997,udp,147.32.84.164,49552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.572345,0.02019,udp,147.32.84.164,38121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,88,486,287.0,0.15331010452961671,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.661819,0.000173,udp,147.32.84.164,58587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.672739,19.241581,tcp,147.32.84.164,34373.0,->,173.194.16.93,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.674685,309.2341,tcp,147.32.84.164,59854.0,->,195.113.232.96,80.0,FSPA_FSPA,0.0,0.0,65,41005,2881,38124,630.8461538461538,0.07025972442385076,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.710051,0.001855,udp,147.32.84.164,58194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,81,401,241.0,0.16804979253112035,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.748887,0.000257,udp,147.32.84.138,59363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:06.769769,0.000355,udp,147.32.84.164,58889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.834888,0.175545,udp,147.32.84.164,40562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,78,147,112.5,0.3466666666666667,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.835720,0.001192,udp,147.32.84.164,45717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.837362,0.058707,udp,147.32.84.164,52220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,76,145,110.5,0.3438914027149321,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.886061,0.427915,tcp,147.32.84.164,48045.0,->,74.113.233.133,80.0,FSPA_FSPA,0.0,0.0,13,4808,1126,3682,369.84615384615387,0.23419301164725456,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:06.935456,0.176187,udp,147.32.84.164,39075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,77,146,111.5,0.3452914798206278,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.003201,0.002012,udp,147.32.84.164,35860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,434,81,353,217.0,0.18663594470046083,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.111930,0.000337,udp,147.32.84.164,36967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,77,146,111.5,0.3452914798206278,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.112562,0.173448,udp,147.32.84.164,34513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,77,173,125.0,0.308,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.118030,30.013405,tcp,147.32.84.59,57055.0,->,69.167.127.68,80.0,S_,0.0,,6,372,372,0,62.0,1.0,17,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 17:54:07.193409,0.000249,udp,147.32.84.164,38969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.193815,0.177067,udp,147.32.84.164,41759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,73,172,122.5,0.2979591836734694,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.200360,0.197394,udp,147.32.84.164,58194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.288914,0.00047,udp,147.32.84.164,48276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,82,198,140.0,0.29285714285714287,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.289770,0.182988,udp,147.32.84.164,39474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,69,137,103.0,0.33495145631067963,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.371463,0.002221,udp,147.32.84.164,41092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,77,149,113.0,0.3407079646017699,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.398579,0.174205,udp,147.32.84.164,49240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.560971,0.17632,udp,147.32.84.164,34849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,68,167,117.5,0.28936170212765955,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.605251,0.01977,udp,147.32.84.164,57380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.625706,0.287982,udp,147.32.84.164,37839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,76,127,101.5,0.37438423645320196,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.737767,0.000364,udp,147.32.84.164,35814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,73,138,105.5,0.3459715639810427,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.819205,0.042978,udp,147.32.84.164,50830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,384,76,308,192.0,0.19791666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.954081,0.000178,udp,147.32.84.164,58509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:07.962780,0.12449,udp,147.32.84.164,50829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.034904,0.024186,udp,147.32.84.164,46931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.060370,0.000288,udp,147.32.84.164,33722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,75,135,105.0,0.35714285714285715,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.061685,0.000224,udp,147.32.84.164,49106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,75,161,118.0,0.3177966101694915,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.063121,0.000324,udp,147.32.84.164,49707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.087610,0.000239,udp,147.32.84.164,56447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.170161,0.106652,udp,147.32.84.164,46412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,69,146,107.5,0.3209302325581395,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:08.729434,0.000365,udp,147.32.84.164,45264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:09.113834,0.153919,tcp,147.32.86.20,4452.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,61,55789,1391,54398,914.5737704918033,0.024933230565165176,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:54:09.129755,0.000251,udp,147.32.84.164,60196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:09.791697,0.000321,udp,147.32.84.164,47686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,64,133,98.5,0.3248730964467005,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:09.880700,16.182529,tcp,147.32.84.164,51302.0,->,74.220.215.208,80.0,FSPA_FSPA,0.0,0.0,16,4435,2492,1943,277.1875,0.5618940248027058,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.618598,0.000363,udp,147.32.84.164,44614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.618651,0.000535,udp,147.32.84.164,36943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,74,187,130.5,0.2835249042145594,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.618807,0.000383,udp,147.32.84.164,37619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,81,149,115.0,0.3521739130434783,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.619483,0.000581,udp,147.32.84.164,51983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,81,217,149.0,0.27181208053691275,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.619805,12.286391,tcp,147.32.84.164,46525.0,->,93.184.220.20,80.0,FSA_FSA,0.0,0.0,6,380,254,126,63.333333333333336,0.6684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.619809,0.000591,udp,147.32.84.164,43300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.619915,12.285863,tcp,147.32.84.164,46528.0,->,93.184.220.20,80.0,FSA_FSA,0.0,0.0,6,380,254,126,63.333333333333336,0.6684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.620071,0.000442,udp,147.32.84.164,35980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,76,206,141.0,0.2695035460992908,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.620079,12.286098,tcp,147.32.84.164,46530.0,->,93.184.220.20,80.0,FSA_FSA,0.0,0.0,6,380,254,126,63.333333333333336,0.6684210526315789,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.620295,12.443867,tcp,147.32.84.164,33875.0,->,149.20.54.15,80.0,FSA_FSRA,0.0,0.0,9,624,350,274,69.33333333333333,0.5608974358974359,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.620396,1.690922,tcp,147.32.84.164,34542.0,->,93.170.16.22,80.0,FSPA_FSPA,0.0,0.0,10,2042,997,1045,204.2,0.48824681684622917,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.620757,12.27997,tcp,147.32.84.164,41160.0,->,212.57.32.49,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:13.694023,0.003738,tcp,147.32.84.134,35934.0,->,88.86.100.176,80.0,SRPA_FSPA,0.0,0.0,9,1297,457,840,144.11111111111111,0.35235158057054744,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:54:15.255620,10.651354,tcp,147.32.84.164,40598.0,->,188.165.209.26,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:15.256718,10.643893,tcp,147.32.84.164,41172.0,->,212.57.32.49,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:15.404980,0.000231,udp,147.32.84.164,52164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,71,256,163.5,0.21712538226299694,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:15.405611,0.000182,udp,147.32.84.164,36521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:16.682953,0.018216,tcp,147.32.84.170,55352.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:25.454561,7.9e-05,udp,147.32.84.138,55714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:26.682924,0.01783,tcp,147.32.84.170,54320.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:27.729125,0.000612,udp,80.243.144.2,62257.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:54:29.815290,0.821116,tcp,147.32.84.170,48208.0,->,72.165.61.190,27030.0,FSPA_FSPA,0.0,0.0,11,784,413,371,71.27272727272727,0.5267857142857143,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:30.431557,0.821963,tcp,147.32.84.170,46128.0,->,72.165.61.189,27038.0,FSPA_FSPA,0.0,0.0,11,934,433,501,84.9090909090909,0.46359743040685225,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:31.049241,0.076994,tcp,147.32.84.170,55819.0,->,79.141.166.2,27031.0,FSPA_FSPA,0.0,0.0,502,582049,7688,574361,1159.4601593625498,0.01320850993644865,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:32.074671,0.000316,udp,147.32.84.138,53596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:32.079647,0.000318,udp,147.32.84.138,39488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:36.682886,0.018543,tcp,147.32.84.170,55114.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:37.087145,0.000203,udp,147.32.84.59,40153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:37.209659,0.000235,udp,147.32.84.59,55700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:39.276059,61.298229,tcp,147.32.84.165,2142.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:54:40.766868,0.000208,udp,147.32.84.138,47189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:44.871123,11.028662,tcp,147.32.84.164,41691.0,->,74.125.232.217,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:44.871508,11.028784,tcp,147.32.84.164,50468.0,->,74.125.232.220,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:44.872146,11.028031,tcp,147.32.84.164,54010.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:44.872573,11.027773,tcp,147.32.84.164,38759.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:46.682606,0.018176,tcp,147.32.84.170,55118.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:54:49.932777,0.000117,udp,147.32.84.164,44067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:49.934169,0.000159,udp,147.32.84.164,49757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:49.934268,15.967604,tcp,147.32.84.164,40173.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:51.918197,0.000235,udp,147.32.84.164,57808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,71,237,154.0,0.2305194805194805,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:51.918207,0.000356,udp,147.32.84.164,53325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,70,239,154.5,0.22653721682847897,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:52.548134,0.000292,udp,147.32.84.164,42387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:54:54.618639,0.000448,udp,147.32.86.20,51642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:54:56.553038,0.000242,udp,187.90.234.55,42325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:54:58.824797,0.014707,tcp,147.32.84.134,35939.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:00.639103,0.000372,udp,147.32.85.25,44765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:06.681610,0.000343,udp,147.32.84.170,32992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:07.850910,0.000199,udp,147.32.84.134,35399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:07.851640,0.000359,udp,147.32.84.134,44119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:11.031554,0.347292,tcp,147.32.84.170,37485.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:13.523661,0.002443,udp,147.32.84.164,39015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:13.526258,0.002021,udp,147.32.84.164,58613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.388613,0.0002,udp,147.32.84.164,36389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.390980,0.000395,udp,147.32.84.164,59839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,74,192,133.0,0.2781954887218045,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.391834,0.019829,udp,147.32.84.164,54924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.391887,0.177884,udp,147.32.84.164,57307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.392492,0.000379,udp,147.32.84.164,46873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.394104,0.000349,udp,147.32.84.164,40752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.416004,0.000198,udp,147.32.84.164,48615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.416395,0.000372,udp,147.32.84.164,60907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.417877,0.000336,udp,147.32.84.164,43658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.435040,0.001819,udp,147.32.84.164,60627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.438053,0.001841,udp,147.32.84.164,50899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,74,135,104.5,0.35406698564593303,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.440215,0.000243,udp,147.32.84.164,35704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,74,135,104.5,0.35406698564593303,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.440703,0.000271,udp,147.32.84.164,36793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.448037,0.000175,udp,147.32.84.164,39192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.451346,0.069364,udp,147.32.84.164,49672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,80,159,119.5,0.33472803347280333,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.743497,0.000381,udp,147.32.84.164,37107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,71,167,119.0,0.29831932773109243,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:15.812187,0.000215,udp,147.32.86.208,56937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:16.681249,0.000324,udp,147.32.84.170,33203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:16.869251,0.000248,udp,147.32.84.134,46225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:16.870628,0.005202,tcp,147.32.84.134,35942.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:19.249293,15.300051,udp,147.32.84.94,7103.0,->,216.211.75.35,7565.0,INT,0.0,,4,336,336,0,84.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:55:19.355878,0.000152,udp,147.32.84.138,33977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:19.926666,0.001099,udp,124.96.172.201,63802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,71,466,268.5,0.13221601489757914,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:20.634775,3046.515381,udp,217.187.0.102,61294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:20.994755,0.000416,udp,147.32.84.138,38692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:21.005577,0.000188,udp,147.32.84.138,35510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:22.876083,13.027912,tcp,147.32.84.164,37840.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:22.876088,13.027913,tcp,147.32.84.164,37841.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:22.876093,0.000324,udp,147.32.84.164,42288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:22.876097,13.028189,tcp,147.32.84.164,37842.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:22.876224,0.000207,udp,147.32.84.164,47899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:22.939339,3.630012,tcp,147.32.84.164,54875.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,211,220807,5335,215472,1046.478672985782,0.024161371695643707,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:24.218691,0.000186,udp,147.32.84.164,57882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,84,145,114.5,0.36681222707423583,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:24.219141,0.001815,udp,147.32.84.164,36703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,84,163,123.5,0.340080971659919,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:25.458487,0.0,tcp,192.168.88.150,6260.0,?>,74.125.232.208,443.0,RA_,0.0,,1,60,60,0,60.0,1.0,17,1,flow=Background,Background,-1 2011-08-16 17:55:25.885893,0.000204,udp,147.32.84.134,37000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:25.886653,0.000267,udp,147.32.84.134,51061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,17,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 17:55:26.578837,0.0,igmp,147.32.87.4,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,17,,flow=Background,Background,-1 2011-08-16 17:55:26.682833,0.017856,tcp,147.32.84.170,54342.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:26.695048,19.202332,tcp,147.32.84.164,54878.0,->,88.86.120.191,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:26.695522,0.001738,udp,147.32.84.164,38056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:26.698260,0.074541,tcp,147.32.84.164,54879.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,15,9822,983,8839,654.8,0.10008144980655671,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:26.698267,19.19912,tcp,147.32.84.164,54880.0,->,88.86.120.191,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:26.698317,19.199383,tcp,147.32.84.164,54881.0,->,88.86.120.191,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:26.698324,19.199366,tcp,147.32.84.164,54882.0,->,88.86.120.191,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.118355,0.000424,udp,147.32.84.164,40441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.119554,0.000362,udp,147.32.84.164,33059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.120956,0.000209,udp,147.32.84.164,34504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,78,144,111.0,0.35135135135135137,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.121471,0.000308,udp,147.32.84.164,37812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.121479,0.000386,udp,147.32.84.164,49066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,74,167,120.5,0.3070539419087137,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.122375,0.00179,udp,147.32.84.164,55598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,87,87,87.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.126437,0.000555,udp,147.32.84.164,51961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,87,229,158.0,0.27531645569620256,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.129324,0.00331,udp,147.32.84.164,37884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.134712,0.00037,udp,147.32.84.164,48659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,74,214,144.0,0.2569444444444444,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.418346,0.000291,udp,147.32.84.164,60236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,73,163,118.0,0.3093220338983051,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.419569,0.000254,udp,147.32.84.164,56337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:27.420848,0.000221,udp,147.32.84.164,33050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,84,151,117.5,0.3574468085106383,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:28.749625,43.990543,tcp,147.32.84.170,58954.0,->,63.228.223.104,80.0,FSPA_FSPA,0.0,0.0,25,17779,1304,16475,711.16,0.07334495753416953,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:29.431521,296.490906,tcp,147.32.84.164,41397.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,92,51513,5449,46064,559.9239130434783,0.10577912371634345,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:29.554179,0.000369,udp,147.32.86.20,58306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:29.776065,0.000382,udp,147.32.84.138,50775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:29.974637,15.929927,tcp,147.32.84.164,41398.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:29.974707,15.929486,tcp,147.32.84.164,41399.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:30.195948,0.119668,tcp,147.32.84.164,60753.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1368,700,668,136.8,0.5116959064327485,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:30.208580,25.688702,tcp,147.32.84.164,35800.0,->,89.187.145.217,80.0,FSPA_FSPA,0.0,0.0,19,6770,2358,4412,356.3157894736842,0.348301329394387,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:30.619969,0.10784,udp,147.32.84.164,41019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:30.896272,0.07287,udp,147.32.84.229,13363.0,<->,46.137.52.146,33100.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:31.447360,0.000471,udp,147.32.84.164,46103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:32.675996,66.239082,tcp,147.32.84.59,58302.0,->,69.171.242.40,80.0,FSPA_FSPA,0.0,0.0,15,4198,1615,2583,279.8666666666667,0.3847070033349214,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:55:34.982212,0.013802,tcp,147.32.84.170,57406.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:36.680218,0.000341,udp,147.32.84.170,33329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:36.992436,0.000223,udp,147.32.84.138,41304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:37.123932,19.997334,udp,147.32.84.164,53148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:37.264693,6.223741,udp,147.32.84.229,13363.0,->,75.128.36.44,6576.0,INT,0.0,,3,555,555,0,185.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:55:40.142843,61.284218,tcp,147.32.84.165,2143.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:55:40.754292,6.8e-05,udp,147.32.84.138,35085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:55:42.081465,1180.813965,udp,129.78.101.19,47943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,15,1020,420,600,68.0,0.4117647058823529,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:43.126789,13.994516,udp,147.32.84.164,55207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:44.408665,0.004803,udp,78.101.23.172,12254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,75,465,270.0,0.1388888888888889,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:46.431089,3074.15625,udp,87.252.227.105,54981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:46.602516,0.000682,udp,93.218.53.157,62645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,615,75,540,307.5,0.12195121951219512,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:46.681235,0.000384,udp,147.32.84.170,42802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:47.132654,30.000942,udp,147.32.84.164,39508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.081865,0.118966,udp,147.32.84.164,49112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,79,177,128.0,0.30859375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.086010,0.000324,udp,147.32.84.164,46651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.087457,0.000328,udp,147.32.84.164,60136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.095716,0.005284,udp,147.32.84.164,57468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.141483,0.032599,udp,147.32.84.164,49346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,77,141,109.0,0.3532110091743119,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:49.175059,0.001849,udp,147.32.84.164,33220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,77,168,122.5,0.3142857142857143,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:55.064209,0.000225,udp,147.32.84.164,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:55.064336,0.000397,udp,147.32.84.164,37236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:55.064952,0.000303,udp,147.32.84.164,41527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:56.268014,0.000795,udp,93.177.150.60,64900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:55:56.681198,0.00046,udp,147.32.84.170,33914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:56.682190,0.00057,udp,147.32.84.170,33350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:55:57.121265,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,40143.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:57.121606,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,34946.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:57.515232,18.389936,tcp,147.32.84.164,41413.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:57.515312,18.390833,tcp,147.32.84.164,50341.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:58.943344,16.955261,tcp,147.32.84.164,54915.0,->,88.86.120.191,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:55:59.074691,0.105089,tcp,147.32.84.164,54917.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,17,12766,1187,11579,750.9411764705883,0.0929813567288109,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:02.510910,248.315216,tcp,147.32.84.59,51487.0,->,74.125.235.140,80.0,SRPA_FSPA,0.0,0.0,20,2840,1745,1095,142.0,0.6144366197183099,17,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 17:56:06.682087,0.000312,udp,147.32.84.170,33725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.617613,0.000361,udp,147.32.84.138,43714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:11.879784,0.0003,udp,147.32.84.170,53930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.880852,0.000246,udp,147.32.84.170,46736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.881842,0.004428,tcp,147.32.84.170,55980.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,9,2537,928,1609,281.8888888888889,0.3657863618446985,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.888791,0.000308,udp,147.32.84.170,57584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.926941,0.000444,udp,147.32.84.170,42567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,75,238,156.5,0.23961661341853036,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.928430,0.000345,udp,147.32.84.170,54053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.929146,0.000243,udp,147.32.84.170,46406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.931015,0.000252,udp,147.32.84.170,47841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.931076,0.000309,udp,147.32.84.170,41432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,77,228,152.5,0.25245901639344265,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:11.931485,0.000361,udp,147.32.84.170,35057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,76,185,130.5,0.29118773946360155,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.032665,0.240218,tcp,147.32.84.170,57181.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.135284,4.99836,udp,147.32.84.164,49727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:12.194086,0.000352,udp,147.32.84.170,56681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.195609,0.004396,tcp,147.32.84.170,37138.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,10,1791,910,881,179.1,0.5080960357342267,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.291018,0.000226,udp,147.32.84.170,36686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,82,133,107.5,0.3813953488372093,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.294310,0.00022,udp,147.32.84.170,45324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,71,125,98.0,0.3622448979591837,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.327120,0.00648,udp,147.32.84.170,37286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,75,218,146.5,0.25597269624573377,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:12.558742,0.00027,udp,147.32.84.138,38999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:12.579615,0.000313,udp,147.32.84.138,41320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:12.621029,0.20808,tcp,147.32.86.20,4540.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,35455,1151,34304,805.7954545454545,0.03246368636299535,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:56:13.073647,0.000274,udp,147.32.84.170,34376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,80,184,132.0,0.30303030303030304,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:13.086647,10.344899,tcp,147.32.84.170,47597.0,->,87.248.202.133,80.0,FSPA_FSPA,0.0,0.0,16,3668,1526,2142,229.25,0.41603053435114506,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:13.108154,8.608432,tcp,147.32.84.170,49702.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,185,139330,9971,129359,753.1351351351351,0.07156391301227302,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:13.113272,8.604026,tcp,147.32.84.170,49706.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,128,87823,8385,79438,686.1171875,0.09547612812133496,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:13.196631,0.792935,tcp,147.32.84.164,54922.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,18,10298,1220,9078,572.1111111111111,0.11846960574868906,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:13.196638,0.853763,tcp,147.32.84.164,54923.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,13,8826,1088,7738,678.9230769230769,0.1232721504645366,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:13.206606,0.000502,udp,147.32.84.164,60813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:13.207479,12.698119,tcp,147.32.84.164,34439.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:13.787869,0.202089,tcp,147.32.84.164,54927.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,17,12473,1154,11319,733.7058823529412,0.09251984286057885,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:16.613333,0.000146,udp,147.32.84.164,46848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:16.613815,0.000303,udp,147.32.84.164,56651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:16.681377,0.000325,udp,147.32.84.170,46041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:16.682232,0.000426,udp,147.32.84.170,60170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:17.133596,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,21658.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:17.133648,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,1939.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:17.160250,9.962571,udp,147.32.84.164,59446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:17.594958,0.000833,udp,93.73.206.192,55742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:17.660224,18.246538,tcp,147.32.84.164,50373.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:17.660239,18.246435,tcp,147.32.84.164,50374.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:20.490013,0.000823,udp,128.59.104.68,37276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,162,95,67,81.0,0.5864197530864198,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:23.634846,1.875453,tcp,147.32.84.164,54945.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,186,218917,3445,215472,1176.97311827957,0.015736557690814328,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:23.685105,0.000431,udp,147.32.84.21,33847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,73,274,173.5,0.21037463976945245,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:23.964159,3015.412109,udp,98.224.33.93,48564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1446,1074,372,120.5,0.7427385892116183,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:24.751528,0.003726,udp,111.248.67.115,16635.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3030,60,2970,757.5,0.019801980198019802,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:25.087788,2424.297852,udp,111.104.100.228,36871.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:25.564021,0.090662,tcp,147.32.84.164,54947.0,->,88.86.120.191,80.0,FSPA_FSPA,0.0,0.0,14,9756,917,8839,696.8571428571429,0.09399343993439935,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:25.807748,0.000188,udp,147.32.84.164,58674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:25.969544,3100.994141,udp,2.89.224.142,40056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1186,876,310,118.6,0.7386172006745363,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:25.970075,0.000219,udp,147.32.84.164,52195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:27.122936,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,16309.0,URP,0.0,,1,102,102,0,102.0,1.0,17,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:29.658182,24.085459,udp,147.32.84.94,7103.0,<->,212.56.212.178,4870.0,CON,0.0,0.0,83,69653,68441,1212,839.1927710843373,0.9825994573098071,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:30.980451,0.00027,udp,147.32.84.138,47780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:32.323384,0.000133,udp,147.32.84.138,51598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:35.628564,3372.892822,udp,217.120.20.214,24973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,2407,1876,531,267.44444444444446,0.7793934358122144,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:36.683005,0.000297,udp,147.32.84.170,56961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:37.129823,10.005569,udp,147.32.84.164,60040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,222,148,74,74.0,0.6666666666666666,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:56:38.252611,0.003813,udp,147.32.84.170,55953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:38.267334,0.0003,udp,147.32.84.170,40438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:38.291396,0.000348,udp,147.32.84.170,43691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:38.292162,0.000265,udp,147.32.84.170,33519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:38.294003,0.000303,udp,147.32.84.170,51276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:38.518343,0.00017,udp,147.32.85.25,44982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:56:39.771381,80.470093,tcp,88.217.227.70,57262.0,->,147.32.84.229,80.0,FSPA_FSRA,0.0,0.0,11,798,372,426,72.54545454545455,0.46616541353383456,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:56:41.001916,61.283283,tcp,147.32.84.165,2144.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:56:44.901998,0.000434,udp,147.32.84.170,35568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:44.902843,0.000495,udp,147.32.84.170,49294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:44.949196,0.00418,tcp,147.32.84.170,35911.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1853,1002,851,205.88888888888889,0.5407447382622774,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:45.030812,0.00039,udp,147.32.84.170,49928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:45.265238,0.004204,tcp,147.32.84.170,35710.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2110,1094,1016,234.44444444444446,0.5184834123222749,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:45.335846,0.00032,udp,147.32.84.170,44039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,72,250,161.0,0.2236024844720497,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:45.356988,0.024541,udp,147.32.84.170,42463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:45.382527,0.020372,udp,147.32.84.170,54466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:46.355423,0.40273,tcp,147.32.84.170,39088.0,->,69.28.153.82,27035.0,FSPA_FSPA,0.0,0.0,11,1089,413,676,99.0,0.379247015610652,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:46.662335,0.842577,tcp,147.32.84.170,33480.0,->,72.165.61.189,27038.0,FSPA_FSPA,0.0,0.0,11,934,433,501,84.9090909090909,0.46359743040685225,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:46.682329,0.000418,udp,147.32.84.170,37114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:47.905286,0.00488,udp,147.32.84.170,47831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:47.910470,0.009703,udp,147.32.84.170,59455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,80,426,253.0,0.15810276679841898,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:47.920660,306.544189,tcp,147.32.84.170,55603.0,->,2.21.111.139,80.0,FSPA_FSPA,0.0,0.0,22,2211,1279,932,100.5,0.5784712799638173,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.201634,0.000364,udp,147.32.84.170,53543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.201745,0.017167,udp,147.32.84.170,53348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.213913,0.274236,udp,147.32.84.170,50514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,82,143,112.5,0.36444444444444446,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.485602,0.134359,udp,147.32.84.170,36767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,74,432,253.0,0.14624505928853754,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.489142,0.123941,udp,147.32.84.170,51799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:48.735724,0.000226,udp,147.32.84.170,52880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:56:53.376412,3105.106934,udp,147.32.84.229,13363.0,<->,62.142.198.53,63721.0,CON,0.0,0.0,9,743,371,372,82.55555555555556,0.4993270524899058,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:55.351776,5.996741,udp,147.32.84.229,13363.0,->,85.130.64.173,19068.0,INT,0.0,,3,207,207,0,69.0,1.0,17,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:56:57.606451,0.000919,udp,81.88.222.53,47522.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,74,489,281.5,0.13143872113676733,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:56:58.348095,0.091709,udp,147.32.84.229,13363.0,<->,90.170.109.28,58765.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:00.296334,11.302606,tcp,147.32.84.170,49775.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,121,112055,3944,108111,926.0743801652893,0.03519700147249119,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:02.120159,0.000809,udp,151.74.53.194,16282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:06.310018,0.000727,udp,190.87.17.198,59597.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,73,486,279.5,0.13059033989266547,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:08.481391,0.0,udp,192.168.88.138,52788.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,17,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 17:57:10.332184,0.000692,udp,92.35.7.151,32086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,73,462,267.5,0.13644859813084112,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:14.034406,0.000334,udp,147.32.84.170,51585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:14.035282,0.000442,udp,147.32.84.170,34356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:18.637796,0.367321,udp,147.32.84.229,13363.0,<->,203.70.49.236,32702.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:23.202005,0.00037,udp,147.32.84.170,58508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:25.752312,3320.859619,udp,77.76.144.118,26507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:26.684497,0.000342,udp,147.32.84.170,60630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:26.803662,1844.252197,udp,94.37.41.57,4675.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1038,918,120,259.5,0.884393063583815,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:27.832453,0.017468,tcp,147.32.84.170,57412.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:29.726136,671.787415,udp,178.140.202.206,36452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2209,897,1312,184.08333333333334,0.4060660932548665,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:36.653229,0.000232,udp,147.32.84.164,37703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:57:40.540611,0.000395,udp,147.32.84.189,45001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:57:41.859937,61.282734,tcp,147.32.84.165,2145.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:57:43.581364,0.021665,udp,147.32.84.171,58308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:57:43.876291,188.574203,tcp,147.32.84.164,60120.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,20,1785,942,843,89.25,0.5277310924369748,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:57:43.876615,188.574463,tcp,147.32.84.164,60125.0,->,146.102.14.10,443.0,FSPA_FSPA,0.0,0.0,21,1863,1020,843,88.71428571428571,0.5475040257648953,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:57:46.683869,0.000287,udp,147.32.84.170,38548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:57:52.757606,0.004591,udp,111.240.210.226,50555.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3030,60,2970,757.5,0.019801980198019802,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:57:53.579466,0.249731,udp,147.32.84.164,54983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:57:53.829305,0.246698,udp,147.32.84.164,33625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:57:54.122326,0.000416,icmp,147.32.86.96,,<-,147.32.87.38,58908.0,RED,,0.0,2,196,0,196,98.0,0.0,17,0,flow=Background,Background,-1 2011-08-16 17:57:56.683665,0.000322,udp,147.32.84.170,53345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:03.763143,0.000321,udp,147.32.84.138,54632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:04.901151,0.000247,udp,147.32.84.164,33057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.117683,0.248058,udp,147.32.84.59,50798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:06.188613,309.835144,tcp,147.32.84.164,58247.0,->,66.220.158.53,80.0,FSPA_FSPA,0.0,0.0,25,4389,1955,2434,175.56,0.4454317612212349,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.188633,0.000715,udp,147.32.84.164,51689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.189143,0.001131,udp,147.32.84.164,38457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.194739,309.736572,tcp,147.32.84.164,35896.0,->,80.239.149.24,80.0,FSPA_FSPA,0.0,0.0,27,5726,1863,3863,212.07407407407408,0.3253580160670625,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.194748,79.721252,tcp,147.32.84.164,35897.0,->,80.239.149.24,80.0,FSPA_FSRPA,0.0,0.0,29,15945,2121,13824,549.8275862068965,0.1330197554092192,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.195106,339.73175,tcp,147.32.84.164,58963.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,65,38005,6261,31744,584.6923076923077,0.16474148138402842,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:06.195110,309.730225,tcp,147.32.84.164,58964.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,107,87977,6955,81022,822.2149532710281,0.07905475294679291,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:13.379820,0.460487,tcp,147.32.84.170,46904.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:13.755729,0.235319,tcp,147.32.84.170,39009.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:13.832718,0.307686,tcp,147.32.84.170,46907.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:13.983046,0.290139,tcp,147.32.84.170,39011.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:14.087178,250.044144,tcp,147.32.84.170,56020.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:16.036013,0.000181,udp,147.32.84.138,37262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:16.683420,0.000377,udp,147.32.84.170,50629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:16.884656,0.000352,udp,147.32.84.164,49502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:16.885285,0.000371,udp,147.32.84.164,46987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,77,140,108.5,0.3548387096774194,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:16.886011,0.000308,udp,147.32.84.164,38165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,77,319,198.0,0.19444444444444445,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:21.749142,0.000328,udp,147.32.84.164,44443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,84,151,117.5,0.3574468085106383,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:22.961038,0.00035,udp,147.32.84.59,51246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:23.603021,3111.39502,udp,68.50.55.85,25673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:58:23.916918,0.000341,udp,147.32.84.170,36143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:26.640896,0.003028,udp,147.32.84.59,60140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,80,178,129.0,0.31007751937984496,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:26.658664,0.002451,udp,147.32.84.59,51726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,82,146,114.0,0.35964912280701755,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:26.685634,0.018247,tcp,147.32.84.170,55625.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:26.994545,0.000307,udp,147.32.84.59,58948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,81,182,131.5,0.30798479087452474,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:27.044042,0.003814,udp,147.32.84.59,59989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,73,151,112.0,0.32589285714285715,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:27.387759,0.000328,udp,147.32.84.59,64873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,69,133,101.0,0.3415841584158416,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:31.456186,0.000205,udp,147.32.84.164,49477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,76,129,102.5,0.37073170731707317,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:31.733046,0.000285,udp,147.32.84.164,53502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:31.733683,0.000373,udp,147.32.84.164,40357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:34.408558,0.000615,udp,151.45.196.203,10969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:58:40.606796,0.000453,udp,147.32.84.164,50349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:40.608018,0.000374,udp,147.32.84.164,46799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:40.690896,0.021293,tcp,147.32.84.164,34531.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,77,78078,1993,76085,1014.0,0.025525756294987063,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:40.702926,0.000264,udp,147.32.84.164,46647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:40.703487,0.000373,udp,147.32.84.164,48463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.018624,0.004866,tcp,147.32.84.164,34544.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,10,2350,828,1522,235.0,0.3523404255319149,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.022346,0.003926,tcp,147.32.84.164,34546.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,10,1839,825,1014,183.9,0.44861337683523655,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.022475,0.006548,tcp,147.32.84.164,34547.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,21,15212,1039,14173,724.3809523809524,0.0683013410465422,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.022723,0.005642,tcp,147.32.84.164,34548.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,14,6245,959,5286,446.07142857142856,0.15356285028022418,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.024035,0.005746,tcp,147.32.84.164,34551.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,10,1752,834,918,175.2,0.476027397260274,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.027845,0.991322,tcp,147.32.84.164,34554.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,19,12059,996,11063,634.6842105263158,0.08259391325980596,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.034621,0.004655,tcp,147.32.84.164,34558.0,->,81.31.47.106,80.0,FSPA_FSPA,0.0,0.0,15,10087,890,9197,672.4666666666667,0.0882323783087142,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:41.068272,0.000362,udp,147.32.84.164,43206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,73,178,125.5,0.2908366533864542,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:42.116909,3568.670654,udp,147.32.84.229,13363.0,<->,87.96.238.209,32670.0,CON,0.0,0.0,6,3625,3048,577,604.1666666666666,0.8408275862068966,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:58:42.717872,61.297302,tcp,147.32.84.165,2146.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:58:47.038248,0.289585,tcp,147.32.84.170,57299.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:48.814207,3.218071,tcp,147.32.84.170,42599.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,12,3370,670,2700,280.8333333333333,0.19881305637982197,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:58:49.084668,0.000249,udp,147.32.84.164,46838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:49.085238,0.00036,udp,147.32.84.164,56383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:52.110389,0.001702,udp,125.224.236.81,19378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:58:52.846032,610.714661,udp,147.32.84.229,13363.0,<->,95.132.35.91,14594.0,CON,0.0,0.0,4,486,351,135,121.5,0.7222222222222222,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:58:53.332342,0.000186,udp,147.32.84.164,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:53.333006,0.0003,udp,147.32.84.164,50093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,71,217,144.0,0.2465277777777778,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:54.466030,1.868067,tcp,147.32.84.164,57165.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,732,698292,18066,680226,953.9508196721312,0.025871698372600574,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:56.390863,0.000362,udp,147.32.84.164,57814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,71,237,154.0,0.2305194805194805,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:56.390872,0.000503,udp,147.32.84.164,58409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,70,239,154.5,0.22653721682847897,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:56.726715,0.00028,udp,147.32.84.164,36164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:56.727191,0.000378,udp,147.32.84.164,35425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:58:57.734131,0.000182,udp,147.32.85.89,40666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:58:58.339693,1929.023438,udp,147.32.84.94,7103.0,<->,178.22.66.63,7419.0,CON,0.0,0.0,75,60019,58807,1212,800.2533333333333,0.9798063946416968,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:03.588749,64.423164,tcp,147.32.86.17,5902.0,->,69.10.24.213,80.0,SRPA_SPA,0.0,0.0,16,7630,4840,2790,476.875,0.6343381389252949,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:59:03.624027,0.000458,udp,147.32.84.188,46156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:04.510445,0.000219,udp,147.32.84.138,51394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:06.047775,3463.866699,udp,114.32.71.10,2493.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,746,521,225,124.33333333333333,0.6983914209115282,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:06.086518,0.186478,udp,147.32.86.17,39441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,76,253,164.5,0.23100303951367782,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:06.558601,0.010495,tcp,147.32.84.13,39703.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2199,1165,1034,244.33333333333334,0.5297862664847658,17,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 17:59:08.706645,2203.621826,udp,156.26.118.224,15946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1337,739,598,222.83333333333334,0.5527299925205684,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:08.805397,0.000332,udp,147.32.84.13,35627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:08.920986,0.000306,udp,147.32.85.25,47419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:09.407769,0.099781,tcp,147.32.84.164,57167.0,->,146.102.14.10,80.0,FSPA_FSPA,0.0,0.0,14,8314,1169,7145,593.8571428571429,0.14060620639884533,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:12.137419,0.000445,udp,147.32.84.171,39607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:12.165064,0.000252,udp,147.32.84.164,56880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,189,69,120,94.5,0.36507936507936506,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:13.883382,0.000302,udp,147.32.84.138,46234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:15.009843,0.000253,udp,147.32.85.84,43603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:17.398241,0.009956,udp,147.32.84.170,46504.0,<->,82.208.17.206,27015.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.398710,0.033032,udp,147.32.84.170,46504.0,<->,178.63.123.90,27250.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.399013,0.03599,udp,147.32.84.170,46504.0,<->,95.156.251.49,28015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.516321,0.019723,udp,147.32.84.170,46504.0,<->,109.230.226.234,29015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.557918,0.025965,udp,147.32.84.170,46504.0,<->,109.230.246.231,27035.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.569827,0.016751,udp,147.32.84.170,46504.0,<->,94.23.68.246,29438.0,CON,0.0,0.0,2,308,67,241,154.0,0.21753246753246752,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.596810,0.019285,udp,147.32.84.170,46504.0,<->,94.23.67.56,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.597015,0.031032,udp,147.32.84.170,46504.0,<->,94.23.73.16,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.619721,0.0,udp,147.32.84.170,46504.0,->,93.103.245.181,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.619771,0.034245,udp,147.32.84.170,46504.0,<->,84.255.235.251,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.619898,0.023471,udp,147.32.84.170,46504.0,<->,212.232.27.183,33015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.690242,0.026136,udp,147.32.84.170,46504.0,<->,84.113.18.8,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.722380,0.030017,udp,147.32.84.170,46504.0,<->,78.24.190.102,28815.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.722525,0.021252,udp,147.32.84.170,46504.0,<->,91.82.84.110,27015.0,CON,0.0,0.0,2,259,67,192,129.5,0.25868725868725867,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.793834,0.053404,udp,147.32.84.170,46504.0,<->,195.43.185.133,27070.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.793930,0.035583,udp,147.32.84.170,46504.0,<->,95.141.32.17,27016.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.811447,0.043994,udp,147.32.84.170,46504.0,<->,95.141.32.100,27018.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.836723,0.021826,udp,147.32.84.170,46504.0,<->,94.249.152.129,27025.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.836817,0.03774,udp,147.32.84.170,46504.0,<->,217.20.116.16,27015.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.836875,0.030467,udp,147.32.84.170,46504.0,<->,85.195.97.235,27303.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.836927,0.029241,udp,147.32.84.170,46504.0,<->,83.133.126.197,27015.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.933280,0.031001,udp,147.32.84.170,46504.0,<->,85.10.196.51,27019.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.933343,0.032586,udp,147.32.84.170,46504.0,<->,88.198.58.150,27065.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.943476,0.049135,udp,147.32.84.170,46504.0,<->,46.4.45.4,27035.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.943624,0.058965,udp,147.32.84.170,46504.0,<->,46.4.85.38,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:17.943631,0.043828,udp,147.32.84.170,46504.0,<->,178.63.83.75,27115.0,CON,0.0,0.0,2,259,67,192,129.5,0.25868725868725867,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.032470,0.000477,udp,147.32.84.170,56148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.089047,0.034653,udp,147.32.84.170,46504.0,<->,88.198.33.136,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.145405,0.030425,udp,147.32.84.170,46504.0,<->,78.46.60.8,27015.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.185700,0.035085,udp,147.32.84.170,46504.0,<->,78.46.96.236,27027.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.206937,0.049809,udp,147.32.84.170,46504.0,<->,178.63.95.86,27116.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.238771,0.027656,udp,147.32.84.170,46504.0,<->,78.46.17.2,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.238848,0.038413,udp,147.32.84.170,46504.0,<->,188.40.130.141,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.238957,0.028711,udp,147.32.84.170,46504.0,<->,78.46.20.184,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.249763,0.036864,udp,147.32.84.170,46504.0,<->,78.46.73.57,27015.0,CON,0.0,0.0,2,345,67,278,172.5,0.19420289855072465,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.261514,0.030533,udp,147.32.84.170,46504.0,<->,178.63.102.214,27015.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.261577,0.029841,udp,147.32.84.170,46504.0,<->,178.63.60.214,40005.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.372053,0.047807,udp,147.32.84.170,46504.0,<->,46.4.85.38,27016.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.372235,0.031747,udp,147.32.84.170,46504.0,<->,46.4.56.17,27016.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.372361,0.031,udp,147.32.84.170,46504.0,<->,188.40.62.4,31016.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.372368,0.028423,udp,147.32.84.170,46504.0,<->,46.4.63.69,27110.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.475340,0.012016,udp,147.32.84.170,46504.0,<->,89.163.172.154,27072.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.534151,0.028579,udp,147.32.84.170,46504.0,<->,78.138.119.68,7050.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.545141,0.016625,udp,147.32.84.170,46504.0,<->,85.131.247.171,27065.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.565939,0.02267,udp,147.32.84.170,46504.0,<->,84.200.9.180,27015.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.577062,0.029606,udp,147.32.84.170,46504.0,<->,85.131.138.200,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.641375,0.038625,udp,147.32.84.170,46504.0,<->,85.214.236.9,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.669785,0.037208,udp,147.32.84.170,46504.0,<->,85.214.73.177,27015.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.669935,0.038721,udp,147.32.84.170,46504.0,<->,62.75.204.13,27017.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681224,0.061199,udp,147.32.84.170,46504.0,<->,87.150.243.190,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681291,0.035265,udp,147.32.84.170,46504.0,<->,85.25.100.189,27078.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681359,0.027561,udp,147.32.84.170,46504.0,<->,193.192.59.101,27050.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681555,0.020788,udp,147.32.84.170,46504.0,<->,193.192.59.73,27030.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681690,0.023622,udp,147.32.84.170,46504.0,<->,93.186.198.131,65535.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.681749,0.031904,udp,147.32.84.170,46504.0,<->,62.75.152.190,27013.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.791529,0.040382,udp,147.32.84.170,46504.0,<->,85.214.106.110,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.791575,0.028056,udp,147.32.84.170,46504.0,<->,80.190.129.254,27015.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.792011,0.03967,udp,147.32.84.170,46504.0,<->,85.214.252.152,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.792083,0.029028,udp,147.32.84.170,46504.0,<->,62.75.204.20,27015.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.792090,0.023505,udp,147.32.84.170,46504.0,<->,94.154.48.14,27015.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.792158,0.035322,udp,147.32.84.170,46504.0,<->,87.106.35.99,27017.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.911557,0.036019,udp,147.32.84.170,46504.0,<->,62.75.224.49,27017.0,CON,0.0,0.0,2,273,67,206,136.5,0.2454212454212454,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.911667,0.021274,udp,147.32.84.170,46504.0,<->,85.114.156.63,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.911929,0.040718,udp,147.32.84.170,46504.0,<->,85.214.224.42,27315.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.912328,0.038578,udp,147.32.84.170,46504.0,<->,85.214.86.80,27015.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:18.978737,6.931202,tcp,147.32.84.164,60227.0,->,146.102.17.54,80.0,FSPA_FSPA,0.0,0.0,53,39866,1635,38231,752.188679245283,0.04101239151156374,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:19.030758,0.042687,udp,147.32.84.170,46504.0,<->,85.214.238.223,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.030866,0.035103,udp,147.32.84.170,46504.0,<->,87.106.181.124,27015.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.030927,0.033845,udp,147.32.84.170,46504.0,<->,213.203.217.35,27400.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.030995,0.038746,udp,147.32.84.170,46504.0,<->,87.106.37.107,27015.0,CON,0.0,0.0,2,292,67,225,146.0,0.22945205479452055,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.031172,0.032376,udp,147.32.84.170,46504.0,<->,85.25.152.141,25015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.031176,0.033196,udp,147.32.84.170,46504.0,<->,93.186.198.34,27215.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.031205,0.03252,udp,147.32.84.170,46504.0,<->,93.186.198.76,27115.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.031261,0.034369,udp,147.32.84.170,46504.0,<->,176.9.6.166,27035.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.031453,0.03665,udp,147.32.84.170,46504.0,<->,78.47.208.214,27018.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.052276,0.003446,udp,147.32.84.164,34617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,74,130,102.0,0.3627450980392157,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:19.167102,0.03884,udp,147.32.84.170,46504.0,<->,85.214.62.234,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.238792,0.022227,udp,147.32.84.170,46504.0,<->,93.186.198.33,27053.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.238797,0.032311,udp,147.32.84.170,46504.0,<->,84.200.44.250,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.297170,0.032469,udp,147.32.84.170,46504.0,<->,85.25.95.124,27019.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.297237,0.040695,udp,147.32.84.170,46504.0,<->,85.214.26.159,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.341491,0.046672,udp,147.32.84.170,46504.0,<->,85.214.245.18,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.341733,0.017185,udp,147.32.84.170,46504.0,<->,85.131.163.56,28100.0,CON,0.0,0.0,2,281,67,214,140.5,0.23843416370106763,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.341793,0.047865,udp,147.32.84.170,46504.0,<->,85.214.244.116,27045.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.341908,0.039704,udp,147.32.84.170,46504.0,<->,81.89.99.104,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.542194,0.033159,udp,147.32.84.170,46504.0,<->,93.186.198.23,19768.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.553975,0.029793,udp,147.32.84.170,46504.0,<->,85.93.2.105,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.554369,0.011284,udp,147.32.84.170,46504.0,<->,79.141.174.30,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.554439,0.015067,udp,147.32.84.170,46504.0,<->,79.141.174.26,27016.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.650429,0.038585,udp,147.32.84.170,46504.0,<->,79.141.174.28,27046.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.650508,0.009931,udp,147.32.84.170,46504.0,<->,79.141.174.5,27024.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.650612,0.019939,udp,147.32.84.170,46504.0,<->,95.142.75.170,27030.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.664354,0.031962,udp,147.32.84.170,46504.0,<->,79.141.174.28,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.715656,0.013014,udp,147.32.84.170,46504.0,<->,79.141.174.29,27018.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.715722,0.021759,udp,147.32.84.170,46504.0,<->,79.141.174.5,27021.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.761704,0.024427,udp,147.32.84.170,46504.0,<->,194.97.165.139,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.781631,0.01662,udp,147.32.84.170,46504.0,<->,79.141.174.33,27021.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.840555,0.023834,udp,147.32.84.170,46504.0,<->,79.141.174.47,27016.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.840747,0.010298,udp,147.32.84.170,46504.0,<->,79.141.174.27,27040.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.875167,0.034112,udp,147.32.84.170,46504.0,<->,78.46.29.139,27050.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.933579,0.010789,udp,147.32.84.170,46504.0,<->,79.141.174.29,27024.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.945037,0.01758,udp,147.32.84.170,46504.0,<->,89.163.163.235,27105.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:19.975763,0.019708,udp,147.32.84.170,46504.0,<->,79.141.174.26,27027.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.062053,0.012814,udp,147.32.84.170,46504.0,<->,79.141.174.30,27027.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.099381,0.0109,udp,147.32.84.170,46504.0,<->,79.141.174.27,27018.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.112276,0.012785,udp,147.32.84.170,46504.0,<->,79.141.174.32,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.112921,0.055676,udp,147.32.84.170,46504.0,<->,79.161.118.229,27015.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.113138,0.066284,udp,147.32.84.170,46504.0,<->,94.102.47.50,27016.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.113370,0.056972,udp,147.32.84.170,46504.0,<->,85.164.76.221,27015.0,CON,0.0,0.0,2,273,67,206,136.5,0.2454212454212454,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.229995,0.03468,udp,147.32.84.170,46504.0,<->,78.47.199.151,27016.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.230166,0.046849,udp,147.32.84.170,46504.0,<->,87.50.9.69,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.230218,0.0,udp,147.32.84.170,46504.0,->,87.104.89.134,52965.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.230233,0.0,udp,147.32.84.170,46504.0,->,87.104.89.134,11039.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.230309,0.044339,udp,147.32.84.170,46504.0,<->,194.255.97.230,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.230692,0.038355,udp,147.32.84.170,46504.0,<->,93.182.161.26,27074.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.349228,0.038999,udp,147.32.84.170,46504.0,<->,95.80.53.173,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.349234,0.022562,udp,147.32.84.170,46504.0,<->,193.218.154.64,27044.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.349322,0.028284,udp,147.32.84.170,46504.0,<->,188.116.34.78,27091.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.349385,0.040898,udp,147.32.84.170,46504.0,<->,217.210.255.129,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.438885,0.0,udp,147.32.84.170,46504.0,->,89.233.213.205,10802.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.518487,0.039755,udp,147.32.84.170,46504.0,<->,213.112.177.206,27035.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.637810,0.0861,udp,147.32.84.170,46504.0,<->,85.139.221.187,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.678978,0.088544,udp,147.32.84.170,46504.0,<->,82.102.4.184,27033.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.679241,0.07705,udp,147.32.84.170,46504.0,<->,188.93.232.33,37096.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.679370,0.066628,udp,147.32.84.170,46504.0,<->,93.93.64.207,28150.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.759022,0.02884,udp,147.32.84.170,46504.0,<->,178.32.28.188,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.786825,0.0399,udp,147.32.84.170,46504.0,<->,109.239.149.227,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.786907,0.047779,udp,147.32.84.170,46504.0,<->,109.239.146.199,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.787098,0.053846,udp,147.32.84.170,46504.0,<->,109.239.147.173,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.787173,0.040765,udp,147.32.84.170,46504.0,<->,109.239.149.112,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.787291,0.049596,udp,147.32.84.170,46504.0,<->,109.239.146.128,27015.0,CON,0.0,0.0,2,368,67,301,184.0,0.18206521739130435,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.875293,0.030319,udp,147.32.84.170,46504.0,<->,213.251.176.113,27015.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.908627,0.060889,udp,147.32.84.170,46504.0,<->,62.147.244.121,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.976184,0.024999,udp,147.32.84.170,46504.0,<->,77.111.194.94,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:20.998466,0.025865,udp,147.32.84.170,46504.0,<->,188.165.205.120,27022.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.021696,0.028611,udp,147.32.84.170,46504.0,<->,46.105.121.21,27017.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.021751,0.025146,udp,147.32.84.170,46504.0,<->,188.165.193.95,27015.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.127522,0.023908,udp,147.32.84.170,46504.0,<->,77.111.197.111,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.195274,0.046493,udp,147.32.84.170,46504.0,<->,88.190.23.221,27035.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.203018,0.044366,udp,147.32.84.170,46504.0,<->,77.111.212.38,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.239089,0.019691,udp,147.32.84.170,46504.0,<->,77.111.246.249,27015.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.363242,0.0,udp,147.32.84.170,46504.0,->,80.13.222.156,11027.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.363858,0.022419,udp,147.32.84.170,46504.0,<->,178.33.114.103,27060.0,CON,0.0,0.0,2,297,67,230,148.5,0.2255892255892256,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.363982,0.026432,udp,147.32.84.170,46504.0,<->,94.23.254.39,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.493057,0.020167,udp,147.32.84.170,46504.0,<->,178.33.114.104,27860.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.493283,0.03203,udp,147.32.84.170,46504.0,<->,77.111.197.9,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.505554,0.051729,udp,147.32.84.170,46504.0,<->,88.190.15.167,27065.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.571535,0.0,udp,147.32.84.170,46504.0,->,80.13.222.156,10092.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.655057,0.022675,udp,147.32.84.170,46504.0,<->,87.98.159.167,27045.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.655239,0.05241,udp,147.32.84.170,46504.0,<->,88.190.21.129,27016.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.692283,0.027951,udp,147.32.84.170,46504.0,<->,178.33.255.249,27020.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.692287,0.030945,udp,147.32.84.170,46504.0,<->,77.111.202.205,27015.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.692569,0.034103,udp,147.32.84.170,46504.0,<->,77.111.212.31,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.692622,0.024447,udp,147.32.84.170,46504.0,<->,77.111.196.176,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.769556,0.040208,udp,147.32.84.170,46504.0,<->,77.111.217.48,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.788470,0.021678,udp,147.32.84.170,46504.0,<->,46.105.96.37,27150.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.788646,0.041912,udp,147.32.84.170,46504.0,<->,91.191.158.50,27300.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.801911,0.04179,udp,147.32.84.170,46504.0,<->,88.190.15.86,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.802024,0.038303,udp,147.32.84.170,46504.0,<->,88.190.225.214,27018.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.802152,7.821756,udp,147.32.84.170,46504.0,<->,87.98.201.6,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.911672,0.038648,udp,147.32.84.170,46504.0,<->,88.190.228.18,27017.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:21.911764,0.022214,udp,147.32.84.170,46504.0,<->,77.111.198.189,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.016466,0.027031,udp,147.32.84.170,46504.0,<->,188.165.211.23,2025.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.016666,0.027451,udp,147.32.84.170,46504.0,<->,87.98.201.2,27020.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.120039,0.051347,udp,147.32.84.170,46504.0,<->,86.26.47.134,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.120348,0.029359,udp,147.32.84.170,46504.0,<->,81.19.219.97,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.120477,0.028294,udp,147.32.84.170,46504.0,<->,81.19.219.82,27045.0,CON,0.0,0.0,2,285,67,218,142.5,0.23508771929824562,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.180770,0.046553,udp,147.32.84.170,46504.0,<->,217.163.27.181,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.180859,0.038262,udp,147.32.84.170,46504.0,<->,81.19.212.48,27016.0,CON,0.0,0.0,2,292,67,225,146.0,0.22945205479452055,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.222790,0.029867,udp,147.32.84.170,46504.0,<->,94.23.121.8,27016.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.222794,0.03246,udp,147.32.84.170,46504.0,<->,81.19.212.41,27025.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.222834,0.0,udp,147.32.84.170,46504.0,->,195.242.214.34,27024.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.222937,0.033961,udp,147.32.84.170,46504.0,<->,91.227.221.4,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.222949,0.047618,udp,147.32.84.170,46504.0,<->,217.163.22.169,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.328498,0.036238,udp,147.32.84.170,46504.0,<->,91.227.221.1,27016.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.328638,0.031689,udp,147.32.84.170,46504.0,<->,81.19.210.33,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.328769,0.042927,udp,147.32.84.170,46504.0,<->,81.19.219.92,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.405136,0.037603,udp,147.32.84.170,46504.0,<->,81.19.222.34,27015.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.415396,0.039097,udp,147.32.84.170,46504.0,<->,109.70.149.77,27025.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.467380,0.039761,udp,147.32.84.170,46504.0,<->,109.70.147.231,27100.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.514335,0.035655,udp,147.32.84.170,46504.0,<->,217.163.24.117,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.524124,0.035421,udp,147.32.84.170,46504.0,<->,81.19.219.104,27015.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.567075,0.023917,udp,147.32.84.170,46504.0,<->,81.19.212.48,27029.0,CON,0.0,0.0,2,305,67,238,152.5,0.21967213114754097,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.613378,0.031372,udp,147.32.84.170,46504.0,<->,193.200.158.213,27014.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.613477,0.032328,udp,147.32.84.170,46504.0,<->,81.19.212.48,27015.0,CON,0.0,0.0,2,292,67,225,146.0,0.22945205479452055,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.648265,0.026176,udp,147.32.84.170,46504.0,<->,78.129.244.232,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.648385,0.0,udp,147.32.84.170,46504.0,->,94.192.8.127,28016.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766113,0.0,udp,147.32.84.170,46504.0,->,89.238.135.166,27016.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766192,0.120692,udp,147.32.84.170,46504.0,<->,94.136.46.12,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766338,0.058541,udp,147.32.84.170,46504.0,<->,81.201.139.39,27019.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766348,0.040998,udp,147.32.84.170,46504.0,<->,188.94.73.74,27075.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766437,0.125654,udp,147.32.84.170,46504.0,<->,94.136.46.12,27019.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766560,0.0,udp,147.32.84.170,46504.0,->,89.241.225.197,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.766686,0.034686,udp,147.32.84.170,46504.0,<->,109.233.112.150,27019.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.868090,0.040764,udp,147.32.84.170,46504.0,<->,85.234.148.9,27025.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.868434,0.02726,udp,147.32.84.170,46504.0,<->,85.234.148.170,27055.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.976886,0.028951,udp,147.32.84.170,46504.0,<->,87.117.198.37,27015.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.976936,0.036824,udp,147.32.84.170,46504.0,<->,78.129.175.2,27015.0,CON,0.0,0.0,2,288,67,221,144.0,0.2326388888888889,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.976995,0.032955,udp,147.32.84.170,46504.0,<->,92.48.125.116,27015.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:22.977007,0.032346,udp,147.32.84.170,46504.0,<->,78.129.220.160,27030.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.075367,0.00214,udp,147.32.84.164,44634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.078403,0.002029,udp,147.32.84.164,39620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.095942,0.044345,udp,147.32.84.170,46504.0,<->,78.129.220.26,27045.0,CON,0.0,0.0,2,265,67,198,132.5,0.2528301886792453,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.096136,0.027261,udp,147.32.84.170,46504.0,<->,85.234.148.10,27055.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.096186,0.029408,udp,147.32.84.170,46504.0,<->,194.110.243.70,27022.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.248922,22.77372,tcp,147.32.84.164,35546.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,11,1788,860,928,162.54545454545453,0.4809843400447427,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.265102,0.377615,tcp,147.32.84.164,49480.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,11,2895,846,2049,263.1818181818182,0.2922279792746114,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.265620,22.646349,tcp,147.32.84.164,48496.0,->,194.79.55.39,80.0,FSPA_FSPA,0.0,0.0,286,296685,6695,289990,1037.36013986014,0.02256602120093702,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.268669,0.036628,udp,147.32.84.170,46504.0,<->,89.145.94.200,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.300664,0.0,udp,147.32.84.170,46504.0,->,46.64.23.148,65509.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.300887,0.048623,udp,147.32.84.170,46504.0,<->,212.50.160.205,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.301111,0.024046,udp,147.32.84.170,46504.0,<->,92.48.227.149,27015.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.407510,0.029875,udp,147.32.84.170,46504.0,<->,62.67.42.29,27015.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.407710,0.029841,udp,147.32.84.170,46504.0,<->,83.169.4.56,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.408529,0.025432,udp,147.32.84.170,46504.0,<->,217.198.137.218,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.519493,0.029447,udp,147.32.84.170,46504.0,<->,95.211.17.204,27065.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.600660,0.011969,udp,147.32.84.164,32872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,77,156,116.5,0.33047210300429186,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.600669,0.000501,udp,147.32.84.164,44274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.601497,0.000577,udp,147.32.84.164,53850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,75,179,127.0,0.2952755905511811,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.602561,0.002346,udp,147.32.84.164,45621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,80,136,108.0,0.37037037037037035,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.605165,0.000282,udp,147.32.84.164,47411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,80,136,108.0,0.37037037037037035,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.605738,0.002096,udp,147.32.84.164,50235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,80,137,108.5,0.3686635944700461,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.617581,0.000581,udp,147.32.84.164,56829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.623902,0.022008,udp,147.32.84.170,46504.0,<->,217.198.140.65,27015.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.624044,0.023209,udp,147.32.84.170,46504.0,<->,178.21.114.197,27025.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.624059,0.019445,udp,147.32.84.170,46504.0,<->,178.21.116.149,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.624063,0.017975,udp,147.32.84.170,46504.0,<->,83.149.83.160,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.624149,0.023476,udp,147.32.84.170,46504.0,<->,31.171.131.119,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.626055,0.002342,udp,147.32.84.164,34213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.629407,0.000231,udp,147.32.84.164,54785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.644886,0.002196,udp,147.32.84.164,36685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,81,165,123.0,0.32926829268292684,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:23.729154,0.02885,udp,147.32.84.170,46504.0,<->,95.211.17.204,27045.0,CON,0.0,0.0,2,301,67,234,150.5,0.22259136212624583,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.729443,0.019273,udp,147.32.84.170,46504.0,<->,217.19.17.8,27016.0,CON,0.0,0.0,2,282,67,215,141.0,0.2375886524822695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.729815,0.081643,udp,147.32.84.170,46504.0,<->,85.196.7.115,27015.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.860581,0.04339,udp,147.32.84.170,46504.0,<->,77.79.88.48,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.860775,0.075651,udp,147.32.84.170,46504.0,<->,213.128.83.77,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.870687,0.067576,udp,147.32.84.170,46504.0,<->,213.128.83.78,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.870805,0.135293,udp,147.32.84.170,46504.0,<->,62.90.138.114,63886.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:23.997969,0.060385,udp,147.32.84.170,46504.0,<->,82.79.127.126,27016.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.012414,0.046729,udp,147.32.84.170,46504.0,<->,86.107.224.169,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.023351,0.034823,udp,147.32.84.170,46504.0,<->,93.113.3.112,27015.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.023358,0.061065,udp,147.32.84.170,46504.0,<->,188.25.182.16,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.138932,0.105239,udp,147.32.84.170,46504.0,<->,80.80.104.185,27026.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.170564,0.088524,udp,147.32.84.170,46504.0,<->,213.132.72.227,27016.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.171094,0.03325,udp,147.32.84.170,46504.0,<->,178.19.107.242,27820.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.171138,0.059108,udp,147.32.84.170,46504.0,<->,83.14.235.253,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.171145,0.055508,udp,147.32.84.170,46504.0,<->,195.42.112.6,27016.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.171461,0.05796,udp,147.32.84.170,46504.0,<->,195.42.112.6,27078.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.279419,0.036425,udp,147.32.84.170,46504.0,<->,178.19.105.108,27092.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.279667,0.054867,udp,147.32.84.170,46504.0,<->,91.204.161.160,25078.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.279811,0.028822,udp,147.32.84.170,46504.0,<->,178.19.105.210,27066.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.280193,0.054516,udp,147.32.84.170,46504.0,<->,109.235.70.59,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.280267,0.066571,udp,147.32.84.170,46504.0,<->,86.100.200.19,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.413367,0.057409,udp,147.32.84.170,46504.0,<->,109.235.71.26,27015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.413420,0.05624,udp,147.32.84.170,46504.0,<->,193.189.87.242,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.460157,0.054641,udp,147.32.84.170,46504.0,<->,195.244.128.237,2000.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.471700,0.069546,udp,147.32.84.170,46504.0,<->,80.233.160.90,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.496572,0.062293,udp,147.32.84.170,46504.0,<->,83.241.93.25,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.496625,0.052637,udp,147.32.84.170,46504.0,<->,80.232.169.233,27016.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.496715,0.046899,udp,147.32.84.170,46504.0,<->,195.244.128.228,27000.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.496985,0.046793,udp,147.32.84.170,46504.0,<->,217.159.171.199,27017.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.497145,0.063275,udp,147.32.84.170,46504.0,<->,109.232.84.104,27016.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.608113,0.067331,udp,147.32.84.170,46504.0,<->,94.22.66.12,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.681901,0.0,udp,147.32.84.170,46504.0,->,83.219.220.244,55193.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.692829,0.061459,udp,147.32.84.170,46504.0,<->,89.166.50.111,27045.0,CON,0.0,0.0,2,286,67,219,143.0,0.23426573426573427,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.717015,0.0,udp,147.32.84.170,46504.0,->,83.245.240.155,55007.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.717383,0.060098,udp,147.32.84.170,46504.0,<->,89.166.50.111,27015.0,CON,0.0,0.0,2,293,67,226,146.5,0.22866894197952217,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.717438,0.079327,udp,147.32.84.170,46504.0,<->,89.166.50.126,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.717598,0.060775,udp,147.32.84.170,46504.0,<->,62.240.68.98,27014.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.717608,0.075904,udp,147.32.84.170,46504.0,<->,93.190.206.173,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.813448,0.089315,udp,147.32.84.170,46504.0,<->,78.36.207.227,27017.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.824803,0.066243,udp,147.32.84.170,46504.0,<->,77.37.217.73,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.864899,0.069777,udp,147.32.84.170,46504.0,<->,84.51.69.70,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.911680,0.090197,udp,147.32.84.170,46504.0,<->,193.93.236.18,27703.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.911887,0.108218,udp,147.32.84.170,46504.0,<->,78.155.175.33,27031.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.924174,0.075742,udp,147.32.84.170,46504.0,<->,89.207.176.132,27015.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.924187,0.108407,udp,147.32.84.170,46504.0,<->,91.210.46.147,27020.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.924422,0.129492,udp,147.32.84.170,46504.0,<->,95.129.167.74,27020.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.924759,0.055501,udp,147.32.84.170,46504.0,<->,188.134.31.51,27017.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:24.925013,0.117704,udp,147.32.84.170,46504.0,<->,46.146.182.216,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.022166,0.076809,udp,147.32.84.170,46504.0,<->,141.101.142.23,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.102557,0.059005,udp,147.32.84.170,46504.0,<->,85.21.79.225,27017.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.115311,0.063317,udp,147.32.84.170,46504.0,<->,77.50.0.23,27016.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.136957,0.064898,udp,147.32.84.170,46504.0,<->,46.174.48.77,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.137466,0.096461,udp,147.32.84.170,46504.0,<->,77.51.250.103,27045.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.194192,0.079078,udp,147.32.84.170,46504.0,<->,91.122.223.227,27017.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.217027,0.08628,udp,147.32.84.170,46504.0,<->,83.167.65.86,27018.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.237670,0.078135,udp,147.32.84.170,46504.0,<->,85.21.90.5,27015.0,CON,0.0,0.0,2,266,67,199,133.0,0.2518796992481203,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.319972,0.088244,udp,147.32.84.170,46504.0,<->,188.134.10.248,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.345469,0.122159,udp,147.32.84.170,46504.0,<->,109.226.100.55,27015.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.345557,0.0,udp,147.32.84.170,46504.0,->,178.207.18.49,27017.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.345685,0.094431,udp,147.32.84.170,46504.0,<->,88.80.32.32,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.345783,0.109468,udp,147.32.84.170,46504.0,<->,212.220.123.26,27026.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.345862,0.104244,udp,147.32.84.170,46504.0,<->,82.193.150.144,27016.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.346171,0.114438,udp,147.32.84.170,46504.0,<->,212.220.123.26,27027.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.433460,0.158029,udp,147.32.84.170,46504.0,<->,110.93.195.82,1365.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.444618,0.129071,udp,147.32.84.170,46504.0,<->,195.140.180.252,27032.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.470047,0.131594,udp,147.32.84.170,46504.0,<->,77.106.108.169,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.470199,0.147976,udp,147.32.84.170,46504.0,<->,195.112.231.234,27021.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.470301,0.403911,udp,147.32.84.170,46504.0,<->,115.84.182.180,27016.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.470308,0.400639,udp,147.32.84.170,46504.0,<->,115.84.182.180,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.470409,0.695864,udp,147.32.84.170,46504.0,<->,112.213.85.12,28042.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.572288,0.346643,udp,147.32.84.170,46504.0,<->,123.202.223.24,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.572422,0.365818,udp,147.32.84.170,46504.0,<->,113.252.206.177,27017.0,CON,0.0,0.0,2,290,67,223,145.0,0.23103448275862068,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.572624,0.36189,udp,147.32.84.170,46504.0,<->,118.141.34.176,27030.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.572894,0.343188,udp,147.32.84.170,46504.0,<->,123.202.223.24,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.572965,0.3507,udp,147.32.84.170,46504.0,<->,219.87.152.109,27025.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.573104,0.423907,udp,147.32.84.170,46504.0,<->,122.224.6.123,27071.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.708792,0.41405,udp,147.32.84.170,46504.0,<->,61.147.68.204,27035.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.753723,0.362675,udp,147.32.84.170,46504.0,<->,183.101.132.175,27017.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.776419,0.335826,udp,147.32.84.170,46504.0,<->,218.38.171.214,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.776430,0.378492,udp,147.32.84.170,46504.0,<->,180.71.58.99,27035.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.933028,0.310904,udp,147.32.84.170,46504.0,<->,119.230.6.111,27016.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.933031,0.304494,udp,147.32.84.170,46504.0,<->,119.230.6.111,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:25.949498,0.308121,udp,147.32.84.170,46504.0,<->,124.38.189.88,27087.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.082292,0.426108,udp,147.32.84.170,46504.0,<->,121.110.191.56,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.082363,0.328488,udp,147.32.84.170,46504.0,<->,210.229.84.81,27015.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.108793,0.311373,udp,147.32.84.170,46504.0,->,120.51.223.50,1028.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.108798,0.315836,udp,147.32.84.170,46504.0,<->,220.159.3.11,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.126875,0.000243,udp,147.32.84.164,53334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,72,179,125.5,0.2868525896414343,17,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 17:59:26.178995,0.107158,udp,147.32.84.170,46504.0,<->,64.34.183.208,27015.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.201928,0.195198,udp,147.32.84.170,46504.0,<->,66.151.138.34,27015.0,CON,0.0,0.0,2,340,67,273,170.0,0.19705882352941176,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.256981,0.152218,udp,147.32.84.170,46504.0,<->,206.217.133.118,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.365856,0.196495,udp,147.32.84.170,46504.0,<->,208.74.66.20,27032.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.424048,0.164496,udp,147.32.84.170,46504.0,<->,69.162.90.122,19400.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.424317,0.147419,udp,147.32.84.170,46504.0,<->,69.175.33.149,27015.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.482529,0.207817,udp,147.32.84.170,46504.0,<->,209.160.59.171,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.494759,0.0,udp,147.32.84.170,46504.0,->,98.239.115.86,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.494995,0.159777,udp,147.32.84.170,46504.0,<->,68.233.244.130,27016.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.530469,0.215858,udp,147.32.84.170,46504.0,<->,98.119.105.12,27030.0,CON,0.0,0.0,2,320,67,253,160.0,0.209375,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.530655,0.170299,udp,147.32.84.170,46504.0,<->,64.94.101.54,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.619216,0.176358,udp,147.32.84.170,46504.0,<->,66.150.188.45,27015.0,CON,0.0,0.0,2,330,67,263,165.0,0.20303030303030303,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.640691,0.182705,udp,147.32.84.170,46504.0,<->,66.150.188.34,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.641265,0.184458,udp,147.32.84.170,46504.0,<->,66.150.188.90,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.681547,0.000346,udp,147.32.84.170,33517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.741826,0.113515,udp,147.32.84.170,46504.0,<->,64.34.181.27,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.742288,0.134186,udp,147.32.84.170,46504.0,<->,74.91.112.28,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.742561,0.136717,udp,147.32.84.170,46504.0,<->,72.5.195.77,27015.0,CON,0.0,0.0,2,273,67,206,136.5,0.2454212454212454,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.850295,0.19482,udp,147.32.84.170,46504.0,<->,209.90.113.104,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:26.850369,0.184328,udp,147.32.84.170,46504.0,->,208.71.175.219,27016.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.014032,0.128362,udp,147.32.84.170,46504.0,<->,69.160.241.243,27030.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.024757,0.0,udp,147.32.84.170,46504.0,->,38.121.78.66,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.060183,0.14923,udp,147.32.84.170,46504.0,<->,69.162.66.136,27015.0,CON,0.0,0.0,2,347,67,280,173.5,0.1930835734870317,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.060267,0.126879,udp,147.32.84.170,46504.0,<->,69.160.241.246,27015.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.060393,0.195987,udp,147.32.84.170,46504.0,<->,173.236.233.41,27015.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.075279,0.197085,udp,147.32.84.170,46504.0,<->,67.215.234.115,27015.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.139201,0.194076,udp,147.32.84.170,46504.0,<->,209.250.2.117,27015.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.163592,0.183993,udp,147.32.84.170,46504.0,<->,209.250.2.116,27020.0,CON,0.0,0.0,2,285,67,218,142.5,0.23508771929824562,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.206994,0.189995,udp,147.32.84.170,46504.0,<->,70.176.126.87,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.217229,0.187832,udp,147.32.84.170,46504.0,<->,67.138.111.42,27015.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.217248,0.496839,udp,147.32.84.170,46504.0,<->,174.23.246.43,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.239086,0.165918,udp,147.32.84.170,46504.0,<->,67.213.220.117,27015.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.260815,0.210586,udp,147.32.84.170,46504.0,<->,173.241.160.62,27015.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.284722,0.199443,udp,147.32.84.170,46504.0,<->,173.12.190.46,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.284729,0.203788,udp,147.32.84.170,46504.0,<->,128.193.182.190,27016.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.404997,0.203516,udp,147.32.84.170,46504.0,<->,208.64.202.176,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.405051,0.209351,udp,147.32.84.170,46504.0,<->,208.64.202.167,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.405139,0.215465,udp,147.32.84.170,46504.0,<->,208.64.202.216,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.405311,0.210849,udp,147.32.84.170,46504.0,<->,208.64.202.173,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.516317,0.199472,udp,147.32.84.170,46504.0,<->,208.64.202.178,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.531601,0.209508,udp,147.32.84.170,46504.0,<->,208.64.202.180,27018.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.633356,0.211041,udp,147.32.84.170,46504.0,<->,208.64.202.161,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.633515,0.21386,udp,147.32.84.170,46504.0,<->,208.64.202.181,27022.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.705133,0.207306,udp,147.32.84.170,46504.0,<->,208.64.202.146,27027.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.705244,0.215122,udp,147.32.84.170,46504.0,<->,208.64.202.180,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.728590,0.20796,udp,147.32.84.170,46504.0,<->,208.64.202.182,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.738131,0.209718,udp,147.32.84.170,46504.0,<->,208.64.202.208,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.738458,0.211771,udp,147.32.84.170,46504.0,<->,208.64.202.213,27027.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.738518,0.14736,udp,147.32.84.170,46504.0,<->,205.234.152.115,27015.0,CON,0.0,0.0,2,295,67,228,147.5,0.2271186440677966,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.881775,0.209685,udp,147.32.84.170,46504.0,<->,208.64.202.225,27018.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.906860,0.20021,udp,147.32.84.170,46504.0,<->,208.64.202.155,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.965601,0.212278,udp,147.32.84.170,46504.0,<->,208.64.202.225,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.966008,0.200461,udp,147.32.84.170,46504.0,<->,208.64.202.214,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:27.966071,0.212274,udp,147.32.84.170,46504.0,<->,208.64.202.209,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.071788,0.218758,udp,147.32.84.170,46504.0,<->,208.64.202.161,27022.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.071847,0.21622,udp,147.32.84.170,46504.0,<->,208.64.202.216,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.072039,0.203084,udp,147.32.84.170,46504.0,<->,208.64.202.185,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.162150,0.207469,udp,147.32.84.170,46504.0,<->,208.64.202.217,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.162306,0.213062,udp,147.32.84.170,46504.0,<->,208.64.202.144,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.219754,0.196357,udp,147.32.84.170,46504.0,<->,208.64.202.141,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.241682,0.13524,udp,147.32.84.170,46504.0,<->,206.217.133.22,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.241922,0.20882,udp,147.32.84.170,46504.0,<->,208.64.202.183,27016.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.263078,0.209088,udp,147.32.84.170,46504.0,<->,208.64.202.144,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.289331,0.21716,udp,147.32.84.170,46504.0,<->,208.64.202.225,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.289397,0.21736,udp,147.32.84.170,46504.0,<->,208.64.202.159,27018.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.303058,0.213097,udp,147.32.84.170,46504.0,<->,208.64.202.182,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.303113,0.203919,udp,147.32.84.170,46504.0,<->,208.64.202.179,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.392952,0.213484,udp,147.32.84.170,46504.0,<->,208.64.202.174,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.394362,0.210679,udp,147.32.84.170,46504.0,<->,208.64.202.146,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.405919,0.209103,udp,147.32.84.170,46504.0,<->,208.64.202.208,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.406041,0.215045,udp,147.32.84.170,46504.0,<->,208.64.202.182,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.406281,0.211888,udp,147.32.84.170,46504.0,<->,208.64.202.154,27016.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.406380,0.19448,udp,147.32.84.170,46504.0,<->,208.64.202.166,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.406486,0.207797,udp,147.32.84.170,46504.0,<->,208.64.202.179,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.406699,0.210496,udp,147.32.84.170,46504.0,<->,208.64.202.154,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.519699,0.198341,udp,147.32.84.170,46504.0,<->,208.64.202.155,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.519752,0.205446,udp,147.32.84.170,46504.0,<->,208.64.202.166,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.519939,0.209723,udp,147.32.84.170,46504.0,<->,208.64.202.177,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.642286,0.203713,udp,147.32.84.170,46504.0,<->,208.64.202.213,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.642464,0.192482,udp,147.32.84.170,46504.0,<->,208.64.202.178,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.642718,0.218459,udp,147.32.84.170,46504.0,<->,208.64.202.150,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.642925,0.214313,udp,147.32.84.170,46504.0,<->,208.64.202.216,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.747332,0.217839,udp,147.32.84.170,46504.0,<->,208.64.202.158,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.797352,0.192919,udp,147.32.84.170,46504.0,<->,208.64.202.214,27024.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.844374,0.169282,udp,147.32.84.170,46504.0,<->,64.31.27.208,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.844424,0.209052,udp,147.32.84.170,46504.0,<->,208.64.202.225,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.859658,0.193762,udp,147.32.84.170,46504.0,<->,208.64.202.164,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.902586,0.205497,udp,147.32.84.170,46504.0,<->,208.64.202.141,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.912764,0.220598,udp,147.32.84.170,46504.0,<->,173.14.240.153,27015.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.945095,0.221582,udp,147.32.84.170,46504.0,<->,208.64.202.181,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.970746,0.208938,udp,147.32.84.170,46504.0,<->,208.64.202.181,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.970821,0.218174,udp,147.32.84.170,46504.0,<->,208.64.202.158,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.971005,0.219681,udp,147.32.84.170,46504.0,<->,208.64.202.181,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:28.971462,0.201975,udp,147.32.84.170,46504.0,<->,204.15.225.146,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.085469,0.124357,udp,147.32.84.170,46504.0,<->,209.160.21.177,27018.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.085656,0.20512,udp,147.32.84.170,46504.0,<->,208.64.202.176,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.153292,0.217214,udp,147.32.84.170,46504.0,<->,208.64.202.154,27021.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.166277,0.213326,udp,147.32.84.170,46504.0,<->,208.64.202.217,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.197753,0.130315,udp,147.32.84.170,46504.0,<->,209.40.97.234,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.197904,0.214784,udp,147.32.84.170,46504.0,<->,208.64.202.180,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.198121,0.219196,udp,147.32.84.170,46504.0,<->,208.64.202.208,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.198268,0.219385,udp,147.32.84.170,46504.0,<->,208.64.202.180,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.198394,0.212064,udp,147.32.84.170,46504.0,<->,208.64.202.146,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.219289,0.000386,icmp,147.32.87.249,,<-,147.32.87.54,2.0,RED,,0.0,2,148,0,148,74.0,0.0,17,1,flow=Background,Background,-1 2011-08-16 17:59:29.297021,0.094493,udp,147.32.84.170,46504.0,<->,206.217.129.21,27015.0,CON,0.0,0.0,2,290,67,223,145.0,0.23103448275862068,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.311010,0.207197,udp,147.32.84.170,46504.0,<->,208.64.202.151,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.382829,0.208178,udp,147.32.84.170,46504.0,<->,208.64.202.174,27022.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.391528,0.207265,udp,147.32.84.170,46504.0,<->,208.64.202.208,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.405175,0.214563,udp,147.32.84.170,46504.0,<->,208.64.202.209,27021.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.437674,0.219032,udp,147.32.84.170,46504.0,<->,208.64.202.207,27024.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.437973,0.203807,udp,147.32.84.170,46504.0,<->,208.64.202.176,27024.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.547417,0.203313,udp,147.32.84.170,46504.0,<->,208.64.202.178,27027.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.570353,0.193667,udp,147.32.84.170,46504.0,<->,208.64.202.172,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.623425,0.20727,udp,147.32.84.170,46504.0,<->,208.64.202.172,27018.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.635016,0.193739,udp,147.32.84.170,46504.0,<->,208.64.202.172,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.650530,0.207549,udp,147.32.84.170,46504.0,<->,208.64.202.185,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.708370,0.203914,udp,147.32.84.170,46504.0,<->,208.64.202.176,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.708618,0.21103,udp,147.32.84.170,46504.0,<->,208.64.202.203,27027.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.733891,0.22114,udp,147.32.84.170,46504.0,<->,208.64.202.206,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.758108,0.216694,udp,147.32.84.170,46504.0,<->,208.64.202.211,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.820016,0.206726,udp,147.32.84.170,46504.0,<->,208.64.202.161,27016.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.820164,0.213048,udp,147.32.84.170,46504.0,<->,208.64.202.154,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.861284,0.218998,udp,147.32.84.170,46504.0,<->,208.64.202.180,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.861341,0.20137,udp,147.32.84.170,46504.0,<->,208.64.202.175,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.861437,0.193645,udp,147.32.84.170,46504.0,<->,208.64.202.164,27022.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.861559,0.220308,udp,147.32.84.170,46504.0,<->,208.64.202.210,27021.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.861851,0.213114,udp,147.32.84.170,46504.0,<->,208.64.202.209,27022.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.963337,0.094043,udp,147.32.84.170,46504.0,<->,206.217.129.20,27015.0,CON,0.0,0.0,2,292,67,225,146.0,0.22945205479452055,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.963684,0.0,udp,147.32.84.170,46504.0,->,208.77.209.37,27016.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:29.963725,0.168924,udp,147.32.84.170,46504.0,<->,24.64.96.26,27018.0,CON,0.0,0.0,2,329,67,262,164.5,0.20364741641337386,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.192451,0.139448,udp,147.32.84.170,46504.0,<->,65.60.32.30,27015.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.204220,0.168921,udp,147.32.84.170,46504.0,<->,76.187.145.118,27016.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.216055,0.0,udp,147.32.84.170,46504.0,->,208.74.121.102,20021.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.255158,0.0,udp,147.32.84.170,46504.0,->,208.74.121.102,21374.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.255393,0.138117,udp,147.32.84.170,46504.0,<->,99.198.108.171,27016.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.265845,0.142878,udp,147.32.84.170,46504.0,<->,99.198.108.218,27015.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.276300,0.143356,udp,147.32.84.170,46504.0,<->,67.202.71.180,27015.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.343314,0.158846,udp,147.32.84.170,46504.0,<->,74.201.57.103,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.381492,0.164268,udp,147.32.84.170,46504.0,<->,64.31.12.26,27119.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.381737,0.157495,udp,147.32.84.170,46504.0,<->,108.60.207.218,27015.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.381783,0.148589,udp,147.32.84.170,46504.0,<->,67.18.130.18,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.451736,0.149278,udp,147.32.84.170,46504.0,<->,184.173.88.73,27016.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.472692,0.200846,udp,147.32.84.170,46504.0,->,67.228.85.221,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.484593,0.153522,udp,147.32.84.170,46504.0,<->,108.60.204.225,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.484760,0.162371,udp,147.32.84.170,46504.0,<->,69.93.99.13,27017.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.556757,0.152428,udp,147.32.84.170,46504.0,<->,67.222.138.93,27015.0,CON,0.0,0.0,2,310,67,243,155.0,0.2161290322580645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.556770,0.141201,udp,147.32.84.170,46504.0,<->,69.93.99.13,27016.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.576881,0.158357,udp,147.32.84.170,46504.0,<->,75.126.83.201,27015.0,CON,0.0,0.0,2,335,67,268,167.5,0.2,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.596287,0.148069,udp,147.32.84.170,46504.0,<->,50.97.150.114,27016.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.596457,0.158017,udp,147.32.84.170,46504.0,<->,74.201.57.19,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.596511,0.161337,udp,147.32.84.170,46504.0,<->,64.31.12.26,27018.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.596571,0.15791,udp,147.32.84.170,46504.0,<->,70.87.163.146,27015.0,CON,0.0,0.0,2,195,67,128,97.5,0.3435897435897436,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.732789,0.126168,udp,147.32.84.170,46504.0,<->,174.37.239.88,27015.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.745517,0.1465,udp,147.32.84.170,46504.0,<->,216.6.226.140,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.767014,0.0,udp,147.32.84.170,46504.0,->,75.9.53.171,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.783778,0.141654,udp,147.32.84.170,46504.0,<->,69.147.229.163,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.783935,0.163412,udp,147.32.84.170,46504.0,<->,74.201.57.14,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.795330,0.158856,udp,147.32.84.170,46504.0,<->,174.132.227.179,27035.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.805760,0.160921,udp,147.32.84.170,46504.0,<->,75.126.83.195,27015.0,CON,0.0,0.0,2,331,67,264,165.5,0.20241691842900303,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.806227,0.16014,udp,147.32.84.170,46504.0,<->,184.173.88.72,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.806428,0.155594,udp,147.32.84.170,46504.0,<->,64.31.12.26,27117.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.806498,0.166768,udp,147.32.84.170,46504.0,<->,184.173.88.72,27018.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.879061,0.135562,tcp,147.32.86.20,4683.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,32,23840,853,22987,745.0,0.03578020134228188,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:59:30.893927,0.15403,udp,147.32.84.170,46504.0,<->,184.173.88.73,27018.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.990561,0.167221,udp,147.32.84.170,46504.0,<->,64.31.12.26,27016.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.990829,0.175274,udp,147.32.84.170,46504.0,<->,50.97.150.121,27019.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:30.990947,0.157755,udp,147.32.84.170,46504.0,<->,75.126.83.203,27015.0,CON,0.0,0.0,2,354,67,287,177.0,0.18926553672316385,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.013487,0.159419,udp,147.32.84.170,46504.0,<->,66.150.214.92,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.013678,0.14942,udp,147.32.84.170,46504.0,<->,209.236.125.65,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.013747,0.0,udp,147.32.84.170,46504.0,->,70.177.118.67,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.013997,0.157766,udp,147.32.84.170,46504.0,<->,206.123.95.90,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.014124,0.0,udp,147.32.84.170,46504.0,->,71.8.244.166,56880.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.082776,0.000313,udp,147.32.84.138,39467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:31.092793,0.0,udp,147.32.84.170,46504.0,->,71.8.244.166,58683.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.103396,0.151373,udp,147.32.84.170,46504.0,<->,72.5.102.222,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.114087,0.187301,udp,147.32.84.170,46504.0,->,76.210.35.62,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.114171,0.154524,udp,147.32.84.170,46504.0,<->,68.226.58.228,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.114241,0.0,udp,147.32.84.170,46504.0,->,71.8.244.166,53209.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.114361,0.0,udp,147.32.84.170,46504.0,->,71.229.235.14,55050.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.147022,0.0,udp,147.32.84.170,46504.0,->,24.9.211.247,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.176749,0.0,udp,147.32.84.170,46504.0,->,71.8.244.166,50846.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.202459,0.131838,udp,147.32.84.170,46504.0,<->,173.208.180.146,27015.0,CON,0.0,0.0,2,305,67,238,152.5,0.21967213114754097,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.212485,0.15386,udp,147.32.84.170,46504.0,<->,208.100.16.4,27015.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.221227,0.138969,udp,147.32.84.170,46504.0,<->,173.208.180.66,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.221288,0.126129,udp,147.32.84.170,46504.0,<->,69.61.110.70,27015.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.333587,0.128352,udp,147.32.84.170,46504.0,<->,74.119.217.112,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.333698,0.504391,udp,147.32.84.170,46504.0,<->,67.55.158.209,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.333771,0.206527,udp,147.32.84.170,46504.0,<->,70.57.158.237,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.387057,0.149732,udp,147.32.84.170,46504.0,<->,173.243.115.100,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.408427,0.136925,udp,147.32.84.170,46504.0,<->,173.243.115.99,27015.0,CON,0.0,0.0,2,286,67,219,143.0,0.23426573426573427,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.408567,0.152207,udp,147.32.84.170,46504.0,<->,66.158.124.194,27016.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.501060,0.123169,udp,147.32.84.170,46504.0,<->,216.52.148.68,27015.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.544368,0.156027,udp,147.32.84.170,46504.0,<->,204.45.55.46,27018.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.544386,0.132005,udp,147.32.84.170,46504.0,<->,216.52.148.34,27030.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.568430,0.140739,udp,147.32.84.170,46504.0,<->,216.52.143.116,27015.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.618667,0.132447,udp,147.32.84.170,46504.0,<->,75.102.38.137,27015.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.643054,0.132267,udp,147.32.84.170,46504.0,<->,216.52.143.121,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.653313,0.12003,udp,147.32.84.170,46504.0,<->,64.74.97.74,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.765883,0.212848,udp,147.32.84.170,46504.0,<->,173.192.165.135,27015.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.776584,0.157046,udp,147.32.84.170,46504.0,<->,174.36.63.241,27016.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.777099,0.123706,udp,147.32.84.170,46504.0,<->,208.167.246.149,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.828871,0.143512,udp,147.32.84.170,46504.0,<->,208.100.0.129,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.841056,0.129866,udp,147.32.84.170,46504.0,<->,216.52.148.44,27020.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.871359,0.136811,udp,147.32.84.170,46504.0,<->,216.52.143.236,27015.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.880795,0.126341,udp,147.32.84.170,46504.0,<->,74.63.81.76,27016.0,CON,0.0,0.0,2,272,67,205,136.0,0.24632352941176472,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.881154,0.139619,udp,147.32.84.170,46504.0,<->,75.102.38.225,27015.0,CON,0.0,0.0,2,269,67,202,134.5,0.24907063197026022,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:31.998319,0.122693,udp,147.32.84.170,46504.0,<->,75.102.47.55,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.050072,0.137678,udp,147.32.84.170,46504.0,<->,209.212.144.158,27315.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.080451,0.163224,udp,147.32.84.170,46504.0,<->,184.58.149.210,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.106209,0.146684,udp,147.32.84.170,46504.0,<->,208.64.38.57,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.106471,0.200846,udp,147.32.84.170,46504.0,<->,69.90.189.241,27016.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.171903,0.221782,udp,147.32.84.170,46504.0,<->,173.244.195.220,27015.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.172031,0.129058,udp,147.32.84.170,46504.0,<->,206.217.132.237,27016.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.180197,0.170625,udp,147.32.84.170,46504.0,<->,72.184.232.248,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.208856,0.128966,udp,147.32.84.170,46504.0,<->,64.94.238.69,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.308229,0.135594,udp,147.32.84.170,46504.0,<->,64.94.238.151,28019.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.320621,0.126396,udp,147.32.84.170,46504.0,<->,74.119.147.100,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.320746,0.1327,udp,147.32.84.170,46504.0,<->,206.220.173.243,27016.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.320762,0.139934,udp,147.32.84.170,46504.0,<->,64.94.238.194,27015.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.320800,0.118271,udp,147.32.84.170,46504.0,<->,72.5.152.81,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.320938,0.133899,udp,147.32.84.170,46504.0,<->,72.5.86.173,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.321166,0.128202,udp,147.32.84.170,46504.0,<->,72.5.86.121,27016.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.321300,0.135476,udp,147.32.84.170,46504.0,<->,69.172.242.180,27019.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.355130,0.000249,udp,147.32.84.138,55303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:32.424129,0.17439,udp,147.32.84.170,46504.0,<->,98.211.8.181,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.470564,0.133949,udp,147.32.84.170,46504.0,<->,69.61.61.26,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.529190,0.121647,udp,147.32.84.170,46504.0,<->,173.242.116.151,27018.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.529246,0.121224,udp,147.32.84.170,46504.0,<->,173.242.116.151,27016.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.529252,0.135513,udp,147.32.84.170,46504.0,<->,173.242.115.136,27115.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.529378,0.120332,udp,147.32.84.170,46504.0,<->,173.242.116.122,27117.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.620586,0.118553,udp,147.32.84.170,46504.0,<->,173.242.124.62,27016.0,CON,0.0,0.0,2,300,67,233,150.0,0.22333333333333333,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.620591,0.122923,udp,147.32.84.170,46504.0,<->,173.242.116.151,27017.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.634000,0.129702,udp,147.32.84.170,46504.0,<->,173.242.116.122,27118.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.634370,0.13284,udp,147.32.84.170,46504.0,<->,68.232.183.52,27015.0,CON,0.0,0.0,2,273,67,206,136.5,0.2454212454212454,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.634432,0.14476,udp,147.32.84.170,46504.0,<->,173.72.136.126,27015.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.742785,0.124651,udp,147.32.84.170,46504.0,<->,69.175.89.141,27015.0,CON,0.0,0.0,2,266,67,199,133.0,0.2518796992481203,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.828089,0.139339,udp,147.32.84.170,46504.0,<->,68.177.101.24,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.828151,0.12613,udp,147.32.84.170,46504.0,<->,68.177.101.10,27018.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.839285,0.138561,udp,147.32.84.170,46504.0,<->,68.177.101.22,27038.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.864691,0.125517,udp,147.32.84.170,46504.0,<->,68.177.101.18,27044.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.905872,0.126585,udp,147.32.84.170,46504.0,<->,68.177.101.22,27018.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.906021,0.132024,udp,147.32.84.170,46504.0,<->,68.177.101.11,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.959889,0.127124,udp,147.32.84.170,46504.0,<->,68.177.101.22,27025.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.985642,0.129843,udp,147.32.84.170,46504.0,<->,68.177.101.18,27027.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.985779,0.126877,udp,147.32.84.170,46504.0,<->,68.177.101.16,27024.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:32.985848,0.125739,udp,147.32.84.170,46504.0,<->,68.177.101.26,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.088626,0.134578,udp,147.32.84.170,46504.0,<->,68.177.101.24,27018.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.146934,0.127861,udp,147.32.84.170,46504.0,<->,68.177.101.24,27029.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.192146,0.124021,udp,147.32.84.170,46504.0,<->,68.177.101.46,27044.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.192216,0.127736,udp,147.32.84.170,46504.0,<->,68.177.101.46,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.192291,0.12707,udp,147.32.84.170,46504.0,<->,68.177.101.31,27021.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.305663,9.003907,tcp,147.32.87.38,52838.0,->,95.168.205.38,25.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,17,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 17:59:33.313177,0.137558,udp,147.32.84.170,46504.0,<->,68.177.101.11,27022.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313190,0.130207,udp,147.32.84.170,46504.0,<->,68.177.101.23,27018.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313307,0.12429,udp,147.32.84.170,46504.0,<->,68.177.101.24,27016.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313430,0.13105,udp,147.32.84.170,46504.0,<->,68.177.101.24,27027.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313519,0.126654,udp,147.32.84.170,46504.0,<->,68.177.101.31,27045.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313597,0.131143,udp,147.32.84.170,46504.0,<->,68.177.101.31,27018.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.313884,0.130428,udp,147.32.84.170,46504.0,<->,68.177.101.49,27024.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.410868,0.12416,udp,147.32.84.170,46504.0,<->,68.177.101.22,27017.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.430548,0.134838,udp,147.32.84.170,46504.0,<->,68.177.101.23,27029.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.533544,0.109825,udp,147.32.84.170,46504.0,<->,66.150.121.240,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.533809,0.130208,udp,147.32.84.170,46504.0,<->,68.177.101.49,27016.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.533911,0.139978,udp,147.32.84.170,46504.0,<->,68.177.101.31,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.533961,0.127864,udp,147.32.84.170,46504.0,<->,68.177.101.46,27042.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534032,0.127687,udp,147.32.84.170,46504.0,<->,68.177.101.22,27019.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534144,0.136019,udp,147.32.84.170,46504.0,<->,68.177.101.23,27017.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534151,0.139098,udp,147.32.84.170,46504.0,<->,68.177.101.27,27024.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534264,0.129248,udp,147.32.84.170,46504.0,<->,68.177.101.39,27027.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534314,0.196435,udp,147.32.84.170,46504.0,<->,72.178.6.197,27015.0,CON,0.0,0.0,2,192,67,125,96.0,0.3489583333333333,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.534504,0.117391,udp,147.32.84.170,46504.0,<->,69.65.109.116,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.719171,0.122747,udp,147.32.84.170,46504.0,<->,208.167.243.229,27015.0,CON,0.0,0.0,2,195,67,128,97.5,0.3435897435897436,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.740893,0.140009,udp,147.32.84.170,46504.0,<->,8.6.74.219,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.780588,0.126852,udp,147.32.84.170,46504.0,<->,63.146.183.17,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.807434,0.137289,udp,147.32.84.170,46504.0,<->,63.146.183.17,27017.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.849283,0.159312,udp,147.32.84.170,46504.0,<->,208.115.218.36,27015.0,CON,0.0,0.0,2,316,67,249,158.0,0.2120253164556962,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.849437,0.133938,udp,147.32.84.170,46504.0,<->,63.146.183.19,27016.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.891898,0.160255,udp,147.32.84.170,46504.0,<->,207.210.222.145,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.927572,0.181611,udp,147.32.84.170,46504.0,<->,8.6.2.179,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:33.927749,0.188826,udp,147.32.84.170,46504.0,<->,209.247.83.66,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.004381,0.186982,udp,147.32.84.170,46504.0,<->,8.17.251.164,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.016501,0.179208,udp,147.32.84.170,46504.0,<->,72.233.56.4,27017.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.064407,0.147612,udp,147.32.84.170,46504.0,<->,63.210.145.203,27015.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.064702,0.198989,udp,147.32.84.170,46504.0,<->,173.234.253.18,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.064909,0.139644,udp,147.32.84.170,46504.0,<->,208.86.251.36,27015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.065030,0.128514,udp,147.32.84.170,46504.0,<->,63.146.183.17,27038.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.130074,0.130767,udp,147.32.84.170,46504.0,<->,63.146.183.19,27025.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.154106,0.144189,udp,147.32.84.170,46504.0,<->,205.234.152.82,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.154300,0.151549,udp,147.32.84.170,46504.0,<->,72.233.56.3,27017.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.165685,0.15129,udp,147.32.84.170,46504.0,<->,207.210.222.141,27016.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.165744,0.147244,udp,147.32.84.170,46504.0,<->,66.192.196.18,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.166361,0.129717,udp,147.32.84.170,46504.0,<->,173.234.61.19,28006.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.166497,0.194587,udp,147.32.84.170,46504.0,<->,8.6.3.196,27015.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.264286,0.116105,udp,147.32.84.170,46504.0,<->,216.6.235.127,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.287112,0.187301,udp,147.32.84.170,46504.0,<->,8.17.250.115,27015.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.364048,0.135622,udp,147.32.84.170,46504.0,<->,63.146.183.19,27017.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.387359,0.208572,udp,147.32.84.170,46504.0,<->,173.55.89.48,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.387534,0.134243,udp,147.32.84.170,46504.0,<->,63.146.183.17,27025.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.387905,0.139506,udp,147.32.84.170,46504.0,<->,63.146.183.19,27038.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.387963,0.113613,udp,147.32.84.170,46504.0,<->,208.167.242.165,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.497102,0.187781,udp,147.32.84.170,46504.0,<->,67.215.247.101,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.509924,0.193228,udp,147.32.84.170,46504.0,<->,8.3.6.105,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.529942,0.122924,udp,147.32.84.170,46504.0,<->,173.234.61.19,28004.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.542613,0.131053,udp,147.32.84.170,46504.0,<->,63.146.183.9,27017.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.552604,0.152497,udp,147.32.84.170,46504.0,<->,207.210.222.139,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.572571,0.149226,udp,147.32.84.170,46504.0,<->,206.123.66.25,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.617821,0.136176,udp,147.32.84.170,46504.0,<->,63.146.183.17,27029.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.618429,0.185479,udp,147.32.84.170,46504.0,<->,8.17.251.163,27015.0,CON,0.0,0.0,2,353,67,286,176.5,0.18980169971671387,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.696679,0.105906,udp,147.32.84.170,46504.0,<->,208.167.242.42,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.696787,0.116979,udp,147.32.84.170,46504.0,<->,199.15.252.189,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.769554,0.111629,udp,147.32.84.170,46504.0,<->,208.167.243.111,27016.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.791636,0.10965,udp,147.32.84.170,46504.0,<->,173.212.214.28,27015.0,CON,0.0,0.0,2,286,67,219,143.0,0.23426573426573427,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.791753,0.198692,udp,147.32.84.170,46504.0,<->,63.208.142.122,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.815704,0.1051,udp,147.32.84.170,46504.0,<->,8.2.121.222,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.838335,0.120703,udp,147.32.84.170,46504.0,<->,174.34.139.101,27015.0,CON,0.0,0.0,2,269,67,202,134.5,0.24907063197026022,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.895481,0.139888,udp,147.32.84.170,46504.0,<->,64.120.22.142,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.907037,0.188042,udp,147.32.84.170,46504.0,<->,8.6.15.83,27015.0,CON,0.0,0.0,2,355,67,288,177.5,0.18873239436619718,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.939561,0.178,udp,147.32.84.170,46504.0,<->,8.6.193.106,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.940138,0.209515,udp,147.32.84.170,46504.0,<->,205.185.123.78,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.940215,0.190542,udp,147.32.84.170,46504.0,<->,38.105.22.114,27025.0,CON,0.0,0.0,2,302,67,235,151.0,0.22185430463576158,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.940602,0.130419,udp,147.32.84.170,46504.0,<->,173.234.61.23,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.940918,0.159127,udp,147.32.84.170,46504.0,<->,8.12.64.227,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:34.941001,0.129498,udp,147.32.84.170,46504.0,<->,173.234.61.19,28002.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.056531,0.202099,udp,147.32.84.170,46504.0,<->,63.208.142.123,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.105380,0.134178,udp,147.32.84.170,46504.0,<->,174.34.158.194,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.116777,0.110602,udp,147.32.84.170,46504.0,<->,64.34.175.184,27015.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.144345,0.130305,udp,147.32.84.170,46504.0,<->,216.231.128.34,27019.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.157032,0.130516,udp,147.32.84.170,46504.0,<->,64.120.126.53,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.157421,0.149758,udp,147.32.84.170,46504.0,<->,76.181.73.148,27015.0,CON,0.0,0.0,2,192,67,125,96.0,0.3489583333333333,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.233469,0.150813,udp,147.32.84.170,46504.0,<->,99.119.150.185,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.280053,0.138295,udp,147.32.84.170,46504.0,<->,208.64.38.53,27019.0,CON,0.0,0.0,2,320,67,253,160.0,0.209375,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.280118,0.163011,udp,147.32.84.170,46504.0,<->,64.31.28.37,27025.0,CON,0.0,0.0,2,278,67,211,139.0,0.24100719424460432,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.376578,0.160855,udp,147.32.84.170,46504.0,<->,64.31.28.34,27035.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.376679,0.161795,udp,147.32.84.170,46504.0,<->,64.31.28.34,27025.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.400526,0.139269,udp,147.32.84.170,46504.0,<->,174.34.146.113,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.400587,0.148635,udp,147.32.84.170,46504.0,<->,74.119.219.115,27015.0,CON,0.0,0.0,2,291,67,224,145.5,0.23024054982817868,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.501587,0.135608,udp,147.32.84.170,46504.0,<->,68.232.168.16,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.501727,0.155223,udp,147.32.84.170,46504.0,<->,71.74.128.162,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.501995,0.178379,udp,147.32.84.170,46504.0,<->,68.232.164.112,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.502197,0.151765,udp,147.32.84.170,46504.0,<->,68.232.174.143,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.502451,0.146787,udp,147.32.84.170,46504.0,<->,68.232.172.49,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.606978,0.140741,udp,147.32.84.170,46504.0,<->,68.232.172.209,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.660958,0.137433,udp,147.32.84.170,46504.0,<->,68.232.172.156,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.712933,0.155487,udp,147.32.84.170,46504.0,<->,68.232.163.55,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.713123,0.158277,udp,147.32.84.170,46504.0,<->,68.232.166.198,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.803032,0.1611,udp,147.32.84.170,46504.0,<->,68.232.163.36,27015.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.803165,0.157488,udp,147.32.84.170,46504.0,<->,68.232.161.80,27015.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.803226,0.170783,udp,147.32.84.170,46504.0,<->,68.232.166.66,27015.0,CON,0.0,0.0,2,198,67,131,99.0,0.3383838383838384,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.814535,0.165087,udp,147.32.84.170,46504.0,<->,68.232.161.212,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.814622,0.15972,udp,147.32.84.170,46504.0,<->,68.232.161.51,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.815216,0.132082,udp,147.32.84.170,46504.0,<->,46.21.154.184,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.916284,0.229181,udp,147.32.84.170,46504.0,<->,74.95.12.233,27015.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.976261,0.0,udp,147.32.84.170,46504.0,->,184.56.245.255,27018.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.976496,0.147365,udp,147.32.84.170,46504.0,<->,68.232.181.49,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:35.995396,0.135554,udp,147.32.84.170,46504.0,<->,68.232.179.11,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.049051,0.138346,udp,147.32.84.170,46504.0,<->,68.232.181.185,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.072945,0.14163,udp,147.32.84.170,46504.0,<->,68.232.179.191,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.073077,0.142165,udp,147.32.84.170,46504.0,<->,68.232.178.56,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.073211,0.146878,udp,147.32.84.170,46504.0,<->,68.232.179.16,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.104283,0.140157,udp,147.32.84.170,46504.0,<->,68.232.184.164,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.214582,0.194621,udp,147.32.84.170,46504.0,<->,173.163.134.237,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.238610,0.153846,udp,147.32.84.170,46504.0,<->,69.13.38.153,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.238722,0.181784,udp,147.32.84.170,46504.0,<->,173.255.211.234,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.238733,0.15297,udp,147.32.84.170,46504.0,<->,8.12.20.13,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.238822,0.103652,udp,147.32.84.170,46504.0,<->,66.55.137.167,27015.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.405034,0.10634,udp,147.32.84.170,46504.0,<->,216.155.146.52,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.405217,0.148054,udp,147.32.84.170,46504.0,<->,8.9.15.132,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.511685,0.118838,udp,147.32.84.170,46504.0,<->,70.42.74.139,27055.0,CON,0.0,0.0,2,327,67,260,163.5,0.20489296636085627,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.538518,0.115454,udp,147.32.84.170,46504.0,<->,64.237.38.22,27015.0,CON,0.0,0.0,2,302,67,235,151.0,0.22185430463576158,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.538655,0.114189,udp,147.32.84.170,46504.0,<->,63.251.20.227,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.627756,0.113336,udp,147.32.84.170,46504.0,<->,70.42.74.139,27070.0,CON,0.0,0.0,2,340,67,273,170.0,0.19705882352941176,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.641017,0.107975,udp,147.32.84.170,46504.0,<->,63.251.20.161,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.655332,0.129079,udp,147.32.84.170,46504.0,<->,96.255.36.92,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.669353,0.129691,udp,147.32.84.170,46504.0,<->,207.228.233.24,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.682884,0.000512,udp,147.32.84.170,37962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.683903,0.000317,udp,147.32.84.170,35483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.747980,0.173781,udp,147.32.84.170,46504.0,<->,64.94.100.58,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.748209,0.117065,udp,147.32.84.170,46504.0,<->,66.55.131.197,27015.0,CON,0.0,0.0,2,195,67,128,97.5,0.3435897435897436,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.760377,0.096795,udp,147.32.84.170,46504.0,<->,74.63.54.69,27015.0,CON,0.0,0.0,2,195,67,128,97.5,0.3435897435897436,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.760458,0.108196,udp,147.32.84.170,46504.0,<->,70.42.74.8,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.773177,0.109612,udp,147.32.84.170,46504.0,<->,63.251.20.151,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.837988,0.098231,udp,147.32.84.170,46504.0,<->,64.237.39.212,27015.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.848661,0.137956,udp,147.32.84.170,46504.0,<->,8.6.76.222,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.859120,0.117307,udp,147.32.84.170,46504.0,<->,70.42.74.59,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:36.984996,0.202269,udp,147.32.84.170,46504.0,<->,209.31.179.138,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.016160,0.182218,udp,147.32.84.170,46504.0,<->,208.93.153.70,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.027663,0.152103,udp,147.32.84.170,46504.0,<->,173.242.127.42,27015.0,CON,0.0,0.0,2,326,67,259,163.0,0.20552147239263804,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.047619,0.111382,udp,147.32.84.170,46504.0,<->,199.168.142.4,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.047829,0.119092,udp,147.32.84.170,46504.0,<->,199.115.228.122,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.092614,0.112202,udp,147.32.84.170,46504.0,<->,72.55.174.18,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.092619,0.0,udp,147.32.84.170,46504.0,->,199.83.137.98,65454.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.092761,0.0,udp,147.32.84.170,46504.0,->,199.83.137.98,57243.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.092772,0.0,udp,147.32.84.170,46504.0,->,199.83.137.98,4366.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.183801,0.163534,udp,147.32.84.170,46504.0,<->,74.86.88.26,27015.0,CON,0.0,0.0,2,335,67,268,167.5,0.2,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.184027,0.148068,udp,147.32.84.170,46504.0,<->,173.203.101.164,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.226336,0.159465,udp,147.32.84.170,46504.0,<->,174.140.172.96,27016.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.258688,0.161228,udp,147.32.84.170,46504.0,<->,174.140.172.167,27016.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.280410,0.139178,udp,147.32.84.170,46504.0,<->,142.166.88.22,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.280530,0.287557,udp,147.32.84.170,46504.0,<->,201.238.235.233,25510.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.301709,0.361819,udp,147.32.84.170,46504.0,<->,200.1.19.45,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.301794,0.0,udp,147.32.84.170,46504.0,->,190.47.250.80,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302061,0.203174,udp,147.32.84.170,46504.0,<->,190.12.72.60,27151.0,CON,0.0,0.0,2,201,67,134,100.5,0.3333333333333333,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302080,0.26327,udp,147.32.84.170,46504.0,<->,190.210.92.16,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302083,0.280973,udp,147.32.84.170,46504.0,<->,190.210.25.40,27019.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302123,0.27426,udp,147.32.84.170,46504.0,<->,190.246.64.207,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302189,0.26908,udp,147.32.84.170,46504.0,<->,190.210.92.16,27018.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.302238,0.262497,udp,147.32.84.170,46504.0,<->,190.210.92.16,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.403712,0.258892,udp,147.32.84.170,46504.0,<->,189.1.164.17,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.403784,0.249284,udp,147.32.84.170,46504.0,<->,201.48.140.179,27035.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.403893,0.268116,udp,147.32.84.170,46504.0,<->,189.1.162.62,27017.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.404147,0.276887,udp,147.32.84.170,46504.0,<->,189.1.162.62,27016.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.475879,0.262189,udp,147.32.84.170,46504.0,<->,200.195.169.181,27080.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.495327,0.253243,udp,147.32.84.170,46504.0,<->,189.1.161.149,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.495377,0.257763,udp,147.32.84.170,46504.0,<->,200.195.169.181,27070.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.508707,0.259378,udp,147.32.84.170,46504.0,<->,189.112.176.190,27036.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.595747,0.236894,udp,147.32.84.170,46504.0,<->,196.4.79.8,27017.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.616574,0.239197,udp,147.32.84.170,46504.0,<->,196.4.79.20,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.616622,0.442612,udp,147.32.84.170,46504.0,<->,58.6.13.102,27016.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.662381,0.434844,udp,147.32.84.170,46504.0,<->,58.6.13.110,27015.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.795751,0.368422,udp,147.32.84.170,46504.0,<->,203.26.94.103,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.806321,0.357791,udp,147.32.84.170,46504.0,<->,203.14.173.209,27016.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.826285,0.349335,udp,147.32.84.170,46504.0,<->,203.14.173.236,27016.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.839549,0.336075,udp,147.32.84.170,46504.0,<->,203.14.173.235,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.869148,0.418005,udp,147.32.84.170,46504.0,<->,150.101.172.77,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.881088,0.437552,udp,147.32.84.170,46504.0,<->,150.101.172.67,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.881092,0.351713,udp,147.32.84.170,46504.0,<->,119.17.160.226,27015.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:37.990832,0.354146,udp,147.32.84.170,46504.0,<->,203.217.24.85,27017.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.020197,0.185046,udp,147.32.84.138,41084.0,<->,169.229.70.95,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,17,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 17:59:38.025104,0.356084,udp,147.32.84.170,46504.0,<->,59.167.241.66,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.069114,0.337597,udp,147.32.84.170,46504.0,<->,59.167.241.74,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.085061,0.335277,udp,147.32.84.170,46504.0,<->,203.217.24.89,27016.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.143510,0.367673,udp,147.32.84.170,46504.0,<->,59.167.241.42,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.143658,0.334498,udp,147.32.84.170,46504.0,<->,59.167.241.64,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.171028,0.344029,udp,147.32.84.170,46504.0,<->,59.167.241.41,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.184862,0.35768,udp,147.32.84.170,46504.0,<->,59.167.241.67,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.210343,0.352356,udp,147.32.84.170,46504.0,<->,203.217.24.85,27015.0,CON,0.0,0.0,2,270,67,203,135.0,0.24814814814814815,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.258337,0.359398,udp,147.32.84.170,46504.0,<->,59.167.241.40,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.268793,0.364389,udp,147.32.84.170,46504.0,<->,150.101.183.170,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.493012,0.390268,udp,147.32.84.170,46504.0,<->,203.150.228.177,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.517852,0.403461,udp,147.32.84.170,46504.0,<->,203.150.228.177,27016.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.556717,0.298616,udp,147.32.84.170,46504.0,<->,119.56.61.85,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.579161,0.406613,udp,147.32.84.170,46504.0,<->,123.100.233.14,27055.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.605396,0.350136,udp,147.32.84.170,46504.0,<->,180.210.201.227,27099.0,CON,0.0,0.0,2,272,67,205,136.0,0.24632352941176472,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.641263,0.404587,udp,147.32.84.170,46504.0,<->,123.100.233.11,27050.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.652661,0.39581,udp,147.32.84.170,46504.0,<->,123.100.233.111,27045.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.696601,0.348504,udp,147.32.84.170,46504.0,->,122.52.210.50,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:38.744167,0.408424,udp,147.32.84.170,46504.0,<->,125.5.114.150,27020.0,CON,0.0,0.0,2,259,67,192,129.5,0.25868725868725867,17,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:39.799619,0.001704,udp,93.139.238.192,52667.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:41.699374,0.000401,udp,147.32.84.170,43201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:41.699526,0.000256,udp,147.32.84.170,41813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:43.584943,61.298428,tcp,147.32.84.165,2147.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,17,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 17:59:43.878521,0.207314,tcp,147.32.86.20,4692.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,31911,1089,30822,778.3170731707318,0.03412616339193381,17,1,flow=Background-TCP-Established,Background,-1 2011-08-16 17:59:43.910722,0.000673,udp,147.32.84.59,42316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:45.026907,0.000373,udp,147.32.84.59,34357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:45.349549,0.000218,udp,147.32.84.59,58600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:48.753206,0.000275,udp,147.32.86.20,55449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,17,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 17:59:49.036593,0.284071,tcp,147.32.84.170,57308.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:54.430865,464.257843,udp,61.227.120.134,27794.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:56.358508,0.255809,udp,147.32.84.229,13363.0,<->,187.20.188.65,22365.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,17,0,flow=Background-UDP-Established,Background,-1 2011-08-16 17:59:56.682960,0.00991,udp,147.32.84.170,35995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 17:59:56.693382,0.000302,udp,147.32.84.170,57833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,17,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:00.231951,0.000454,udp,147.32.84.19,41672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,541,79,462,270.5,0.14602587800369685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:01.472984,0.000355,udp,147.32.87.36,44329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,18,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 18:00:01.770502,0.000541,udp,147.32.85.34,51642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:02.168723,0.82122,tcp,147.32.84.164,55917.0,->,72.165.61.190,27035.0,FSPA_FSPA,0.0,0.0,11,1089,413,676,99.0,0.379247015610652,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:02.785777,0.82587,tcp,147.32.84.164,39823.0,->,72.165.61.190,27030.0,FSPA_FSPA,0.0,0.0,11,784,413,371,71.27272727272727,0.5267857142857143,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:02.946001,0.001791,udp,206.47.201.188,47026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:03.406124,0.743672,tcp,147.32.84.164,39060.0,->,69.28.151.178,27033.0,FSPA_FSPA,0.0,0.0,11,934,433,501,84.9090909090909,0.46359743040685225,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:04.291008,0.826062,tcp,147.32.84.164,55921.0,->,72.165.61.190,27035.0,FSPA_FSPA,0.0,0.0,11,1089,413,676,99.0,0.379247015610652,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:04.302466,0.002407,udp,147.32.85.76,51692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:06.395901,0.000237,udp,147.32.84.138,33866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:06.543910,0.46348,tcp,147.32.86.111,34294.0,->,62.44.29.56,110.0,SRPA_FSPA,0.0,0.0,47,11292,2136,9156,240.25531914893617,0.1891604675876727,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:00:06.683171,0.000434,udp,147.32.84.170,36098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:06.685360,0.018627,tcp,147.32.84.170,40886.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:07.357541,0.694429,tcp,147.32.84.164,54776.0,->,202.190.75.100,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:10.744067,0.000393,udp,147.32.84.170,41145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:10.746429,3.312019,tcp,147.32.84.170,37161.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,14,2920,788,2132,208.57142857142858,0.26986301369863014,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:11.901669,0.000209,udp,147.32.84.59,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:13.807962,0.016736,udp,147.32.84.164,57501.0,<->,81.171.115.8,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:13.807966,0.019097,udp,147.32.84.164,57501.0,<->,81.171.115.6,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:13.808500,0.113587,udp,147.32.84.164,57501.0,<->,68.142.83.181,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:13.858256,0.185959,udp,147.32.84.164,57501.0,<->,68.142.64.164,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:13.907553,0.205669,udp,147.32.84.164,57501.0,<->,72.165.61.174,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:13.957859,0.112653,udp,147.32.84.164,57501.0,<->,208.111.133.84,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:14.007695,0.020165,udp,147.32.84.164,57501.0,<->,81.171.115.7,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:14.072261,2076.976074,udp,24.29.49.188,17624.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:14.158145,0.129863,udp,147.32.84.164,57501.0,<->,208.111.171.82,27017.0,CON,0.0,0.0,2,164,78,86,82.0,0.47560975609756095,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:16.683969,0.000282,udp,147.32.84.170,43124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:16.685083,0.017975,tcp,147.32.84.170,49361.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:23.934746,0.00058,udp,99.69.75.9,5110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:24.128007,410.064484,udp,147.32.84.94,7103.0,->,178.195.134.33,7448.0,INT,0.0,,8,672,672,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:00:25.031881,0.000303,udp,147.32.84.138,54646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:26.683216,0.000251,udp,147.32.84.170,59176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:26.684012,0.000275,udp,147.32.84.170,45569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:33.051336,0.000284,udp,147.32.84.170,46032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:35.012162,0.000432,udp,147.32.84.164,60182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,80,164,122.0,0.32786885245901637,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:37.624201,0.000215,udp,147.32.85.25,51439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:40.848613,0.020247,udp,147.32.84.59,41057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,83,165,124.0,0.3346774193548387,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:41.063416,0.000609,udp,213.39.238.135,52040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:41.605030,0.000692,udp,95.28.10.252,22114.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:44.452818,61.298355,tcp,147.32.84.165,2148.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:00:44.469382,0.743993,tcp,147.32.84.164,48424.0,->,69.28.151.178,27033.0,FSPA_FSPA,0.0,0.0,11,938,437,501,85.27272727272727,0.46588486140724944,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:46.682687,0.000404,udp,147.32.84.170,60905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:47.257582,0.000285,udp,147.32.86.20,63554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:00:49.082886,3.969136,tcp,147.32.84.170,51387.0,->,87.248.202.150,80.0,FSPA_FSPA,0.0,0.0,13,2818,722,2096,216.76923076923077,0.25621007806955287,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:51.036034,0.000351,udp,147.32.84.170,44703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:51.038218,0.274385,tcp,147.32.84.170,33649.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:51.080705,0.01328,tcp,147.32.84.164,33227.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:00:54.309975,0.000676,udp,109.122.165.242,8080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,74,464,269.0,0.137546468401487,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:00:56.582420,0.183261,udp,147.32.84.170,60508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,80,140,110.0,0.36363636363636365,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:56.766547,0.198679,udp,147.32.84.170,47019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,80,164,122.0,0.32786885245901637,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:00:56.968121,9.808401,tcp,147.32.84.170,44848.0,->,63.228.223.103,80.0,FSPA_FSPA,0.0,0.0,11,1386,822,564,126.0,0.5930735930735931,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:03.531225,0.000233,udp,147.32.84.138,54020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:04.912852,10.163397,tcp,147.32.84.164,58472.0,->,87.248.202.133,80.0,FSPA_FSPA,0.0,0.0,12,1888,839,1049,157.33333333333334,0.444385593220339,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:05.168299,0.000222,udp,147.32.84.164,47190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,80,184,132.0,0.30303030303030304,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:05.946634,0.000554,udp,147.32.86.20,63557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:06.623232,0.018717,udp,147.32.84.170,35343.0,<->,79.141.174.26,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:06.624622,0.017801,udp,147.32.84.170,46262.0,<->,79.141.174.26,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:06.625116,0.018095,udp,147.32.84.170,36184.0,<->,79.141.174.26,27015.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:09.084162,0.622458,tcp,147.32.84.170,44852.0,->,63.228.223.103,80.0,FSPA_FSPA,0.0,0.0,10,1404,931,473,140.4,0.6631054131054132,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:09.114584,0.000313,udp,147.32.84.170,45667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:09.129809,240.446716,tcp,147.32.84.170,43285.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,39,21016,1813,19203,538.8717948717949,0.08626760563380281,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:09.672783,0.061338,tcp,147.32.84.170,41000.0,->,87.248.202.133,80.0,FSPA_FSPA,0.0,0.0,12,1391,860,531,115.91666666666667,0.6182602444284687,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:11.015998,0.026335,tcp,147.32.84.170,55107.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,10,1268,861,407,126.8,0.6790220820189274,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:11.385855,0.00187,udp,89.112.10.12,11640.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:13.615843,781.889465,udp,58.173.67.149,31020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2102,1862,240,262.75,0.8858230256898192,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:16.283746,0.000201,udp,147.32.84.164,54806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,80,140,110.0,0.36363636363636365,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:16.399385,8.948009,tcp,147.32.84.164,48530.0,->,68.232.34.223,80.0,FSPA_FSRPA,0.0,0.0,96,97577,2180,95397,1016.4270833333334,0.02234133043647581,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:16.399893,8.947245,tcp,147.32.84.164,48533.0,->,68.232.34.223,80.0,FSPA_FSRPA,0.0,0.0,78,70623,2136,68487,905.4230769230769,0.030245104286139076,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:16.402165,0.029976,udp,147.32.84.164,47382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,419,77,342,209.5,0.18377088305489261,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:16.485590,0.000181,udp,147.32.84.164,36125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.072357,0.000411,udp,147.32.84.164,48444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.072924,0.00196,udp,147.32.84.164,45766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,461,74,387,230.5,0.16052060737527116,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.075671,308.281769,tcp,147.32.84.164,58138.0,->,195.113.232.83,80.0,FSPA_FSPA,0.0,0.0,26,18864,1564,17300,725.5384615384615,0.08290924512298559,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.142884,0.000803,udp,77.48.233.137,56032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:17.143519,0.000293,udp,147.32.84.164,59965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,74,203,138.5,0.26714801444043323,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.146873,308.21109,tcp,147.32.84.164,37016.0,->,195.113.232.91,80.0,FSPA_FSPA,0.0,0.0,27,21236,1069,20167,786.5185185185185,0.05033904690148804,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:17.174611,0.000366,udp,147.32.84.164,48000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:21.776249,0.0,udp,147.32.84.94,7103.0,->,77.56.73.44,7226.0,INT,0.0,,1,84,84,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:01:23.823231,0.17019,tcp,147.32.86.20,4762.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,65,60751,1393,59358,934.6307692307693,0.022929663709239354,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:01:27.198145,0.000246,udp,147.32.84.59,61004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:27.349554,0.332748,udp,147.32.84.229,13363.0,<->,114.43.237.251,18511.0,CON,0.0,0.0,4,3021,60,2961,755.25,0.019860973187686197,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:30.322818,0.000278,udp,147.32.86.20,49678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:31.197742,0.013443,tcp,147.32.84.164,33248.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:01:31.604290,0.000317,udp,147.32.84.138,60659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:32.961619,0.429575,udp,178.1.196.29,55764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,261,189,72,130.5,0.7241379310344828,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:33.829821,6.520915,tcp,66.249.72.237,49216.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,38,21047,1892,19155,553.8684210526316,0.08989404665748088,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:01:34.532137,0.00031,udp,147.32.84.138,43908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:36.682985,0.000353,udp,147.32.84.170,50929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:36.683785,0.000362,udp,147.32.84.170,48737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:40.107219,63.121445,udp,91.87.217.67,13086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,254,134,120,63.5,0.5275590551181102,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:45.320794,61.283775,tcp,147.32.84.165,2149.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:01:48.833341,0.001779,udp,31.9.45.197,54648.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:52.759009,0.000294,udp,147.32.85.89,36398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:53.026156,0.000713,udp,92.105.194.226,49263.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:01:53.035082,0.000237,udp,147.32.84.170,59910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:01:56.447706,0.000216,udp,147.32.84.138,45266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:01:56.683786,0.000358,udp,147.32.84.170,56039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:01.779505,240.518661,tcp,147.32.84.162,53333.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,23,5662,4017,1645,246.17391304347825,0.7094666195690569,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:02:01.832329,0.000281,udp,147.32.85.34,55132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:04.441663,21.35438,tcp,147.32.84.59,54652.0,->,89.185.245.2,80.0,SRPA_FSPA,0.0,0.0,23,14308,1772,12536,622.0869565217391,0.12384679899357003,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:02:05.653829,0.827726,tcp,147.32.84.164,51825.0,->,72.165.61.190,27035.0,FSPA_FSPA,0.0,0.0,11,1089,413,676,99.0,0.379247015610652,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:06.278469,0.74624,tcp,147.32.84.164,48453.0,->,69.28.151.178,27033.0,FSPA_FSPA,0.0,0.0,11,934,433,501,84.9090909090909,0.46359743040685225,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:06.682907,0.000348,udp,147.32.84.170,37411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:08.355974,9.049605,tcp,88.35.244.137,26712.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,516,198,318,64.5,0.38372093023255816,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:02:10.577791,3403.913086,udp,81.61.65.129,27587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1441,1069,372,120.08333333333333,0.7418459403192228,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:02:16.985204,0.000823,udp,109.47.246.38,58415.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,64,246,155.0,0.2064516129032258,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:02:17.330620,0.007103,udp,147.32.84.164,40506.0,<->,81.0.206.198,27100.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.330898,0.003748,udp,147.32.84.164,40506.0,<->,194.8.253.16,27060.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.330944,0.010116,udp,147.32.84.164,40506.0,<->,81.0.217.177,27023.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.387124,0.029268,udp,147.32.84.164,40506.0,<->,94.23.73.211,27017.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.387248,0.020825,udp,147.32.84.164,40506.0,<->,94.23.67.56,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.387298,0.034361,udp,147.32.84.164,40506.0,<->,94.36.123.233,27055.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.404733,0.029687,udp,147.32.84.164,40506.0,<->,84.255.235.251,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.404739,0.028184,udp,147.32.84.164,40506.0,<->,193.95.241.17,27016.0,CON,0.0,0.0,2,270,67,203,135.0,0.24814814814814815,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.404795,0.023098,udp,147.32.84.164,40506.0,<->,212.232.27.183,33016.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.404799,0.007577,udp,147.32.84.164,40506.0,<->,78.142.142.16,27015.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.419252,0.037576,udp,147.32.84.164,40506.0,<->,87.229.77.24,27025.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.433796,0.03239,udp,147.32.84.164,40506.0,<->,87.229.103.7,27016.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.433805,0.02303,udp,147.32.84.164,40506.0,<->,91.82.84.110,27015.0,CON,0.0,0.0,2,259,67,192,129.5,0.25868725868725867,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.434077,0.035224,udp,147.32.84.164,40506.0,<->,85.10.196.51,27019.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.434081,0.031741,udp,147.32.84.164,40506.0,<->,88.198.58.150,27065.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.434125,0.030089,udp,147.32.84.164,40506.0,<->,46.4.65.120,27010.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.491828,0.033587,udp,147.32.84.164,40506.0,<->,46.4.99.5,27060.0,CON,0.0,0.0,2,345,67,278,172.5,0.19420289855072465,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.508375,0.307783,udp,147.32.84.164,40506.0,<->,78.46.88.101,27026.0,CON,0.0,0.0,2,302,67,235,151.0,0.22185430463576158,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539413,0.044295,udp,147.32.84.164,40506.0,<->,213.239.199.100,27035.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539418,0.032694,udp,147.32.84.164,40506.0,<->,78.46.17.2,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539613,0.0341,udp,147.32.84.164,40506.0,<->,78.46.20.184,27015.0,CON,0.0,0.0,2,276,67,209,138.0,0.2427536231884058,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539672,0.04034,udp,147.32.84.164,40506.0,<->,88.198.69.251,27015.0,CON,0.0,0.0,2,343,67,276,171.5,0.19533527696793002,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539683,0.039477,udp,147.32.84.164,40506.0,<->,88.198.26.172,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.539795,0.032321,udp,147.32.84.164,40506.0,<->,46.4.58.23,27015.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.596989,0.02846,udp,147.32.84.164,40506.0,<->,78.46.60.8,27015.0,CON,0.0,0.0,2,196,67,129,98.0,0.34183673469387754,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.613209,0.029912,udp,147.32.84.164,40506.0,<->,78.47.169.54,27017.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.613238,0.013041,udp,147.32.84.164,40506.0,<->,85.14.228.40,27015.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.613341,0.009617,udp,147.32.84.164,40506.0,<->,89.163.174.18,27035.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.641835,0.030066,udp,147.32.84.164,40506.0,<->,195.4.104.48,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.641915,0.037628,udp,147.32.84.164,40506.0,<->,80.252.111.180,27016.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.641968,0.021932,udp,147.32.84.164,40506.0,<->,79.141.174.26,27025.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.687060,0.012185,udp,147.32.84.164,40506.0,<->,79.141.174.28,27045.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.701505,0.012458,udp,147.32.84.164,40506.0,<->,79.141.174.26,27045.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.732986,0.041385,udp,147.32.84.164,40506.0,<->,194.255.97.230,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.733093,0.044069,udp,147.32.84.164,40506.0,<->,95.80.53.173,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746536,0.079038,udp,147.32.84.164,40506.0,<->,84.211.243.159,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746626,0.048982,udp,147.32.84.164,40506.0,<->,79.160.53.138,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746702,0.060163,udp,147.32.84.164,40506.0,<->,85.164.76.221,27015.0,CON,0.0,0.0,2,273,67,206,136.5,0.2454212454212454,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746751,0.035734,udp,147.32.84.164,40506.0,<->,85.214.24.208,27025.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746819,0.027934,udp,147.32.84.164,40506.0,<->,93.186.196.82,27280.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746893,0.046755,udp,147.32.84.164,40506.0,<->,85.214.58.193,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746912,0.033167,udp,147.32.84.164,40506.0,<->,85.214.233.12,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746916,0.033171,udp,147.32.84.164,40506.0,<->,93.186.198.23,19768.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.746945,0.0395,udp,147.32.84.164,40506.0,<->,85.25.100.189,27078.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.810174,0.039229,udp,147.32.84.164,40506.0,<->,85.214.252.30,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.823850,0.026205,udp,147.32.84.164,40506.0,<->,91.198.152.107,27015.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.823912,0.028997,udp,147.32.84.164,40506.0,<->,84.200.241.44,27090.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.823978,0.033329,udp,147.32.84.164,40506.0,<->,62.75.210.25,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.824017,0.032678,udp,147.32.84.164,40506.0,<->,85.214.148.38,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.838205,0.034164,udp,147.32.84.164,40506.0,<->,84.200.49.207,27015.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.852236,0.040372,udp,147.32.84.164,40506.0,<->,84.38.64.217,27015.0,CON,0.0,0.0,2,201,67,134,100.5,0.3333333333333333,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.852325,0.032505,udp,147.32.84.164,40506.0,<->,81.169.141.216,27015.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.852430,0.059496,udp,147.32.84.164,40506.0,<->,94.127.16.56,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.900138,0.034203,udp,147.32.84.164,40506.0,<->,85.25.152.141,25015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.900144,0.031064,udp,147.32.84.164,40506.0,<->,83.142.85.202,27600.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.900149,0.021753,udp,147.32.84.164,40506.0,<->,93.186.198.76,27115.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.900188,0.028435,udp,147.32.84.164,40506.0,<->,176.9.6.166,27025.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.927437,0.040249,udp,147.32.84.164,40506.0,<->,85.214.246.206,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.945008,0.026585,udp,147.32.84.164,40506.0,<->,193.192.59.181,27015.0,CON,0.0,0.0,2,331,67,264,165.5,0.20241691842900303,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.945092,0.034727,udp,147.32.84.164,40506.0,<->,188.138.101.4,27115.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.945098,0.039528,udp,147.32.84.164,40506.0,<->,91.206.142.29,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959224,0.017425,udp,147.32.84.164,40506.0,<->,78.143.37.102,27017.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959331,0.026744,udp,147.32.84.164,40506.0,<->,62.141.39.195,27016.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959344,0.038915,udp,147.32.84.164,40506.0,<->,188.138.92.37,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959443,0.031526,udp,147.32.84.164,40506.0,<->,46.163.104.244,27016.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959497,0.028796,udp,147.32.84.164,40506.0,<->,217.114.214.131,27045.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959502,0.044166,udp,147.32.84.164,40506.0,<->,85.214.224.42,27315.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959506,0.033734,udp,147.32.84.164,40506.0,<->,93.186.198.24,27415.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959556,0.029446,udp,147.32.84.164,40506.0,<->,62.75.163.110,27015.0,CON,0.0,0.0,2,195,67,128,97.5,0.3435897435897436,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959615,0.037131,udp,147.32.84.164,40506.0,<->,93.182.161.26,27086.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959654,0.033835,udp,147.32.84.164,40506.0,<->,78.47.199.151,27016.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959659,0.032475,udp,147.32.84.164,40506.0,<->,93.182.161.26,27077.0,CON,0.0,0.0,2,285,67,218,142.5,0.23508771929824562,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959763,0.032161,udp,147.32.84.164,40506.0,<->,195.114.0.124,27030.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:17.959778,0.0,udp,147.32.84.164,40506.0,->,212.181.32.162,24535.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.048552,0.040205,udp,147.32.84.164,40506.0,<->,213.115.35.108,27016.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.048559,0.059662,udp,147.32.84.164,40506.0,<->,79.138.20.94,27016.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.061892,0.038579,udp,147.32.84.164,40506.0,<->,79.136.32.111,27015.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.093245,0.044208,udp,147.32.84.164,40506.0,<->,80.67.2.138,27016.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.093315,0.048778,udp,147.32.84.164,40506.0,<->,92.42.153.199,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.106631,0.057626,udp,147.32.84.164,40506.0,<->,87.96.235.67,27015.0,CON,0.0,0.0,2,281,67,214,140.5,0.23843416370106763,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.124131,0.067715,udp,147.32.84.164,40506.0,<->,93.93.64.207,28150.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.138213,0.0,udp,147.32.84.164,40506.0,->,46.22.103.23,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.138381,0.033163,udp,147.32.84.164,40506.0,<->,91.227.221.10,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.153046,0.031193,udp,147.32.84.164,40506.0,<->,178.79.142.70,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.153177,0.048592,udp,147.32.84.164,40506.0,<->,217.163.24.117,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.167564,0.019664,udp,147.32.84.164,40506.0,<->,178.32.52.191,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.167624,0.03023,udp,147.32.84.164,40506.0,<->,109.70.149.93,27015.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.167721,0.040903,udp,147.32.84.164,40506.0,<->,109.70.149.15,27017.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.167785,0.03343,udp,147.32.84.164,40506.0,<->,81.19.211.28,27095.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.167825,0.032085,udp,147.32.84.164,40506.0,<->,193.200.158.102,27016.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.215537,0.02383,udp,147.32.84.164,40506.0,<->,178.79.132.165,27015.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.215541,0.042578,udp,147.32.84.164,40506.0,<->,91.227.221.1,27016.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.229055,0.033893,udp,147.32.84.164,40506.0,<->,81.19.210.42,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.242518,0.03137,udp,147.32.84.164,40506.0,<->,109.70.149.184,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.260018,0.043877,udp,147.32.84.164,40506.0,<->,46.20.120.31,27015.0,CON,0.0,0.0,2,290,67,223,145.0,0.23103448275862068,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.273892,0.027425,udp,147.32.84.164,40506.0,<->,81.19.212.34,27065.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.273923,0.038422,udp,147.32.84.164,40506.0,<->,81.19.219.92,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.304740,0.032218,udp,147.32.84.164,40506.0,<->,217.146.86.125,27015.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.304788,0.033747,udp,147.32.84.164,40506.0,<->,109.233.112.150,27019.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.304848,0.030952,udp,147.32.84.164,40506.0,<->,213.5.176.150,27017.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.318333,0.045361,udp,147.32.84.164,40506.0,<->,84.45.84.166,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.334423,0.000767,udp,190.144.80.214,2245.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,75,464,269.5,0.1391465677179963,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:02:18.349916,0.04424,udp,147.32.84.164,40506.0,<->,85.234.136.94,27019.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.363931,0.041384,udp,147.32.84.164,40506.0,<->,85.234.148.10,27055.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.363938,0.031793,udp,147.32.84.164,40506.0,<->,78.129.220.26,28025.0,CON,0.0,0.0,2,266,67,199,133.0,0.2518796992481203,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.377357,0.073318,udp,147.32.84.164,40506.0,<->,81.109.254.206,27015.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.409032,0.036954,udp,147.32.84.164,40506.0,<->,89.145.117.36,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.409111,0.052201,udp,147.32.84.164,40506.0,<->,213.166.18.214,27075.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.422838,0.033898,udp,147.32.84.164,40506.0,<->,217.163.25.175,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.422845,0.02722,udp,147.32.84.164,40506.0,<->,89.145.71.77,27015.0,CON,0.0,0.0,2,194,67,127,97.0,0.34536082474226804,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.422889,0.025146,udp,147.32.84.164,40506.0,<->,85.13.254.51,13013.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.422954,0.049614,udp,147.32.84.164,40506.0,<->,217.163.25.216,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.435905,0.038338,udp,147.32.84.164,40506.0,<->,89.238.135.166,27016.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.435993,0.116037,udp,147.32.84.164,40506.0,<->,94.136.46.5,27017.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.453626,0.040076,udp,147.32.84.164,40506.0,<->,158.125.100.3,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.467799,0.039593,udp,147.32.84.164,40506.0,<->,109.239.149.99,27015.0,CON,0.0,0.0,2,201,67,134,100.5,0.3333333333333333,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.467887,0.043337,udp,147.32.84.164,40506.0,<->,109.239.146.223,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.467923,0.02227,udp,147.32.84.164,40506.0,<->,87.98.201.6,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.481887,0.028446,udp,147.32.84.164,40506.0,<->,94.23.219.76,27015.0,CON,0.0,0.0,2,278,67,211,139.0,0.24100719424460432,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.481894,0.045384,udp,147.32.84.164,40506.0,<->,46.18.92.104,27015.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.482058,0.040846,udp,147.32.84.164,40506.0,<->,88.191.92.35,30010.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.514412,0.037812,udp,147.32.84.164,40506.0,<->,88.190.15.186,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.528041,0.020361,udp,147.32.84.164,40506.0,<->,87.98.189.194,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.528315,0.045428,udp,147.32.84.164,40506.0,<->,88.190.226.98,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.528416,0.031636,udp,147.32.84.164,40506.0,<->,77.111.205.2,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.558283,0.041192,udp,147.32.84.164,40506.0,<->,91.191.158.181,27015.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.575532,0.017818,udp,147.32.84.164,40506.0,<->,91.121.134.25,27016.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589161,0.026455,udp,147.32.84.164,40506.0,<->,91.121.58.128,27016.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589165,0.022703,udp,147.32.84.164,40506.0,<->,188.165.212.47,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589353,0.026082,udp,147.32.84.164,40506.0,<->,77.111.197.9,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589412,0.025131,udp,147.32.84.164,40506.0,<->,94.23.227.163,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589459,0.043276,udp,147.32.84.164,40506.0,<->,88.190.15.236,27016.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589465,0.016938,udp,147.32.84.164,40506.0,<->,178.32.230.248,27027.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589577,0.022285,udp,147.32.84.164,40506.0,<->,94.23.227.13,28015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589735,0.02498,udp,147.32.84.164,40506.0,<->,188.165.211.23,2010.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589742,0.023789,udp,147.32.84.164,40506.0,<->,77.111.243.208,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.589873,0.024265,udp,147.32.84.164,40506.0,<->,77.111.195.218,27015.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.634515,0.0,icmp,93.31.233.69,771.0,->,147.32.84.164,34665.0,URP,0.0,,1,95,95,0,95.0,1.0,18,0,flow=To-Background-Grill,Background,-1 2011-08-16 18:02:18.662810,0.046488,udp,147.32.84.164,40506.0,<->,88.190.23.221,27035.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.671543,63.500721,tcp,213.146.189.237,34524.0,->,147.32.86.44,80.0,FSPA_FSPA,0.0,0.0,50,5566,2894,2672,111.32,0.5199425080848006,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:02:18.679665,0.04104,udp,147.32.84.164,40506.0,<->,88.191.137.64,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.679781,0.01895,udp,147.32.84.164,40506.0,<->,77.111.192.225,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.679841,0.030672,udp,147.32.84.164,40506.0,<->,91.191.158.50,27300.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.693853,0.02784,udp,147.32.84.164,40506.0,<->,46.105.104.142,27017.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.693945,0.0,udp,147.32.84.164,40506.0,->,193.141.117.242,40669.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.741459,0.029382,udp,147.32.84.164,40506.0,<->,83.169.34.245,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.754437,0.023484,udp,147.32.84.164,40506.0,<->,87.238.173.140,27015.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.754443,0.021717,udp,147.32.84.164,40506.0,<->,87.238.173.165,20200.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.754571,0.030783,udp,147.32.84.164,40506.0,<->,85.190.38.239,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.754657,0.027623,udp,147.32.84.164,40506.0,<->,213.152.170.154,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.784510,0.024984,udp,147.32.84.164,40506.0,<->,85.236.109.70,27815.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.784566,0.024289,udp,147.32.84.164,40506.0,<->,85.17.60.102,27035.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.801689,0.030097,udp,147.32.84.164,40506.0,<->,178.21.116.149,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.801846,0.030098,udp,147.32.84.164,40506.0,<->,82.72.41.38,27015.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.801889,0.070683,udp,147.32.84.164,40506.0,<->,93.187.201.51,27023.0,CON,0.0,0.0,2,266,67,199,133.0,0.2518796992481203,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.801939,0.037947,udp,147.32.84.164,40506.0,<->,77.79.88.48,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.802149,0.100837,udp,147.32.84.164,40506.0,<->,213.8.254.148,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.874136,0.123292,udp,147.32.84.164,40506.0,<->,62.90.138.114,63886.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.874143,0.168238,udp,147.32.84.164,40506.0,<->,86.51.173.31,27015.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.874187,0.163119,udp,147.32.84.164,40506.0,<->,195.226.228.26,27016.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.874241,0.079479,udp,147.32.84.164,40506.0,<->,212.68.62.67,27015.0,CON,0.0,0.0,2,272,67,205,136.0,0.24632352941176472,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.887515,0.099716,udp,147.32.84.164,40506.0,<->,89.232.63.156,27035.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.887569,0.011457,udp,147.32.84.164,40506.0,<->,195.184.9.73,27045.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.887573,0.050571,udp,147.32.84.164,40506.0,<->,89.44.246.133,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.904538,0.045752,udp,147.32.84.164,40506.0,<->,94.176.163.58,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.904557,0.036999,udp,147.32.84.164,40506.0,<->,178.19.105.210,27066.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.904690,0.045172,udp,147.32.84.164,40506.0,<->,81.18.194.44,27014.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.904859,0.053017,udp,147.32.84.164,40506.0,<->,77.79.214.104,27112.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.963342,0.086192,udp,147.32.84.164,40506.0,<->,195.208.224.74,27024.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.978000,0.058767,udp,147.32.84.164,40506.0,<->,83.241.93.63,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.997228,0.05759,udp,147.32.84.164,40506.0,<->,82.193.87.14,1301.0,CON,0.0,0.0,2,292,67,225,146.0,0.22945205479452055,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:18.997234,0.063266,udp,147.32.84.164,40506.0,<->,195.244.128.228,27000.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.006931,0.067031,udp,147.32.84.164,40506.0,<->,86.100.200.19,27015.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.007238,0.069607,udp,147.32.84.164,40506.0,<->,94.22.66.12,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.038287,0.06071,udp,147.32.84.164,40506.0,<->,88.83.33.253,27017.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.038297,0.051915,udp,147.32.84.164,40506.0,<->,217.159.171.199,27017.0,CON,0.0,0.0,2,206,67,139,103.0,0.32524271844660196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.057215,0.062375,udp,147.32.84.164,40506.0,<->,85.188.1.165,27015.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.069707,0.065232,udp,147.32.84.164,40506.0,<->,89.166.50.126,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.069760,0.092059,udp,147.32.84.164,40506.0,<->,93.190.206.173,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.069766,0.058531,udp,147.32.84.164,40506.0,<->,212.116.42.8,27025.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.069891,0.068671,udp,147.32.84.164,40506.0,<->,80.93.176.243,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.084446,0.173736,udp,147.32.84.164,40506.0,<->,188.191.168.12,28045.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.084452,0.05949,udp,147.32.84.164,40506.0,<->,46.174.48.23,27289.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.084516,0.08463,udp,147.32.84.164,40506.0,<->,78.25.155.118,27018.0,CON,0.0,0.0,2,295,67,228,147.5,0.2271186440677966,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.100845,0.079576,udp,147.32.84.164,40506.0,<->,188.130.240.6,27018.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.100851,0.100239,udp,147.32.84.164,40506.0,<->,83.167.65.86,27016.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.101043,0.068636,udp,147.32.84.164,40506.0,<->,212.76.142.50,27192.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.113210,0.056476,udp,147.32.84.164,40506.0,<->,93.157.232.84,27018.0,CON,0.0,0.0,2,281,67,214,140.5,0.23843416370106763,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.113214,0.607822,udp,147.32.84.164,40506.0,<->,213.128.31.208,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.142991,0.065886,udp,147.32.84.164,40506.0,<->,77.50.0.23,27016.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.158196,0.087332,udp,147.32.84.164,40506.0,<->,193.93.236.18,27703.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.174525,0.056848,udp,147.32.84.164,40506.0,<->,46.242.48.227,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.174628,0.070551,udp,147.32.84.164,40506.0,<->,85.21.79.195,27019.0,CON,0.0,0.0,2,264,67,197,132.0,0.2537878787878788,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.174676,0.083827,udp,147.32.84.164,40506.0,<->,193.93.236.18,27702.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.190704,0.203655,udp,147.32.84.164,40506.0,<->,89.232.131.86,27020.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.218445,0.0,udp,147.32.84.164,40506.0,->,86.96.195.49,33542.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.253841,0.12393,udp,147.32.84.164,40506.0,<->,178.91.120.26,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.253983,0.393015,udp,147.32.84.164,40506.0,<->,115.84.182.180,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.253987,0.422251,udp,147.32.84.164,40506.0,<->,112.213.85.12,28041.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.254045,0.151836,udp,147.32.84.164,40506.0,<->,195.140.180.252,27032.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.266037,0.128797,udp,147.32.84.164,40506.0,<->,178.49.25.32,27020.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.266211,0.130892,udp,147.32.84.164,40506.0,<->,88.204.75.150,27017.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.278078,0.14245,udp,147.32.84.164,40506.0,<->,212.75.210.71,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.384265,0.338341,udp,147.32.84.164,40506.0,<->,219.87.152.100,27026.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.384331,0.348057,udp,147.32.84.164,40506.0,<->,219.87.152.109,27025.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.398194,0.414312,udp,147.32.84.164,40506.0,<->,122.224.6.123,27070.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.398307,0.432601,udp,147.32.84.164,40506.0,<->,61.147.68.204,27036.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.412950,0.373208,udp,147.32.84.164,40506.0,<->,175.194.37.103,27016.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.446062,0.370655,udp,147.32.84.164,40506.0,<->,175.194.37.103,27015.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.549640,0.306988,udp,147.32.84.164,40506.0,<->,119.230.6.111,27016.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.640275,0.322048,udp,147.32.84.164,40506.0,<->,119.230.6.111,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.667320,0.329074,udp,147.32.84.164,40506.0,<->,124.38.189.88,27085.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.727969,0.316706,udp,147.32.84.164,40506.0,<->,182.48.34.146,27041.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.728009,0.168984,udp,147.32.84.164,40506.0,<->,69.162.90.122,17900.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.744444,0.138703,udp,147.32.84.164,40506.0,<->,69.175.33.149,27015.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.775077,0.14399,udp,147.32.84.164,40506.0,<->,184.154.146.117,27015.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.788676,0.135164,udp,147.32.84.164,40506.0,<->,198.104.138.69,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.788683,0.190417,udp,147.32.84.164,40506.0,<->,8.3.5.169,27015.0,CON,0.0,0.0,2,213,67,146,106.5,0.3145539906103286,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.788742,0.200988,udp,147.32.84.164,40506.0,<->,8.3.5.198,27015.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.894844,0.183741,udp,147.32.84.164,40506.0,<->,66.150.188.34,27015.0,CON,0.0,0.0,2,269,67,202,134.5,0.24907063197026022,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.968771,0.120878,udp,147.32.84.164,40506.0,<->,64.34.183.208,27015.0,CON,0.0,0.0,2,289,67,222,144.5,0.23183391003460208,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.968818,0.183994,udp,147.32.84.164,40506.0,<->,66.151.138.26,27015.0,CON,0.0,0.0,2,308,67,241,154.0,0.21753246753246752,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.968867,0.176843,udp,147.32.84.164,40506.0,<->,74.207.245.243,27015.0,CON,0.0,0.0,2,201,67,134,100.5,0.3333333333333333,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:19.968874,0.22528,udp,147.32.84.164,40506.0,<->,67.169.82.8,27015.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.027599,0.187399,udp,147.32.84.164,40506.0,<->,65.50.225.215,27024.0,CON,0.0,0.0,2,248,67,181,124.0,0.2701612903225806,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.027672,0.119019,udp,147.32.84.164,40506.0,<->,204.145.90.4,27015.0,CON,0.0,0.0,2,269,67,202,134.5,0.24907063197026022,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.041557,0.122554,udp,147.32.84.164,40506.0,<->,204.145.89.67,27015.0,CON,0.0,0.0,2,282,67,215,141.0,0.2375886524822695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.058794,0.138993,udp,147.32.84.164,40506.0,<->,72.5.195.25,27015.0,CON,0.0,0.0,2,335,67,268,167.5,0.2,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.149012,0.119134,udp,147.32.84.164,40506.0,<->,205.186.146.113,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.149188,0.152784,udp,147.32.84.164,40506.0,<->,67.228.181.64,27015.0,CON,0.0,0.0,2,337,67,270,168.5,0.19881305637982197,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.163460,0.184839,udp,147.32.84.164,40506.0,<->,209.250.2.107,27015.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.194572,0.543962,udp,147.32.84.164,40506.0,<->,174.23.246.43,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.194576,0.153177,udp,147.32.84.164,40506.0,<->,67.213.222.178,27015.0,CON,0.0,0.0,2,278,67,211,139.0,0.24100719424460432,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.209178,0.206355,udp,147.32.84.164,40506.0,<->,68.116.124.97,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.209184,0.200988,udp,147.32.84.164,40506.0,<->,128.193.182.190,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.240293,0.205116,udp,147.32.84.164,40506.0,<->,98.232.171.52,27015.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.269530,0.193714,udp,147.32.84.164,40506.0,<->,208.64.202.225,27026.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.269537,0.196778,udp,147.32.84.164,40506.0,<->,208.64.202.166,27026.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.316154,0.218983,udp,147.32.84.164,40506.0,<->,208.64.202.171,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.341074,0.207,udp,147.32.84.164,40506.0,<->,208.64.202.208,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.360679,0.213308,udp,147.32.84.164,40506.0,<->,208.64.202.211,27020.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.360800,0.196998,udp,147.32.84.164,40506.0,<->,208.64.202.141,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.375773,0.221073,udp,147.32.84.164,40506.0,<->,208.64.202.182,27026.0,CON,0.0,0.0,2,241,67,174,120.5,0.27800829875518673,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.403919,0.216477,udp,147.32.84.164,40506.0,<->,208.64.202.205,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.464311,0.201551,udp,147.32.84.164,40506.0,<->,208.64.202.225,27020.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.478486,0.209897,udp,147.32.84.164,40506.0,<->,208.64.202.210,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.478529,0.201045,udp,147.32.84.164,40506.0,<->,208.64.202.154,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.522519,0.206703,udp,147.32.84.164,40506.0,<->,208.64.202.144,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.522525,0.199467,udp,147.32.84.164,40506.0,<->,208.64.202.186,27025.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.551387,0.207594,udp,147.32.84.164,40506.0,<->,208.64.202.151,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.673673,0.210317,udp,147.32.84.164,40506.0,<->,208.64.202.214,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.673769,0.19877,udp,147.32.84.164,40506.0,<->,208.64.202.155,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.687134,0.213225,udp,147.32.84.164,40506.0,<->,208.64.202.183,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.687182,0.190541,udp,147.32.84.164,40506.0,<->,66.150.164.38,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.734214,0.201625,udp,147.32.84.164,40506.0,<->,208.64.202.215,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.734273,0.207881,udp,147.32.84.164,40506.0,<->,208.64.202.214,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.764157,0.200915,udp,147.32.84.164,40506.0,<->,208.64.202.178,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.810454,0.20903,udp,147.32.84.164,40506.0,<->,208.64.202.178,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.810512,0.187401,udp,147.32.84.164,40506.0,<->,66.150.164.172,27015.0,CON,0.0,0.0,2,203,67,136,101.5,0.33004926108374383,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.810665,0.212748,udp,147.32.84.164,40506.0,<->,208.64.202.158,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.823644,0.205513,udp,147.32.84.164,40506.0,<->,208.64.202.144,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.869532,0.208548,udp,147.32.84.164,40506.0,<->,208.64.202.175,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.869546,0.202308,udp,147.32.84.164,40506.0,<->,208.64.202.225,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.869552,0.208652,udp,147.32.84.164,40506.0,<->,208.64.202.144,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.884928,0.195642,udp,147.32.84.164,40506.0,<->,204.15.225.146,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.928359,0.210716,udp,147.32.84.164,40506.0,<->,208.64.202.217,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.974417,0.208742,udp,147.32.84.164,40506.0,<->,208.64.202.146,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:20.974463,0.205323,udp,147.32.84.164,40506.0,<->,208.64.202.180,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.036222,0.21976,udp,147.32.84.164,40506.0,<->,208.64.202.161,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.094599,0.215208,udp,147.32.84.164,40506.0,<->,208.64.202.213,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.094689,0.21384,udp,147.32.84.164,40506.0,<->,208.64.202.216,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.121305,0.214336,udp,147.32.84.164,40506.0,<->,208.64.202.182,27020.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.138460,0.215348,udp,147.32.84.164,40506.0,<->,67.183.71.15,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.138468,0.206237,udp,147.32.84.164,40506.0,<->,208.64.202.154,27026.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.138511,0.203735,udp,147.32.84.164,40506.0,<->,208.64.202.147,27020.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.181937,0.195681,udp,147.32.84.164,40506.0,<->,208.64.202.172,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.199052,0.154215,udp,147.32.84.164,40506.0,<->,205.234.152.115,27015.0,CON,0.0,0.0,2,295,67,228,147.5,0.2271186440677966,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.199160,0.379685,udp,147.32.84.164,40506.0,<->,50.92.203.84,27015.0,CON,0.0,0.0,2,198,67,131,99.0,0.3383838383838384,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.199167,0.160131,udp,147.32.84.164,40506.0,<->,24.64.96.26,27015.0,CON,0.0,0.0,2,317,67,250,158.5,0.2113564668769716,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.199176,0.0,udp,147.32.84.164,40506.0,->,66.220.103.209,54834.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.229239,0.168659,udp,147.32.84.164,40506.0,<->,24.64.96.26,27017.0,CON,0.0,0.0,2,307,67,240,153.5,0.2182410423452769,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.229248,0.23134,udp,147.32.84.164,40506.0,<->,66.220.103.209,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.229297,0.0,udp,147.32.84.164,40506.0,->,71.221.189.251,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.259996,0.16359,udp,147.32.84.164,40506.0,<->,97.77.85.29,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.260085,0.154946,udp,147.32.84.164,40506.0,<->,98.129.169.177,27015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.260168,0.144134,udp,147.32.84.164,40506.0,<->,65.60.32.28,27015.0,CON,0.0,0.0,2,307,67,240,153.5,0.2182410423452769,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.302029,0.15784,udp,147.32.84.164,40506.0,<->,72.249.9.236,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.317877,0.158613,udp,147.32.84.164,40506.0,<->,74.55.49.243,27015.0,CON,0.0,0.0,2,308,67,241,154.0,0.21753246753246752,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.334674,0.125918,udp,147.32.84.164,40506.0,<->,173.192.205.168,27068.0,CON,0.0,0.0,2,280,67,213,140.0,0.2392857142857143,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.347204,0.158404,udp,147.32.84.164,40506.0,<->,72.9.144.106,27015.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.347421,0.125364,udp,147.32.84.164,40506.0,<->,173.192.205.168,27065.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.409910,0.121851,udp,147.32.84.164,40506.0,<->,208.43.99.171,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.410026,0.159229,udp,147.32.84.164,40506.0,<->,108.60.213.13,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.410030,0.156127,udp,147.32.84.164,40506.0,<->,74.86.79.58,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.410084,0.146098,udp,147.32.84.164,40506.0,<->,108.60.204.225,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.423691,0.161292,udp,147.32.84.164,40506.0,<->,184.173.88.73,27017.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.437021,0.148487,udp,147.32.84.164,40506.0,<->,66.151.244.49,27015.0,CON,0.0,0.0,2,261,67,194,130.5,0.2567049808429119,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.467657,0.128486,udp,147.32.84.164,40506.0,<->,173.192.205.168,27069.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.467696,0.149815,udp,147.32.84.164,40506.0,<->,66.151.244.41,27015.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.484772,0.157182,udp,147.32.84.164,40506.0,<->,216.6.226.140,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.484780,0.20771,udp,147.32.84.164,40506.0,<->,50.23.91.148,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.498109,0.146253,udp,147.32.84.164,40506.0,<->,74.201.57.103,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.511774,0.123925,udp,147.32.84.164,40506.0,<->,208.43.99.168,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.511781,31.437199,udp,147.32.84.164,40506.0,<->,66.151.244.51,27015.0,CON,0.0,0.0,2,266,67,199,133.0,0.2518796992481203,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.572879,0.154639,udp,147.32.84.164,40506.0,<->,75.126.83.196,27015.0,CON,0.0,0.0,2,344,67,277,172.0,0.19476744186046513,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.605584,0.0,udp,147.32.84.164,40506.0,->,70.177.118.67,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.605629,0.153162,udp,147.32.84.164,40506.0,<->,209.236.125.65,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.605693,0.140708,udp,147.32.84.164,40506.0,<->,204.27.57.198,27015.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.618626,0.136639,udp,147.32.84.164,40506.0,<->,208.100.16.5,27017.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.618676,0.136426,udp,147.32.84.164,40506.0,<->,208.100.43.83,27025.0,CON,0.0,0.0,2,272,67,205,136.0,0.24632352941176472,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.631550,0.132825,udp,147.32.84.164,40506.0,<->,173.208.183.21,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.631557,0.131852,udp,147.32.84.164,40506.0,<->,208.100.16.5,27015.0,CON,0.0,0.0,2,283,67,216,141.5,0.23674911660777384,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.647488,0.506283,udp,147.32.84.164,40506.0,<->,67.55.158.209,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.647497,0.138033,udp,147.32.84.164,40506.0,<->,207.223.244.13,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.663883,0.145326,udp,147.32.84.164,40506.0,<->,64.22.109.163,27015.0,CON,0.0,0.0,2,288,67,221,144.0,0.2326388888888889,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.664046,0.144384,udp,147.32.84.164,40506.0,<->,199.83.213.168,27015.0,CON,0.0,0.0,2,281,67,214,140.5,0.23843416370106763,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.694936,0.138427,udp,147.32.84.164,40506.0,<->,206.217.131.13,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.709818,0.164088,udp,147.32.84.164,40506.0,<->,69.162.82.213,27015.0,CON,0.0,0.0,2,272,67,205,136.0,0.24632352941176472,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.739499,0.151368,udp,147.32.84.164,40506.0,<->,173.193.29.56,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.739549,0.158003,udp,147.32.84.164,40506.0,<->,184.173.95.4,27018.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.739600,0.134311,udp,147.32.84.164,40506.0,<->,205.234.159.222,27016.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.739607,0.141689,udp,147.32.84.164,40506.0,<->,72.51.60.15,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.739659,0.149603,udp,147.32.84.164,40506.0,<->,206.217.132.236,27015.0,CON,0.0,0.0,2,304,67,237,152.0,0.22039473684210525,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.753842,0.158692,udp,147.32.84.164,40506.0,<->,206.217.132.229,27015.0,CON,0.0,0.0,2,300,67,233,150.0,0.22333333333333333,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.768464,0.141741,udp,147.32.84.164,40506.0,<->,209.51.145.133,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.812605,0.136524,udp,147.32.84.164,40506.0,<->,64.94.238.69,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.828619,0.131588,udp,147.32.84.164,40506.0,<->,64.94.238.194,27015.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.872061,0.148543,udp,147.32.84.164,40506.0,<->,72.5.250.211,27015.0,CON,0.0,0.0,2,262,67,195,131.0,0.25572519083969464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.887080,0.163429,udp,147.32.84.164,40506.0,<->,173.162.16.46,27015.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.887119,0.13297,udp,147.32.84.164,40506.0,<->,69.61.61.26,27015.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.887198,0.138213,udp,147.32.84.164,40506.0,<->,69.61.61.27,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.887204,0.127351,udp,147.32.84.164,40506.0,<->,205.234.166.11,27015.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.920086,0.166576,udp,147.32.84.164,40506.0,<->,64.31.59.133,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.920090,0.147844,udp,147.32.84.164,40506.0,<->,98.122.175.189,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.920094,0.15493,udp,147.32.84.164,40506.0,<->,69.64.10.187,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.934867,0.139606,udp,147.32.84.164,40506.0,<->,216.231.142.8,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.947866,0.134939,udp,147.32.84.164,40506.0,<->,216.52.148.197,27015.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.968577,0.207768,udp,147.32.84.164,40506.0,<->,173.192.165.135,27016.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:21.992753,0.125258,udp,147.32.84.164,40506.0,<->,75.102.40.29,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.054984,0.141664,udp,147.32.84.164,40506.0,<->,216.52.148.197,27021.0,CON,0.0,0.0,2,277,67,210,138.5,0.24187725631768953,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.066486,0.138952,udp,147.32.84.164,40506.0,<->,64.74.97.67,27015.0,CON,0.0,0.0,2,270,67,203,135.0,0.24814814814814815,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.097973,0.136505,udp,147.32.84.164,40506.0,<->,69.147.225.41,27015.0,CON,0.0,0.0,2,194,67,127,97.0,0.34536082474226804,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.097987,0.114091,udp,147.32.84.164,40506.0,<->,208.167.246.106,27015.0,CON,0.0,0.0,2,265,67,198,132.5,0.2528301886792453,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.130878,0.128442,udp,147.32.84.164,40506.0,<->,216.52.148.197,27035.0,CON,0.0,0.0,2,286,67,219,143.0,0.23426573426573427,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.144227,0.169327,udp,147.32.84.164,40506.0,<->,99.99.206.58,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.175287,0.145025,udp,147.32.84.164,40506.0,<->,174.34.146.114,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.175358,0.175089,udp,147.32.84.164,40506.0,<->,69.162.110.122,27116.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.188809,0.142383,udp,147.32.84.164,40506.0,<->,206.212.61.22,27017.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.219848,0.13689,udp,147.32.84.164,40506.0,<->,68.232.183.74,27015.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.219862,0.128644,udp,147.32.84.164,40506.0,<->,68.232.183.13,27015.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.233020,0.159595,udp,147.32.84.164,40506.0,<->,206.217.134.170,27019.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.247589,0.137325,udp,147.32.84.164,40506.0,<->,74.119.219.104,27015.0,CON,0.0,0.0,2,294,67,227,147.0,0.22789115646258504,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.247616,0.143608,udp,147.32.84.164,40506.0,<->,174.34.134.10,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.262348,0.153655,udp,147.32.84.164,40506.0,<->,68.232.164.17,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.293085,0.157204,udp,147.32.84.164,40506.0,<->,68.232.178.149,27015.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.306459,0.145005,udp,147.32.84.164,40506.0,<->,68.232.181.49,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.323614,0.140668,udp,147.32.84.164,40506.0,<->,68.232.179.191,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.323888,0.137966,udp,147.32.84.164,40506.0,<->,46.21.154.181,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.337993,0.126297,udp,147.32.84.164,40506.0,<->,46.21.154.189,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.354809,0.144234,udp,147.32.84.164,40506.0,<->,68.232.182.78,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.369137,0.137951,udp,147.32.84.164,40506.0,<->,68.232.184.164,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.397957,0.156361,udp,147.32.84.164,40506.0,<->,64.31.28.34,27045.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.397963,0.142483,udp,147.32.84.164,40506.0,<->,68.232.174.213,27015.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.398015,0.145591,udp,147.32.84.164,40506.0,<->,68.232.169.171,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.398078,0.131381,udp,147.32.84.164,40506.0,<->,68.232.172.106,27015.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.398135,0.142024,udp,147.32.84.164,40506.0,<->,68.232.171.178,27015.0,CON,0.0,0.0,2,274,67,207,137.0,0.24452554744525548,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.414953,0.141019,udp,147.32.84.164,40506.0,<->,68.232.174.143,27015.0,CON,0.0,0.0,2,218,67,151,109.0,0.3073394495412844,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.414957,0.167354,udp,147.32.84.164,40506.0,<->,184.56.245.255,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.428108,0.137144,udp,147.32.84.164,40506.0,<->,68.232.172.45,27015.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.428226,0.159582,udp,147.32.84.164,40506.0,<->,68.232.163.22,27015.0,CON,0.0,0.0,2,344,67,277,172.0,0.19476744186046513,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.458682,0.168178,udp,147.32.84.164,40506.0,<->,68.232.163.95,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.472537,0.154782,udp,147.32.84.164,40506.0,<->,68.232.161.2,27015.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.472651,0.15611,udp,147.32.84.164,40506.0,<->,68.232.166.72,27015.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.503991,0.156454,udp,147.32.84.164,40506.0,<->,68.232.162.214,27015.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.518489,0.15521,udp,147.32.84.164,40506.0,<->,69.31.130.131,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.518503,0.14774,udp,147.32.84.164,40506.0,<->,204.187.62.245,27016.0,CON,0.0,0.0,2,222,67,155,111.0,0.30180180180180183,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.549073,0.145699,udp,147.32.84.164,40506.0,<->,173.242.115.136,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.549229,0.130286,udp,147.32.84.164,40506.0,<->,173.242.116.122,27115.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.562684,0.142027,udp,147.32.84.164,40506.0,<->,173.242.115.136,27116.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.562706,0.116805,udp,147.32.84.164,40506.0,<->,173.242.116.122,27017.0,CON,0.0,0.0,2,253,67,186,126.5,0.2648221343873518,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.562795,0.134022,udp,147.32.84.164,40506.0,<->,74.122.197.134,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.594441,0.13823,udp,147.32.84.164,40506.0,<->,108.17.150.118,27015.0,CON,0.0,0.0,2,207,67,140,103.5,0.32367149758454106,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.607971,0.136537,udp,147.32.84.164,40506.0,<->,216.231.132.75,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.607990,0.120109,udp,147.32.84.164,40506.0,<->,66.36.238.172,27015.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.667125,0.135477,udp,147.32.84.164,40506.0,<->,68.177.101.11,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686066,0.126647,udp,147.32.84.164,40506.0,<->,68.177.101.22,27018.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686121,0.129555,udp,147.32.84.164,40506.0,<->,68.177.101.42,27025.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686128,0.12526,udp,147.32.84.164,40506.0,<->,68.177.101.28,27019.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686240,0.132323,udp,147.32.84.164,40506.0,<->,68.177.101.23,27031.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686247,0.129147,udp,147.32.84.164,40506.0,<->,68.177.101.18,27044.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.686251,0.128436,udp,147.32.84.164,40506.0,<->,68.177.101.26,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.741870,0.139803,udp,147.32.84.164,40506.0,<->,68.177.101.10,27019.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.741914,0.104943,udp,147.32.84.164,40506.0,<->,66.150.121.17,27015.0,CON,0.0,0.0,2,284,67,217,142.0,0.23591549295774647,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.759595,0.130224,udp,147.32.84.164,40506.0,<->,68.177.101.23,27033.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.759613,0.131524,udp,147.32.84.164,40506.0,<->,68.177.101.22,27035.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.787963,0.119634,udp,147.32.84.164,40506.0,<->,208.85.241.3,27006.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.803675,0.135097,udp,147.32.84.164,40506.0,<->,68.177.101.42,27026.0,CON,0.0,0.0,2,244,67,177,122.0,0.27459016393442626,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.803740,0.137364,udp,147.32.84.164,40506.0,<->,68.177.101.24,27025.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.818245,0.125486,udp,147.32.84.164,40506.0,<->,68.177.101.42,27042.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.818302,0.134195,udp,147.32.84.164,40506.0,<->,68.177.101.12,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.818309,0.14904,udp,147.32.84.164,40506.0,<->,68.177.101.11,27019.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.818401,0.135129,udp,147.32.84.164,40506.0,<->,68.177.101.23,27018.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.818406,0.135653,udp,147.32.84.164,40506.0,<->,68.177.101.28,27020.0,CON,0.0,0.0,2,242,67,175,121.0,0.2768595041322314,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.832466,0.132796,udp,147.32.84.164,40506.0,<->,68.177.101.31,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.864683,0.137495,udp,147.32.84.164,40506.0,<->,68.177.101.22,27017.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.892650,0.133324,udp,147.32.84.164,40506.0,<->,68.177.101.16,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.892657,0.188272,udp,147.32.84.164,40506.0,<->,72.178.6.197,27015.0,CON,0.0,0.0,2,192,67,125,96.0,0.3489583333333333,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.923397,0.125582,udp,147.32.84.164,40506.0,<->,68.177.101.46,27020.0,CON,0.0,0.0,2,249,67,182,124.5,0.26907630522088355,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.923454,0.13587,udp,147.32.84.164,40506.0,<->,68.177.101.49,27020.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.954568,0.133728,udp,147.32.84.164,40506.0,<->,68.177.101.10,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.954573,0.133459,udp,147.32.84.164,40506.0,<->,68.177.101.46,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.954585,0.127083,udp,147.32.84.164,40506.0,<->,68.177.101.28,27025.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.967393,0.115431,udp,147.32.84.164,40506.0,<->,8.2.121.222,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.967451,0.134807,udp,147.32.84.164,40506.0,<->,204.11.33.26,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.967501,0.144431,udp,147.32.84.164,40506.0,<->,8.6.74.219,27015.0,CON,0.0,0.0,2,228,67,161,114.0,0.29385964912280704,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.984362,0.162764,udp,147.32.84.164,40506.0,<->,74.63.210.56,27015.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.984366,0.148388,udp,147.32.84.164,40506.0,<->,8.22.203.216,27015.0,CON,0.0,0.0,2,216,67,149,108.0,0.3101851851851852,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.984406,0.136406,udp,147.32.84.164,40506.0,<->,173.234.61.26,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:22.984451,0.0,udp,147.32.84.164,40506.0,->,96.231.193.154,1024.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.033181,0.000299,udp,147.32.84.170,55197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:23.042385,0.105872,udp,147.32.84.164,40506.0,<->,64.34.175.236,27015.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.059079,0.188238,udp,147.32.84.164,40506.0,<->,8.6.3.198,27015.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.103722,0.145022,udp,147.32.84.164,40506.0,<->,64.16.211.35,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.103736,0.128808,udp,147.32.84.164,40506.0,<->,63.146.183.17,27031.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.117458,0.115572,udp,147.32.84.164,40506.0,<->,173.212.214.30,27016.0,CON,0.0,0.0,2,227,67,160,113.5,0.29515418502202645,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.148463,0.046902,udp,147.32.84.164,40506.0,<->,173.199.83.177,27015.0,CON,0.0,0.0,2,214,67,147,107.0,0.3130841121495327,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.179051,1.379797,udp,147.32.84.164,40506.0,->,96.231.193.154,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.210141,0.18767,udp,147.32.84.164,40506.0,<->,76.191.102.10,27015.0,CON,0.0,0.0,2,204,67,137,102.0,0.3284313725490196,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.237540,0.090062,udp,147.32.84.164,40506.0,<->,69.9.170.55,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.254628,0.135099,udp,147.32.84.164,40506.0,<->,63.146.183.9,27033.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.254638,0.112553,udp,147.32.84.164,40506.0,<->,208.167.245.215,27016.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.254642,0.125217,udp,147.32.84.164,40506.0,<->,208.167.243.68,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.282889,0.209895,udp,147.32.84.164,40506.0,<->,173.55.89.48,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.282895,0.135428,udp,147.32.84.164,40506.0,<->,63.146.183.17,27025.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.282938,0.129454,udp,147.32.84.164,40506.0,<->,63.146.183.17,27019.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.282949,0.12215,udp,147.32.84.164,40506.0,<->,173.212.214.26,27017.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.283046,0.0,udp,147.32.84.164,40506.0,->,23.19.122.30,27017.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.296663,0.189683,udp,147.32.84.164,40506.0,<->,8.3.6.105,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.296730,0.128613,udp,147.32.84.164,40506.0,<->,63.146.183.9,27027.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.296733,0.131832,udp,147.32.84.164,40506.0,<->,63.146.183.9,27015.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.296778,0.130836,udp,147.32.84.164,40506.0,<->,63.146.183.9,27025.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.314573,0.145385,udp,147.32.84.164,40506.0,<->,206.123.66.25,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.359508,0.114335,udp,147.32.84.164,40506.0,<->,208.167.244.101,27015.0,CON,0.0,0.0,2,197,67,130,98.5,0.3401015228426396,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.359515,0.114553,udp,147.32.84.164,40506.0,<->,208.167.242.42,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.373083,0.137197,udp,147.32.84.164,40506.0,<->,63.146.183.17,27027.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.386336,0.132567,udp,147.32.84.164,40506.0,<->,63.146.183.9,27018.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.403431,0.177977,udp,147.32.84.164,40506.0,<->,8.6.2.219,27015.0,CON,0.0,0.0,2,223,67,156,111.5,0.3004484304932735,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.417322,0.093707,udp,147.32.84.164,40506.0,<->,69.9.170.57,27015.0,CON,0.0,0.0,2,219,67,152,109.5,0.3059360730593607,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.417406,0.369152,udp,147.32.84.164,40506.0,<->,173.199.80.209,27015.0,CON,0.0,0.0,2,263,67,196,131.5,0.25475285171102663,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.417415,0.127977,udp,147.32.84.164,40506.0,<->,63.146.183.19,27017.0,CON,0.0,0.0,2,231,67,164,115.5,0.29004329004329005,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.434786,0.137921,udp,147.32.84.164,40506.0,<->,63.146.183.9,27016.0,CON,0.0,0.0,2,236,67,169,118.0,0.2838983050847458,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.434795,0.192137,udp,147.32.84.164,40506.0,<->,63.208.142.126,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.434882,0.129216,udp,147.32.84.164,40506.0,<->,63.146.183.19,27033.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.463079,0.108813,udp,147.32.84.164,40506.0,<->,208.167.243.126,27015.0,CON,0.0,0.0,2,278,67,211,139.0,0.24100719424460432,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.494310,0.124464,udp,147.32.84.164,40506.0,<->,174.34.158.194,27015.0,CON,0.0,0.0,2,240,67,173,120.0,0.2791666666666667,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.494340,0.152653,udp,147.32.84.164,40506.0,<->,69.13.38.153,27015.0,CON,0.0,0.0,2,260,67,193,130.0,0.25769230769230766,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.524597,0.16273,udp,147.32.84.164,40506.0,<->,68.168.146.108,27015.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.524603,0.151601,udp,147.32.84.164,40506.0,<->,74.99.153.137,27017.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.537702,0.134701,udp,147.32.84.164,40506.0,<->,71.224.70.220,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.554807,0.16989,udp,147.32.84.164,40506.0,<->,67.187.28.105,27015.0,CON,0.0,0.0,2,252,67,185,126.0,0.26587301587301587,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.554857,0.125283,udp,147.32.84.164,40506.0,<->,66.55.134.103,27015.0,CON,0.0,0.0,2,247,67,180,123.5,0.27125506072874495,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.568428,0.124076,udp,147.32.84.164,40506.0,<->,8.9.6.88,27015.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.598626,0.11237,udp,147.32.84.164,40506.0,<->,66.55.154.166,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.598634,0.147557,udp,147.32.84.164,40506.0,<->,8.12.18.203,27015.0,CON,0.0,0.0,2,306,67,239,153.0,0.21895424836601307,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.598642,0.117801,udp,147.32.84.164,40506.0,<->,216.155.146.69,27015.0,CON,0.0,0.0,2,270,67,203,135.0,0.24814814814814815,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.598754,0.112879,udp,147.32.84.164,40506.0,<->,69.164.220.52,27015.0,CON,0.0,0.0,2,200,67,133,100.0,0.335,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.612612,0.133592,udp,147.32.84.164,40506.0,<->,8.6.76.222,27015.0,CON,0.0,0.0,2,212,67,145,106.0,0.3160377358490566,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.629907,0.103133,udp,147.32.84.164,40506.0,<->,63.251.20.227,27015.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.629917,0.118575,udp,147.32.84.164,40506.0,<->,63.251.20.161,27015.0,CON,0.0,0.0,2,211,67,144,105.5,0.3175355450236967,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.643931,0.126645,udp,147.32.84.164,40506.0,<->,70.42.74.8,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.657740,0.137121,udp,147.32.84.164,40506.0,<->,8.6.76.234,27015.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.657746,0.118384,udp,147.32.84.164,40506.0,<->,70.42.74.6,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.689433,0.116345,udp,147.32.84.164,40506.0,<->,66.55.131.201,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.689439,0.117561,udp,147.32.84.164,40506.0,<->,64.237.39.212,27015.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.716966,0.117494,udp,147.32.84.164,40506.0,<->,64.237.38.21,27025.0,CON,0.0,0.0,2,288,67,221,144.0,0.2326388888888889,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.717071,0.093828,udp,147.32.84.164,40506.0,<->,208.122.49.105,27015.0,CON,0.0,0.0,2,235,67,168,117.5,0.2851063829787234,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.735212,0.19698,udp,147.32.84.164,40506.0,<->,209.31.179.138,27015.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.735295,0.125402,udp,147.32.84.164,40506.0,<->,128.36.109.101,27021.0,CON,0.0,0.0,2,221,67,154,110.5,0.3031674208144796,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.748778,0.204893,udp,147.32.84.164,40506.0,<->,63.215.74.75,27015.0,CON,0.0,0.0,2,220,67,153,110.0,0.30454545454545456,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.748864,0.154577,udp,147.32.84.164,40506.0,<->,184.17.164.65,27016.0,CON,0.0,0.0,2,245,67,178,122.5,0.27346938775510204,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.779594,0.129011,udp,147.32.84.164,40506.0,<->,173.203.101.164,27015.0,CON,0.0,0.0,2,233,67,166,116.5,0.2875536480686695,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.807813,0.198777,udp,147.32.84.164,40506.0,<->,69.163.37.138,27017.0,CON,0.0,0.0,2,270,67,203,135.0,0.24814814814814815,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.807824,0.0,udp,147.32.84.164,40506.0,->,24.89.226.240,27015.0,INT,0.0,,1,67,67,0,67.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.807862,0.269261,udp,147.32.84.164,40506.0,<->,201.238.235.233,25511.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.807927,0.246184,udp,147.32.84.164,40506.0,<->,201.238.222.89,34000.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.824864,0.268327,udp,147.32.84.164,40506.0,<->,201.238.235.233,25510.0,CON,0.0,0.0,2,234,67,167,117.0,0.2863247863247863,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.824990,0.261515,udp,147.32.84.164,40506.0,<->,190.210.92.16,27017.0,CON,0.0,0.0,2,265,67,198,132.5,0.2528301886792453,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.839337,0.267105,udp,147.32.84.164,40506.0,<->,189.1.164.17,27015.0,CON,0.0,0.0,2,209,67,142,104.5,0.32057416267942584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.853027,0.241254,udp,147.32.84.164,40506.0,<->,200.179.40.134,27015.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.883302,0.278492,udp,147.32.84.164,40506.0,<->,200.177.229.46,27023.0,CON,0.0,0.0,2,208,67,141,104.0,0.32211538461538464,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.897372,0.243702,udp,147.32.84.164,40506.0,<->,201.48.140.141,27018.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.914936,0.227381,udp,147.32.84.164,40506.0,<->,187.115.4.151,27032.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:23.915114,0.456398,udp,147.32.84.164,40506.0,<->,58.6.13.102,27016.0,CON,0.0,0.0,2,258,67,191,129.0,0.2596899224806202,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.018984,0.383627,udp,147.32.84.164,40506.0,<->,203.26.94.81,27015.0,CON,0.0,0.0,2,225,67,158,112.5,0.29777777777777775,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.094285,0.356717,udp,147.32.84.164,40506.0,<->,203.14.173.55,27015.0,CON,0.0,0.0,2,265,67,198,132.5,0.2528301886792453,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.094289,0.38844,udp,147.32.84.164,40506.0,<->,203.26.94.71,27015.0,CON,0.0,0.0,2,275,67,208,137.5,0.24363636363636362,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.094323,0.369054,udp,147.32.84.164,40506.0,<->,203.34.186.32,27165.0,CON,0.0,0.0,2,226,67,159,113.0,0.29646017699115046,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.121759,0.355252,udp,147.32.84.164,40506.0,<->,203.14.173.228,27017.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.121925,0.362222,udp,147.32.84.164,40506.0,<->,203.14.173.205,27015.0,CON,0.0,0.0,2,279,67,212,139.5,0.24014336917562723,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.138864,0.342768,udp,147.32.84.164,40506.0,<->,203.14.173.235,27017.0,CON,0.0,0.0,2,232,67,165,116.0,0.28879310344827586,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.152730,0.345968,udp,147.32.84.164,40506.0,<->,119.17.160.226,27015.0,CON,0.0,0.0,2,217,67,150,108.5,0.3087557603686636,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.331702,0.355782,udp,147.32.84.164,40506.0,<->,59.167.241.18,27015.0,CON,0.0,0.0,2,215,67,148,107.5,0.3116279069767442,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.348434,0.338162,udp,147.32.84.164,40506.0,<->,59.167.241.73,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.348446,0.349575,udp,147.32.84.164,40506.0,<->,59.167.241.24,27015.0,CON,0.0,0.0,2,224,67,157,112.0,0.29910714285714285,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.362012,0.346045,udp,147.32.84.164,40506.0,<->,203.217.24.89,27016.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.362032,0.353772,udp,147.32.84.164,40506.0,<->,59.167.241.71,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.409408,0.352861,udp,147.32.84.164,40506.0,<->,59.167.241.42,27015.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.422683,0.361443,udp,147.32.84.164,40506.0,<->,59.167.241.65,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.439458,0.343966,udp,147.32.84.164,40506.0,<->,59.167.241.64,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.439465,0.356106,udp,147.32.84.164,40506.0,<->,59.167.241.80,27015.0,CON,0.0,0.0,2,250,67,183,125.0,0.268,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.452556,0.350298,udp,147.32.84.164,40506.0,<->,59.167.241.43,27015.0,CON,0.0,0.0,2,238,67,171,119.0,0.2815126050420168,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.466341,0.341131,udp,147.32.84.164,40506.0,<->,59.167.241.72,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.483389,0.366961,udp,147.32.84.164,40506.0,<->,59.167.241.55,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.483404,0.362655,udp,147.32.84.164,40506.0,<->,59.167.241.77,27015.0,CON,0.0,0.0,2,237,67,170,118.5,0.28270042194092826,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.496720,0.334643,udp,147.32.84.164,40506.0,<->,203.217.24.28,27016.0,CON,0.0,0.0,2,229,67,162,114.5,0.2925764192139738,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.514394,0.35283,udp,147.32.84.164,40506.0,<->,150.101.183.170,27015.0,CON,0.0,0.0,2,239,67,172,119.5,0.2803347280334728,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.514400,0.34241,udp,147.32.84.164,40506.0,<->,203.46.105.20,21020.0,CON,0.0,0.0,2,243,67,176,121.5,0.2757201646090535,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.514403,0.346058,udp,147.32.84.164,40506.0,<->,118.127.1.19,27016.0,CON,0.0,0.0,2,202,67,135,101.0,0.3316831683168317,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.527479,0.392569,udp,147.32.84.164,40506.0,<->,150.101.183.175,27015.0,CON,0.0,0.0,2,267,67,200,133.5,0.250936329588015,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.544477,0.327634,udp,147.32.84.164,40506.0,<->,203.97.27.202,27030.0,CON,0.0,0.0,2,256,67,189,128.0,0.26171875,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.557688,0.322942,udp,147.32.84.164,40506.0,<->,202.21.136.221,27016.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.691846,0.339574,udp,147.32.84.164,40506.0,<->,219.88.241.82,27015.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.708997,0.215295,udp,147.32.84.164,40506.0,<->,201.224.87.147,27016.0,CON,0.0,0.0,2,210,67,143,105.0,0.319047619047619,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.722794,0.389971,udp,147.32.84.164,40506.0,<->,203.150.228.177,27017.0,CON,0.0,0.0,2,278,67,211,139.0,0.24100719424460432,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.736074,0.410758,udp,147.32.84.164,40506.0,<->,203.150.228.177,27018.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.766347,0.39137,udp,147.32.84.164,40506.0,<->,203.150.228.177,27015.0,CON,0.0,0.0,2,268,67,201,134.0,0.25,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.797396,0.39137,udp,147.32.84.164,40506.0,<->,123.100.233.11,27050.0,CON,0.0,0.0,2,255,67,188,127.5,0.2627450980392157,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.814018,0.222898,udp,147.32.84.164,40506.0,<->,203.116.28.5,27017.0,CON,0.0,0.0,2,259,67,192,129.5,0.25868725868725867,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.844774,0.399651,udp,147.32.84.164,40506.0,<->,123.100.233.111,27050.0,CON,0.0,0.0,2,246,67,179,123.0,0.27235772357723576,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.859083,0.396109,udp,147.32.84.164,40506.0,<->,123.100.233.14,27060.0,CON,0.0,0.0,2,303,67,236,151.5,0.22112211221122113,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.859132,0.233698,udp,147.32.84.164,40506.0,<->,203.116.28.5,27016.0,CON,0.0,0.0,2,257,67,190,128.5,0.2607003891050584,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:24.859188,0.5477,udp,147.32.84.164,40506.0,<->,125.5.114.150,27080.0,CON,0.0,0.0,2,254,67,187,127.0,0.2637795275590551,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:26.393457,0.0,icmp,147.32.84.164,771.0,->,216.52.148.172,15006.0,URP,0.0,,1,246,246,0,246.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:30.958059,0.0,icmp,147.32.84.164,771.0,->,89.231.6.26,15006.0,URP,0.0,,1,172,172,0,172.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:31.723522,0.000252,udp,147.32.84.138,43701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:31.941963,0.000242,udp,147.32.84.134,55622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:31.942790,0.00633,tcp,147.32.84.134,44484.0,->,88.86.100.176,80.0,SRPA_FSPA,0.0,0.0,9,1297,457,840,144.11111111111111,0.35235158057054744,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:36.684610,0.018165,tcp,147.32.84.170,49576.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:38.251253,0.01767,udp,147.32.84.170,39569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:38.251390,0.01763,udp,147.32.84.170,35682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:40.113777,0.000243,udp,147.32.84.59,59609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:40.132441,0.000272,udp,147.32.84.59,52452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:41.745292,0.000241,udp,147.32.84.138,50970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:46.179681,61.281059,tcp,147.32.84.165,2150.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:02:47.446829,0.000301,udp,147.32.84.170,38165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:49.980976,0.000368,udp,147.32.84.134,48237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:52.114035,0.000311,udp,147.32.85.25,34959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:02:52.589282,3205.157471,udp,95.154.93.170,57419.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3591,133,3458,598.5,0.037037037037037035,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:02:52.948980,0.0,icmp,147.32.84.164,771.0,->,66.151.244.51,15006.0,URP,0.0,,1,227,227,0,227.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:54.028554,0.262866,tcp,147.32.84.170,33694.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:02:55.013039,15.301607,udp,147.32.84.94,7103.0,->,82.27.3.2,7197.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:02:55.024824,0.624259,tcp,147.32.84.171,47509.0,->,195.242.247.146,51388.0,SPA_SRPA,0.0,0.0,10,1516,619,897,151.6,0.408311345646438,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:02:55.747915,240.184265,tcp,147.32.84.164,51868.0,->,74.125.232.194,443.0,FSPA_FSPA,0.0,0.0,36,5163,3187,1976,143.41666666666666,0.6172767770675963,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:02:55.795108,0.247503,udp,147.32.84.134,60595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:56.043142,0.24755,udp,147.32.84.134,42797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:56.787219,0.000462,udp,147.32.84.134,56088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:56.788572,321.181122,tcp,147.32.84.134,42649.0,->,74.125.232.193,443.0,FSPA_FSPA,0.0,0.0,70,13291,4810,8481,189.87142857142857,0.3618990294184034,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:57.813399,0.036149,udp,147.32.84.134,53911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:57.850650,0.000369,udp,147.32.84.134,35633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,72,290,181.0,0.19889502762430938,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.065518,3479.141602,udp,68.188.250.37,7415.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,95,60924,28686,32238,641.3052631578947,0.4708489265314162,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:02:58.346435,10.200125,tcp,147.32.84.134,50250.0,->,69.63.189.16,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.348965,0.000309,udp,147.32.84.134,52862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.356849,310.38031,tcp,147.32.84.134,54959.0,->,69.63.190.10,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.589161,1503.181885,tcp,147.32.84.134,54961.0,->,69.63.190.10,443.0,SPA_SRPA,0.0,0.0,283,157423,61892,95531,556.2650176678445,0.3931572895955483,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.593266,0.002401,udp,147.32.84.134,48168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,84,224,154.0,0.2727272727272727,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.596267,0.019308,udp,147.32.84.134,52992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,482,83,399,241.0,0.17219917012448133,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.596388,0.003311,udp,147.32.84.134,45838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,536,84,452,268.0,0.15671641791044777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.600536,30.019678,tcp,147.32.84.134,50376.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,18,3968,1062,2906,220.44444444444446,0.26764112903225806,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.600696,30.020214,tcp,147.32.84.134,50379.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,18,3968,1062,2906,220.44444444444446,0.26764112903225806,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:58.616991,40.00317,tcp,147.32.84.134,37230.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4003,1127,2876,210.68421052631578,0.2815388458656008,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:59.001824,0.000273,udp,147.32.84.134,35889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:59.002633,0.00023,udp,147.32.84.134,46537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:59.548629,210.19989,tcp,147.32.84.134,52410.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,124,67267,10040,57227,542.4758064516129,0.14925595016873058,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:59.549648,90.189133,tcp,147.32.84.134,52413.0,->,80.239.149.8,443.0,FSPA_FSPA,0.0,0.0,40,19078,4766,14312,476.95,0.24981654261452982,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:02:59.869183,0.001922,udp,147.32.84.134,56439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,87,397,242.0,0.1797520661157025,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:00.759620,78.388054,tcp,147.32.84.134,58616.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:06.682998,0.000393,udp,147.32.84.170,42536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:06.683934,0.000378,udp,147.32.84.170,55781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:07.418634,0.000161,udp,147.32.84.138,35448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:07.483236,0.000196,udp,147.32.85.25,37452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:08.020437,5.863567,tcp,66.249.72.233,46722.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1136,692,444,113.6,0.6091549295774648,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:03:08.038208,0.032912,tcp,147.32.84.134,44525.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:08.984799,0.000231,udp,147.32.84.138,42833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:11.858069,0.254851,tcp,147.32.86.50,53492.0,->,77.75.72.46,110.0,SRPA_FSPA,0.0,0.0,72,18607,1752,16855,258.43055555555554,0.09415811253829204,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:03:13.067369,0.395588,tcp,147.32.84.170,35027.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:13.504784,0.241691,tcp,147.32.84.170,36438.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:15.949174,0.000451,udp,147.32.86.20,55613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:16.682577,0.000447,udp,147.32.84.170,38024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:16.683539,0.000354,udp,147.32.84.170,52595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:23.766626,0.000936,udp,84.15.187.122,46518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,604,76,528,302.0,0.12582781456953643,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:25.032517,0.288115,tcp,147.32.84.170,33704.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:26.103795,0.000244,udp,147.32.84.134,45937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:26.740617,0.003939,udp,119.240.5.88,52357.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3032,60,2972,758.0,0.01978891820580475,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:27.296006,0.000269,udp,147.32.84.138,33692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:33.432402,0.000232,udp,147.32.85.25,45129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:35.914240,0.033836,tcp,147.32.85.6,53687.0,->,147.231.6.226,80.0,FSPA_FSPA,0.0,0.0,10,1582,711,871,158.2,0.44943109987357777,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:03:36.684534,0.018801,tcp,147.32.84.170,44319.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:37.067696,241.562469,tcp,147.32.84.134,39902.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,47,19192,2471,16721,408.3404255319149,0.12875156315131306,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.300889,0.019837,udp,147.32.84.134,36861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,75,156,115.5,0.3246753246753247,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.303983,291.313904,tcp,147.32.84.134,58531.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,71,41956,11726,30230,590.9295774647887,0.2794832681857184,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.636633,0.000408,udp,147.32.84.134,45304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,77,164,120.5,0.31950207468879666,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.638659,10.049835,tcp,147.32.84.134,40951.0,->,209.85.149.191,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.639205,240.974442,tcp,147.32.84.134,40511.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,343,310400,9882,300518,904.9562682215743,0.031836340206185566,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.649919,0.000298,udp,147.32.84.134,44621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,76,157,116.5,0.3261802575107296,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.654756,240.975403,tcp,147.32.84.134,40956.0,->,209.85.149.191,80.0,FSPA_FSPA,0.0,0.0,21,2290,1152,1138,109.04761904761905,0.503056768558952,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.661736,0.009906,udp,147.32.84.134,35472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,72,231,151.5,0.2376237623762376,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.765033,0.000493,udp,147.32.84.134,38340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.767770,241.979858,tcp,147.32.84.134,37285.0,->,74.125.232.195,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.983451,0.010082,udp,147.32.84.134,39458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:37.986060,0.000231,udp,147.32.84.134,37756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:38.006959,240.629761,tcp,147.32.84.134,36677.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:38.831660,0.000292,udp,147.32.84.134,41418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,448,130,318,224.0,0.29017857142857145,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:38.832547,279.799744,tcp,147.32.84.134,39925.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,75,47062,6556,40506,627.4933333333333,0.1393055968722111,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:39.188814,249.426254,tcp,147.32.84.134,58558.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,21,3322,2045,1277,158.1904761904762,0.615593016255268,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:39.189192,249.426147,tcp,147.32.84.134,58560.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,23,4748,2114,2634,206.43478260869566,0.44524010109519796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:39.274760,279.443756,tcp,147.32.84.134,40292.0,->,74.125.47.120,80.0,FSPA_FSPA,0.0,0.0,25,3922,2692,1230,156.88,0.6863844977052524,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:39.281570,279.350403,tcp,147.32.84.134,39934.0,->,209.85.149.132,80.0,FSPA_FSPA,0.0,0.0,28,5411,3725,1686,193.25,0.6884124930696729,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:41.556226,1644.023315,udp,76.26.170.240,33595.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:47.036521,61.273384,tcp,147.32.84.165,2151.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:03:47.347171,0.000729,udp,109.56.48.77,61498.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:47.422829,0.000227,udp,147.32.84.138,40920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:49.601724,0.000217,udp,147.32.84.59,34064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:49.620350,0.000205,udp,147.32.84.59,58002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:51.650427,0.000314,udp,174.141.212.251,45745.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:51.703511,0.000274,udp,147.32.86.20,58994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:03:53.581561,0.000783,udp,110.0.252.103,27294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:03:53.660630,0.010941,tcp,147.32.84.134,40552.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:03:56.027342,0.000254,udp,147.32.84.170,53888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:56.682348,0.000306,udp,147.32.84.170,44292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:56.683218,0.000248,udp,147.32.84.170,56604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:03:58.178014,15.299388,udp,147.32.84.94,7103.0,->,128.141.139.217,7579.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:03:59.116825,0.004545,udp,208.88.186.7,34051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3033,60,2973,758.25,0.019782393669634024,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:00.761378,0.002201,udp,147.32.84.164,59534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:00.763766,0.000354,udp,147.32.84.164,59854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,72,212,142.0,0.2535211267605634,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:05.242063,0.000357,udp,147.32.84.170,49387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:05.362600,6.019697,udp,147.32.84.229,13363.0,->,82.101.210.144,5818.0,INT,0.0,,3,207,207,0,69.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:04:06.110379,3599.975342,tcp,147.32.84.59,51273.0,->,74.125.43.108,993.0,PA_PA,0.0,0.0,297,26403,10041,16362,88.8989898989899,0.38029769344392683,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:04:06.327177,0.000353,udp,147.32.86.20,57956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:06.682902,0.000419,udp,147.32.84.170,40995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:10.044864,1.374974,tcp,147.32.84.59,54417.0,->,38.102.136.127,80.0,FSRPA_FSPA,0.0,0.0,23,19455,1951,17504,845.8695652173913,0.10028270367514777,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:04:10.510676,0.000401,udp,147.32.84.59,57350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:10.864622,463.102844,udp,76.180.171.127,36215.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1061,597,464,176.83333333333334,0.5626767200754006,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:11.222197,0.024684,udp,147.32.84.164,42148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:11.247819,0.020192,udp,147.32.84.164,34006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:11.706589,0.000258,udp,147.32.84.134,56759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:11.895695,0.000579,udp,129.125.8.62,22257.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:13.022661,0.004475,udp,147.32.84.164,38557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,71,140,105.5,0.33649289099526064,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:13.027498,0.002067,udp,147.32.84.164,39451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,71,203,137.0,0.2591240875912409,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:15.058745,0.009758,udp,147.32.84.164,59713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:15.068761,0.111888,udp,147.32.84.164,35355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:16.682829,0.000393,udp,147.32.84.170,49847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:17.662256,20.032301,tcp,147.32.84.134,40998.0,->,209.85.149.191,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:17.663446,20.01659,tcp,147.32.84.134,58593.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:17.664158,240.974442,tcp,147.32.84.134,37339.0,->,74.125.232.195,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:17.822317,19.873062,tcp,147.32.84.134,39974.0,->,209.85.149.132,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:17.822644,19.872635,tcp,147.32.84.134,39980.0,->,209.85.149.132,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:18.429721,0.002727,udp,147.32.84.164,33981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.429809,0.002901,udp,147.32.84.164,57574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,72,131,101.5,0.35467980295566504,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.429866,16.800388,tcp,147.32.84.164,48654.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.429993,16.800255,tcp,147.32.84.164,48656.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.430194,0.000654,udp,147.32.84.164,52495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.431011,0.000454,udp,147.32.84.164,35301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.431763,0.000368,udp,147.32.84.164,46041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.432714,0.250889,tcp,147.32.84.164,46730.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1544,798,746,154.4,0.5168393782383419,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.432718,0.000301,udp,147.32.84.164,43108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.433990,4.664467,tcp,147.32.84.164,41281.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,13,3050,1054,1996,234.6153846153846,0.34557377049180327,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.733070,0.00467,udp,147.32.84.164,38980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,77,157,117.0,0.32905982905982906,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.733191,0.04256,udp,147.32.84.164,54571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.733322,0.01269,udp,147.32.84.164,49841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,78,213,145.5,0.26804123711340205,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.784163,0.009684,udp,147.32.84.164,55588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,70,175,122.5,0.2857142857142857,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.794349,0.054903,udp,147.32.84.164,55261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.804337,0.000197,udp,147.32.84.164,37949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.807909,0.000258,udp,147.32.84.164,44561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.808291,0.000203,udp,147.32.84.164,41413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.857009,0.020012,udp,147.32.84.164,50677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,586,78,508,293.0,0.13310580204778158,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.865804,0.00032,udp,147.32.84.164,48017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.866460,0.017082,udp,147.32.84.164,47351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,76,165,120.5,0.3153526970954357,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.877751,0.006461,udp,147.32.84.164,46432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.884160,0.064075,udp,147.32.84.164,39838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.958380,0.000305,udp,147.32.84.164,58441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.975307,0.000259,udp,147.32.84.164,42630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.982034,0.007021,udp,147.32.84.164,45417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:18.995385,0.000285,udp,147.32.84.164,58491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:19.039423,0.148951,udp,147.32.84.164,33223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,74,132,103.0,0.3592233009708738,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:19.072221,0.000314,udp,147.32.84.164,50871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:19.072861,0.100474,udp,147.32.84.164,58608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,73,169,121.0,0.30165289256198347,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:19.174025,0.037596,udp,147.32.84.164,59424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:19.212383,0.005245,udp,147.32.84.164,43590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:20.727337,0.006199,tcp,147.32.84.134,40597.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:21.069677,0.000818,udp,147.32.84.164,47063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:21.070772,0.000371,udp,147.32.84.164,39032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:21.071719,14.158449,tcp,147.32.84.164,36417.0,->,89.187.135.126,80.0,FSA_FSA,0.0,0.0,9,630,350,280,70.0,0.5555555555555556,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:21.121265,14.108558,tcp,147.32.84.164,34893.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:21.588651,0.006029,udp,147.32.84.164,55033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,74,145,109.5,0.3378995433789954,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:21.595029,0.00231,udp,147.32.84.164,42884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:22.793214,0.000196,udp,147.32.84.138,37985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:22.814210,0.000177,udp,147.32.84.138,58598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:25.129349,35.073975,udp,147.32.84.229,13363.0,<->,70.190.105.172,6339.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:25.492774,10.101909,icmp,217.246.49.217,3331.0,->,147.32.84.94,,URFIL,0.0,,3,210,210,0,70.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:04:26.475708,0.000292,udp,147.32.84.138,50801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:26.683638,0.000477,udp,147.32.84.170,46980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:27.028207,0.000311,udp,147.32.84.170,41020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:29.745670,0.000314,udp,147.32.84.134,46969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:34.420185,0.000754,udp,125.192.87.21,3663.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,623,73,550,311.5,0.11717495987158909,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:35.646719,0.006286,tcp,147.32.84.164,41306.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2971,1011,1960,270.09090909090907,0.3402894648266577,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:35.669477,0.007068,tcp,147.32.84.164,41308.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1782,995,787,178.2,0.558361391694725,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:36.681995,0.000379,udp,147.32.84.170,52992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:37.302832,0.118388,udp,147.32.86.77,56522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:38.733876,0.005819,tcp,147.32.84.164,46764.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1615,869,746,161.5,0.5380804953560372,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:38.771478,0.000302,udp,147.32.84.134,46635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:46.682715,0.000365,udp,147.32.84.170,43526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:46.683595,0.000461,udp,147.32.84.170,55970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:47.792712,0.000185,udp,147.32.84.134,54388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:47.794198,0.01097,tcp,147.32.84.134,40600.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:47.884108,61.298996,tcp,147.32.84.165,2152.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:04:48.324125,0.000253,udp,147.32.84.170,59811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:48.325648,5.71027,tcp,147.32.84.170,41813.0,->,87.248.203.9,80.0,FSPA_FSPA,0.0,0.0,27,9883,1829,8054,366.037037037037,0.185065263583932,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:49.425888,0.000299,udp,147.32.84.170,36994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:49.426180,0.000246,udp,147.32.84.170,36282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:50.105651,0.000345,udp,147.32.84.170,60990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:50.386360,0.43337,udp,147.32.84.229,13363.0,<->,114.42.8.171,32268.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:04:50.768294,0.000234,udp,147.32.85.25,35540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:04:54.057921,0.006278,tcp,147.32.84.164,41316.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3048,1058,1990,277.09090909090907,0.34711286089238846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:56.816198,0.000224,udp,147.32.84.134,56763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:04:58.026678,0.000327,udp,147.32.84.170,36680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:04:58.051088,0.039904,tcp,147.32.84.164,46774.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1740,950,790,174.0,0.5459770114942529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:04:59.016455,0.000418,udp,147.32.84.170,45102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:05:04.079034,0.171889,udp,147.32.84.134,36975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,88,231,159.5,0.27586206896551724,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.082397,0.010056,udp,147.32.84.134,44362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,536,84,452,268.0,0.15671641791044777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.082473,0.001534,udp,147.32.84.134,53308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.088545,34.541759,tcp,147.32.84.134,56986.0,->,195.113.232.82,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.092634,34.536171,tcp,147.32.84.134,59701.0,->,92.123.64.161,443.0,SRPA_FSPA,0.0,0.0,17,3056,1065,1991,179.76470588235293,0.3484947643979058,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.093047,34.540939,tcp,147.32.84.134,32813.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.124593,304.621826,tcp,147.32.84.134,41997.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.124599,304.62207,tcp,147.32.84.134,41998.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,31,6897,1500,5397,222.48387096774192,0.21748586341887777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.254860,34.374428,tcp,147.32.84.134,59143.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.254945,34.374107,tcp,147.32.84.134,59144.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.255024,34.374748,tcp,147.32.84.134,59145.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.255246,34.374977,tcp,147.32.84.134,59148.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:04.408002,0.000611,udp,217.94.242.238,29074.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:04.573571,0.00074,udp,98.113.215.191,24996.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:05.865084,0.009206,tcp,147.32.84.134,40636.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:06.025542,0.02994,udp,147.32.84.134,45225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:06.056720,0.017266,udp,147.32.84.134,54335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:06.451921,0.000502,udp,147.32.84.134,37050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,481,86,395,240.5,0.1787941787941788,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:06.453148,303.306671,tcp,147.32.84.134,49963.0,->,195.113.232.91,443.0,FSRPA_FSPA,0.0,0.0,19618,19653709,458997,19194712,1001.8202161280457,0.023354217771312274,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:09.515942,0.0,tcp,147.32.84.165,2153.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.516329,0.0,tcp,147.32.84.165,2154.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.533225,0.0,tcp,147.32.84.165,2156.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.685578,0.0,tcp,147.32.84.165,2157.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.695585,0.0,tcp,147.32.84.165,2158.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.715607,0.0,tcp,147.32.84.165,2160.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:09.885770,0.0,tcp,147.32.84.165,2161.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:10.200732,0.000237,udp,147.32.84.138,39382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:05:10.446585,0.000532,udp,83.174.250.113,11545.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:10.666718,0.0,tcp,147.32.84.165,2164.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:10.867087,0.0,tcp,147.32.84.165,2165.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:11.468688,0.0,tcp,147.32.84.165,2163.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:14.885424,0.000246,udp,147.32.84.134,48490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:15.991993,1.730143,udp,168.11.42.2,26403.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1206,1025,181,201.0,0.8499170812603648,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:16.665381,0.000781,udp,24.212.20.32,61771.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:16.682022,0.000383,udp,147.32.84.170,41667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:05:21.704986,0.003468,udp,84.105.173.186,62187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3034,60,2974,758.5,0.01977587343441002,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:23.084921,0.0,tcp,147.32.84.165,2388.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.084932,0.0,tcp,147.32.84.165,2386.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.685579,0.0,tcp,147.32.84.165,2399.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.685689,0.0,tcp,147.32.84.165,2400.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.685695,0.0,tcp,147.32.84.165,2398.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.685748,0.0,tcp,147.32.84.165,2403.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.685813,0.0,tcp,147.32.84.165,2404.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:23.905648,0.000228,udp,147.32.84.134,50682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:05:24.372794,139.310287,tcp,147.32.86.168,33717.0,->,74.125.232.207,443.0,FSPA_FSPA,0.0,0.0,99,29318,19478,9840,296.14141414141415,0.6643700115969712,18,1,flow=Background-google-analytics16,Background,-1 2011-08-16 18:05:25.027987,0.000174,udp,147.32.84.138,39795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:05:26.682648,0.000471,udp,147.32.84.170,41496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:05:26.684737,0.018035,tcp,147.32.84.170,49606.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:05:28.195240,7.173069,tcp,147.32.84.164,46516.0,->,87.248.203.9,80.0,FSPA_FSPA,0.0,0.0,16,2541,1651,890,158.8125,0.6497441951987406,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:28.397470,0.00068,udp,46.146.66.195,25722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:28.847295,0.000341,udp,147.32.84.164,57005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:29.036867,0.311349,tcp,147.32.84.170,33723.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:05:31.161465,0.000221,udp,147.32.84.164,39573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:31.170052,0.000132,udp,147.32.84.164,60428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:31.171397,0.000382,udp,147.32.84.164,54489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:31.171783,0.000289,udp,147.32.84.164,44331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:05:34.807394,3348.179688,udp,147.32.84.94,7103.0,<->,217.224.120.254,7525.0,CON,0.0,0.0,116,95879,94139,1740,826.5431034482758,0.9818521261172937,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:35.070625,15.265033,icmp,81.62.92.133,771.0,->,147.32.84.94,27340.0,URP,0.0,,4,280,280,0,70.0,1.0,18,0,flow=Background,Background,-1 2011-08-16 18:05:35.102156,0.0,tcp,147.32.84.165,2626.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.102241,0.0,tcp,147.32.84.165,2627.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.323204,0.000147,udp,147.32.84.138,51142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:05:35.702917,0.0,tcp,147.32.84.165,2640.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.703017,0.0,tcp,147.32.84.165,2638.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.703022,0.0,tcp,147.32.84.165,2639.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.703127,0.0,tcp,147.32.84.165,2644.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.703211,0.0,tcp,147.32.84.165,2642.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:35.703215,0.0,tcp,147.32.84.165,2643.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:38.143822,0.206549,tcp,147.32.86.20,4945.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,31790,1089,30701,775.3658536585366,0.0342560553633218,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:05:41.397400,1.249359,tcp,147.32.86.20,4947.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,107,107311,1826,105485,1002.9065420560747,0.01701596294881233,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:05:42.371097,0.00485,udp,208.54.39.202,46166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:47.119766,0.0,tcp,147.32.84.165,2868.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.119780,0.0,tcp,147.32.84.165,2866.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.719964,0.0,tcp,147.32.84.165,2879.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.720095,0.0,tcp,147.32.84.165,2880.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.720158,0.0,tcp,147.32.84.165,2878.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.720162,0.0,tcp,147.32.84.165,2883.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:47.720219,0.0,tcp,147.32.84.165,2884.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:51.508486,1.096786,udp,41.28.144.58,39422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,864,730,134,216.0,0.8449074074074074,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:51.776864,67.071465,tcp,139.18.146.50,55446.0,->,147.32.85.8,80.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:05:53.638880,3426.565918,udp,188.250.8.15,30073.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,828,468,360,69.0,0.5652173913043478,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:56.303324,0.000249,udp,147.32.84.138,33237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:05:56.695821,1674.388306,tcp,62.44.12.24,1955.0,->,147.32.84.34,22.0,SPA_SPA,0.0,0.0,558,230507,65392,165115,413.09498207885304,0.28368769711982716,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:05:58.935963,0.00046,udp,84.123.134.26,22171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:05:59.136713,61.302032,tcp,147.32.84.165,2937.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:05:59.136807,0.0,tcp,147.32.84.165,3107.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.136815,0.0,tcp,147.32.84.165,3108.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.301861,6.708419,tcp,66.249.72.153,64828.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,24,12820,1136,11684,534.1666666666666,0.08861154446177848,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:05:59.737764,0.0,tcp,147.32.84.165,3121.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.737851,0.0,tcp,147.32.84.165,3119.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.737915,0.0,tcp,147.32.84.165,3120.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.738045,0.0,tcp,147.32.84.165,3125.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.738110,0.0,tcp,147.32.84.165,3123.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:05:59.738164,0.0,tcp,147.32.84.165,3124.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:00.041097,0.000237,udp,147.32.84.170,48751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:00.566088,0.008446,tcp,147.32.84.134,40646.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:01.441140,0.00709,tcp,147.32.84.164,50028.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3574,1044,2530,324.90909090909093,0.2921096810296586,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:01.835327,0.000255,udp,147.32.85.34,58211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:01.963278,0.121399,udp,147.32.85.6,62827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:05.894786,0.000259,udp,147.32.84.59,52388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:06.682106,0.000348,udp,147.32.84.170,58086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:07.538335,0.00633,tcp,147.32.84.164,50034.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3545,1031,2514,322.27272727272725,0.2908321579689704,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:08.386058,0.005839,tcp,147.32.84.164,56669.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1721,931,790,172.1,0.5409645554909936,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:08.401592,0.006884,tcp,147.32.84.164,50039.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1818,1031,787,181.8,0.5671067106710671,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:09.585451,0.000295,udp,147.32.84.134,59291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:09.587073,0.005521,tcp,147.32.84.134,40647.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:11.154299,0.0,tcp,147.32.84.165,3303.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:11.154305,0.0,tcp,147.32.84.165,3304.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:11.349889,0.012325,tcp,147.32.84.164,56675.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1690,900,790,169.0,0.5325443786982249,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:11.645954,0.000224,udp,147.32.84.138,43670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:11.754656,0.0,tcp,147.32.84.165,3312.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:11.754664,0.0,tcp,147.32.84.165,3313.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:11.754745,0.0,tcp,147.32.84.165,3315.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:11.754752,0.0,tcp,147.32.84.165,3316.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:12.270123,1677.125732,udp,61.62.148.196,54387.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1600,1004,596,266.6666666666667,0.6275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:06:12.949839,0.006837,tcp,147.32.84.164,50046.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3542,1030,2512,322.0,0.29079616036137773,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:13.093602,0.000347,udp,147.32.84.164,38825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:14.621372,0.006378,tcp,147.32.84.164,50052.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3546,1032,2514,322.3636363636364,0.2910321489001692,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:16.329257,0.000435,udp,147.32.84.170,57827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:16.331558,3.697267,tcp,147.32.84.170,46566.0,->,87.248.202.139,80.0,FSPA_FSPA,0.0,0.0,12,3145,651,2494,262.0833333333333,0.20699523052464228,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:16.730333,0.00018,udp,147.32.84.138,49031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:23.170875,0.0,tcp,147.32.84.165,3484.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.170941,0.0,tcp,147.32.84.165,3485.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.771922,0.0,tcp,147.32.84.165,3493.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.771999,0.0,tcp,147.32.84.165,3494.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.772057,0.0,tcp,147.32.84.165,3496.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.772064,0.0,tcp,147.32.84.165,3497.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:23.772146,0.0,tcp,147.32.84.165,3499.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:25.198640,2846.1521,udp,80.101.62.252,33015.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1584,1404,180,264.0,0.8863636363636364,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:06:26.213665,14.622912,tcp,147.32.84.59,51642.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:06:26.682160,0.000484,udp,147.32.84.170,52774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:27.368938,0.138044,udp,147.32.84.59,51840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:27.681078,0.021262,udp,147.32.84.59,64291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,70,139,104.5,0.3349282296650718,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:27.717934,0.000306,udp,147.32.84.59,52056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:28.673997,0.000249,udp,147.32.85.25,47958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:30.989347,0.000377,udp,147.32.84.138,43388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:30.994487,0.000172,udp,147.32.84.138,48950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:33.039162,0.000293,udp,147.32.84.164,42542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.052775,0.000272,udp,147.32.84.164,43239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.053972,0.00566,tcp,147.32.84.164,56687.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1702,912,790,170.2,0.535840188014101,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.100887,0.000362,udp,147.32.84.164,43508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.102569,0.000371,udp,147.32.84.164,51999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.103218,0.00033,udp,147.32.84.164,47537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.103969,0.000321,udp,147.32.84.164,33059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:33.104470,0.000316,udp,147.32.84.164,57274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:34.682931,0.006515,tcp,147.32.84.164,56693.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1688,898,790,168.8,0.5319905213270142,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:34.713850,0.00771,tcp,147.32.84.164,50063.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1793,1006,787,179.3,0.5610708310094813,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:34.848029,1.602525,udp,147.32.84.164,36978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,92,161,126.5,0.36363636363636365,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:35.188462,0.0,tcp,147.32.84.165,3665.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.188593,0.0,tcp,147.32.84.165,3664.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.780904,0.006046,tcp,147.32.84.164,56696.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1624,878,746,162.4,0.5406403940886699,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:35.789185,0.0,tcp,147.32.84.165,3674.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.789314,0.0,tcp,147.32.84.165,3673.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.789366,0.0,tcp,147.32.84.165,3677.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.789451,0.0,tcp,147.32.84.165,3676.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.789503,0.0,tcp,147.32.84.165,3680.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:35.790230,0.007401,tcp,147.32.84.164,50066.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1801,1014,787,180.1,0.5630205441421433,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:36.646177,0.000367,udp,147.32.84.134,45201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:36.683473,0.0004,udp,147.32.84.170,40705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:39.078278,0.005714,tcp,147.32.84.164,56699.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1695,905,790,169.5,0.5339233038348082,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:39.090410,0.009274,tcp,147.32.84.164,50069.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1798,1011,787,179.8,0.5622914349276974,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:40.758300,30.187841,tcp,147.32.84.59,41651.0,->,78.46.52.245,38088.0,SRPA_SPA,0.0,0.0,16,1715,1206,509,107.1875,0.7032069970845481,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:06:43.516760,0.006597,tcp,147.32.84.164,56702.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1685,895,790,168.5,0.5311572700296736,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:43.922593,0.000158,udp,147.32.84.138,52143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:06:44.215418,3.843202,tcp,147.32.84.170,51371.0,->,87.248.202.139,80.0,FSPA_FSPA,0.0,0.0,13,3255,717,2538,250.3846153846154,0.22027649769585253,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:44.497821,3268.628906,udp,147.32.84.94,7103.0,->,85.226.136.215,7108.0,INT,0.0,,12,1008,1008,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:06:45.677406,0.000333,udp,147.32.84.134,57359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:45.679079,0.007314,tcp,147.32.84.134,40651.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:46.373596,0.006137,tcp,147.32.84.164,50073.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3578,1054,2524,325.27272727272725,0.29457797652319734,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:46.386271,0.028467,tcp,147.32.84.164,56705.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1652,906,746,165.2,0.5484261501210653,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:46.401588,0.007032,tcp,147.32.84.164,50075.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1825,1038,787,182.5,0.5687671232876712,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:46.684247,0.000358,udp,147.32.84.170,40793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:47.206471,0.0,tcp,147.32.84.165,3844.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:47.206478,0.0,tcp,147.32.84.165,3845.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:47.806650,0.0,tcp,147.32.84.165,3853.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:47.806664,0.0,tcp,147.32.84.165,3854.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:47.806750,0.0,tcp,147.32.84.165,3856.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:47.806765,0.0,tcp,147.32.84.165,3857.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:50.171846,0.000633,udp,2.202.34.132,10273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:06:52.888926,0.006929,tcp,147.32.84.164,50079.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3587,1058,2529,326.09090909090907,0.294954000557569,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:52.919024,0.006233,tcp,147.32.84.164,56711.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1651,905,746,165.1,0.548152634766808,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:54.697944,0.00033,udp,147.32.84.134,43215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:06:56.625387,0.006825,tcp,147.32.84.164,50088.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1802,1015,787,180.2,0.5632630410654828,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:56.684613,0.000391,udp,147.32.84.170,42848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:06:57.820070,0.008629,tcp,147.32.84.164,50091.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1818,1031,787,181.8,0.5671067106710671,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.223289,0.0,tcp,147.32.84.165,3994.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:59.223399,0.0,tcp,147.32.84.165,3996.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:59.716748,0.000456,udp,147.32.84.164,48271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,75,496,285.5,0.13134851138353765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.740947,459.315552,tcp,147.32.84.164,52467.0,->,74.125.232.200,80.0,FSRPA_FSPA,0.0,0.0,210,141097,56361,84736,671.8904761904762,0.39944860627795065,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.741038,245.52063,tcp,147.32.84.164,52471.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,26,7662,2933,4729,294.6923076923077,0.3827982250065257,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.749586,0.0002,udp,147.32.84.164,33825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.750468,0.000437,udp,147.32.84.164,51190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,80,168,124.0,0.3225806451612903,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:06:59.824216,0.0,tcp,147.32.84.165,4000.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:59.824276,0.0,tcp,147.32.84.165,4002.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:06:59.824338,0.0,tcp,147.32.84.165,4004.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:00.311188,0.000409,udp,147.32.84.164,60248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:07:00.844713,0.000677,udp,95.220.93.198,2891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,605,75,530,302.5,0.12396694214876033,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:01.161355,0.111178,udp,147.32.84.164,34712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,86,257,171.5,0.25072886297376096,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:07:01.345545,0.020041,udp,147.32.84.164,39379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,85,142,113.5,0.3744493392070485,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:07:01.771747,0.019524,udp,147.32.84.164,56383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:07:02.027639,0.000405,udp,147.32.84.170,53681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:03.758234,0.000305,udp,147.32.84.134,45985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:07:06.711631,0.000285,udp,147.32.86.20,53229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:07:10.485991,3042.03833,udp,195.38.102.137,38048.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:11.240669,61.298706,tcp,147.32.84.165,4021.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:07:11.240680,0.0,tcp,147.32.84.165,4116.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:11.671062,0.0,tcp,147.32.84.165,4120.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:11.841706,0.0,tcp,147.32.84.165,4122.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:11.841753,0.0,tcp,147.32.84.165,4124.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:11.841854,0.0,tcp,147.32.84.165,4126.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:12.442492,0.0,tcp,147.32.84.165,4128.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:12.780303,0.013367,tcp,147.32.84.134,40654.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:07:16.684176,0.018887,tcp,147.32.84.170,36673.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:17.832268,0.000727,udp,71.199.118.82,3760.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,75,481,278.0,0.13489208633093525,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:20.470788,0.000265,udp,147.32.85.25,44043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:07:23.258133,0.0,tcp,147.32.84.165,4236.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:23.858981,0.0,tcp,147.32.84.165,4242.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:23.859081,0.0,tcp,147.32.84.165,4244.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:23.859145,0.0,tcp,147.32.84.165,4246.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:24.459829,0.0,tcp,147.32.84.165,4248.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:26.684024,0.000422,udp,147.32.84.170,36304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:26.686083,0.018143,tcp,147.32.84.170,36674.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:30.825430,0.009825,tcp,147.32.84.134,40656.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:07:31.158288,0.712392,udp,147.32.84.229,13363.0,<->,67.160.223.96,51033.0,CON,0.0,0.0,4,657,536,121,164.25,0.8158295281582952,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:32.556344,321.225372,udp,147.32.84.229,13363.0,<->,174.58.21.71,18301.0,CON,0.0,0.0,4,650,514,136,162.5,0.7907692307692308,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:35.009419,0.000496,udp,147.32.87.33,33866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:07:35.275438,0.0,tcp,147.32.84.165,4356.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:35.876267,0.0,tcp,147.32.84.165,4362.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:35.876362,0.0,tcp,147.32.84.165,4364.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:35.876420,0.0,tcp,147.32.84.165,4366.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:36.476893,0.0,tcp,147.32.84.165,4368.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:36.683516,0.000425,udp,147.32.84.170,45644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:42.399322,3311.908447,rtp,208.88.186.6,34021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,6122,5354,768,680.2222222222222,0.8745508003920287,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:44.461184,111.184387,tcp,147.32.86.111,34342.0,->,93.184.220.20,80.0,SRPA_FSPA,0.0,0.0,28,16574,4155,12419,591.9285714285714,0.25069385784964404,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:07:44.627468,0.000798,udp,147.32.84.138,53898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:07:46.209646,0.291519,tcp,147.32.85.120,39935.0,->,192.116.242.20,80.0,FSPA_FSPA,0.0,0.0,11,2247,575,1672,204.27272727272728,0.255896751223854,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:07:46.219158,0.000451,udp,147.32.84.138,46672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:07:46.430802,0.32423,tcp,147.32.86.111,34349.0,->,76.74.255.123,80.0,SRPA_FSPA,0.0,0.0,9,2140,1614,526,237.77777777777777,0.7542056074766356,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:07:47.293025,0.0,tcp,147.32.84.165,4476.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:47.893635,0.0,tcp,147.32.84.165,4482.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:47.893842,0.0,tcp,147.32.84.165,4484.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:47.893857,0.0,tcp,147.32.84.165,4486.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:48.494499,0.0,tcp,147.32.84.165,4488.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:51.154711,3014.468994,udp,89.128.208.81,63868.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,718,532,186,119.66666666666667,0.7409470752089137,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:52.085629,0.310302,udp,147.32.85.84,13716.0,<->,114.166.250.105,11870.0,CON,0.0,0.0,2,565,77,488,282.5,0.13628318584070798,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:56.683166,0.00044,udp,147.32.84.170,53963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:07:57.889212,0.000285,udp,147.32.84.134,57048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:07:57.890143,0.009155,tcp,147.32.84.134,40659.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:07:59.310215,0.0,tcp,147.32.84.165,4595.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.310310,0.0,tcp,147.32.84.165,4596.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.310415,0.0,tcp,147.32.84.165,4597.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.450996,0.321233,udp,147.32.84.229,13363.0,<->,118.160.160.201,59427.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:07:59.910652,0.0,tcp,147.32.84.165,4602.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.910720,0.0,tcp,147.32.84.165,4601.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.910727,0.0,tcp,147.32.84.165,4604.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.910779,0.0,tcp,147.32.84.165,4603.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:07:59.910786,0.0,tcp,147.32.84.165,4606.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:00.511966,0.0,tcp,147.32.84.165,4607.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:00.512045,0.0,tcp,147.32.84.165,4608.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:01.857717,0.000204,udp,147.32.85.34,52713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:03.031761,0.000313,udp,147.32.84.170,34018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:03.032801,0.359239,tcp,147.32.84.170,55576.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:04.846431,0.000403,udp,147.32.84.170,55129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:06.163397,0.093282,tcp,147.32.85.7,55876.0,->,4.23.47.126,80.0,FSPA_FSPA,0.0,0.0,16,6024,1074,4950,376.5,0.17828685258964144,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:08:06.169810,0.000593,udp,147.32.85.7,59626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,406,72,334,203.0,0.17733990147783252,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:06.682353,0.000385,udp,147.32.84.170,41564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:11.327143,0.0,tcp,147.32.84.165,4716.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:11.451880,0.000722,udp,178.125.241.116,15711.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:11.552865,0.000575,udp,147.32.84.170,57352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,82,186,134.0,0.30597014925373134,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:11.556645,3.478258,tcp,147.32.84.170,45011.0,->,87.248.203.9,80.0,FSPA_FSPA,0.0,0.0,13,2792,722,2070,214.76923076923077,0.25859598853868193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:11.928489,0.0,tcp,147.32.84.165,4722.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:11.928633,0.0,tcp,147.32.84.165,4724.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:11.928691,0.0,tcp,147.32.84.165,4726.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:12.528955,61.283245,tcp,147.32.84.165,4743.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:08:12.529008,0.0,tcp,147.32.84.165,4728.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:13.026227,2518.474365,udp,69.121.167.227,15556.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,652,316,336,81.5,0.48466257668711654,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:13.071043,0.262184,tcp,147.32.84.170,51221.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:13.233563,1065.512573,udp,147.32.84.229,13363.0,<->,68.170.92.71,60194.0,CON,0.0,0.0,5,2908,2788,120,581.6,0.9587345254470426,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:13.635808,0.30583,tcp,147.32.84.170,43482.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:14.087816,598.888489,tcp,147.32.84.170,33528.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,113,43461,32731,10730,384.6106194690266,0.7531119854582269,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:14.477965,240.787552,tcp,147.32.84.164,50904.0,->,74.125.232.205,80.0,FSPA_FSPA,0.0,0.0,72,44993,2695,42298,624.9027777777778,0.0598982063876603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.765852,0.269519,udp,147.32.84.164,44197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.929576,0.000439,udp,147.32.84.164,33202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.929697,0.000404,udp,147.32.84.164,52321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.930277,240.335236,tcp,147.32.84.164,34937.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,25,4957,1289,3668,198.28,0.26003631228565666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.930328,240.335098,tcp,147.32.84.164,34938.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,25,6002,1289,4713,240.08,0.21476174608463847,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:14.931031,240.334412,tcp,147.32.84.164,47894.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,25,5944,1289,4655,237.76,0.21685733512786004,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:15.035765,0.228601,udp,147.32.84.164,54738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,73,157,115.0,0.3173913043478261,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:15.252487,0.009619,udp,147.32.84.164,46618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:15.854984,0.507332,tcp,147.32.84.164,54012.0,->,74.125.108.175,80.0,FSRPA_SPA,0.0,0.0,2389,2420680,64336,2356344,1013.2607785684387,0.02657765586529405,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:15.937196,0.010657,tcp,147.32.84.134,51922.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:08:16.719714,0.000189,udp,147.32.84.164,49981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:16.720314,0.000236,udp,147.32.84.164,36542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:08:17.701607,0.000152,udp,147.32.85.25,45056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:18.078933,123.407402,udp,212.21.31.87,35594.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:18.259001,2.001781,tcp,147.32.84.171,47510.0,->,90.192.40.13,60388.0,FSPA_FSRPA,0.0,0.0,13,1675,744,931,128.84615384615384,0.44417910447761194,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:08:19.884877,0.011455,tcp,147.32.84.59,49854.0,->,217.31.49.88,80.0,FSPA_FSPA,0.0,0.0,13,4942,1045,3897,380.15384615384613,0.21145285309591258,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:08:19.942025,0.000333,udp,147.32.84.59,52992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,81,164,122.5,0.3306122448979592,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:22.241869,191.150986,udp,149.5.45.9,43045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,8317,5280,3037,924.1111111111111,0.634844294817843,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:23.344426,0.0,tcp,147.32.84.165,4837.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:23.620311,0.290057,udp,147.32.84.229,13363.0,<->,220.144.89.213,37948.0,CON,0.0,0.0,2,563,77,486,281.5,0.13676731793960922,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:23.862485,297.186829,tcp,195.59.185.234,52723.0,->,147.32.86.44,443.0,FSPA_FSRPA,0.0,0.0,464,61368,43434,17934,132.25862068965517,0.7077630035197497,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:08:23.945224,0.0,tcp,147.32.84.165,4843.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:23.945333,0.0,tcp,147.32.84.165,4845.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:23.945439,0.0,tcp,147.32.84.165,4847.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:24.546161,0.0,tcp,147.32.84.165,4849.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:25.276481,0.000514,udp,95.115.223.232,5107.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:26.682375,0.000402,udp,147.32.84.170,32801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:33.651100,0.000226,udp,147.32.84.138,37732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:33.980947,0.000252,udp,147.32.84.134,41059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:08:35.023700,0.000287,udp,147.32.84.138,41579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:35.123456,0.008253,udp,147.32.84.59,54246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,80,426,253.0,0.15810276679841898,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:35.361664,0.0,tcp,147.32.84.165,4976.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.361779,0.0,tcp,147.32.84.165,4977.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.361853,0.0,tcp,147.32.84.165,4978.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.563414,0.140424,udp,147.32.84.59,58373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:35.962959,0.0,tcp,147.32.84.165,4983.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.963028,0.0,tcp,147.32.84.165,4982.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.963035,0.0,tcp,147.32.84.165,4985.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.963084,0.0,tcp,147.32.84.165,4984.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:35.963091,0.0,tcp,147.32.84.165,4987.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:36.563913,0.0,tcp,147.32.84.165,4988.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:36.563920,0.0,tcp,147.32.84.165,4989.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:40.788694,0.000308,udp,147.32.84.59,58111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:46.684637,0.000839,udp,147.32.84.170,45262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:46.686253,0.018158,tcp,147.32.84.170,48272.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:46.969123,0.0003,udp,147.32.84.138,46026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:47.379266,0.0,tcp,147.32.84.165,1121.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.379378,0.0,tcp,147.32.84.165,1122.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.379390,0.0,tcp,147.32.84.165,1123.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.980120,0.0,tcp,147.32.84.165,1128.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.980190,0.0,tcp,147.32.84.165,1127.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.980198,0.0,tcp,147.32.84.165,1130.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.980250,0.0,tcp,147.32.84.165,1129.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:47.980257,0.0,tcp,147.32.84.165,1132.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:48.580939,0.0,tcp,147.32.84.165,1133.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:48.580954,0.0,tcp,147.32.84.165,1134.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:49.372325,0.000458,udp,147.32.84.138,40597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:56.684969,0.000316,udp,147.32.84.170,60619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:08:57.524958,3030.307373,udp,109.213.197.69,60249.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:08:57.934146,0.000203,udp,147.32.84.138,47372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:08:59.396579,0.0,tcp,147.32.84.165,1241.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.396712,0.0,tcp,147.32.84.165,1242.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.396726,0.0,tcp,147.32.84.165,1243.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.997697,0.0,tcp,147.32.84.165,1248.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.997711,0.0,tcp,147.32.84.165,1247.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.997716,0.0,tcp,147.32.84.165,1250.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.997842,0.0,tcp,147.32.84.165,1249.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:08:59.997857,0.0,tcp,147.32.84.165,1252.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:00.598241,0.0,tcp,147.32.84.165,1253.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:00.598321,0.0,tcp,147.32.84.165,1254.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:01.042187,0.000333,udp,147.32.84.134,44801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:01.043093,0.042887,tcp,147.32.84.134,51927.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:02.622152,0.000455,udp,147.32.87.48,4041.0,->,147.32.86.245,161.0,INT,0.0,,2,262,262,0,131.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:09:03.059916,15.243204,udp,147.32.84.94,7103.0,->,217.44.101.113,7188.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:09:06.685181,0.018443,tcp,147.32.84.170,36700.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:09:07.303167,0.000602,udp,91.219.164.4,32845.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:09:10.098715,0.006086,tcp,147.32.84.134,51928.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:11.415605,0.0,tcp,147.32.84.165,1361.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:11.415634,0.0,tcp,147.32.84.165,1362.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:11.415638,0.0,tcp,147.32.84.165,1363.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:11.574517,0.000202,udp,147.32.84.13,46369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:11.636292,0.010925,tcp,147.32.84.13,43669.0,->,147.32.80.13,80.0,SRPA_FSPA,0.0,0.0,12,6924,1162,5762,577.0,0.1678220681686886,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:09:12.014952,0.0,tcp,147.32.84.165,1368.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.015030,0.0,tcp,147.32.84.165,1367.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.015040,0.0,tcp,147.32.84.165,1370.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.015083,0.0,tcp,147.32.84.165,1369.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.015137,0.0,tcp,147.32.84.165,1372.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.615878,0.0,tcp,147.32.84.165,1373.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:12.615949,0.0,tcp,147.32.84.165,1374.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:15.357935,0.092172,tcp,147.32.84.13,43704.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,25,11942,1614,10328,477.68,0.1351532406632055,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:09:15.423915,0.000241,udp,147.32.84.138,43908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:16.404681,0.003037,tcp,147.32.84.13,43747.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1960,944,1016,217.77777777777777,0.4816326530612245,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:09:16.685766,0.018359,tcp,147.32.84.170,57919.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:09:18.184536,0.000219,udp,147.32.85.34,63198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:19.117082,0.000235,udp,147.32.84.134,34818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:23.292482,0.000167,udp,147.32.84.138,58427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:23.431082,0.0,tcp,147.32.84.165,1482.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:23.431226,61.288116,tcp,147.32.84.165,1401.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:09:23.431230,0.0,tcp,147.32.84.165,1483.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:23.861013,0.0,tcp,147.32.84.165,1486.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.032219,0.0,tcp,147.32.84.165,1489.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.032281,0.0,tcp,147.32.84.165,1488.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.032288,0.0,tcp,147.32.84.165,1491.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.032344,0.0,tcp,147.32.84.165,1490.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.032402,0.0,tcp,147.32.84.165,1493.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.632956,0.0,tcp,147.32.84.165,1494.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.633027,0.0,tcp,147.32.84.165,1495.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:09:24.937142,0.00029,udp,147.32.84.164,33982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.552010,68.701591,tcp,147.32.84.164,56119.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,22,8366,1868,6498,380.27272727272725,0.22328472388238108,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.843511,0.000231,udp,147.32.84.164,49048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.844133,0.006283,tcp,147.32.84.164,50127.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3520,1020,2500,320.0,0.2897727272727273,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.863954,0.000257,udp,147.32.84.164,52480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.964424,0.000273,udp,147.32.84.164,42194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.966275,0.000208,udp,147.32.84.164,50429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.967627,0.000285,udp,147.32.84.164,41273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.967918,0.000217,udp,147.32.84.164,44066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.967997,0.000353,udp,147.32.84.164,46506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,80,168,124.0,0.3225806451612903,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:26.968479,0.000413,udp,147.32.84.164,45031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:28.115231,0.020314,udp,147.32.84.164,42642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,86,257,171.5,0.25072886297376096,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:28.147828,0.009284,tcp,147.32.84.134,51930.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:28.197488,0.009986,udp,147.32.84.164,43992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:28.207754,0.000338,udp,147.32.84.164,38727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:09:31.493256,0.000323,udp,147.32.84.59,49709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:32.196418,0.000277,udp,147.32.84.138,48857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:34.771354,9.6605,icmp,147.32.87.1,261.0,->,147.32.87.27,37664.0,RED,0.0,,2,140,140,0,70.0,1.0,18,0,flow=Background,Background,-1 2011-08-16 18:09:36.685964,0.018192,tcp,147.32.84.170,57922.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:09:37.169513,0.049432,tcp,147.32.84.134,51931.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:41.552594,0.000639,udp,178.126.189.137,17092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:09:42.235493,0.000258,udp,147.32.84.138,55262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:46.230688,0.000362,udp,147.32.84.134,49288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:09:48.634480,0.000118,udp,147.32.84.138,40792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:50.640606,0.000108,udp,147.32.85.25,48843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:09:52.555790,0.000563,udp,84.15.181.97,34716.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:02.954973,10.838857,udp,89.239.124.6,45786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1087,545,542,271.75,0.5013799448022079,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:04.261753,0.000307,udp,147.32.84.134,57682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:04.262713,0.000291,udp,147.32.84.134,59091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:06.481106,0.000615,udp,2.133.64.19,42483.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:07.095834,0.00034,udp,147.32.84.170,44393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:07.098039,0.323596,tcp,147.32.84.170,55606.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:07.145062,0.000286,udp,147.32.84.138,38788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:10:13.284639,0.000289,udp,147.32.84.134,39893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:16.178984,3586.428955,icmp,147.32.80.9,771.0,->,147.32.86.247,35072.0,URP,0.0,,15,1050,1050,0,70.0,1.0,18,0,flow=Background,Background,-1 2011-08-16 18:10:17.216865,0.0008,udp,217.24.79.150,53638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:18.837992,85.834419,udp,147.32.84.59,17344.0,<->,188.40.34.167,50012.0,CON,0.0,0.0,445,385249,62322,322927,865.7280898876404,0.16177069895054885,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:10:20.722766,10.124499,tcp,147.32.84.59,51770.0,->,92.123.64.145,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:10:22.304873,0.0243,tcp,147.32.84.134,51936.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:22.493284,250.79953,tcp,147.32.84.59,65011.0,->,209.85.149.132,443.0,FSRPA_SPA,0.0,0.0,15,1783,1083,700,118.86666666666666,0.6074032529444756,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:10:24.290215,61.299133,tcp,147.32.84.165,1506.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:10:24.583232,0.000125,udp,147.32.86.126,58332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,64,139,101.5,0.31527093596059114,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:10:26.683038,0.000428,udp,147.32.84.170,39935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:30.729071,10.038741,tcp,147.32.85.7,55781.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=Background-google-analytics3,Background,-1 2011-08-16 18:10:30.903768,0.000559,udp,87.210.67.224,60568.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:36.288850,0.001566,udp,114.46.35.70,24005.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:10:36.684549,0.000434,udp,147.32.84.170,43677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:36.685565,0.000367,udp,147.32.84.170,55693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:40.363454,0.000254,udp,147.32.84.134,44709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:46.686587,0.018217,tcp,147.32.84.170,47051.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:47.848240,3.093546,tcp,91.135.102.251,23785.0,->,147.32.86.44,10966.0,SR_SA,0.0,0.0,4,290,134,156,72.5,0.46206896551724136,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:10:49.392809,0.000274,udp,147.32.84.134,35177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:10:52.850084,0.000312,udp,147.32.84.138,39078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:10:55.312488,0.000374,udp,147.32.84.59,64459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,80,239,159.5,0.2507836990595611,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:10:56.318043,9.047536,tcp,76.164.193.170,80.0,->,147.32.85.114,47985.0,SA_,0.0,,2,124,124,0,62.0,1.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:10:56.684892,0.000299,udp,147.32.84.170,38944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:56.685721,0.000295,udp,147.32.84.170,44726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:10:59.637974,204.316528,udp,147.32.84.229,13363.0,<->,92.40.124.246,37241.0,CON,0.0,0.0,9,1288,878,410,143.11111111111111,0.6816770186335404,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:00.032859,0.000799,udp,212.25.10.224,20561.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,75,479,277.0,0.13537906137184116,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:01.441214,0.001354,udp,147.32.84.79,55384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,85,254,169.5,0.25073746312684364,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:03.187281,0.000278,udp,147.32.84.138,50468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:03.595542,0.00032,udp,147.32.84.138,52436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:05.951608,0.000922,udp,147.32.84.138,55432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:06.265293,2365.204346,udp,147.32.84.229,13363.0,<->,95.124.74.16,14336.0,CON,0.0,0.0,4,428,286,142,107.0,0.6682242990654206,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:06.683913,0.00054,udp,147.32.84.170,57616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:07.432060,0.007142,tcp,147.32.84.134,51941.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:11:08.257245,0.000288,udp,147.32.84.138,37115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:09.780316,0.000472,udp,147.32.84.164,51274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.781094,0.000336,udp,147.32.84.164,50742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.842215,0.000349,udp,147.32.84.164,41625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.842220,0.00036,udp,147.32.84.164,36794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.844775,0.000294,udp,147.32.84.164,48452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.844915,0.000273,udp,147.32.84.164,43830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.845501,0.000235,udp,147.32.84.164,38173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.846016,0.000303,udp,147.32.84.164,40687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.846158,0.000217,udp,147.32.84.164,47444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.846504,0.00034,udp,147.32.84.164,48999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,73,161,117.0,0.31196581196581197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.846511,0.00044,udp,147.32.84.164,58896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:09.847141,0.000529,udp,147.32.84.164,52947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,80,168,124.0,0.3225806451612903,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.075061,0.00996,udp,147.32.84.164,35172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,341,85,256,170.5,0.24926686217008798,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.114689,0.02006,udp,147.32.84.164,47005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.129785,0.000504,udp,147.32.84.164,55996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,89,271,180.0,0.24722222222222223,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.130719,254.590607,tcp,147.32.84.164,35190.0,->,74.125.232.220,80.0,FSPA_FSRPA,0.0,0.0,60,30623,3094,27529,510.3833333333333,0.10103516964373184,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.285840,0.000379,udp,147.32.84.164,37095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:11.547952,313.973907,tcp,147.32.84.164,36666.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,59,29339,24438,4901,497.271186440678,0.8329527250417533,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:12.234037,6.515282,tcp,66.249.72.50,47476.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,17952,1867,16085,579.0967741935484,0.10399955436720143,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:11:18.096036,0.198037,udp,147.32.84.229,13363.0,<->,69.62.186.150,44242.0,CON,0.0,0.0,3,1628,73,1555,542.6666666666666,0.04484029484029484,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:19.608697,0.000624,udp,96.224.8.175,37528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:25.158765,61.281609,tcp,147.32.84.165,1507.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:11:25.476114,0.000294,udp,147.32.84.134,56368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:11:25.477718,0.011802,tcp,147.32.84.134,51943.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:11:26.684245,0.018356,tcp,147.32.84.170,59107.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:29.996604,0.01994,udp,147.32.84.164,39205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:30.493914,0.000667,udp,147.32.84.164,50558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,77,497,287.0,0.13414634146341464,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:11:36.437221,0.000958,udp,89.215.224.100,33885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,422,83,339,211.0,0.1966824644549763,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:36.685361,0.017652,tcp,147.32.84.170,59108.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:37.712547,0.000475,udp,93.130.21.108,20165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:38.718445,0.000264,udp,147.32.84.138,52424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:41.594586,2.331968,tcp,147.32.84.59,65074.0,->,199.59.148.20,443.0,FSPA_FSPA,0.0,0.0,63,51674,3132,48542,820.2222222222222,0.06061075202229361,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:11:42.343957,0.99189,udp,147.32.87.48,4072.0,->,147.32.87.100,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:11:43.532170,0.000193,udp,147.32.84.134,37440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:11:46.684761,0.000337,udp,147.32.84.170,47284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:51.148446,0.000843,udp,94.68.110.2,19688.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,73,478,275.5,0.132486388384755,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:51.282548,0.000668,udp,89.46.113.74,32365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:11:51.610652,0.00027,udp,147.32.84.138,41942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:52.552851,0.00029,udp,147.32.84.134,53564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:11:55.495347,0.000153,udp,147.32.85.25,44621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:11:56.684303,0.000366,udp,147.32.84.170,56832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:56.686343,0.018288,tcp,147.32.84.170,47060.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:11:57.618152,0.00023,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,18,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 18:12:01.573151,0.000225,udp,147.32.84.134,33293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:01.849834,0.000271,udp,147.32.85.34,62492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:01.895854,0.000233,udp,147.32.85.34,49449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:02.261253,0.111352,udp,147.32.84.164,45600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:02.373460,0.020042,udp,147.32.84.164,60648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:08.608673,0.00018,udp,147.32.84.138,48178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:11.025938,0.331503,tcp,147.32.84.170,55895.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:14.786346,0.000869,udp,218.228.144.184,44626.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,80,481,280.5,0.14260249554367202,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:12:16.003219,0.00017,udp,147.32.85.25,53437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:16.684152,0.000473,udp,147.32.84.170,50044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:18.086804,0.0,tcp,147.32.84.94,39896.0,->,88.198.20.218,38088.0,S_,0.0,,1,74,74,0,74.0,1.0,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:12:19.614415,0.000286,udp,147.32.84.134,58459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:19.615265,0.007192,tcp,147.32.84.134,51949.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:22.157598,3.643018,tcp,78.130.134.29,3565.0,->,147.32.84.111,48922.0,FSPA_FSPA,0.0,0.0,22,1609,817,792,73.13636363636364,0.5077688004972032,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:12:26.015571,64.596245,tcp,147.32.84.165,1523.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:12:28.635877,0.0072,tcp,147.32.84.134,51950.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,10,1039,457,582,103.9,0.43984600577478344,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:30.385713,204.242874,udp,147.32.84.59,17344.0,<->,46.4.101.72,50012.0,CON,0.0,0.0,138,96469,46889,49580,699.0507246376811,0.4860525142791985,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:12:33.373707,0.000239,udp,147.32.84.138,44667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:33.632240,0.000288,udp,147.32.84.164,37821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:33.882540,31.386318,tcp,147.32.84.164,43124.0,->,78.24.14.69,80.0,FSA_SA,0.0,0.0,9,650,424,226,72.22222222222223,0.6523076923076923,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:34.808511,107.341888,tcp,147.32.85.7,55431.0,->,72.21.194.22,80.0,FSA_FSA,0.0,0.0,11,750,624,126,68.18181818181819,0.832,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:12:36.682607,0.000461,udp,147.32.84.170,52780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:37.655178,9e-06,udp,147.32.84.134,46885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,72,143,107.5,0.33488372093023255,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:37.655642,3.602366,tcp,147.32.84.134,51951.0,->,88.86.100.176,80.0,FSPA_FSPA,0.0,0.0,11,1224,708,516,111.27272727272727,0.5784313725490197,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:12:39.502848,0.000355,udp,147.32.84.138,45219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:41.447319,0.000206,udp,147.32.84.170,45763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:41.863482,20.48101,tcp,147.32.84.170,55118.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:41.864463,0.000248,udp,147.32.84.170,33610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:41.865158,0.000255,udp,147.32.84.170,51154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:41.865792,0.000201,udp,147.32.84.170,49761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:41.865861,20.478777,tcp,147.32.84.170,38999.0,->,78.24.14.69,80.0,FSA_FSA,0.0,0.0,10,712,498,214,71.2,0.699438202247191,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:44.671037,0.001702,udp,88.80.110.174,6937.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:12:46.515330,0.001747,udp,87.57.173.234,14231.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,578,518,60,289.0,0.8961937716262975,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:12:46.683936,0.00041,udp,147.32.84.170,43300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:47.064225,0.000251,udp,147.32.84.138,41285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:48.660492,0.000229,udp,147.32.84.164,59843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:48.662243,7.800612,tcp,147.32.84.164,39106.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1755,1031,724,175.5,0.5874643874643874,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:48.736626,0.000345,udp,147.32.84.164,33925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:48.737034,0.000177,udp,147.32.84.164,57433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:48.737278,0.000429,udp,147.32.84.164,53206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:12:49.811761,0.000406,udp,147.32.84.79,47753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:51.542619,0.000246,udp,147.32.85.34,61006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:52.536393,0.000292,udp,147.32.84.138,54214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:52.686672,0.000242,udp,147.32.85.25,39562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:12:56.686335,5.749947,tcp,147.32.84.170,59133.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:59.448596,4.805116,udp,147.32.84.170,44644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:12:59.954889,0.000259,udp,147.32.84.138,56194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:13:04.252801,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,140.0,URP,0.0,,1,532,532,0,532.0,1.0,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:04.254467,19.244547,tcp,147.32.84.170,42730.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:13.039694,0.975888,tcp,147.32.84.170,55918.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,9,1153,549,604,128.11111111111111,0.4761491760624458,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:16.685399,0.000304,udp,147.32.84.170,48357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:16.686454,5.65898,tcp,147.32.84.170,47087.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:17.859618,939.183716,tcp,147.32.84.13,51258.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,28,12255,1925,10330,437.67857142857144,0.15707874337005304,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:13:23.481747,0.000687,udp,125.161.207.10,24203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:13:26.883394,73.573532,tcp,147.32.84.165,1524.0,->,222.189.228.111,3389.0,FSPA_SPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:13:35.461458,0.0003,udp,147.32.85.25,38450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:13:35.782568,0.000348,udp,147.32.84.170,54748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:39.975365,0.000342,udp,147.32.84.79,40674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:13:40.023726,78.447472,tcp,147.32.84.170,39025.0,->,78.24.14.69,80.0,FSA_FSA,0.0,0.0,9,634,494,140,70.44444444444444,0.7791798107255521,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:40.213477,0.000254,udp,147.32.84.170,38899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.291679,0.000291,udp,147.32.84.170,42479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.291956,0.000247,udp,147.32.84.170,47290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.855545,130.497726,tcp,147.32.84.170,55160.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,20,7367,1714,5653,368.35,0.23265915569431248,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.855599,90.495407,tcp,147.32.84.170,55161.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,44,27872,3000,24872,633.4545454545455,0.10763490241102182,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.878981,0.00023,udp,147.32.84.170,54112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.879401,0.017924,udp,147.32.84.170,57395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.879416,0.000423,udp,147.32.84.170,41645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.880390,0.000215,udp,147.32.84.170,55309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.881136,0.000226,udp,147.32.84.170,38371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.882915,0.000326,udp,147.32.84.170,60851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.886244,0.000235,udp,147.32.84.170,55198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,73,161,117.0,0.31196581196581197,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:41.887489,0.000191,udp,147.32.84.170,56694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:44.022842,0.000367,udp,147.32.84.170,50847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.103946,0.00021,udp,147.32.85.25,50199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:13:51.136245,0.000338,udp,147.32.84.134,38220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:13:51.136928,0.240758,udp,147.32.84.134,42730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,72,124,98.0,0.3673469387755102,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:13:51.339802,0.000273,udp,147.32.84.170,50384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,78,201,139.5,0.27956989247311825,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.340460,0.000305,udp,147.32.84.170,34811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.340888,0.000148,udp,147.32.84.170,55279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,72,116,94.0,0.3829787234042553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.341175,0.000361,udp,147.32.84.170,42681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,75,151,113.0,0.33185840707964603,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.341263,0.000285,udp,147.32.84.170,59274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,72,254,163.0,0.22085889570552147,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.342364,0.000344,udp,147.32.84.170,41966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:51.413006,0.000574,udp,97.83.85.165,14191.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:13:52.374489,13.49173,tcp,147.32.84.134,55656.0,->,109.123.211.195,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:13:53.349122,9.964809,tcp,147.32.84.3,34041.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,13,1305,862,443,100.38461538461539,0.660536398467433,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:13:56.685296,0.000521,udp,147.32.84.170,55582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:56.686251,0.000412,udp,147.32.84.170,42620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:56.925468,0.000423,udp,147.32.84.170,42234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,72,131,101.5,0.35467980295566504,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:13:57.190018,9.751144,tcp,147.32.84.170,47110.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,11,1627,881,746,147.9090909090909,0.5414874001229256,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:00.249418,1426.706299,udp,147.32.84.229,13363.0,<->,66.190.28.209,46649.0,CON,0.0,0.0,4,658,538,120,164.5,0.817629179331307,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:14:01.146142,0.019439,udp,147.32.86.11,49494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,486,75,411,243.0,0.15432098765432098,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:01.209148,43.391228,tcp,147.32.84.170,51310.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,18,2809,1294,1515,156.05555555555554,0.4606621573513706,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:04.380690,0.000384,udp,147.32.84.158,47934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:09.450783,55.363663,tcp,147.32.84.134,55665.0,->,109.123.211.195,80.0,FSPA_FSRPA,0.0,0.0,21,8011,1311,6700,381.4761904761905,0.16364998127574584,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:12.390379,0.353314,udp,147.32.84.170,52582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:12.745291,249.625458,tcp,147.32.84.170,56846.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,19,4821,3060,1761,253.73684210526315,0.6347230864965775,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:14.294506,0.000313,udp,147.32.84.170,33467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:14.480761,0.00019,udp,147.32.84.138,37846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:14.545863,0.000271,udp,147.32.84.170,51434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:14.546529,0.000491,udp,147.32.84.170,39299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:15.039999,0.000307,udp,147.32.84.170,55053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:15.041347,22.332663,tcp,147.32.84.170,55960.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,12,1375,771,604,114.58333333333333,0.5607272727272727,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:15.356993,44.33831,tcp,147.32.84.134,46727.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,17,4519,1159,3360,265.8235294117647,0.25647267094489934,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:16.111483,185.75386,tcp,147.32.85.7,43773.0,->,67.192.137.45,80.0,FSPA_SPA,0.0,0.0,20,3908,2234,1674,195.4,0.5716479017400204,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:14:16.685408,0.000379,udp,147.32.84.170,53570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:21.374107,0.000353,udp,147.32.84.138,45942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:26.677250,20.484461,tcp,147.32.84.134,46732.0,->,109.123.211.197,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:26.677313,20.484446,tcp,147.32.84.134,46735.0,->,109.123.211.197,80.0,FSA_FSA,0.0,0.0,9,638,424,214,70.88888888888889,0.664576802507837,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:26.680403,27.413984,tcp,147.32.84.134,55676.0,->,109.123.211.195,80.0,FSA_SA,0.0,0.0,9,650,424,226,72.22222222222223,0.6523076923076923,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:26.683420,0.000338,udp,147.32.84.170,51397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:26.685388,12.246905,tcp,147.32.84.170,47129.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,8,544,404,140,68.0,0.7426470588235294,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:26.930625,0.000255,udp,147.32.84.134,35545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,72,124,98.0,0.3673469387755102,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:14:30.515504,8.972217,tcp,147.32.84.165,1525.0,->,222.189.228.111,3389.0,S_,0.0,,3,186,186,0,62.0,1.0,18,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:14:32.726063,10.009528,udp,147.32.85.7,58638.0,->,147.32.1.20,53.0,INT,0.0,,2,152,152,0,76.0,1.0,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:34.387453,0.000354,udp,147.32.84.164,44051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:34.417961,0.000249,udp,147.32.84.164,34962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:35.313566,0.000293,udp,147.32.84.138,35806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:36.682955,0.000357,udp,147.32.84.170,55919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:36.685308,0.498413,tcp,147.32.84.170,59182.0,->,209.85.148.104,80.0,FSA_SA,0.0,0.0,5,346,206,140,69.2,0.5953757225433526,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:37.160675,0.000223,udp,147.32.85.25,57490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:38.809512,17.50016,tcp,147.32.84.164,36535.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:39.060644,211.779709,tcp,147.32.84.164,36536.0,->,77.78.110.106,80.0,FSRPA_FSPA,0.0,0.0,26,8646,1839,6807,332.53846153846155,0.2126995142262318,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.868056,0.004043,udp,147.32.84.164,40055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.868800,0.004922,udp,147.32.84.164,58840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.872464,0.000256,udp,147.32.84.164,46339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.873819,0.003837,udp,147.32.84.164,40294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.875005,0.000594,udp,147.32.84.164,42404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.876064,41.960339,tcp,147.32.84.164,53700.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,9,622,404,218,69.11111111111111,0.6495176848874598,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.881495,20.349302,tcp,147.32.84.164,52315.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:45.881507,52.792473,tcp,147.32.84.164,52316.0,->,77.75.76.52,80.0,FSRPA_SPA,0.0,0.0,20,10738,1166,9572,536.9,0.10858632892531198,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:46.156967,19.355204,tcp,147.32.84.164,57446.0,->,77.78.99.21,80.0,FSA_FSA,0.0,0.0,7,436,254,182,62.285714285714285,0.5825688073394495,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:46.685101,11.65644,tcp,147.32.84.170,49793.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,9,610,470,140,67.77777777777777,0.7704918032786885,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:46.918007,28.592196,tcp,147.32.84.164,60370.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:47.475927,0.002656,udp,147.32.84.164,55218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:47.479005,28.032757,tcp,147.32.84.164,37240.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:47.479070,28.032135,tcp,147.32.84.164,37242.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:48.525087,26.984949,tcp,147.32.84.164,35126.0,->,77.78.99.22,80.0,FSA_SRA,0.0,0.0,7,464,342,122,66.28571428571429,0.7370689655172413,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.017459,0.349475,udp,147.32.84.164,33063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.017518,1.050995,udp,147.32.84.164,47058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,71,214,142.5,0.24912280701754386,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.018227,0.001579,udp,147.32.84.164,35286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.020144,0.001047,udp,147.32.84.164,50765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.021801,14.650536,tcp,147.32.84.164,55749.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.022336,0.000237,udp,147.32.84.164,38145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.024148,207.528198,tcp,147.32.84.164,59186.0,->,77.93.192.144,80.0,FSA_SA,0.0,0.0,10,712,634,78,71.2,0.8904494382022472,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.024155,103.527664,tcp,147.32.84.164,59187.0,->,77.93.192.144,80.0,FSA_SA,0.0,0.0,9,622,544,78,69.11111111111111,0.8745980707395499,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.347630,0.000265,udp,147.32.84.164,48050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,76,251,163.5,0.2324159021406728,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.544603,0.000195,udp,147.32.84.164,55149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:52.794701,0.000227,udp,147.32.84.59,45448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,76,159,117.5,0.32340425531914896,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:53.598061,23.171425,tcp,147.32.84.164,45366.0,->,62.84.143.246,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:53.598081,25.674597,tcp,147.32.84.164,45368.0,->,62.84.143.246,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:53.887193,0.000272,udp,147.32.84.59,36306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:53.968802,0.000436,udp,147.32.84.59,34372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:14:53.993490,0.006194,udp,147.32.84.164,37706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,76,94,85.0,0.4470588235294118,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:54.009745,0.002525,udp,147.32.84.164,36031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,73,190,131.5,0.27756653992395436,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:54.243691,0.000261,udp,147.32.84.164,45875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:54.243695,0.000271,udp,147.32.84.164,39542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:55.487669,260.874542,tcp,147.32.84.164,50925.0,->,74.125.232.199,80.0,FSPA_FSPA,0.0,0.0,22,4296,1810,2486,195.27272727272728,0.4213221601489758,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:57.075796,0.000246,udp,147.32.84.164,45866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,79,183,131.0,0.3015267175572519,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:57.421865,0.024647,udp,147.32.84.170,54357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:57.519042,0.000339,udp,147.32.84.170,36326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:58.595862,13.763469,tcp,147.32.84.170,59191.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:14:59.016255,16.495502,tcp,147.32.84.164,44793.0,->,81.0.214.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.016312,16.49597,tcp,147.32.84.164,44795.0,->,81.0.214.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.016353,16.494238,tcp,147.32.84.164,44796.0,->,81.0.214.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.016510,0.000163,udp,147.32.84.164,32916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.017961,0.000331,udp,147.32.84.164,54545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.018086,16.49367,tcp,147.32.84.164,53596.0,->,82.113.55.121,80.0,FSRA_FSPA,0.0,0.0,12,1019,478,541,84.91666666666667,0.4690873405299313,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.117357,0.000239,udp,147.32.84.164,60044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.117931,0.000178,udp,147.32.84.164,39474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:14:59.119515,0.000396,udp,147.32.84.164,52581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:00.300111,0.000254,udp,147.32.84.170,37961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:01.027450,1.462249,udp,147.32.84.164,42747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:02.740773,764.183716,tcp,147.32.84.164,54286.0,->,74.125.232.241,80.0,FSPA_FSRPA,0.0,0.0,164,96340,79238,17102,587.439024390244,0.822482873157567,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:04.947604,1.026702,udp,147.32.84.164,54054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,75,120,97.5,0.38461538461538464,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:05.974441,0.0002,udp,147.32.84.164,48636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,75,120,97.5,0.38461538461538464,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:05.974753,0.185731,udp,147.32.84.164,50578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:06.685018,1.655723,tcp,147.32.84.170,58056.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:07.363266,9.290669,tcp,147.32.84.164,45664.0,->,87.248.192.58,27031.0,SR_SA,0.0,0.0,3,204,134,70,68.0,0.6568627450980392,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:08.035545,18.912874,tcp,147.32.84.59,55867.0,->,66.220.151.85,80.0,FSA_FSA,0.0,0.0,7,494,354,140,70.57142857142857,0.7165991902834008,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:15:12.784223,0.003581,udp,128.135.74.97,54715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3003,60,2943,750.75,0.01998001998001998,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:15:12.920503,0.000205,udp,147.32.84.138,34256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:13.023271,3.724196,udp,147.32.84.164,33643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:13.041830,0.017724,udp,147.32.84.164,40318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,71,325,198.0,0.17929292929292928,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:13.261633,0.002543,udp,147.32.84.164,33390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,71,227,149.0,0.23825503355704697,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:13.780550,0.001869,tcp,147.32.84.164,57049.0,->,147.32.87.23,443.0,_SA,,0.0,4,280,0,280,70.0,0.0,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:13.780560,0.000971,tcp,147.32.84.164,57050.0,->,147.32.87.23,443.0,_SA,,0.0,4,280,0,280,70.0,0.0,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:14.607176,30.134052,tcp,147.32.84.170,58529.0,->,74.125.232.200,80.0,FSRPA_FSA,0.0,0.0,11,3206,2934,272,291.45454545454544,0.9151590767311292,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:14.855895,247.52327,tcp,147.32.84.170,58541.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,18,3965,3336,629,220.27777777777777,0.8413619167717529,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:16.201471,283.601074,tcp,147.32.84.164,37421.0,->,74.125.232.200,80.0,SPA_SRPA,0.0,0.0,21,6790,1242,5548,323.3333333333333,0.1829160530191458,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:16.685096,0.498096,tcp,147.32.84.170,47243.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:17.254462,3.559089,udp,147.32.84.59,52610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,453,219,234,113.25,0.48344370860927155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:18.960447,250.792587,tcp,147.32.84.164,51060.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,23,3685,2732,953,160.2173913043478,0.7413839891451832,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:19.023792,0.00039,udp,147.32.84.164,48912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:19.358416,0.000163,udp,147.32.84.170,40139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:19.358955,0.000311,udp,147.32.84.170,50055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:19.368988,0.000182,udp,147.32.84.170,55702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:20.559861,0.000284,udp,147.32.84.170,46584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:20.560491,0.000181,udp,147.32.84.170,53240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:20.569543,0.000253,udp,147.32.84.170,47869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:20.570165,0.000251,udp,147.32.84.170,50006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:20.570781,0.000307,udp,147.32.84.170,44564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:21.192089,0.000188,udp,147.32.84.164,38875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.269396,0.000259,udp,147.32.84.164,45546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.271862,0.000243,udp,147.32.84.164,50040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.322682,0.000264,udp,147.32.84.164,37559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.324717,0.000316,udp,147.32.84.164,56263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.328389,0.000178,udp,147.32.84.164,53949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.332244,0.000192,udp,147.32.84.164,53142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.332745,0.000364,udp,147.32.84.164,38145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.336466,0.000222,udp,147.32.84.164,54648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.336926,0.000299,udp,147.32.84.164,52562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.338884,0.000179,udp,147.32.84.164,59838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.349771,0.000332,udp,147.32.84.164,34198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.350693,0.000276,udp,147.32.84.164,49264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.421926,0.000205,udp,147.32.84.164,52480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.427067,0.00019,udp,147.32.84.164,52414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.427563,0.000236,udp,147.32.84.164,55686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.437584,0.000201,udp,147.32.84.164,51471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:21.442367,0.000256,udp,147.32.84.164,53363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:22.989593,34.970924,tcp,147.32.84.164,45587.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,10,2294,1839,455,229.4,0.8016564952048822,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:26.683071,0.000344,udp,147.32.84.170,33381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:26.683944,0.000289,udp,147.32.84.170,47818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:26.684973,3.18394,tcp,147.32.84.170,59339.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:29.497543,17.063156,tcp,147.32.84.164,41546.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.497678,17.211531,tcp,147.32.84.164,48940.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.497693,19.180052,tcp,147.32.84.164,48941.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.497761,18.172049,tcp,147.32.84.164,38927.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.497801,19.177896,tcp,147.32.84.164,38928.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.497884,26.816101,tcp,147.32.84.164,38930.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498152,77.186249,tcp,147.32.84.164,49545.0,->,77.75.76.52,80.0,FSRPA_SPA,0.0,0.0,38,23032,2154,20878,606.1052631578947,0.09352205626953804,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498290,26.735271,tcp,147.32.84.164,60216.0,->,77.75.77.86,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498366,122.743416,tcp,147.32.84.164,58092.0,->,77.78.99.22,80.0,FSA_FSA,0.0,0.0,11,704,582,122,64.0,0.8267045454545454,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498452,75.244408,tcp,147.32.84.164,57458.0,->,77.75.76.69,80.0,FSPA_SA,0.0,0.0,9,1452,1238,214,161.33333333333334,0.8526170798898072,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498577,0.000166,udp,147.32.84.164,41739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.498669,17.524078,tcp,147.32.84.164,41005.0,->,77.75.76.7,80.0,FSPA_FSPA,0.0,0.0,12,2281,1489,792,190.08333333333334,0.6527838667251206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:29.812379,0.000303,udp,147.32.84.170,56108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:29.813011,0.000172,udp,147.32.84.170,56698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:29.813608,0.000251,udp,147.32.84.170,59959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:32.721315,0.001646,udp,72.11.35.96,62936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:15:34.049041,0.000387,udp,147.32.84.164,45435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.049313,11.547832,udp,147.32.84.164,52953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,292,146,146,97.33333333333333,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.049424,0.249871,udp,147.32.84.164,38277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.049536,14.933274,tcp,147.32.84.164,60994.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.049692,0.000958,udp,147.32.84.164,54227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.050992,0.000437,udp,147.32.84.164,34279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051701,12.186217,tcp,147.32.84.164,35752.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,402,272,130,67.0,0.6766169154228856,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051709,12.242904,tcp,147.32.84.164,35753.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,402,272,130,67.0,0.6766169154228856,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051721,11.460364,tcp,147.32.84.164,35755.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051738,1.760259,udp,147.32.84.164,46820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051784,11.4607,tcp,147.32.84.164,35757.0,->,194.79.52.199,80.0,FSA_SA,0.0,0.0,5,350,206,144,70.0,0.5885714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051835,11.460645,tcp,147.32.84.164,35759.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.051838,121.025276,tcp,147.32.84.164,33718.0,->,194.79.54.62,80.0,FSRA_FSA,0.0,0.0,11,776,484,292,70.54545454545455,0.6237113402061856,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.299873,0.00046,udp,147.32.84.164,33842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,83,200,141.5,0.29328621908127206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.300765,56.305042,tcp,147.32.84.164,53015.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,770,556,214,70.0,0.7220779220779221,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:34.534756,18.086315,udp,147.32.84.164,59378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,296,148,148,98.66666666666667,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:36.055474,25.480251,tcp,147.32.84.164,43684.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,7,484,346,138,69.14285714285714,0.7148760330578512,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:36.055483,79.17646,tcp,147.32.84.164,43685.0,->,194.79.52.204,80.0,FSA_SA,0.0,0.0,7,482,404,78,68.85714285714286,0.8381742738589212,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:36.261938,3.850437,udp,147.32.84.59,49871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,459,225,234,114.75,0.49019607843137253,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:36.684025,0.000378,udp,147.32.84.170,54334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:39.355725,19.19388,tcp,147.32.84.59,5489.0,->,66.220.151.92,443.0,FSPA_SRPA,0.0,0.0,12,3495,499,2996,291.25,0.14277539341917025,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:15:39.930544,0.04122,udp,147.32.84.59,17406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:40.050747,12.570327,udp,147.32.84.164,46555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,296,148,148,98.66666666666667,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:45.258982,1.806115,udp,147.32.84.59,65164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,291,148,143,97.0,0.5085910652920962,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:45.597159,0.241789,udp,147.32.84.164,60334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:45.597309,0.241756,udp,147.32.84.164,47750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:45.839366,19.676636,tcp,147.32.84.164,32902.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:45.839438,19.676556,tcp,147.32.84.164,32905.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:48.200988,0.000276,udp,147.32.84.137,62550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,87,143,115.0,0.3782608695652174,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:48.303215,0.000714,udp,64.126.78.68,55034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:15:48.779910,0.000512,udp,72.55.140.88,58962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:15:49.185621,0.000197,udp,147.32.84.138,47525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:50.080168,0.000175,udp,147.32.85.25,44727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:50.735826,0.000174,udp,147.32.84.138,60987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:51.512864,1.470646,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,268,142,126,89.33333333333333,0.5298507462686567,18,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 18:15:52.050588,0.000288,udp,147.32.84.164,37862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:52.824387,0.002784,udp,147.32.84.164,52059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:52.827355,0.002056,udp,147.32.84.164,47384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:52.984219,8.922011,tcp,147.32.84.165,1526.0,->,222.189.228.111,3389.0,S_,0.0,,3,186,186,0,62.0,1.0,18,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:15:53.127643,43.276409,tcp,147.32.84.170,58912.0,->,77.78.110.106,80.0,FSRPA_SPA,0.0,0.0,49,31778,2892,28886,648.530612244898,0.09100635659890491,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:55.341135,0.000217,udp,147.32.84.138,39100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:15:56.414992,3434.707275,udp,180.183.104.29,49680.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:15:56.833111,0.00016,udp,147.32.84.170,58876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,72,131,101.5,0.35467980295566504,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.863682,1.8e-05,udp,147.32.84.170,50104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.874119,0.00032,udp,147.32.84.170,53971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.874437,0.000177,udp,147.32.84.170,48683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.875516,0.000222,udp,147.32.84.170,56537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.876084,0.00036,udp,147.32.84.170,41918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.876160,0.000385,udp,147.32.84.170,51951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.876163,0.000434,udp,147.32.84.170,56166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:56.877478,0.000335,udp,147.32.84.170,51576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:57.012078,0.000368,udp,147.32.84.164,48842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,84,239,161.5,0.26006191950464397,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:58.000183,0.000434,udp,147.32.84.170,42709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:59.017799,62.536255,udp,147.32.84.164,49887.0,->,209.85.148.99,44449.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:15:59.039058,2.670129,udp,147.32.84.170,56853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:15:59.792212,82.571487,tcp,147.32.84.170,58918.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,47,28855,2274,26581,613.936170212766,0.07880783226477214,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:01.019990,62.535686,udp,147.32.84.164,49887.0,->,209.85.148.99,44451.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:01.134067,0.000234,udp,147.32.85.74,53815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,72,155,113.5,0.31718061674008813,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:16:02.994232,0.000309,udp,147.32.84.164,37297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:02.995358,0.000257,udp,147.32.84.164,41713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:03.855089,0.000547,udp,92.106.32.47,56295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:04.501655,64.05928,udp,147.32.84.164,49887.0,->,209.85.148.99,44456.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:04.835471,76.114555,tcp,147.32.84.170,39049.0,->,78.24.14.69,80.0,FSPA_FSRPA,0.0,0.0,11,1858,1143,715,168.9090909090909,0.6151776103336921,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:04.849976,0.080903,tcp,147.32.86.96,51719.0,->,147.32.87.38,12489.0,_FSPA,,0.0,8,590,0,590,73.75,0.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:16:06.502727,64.059387,udp,147.32.84.164,49887.0,->,209.85.148.99,44458.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:07.465376,0.000704,udp,87.168.76.249,24611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,76,467,271.5,0.13996316758747698,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:07.503852,64.059364,udp,147.32.84.164,49887.0,->,209.85.148.99,44459.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:08.000861,0.000313,udp,147.32.84.170,46973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:10.018232,0.0,icmp,147.32.84.184,771.0,->,147.32.80.9,33678.0,URP,0.0,,1,103,103,0,103.0,1.0,18,0,flow=Background,Background,-1 2011-08-16 18:16:11.193846,0.000265,udp,147.32.87.40,51320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:16:13.509978,64.058456,udp,147.32.84.164,49887.0,->,209.85.148.99,44465.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:17.512398,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44469.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:17.999188,0.000452,udp,147.32.84.170,43561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:18.001213,1.659647,tcp,147.32.84.170,48047.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:19.513946,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44471.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.017009,0.00037,udp,147.32.84.164,36219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.128060,0.000241,udp,147.32.84.164,60875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.132200,0.000239,udp,147.32.84.164,42656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.145577,0.0002,udp,147.32.84.164,33360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.147594,0.000307,udp,147.32.84.164,41534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.148541,0.0003,udp,147.32.84.164,58910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.149310,0.000243,udp,147.32.84.164,40642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.152917,0.000251,udp,147.32.84.164,41393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.154536,0.000258,udp,147.32.84.164,50936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.155578,0.000254,udp,147.32.84.164,33921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.160093,0.000196,udp,147.32.84.164,45302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.161824,0.000222,udp,147.32.84.164,33520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.162433,0.000272,udp,147.32.84.164,49078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.165236,0.000219,udp,147.32.84.164,52313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.169102,0.000228,udp,147.32.84.164,50189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.175943,0.000151,udp,147.32.84.164,32836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.183175,0.000231,udp,147.32.84.164,35723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.184089,0.000228,udp,147.32.84.164,54989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.219134,0.000248,udp,147.32.84.164,55954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.219756,0.000303,udp,147.32.84.164,43096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:21.515751,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44473.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:23.517854,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44475.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:23.704572,0.001806,udp,84.202.39.66,15419.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,582,522,60,291.0,0.8969072164948454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:27.161004,27.177691,tcp,147.32.84.59,57184.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,9,552,364,188,61.333333333333336,0.6594202898550725,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:16:28.001446,0.000317,udp,147.32.84.170,45613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:32.038907,0.741995,tcp,90.183.39.17,38505.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,18,14682,916,13766,815.6666666666666,0.0623893202560959,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:16:32.996138,57.755978,tcp,147.32.84.164,48972.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,10,2286,1831,455,228.6,0.8009623797025371,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:33.079709,86.201363,udp,41.96.108.46,59378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2844,379,2465,284.4,0.13326300984528833,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:34.528331,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44486.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:37.999215,0.000383,udp,147.32.84.170,41958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.007669,0.395374,udp,147.32.84.170,38304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.294988,0.241312,udp,147.32.84.170,33065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.295782,0.001219,udp,147.32.84.170,32942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.296207,0.000989,udp,147.32.84.170,40852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,71,170,120.5,0.2946058091286307,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.297395,0.00111,udp,147.32.84.170,42641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,71,174,122.5,0.2897959183673469,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.297995,0.000738,udp,147.32.84.170,50930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.299283,23.059872,tcp,147.32.84.170,52435.0,->,77.78.99.25,80.0,FSA_FSA,0.0,0.0,10,630,388,242,63.0,0.6158730158730159,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.300084,0.000299,udp,147.32.84.170,49095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.300629,0.000402,udp,147.32.84.170,38127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.301179,0.000266,udp,147.32.84.170,48030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.301647,23.057392,tcp,147.32.84.170,55144.0,->,77.78.99.23,80.0,FSA_FSA,0.0,0.0,8,510,328,182,63.75,0.6431372549019608,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.301930,153.886841,tcp,147.32.84.170,59749.0,->,69.171.242.39,80.0,FSPA_SPA,0.0,0.0,16,6370,2760,3610,398.125,0.43328100470957615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.303658,4.11574,tcp,147.32.84.170,53820.0,->,74.125.232.206,80.0,FSRPA_FSA,0.0,0.0,8,2234,2094,140,279.25,0.937332139659803,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.317999,23.783926,tcp,147.32.84.170,50703.0,->,2.21.111.139,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.318065,32.798565,tcp,147.32.84.170,50704.0,->,2.21.111.139,80.0,FSA_SRA,0.0,0.0,7,480,346,134,68.57142857142857,0.7208333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.539101,0.242917,udp,147.32.84.170,37947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,69,190,129.5,0.26640926640926643,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.573513,32.516743,tcp,147.32.84.170,58716.0,->,195.113.232.97,80.0,FSA_SRA,0.0,0.0,7,480,346,134,68.57142857142857,0.7208333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.573632,22.784281,tcp,147.32.84.170,58719.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.935420,0.010616,udp,147.32.84.170,49214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.940556,0.003822,udp,147.32.84.170,38867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,83,230,156.5,0.26517571884984026,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.944786,0.000366,udp,147.32.84.170,52905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,83,218,150.5,0.2757475083056478,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.956747,0.008012,udp,147.32.84.170,43342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,75,222,148.5,0.25252525252525254,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.958834,0.007408,udp,147.32.84.170,43600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,75,222,148.5,0.25252525252525254,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.960844,0.003532,udp,147.32.84.170,35711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,72,199,135.5,0.2656826568265683,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:39.986086,0.00298,udp,147.32.84.170,40758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,71,206,138.5,0.2563176895306859,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.003750,0.241707,udp,147.32.84.170,33281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,77,212,144.5,0.2664359861591695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.246067,0.013012,udp,147.32.84.170,37737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,71,141,106.0,0.33490566037735847,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.259350,0.002701,udp,147.32.84.170,48527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,71,206,138.5,0.2563176895306859,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.622756,0.000477,udp,147.32.84.170,33375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,70,174,122.0,0.28688524590163933,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.629660,0.002774,udp,147.32.84.170,54188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,75,196,135.5,0.2767527675276753,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:40.799167,3.641492,tcp,147.32.84.170,42447.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,12,1880,1065,815,156.66666666666666,0.5664893617021277,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:41.308261,0.002992,udp,147.32.84.170,51845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,73,236,154.5,0.23624595469255663,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:41.410385,0.000203,udp,147.32.84.138,53130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:16:41.565766,0.001927,udp,147.32.84.170,55979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:41.568574,0.000213,udp,147.32.84.170,47098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,71,125,98.0,0.3622448979591837,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:42.048760,0.000377,udp,147.32.84.170,34978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,72,250,161.0,0.2236024844720497,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:42.049705,80.510445,tcp,147.32.84.170,48730.0,->,217.31.57.205,80.0,FSRA_FSA,0.0,0.0,10,682,464,218,68.2,0.6803519061583577,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:42.049726,22.46883,tcp,147.32.84.170,48732.0,->,217.31.57.205,80.0,FSA_FSA,0.0,0.0,11,774,482,292,70.36363636363636,0.6227390180878553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:42.216885,0.000223,udp,147.32.84.170,46636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:42.536247,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44494.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.809869,177.207413,tcp,147.32.84.164,49683.0,->,77.75.76.52,80.0,FSRPA_SPA,0.0,0.0,18,6304,1275,5029,350.22222222222223,0.202252538071066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.809874,20.707672,tcp,147.32.84.164,49684.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.809881,89.302467,tcp,147.32.84.164,49685.0,->,77.75.76.52,80.0,FSPA_FSPA,0.0,0.0,10,1533,1083,450,153.3,0.7064579256360078,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.810103,17.433298,tcp,147.32.84.164,41137.0,->,77.75.76.7,80.0,FSPA_FSPA,0.0,0.0,16,2497,1639,858,156.0625,0.6563876651982379,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.810274,0.000316,udp,147.32.84.164,53214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.810528,0.000418,udp,147.32.84.164,58301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,89,206,147.5,0.3016949152542373,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811290,48.030674,tcp,147.32.84.164,39085.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811324,20.70682,tcp,147.32.84.164,39086.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811379,20.70657,tcp,147.32.84.164,39088.0,->,77.75.76.72,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811434,0.000307,udp,147.32.84.164,47975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811841,24.312477,tcp,147.32.84.164,60368.0,->,77.75.77.86,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811908,20.706575,tcp,147.32.84.164,41721.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:44.811946,11.682416,tcp,147.32.84.164,41722.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:47.936523,2034.372681,udp,178.88.219.42,10000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1222,152,1070,305.5,0.12438625204582651,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:48.541937,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44500.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:50.543149,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44502.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:50.729584,0.000832,udp,84.136.228.191,6519.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,588,76,512,294.0,0.1292517006802721,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:50.747818,0.00039,udp,147.32.84.170,35699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.747933,1.077628,udp,147.32.84.170,46581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.749080,0.00042,udp,147.32.84.170,57497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,76,178,127.0,0.2992125984251969,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.749148,0.000444,udp,147.32.84.170,41358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,79,181,130.0,0.3038461538461538,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.749597,21.61091,tcp,147.32.84.170,33882.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.749699,21.611174,tcp,147.32.84.170,33884.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,9,626,420,206,69.55555555555556,0.670926517571885,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.749901,103.800018,tcp,147.32.84.170,33825.0,->,77.78.99.22,80.0,FSA_SRA,0.0,0.0,10,658,536,122,65.8,0.8145896656534954,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.750017,103.558716,tcp,147.32.84.170,33827.0,->,77.78.99.22,80.0,FSA_SA,0.0,0.0,9,598,536,62,66.44444444444444,0.8963210702341137,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.750073,103.799858,tcp,147.32.84.170,33829.0,->,77.78.99.22,80.0,FSA_SRA,0.0,0.0,10,658,536,122,65.8,0.8145896656534954,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.750166,31.613251,tcp,147.32.84.170,33830.0,->,77.78.99.22,80.0,FSA_SRA,0.0,0.0,8,538,416,122,67.25,0.7732342007434945,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.767311,0.017564,udp,147.32.84.170,40152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,80,429,254.5,0.15717092337917485,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.785729,14.260531,tcp,147.32.84.170,42450.0,->,2.21.92.124,80.0,FSA_SRA,0.0,0.0,6,406,272,134,67.66666666666667,0.6699507389162561,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:50.785751,21.580746,tcp,147.32.84.170,42452.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:51.845805,90.928017,tcp,147.32.84.170,33274.0,->,2.21.108.20,80.0,FSRA_FSA,0.0,0.0,12,846,558,288,70.5,0.6595744680851063,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:52.723013,125.411301,tcp,147.32.84.168,58517.0,->,66.220.151.91,443.0,FSRPA_FSPA,0.0,0.0,9,1027,505,522,114.11111111111111,0.4917234664070107,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:16:53.000170,3.683451,tcp,147.32.84.164,49003.0,->,62.84.143.246,80.0,FSRPA_FSPA,0.0,0.0,15,2626,2031,595,175.06666666666666,0.7734196496572734,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:53.408150,0.000241,udp,147.32.84.138,39332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:16:55.025892,0.000199,udp,147.32.84.170,41791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:55.026548,11.095739,tcp,147.32.84.170,52777.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,12,1367,697,670,113.91666666666667,0.5098756400877835,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:55.548551,0.0,udp,147.32.84.164,49887.0,->,209.85.148.99,44507.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:16:58.000560,0.000352,udp,147.32.84.170,46552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:16:59.861034,0.0052,udp,206.186.153.149,60022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:16:59.881200,3039.005127,udp,89.92.216.145,33624.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:17:00.987477,0.000301,udp,147.32.84.170,49755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:00.988205,1.96789,udp,147.32.84.170,53427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:00.989370,231.560577,tcp,147.32.84.170,56847.0,->,195.113.232.82,80.0,FSA_SA,0.0,0.0,9,642,568,74,71.33333333333333,0.8847352024922118,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.170073,0.000319,udp,147.32.84.170,55229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.173261,0.000249,udp,147.32.84.170,56676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.174274,0.000297,udp,147.32.84.170,39476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.174951,0.000285,udp,147.32.84.170,48855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.427928,0.000361,udp,147.32.84.170,59001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.430720,0.000336,udp,147.32.84.170,36351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.432438,0.000243,udp,147.32.84.170,36439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.434158,0.000256,udp,147.32.84.170,36256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.436580,0.000204,udp,147.32.84.170,37270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:01.437161,0.000242,udp,147.32.84.170,42258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:02.012098,108.183456,tcp,147.32.84.164,41160.0,->,77.75.76.7,80.0,FSPA_FSRPA,0.0,0.0,13,2269,1242,1027,174.53846153846155,0.5473776994270604,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.012525,0.000344,udp,147.32.84.164,59338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.013350,0.000265,udp,147.32.84.164,58166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,72,182,127.0,0.28346456692913385,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.017594,0.004502,udp,147.32.84.164,50138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.018867,0.000419,udp,147.32.84.164,59980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,75,210,142.5,0.2631578947368421,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.022429,0.000265,udp,147.32.84.164,52690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.125565,119.531273,udp,147.32.84.59,17344.0,<->,88.198.60.162,51012.0,CON,0.0,0.0,87,47778,2658,45120,549.1724137931035,0.05563229938465403,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:17:02.152852,0.290708,udp,147.32.85.84,13716.0,->,95.103.127.120,17524.0,INT,0.0,,3,210,210,0,70.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:17:02.426559,0.000376,udp,147.32.84.164,45008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.510158,0.00027,udp,147.32.84.164,50049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:02.511643,0.00027,udp,147.32.84.164,37592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,73,183,128.0,0.28515625,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:06.513738,25.846113,tcp,147.32.84.170,33913.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:06.513873,97.234871,tcp,147.32.84.170,33914.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,22,5487,4492,995,249.4090909090909,0.818662292691817,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:07.533405,0.000342,udp,147.32.84.138,53784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:09.075246,0.00023,udp,147.32.84.164,56072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:11.322186,0.000164,udp,147.32.84.164,36266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:11.568601,0.000313,udp,147.32.84.164,42912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,76,193,134.5,0.2825278810408922,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:11.810550,0.006306,udp,147.32.84.164,33178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:12.499399,0.000485,udp,147.32.85.34,57813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:12.692760,0.000224,udp,147.32.84.59,63094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:13.830927,61.994228,tcp,147.32.84.165,1527.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:17:14.773449,0.000189,udp,147.32.84.164,35917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:14.773942,0.000184,udp,147.32.84.164,39678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:17.067611,0.000274,udp,147.32.84.164,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:18.000190,0.000307,udp,147.32.84.170,48267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:18.186116,0.000287,udp,147.32.84.164,59720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:18.186647,0.000282,udp,147.32.84.164,53075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:18.189453,0.000304,udp,147.32.84.164,38399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:18.887310,0.000439,udp,147.32.84.164,59829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,76,193,134.5,0.2825278810408922,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:21.640792,0.003136,udp,147.32.84.164,50234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:21.648028,28.651957,tcp,147.32.84.164,49859.0,->,77.75.76.52,80.0,FSRPA_SPA,0.0,0.0,32,20021,2104,17917,625.65625,0.10508965586134558,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:22.120428,605.90271,udp,77.41.59.98,16969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:17:22.133780,0.000275,udp,147.32.84.164,55589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:22.134332,0.000227,udp,147.32.84.164,43294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:25.092850,167.312347,tcp,147.32.86.182,54117.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,18,5090,4189,901,282.77777777777777,0.8229862475442044,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:17:28.001152,2.769803,tcp,147.32.84.170,48137.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,338,140,68.28571428571429,0.7071129707112971,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:36.040001,0.983197,tcp,147.32.84.170,52789.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,9,1153,549,604,128.11111111111111,0.4761491760624458,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:38.590932,0.354081,udp,147.32.85.20,3079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,77,241,159.0,0.24213836477987422,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:44.336349,0.30392,udp,147.32.84.229,13363.0,<->,78.251.36.56,48713.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:17:45.665610,0.000233,udp,147.32.84.138,51946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:47.999399,0.000373,udp,147.32.84.170,39061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:48.000281,0.000386,udp,147.32.84.170,59524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:48.001421,2.252468,tcp,147.32.84.170,54395.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:49.283234,0.000404,udp,147.32.84.164,42131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.284546,0.000195,udp,147.32.84.164,44495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.285703,0.000391,udp,147.32.84.164,36203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.287674,0.000235,udp,147.32.84.164,41494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,73,161,117.0,0.31196581196581197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.289159,0.000157,udp,147.32.84.164,47080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.443881,0.000225,udp,147.32.84.164,36966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:49.957135,0.0,udp,147.32.86.111,63488.0,->,141.13.8.6,10032.0,INT,0.0,,1,71,71,0,71.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:17:51.545897,125.928406,tcp,147.32.84.164,50314.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,17,2776,1978,798,163.2941176470588,0.712536023054755,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546191,0.000207,udp,147.32.84.164,51495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546605,0.000204,udp,147.32.84.164,38295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546609,15.132623,tcp,147.32.84.164,57196.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,7,478,338,140,68.28571428571429,0.7071129707112971,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546613,0.000255,udp,147.32.84.164,55006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546660,0.000215,udp,147.32.84.164,51314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.546924,0.000269,udp,147.32.84.164,47668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.547602,15.125426,tcp,147.32.84.164,50032.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.547613,15.128945,tcp,147.32.84.164,50033.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.547659,15.128904,tcp,147.32.84.164,50035.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.547938,198.613983,tcp,147.32.84.164,51706.0,->,78.24.14.69,80.0,FSRA_FSA,0.0,0.0,11,756,538,218,68.72727272727273,0.7116402116402116,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.547992,70.258926,tcp,147.32.84.164,51708.0,->,78.24.14.69,80.0,FSA_FSA,0.0,0.0,11,778,564,214,70.72727272727273,0.7249357326478149,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.548007,27.005896,tcp,147.32.84.164,51710.0,->,78.24.14.69,80.0,FSA_SA,0.0,0.0,7,498,346,152,71.14285714285714,0.6947791164658634,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:51.548409,7.047879,tcp,147.32.84.164,34073.0,->,88.86.101.2,80.0,SRA_FSPA,0.0,0.0,8,700,314,386,87.5,0.44857142857142857,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:17:53.062757,1.879825,udp,147.32.84.171,51516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,79,124,101.5,0.3891625615763547,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:55.125294,0.000151,udp,147.32.84.134,33162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,86,130,108.0,0.39814814814814814,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:17:55.125881,0.000295,udp,147.32.84.134,33330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:17:55.203994,0.000258,udp,147.32.84.59,42579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:55.218407,0.000303,udp,147.32.84.59,45623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:55.254100,0.000227,udp,147.32.84.59,59192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:57.567537,0.000286,udp,147.32.84.138,53520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:17:58.001286,0.000381,udp,147.32.84.170,52310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:17:58.002148,0.000376,udp,147.32.84.170,33996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:00.128489,80.810448,tcp,147.32.84.134,53902.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,21,6715,1154,5561,319.76190476190476,0.17185405807892778,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:18:01.980581,0.579654,udp,147.32.86.111,63488.0,<->,111.240.242.174,14271.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:18:10.133286,72.232918,tcp,147.32.84.134,53903.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,7045,1550,5495,306.30434782608694,0.22001419446415899,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:18:10.259796,0.000256,udp,147.32.84.164,49956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:18:10.260346,0.000262,udp,147.32.84.164,60363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:18:10.263598,0.00024,udp,147.32.84.164,40089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:18:10.743340,0.000251,udp,147.32.84.138,46400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:18:11.920602,3160.862061,udp,83.81.166.18,60656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,741,555,186,123.5,0.7489878542510121,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:18:12.996705,0.00037,udp,147.32.84.170,40648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:13.683820,2413.144775,udp,125.230.66.170,56647.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:18:15.159068,8.952486,tcp,147.32.84.165,1528.0,->,222.189.228.111,3389.0,S_,0.0,,3,186,186,0,62.0,1.0,18,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:18:16.354336,0.000475,udp,193.34.20.14,12089.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-UDP-Established,Background,-1 2011-08-16 18:18:19.320662,0.000281,udp,147.32.84.170,36215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:20.380622,0.000356,udp,147.32.84.59,60282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:18:23.074856,77.772858,tcp,84.42.140.191,37357.0,->,147.32.87.33,443.0,FSA_FSA,0.0,0.0,12,836,350,486,69.66666666666667,0.41866028708133973,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:18:23.171465,0.250039,udp,147.32.84.170,39615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:26.490179,347.500061,tcp,147.32.84.170,41721.0,->,74.125.232.198,443.0,FSPA_FSPA,0.0,0.0,37,7957,4078,3879,215.05405405405406,0.5125047128314691,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:26.869863,41.959427,tcp,147.32.84.170,45154.0,->,209.85.148.105,443.0,FSPA_FSRPA,0.0,0.0,12,1590,1108,482,132.5,0.6968553459119496,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:28.020352,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,36786.0,URP,0.0,,1,103,103,0,103.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:28.020579,5.45469,udp,147.32.84.170,48072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:29.319095,0.000389,udp,147.32.84.170,33706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:29.948658,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.4,4139.0,ECR,,0.0,2,196,0,196,98.0,0.0,18,0,flow=Background,Background,-1 2011-08-16 18:18:33.475269,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,51387.0,URP,0.0,,1,103,103,0,103.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.400051,3.909216,udp,147.32.84.170,44056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.400204,0.000342,udp,147.32.84.170,36950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.401830,0.260073,udp,147.32.84.170,43764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.401833,0.001036,udp,147.32.84.170,36898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.401988,210.988098,tcp,147.32.84.170,58052.0,->,194.79.52.195,80.0,FSA_SA,0.0,0.0,10,720,642,78,72.0,0.8916666666666667,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.402447,0.000499,udp,147.32.84.170,38573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,83,200,141.5,0.29328621908127206,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.402717,34.965919,tcp,147.32.84.170,58465.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,8,558,428,130,69.75,0.7670250896057348,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:37.650474,147.781296,tcp,147.32.84.170,33140.0,->,194.79.52.192,80.0,SPA_SRPA,0.0,0.0,16,4898,1654,3244,306.125,0.33768885259289505,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:39.322132,0.000301,udp,147.32.84.170,60213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:39.664925,0.000368,udp,147.32.84.170,56910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:39.665733,0.24166,udp,147.32.84.170,52228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:39.908097,22.460629,tcp,147.32.84.170,56892.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:39.908209,13.659391,tcp,147.32.84.170,56894.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.026369,0.000275,udp,147.32.84.170,48023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.026957,17.7682,udp,147.32.84.170,56388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,296,150,146,98.66666666666667,0.5067567567567568,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.027681,13.492971,tcp,147.32.84.170,35841.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.028814,118.281052,tcp,147.32.84.170,37018.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,10,692,552,140,69.2,0.7976878612716763,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.034965,15.773388,tcp,147.32.84.170,35855.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.036190,0.000289,udp,147.32.84.170,55671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:40.037133,0.000304,udp,147.32.84.170,43488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:41.095071,0.000259,udp,147.32.84.170,53312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:41.096687,0.000216,udp,147.32.84.170,53280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:41.311098,16.094219,tcp,147.32.84.170,35630.0,->,194.79.52.98,80.0,FSRA_FSA,0.0,0.0,8,737,332,405,92.125,0.45047489823609227,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.756494,0.004609,udp,147.32.84.170,52589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.756716,0.000482,udp,147.32.84.170,54887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.756729,0.000527,udp,147.32.84.170,39945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.757113,22.613108,tcp,147.32.84.170,33918.0,->,77.78.99.22,80.0,FSA_SRA,0.0,0.0,6,376,254,122,62.666666666666664,0.675531914893617,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.757415,22.705374,tcp,147.32.84.170,33919.0,->,77.78.99.22,80.0,FSA_FSA,0.0,0.0,7,450,328,122,64.28571428571429,0.7288888888888889,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.757753,19.618723,tcp,147.32.84.170,54642.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.760020,0.000312,udp,147.32.84.170,43179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,70,217,143.5,0.24390243902439024,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.761107,20.759375,tcp,147.32.84.170,42566.0,->,91.213.160.12,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.761243,0.002446,udp,147.32.84.170,55243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:42.790278,20.306929,tcp,147.32.84.170,52028.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:43.401823,6.821028,udp,147.32.84.170,59919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,283,140,143,94.33333333333333,0.49469964664310956,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:43.510588,0.000306,udp,147.32.84.170,55810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:43.511220,0.000181,udp,147.32.84.170,45241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:43.761066,28.60718,tcp,147.32.84.170,52614.0,->,77.78.99.25,80.0,FSA_FSA,0.0,0.0,11,704,462,242,64.0,0.65625,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.064935,0.000333,udp,147.32.84.170,54998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.066579,0.021351,udp,147.32.84.170,38307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.067552,113.602394,tcp,147.32.84.170,38609.0,->,62.168.44.115,80.0,FSA_SA,0.0,0.0,13,882,734,148,67.84615384615384,0.8321995464852607,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.446409,0.000401,udp,147.32.84.170,36981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.448115,0.171665,udp,147.32.84.170,60542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,74,335,204.5,0.18092909535452323,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.621762,0.000341,udp,147.32.84.170,56300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,68,241,154.5,0.22006472491909385,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.623668,19.493797,udp,147.32.84.170,46779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,273,138,135,91.0,0.5054945054945055,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.792879,0.349931,udp,147.32.84.170,59123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.799591,0.00023,udp,147.32.84.170,40547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.803132,0.017602,udp,147.32.84.170,45037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,68,288,178.0,0.19101123595505617,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.821091,0.000222,udp,147.32.84.170,42900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,68,276,172.0,0.19767441860465115,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:44.972882,17.394648,tcp,147.32.84.170,38009.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:45.143271,0.000208,udp,147.32.84.170,48374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:46.133622,0.00028,udp,147.32.84.170,43128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.181105,0.000331,udp,147.32.84.170,34287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.181505,0.250698,udp,147.32.84.170,33913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.181707,2.243839,udp,147.32.84.170,41704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,108,279,193.5,0.27906976744186046,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.182936,13.191805,tcp,147.32.84.170,57140.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.183007,13.191728,tcp,147.32.84.170,57141.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.183901,32.952503,tcp,147.32.84.170,55361.0,->,74.125.232.207,80.0,FSA_SRA,0.0,0.0,7,480,346,134,68.57142857142857,0.7208333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.185738,32.950321,tcp,147.32.84.170,54007.0,->,74.125.232.206,80.0,FSA_SRA,0.0,0.0,7,480,346,134,68.57142857142857,0.7208333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.185953,174.969528,tcp,147.32.84.170,54011.0,->,74.125.232.206,80.0,SPA_SRA,0.0,0.0,33,19265,2729,16536,583.7878787878788,0.14165585258240332,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.187738,0.498447,udp,147.32.84.170,53092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,85,183,134.0,0.31716417910447764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.187749,14.352076,tcp,147.32.84.170,45104.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.320169,0.000378,udp,147.32.84.170,59162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:49.433430,0.000513,udp,147.32.84.170,49912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:50.031622,7.763303,udp,147.32.84.170,53301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,296,150,146,98.66666666666667,0.5067567567567568,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:50.644978,0.000253,udp,147.32.84.138,45071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:18:50.691164,58.340668,tcp,147.32.84.170,55358.0,->,77.78.99.23,80.0,FSPA_FSRPA,0.0,0.0,16,3805,2758,1047,237.8125,0.7248357424441524,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:50.762894,0.694856,tcp,147.32.84.59,54580.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,8,1575,695,880,196.875,0.44126984126984126,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:18:55.182445,6.575471,udp,147.32.84.170,38665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,486,218,268,162.0,0.448559670781893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:57.795156,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,17628.0,URP,0.0,,1,174,174,0,174.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:59.188817,2.865498,udp,147.32.84.170,42815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,84,141,112.5,0.37333333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:59.318726,0.000385,udp,147.32.84.170,39950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:18:59.435810,2.322244,udp,147.32.84.170,57119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:00.412620,13.111333,tcp,147.32.84.170,38051.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:00.412688,13.11173,tcp,147.32.84.170,38052.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:00.671472,0.000217,udp,147.32.84.134,49492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:19:01.048305,0.00038,udp,147.32.84.170,58755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:01.233854,0.000357,udp,147.32.85.74,48612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,72,155,113.5,0.31718061674008813,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:02.054579,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,19595.0,URP,0.0,,1,169,169,0,169.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:02.054654,0.000276,udp,147.32.84.170,53568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,84,141,112.5,0.37333333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:02.055356,2.085716,udp,147.32.84.170,38062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,567,84,483,283.5,0.14814814814814814,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:02.624926,1.492557,udp,147.32.84.170,54050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:04.117714,0.000222,udp,147.32.84.170,37040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:05.550874,0.762187,tcp,147.32.84.170,38666.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,11,3070,1383,1687,279.09090909090907,0.4504885993485342,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:05.872394,0.25923,udp,147.32.84.170,39614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:06.070220,0.00031,udp,147.32.84.170,55364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:06.071425,10.099152,udp,147.32.84.170,33281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,471,172,299,157.0,0.3651804670912951,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:06.132803,2.671638,udp,147.32.84.170,36986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:06.927763,413.514282,tcp,195.95.205.245,993.0,,147.32.84.59,1597.0,FPA_FRPA,0.0,0.0,26,2953,1070,1883,113.57692307692308,0.3623433796139519,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:19:09.318988,0.000356,udp,147.32.84.170,55790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:09.835232,3510.525879,udp,147.32.84.94,7103.0,<->,176.9.23.171,55012.0,CON,0.0,0.0,258,216096,4934,211162,837.5813953488372,0.022832444839330668,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:19:11.574714,0.000254,udp,147.32.84.59,51964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:11.576316,0.000306,udp,147.32.84.59,51195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:11.901241,0.364394,udp,147.32.84.170,37306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,86,86,86.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:13.850485,216.211655,tcp,147.32.84.134,52580.0,->,80.239.149.33,443.0,FSPA_FSPA,0.0,0.0,37,14995,4401,10594,405.27027027027026,0.2934978326108703,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:19:14.581255,0.000308,udp,147.32.84.170,48726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:14.595898,10.217578,tcp,147.32.84.170,34025.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,8,2003,1047,956,250.375,0.5227159261108337,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:17.301042,0.000285,udp,147.32.85.89,47951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:18.805653,179.438187,udp,147.32.86.208,11289.0,<->,147.52.110.90,42381.0,CON,0.0,0.0,5,328,208,120,65.6,0.6341463414634146,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:19:19.318697,0.000381,udp,147.32.84.170,54038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:22.383159,6.018919,udp,147.32.84.229,13363.0,->,118.152.112.103,38844.0,INT,0.0,,3,207,207,0,69.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:19:24.825212,19.646538,tcp,147.32.84.170,34031.0,->,77.78.99.22,80.0,FSPA_FSRPA,0.0,0.0,10,1985,1105,880,198.5,0.5566750629722922,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.941753,0.000357,udp,147.32.84.170,43493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.943586,0.000222,udp,147.32.84.170,43883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.944644,0.000216,udp,147.32.84.170,50974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,72,209,140.5,0.25622775800711745,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.945001,0.000402,udp,147.32.84.170,35342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,83,246,164.5,0.25227963525835867,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.945196,0.000341,udp,147.32.84.170,38356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.947263,0.000325,udp,147.32.84.170,50642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,72,235,153.5,0.23452768729641693,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.947999,0.000384,udp,147.32.84.170,39004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,72,228,150.0,0.24,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.949740,0.000233,udp,147.32.84.170,57625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,75,226,150.5,0.24916943521594684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.949826,0.000409,udp,147.32.84.170,46706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.954399,0.000227,udp,147.32.84.170,50555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.955022,0.000326,udp,147.32.84.170,40526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.957261,0.000275,udp,147.32.84.170,44143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,77,228,152.5,0.25245901639344265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.957364,0.000245,udp,147.32.84.170,39473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.959119,0.000438,udp,147.32.84.170,34378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:24.960803,0.000356,udp,147.32.84.170,39894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:25.067697,21.964315,tcp,147.32.84.170,42672.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,13,1921,1040,881,147.76923076923077,0.5413846954711088,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:26.805769,0.000599,udp,69.46.127.6,31376.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:19:27.471423,1.067383,udp,147.32.84.184,36327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:32.046175,0.002363,udp,98.231.106.39,19204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:19:33.813896,0.0,tcp,147.32.84.59,42353.0,->,88.198.20.131,443.0,S_,0.0,,1,74,74,0,74.0,1.0,18,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:19:36.037014,65.185272,tcp,147.32.84.165,1529.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:19:36.596556,26.964966,tcp,147.32.84.59,54584.0,->,76.13.114.90,80.0,SRPA_FSPA,0.0,0.0,12,2983,2102,881,248.58333333333334,0.7046597385182702,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:19:37.108189,0.257054,udp,147.32.84.170,37369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:39.321546,0.000262,udp,147.32.84.170,43336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:39.943657,0.0002,udp,147.32.85.25,33514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:41.965380,0.000356,udp,147.32.84.138,34448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:43.487549,0.000255,udp,147.32.84.138,36864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:46.031962,0.975802,tcp,147.32.84.170,52973.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,9,1153,549,604,128.11111111111111,0.4761491760624458,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:46.303048,0.000276,udp,147.32.84.170,55171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:46.303763,0.000257,udp,147.32.84.170,52404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,76,251,163.5,0.2324159021406728,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:48.234779,0.018503,udp,147.32.84.184,55509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,446,78,368,223.0,0.17488789237668162,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:49.320211,0.000251,udp,147.32.84.170,58722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:19:53.434289,0.000826,udp,87.120.1.26,49268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,364,134,230,91.0,0.36813186813186816,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:19:54.593870,3460.91626,tcp,147.32.84.164,39779.0,,64.12.73.134,443.0,FPA_FA,0.0,0.0,206,12492,6672,5820,60.640776699029125,0.5341018251681076,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:19:57.238229,0.000217,udp,147.32.84.164,38739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:19:57.239191,0.000364,udp,147.32.84.164,46007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:19:59.094575,0.000449,udp,147.32.84.138,33171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:19:59.143577,3599.164551,tcp,62.77.71.122,47845.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,314,33243,22698,10545,105.86942675159236,0.6827903618806966,18,0,flow=Background,Background,-1 2011-08-16 18:20:00.308543,0.000227,udp,147.32.85.34,64906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:00.503295,0.000184,udp,147.32.84.138,45899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:02.951296,0.005585,tcp,147.32.86.92,37069.0,->,147.32.87.40,4949.0,_SPA,,0.0,4,350,0,350,87.5,0.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:20:05.535917,0.000291,udp,147.32.84.164,44098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:06.393743,0.000192,udp,147.32.84.138,42913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:06.472228,0.000169,udp,147.32.84.164,40160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:06.750930,16.814278,tcp,147.32.84.59,61578.0,->,147.32.80.7,80.0,FSRPA_FSPA,0.0,0.0,11,1622,502,1120,147.45454545454547,0.3094944512946979,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:20:08.340801,0.000218,udp,147.32.84.164,36997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:08.342017,0.000322,udp,147.32.84.164,47428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:08.427596,3032.677246,udp,190.20.255.195,20739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:08.562898,0.000604,udp,41.202.100.224,30617.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,269,178,91,134.5,0.6617100371747212,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:13.845718,2293.742188,udp,109.229.130.252,54224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,694,148,546,173.5,0.2132564841498559,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:14.190458,0.000449,udp,89.76.211.159,9434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:14.339207,191.789078,tcp,66.249.66.154,39719.0,->,147.32.86.92,80.0,FSRPA_SPA,0.0,0.0,14,9917,627,9290,708.3571428571429,0.06322476555409902,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:20:14.612439,0.000274,udp,147.32.84.164,40403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:17.829853,2431.407959,tcp,147.32.84.170,46975.0,,74.125.39.125,5222.0,FPA_FPA,0.0,0.0,124,10693,6164,4529,86.23387096774194,0.5764518844103619,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:17.869668,0.000427,udp,147.32.84.164,43902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:19.322597,0.000258,udp,147.32.84.138,36500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:19.534393,0.000315,udp,147.32.84.164,59131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:19.535783,319.744995,tcp,147.32.84.164,35807.0,->,209.85.149.100,80.0,FSPA_FSPA,0.0,0.0,43,21163,12765,8398,492.16279069767444,0.6031753532107924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.260621,0.000229,udp,147.32.84.164,60535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.260979,0.005334,udp,147.32.84.164,39999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.264721,0.004897,udp,147.32.84.164,52398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.266714,0.003957,udp,147.32.84.164,57756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,89,206,147.5,0.3016949152542373,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.266722,0.004321,udp,147.32.84.164,41334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.266929,0.006442,udp,147.32.84.164,59966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.270175,50.748955,tcp,147.32.84.164,41453.0,->,77.75.76.7,80.0,FSRPA_SPA,0.0,0.0,80,61144,3043,58101,764.3,0.04976776135025514,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.270231,15.262292,tcp,147.32.84.164,41455.0,->,77.75.76.7,80.0,FSPA_FSPA,0.0,0.0,12,2191,1158,1033,182.58333333333334,0.5285257873117298,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.270730,0.00102,udp,147.32.84.164,51437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,80,132,106.0,0.37735849056603776,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.272060,0.000696,udp,147.32.84.164,33738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.272583,15.258994,tcp,147.32.84.164,46470.0,->,77.75.72.72,80.0,FSA_FSA,0.0,0.0,9,638,424,214,70.88888888888889,0.664576802507837,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.272627,15.260344,tcp,147.32.84.164,46473.0,->,77.75.72.72,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.273599,17.455549,tcp,147.32.84.164,49428.0,->,77.75.77.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.276148,15.255485,tcp,147.32.84.164,50022.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.276159,70.619453,tcp,147.32.84.164,50023.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,9,626,486,140,69.55555555555556,0.7763578274760383,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.276267,27.452454,tcp,147.32.84.164,50027.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:20.998622,3541.734375,tcp,151.25.9.17,3058.0,,147.32.84.229,13363.0,PA_PA,0.0,0.0,258,23982,14635,9347,92.95348837209302,0.6102493536819281,18,0,flow=Background,Background,-1 2011-08-16 18:20:22.691217,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,31647.0,URP,0.0,,1,354,354,0,354.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:22.692499,0.000324,udp,147.32.84.170,51926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:25.590755,0.000222,udp,147.32.84.170,50850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,88,147,117.5,0.37446808510638296,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:25.898799,0.000672,udp,193.33.26.153,27221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,66,247,156.5,0.2108626198083067,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:26.149848,816.161255,tcp,147.32.84.170,53897.0,?>,205.188.11.14,443.0,PA_,0.0,0.0,8,480,480,0,60.0,1.0,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:26.955333,0.002611,udp,147.32.84.164,57814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:26.958868,0.002723,udp,147.32.84.164,39564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:27.203926,0.00288,udp,147.32.84.164,45581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:27.203940,0.000307,udp,147.32.84.164,59820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:27.207732,0.002591,udp,147.32.84.164,51272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,72,189,130.5,0.27586206896551724,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:28.135367,0.0,udp,147.32.84.59,61615.0,->,134.76.208.34,34832.0,INT,0.0,,1,73,73,0,73.0,1.0,18,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:20:30.110170,0.010387,udp,147.32.84.164,35984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,75,93,84.0,0.44642857142857145,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:30.110627,0.000257,udp,147.32.84.164,54896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:30.112095,0.005434,udp,147.32.84.164,41356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:34.453064,0.000205,udp,147.32.84.138,39094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:35.621204,145.000183,tcp,147.32.85.6,53810.0,->,77.75.72.3,80.0,FSRPA_SA,0.0,0.0,11,2060,1862,198,187.27272727272728,0.903883495145631,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:20:37.366499,64.967834,tcp,147.32.84.165,1530.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:20:39.390041,0.000355,udp,147.32.84.170,60855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:49.390197,0.000413,udp,147.32.84.170,39225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:51.197983,0.000241,udp,147.32.84.164,33451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:52.200263,0.00033,udp,147.32.84.164,43929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:52.532478,25.138824,tcp,147.32.84.164,47158.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:56.020516,58.661228,tcp,147.32.84.164,48255.0,->,77.75.76.52,80.0,FSRPA_FSPA,0.0,0.0,22,7611,1767,5844,345.95454545454544,0.232163973196689,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:57.340911,0.000364,udp,147.32.84.134,56715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:20:57.342194,12.675327,tcp,147.32.84.134,40936.0,->,74.125.232.207,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:20:57.591087,0.000338,udp,147.32.84.134,49691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:20:57.593028,9.995576,tcp,147.32.84.134,55902.0,->,74.125.232.206,80.0,FSRPA_FSA,0.0,0.0,11,5610,5470,140,510.0,0.9750445632798574,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:20:57.654924,134.060043,tcp,147.32.84.164,48257.0,->,77.75.76.52,80.0,FSPA_FSPA,0.0,0.0,11,1574,1052,522,143.0909090909091,0.6683608640406608,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:57.891648,21.329611,tcp,147.32.84.164,48258.0,->,77.75.76.52,80.0,FSRPA_SPA,0.0,0.0,9,1327,906,421,147.44444444444446,0.6827430293896006,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:20:58.337045,2.337971,udp,147.32.84.229,13363.0,<->,213.231.135.29,20491.0,CON,0.0,0.0,3,258,198,60,86.0,0.7674418604651163,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:20:59.107718,0.000205,udp,147.32.84.138,44977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:20:59.392792,2.737005,tcp,147.32.84.170,58651.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:20:59.681548,0.001294,udp,147.32.84.162,56160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:03.392127,0.002908,udp,147.32.84.164,57321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:03.396018,0.00301,udp,147.32.84.164,52955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,75,210,142.5,0.2631578947368421,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:03.617800,40.576748,tcp,147.32.84.164,42745.0,->,77.75.72.68,80.0,FSPA_FSRPA,0.0,0.0,37,19446,1776,17670,525.5675675675676,0.09132983647022525,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:04.080979,19.867229,tcp,147.32.84.164,40856.0,->,77.75.76.7,80.0,FSRPA_SA,0.0,0.0,11,2738,1018,1720,248.9090909090909,0.3718042366691015,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:06.040829,79.257057,tcp,147.32.84.170,38288.0,->,195.24.232.205,80.0,FSPA_FSRPA,0.0,0.0,11,1279,615,664,116.27272727272727,0.4808444096950743,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:06.477319,103.702515,tcp,117.204.64.147,1086.0,->,147.32.84.2,80.0,FSRPA_SA,0.0,0.0,58,63457,1427,62030,1094.0862068965516,0.02248766881510314,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:21:06.629567,0.000411,udp,147.32.84.164,43807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:06.631985,0.000287,udp,147.32.84.164,47340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:09.392475,5.684639,tcp,147.32.84.170,54110.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:09.707517,0.000234,udp,147.32.84.138,33620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:10.649006,18.719118,tcp,147.32.84.164,48271.0,->,77.75.76.52,80.0,S_RA,0.0,0.0,4,282,222,60,70.5,0.7872340425531915,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:15.261466,1003.649048,udp,93.185.194.59,62931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,869,267,602,144.83333333333334,0.30724971231300346,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:21:21.252364,0.000188,udp,147.32.84.170,33910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:21.252880,0.000277,udp,147.32.84.170,59766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:21.254912,0.000194,udp,147.32.84.170,48760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:21.256081,0.000346,udp,147.32.84.170,39185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:21.259986,0.000266,udp,147.32.84.170,60427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:21.497670,0.243464,udp,147.32.84.170,48298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:22.645087,134.923248,tcp,147.32.84.59,58794.0,->,93.186.224.243,80.0,FSPA_FSPA,0.0,0.0,17,4446,3704,742,261.52941176470586,0.8331084120557805,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:21:23.849733,0.000303,udp,147.32.84.170,55031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:24.065679,11.553528,udp,147.32.84.164,34475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,225,150,75,75.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:25.897160,0.000324,udp,147.32.84.170,55959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:27.855482,0.000328,udp,147.32.84.170,37489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:27.855553,0.000353,udp,147.32.84.170,35189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:29.390417,0.000366,udp,147.32.84.170,42800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:29.391299,0.000295,udp,147.32.84.170,44032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:30.069112,5.550169,udp,147.32.84.164,41916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,225,150,75,75.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:34.076014,0.000346,udp,147.32.84.164,37480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:34.997008,0.000219,udp,147.32.84.59,52402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:35.619176,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,48274.0,URP,0.0,,1,103,103,0,103.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:35.619542,30.002272,udp,147.32.84.164,48032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740099,0.002768,udp,147.32.84.164,53163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740113,0.000305,udp,147.32.84.164,36618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740124,0.000312,udp,147.32.84.164,43320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740431,0.000708,udp,147.32.84.164,47032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740555,0.000588,udp,147.32.84.164,37661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.740663,0.000947,udp,147.32.84.164,58021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.742005,18.792747,tcp,147.32.84.164,42653.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.742061,68.79763,tcp,147.32.84.164,42654.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,10,708,568,140,70.8,0.8022598870056498,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.742068,0.000296,udp,147.32.84.164,52529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.743368,18.792414,tcp,147.32.84.164,54836.0,->,77.75.72.72,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.745139,140.964111,tcp,147.32.84.164,33875.0,->,77.75.72.69,80.0,FSA_SRA,0.0,0.0,8,558,346,212,69.75,0.6200716845878136,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.746344,0.002703,udp,147.32.84.164,50216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.748034,28.790352,tcp,147.32.84.164,48284.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.748091,28.790335,tcp,147.32.84.164,48286.0,->,77.75.76.52,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:36.749539,22.221733,tcp,147.32.84.164,40882.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.293603,1.88107,udp,147.32.84.164,39804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.294235,0.000517,udp,147.32.84.164,49008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.294242,0.000514,udp,147.32.84.164,36909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.294991,0.000342,udp,147.32.84.164,52398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295035,0.000458,udp,147.32.84.164,45242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295394,18.239542,tcp,147.32.84.164,44392.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295450,38.241848,tcp,147.32.84.164,44394.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,9,632,428,204,70.22222222222223,0.6772151898734177,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295503,18.239401,tcp,147.32.84.164,44395.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295542,18.239891,tcp,147.32.84.164,44396.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.295915,18.239887,tcp,147.32.84.164,60799.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,10,704,424,280,70.4,0.6022727272727273,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.296162,0.000283,udp,147.32.84.164,51404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.296801,28.242279,tcp,147.32.84.164,59091.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,8,558,354,204,69.75,0.6344086021505376,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.296977,19.404598,tcp,147.32.84.164,39259.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.779706,5.449414,udp,147.32.84.164,37954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,293,146,147,97.66666666666667,0.49829351535836175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.957476,0.000178,udp,147.32.84.164,49901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.959089,20.657333,tcp,147.32.84.164,34682.0,->,77.78.99.23,80.0,FSA_FSA,0.0,0.0,7,450,328,122,64.28571428571429,0.7288888888888889,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:37.963530,0.000234,udp,147.32.84.164,49721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:38.208324,20.408094,tcp,147.32.84.164,34683.0,->,77.78.99.23,80.0,FSA_FSA,0.0,0.0,7,450,328,122,64.28571428571429,0.7288888888888889,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:39.037349,0.000331,udp,147.32.84.170,42082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:39.174996,2.205382,udp,147.32.84.164,46925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:39.390443,0.000383,udp,147.32.84.170,36951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:40.805436,0.00032,udp,147.32.84.138,39265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:41.380772,14.153873,tcp,147.32.84.164,34889.0,->,194.79.52.195,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:41.668335,82.915909,tcp,147.32.84.165,1531.0,->,222.189.228.111,3389.0,FSPA_SPA,0.0,0.0,11,1211,632,579,110.0909090909091,0.5218827415359207,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:21:43.229575,12.305349,tcp,147.32.84.164,34963.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:45.814639,0.000326,udp,147.32.84.170,43980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:46.165262,0.353517,udp,147.32.84.164,54543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:46.166681,250.514923,tcp,147.32.84.164,34077.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,24,2444,1612,832,101.83333333333333,0.6595744680851063,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:46.651810,42.707912,tcp,147.32.84.170,58828.0,->,69.89.31.95,80.0,FSRPA_FSPA,0.0,0.0,31,11374,3547,7827,366.9032258064516,0.31185159134869,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.390157,0.000349,udp,147.32.84.170,40101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.391090,0.000315,udp,147.32.84.170,37799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.615540,0.000197,udp,147.32.84.170,54718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.615749,0.000264,udp,147.32.84.170,60938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,75,138,106.5,0.352112676056338,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.615918,0.000306,udp,147.32.84.170,36055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,89,169,129.0,0.3449612403100775,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.616174,0.000299,udp,147.32.84.170,40315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,75,239,157.0,0.23885350318471338,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.617760,12.766779,tcp,147.32.84.170,54310.0,->,62.168.44.117,80.0,FSA_FSA,0.0,0.0,8,508,328,180,63.5,0.6456692913385826,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.617920,0.000392,udp,147.32.84.170,35050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.618562,13.506233,tcp,147.32.84.170,58459.0,->,62.168.44.118,80.0,FSA_FSA,0.0,0.0,8,544,338,206,68.0,0.6213235294117647,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.619096,15.007917,tcp,147.32.84.170,36818.0,->,74.125.232.205,80.0,FSA_SA,0.0,0.0,7,490,338,152,70.0,0.689795918367347,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.872023,0.000418,udp,147.32.84.170,51890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,366,81,285,183.0,0.22131147540983606,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.873483,0.000184,udp,147.32.84.170,52087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,75,283,179.0,0.20949720670391062,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.874120,0.000431,udp,147.32.84.170,49381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,74,335,204.5,0.18092909535452323,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.874854,0.00039,udp,147.32.84.170,46554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,74,311,192.5,0.19220779220779222,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.875664,0.00025,udp,147.32.84.170,37475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,68,241,154.5,0.22006472491909385,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.877303,0.000406,udp,147.32.84.170,47138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,69,169,119.0,0.28991596638655465,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.877719,0.000318,udp,147.32.84.170,55542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,68,288,178.0,0.19101123595505617,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.878287,0.000299,udp,147.32.84.170,46394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,350,79,271,175.0,0.2257142857142857,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.878346,0.000389,udp,147.32.84.170,34120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,68,276,172.0,0.19767441860465115,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.879533,0.000228,udp,147.32.84.170,33502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.880062,0.000486,udp,147.32.84.170,51876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,350,83,267,175.0,0.23714285714285716,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:49.880538,1.312062,udp,147.32.84.170,55813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,71,144,107.5,0.3302325581395349,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:50.049588,0.000313,udp,147.32.84.170,46353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:50.145846,0.000273,udp,147.32.84.170,51855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,72,259,165.5,0.2175226586102719,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:50.313937,0.000252,udp,147.32.84.170,33383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:50.323894,0.000302,udp,147.32.84.170,51312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,88,148,118.0,0.3728813559322034,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:50.634845,0.000366,udp,147.32.84.164,59868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:51.193035,0.000174,udp,147.32.84.170,36367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,71,144,107.5,0.3302325581395349,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:51.196514,0.000328,udp,147.32.84.170,56068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:51.197263,0.000235,udp,147.32.84.170,33212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,81,265,173.0,0.23410404624277456,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:52.443447,31.394665,tcp,147.32.84.164,55629.0,->,74.125.232.223,443.0,FSPA_FSRA,0.0,0.0,9,1394,1194,200,154.88888888888889,0.8565279770444764,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:52.981605,0.000229,udp,147.32.84.164,34831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:52.982141,0.00028,udp,147.32.84.164,53730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,70,137,103.5,0.33816425120772947,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:53.295494,0.000265,udp,147.32.84.170,52852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:53.367554,0.000235,udp,147.32.84.170,55242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,83,234,158.5,0.2618296529968454,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:53.383390,0.000323,udp,147.32.84.170,53067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,79,230,154.5,0.255663430420712,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:53.414594,0.000295,udp,147.32.84.170,42641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:53.625809,0.000379,udp,147.32.84.138,49954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:54.270651,0.000234,udp,147.32.84.164,41111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:54.273262,0.248705,udp,147.32.84.164,33272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:54.522375,8.296972,udp,147.32.84.164,42708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,647,156,491,215.66666666666666,0.241112828438949,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:57.368840,0.000238,udp,147.32.84.170,52782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:57.831428,0.0002,udp,147.32.85.34,62678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:21:58.124631,0.000243,udp,147.32.84.170,52294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:58.125297,0.000322,udp,147.32.84.170,57414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:58.173021,17.365044,tcp,147.32.84.164,54895.0,->,77.75.72.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:58.173319,28.084028,tcp,147.32.84.164,40936.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:58.174638,0.000262,udp,147.32.84.164,38506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:21:58.375162,15.440684,tcp,147.32.84.170,39067.0,->,194.79.52.196,80.0,FSRPA_SA,0.0,0.0,14,7726,1600,6126,551.8571428571429,0.20709293295366296,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:21:59.835345,0.000531,udp,147.32.84.170,60818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:00.085533,14.09899,tcp,147.32.84.170,56051.0,->,194.79.52.195,80.0,FSRPA_SA,0.0,0.0,16,8600,2334,6266,537.5,0.2713953488372093,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:00.274300,0.000335,udp,147.32.84.164,47886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.006602,0.000222,udp,147.32.85.34,54755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:22:01.760882,3587.143066,udp,125.226.136.93,33384.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,471,285,186,78.5,0.6050955414012739,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:01.796302,38.560406,tcp,147.32.84.164,57191.0,->,194.79.52.192,80.0,FSA_SRA,0.0,0.0,9,608,470,138,67.55555555555556,0.7730263157894737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.796371,146.878983,tcp,147.32.84.164,60842.0,->,194.79.54.62,80.0,FSA_SA,0.0,0.0,14,1012,790,222,72.28571428571429,0.7806324110671937,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.796517,13.741071,tcp,147.32.84.164,44449.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.796539,13.741022,tcp,147.32.84.164,44451.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.796697,35.761181,tcp,147.32.84.164,44453.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,8,558,420,138,69.75,0.7526881720430108,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.796749,13.740822,tcp,147.32.84.164,44454.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.797009,0.000283,udp,147.32.84.164,57871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.797119,37.971447,tcp,147.32.84.164,34730.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,7,478,356,122,68.28571428571429,0.7447698744769874,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.797209,28.004322,tcp,147.32.84.164,39310.0,->,74.125.232.206,80.0,FSA_SRA,0.0,0.0,7,472,338,134,67.42857142857143,0.7161016949152542,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.797736,0.000168,udp,147.32.84.164,39661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:01.862117,39.854244,tcp,147.32.84.59,57310.0,->,81.94.208.214,843.0,SPA_FSA,0.0,0.0,24,1522,980,542,63.416666666666664,0.6438896189224704,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:22:02.959186,0.00028,udp,147.32.84.170,48590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:02.959540,0.000556,udp,147.32.84.170,47360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:02.960916,17.928856,tcp,147.32.84.170,47244.0,->,74.125.232.194,80.0,FSRPA_FSA,0.0,0.0,8,915,709,206,114.375,0.774863387978142,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.133964,0.000313,udp,147.32.84.170,60122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.134688,0.00033,udp,147.32.84.170,41509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.135594,155.095245,tcp,147.32.84.170,49041.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,16,4770,2672,2098,298.125,0.560167714884696,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.166442,0.241216,udp,147.32.84.170,46726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.209746,258.7276,tcp,147.32.84.170,46136.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,30,9445,1884,7561,314.8333333333333,0.19947061937533087,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.233840,249.16658,tcp,147.32.84.170,47254.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,25,6228,1309,4919,249.12,0.21017983301220294,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.237003,315.801208,tcp,147.32.84.170,46147.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,35,13009,2615,10394,371.6857142857143,0.20101468214313167,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:03.237958,17.65295,tcp,147.32.84.170,39768.0,->,74.125.232.192,80.0,FSRPA_FSA,0.0,0.0,8,915,709,206,114.375,0.774863387978142,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:04.420258,0.000321,udp,147.32.84.164,60325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:04.420267,3.274814,udp,147.32.84.164,36181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:04.422615,0.000288,udp,147.32.84.164,60253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:04.670882,0.000191,udp,147.32.84.164,41091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,73,132,102.5,0.35609756097560974,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:04.914592,21.437515,tcp,147.32.84.164,54848.0,->,78.24.14.16,80.0,FSA_SA,0.0,0.0,9,622,470,152,69.11111111111111,0.7556270096463023,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:04.914719,21.437391,tcp,147.32.84.164,54852.0,->,78.24.14.16,80.0,FSA_SA,0.0,0.0,9,622,470,152,69.11111111111111,0.7556270096463023,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:05.208474,3.730653,udp,147.32.84.59,55389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,653,174,479,217.66666666666666,0.2664624808575804,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:22:05.611135,0.000401,udp,147.32.84.170,59652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:07.013629,0.000997,udp,147.32.84.164,55845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014761,111.74054,tcp,147.32.84.164,40971.0,->,195.113.232.82,80.0,FSA_SA,0.0,0.0,8,560,486,74,70.0,0.8678571428571429,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014767,60.058033,tcp,147.32.84.164,40972.0,->,195.113.232.82,80.0,FSA_SRA,0.0,0.0,9,604,470,134,67.11111111111111,0.7781456953642384,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014875,28.623955,tcp,147.32.84.164,42090.0,->,66.220.158.47,80.0,FSA_FSA,0.0,0.0,9,630,420,210,70.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014881,28.624262,tcp,147.32.84.164,42091.0,->,66.220.158.47,80.0,FSA_FSA,0.0,0.0,9,630,420,210,70.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014932,28.624537,tcp,147.32.84.164,42092.0,->,66.220.158.47,80.0,FSA_FSA,0.0,0.0,9,630,420,210,70.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.014983,19.945187,tcp,147.32.84.164,40801.0,->,66.220.145.45,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.695471,0.000179,udp,147.32.84.164,38460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.981396,18.300684,tcp,147.32.84.164,50862.0,->,80.239.149.18,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:07.981447,27.563877,tcp,147.32.84.164,50865.0,->,80.239.149.18,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:09.240850,0.756685,udp,147.32.84.170,60234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:09.292995,1831.625488,tcp,46.135.144.19,24833.0,->,147.32.85.34,993.0,SRPA_FSPA,0.0,0.0,26,5055,1275,3780,194.42307692307693,0.2522255192878338,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:22:09.807742,3.13368,udp,147.32.84.170,52608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,363,78,285,181.5,0.21487603305785125,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:10.952899,21.433558,tcp,147.32.84.170,58318.0,->,74.125.232.219,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:10.953568,0.000253,udp,147.32.84.170,39407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:10.953632,0.000242,udp,147.32.84.170,34310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,85,183,134.0,0.31716417910447764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:10.953830,0.000407,udp,147.32.84.170,39291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,108,279,193.5,0.27906976744186046,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:10.953997,0.000515,udp,147.32.84.170,52096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,85,301,193.0,0.22020725388601037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:11.097780,3052.721436,udp,87.221.217.226,38979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:12.957916,0.000309,udp,147.32.84.164,40703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:16.953894,0.108932,udp,147.32.84.170,39170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:18.509098,0.39446,tcp,67.210.234.163,3554.0,->,147.32.86.235,80.0,SR_SA,0.0,0.0,3,182,122,60,60.666666666666664,0.6703296703296703,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:22:19.506557,12.880792,tcp,147.32.84.170,34411.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:19.506564,12.880779,tcp,147.32.84.170,34412.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:19.506759,12.879797,tcp,147.32.84.170,34413.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:19.925790,3509.770264,udp,147.32.84.94,7103.0,<->,77.10.145.39,7005.0,CON,0.0,0.0,114,91475,89969,1506,802.4122807017544,0.9835364853785187,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:21.158667,0.000372,udp,147.32.84.170,56500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:23.628714,5.576217,udp,84.242.66.51,57442.0,->,147.32.85.5,21857.0,INT,0.0,,2,278,278,0,139.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:22:28.563422,0.942407,tcp,80.230.81.143,51552.0,->,147.32.87.238,39371.0,S_RA,0.0,0.0,4,248,128,120,62.0,0.5161290322580645,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:22:29.392097,0.000308,udp,147.32.84.170,59799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:32.216113,0.000468,udp,89.29.29.62,59147.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:35.877507,0.00048,udp,77.235.96.212,14736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,78,497,287.5,0.1356521739130435,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:39.391606,0.000281,udp,147.32.84.170,51615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:39.392636,3.800009,tcp,147.32.84.170,54461.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:41.349897,1216.598877,tcp,151.81.164.77,49931.0,,147.32.84.229,13363.0,FPA_FPA,0.0,0.0,76,5389,2956,2433,70.90789473684211,0.5485247726850992,18,0,flow=Background,Background,-1 2011-08-16 18:22:44.330381,6.876181,udp,147.32.84.94,7103.0,<->,72.92.234.98,7461.0,CON,0.0,0.0,34,27246,26796,450,801.3529411764706,0.9834838141378551,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:22:44.949078,4.173209,udp,147.32.84.170,34424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:44.976239,0.000297,udp,147.32.84.170,37307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:45.002083,4.120222,udp,147.32.84.170,53433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:45.971628,64.23494,tcp,147.32.84.165,1532.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:22:46.837979,0.000242,udp,147.32.84.164,53317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:46.847798,18.69318,tcp,147.32.84.164,43552.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,8,552,346,206,69.0,0.6268115942028986,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:46.847887,9.40822,tcp,147.32.84.164,43554.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,8,544,338,206,68.0,0.6213235294117647,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:46.848802,0.260543,udp,147.32.84.164,33717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,76,235,155.5,0.24437299035369775,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:46.849654,0.000348,udp,147.32.84.164,55770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:47.158491,0.000284,udp,147.32.84.170,57160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:47.912035,15.229591,tcp,147.32.84.170,40131.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:47.912096,16.73731,tcp,147.32.84.170,40134.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:47.956713,4.634837,tcp,147.32.84.164,33924.0,->,209.85.148.106,80.0,FSPA_SPA,0.0,0.0,13,5391,2648,2743,414.6923076923077,0.4911890187349286,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.392615,0.822562,tcp,147.32.84.170,52694.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:49.942290,0.000189,udp,147.32.84.164,60082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.942304,0.00023,udp,147.32.84.164,54681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.942420,15.605782,tcp,147.32.84.164,36634.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.942431,16.752296,tcp,147.32.84.164,36635.0,->,74.125.232.204,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.942486,625.40448,tcp,147.32.84.164,36636.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,64,20030,14346,5684,312.96875,0.7162256615077384,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.942539,0.000412,udp,147.32.84.164,33303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,71,194,132.5,0.2679245283018868,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.943812,37.964329,tcp,147.32.84.164,49243.0,->,91.213.160.12,80.0,FSA_FSA,0.0,0.0,8,552,412,140,69.0,0.7463768115942029,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.943890,0.000366,udp,147.32.84.164,37469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.945007,0.000379,udp,147.32.84.164,42665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.947267,246.306183,tcp,147.32.84.164,56647.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,20,6375,4763,1612,318.75,0.7471372549019608,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:49.947274,16.350731,tcp,147.32.84.164,56648.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.721534,0.000306,udp,147.32.84.164,56815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,73,222,147.5,0.24745762711864408,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.726978,0.000251,udp,147.32.84.164,56571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,83,234,158.5,0.2618296529968454,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.728212,0.000269,udp,147.32.84.164,48390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,79,230,154.5,0.255663430420712,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.728951,0.000222,udp,147.32.84.164,41499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,72,159,115.5,0.3116883116883117,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.734553,0.000226,udp,147.32.84.164,35939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.735723,0.000356,udp,147.32.84.164,34776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.747894,0.000327,udp,147.32.84.164,35968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.752270,0.000246,udp,147.32.84.164,45264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.752843,0.000226,udp,147.32.84.164,50072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.754040,0.000293,udp,147.32.84.164,52334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.754704,0.000252,udp,147.32.84.164,56998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,77,228,152.5,0.25245901639344265,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.755562,0.000257,udp,147.32.84.164,37659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,77,226,151.5,0.25412541254125415,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:50.756129,0.00037,udp,147.32.84.164,37069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,77,214,145.5,0.2646048109965636,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:51.926458,0.000224,udp,147.32.84.170,32822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:51.926675,0.000242,udp,147.32.84.170,48574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:51.927464,0.000511,udp,147.32.84.170,42370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:51.927846,24.776527,tcp,147.32.84.170,48013.0,->,194.213.222.30,80.0,FSA_FSA,0.0,0.0,8,552,346,206,69.0,0.6268115942028986,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:51.929127,0.000257,udp,147.32.84.170,51453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,89,271,180.0,0.24722222222222223,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:51.963811,18.61388,tcp,147.32.84.164,38959.0,->,217.31.57.205,80.0,FSA_FSA,0.0,0.0,9,638,424,214,70.88888888888889,0.664576802507837,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:51.972618,148.258224,tcp,147.32.84.134,60467.0,->,66.220.151.91,443.0,SPA_FSRPA,0.0,0.0,19,6591,1096,5495,346.89473684210526,0.16628736155363374,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:22:52.300320,0.000269,udp,147.32.84.170,43965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.386800,0.018189,udp,147.32.84.170,43212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.405351,0.019364,udp,147.32.84.170,40647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,493,80,413,246.5,0.16227180527383367,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.409855,20.220436,tcp,147.32.84.170,38354.0,->,77.75.77.86,80.0,FSPA_FSRPA,0.0,0.0,21,7285,1641,5644,346.9047619047619,0.2252573781743308,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.424448,0.240236,udp,147.32.84.170,33633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.425539,0.415033,udp,147.32.84.170,58460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.584099,89.802849,tcp,147.32.84.170,46305.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,40,26193,2082,24111,654.825,0.07948688580918566,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.608443,0.415689,udp,147.32.84.170,44111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:52.657718,67.437271,tcp,147.32.84.170,38365.0,->,77.75.77.86,80.0,FSPA_FSRPA,0.0,0.0,17,8785,3076,5709,516.7647058823529,0.3501422879908936,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:53.024819,0.000247,udp,147.32.84.170,47516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:53.035046,22.78528,udp,147.32.84.164,55120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,234,156,78,78.0,0.6666666666666666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:54.081226,18.306421,tcp,147.32.84.170,34195.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.083077,498.189423,tcp,147.32.84.170,54711.0,->,66.220.158.47,80.0,FSPA_FSPA,0.0,0.0,34,10720,3562,7158,315.29411764705884,0.33227611940298507,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.270807,79.016212,tcp,147.32.84.170,59236.0,->,92.123.64.115,80.0,FSA_SRA,0.0,0.0,8,546,412,134,68.25,0.7545787545787546,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.271120,28.893045,tcp,147.32.84.170,59240.0,->,92.123.64.115,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.471293,319.520355,tcp,147.32.84.170,49156.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,36,16162,3470,12692,448.94444444444446,0.21470115084766736,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.546485,0.000232,udp,147.32.84.170,59617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:54.548017,87.839119,tcp,147.32.84.170,46333.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,14,2359,1373,986,168.5,0.5820262823230182,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:55.277204,306.890198,tcp,147.32.84.170,41371.0,->,2.21.101.115,80.0,FSPA_FSPA,0.0,0.0,19,2345,1552,793,123.42105263157895,0.6618336886993603,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:56.189861,16.914934,tcp,147.32.84.170,59543.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:56.291169,109.633301,tcp,147.32.84.170,58824.0,->,92.123.64.152,80.0,FSA_SRA,0.0,0.0,9,620,486,134,68.88888888888889,0.7838709677419354,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:56.759104,2.649656,udp,147.32.84.164,53689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:57.487388,0.000309,udp,147.32.84.164,49509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,82,143,112.5,0.36444444444444446,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:57.607261,0.000185,udp,147.32.84.170,59555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:57.617871,0.000207,udp,147.32.84.170,55678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:57.623615,0.000276,udp,147.32.84.170,38752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,71,200,135.5,0.26199261992619927,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:57.624473,38.335354,tcp,147.32.84.170,58857.0,->,195.168.10.171,80.0,FSPA_FSPA,0.0,0.0,20,10167,4289,5878,508.35,0.42185502114684764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:58.408116,198.865189,tcp,147.32.84.170,39217.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,33,16526,2260,14266,500.7878787878788,0.1367542054943725,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:58.656968,51.578857,tcp,147.32.84.170,39218.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,8,550,420,130,68.75,0.7636363636363637,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:59.226910,180.743439,tcp,147.32.84.170,49183.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,18,7071,2730,4341,392.8333333333333,0.38608400509121765,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:59.238718,0.241647,udp,147.32.84.170,42587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:59.409327,2.989209,udp,147.32.84.164,56121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:22:59.480770,0.000229,udp,147.32.84.170,52499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:59.557540,0.000268,udp,147.32.84.170,57980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:22:59.998303,62.384903,tcp,147.32.84.170,59565.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,9,634,494,140,70.44444444444444,0.7791798107255521,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:00.848424,3.223059,tcp,147.32.84.170,59045.0,->,74.125.232.218,80.0,FSRPA_SPA,0.0,0.0,18,11376,3178,8198,632.0,0.27936005625879046,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:00.920962,0.000303,udp,147.32.84.170,60163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:01.102767,24.223499,tcp,147.32.84.164,54925.0,->,78.24.14.16,80.0,FSA_FSA,0.0,0.0,11,770,490,280,70.0,0.6363636363636364,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:01.102775,15.373401,tcp,147.32.84.164,54926.0,->,78.24.14.16,80.0,FSA_FSA,0.0,0.0,10,696,416,280,69.6,0.5977011494252874,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:01.196132,2.643481,udp,147.32.84.170,53872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,474,121,353,237.0,0.2552742616033755,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:01.657350,0.000204,udp,147.32.84.138,47329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:23:01.681881,0.000306,udp,147.32.84.138,51697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:23:01.820220,14.000236,udp,147.32.84.170,48979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,234,156,78,78.0,0.6666666666666666,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:03.680942,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,47256.0,URP,0.0,,1,159,159,0,159.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:03.681150,0.000121,udp,147.32.84.170,39048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:03.840672,0.243952,udp,147.32.84.170,49162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:04.038870,0.000264,udp,147.32.84.170,47306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:04.085045,0.000377,udp,147.32.84.170,39172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:04.480887,0.000354,udp,92.115.96.140,37487.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:23:07.044599,21.928843,tcp,147.32.84.164,33458.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:07.044618,21.92882,tcp,147.32.84.164,33460.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:07.044623,96.510849,tcp,147.32.84.164,33461.0,->,74.125.232.200,80.0,FSA_SA,0.0,0.0,7,478,404,74,68.28571428571429,0.8451882845188284,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:08.108663,1.48376,udp,147.32.84.170,37872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:09.252155,0.000321,udp,147.32.84.170,43688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:09.252806,2.198351,udp,147.32.84.170,40068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,77,152,114.5,0.33624454148471616,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:09.391487,0.000356,udp,147.32.84.170,47011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:09.392571,0.813519,tcp,147.32.84.170,34956.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:09.681514,0.000298,udp,147.32.84.59,56310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:23:11.824792,0.000409,udp,147.32.84.170,57332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:12.421560,0.00027,udp,147.32.84.170,50347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,81,157,119.0,0.3403361344537815,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:12.421579,0.000266,udp,147.32.84.170,58810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:12.531454,0.000344,udp,147.32.84.170,56303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:13.155825,3522.668457,udp,85.170.207.192,56137.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,667,546,121,166.75,0.8185907046476761,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:23:13.997482,0.000255,udp,147.32.84.170,40717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:15.820312,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,41927.0,URP,0.0,,1,106,106,0,106.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:15.820326,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,20695.0,URP,0.0,,1,106,106,0,106.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:15.820347,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,20916.0,URP,0.0,,1,106,106,0,106.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:15.820448,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,8878.0,URP,0.0,,1,121,121,0,121.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:17.929963,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,51388.0,URP,0.0,,1,113,113,0,113.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:19.392571,7.419685,tcp,147.32.84.170,52801.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:20.701145,0.000267,udp,147.32.84.164,35616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:20.906893,0.000389,udp,147.32.84.170,42778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:20.941343,0.000361,udp,147.32.84.164,54432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,398,87,311,199.0,0.2185929648241206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:20.942142,62.119698,udp,147.32.84.164,44642.0,->,77.78.110.106,44448.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:21.758783,0.000244,udp,147.32.84.138,41438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:23:22.670529,0.000317,udp,147.32.84.164,51442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,398,87,311,199.0,0.2185929648241206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:24.764879,13.792857,tcp,147.32.84.170,35169.0,->,209.85.148.105,443.0,FSPA_FSRPA,0.0,0.0,14,1511,969,542,107.92857142857143,0.6412971542025149,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:26.038286,0.000182,udp,147.32.84.170,60645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:26.040315,85.550018,tcp,147.32.84.170,38510.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,12,1367,763,604,113.91666666666667,0.5581565471836137,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:26.469905,0.231577,udp,147.32.84.164,41308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:27.103160,0.000275,udp,147.32.85.25,56254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:23:27.818838,45.255806,tcp,147.32.84.59,47108.0,->,130.88.104.220,443.0,FSPA_SPA,0.0,0.0,44,22524,18324,4200,511.90909090909093,0.813532232285562,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:23:28.295346,0.0,icmp,147.32.84.164,771.0,->,147.32.80.9,11220.0,URP,0.0,,1,174,174,0,174.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:29.392826,5.74794,tcp,147.32.84.170,58875.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:30.165236,0.241211,udp,147.32.84.164,44642.0,->,77.78.110.106,44460.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:31.305565,0.01767,udp,147.32.84.170,42429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,71,325,198.0,0.17929292929292928,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:31.994799,16.066187,udp,147.32.84.170,38478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,323,162,161,107.66666666666667,0.5015479876160991,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:33.703161,3596.711914,udp,95.29.124.182,28480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,119,20491,10193,10298,172.19327731092437,0.497437899565663,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:23:34.205687,0.000208,udp,147.32.84.170,44044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:34.209629,18.177122,tcp,147.32.84.170,51200.0,->,82.208.47.218,80.0,FSA_FSA,0.0,0.0,9,638,424,214,70.88888888888889,0.664576802507837,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:34.394568,0.000273,udp,147.32.84.164,41740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:34.418264,3.063747,udp,147.32.84.164,37850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:34.638227,21.634815,tcp,147.32.84.164,41046.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:35.359585,0.0,igmp,147.32.87.7,,->,224.0.1.35,,INT,0.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:23:36.016378,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44465.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:37.001426,47.849762,tcp,147.32.84.164,51816.0,->,80.239.149.26,80.0,FSA_SRA,0.0,0.0,8,546,412,134,68.25,0.7545787545787546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:39.019645,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44468.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:39.390332,0.000322,udp,147.32.84.170,58114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:40.006361,0.911291,udp,147.32.84.170,47834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:40.885030,1.8e-05,udp,147.32.87.48,4185.0,->,147.32.86.237,161.0,INT,0.0,,2,262,262,0,131.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:23:41.571092,20.726669,tcp,147.32.84.59,65175.0,->,199.59.148.20,443.0,FSPA_FSRPA,0.0,0.0,30,12945,2744,10201,431.5,0.2119737350328312,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:23:42.224640,0.241888,udp,147.32.84.170,35388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,88,195,141.5,0.31095406360424027,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:44.024924,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44473.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:44.660667,2.888044,udp,147.32.86.208,11289.0,->,83.135.61.153,63385.0,INT,0.0,,2,150,150,0,75.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:23:45.068481,0.000232,udp,147.32.84.164,37402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,84,239,161.5,0.26006191950464397,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:45.311621,0.000322,udp,147.32.84.164,35934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,398,87,311,199.0,0.2185929648241206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:45.465097,8.746423,tcp,147.32.84.59,48963.0,->,147.32.96.159,11533.0,FSRPA_FSPA,0.0,0.0,8,720,504,216,90.0,0.7,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:23:46.797296,62.550526,udp,147.32.84.164,57838.0,->,91.213.160.118,44451.0,INT,0.0,,2,3028,3028,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:48.028393,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44477.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:48.040143,0.000303,udp,147.32.84.164,43255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,398,87,311,199.0,0.2185929648241206,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:48.060990,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,53424.0,URP,0.0,,1,189,189,0,189.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:48.061003,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,31670.0,URP,0.0,,1,189,189,0,189.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:48.993893,0.000329,udp,147.32.84.164,46450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,87,268,177.5,0.24507042253521127,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:49.029454,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44478.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:49.392807,2.200341,tcp,147.32.84.170,52813.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:49.532762,70.803741,tcp,147.32.84.165,1533.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,632,639,105.91666666666667,0.4972462627852085,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:23:51.031620,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44480.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:51.044102,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44456.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:51.651268,0.000457,udp,79.135.215.89,43827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:23:53.033732,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44482.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:54.034790,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44483.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:54.293569,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44460.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:54.431520,0.000229,udp,147.32.84.170,50760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:54.431737,0.002403,udp,147.32.84.170,34605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:54.434481,0.000267,udp,147.32.84.170,37770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:23:56.035416,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44485.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:56.295370,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44462.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:56.816912,0.255945,udp,147.32.84.164,58256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:56.821996,154.829071,tcp,147.32.84.164,51820.0,->,80.239.149.26,80.0,SPA_SRPA,0.0,0.0,38,19445,5319,14126,511.7105263157895,0.2735407559784006,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:56.868208,1.198401,udp,147.32.84.164,54478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,156,78,78,78.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:57.073330,2.105085,udp,147.32.84.164,33998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:58.037589,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44487.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:59.038660,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44488.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:59.261956,1.198547,udp,147.32.84.164,54567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,505,78,427,252.5,0.15445544554455445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:23:59.391500,0.000387,udp,147.32.84.170,58532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:00.626357,0.000357,udp,147.32.85.34,52503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:02.643379,0.000262,udp,147.32.84.59,39974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:03.042982,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44492.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:03.302640,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44469.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:03.963371,0.000211,udp,147.32.85.25,37536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:04.722787,18.591034,tcp,84.42.140.191,46711.0,->,147.32.87.33,443.0,SRPA_FSPA,0.0,0.0,15,5926,1492,4434,395.06666666666666,0.25177185285183934,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:24:05.045185,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44494.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:05.759039,0.546296,udp,192.168.88.138,60590.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:24:08.916463,0.240979,udp,147.32.84.170,52545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:08.927084,0.000315,udp,147.32.84.170,60591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,81,146,113.5,0.3568281938325991,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:08.927760,0.229697,udp,147.32.84.170,50079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:09.391560,0.000367,udp,147.32.84.170,33134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:10.049730,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44499.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:12.311712,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44478.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:12.958110,0.000308,udp,147.32.85.89,40839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:13.052912,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44502.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:15.055074,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44504.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:16.366219,0.036082,udp,41.207.163.6,31173.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:24:17.056459,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44506.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:18.317492,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44484.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:19.057494,0.0,udp,147.32.84.164,44642.0,->,77.78.110.106,44444.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:19.392626,1.250812,tcp,147.32.84.170,58890.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:28.326490,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44494.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:29.147135,0.000703,udp,77.232.15.217,28458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,299,237,62,149.5,0.7926421404682275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:24:29.184181,0.000257,udp,147.32.84.170,38218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,68,157,112.5,0.3022222222222222,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.184914,0.000247,udp,147.32.84.170,43901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.185455,0.000266,udp,147.32.84.170,38672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,75,283,179.0,0.20949720670391062,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.187297,0.00039,udp,147.32.84.170,33182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,74,311,192.5,0.19220779220779222,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.195663,0.000347,udp,147.32.84.170,46969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.196939,0.000352,udp,147.32.84.170,42498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.198881,0.000293,udp,147.32.84.170,49843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,350,83,267,175.0,0.23714285714285716,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.199945,0.000185,udp,147.32.84.170,35186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.200483,0.000262,udp,147.32.84.170,37009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.203413,0.000255,udp,147.32.84.170,44946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,71,172,121.5,0.29218106995884774,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.212313,0.000229,udp,147.32.84.170,43671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.225722,0.253563,udp,147.32.84.170,52683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,72,158,115.0,0.3130434782608696,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.391490,0.000466,udp,147.32.84.170,47803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.459947,0.000248,udp,147.32.84.170,38533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.460568,0.000212,udp,147.32.84.170,38585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,69,169,119.0,0.28991596638655465,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.461644,0.00033,udp,147.32.84.170,36401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,88,147,117.5,0.37446808510638296,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.462970,0.000286,udp,147.32.84.170,42991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,88,148,118.0,0.3728813559322034,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.480146,0.000337,udp,147.32.84.170,60898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:29.506274,0.000223,udp,147.32.85.25,55814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:33.073013,50.081772,tcp,147.32.84.164,39033.0,->,66.220.158.18,80.0,FSRPA_SPA,0.0,0.0,21,13161,3670,9491,626.7142857142857,0.27885419041106296,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:34.258966,0.00068,udp,147.32.84.170,56288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:34.259955,0.000609,udp,147.32.84.170,58601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:34.261196,0.000161,udp,147.32.84.170,53875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:34.261202,60.190742,tcp,147.32.84.170,53605.0,->,194.213.222.29,80.0,FSA_FSA,0.0,0.0,8,552,346,206,69.0,0.6268115942028986,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:34.333027,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44500.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:36.137596,2073.014893,udp,114.36.152.165,50859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,2969,143,2826,593.8,0.04816436510609633,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:24:36.327642,0.0,igmp,147.32.87.7,,->,224.0.1.35,,INT,0.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:24:36.335187,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44502.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:37.507135,20.286203,tcp,147.32.84.164,40889.0,->,66.220.145.45,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:37.714903,0.000941,udp,71.194.198.214,50552.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1157,197,960,578.5,0.17026793431287812,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:24:39.153924,0.000494,udp,109.121.241.244,35526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,77,495,286.0,0.1346153846153846,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:24:40.339042,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44506.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:41.665864,17.923836,udp,147.32.84.170,49908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:43.342252,0.0,udp,147.32.84.164,57838.0,->,91.213.160.118,44445.0,INT,0.0,,1,1514,1514,0,1514.0,1.0,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:46.669140,4.993693,udp,147.32.84.170,50132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:48.745344,0.000167,udp,147.32.84.138,55347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:24:53.727883,10.385168,tcp,147.32.84.165,1534.0,->,222.189.228.111,3389.0,SPA_SA,0.0,0.0,7,649,527,122,92.71428571428571,0.8120184899845917,18,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 18:24:54.768059,6.673827,udp,147.32.86.168,123.0,<->,91.189.94.4,123.0,CON,0.0,0.0,7,630,360,270,90.0,0.5714285714285714,18,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 18:24:56.579563,62.530651,tcp,147.32.84.164,39039.0,->,66.220.158.18,80.0,FSA_FSA,0.0,0.0,12,844,700,144,70.33333333333333,0.8293838862559242,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:24:59.038597,0.000348,udp,147.32.84.170,34297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:24:59.392725,0.865963,tcp,147.32.84.170,34998.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:03.339638,2117.228271,udp,147.32.84.229,13363.0,<->,78.34.66.17,64200.0,CON,0.0,0.0,6,508,375,133,84.66666666666667,0.7381889763779528,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:25:04.288070,0.000275,udp,147.32.84.138,39228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:25:05.638626,19.917677,tcp,147.32.84.164,51171.0,->,74.125.232.207,80.0,FSA_FSA,0.0,0.0,8,560,420,140,70.0,0.75,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:06.247117,25.179062,udp,147.32.84.170,40187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,225,150,75,75.0,0.6666666666666666,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:09.390860,0.00045,udp,147.32.84.170,37171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:09.391835,0.000288,udp,147.32.84.170,44415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:10.246933,0.000366,udp,147.32.84.164,56464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:11.637489,0.000309,udp,147.32.84.164,49228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,86,257,171.5,0.25072886297376096,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:15.092326,0.269678,udp,147.32.84.59,57496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:25:15.296909,9.004001,tcp,147.32.84.19,41521.0,->,147.32.201.140,13579.0,S_,0.0,,3,222,222,0,74.0,1.0,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:25:16.983884,0.000424,udp,99.1.32.43,47274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:25:19.390765,0.00032,udp,147.32.84.170,51553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:19.977601,0.000307,udp,147.32.85.34,53013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:25:22.137800,0.000326,udp,147.32.84.170,33610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:22.138494,0.000208,udp,147.32.84.170,34427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:25.454838,0.000337,udp,147.32.84.164,40525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:29.390740,4.667059,udp,147.32.84.170,49354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:31.426178,0.0,icmp,147.32.84.170,771.0,->,147.32.80.9,64412.0,URP,0.0,,1,103,103,0,103.0,1.0,18,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:31.426378,0.000427,udp,147.32.84.170,55602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:33.645752,3.908051,udp,147.32.84.164,40917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,172,86,86,86.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:34.059613,0.860896,tcp,147.32.84.170,54618.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:34.380116,2.343744,udp,147.32.85.76,64868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,454,228,226,113.5,0.5022026431718062,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:25:37.909004,0.000296,udp,147.32.84.59,39968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,84,217,150.5,0.27906976744186046,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:25:39.393540,0.000337,udp,147.32.84.170,53238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:40.453765,0.000454,udp,147.32.84.164,60069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:40.973341,0.000359,udp,147.32.84.164,54340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,89,169,129.0,0.3449612403100775,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:43.214568,1.592257,udp,147.32.84.170,46838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,541,71,470,270.5,0.13123844731977818,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:45.489511,1.427981,udp,147.32.84.170,46809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,108,279,193.5,0.27906976744186046,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:45.489624,20.345881,tcp,147.32.84.170,55696.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:45.489921,39.347572,tcp,147.32.84.170,55700.0,->,74.125.232.206,80.0,FSA_SRA,0.0,0.0,7,472,338,134,67.42857142857143,0.7161016949152542,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:45.491982,46.185947,tcp,147.32.84.170,47704.0,->,74.125.232.195,80.0,FSA_SRA,0.0,0.0,8,546,412,134,68.25,0.7545787545787546,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:45.518512,0.0,udp,147.32.86.44,10966.0,->,158.193.202.173,59638.0,INT,0.0,,1,72,72,0,72.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:25:45.837911,1.280051,udp,147.32.84.170,50989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,85,301,193.0,0.22020725388601037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:46.597487,0.000301,udp,147.32.84.164,51963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,77,158,117.5,0.3276595744680851,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:46.606070,1.733035,udp,147.32.84.164,38289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,78,171,124.5,0.3132530120481928,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:46.618915,0.000321,udp,147.32.84.164,35376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,77,314,195.5,0.1969309462915601,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:46.856623,19.509953,tcp,147.32.84.164,46730.0,->,209.85.149.191,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:47.430557,0.242812,udp,147.32.84.164,51843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,79,172,125.5,0.3147410358565737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:48.412593,436.933228,tcp,147.32.84.164,43541.0,->,74.125.232.204,80.0,FSPA_FSRPA,0.0,0.0,283,249856,9035,240821,882.8833922261484,0.036160828637295084,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:48.890666,356.450378,tcp,147.32.84.164,35254.0,->,74.125.232.210,80.0,FSPA_FSRPA,0.0,0.0,93,61127,4556,56571,657.2795698924731,0.07453334860209072,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:52.607447,0.000268,udp,147.32.84.164,40310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,75,150,112.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:25:54.451221,0.000327,udp,193.120.212.162,25866.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:25:54.681637,110.996719,tcp,147.32.84.170,34062.0,->,74.125.232.219,80.0,FSA_SRA,0.0,0.0,9,620,486,134,68.88888888888889,0.7838709677419354,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:25:59.390702,0.000325,udp,147.32.84.170,60824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:00.281305,0.000319,udp,147.32.85.34,54975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:26:00.333399,0.00032,udp,147.32.85.34,57763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:26:00.335173,0.000292,udp,147.32.85.34,51149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:26:00.805209,0.000395,udp,137.208.129.43,52163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:09.391650,0.000266,udp,147.32.84.170,46156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:10.045032,3341.924805,udp,109.58.51.15,5691.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,479,355,124,119.75,0.7411273486430062,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:10.739522,20.074453,tcp,147.32.84.164,42125.0,->,74.125.232.197,80.0,FSA_SA,0.0,0.0,8,556,404,152,69.5,0.7266187050359713,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:10.739528,15.966798,tcp,147.32.84.164,42126.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,7,478,338,140,68.28571428571429,0.7071129707112971,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:12.551016,0.000507,udp,147.32.84.164,52148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:12.845613,0.00024,udp,147.32.84.138,58396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:26:12.932478,73.103844,tcp,147.32.84.164,54907.0,->,75.101.162.204,80.0,FSPA_FSPA,0.0,0.0,12,1678,1056,622,139.83333333333334,0.6293206197854588,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:17.068858,0.000526,udp,147.32.84.164,38529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:17.069373,0.000387,udp,147.32.84.164,53470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:17.071531,0.000247,udp,147.32.84.164,48836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:17.071537,0.000334,udp,147.32.84.164,37956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,80,136,108.0,0.37037037037037035,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:19.390812,0.000371,udp,147.32.84.170,34899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:21.163001,0.000369,udp,147.32.84.164,41744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:21.163822,484.187531,tcp,147.32.84.164,51111.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,118,76819,4840,71979,651.0084745762712,0.06300524609797055,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:22.375394,1805.702637,udp,89.74.230.204,46968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:22.779935,0.740035,tcp,90.183.39.17,37057.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,15,10139,915,9224,675.9333333333333,0.09024558634973863,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:26:22.810672,0.000255,udp,147.32.86.77,37604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:26:25.225953,0.000287,udp,147.32.84.164,42150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:25.226899,0.000353,udp,147.32.84.164,54095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:25.476007,0.722357,tcp,147.32.84.164,38417.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,9,1624,938,686,180.44444444444446,0.5775862068965517,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:29.830639,0.002604,udp,98.238.238.52,10695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,2763,60,2703,921.0,0.021715526601520086,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:34.802565,0.000406,udp,85.217.170.93,47118.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:41.306831,0.002862,udp,147.32.84.164,57529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,69,218,143.5,0.24041811846689895,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.440501,0.000227,udp,147.32.84.164,60855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,70,185,127.5,0.27450980392156865,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.440713,0.000336,udp,147.32.84.164,39532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,71,186,128.5,0.27626459143968873,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.586519,0.257349,udp,147.32.84.164,55433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.601921,0.000348,udp,147.32.84.164,47511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,72,250,161.0,0.2236024844720497,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.687341,0.000153,udp,147.32.84.164,36492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:41.688447,28.990358,tcp,147.32.84.164,41413.0,->,77.78.99.23,80.0,FSPA_FSRPA,0.0,0.0,9,2199,1251,948,244.33333333333334,0.5688949522510232,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:44.570483,0.000477,udp,220.136.7.163,57775.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,78,480,279.0,0.13978494623655913,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:44.848844,0.002568,udp,147.32.84.164,40536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:26:47.700866,3060.940186,udp,89.124.33.247,11488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2306,1007,1299,192.16666666666666,0.43668690372940155,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:26:49.392233,0.000347,udp,147.32.84.170,40518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:53.148285,0.000206,udp,147.32.84.170,42282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:53.921530,0.000248,udp,147.32.84.170,42994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:26:54.653083,17.742441,tcp,147.32.84.170,41554.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:00.738934,0.000486,udp,147.32.84.21,35074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,73,274,173.5,0.21037463976945245,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:00.782029,0.000173,udp,147.32.84.138,39349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:02.856872,1827.597778,udp,85.18.36.49,31474.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,484,360,124,121.0,0.743801652892562,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:05.905494,0.000154,udp,147.32.85.25,37916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:09.392673,0.500909,tcp,147.32.84.170,39992.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:11.644979,2427.517578,udp,61.227.118.184,20847.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:16.970084,183.075577,tcp,147.32.86.168,52865.0,->,74.125.235.191,80.0,FSPA_FSPA,0.0,0.0,32,7696,5242,2454,240.5,0.6811330561330561,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:27:19.390965,0.000381,udp,147.32.84.170,40468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:20.038753,78.786018,tcp,147.32.84.170,40272.0,->,195.24.232.205,80.0,FSPA_FSRPA,0.0,0.0,11,1287,689,598,117.0,0.5353535353535354,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:21.976353,0.000404,udp,147.32.84.138,40297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:26.049881,0.000247,udp,147.32.84.138,34546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:29.392935,0.495163,tcp,147.32.84.170,42543.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:29.812182,580.812256,udp,24.145.121.236,54735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,478,354,124,119.5,0.7405857740585774,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:32.457424,0.000502,udp,46.13.62.235,17502.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,230,168,62,115.0,0.7304347826086957,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:37.494955,2.188476,tcp,147.32.86.168,43576.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,12,4146,2967,1179,345.5,0.715629522431259,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:27:38.423520,0.009913,udp,147.32.84.170,40286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.433840,0.000358,udp,147.32.84.170,34618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.435021,263.749756,tcp,147.32.84.170,47734.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,39,15500,2565,12935,397.43589743589746,0.16548387096774195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.802908,0.000297,udp,147.32.84.170,46595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.803706,0.000549,udp,147.32.84.170,38517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.805318,263.379456,tcp,147.32.84.170,47735.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,37,14173,2551,11622,383.05405405405406,0.17999012206307768,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.810571,263.374023,tcp,147.32.84.170,51933.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,33,10274,1949,8325,311.3333333333333,0.18970216079423788,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.813751,263.370819,tcp,147.32.84.170,45861.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,73,41775,4521,37254,572.2602739726027,0.10822262118491921,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.813755,263.370636,tcp,147.32.84.170,45862.0,->,74.125.232.193,80.0,FSPA_FSRPA,0.0,0.0,34,12038,2015,10023,354.05882352941177,0.1673866090712743,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.813930,263.37027,tcp,147.32.84.170,53623.0,->,74.125.232.192,80.0,FSPA_FSRPA,0.0,0.0,32,9817,1949,7868,306.78125,0.19853315676887032,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.833070,0.000228,udp,147.32.84.170,34498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,78,167,122.5,0.3183673469387755,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.833084,0.000357,udp,147.32.84.170,33450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.833723,0.010122,udp,147.32.84.170,54121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,363,78,285,181.5,0.21487603305785125,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.928294,13.238875,tcp,147.32.84.170,53627.0,->,74.125.232.192,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.929228,0.000329,udp,147.32.84.170,53017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.929378,0.0005,udp,147.32.84.170,34006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,108,279,193.5,0.27906976744186046,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.929966,0.010628,udp,147.32.84.170,33299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,71,495,283.0,0.1254416961130742,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.930034,0.010361,udp,147.32.84.170,54789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:38.941235,13.22618,tcp,147.32.84.170,51365.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:39.391558,0.000354,udp,147.32.84.170,34811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:41.305193,0.000214,udp,147.32.84.59,59988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:41.378968,0.000263,udp,147.32.84.59,45038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:43.185142,0.000164,udp,147.32.84.134,39639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,65,140,102.5,0.3170731707317073,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.205458,0.000214,udp,147.32.84.134,40002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,76,137,106.5,0.3568075117370892,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.206694,0.031209,udp,147.32.84.134,58782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,76,220,148.0,0.25675675675675674,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.230900,0.000448,udp,147.32.84.134,59778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,499,87,412,249.5,0.1743486973947896,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.480913,0.000305,udp,147.32.84.134,48516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.497978,0.017134,udp,147.32.84.134,58702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,154,77,77,77.0,0.5,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.515949,0.017206,udp,147.32.84.134,46731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:43.569691,185.673233,tcp,147.32.84.134,38599.0,->,69.171.227.26,5222.0,FSPA_FSPA,0.0,0.0,158,50023,13814,36209,316.6012658227848,0.27615296963396835,18,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:44.509209,0.00015,udp,147.32.84.134,43537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:44.522317,0.010108,udp,147.32.84.134,53673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:44.716161,0.000279,udp,147.32.84.134,49808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:44.716734,0.000291,udp,147.32.84.134,47995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:45.718690,3097.543945,udp,85.107.196.252,29963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:46.538388,0.000398,udp,147.32.84.164,54277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:27:46.539240,0.393468,tcp,147.32.84.164,52397.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,10,1538,850,688,153.8,0.552665799739922,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:27:47.289525,0.000312,udp,147.32.84.59,44982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:47.834883,0.000154,udp,147.32.84.134,46291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:48.868668,0.000283,udp,117.199.6.75,64373.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:49.143360,9.021258,tcp,94.162.16.65,51148.0,->,147.32.85.26,443.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:27:49.390866,0.000418,udp,147.32.84.170,40548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:49.391810,0.000323,udp,147.32.84.170,39358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:49.392911,0.017972,tcp,147.32.84.170,47122.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:50.039924,2433.144531,udp,85.74.108.137,4103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:51.351328,0.000309,udp,147.32.84.138,53408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:51.457670,0.962916,udp,147.32.84.59,57947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,146,73,73,73.0,0.5,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:53.347669,0.034131,udp,147.32.84.229,13363.0,<->,81.182.124.236,23207.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:27:53.417639,0.010552,udp,147.32.84.170,41296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,593,85,508,296.5,0.1433389544688027,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:55.451175,0.000366,udp,147.32.84.68,65066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:56.294091,565.907654,tcp,147.32.84.170,45891.0,->,74.125.232.193,80.0,FSPA_FSRPA,0.0,0.0,42,8155,5579,2576,194.16666666666666,0.6841201716738198,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:56.294180,15.875,tcp,147.32.84.170,45892.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:57.500158,244.684433,tcp,147.32.84.170,51972.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,27,6192,1374,4818,229.33333333333334,0.22189922480620156,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:57.569206,0.000275,udp,147.32.84.170,57679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:57.702439,0.000223,udp,147.32.84.138,47799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:27:59.278392,0.305122,udp,147.32.84.134,49990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,88,231,159.5,0.27586206896551724,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.279514,132.888596,tcp,147.32.84.134,52694.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,23,6401,1268,5133,278.30434782608694,0.19809404780503045,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.279716,132.888687,tcp,147.32.84.134,52697.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,23,6401,1268,5133,278.30434782608694,0.19809404780503045,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.282550,85.642715,tcp,147.32.84.134,49887.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.282639,83.60186,tcp,147.32.84.134,49888.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.282645,81.806374,tcp,147.32.84.134,49889.0,->,66.220.151.91,443.0,FSPA_FSRPA,0.0,0.0,23,6855,1228,5627,298.04347826086956,0.17913931436907368,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.317211,0.021575,udp,147.32.84.134,35676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,536,84,452,268.0,0.15671641791044777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.340875,39.969261,tcp,147.32.84.134,51191.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4066,1160,2906,214.0,0.2852926709296606,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.393539,0.021794,tcp,147.32.84.170,58808.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:27:59.433877,0.00172,udp,147.32.84.134,47073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,87,397,242.0,0.1797520661157025,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.587457,39.721088,tcp,147.32.84.134,44396.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:27:59.587652,39.721035,tcp,147.32.84.134,44399.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:00.170070,0.000466,udp,147.32.84.134,49592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,88,396,242.0,0.18181818181818182,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:00.300398,0.000374,udp,147.32.85.34,50038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:00.316551,0.010486,udp,147.32.84.170,49643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:00.417652,0.000336,udp,147.32.84.170,34291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:00.418377,0.000427,udp,147.32.84.170,35228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,429,76,353,214.5,0.17715617715617715,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:00.717266,0.00016,udp,147.32.84.138,44280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:01.049657,0.00995,udp,147.32.84.170,37803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.192430,250.991913,tcp,147.32.84.170,48616.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,32,12445,10813,1632,388.90625,0.8688629971876256,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.330418,0.09447,tcp,147.32.84.59,42082.0,->,78.138.112.61,80.0,FSPA_FSPA,0.0,0.0,14,5240,1306,3934,374.2857142857143,0.24923664122137404,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:28:01.829156,0.017448,udp,147.32.84.170,40359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.831406,0.000999,udp,147.32.84.170,51406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,80,429,254.5,0.15717092337917485,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.831995,0.000787,udp,147.32.84.170,41519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.832497,310.347656,tcp,147.32.84.170,34392.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,22,2691,1561,1130,122.31818181818181,0.5800817539947974,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.832591,0.000675,udp,147.32.84.170,55428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.832776,20.331041,tcp,147.32.84.170,49309.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,21,5931,4804,1127,282.42857142857144,0.809981453380543,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.832876,70.334732,tcp,147.32.84.170,49311.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,18,3903,3052,851,216.83333333333334,0.7819625928772739,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.833273,310.34726,tcp,147.32.84.170,48134.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,25,3932,2624,1308,157.28,0.6673448626653102,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.833386,0.00041,udp,147.32.84.170,56658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.833587,0.000291,udp,147.32.84.170,44050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.834575,250.036957,tcp,147.32.84.170,39858.0,->,74.125.232.204,443.0,SRPA_FSPA,0.0,0.0,31,4952,1542,3410,159.74193548387098,0.311389337641357,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.835256,20.328552,tcp,147.32.84.170,49329.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,19,4659,3703,956,245.21052631578948,0.7948057523073621,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.835363,70.332306,tcp,147.32.84.170,49331.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,16,2781,2101,680,173.8125,0.7554836389787846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.835520,70.332146,tcp,147.32.84.170,49334.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,16,3128,2099,1029,195.5,0.6710358056265985,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.866891,10.301353,tcp,147.32.84.170,49244.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:01.866997,10.301445,tcp,147.32.84.170,49246.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.285016,0.000179,udp,147.32.84.170,33324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.318387,0.000434,udp,147.32.84.170,36449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,470,79,391,235.0,0.16808510638297872,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.319481,19.849058,tcp,147.32.84.170,56577.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.348209,0.002597,udp,147.32.84.170,42260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.349050,0.000527,udp,147.32.84.170,59941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.349360,0.000837,udp,147.32.84.170,52514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.349829,0.000507,udp,147.32.84.170,40417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.350159,0.000387,udp,147.32.84.170,55368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.351182,0.00083,udp,147.32.84.170,50629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.351891,0.000591,udp,147.32.84.170,47086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.352552,19.825914,tcp,147.32.84.170,52837.0,->,92.123.64.128,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.352619,0.000395,udp,147.32.84.170,48311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.352670,19.825987,tcp,147.32.84.170,52839.0,->,92.123.64.128,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.352762,19.978451,tcp,147.32.84.170,33390.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.353287,19.81616,tcp,147.32.84.170,46767.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.353398,19.815977,tcp,147.32.84.170,46769.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.353405,19.816778,tcp,147.32.84.170,46770.0,->,80.239.149.10,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.527334,0.002169,udp,147.32.84.170,40749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.529900,0.000463,udp,147.32.84.170,43905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.530095,0.000276,udp,147.32.84.170,57267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,78,197,137.5,0.28363636363636363,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.532107,0.000336,udp,147.32.84.170,42387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.532725,0.000194,udp,147.32.84.170,48017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.532844,0.000277,udp,147.32.84.170,40898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,77,196,136.5,0.28205128205128205,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.533455,0.000234,udp,147.32.84.170,57647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.533878,0.000359,udp,147.32.84.170,33127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.534018,0.000419,udp,147.32.84.170,38683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.535543,0.000324,udp,147.32.84.170,35008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,74,193,133.5,0.27715355805243447,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.535662,0.000372,udp,147.32.84.170,34720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.537164,0.000407,udp,147.32.84.170,43117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:02.542438,0.000458,udp,60.39.246.104,2556.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:02.978525,15.11074,tcp,88.103.162.186,12567.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,23,13920,1093,12827,605.2173913043479,0.07852011494252874,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:28:02.981593,0.000204,udp,147.32.84.170,57584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:03.479666,0.000313,udp,147.32.84.170,36030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:03.485898,240.686569,tcp,147.32.84.170,50755.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,39,4579,2569,2010,117.41025641025641,0.5610395282812841,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:04.756172,0.000432,udp,147.32.84.170,53479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,74,423,248.5,0.1488933601609658,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:05.840975,6.11409,tcp,66.249.66.207,50411.0,->,147.32.85.85,443.0,FSPA_FSPA,0.0,0.0,16,4717,1233,3484,294.8125,0.26139495442018235,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:28:06.566440,0.000164,udp,147.32.84.138,60697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:07.520943,0.000323,udp,147.32.86.168,49369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,68,129,98.5,0.34517766497461927,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:07.957120,0.000397,udp,147.32.84.134,40407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.086408,0.000241,udp,147.32.84.134,55074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.710914,9.998323,tcp,147.32.84.134,50484.0,->,109.123.211.195,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.711749,0.00035,udp,147.32.84.134,46332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,82,133,107.5,0.3813953488372093,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.713328,0.000171,udp,147.32.84.134,47167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,82,134,108.0,0.37962962962962965,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.714138,19.990479,tcp,147.32.84.134,60317.0,->,109.123.211.210,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.714207,19.9904,tcp,147.32.84.134,60318.0,->,109.123.211.210,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.714446,19.990763,tcp,147.32.84.134,54959.0,->,109.123.211.197,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.739038,9.646627,tcp,147.32.84.134,50496.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,64,44353,3587,40766,693.015625,0.08087389804522806,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:08.864396,1.990047,udp,41.220.109.20,20546.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,702,518,184,117.0,0.7378917378917379,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:09.175242,13.007417,tcp,147.32.84.170,43093.0,->,209.85.147.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.175648,12.994005,tcp,147.32.84.170,52050.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.175774,12.994402,tcp,147.32.84.170,47858.0,->,74.125.232.195,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.176274,12.994329,tcp,147.32.84.170,51462.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.176355,12.994189,tcp,147.32.84.170,51463.0,->,74.125.232.197,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.176625,12.994272,tcp,147.32.84.170,35902.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.176694,12.993959,tcp,147.32.84.170,35903.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:09.176757,12.994144,tcp,147.32.84.170,35904.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:10.002610,242.181717,tcp,147.32.84.170,60930.0,->,74.125.232.220,80.0,FSPA_FSPA,0.0,0.0,49,23727,2211,21516,484.2244897959184,0.09318497913769123,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:10.817519,7.94128,tcp,147.32.84.134,54966.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,169,139397,7195,132202,824.8343195266273,0.05161517105820068,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:10.818906,69.960434,tcp,147.32.84.134,60330.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,62,29567,10895,18672,476.88709677419354,0.36848513545506817,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:10.820341,39.971909,tcp,147.32.84.134,60332.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,34,13257,6311,6946,389.9117647058824,0.4760503884740137,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:10.820869,43.872166,tcp,147.32.84.134,60334.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,54,27203,7581,19622,503.75925925925924,0.27868249825386904,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:10.920761,0.004459,udp,147.32.84.134,46394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,84,135,109.5,0.3835616438356164,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:10.970464,29.826468,tcp,147.32.84.134,60340.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,11,1411,816,595,128.27272727272728,0.5783132530120482,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.026182,0.000452,udp,147.32.87.41,34948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,78,229,153.5,0.254071661237785,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:11.130146,0.002089,udp,147.32.84.134,42549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.149271,7.857502,tcp,147.32.84.134,54981.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,13,3688,910,2778,283.6923076923077,0.24674620390455532,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.150153,7.857204,tcp,147.32.84.134,50515.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,19,7937,1544,6393,417.7368421052632,0.19453193901978078,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.150369,7.857268,tcp,147.32.84.134,50516.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,15,4735,974,3761,315.6666666666667,0.20570221752903908,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.152283,7.606773,tcp,147.32.84.134,54988.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,17,6046,1412,4634,355.6470588235294,0.23354283824015878,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.152706,7.606357,tcp,147.32.84.134,54990.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,18,4875,2341,2534,270.8333333333333,0.48020512820512823,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.157295,0.000379,udp,147.32.84.134,51316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.159634,0.000221,udp,147.32.84.134,54400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.165921,0.002156,udp,147.32.84.134,48396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.166572,0.002251,udp,147.32.84.134,36257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.168221,0.000251,udp,147.32.84.134,57827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.169575,0.000417,udp,147.32.84.134,47519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.170303,0.002448,udp,147.32.84.134,41139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,80,132,106.0,0.37735849056603776,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.176476,0.002467,udp,147.32.84.134,55763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.179151,0.002047,udp,147.32.84.134,37907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,82,133,107.5,0.3813953488372093,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.179217,0.002441,udp,147.32.84.134,51576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,82,133,107.5,0.3813953488372093,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.181647,0.00026,udp,147.32.84.134,56007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.182551,0.002439,udp,147.32.84.134,35994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,82,134,108.0,0.37962962962962965,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:11.183534,0.002656,udp,147.32.84.134,36909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:13.303377,7.502147,tcp,147.32.84.134,50525.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,11,1574,943,631,143.0909090909091,0.5991105463786531,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:14.024601,0.389449,tcp,147.32.84.164,52399.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,9,1472,784,688,163.55555555555554,0.532608695652174,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:14.087702,247.784195,tcp,147.32.84.170,47951.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:14.088054,247.784561,tcp,147.32.84.170,47952.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:14.088727,247.784027,tcp,147.32.84.170,47954.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:16.994461,0.000526,udp,178.233.218.42,63394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,75,476,275.5,0.13611615245009073,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:17.199760,0.000255,udp,147.32.84.164,57423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.382233,0.377147,tcp,147.32.84.164,52401.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,9,1472,784,688,163.55555555555554,0.532608695652174,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.701348,0.000241,udp,147.32.84.164,41299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.701740,0.000427,udp,147.32.84.164,54114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,583,77,506,291.5,0.1320754716981132,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.702699,0.000191,udp,147.32.84.164,44487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,78,144,111.0,0.35135135135135137,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.703892,0.000308,udp,147.32.84.164,40516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,78,178,128.0,0.3046875,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.705590,0.000278,udp,147.32.84.164,52654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,75,258,166.5,0.22522522522522523,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.706584,0.004648,udp,147.32.84.164,45321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,158,79,79,79.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.713386,0.027497,udp,147.32.84.164,56889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.716289,0.000294,udp,147.32.84.164,33158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,79,172,125.5,0.3147410358565737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.719829,0.000104,udp,147.32.84.164,35457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,79,180,129.5,0.305019305019305,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.741166,0.003712,udp,147.32.84.164,51197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,74,240,157.0,0.2356687898089172,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.742940,0.003458,udp,147.32.84.164,43609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,75,230,152.5,0.2459016393442623,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.846379,0.666813,tcp,147.32.84.164,52403.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,11,1604,850,754,145.8181818181818,0.529925187032419,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:17.900933,0.187395,udp,147.32.84.164,33219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,78,177,127.5,0.3058823529411765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:18.385334,0.000336,udp,147.32.84.134,55924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,195,72,123,97.5,0.36923076923076925,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:18.386813,0.000168,udp,147.32.84.134,42860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,72,124,98.0,0.3673469387755102,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:18.387643,12.414232,tcp,147.32.84.134,57292.0,->,109.123.211.195,80.0,FSPA_FSRPA,0.0,0.0,13,2009,1117,892,154.53846153846155,0.5559980089596814,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:18.629955,0.002894,udp,147.32.85.6,55747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:18.637736,0.002993,udp,147.32.85.6,64076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:18.758633,8.432375,tcp,147.32.84.134,48499.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,36,19218,4000,15218,533.8333333333334,0.2081382037673015,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:18.758806,8.432453,tcp,147.32.84.134,48500.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,51,31876,4465,27411,625.0196078431372,0.14007403689296022,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:18.758980,8.43227,tcp,147.32.84.134,48501.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,88,72340,5657,66683,822.0454545454545,0.07820016588332873,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.009375,0.000213,udp,147.32.84.134,51351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.010003,0.00213,udp,147.32.84.134,33077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.078150,6.111012,tcp,147.32.84.134,57316.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,11,1763,1062,701,160.27272727272728,0.6023823028927964,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.146088,0.002609,udp,147.32.84.134,47418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.148646,0.000327,udp,147.32.84.134,38120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.149302,0.002561,udp,147.32.84.134,48961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.149306,0.003042,udp,147.32.84.134,60636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,82,134,108.0,0.37962962962962965,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.149500,0.003136,udp,147.32.84.134,53932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,80,132,106.0,0.37735849056603776,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.149879,6.08161,tcp,147.32.84.134,40605.0,->,109.123.211.195,8950.0,FSPA_FSPA,0.0,0.0,11,1856,1065,791,168.72727272727272,0.5738146551724138,18,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.153450,0.002406,udp,147.32.84.134,57362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.157316,0.002196,udp,147.32.84.134,58046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:19.268869,62.394905,tcp,122.193.62.70,51516.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,14,900,510,390,64.28571428571429,0.5666666666666667,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:28:19.391359,0.000359,udp,147.32.84.170,49521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:20.442261,264.902313,tcp,147.32.84.164,59484.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,180,160173,5145,155028,889.85,0.03212151860800509,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:20.494304,0.000252,udp,147.32.84.164,43084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,77,164,120.5,0.31950207468879666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:20.494915,0.000377,udp,147.32.84.164,48101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,583,77,506,291.5,0.1320754716981132,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:20.570200,3592.107422,udp,147.32.84.94,7103.0,<->,188.40.168.145,50012.0,CON,0.0,0.0,1092,932080,18840,913240,853.5531135531136,0.020212857265470775,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:20.570544,3555.836182,udp,147.32.84.94,7103.0,<->,178.33.40.151,50012.0,CON,0.0,0.0,967,830966,16566,814400,859.3236814891417,0.01993583371642161,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:20.733741,0.38235,tcp,147.32.84.164,52408.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,9,1472,784,688,163.55555555555554,0.532608695652174,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:23.751485,0.000323,udp,147.32.84.138,50965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:24.020674,0.000424,udp,109.80.211.40,49579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,605,74,531,302.5,0.12231404958677686,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:25.145349,0.00031,udp,147.32.84.134,33988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,97,147,122.0,0.3975409836065574,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:25.146953,5.654798,tcp,147.32.84.134,57322.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,11,1558,1043,515,141.63636363636363,0.6694480102695763,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:25.148698,0.00021,udp,147.32.84.134,33086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,84,136,110.0,0.38181818181818183,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:27.190446,5.023108,tcp,147.32.84.134,48531.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,12,4224,949,3275,352.0,0.2246685606060606,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:29.392987,0.000316,udp,147.32.84.170,38054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:29.660916,0.010141,udp,147.32.84.59,60012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,77,300,188.5,0.20424403183023873,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:32.044945,8.752518,tcp,147.32.84.134,57330.0,->,109.123.211.195,80.0,FSPA_FSRPA,0.0,0.0,74,56340,4541,51799,761.3513513513514,0.08059992900248492,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.204835,0.000275,udp,147.32.84.59,53888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:32.212803,8.584155,tcp,147.32.84.134,48534.0,->,109.123.211.197,80.0,FSPA_FSRPA,0.0,0.0,65,44215,4403,39812,680.2307692307693,0.099581589958159,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.234434,0.004781,tcp,147.32.84.134,58011.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2031,1175,856,225.66666666666666,0.5785327424913835,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.249635,10.194953,tcp,147.32.84.134,35761.0,->,66.220.158.47,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.363980,8.433337,tcp,147.32.84.134,40623.0,->,109.123.211.195,8950.0,FSPA_FSRPA,0.0,0.0,11,1850,1066,784,168.1818181818182,0.5762162162162162,18,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.372575,8.424681,tcp,147.32.84.134,48543.0,->,109.123.211.197,80.0,FSPA_FSRPA,0.0,0.0,16,4858,2250,2608,303.625,0.4631535611362701,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.378512,8.41882,tcp,147.32.84.134,48553.0,->,109.123.211.197,80.0,FSPA_FSRPA,0.0,0.0,16,5120,1717,3403,320.0,0.3353515625,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.384434,0.002508,udp,147.32.84.134,41889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.391415,0.00034,udp,147.32.84.134,60628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.391419,0.000343,udp,147.32.84.134,58066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:32.392133,0.002121,udp,147.32.84.134,34843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:39.393187,0.018597,tcp,147.32.84.170,47308.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:42.831687,0.303807,tcp,147.32.84.164,35580.0,->,87.253.162.9,80.0,FSPA_FSPA,0.0,0.0,16,9697,888,8809,606.0625,0.09157471382901929,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:42.901788,0.004703,tcp,147.32.84.134,58034.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2106,1250,856,234.0,0.5935422602089269,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:42.943413,11.848922,tcp,147.32.84.134,57360.0,->,109.123.211.195,80.0,FSPA_FSRPA,0.0,0.0,15,3627,1865,1762,241.8,0.5141990625861593,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:42.974612,7.817674,tcp,147.32.84.134,57362.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,29,16438,1636,14802,566.8275862068965,0.09952548971894391,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.029384,36.260616,tcp,147.32.84.134,58804.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.029806,36.26075,tcp,147.32.84.134,58808.0,->,80.239.149.19,443.0,SRPA_FSPA,0.0,0.0,17,3089,1098,1991,181.7058823529412,0.3554548397539657,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.029983,36.260693,tcp,147.32.84.134,48709.0,->,2.21.99.206,443.0,SRPA_FSPA,0.0,0.0,19,4003,1127,2876,210.68421052631578,0.2815388458656008,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.030335,36.260723,tcp,147.32.84.134,54960.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.030413,36.260757,tcp,147.32.84.134,54961.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.030704,36.260845,tcp,147.32.84.134,54964.0,->,2.21.98.110,443.0,SRPA_FSPA,0.0,0.0,19,4034,1128,2906,212.31578947368422,0.27962320277640057,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:43.386190,0.000464,udp,147.32.84.59,54532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:28:46.947612,0.000363,udp,86.106.234.243,10865.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:48.016870,0.000434,udp,147.32.84.164,44660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:49.390964,0.000612,udp,147.32.84.170,39022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:49.393058,0.018912,tcp,147.32.84.170,47244.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:52.289169,605.060547,udp,91.89.233.47,60315.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:28:52.347763,0.047639,tcp,147.32.84.170,46011.0,->,74.125.232.193,80.0,FSRPA_FSPA,0.0,0.0,10,2293,1605,688,229.3,0.6999563890100305,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.692452,18.482199,tcp,147.32.84.170,47252.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.692646,18.48177,tcp,147.32.84.170,47253.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.903653,0.000237,udp,147.32.84.170,43119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.904010,0.000277,udp,147.32.84.170,37503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.904620,0.000423,udp,147.32.84.170,42782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.905624,0.000301,udp,147.32.84.170,44027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.906324,0.000485,udp,147.32.84.170,56695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.907584,0.000329,udp,147.32.84.170,42481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:53.913517,0.00027,udp,147.32.84.170,50927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.103671,0.375064,tcp,147.32.84.164,37538.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,10,1538,850,688,153.8,0.552665799739922,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:54.168656,0.012419,udp,147.32.84.170,46729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.177385,0.010116,udp,147.32.84.170,44101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.181403,0.000229,udp,147.32.84.170,56122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.187952,0.036401,udp,147.32.84.170,56479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,75,143,109.0,0.3440366972477064,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.188930,0.011058,udp,147.32.84.170,50136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,75,141,108.0,0.3472222222222222,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.201171,0.002642,udp,147.32.84.170,33561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,75,142,108.5,0.3456221198156682,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.206379,0.003227,udp,147.32.84.170,49205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.210757,0.001827,udp,147.32.84.170,46721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,75,166,120.5,0.3112033195020747,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.224186,0.002692,udp,147.32.84.170,44468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,73,185,129.0,0.28294573643410853,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.224713,0.001702,udp,147.32.84.170,48406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,75,182,128.5,0.2918287937743191,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.227819,0.000299,udp,147.32.84.170,49519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.228495,0.000432,udp,147.32.84.170,34622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.229337,0.000467,udp,147.32.84.170,56429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,75,192,133.5,0.2808988764044944,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.231204,0.000305,udp,147.32.84.170,37209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,81,179,130.0,0.31153846153846154,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.239335,0.00049,udp,147.32.84.170,37351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.240175,0.002431,udp,147.32.84.170,51316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,74,141,107.5,0.34418604651162793,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.240186,0.005543,udp,147.32.84.170,35575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:28:54.695136,26.083975,tcp,147.32.84.134,56133.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,11,1411,816,595,128.27272727272728,0.5783132530120482,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.696652,0.00024,udp,147.32.84.134,43944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,84,135,109.5,0.3835616438356164,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.697485,26.081858,tcp,147.32.84.134,56134.0,->,109.123.211.210,80.0,FSPA_FSPA,0.0,0.0,19,4393,2829,1564,231.21052631578948,0.643979057591623,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.702051,6.086679,tcp,147.32.84.134,48594.0,->,109.123.211.197,80.0,FSPA_FSPA,0.0,0.0,13,3572,992,2580,274.7692307692308,0.2777155655095185,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.703435,6.085225,tcp,147.32.84.134,57393.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,11,1515,1000,515,137.72727272727272,0.6600660066006601,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.703440,6.084911,tcp,147.32.84.134,57394.0,->,109.123.211.195,80.0,FSPA_FSPA,0.0,0.0,11,1515,1000,515,137.72727272727272,0.6600660066006601,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.803871,0.002167,udp,147.32.84.134,49311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:54.807539,0.002101,udp,147.32.84.134,49653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,83,135,109.0,0.38073394495412843,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:28:58.340638,247.005524,tcp,147.32.84.164,39349.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,61,33258,2508,30750,545.2131147540983,0.07541042756629984,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:58.341315,240.135117,tcp,147.32.84.164,47155.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,106,82343,3416,78927,776.8207547169811,0.04148500783308842,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:58.354341,0.017182,udp,147.32.84.164,54419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:28:58.371663,0.000302,udp,147.32.84.164,58563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,71,122,96.5,0.36787564766839376,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:01.311510,0.000254,udp,147.32.84.170,50452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:06.932306,0.000403,udp,147.32.84.170,39381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:08.298985,0.000233,udp,147.32.84.170,43052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:08.492961,0.009926,udp,147.32.84.164,46821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:08.566699,0.000253,udp,147.32.84.164,47025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,83,140,111.5,0.3721973094170404,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:08.567313,0.009761,udp,147.32.84.164,36580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,83,242,162.5,0.2553846153846154,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:08.741530,0.002059,udp,147.32.84.170,40239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,75,168,121.5,0.30864197530864196,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:08.744503,0.020475,udp,147.32.84.170,39021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,83,162,122.5,0.33877551020408164,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:09.168702,0.000285,udp,147.32.84.164,43366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:09.239581,0.000219,udp,147.32.84.164,41563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:09.240138,0.000279,udp,147.32.84.164,46808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:09.393156,0.018228,tcp,147.32.84.170,40167.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:09.669005,0.000291,udp,147.32.85.25,56102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:09.987164,0.000292,udp,147.32.84.134,35650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:09.988123,61.410145,tcp,147.32.84.134,39301.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,22,6707,4613,2094,304.8636363636364,0.6877888772923811,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:10.050677,0.039931,udp,147.32.84.134,39152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,484,88,396,242.0,0.18181818181818182,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:10.091597,61.213017,tcp,147.32.84.134,33674.0,->,80.239.149.11,443.0,FSRPA_FSPA,0.0,0.0,40,19204,4000,15204,480.1,0.20828993959591752,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:10.231344,0.004632,udp,147.32.84.164,60194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.231460,0.001123,udp,147.32.84.164,33242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.232085,0.000947,udp,147.32.84.164,41930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.232092,0.001051,udp,147.32.84.164,59827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.233409,0.000346,udp,147.32.84.164,58233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.234402,0.000465,udp,147.32.84.164,57665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.234433,0.003989,udp,147.32.84.164,42072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.237410,0.002227,udp,147.32.84.164,33769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,71,188,129.5,0.27413127413127414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.237615,0.000398,udp,147.32.84.164,55100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.238349,15.08945,tcp,147.32.84.164,56162.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,29,17862,4601,13261,615.9310344827586,0.25758593662523793,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.239440,15.087852,tcp,147.32.84.164,33861.0,->,77.75.72.7,80.0,FSPA_FSPA,0.0,0.0,91,72722,4577,68145,799.1428571428571,0.06293831302769451,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.239809,15.087596,tcp,147.32.84.164,42429.0,->,77.75.76.68,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.239848,15.087696,tcp,147.32.84.164,42430.0,->,77.75.76.68,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.240679,5.085039,tcp,147.32.84.164,54209.0,->,77.75.76.52,80.0,FSPA_FSPA,0.0,0.0,47,34888,2474,32414,742.2978723404256,0.07091263471680807,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.318609,60.987213,tcp,147.32.84.134,33675.0,->,80.239.149.11,443.0,FSRPA_FSPA,0.0,0.0,55,28326,4963,23363,515.0181818181818,0.17521005436701265,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:10.361118,0.004288,tcp,147.32.84.164,46015.0,->,77.75.76.69,80.0,FSPA_FSPA,0.0,0.0,10,1299,749,550,129.9,0.5765973826020016,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.574453,0.005232,udp,147.32.84.164,40670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,75,93,84.0,0.44642857142857145,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.575565,0.000286,udp,147.32.84.164,34798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,72,182,127.0,0.28346456692913385,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.792639,0.000158,udp,147.32.84.164,60380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.793167,0.000271,udp,147.32.84.164,48221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:10.795779,14.531761,tcp,147.32.84.164,56182.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,4248,2676,1572,303.42857142857144,0.6299435028248588,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:11.229538,0.000247,udp,147.32.86.168,58642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,87,137,112.0,0.38839285714285715,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:11.780913,48.320946,tcp,147.32.84.134,49186.0,->,92.123.64.169,443.0,FSPA_FSPA,0.0,0.0,26,8876,1862,7014,341.38461538461536,0.20977917981072555,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:11.962201,59.34333,tcp,147.32.84.134,48743.0,->,2.21.99.206,443.0,FSRPA_FSPA,0.0,0.0,38,16742,3438,13304,440.57894736842104,0.20535180981961534,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:11.962220,59.343307,tcp,147.32.84.134,48746.0,->,2.21.99.206,443.0,FSRPA_FSPA,0.0,0.0,32,15722,3108,12614,491.3125,0.19768477292965272,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:12.071307,38.019028,tcp,147.32.84.134,33686.0,->,80.239.149.11,443.0,SRPA_FSPA,0.0,0.0,14,1866,761,1105,133.28571428571428,0.4078242229367631,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:12.072092,59.23251,tcp,147.32.84.134,33687.0,->,80.239.149.11,443.0,FSRPA_FSPA,0.0,0.0,29,11557,2732,8825,398.51724137931035,0.23639352773211042,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:29:12.678956,0.000331,udp,147.32.84.164,50433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.680046,0.000693,udp,147.32.84.164,55384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.680053,0.00078,udp,147.32.84.164,35828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.681248,90.718483,tcp,147.32.84.164,38014.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,32,24400,4148,20252,762.5,0.17,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.682199,0.000599,udp,147.32.84.164,43829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.682813,0.000587,udp,147.32.84.164,38274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.682993,0.021638,tcp,147.32.84.164,44458.0,->,194.79.52.192,80.0,FSPA_FSPA,0.0,0.0,73,34823,3292,31531,477.027397260274,0.09453522097464319,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.963968,0.001781,udp,147.32.84.164,44712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.965027,90.274399,tcp,147.32.84.164,47479.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,14,5096,1668,3428,364.0,0.32731554160125587,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.967166,0.002386,udp,147.32.84.164,32837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.973668,0.00032,udp,147.32.84.164,34650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.975134,0.002318,udp,147.32.84.164,47889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.975709,0.000419,udp,147.32.84.164,39525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.977109,0.000489,udp,147.32.84.164,47936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.977160,0.000553,udp,147.32.84.164,46270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.977826,0.000476,udp,147.32.84.164,41553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.978591,0.000226,udp,147.32.84.164,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.982791,0.00237,udp,147.32.84.164,41502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.983381,0.000412,udp,147.32.84.164,59577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:12.986655,0.000415,udp,147.32.84.164,41307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.220826,0.000325,udp,147.32.84.164,49469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.220834,0.000413,udp,147.32.84.164,33376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.221615,0.00209,udp,147.32.84.164,48873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.229915,0.000409,udp,147.32.84.164,39627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.232657,0.000342,udp,147.32.84.164,33926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,73,145,109.0,0.3348623853211009,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.234047,0.000277,udp,147.32.84.164,43686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.234422,0.024028,udp,147.32.84.164,54266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:13.234484,0.000449,udp,147.32.84.164,37901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,77,174,125.5,0.30677290836653387,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:14.785865,2158.463623,udp,114.40.25.221,34066.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1111,149,962,277.75,0.1341134113411341,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:17.576595,16.951431,tcp,194.1.157.190,55056.0,->,147.32.84.19,80.0,SRPA_FSPA,0.0,0.0,113,102038,3642,98396,902.9911504424779,0.03569258511534918,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:29:19.391329,0.000312,udp,147.32.84.170,42697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:19.937652,0.000313,udp,147.32.85.25,40372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:20.083961,0.696461,udp,87.218.18.25,7155.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,47,38291,762,37529,814.7021276595744,0.019900237653756758,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:21.571854,0.326203,udp,147.32.84.229,13363.0,<->,114.46.121.237,54351.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:21.671219,0.000682,udp,200.21.34.167,9544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:23.199970,2915.201172,udp,90.220.249.198,26921.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,744,558,186,124.0,0.75,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:23.213832,0.000411,udp,189.26.202.20,23430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,591,73,518,295.5,0.12351945854483926,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:24.471196,15.050462,tcp,147.32.84.170,49744.0,->,209.85.148.99,80.0,FSRPA_FSPA,0.0,0.0,108,69140,18438,50702,640.1851851851852,0.2666763089383859,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:24.902383,0.150136,udp,147.32.84.170,50379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,73,135,104.0,0.35096153846153844,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:24.916078,0.00223,udp,147.32.84.170,45181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:24.917397,0.000277,udp,147.32.84.170,58705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,79,136,107.5,0.3674418604651163,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:24.918036,0.009717,udp,147.32.84.170,60654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,79,208,143.5,0.27526132404181186,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:28.775165,11.592645,tcp,147.32.84.170,49750.0,->,209.85.148.99,80.0,FSRPA_FSPA,0.0,0.0,31,17099,2507,14592,551.5806451612904,0.14661676121410608,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:29.025130,0.000285,udp,147.32.84.59,48740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:30.038205,0.00035,udp,147.32.84.170,38771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:30.039119,0.000347,udp,147.32.84.170,44201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:30.246955,0.000238,udp,147.32.84.170,35272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:30.248477,0.000197,udp,147.32.84.170,33967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,78,230,154.0,0.2532467532467532,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:31.491860,31.842661,tcp,147.32.84.130,49458.0,->,93.99.92.180,80.0,SRPA_FSPA,0.0,0.0,30,18846,2266,16580,628.2,0.12023771622625491,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:29:38.551338,0.343817,udp,147.32.84.229,13363.0,<->,111.252.76.194,14156.0,CON,0.0,0.0,3,1583,158,1425,527.6666666666666,0.0998104864181933,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:39.103439,0.000274,udp,147.32.84.138,40286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:39.391041,0.000381,udp,147.32.84.170,51502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:40.045391,0.002396,udp,147.32.84.170,55273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,78,142,110.0,0.35454545454545455,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:40.051987,0.027296,udp,147.32.84.170,33996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:40.056446,0.040912,udp,147.32.84.170,57214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,72,165,118.5,0.3037974683544304,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:40.076424,0.003108,udp,147.32.84.170,46314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,73,177,125.0,0.292,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:40.080468,0.005353,udp,147.32.84.170,54976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,80,154,117.0,0.3418803418803419,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:46.292311,245.897491,tcp,147.32.84.170,49756.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,53,22347,6452,15895,421.64150943396226,0.2887188436926657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:46.458334,0.000235,udp,147.32.84.138,48978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:46.745226,0.027235,udp,147.32.84.170,45262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,85,179,132.0,0.32196969696969696,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:46.748482,0.01292,udp,147.32.84.170,38938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,82,165,123.5,0.3319838056680162,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:49.446383,2838.593018,udp,147.32.84.229,13363.0,<->,186.32.34.51,33283.0,CON,0.0,0.0,8,1514,442,1072,189.25,0.2919418758256275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:29:51.401313,0.00041,udp,147.32.84.164,51962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,75,496,285.5,0.13134851138353765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:52.846453,0.000393,udp,147.32.84.164,43169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:52.863205,0.000197,udp,147.32.84.164,37464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:52.864128,0.015621,tcp,147.32.84.164,38522.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1757,967,790,175.7,0.5503699487763233,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.021867,0.00036,udp,147.32.84.164,49135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.022032,0.000355,udp,147.32.84.164,36754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.022464,0.000331,udp,147.32.84.164,60273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.023317,0.000335,udp,147.32.84.164,60851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.024038,0.000506,udp,147.32.84.164,48989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.026112,0.000264,udp,147.32.84.164,38935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:53.463695,241.886139,tcp,147.32.84.164,59735.0,->,74.125.232.206,80.0,FSPA_FSPA,0.0,0.0,55,29388,2288,27100,534.3272727272728,0.07785490676466585,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:54.242761,0.000215,udp,147.32.84.59,44718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:29:54.752362,100.581047,tcp,147.32.84.164,35848.0,->,77.78.110.106,80.0,FSPA_FSPA,0.0,0.0,71,37991,7411,30580,535.0845070422536,0.19507251717512042,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:54.757592,0.022684,tcp,147.32.84.164,38526.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1771,981,790,177.1,0.5539243365330322,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:55.408643,0.000277,udp,147.32.84.164,53073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:56.830183,0.000472,udp,147.32.84.164,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,575,74,501,287.5,0.12869565217391304,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:56.831137,248.519333,tcp,147.32.84.164,51225.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,32,10708,8633,2075,334.625,0.8062196488606649,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:29:59.391082,0.000427,udp,147.32.84.170,51833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:29:59.567259,0.00025,udp,147.32.86.168,46489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,68,129,98.5,0.34517766497461927,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:30:00.997664,0.000222,udp,147.32.85.34,56547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:30:01.566572,0.000313,udp,147.32.87.36,44926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,18,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 18:30:01.592961,0.000356,udp,147.32.85.74,37131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:30:01.716742,2.735598,tcp,151.76.206.229,62219.0,->,147.32.85.84,13716.0,FSPA_FSPA,0.0,0.0,21,1502,825,677,71.52380952380952,0.5492676431424767,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:01.798587,0.009432,tcp,147.32.86.96,60090.0,->,147.32.87.51,12489.0,_FSPA,,0.0,8,538,0,538,67.25,0.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:02.835965,40.689541,udp,208.54.38.225,17100.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:30:04.449584,3599.443359,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,18,1620,810,810,90.0,0.5,18,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 18:30:04.528780,0.00193,udp,147.32.84.134,34562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,536,84,452,268.0,0.15671641791044777,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:30:08.495541,2.809753,tcp,147.32.84.134,55003.0,->,2.21.98.110,443.0,FSRPA_FSPA,0.0,0.0,14,1397,811,586,99.78571428571429,0.5805297065139585,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:30:08.507303,0.000431,udp,147.32.84.134,33463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:30:08.508381,3.569172,tcp,147.32.84.134,39405.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,12,2625,1991,634,218.75,0.7584761904761905,18,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-16 18:30:10.459472,0.000283,udp,147.32.87.36,55859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 18:30:10.491985,0.000251,udp,147.32.87.36,52749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 18:30:14.881438,0.006212,tcp,147.32.84.164,53232.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:30:15.177925,0.000249,udp,147.32.84.138,57210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:30:20.041628,0.005176,tcp,147.32.84.164,38537.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1674,928,746,167.4,0.5543608124253285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:30:21.392112,0.00485,tcp,147.32.84.164,38539.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1647,901,746,164.7,0.5470552519732848,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:30:22.969494,0.000593,udp,184.153.99.15,21266.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:30:30.436943,0.0,igmp,147.32.87.7,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:30:32.030496,0.000332,udp,147.32.84.170,43851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:30:33.137548,1591.664673,udp,183.83.11.134,41678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1120,154,966,280.0,0.1375,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:30:36.460018,0.000339,udp,147.32.86.20,55135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:30:43.293146,0.715104,tcp,67.195.115.177,51061.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,26,15853,1236,14617,609.7307692307693,0.0779663155238756,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:44.804846,0.104379,tcp,147.32.84.164,47068.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,2349,2686634,39439,2647195,1143.7352064708386,0.014679707023733043,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:30:47.820930,2.214738,tcp,147.32.86.168,47544.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,15,5672,3049,2623,378.1333333333333,0.5375528913963329,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:50.267614,0.000446,udp,91.83.54.127,28700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:30:50.816987,0.269154,tcp,217.73.161.146,42967.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,30,17423,1819,15604,580.7666666666667,0.1044022269413993,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:56.840911,2.308667,tcp,147.32.86.168,47547.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,23,11022,3310,7712,479.2173913043478,0.30030847396116855,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:30:57.524194,2798.281006,udp,41.241.32.198,64070.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,538,298,240,67.25,0.5539033457249071,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:30:59.390949,0.000288,udp,147.32.84.170,44440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:02.850461,0.000301,udp,147.32.86.168,41537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:03.043210,0.001376,udp,147.32.84.170,34537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:03.548951,0.467522,udp,147.32.84.171,45444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:06.063460,3065.838623,udp,108.5.252.108,44940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1566,1386,180,261.0,0.8850574712643678,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:09.391974,0.000873,udp,147.32.84.170,46133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:09.393560,0.018303,tcp,147.32.84.170,55910.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:18.940206,0.0005,udp,147.32.85.25,35596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:22.672653,3367.169922,udp,84.186.164.198,52231.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:23.376884,0.376242,udp,147.32.84.229,13363.0,<->,118.171.229.175,16339.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:23.889871,0.000285,udp,147.32.86.168,42239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,68,129,98.5,0.34517766497461927,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:27.532760,2596.997803,udp,147.32.84.94,7103.0,<->,92.249.117.213,55516.0,CON,0.0,0.0,79,65165,64031,1134,824.873417721519,0.9825980204097291,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:29.392011,0.000349,udp,147.32.84.170,38151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:29.905227,2.204013,tcp,147.32.86.168,47557.0,->,193.23.48.134,80.0,FSPA_FSPA,0.0,0.0,16,5580,3162,2418,348.75,0.5666666666666667,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:31:34.048087,0.324994,tcp,147.32.84.170,42251.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:38.936899,0.000199,udp,147.32.84.186,59164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:39.354699,0.000337,udp,41.103.66.173,50739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:39.393127,0.01827,tcp,147.32.84.170,41162.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:42.415539,0.000556,udp,219.16.118.22,53628.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,979,77,902,489.5,0.07865168539325842,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:43.947163,0.002473,udp,147.32.84.170,38003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,77,160,118.5,0.32489451476793246,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:44.067764,18.110083,tcp,147.32.84.170,58043.0,->,77.78.98.137,80.0,FSPA_FSPA,0.0,0.0,33,21789,3193,18596,660.2727272727273,0.14654183303501767,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:44.747340,2242.160889,udp,147.32.84.229,13363.0,<->,87.96.162.187,22454.0,CON,0.0,0.0,6,1227,1016,211,204.5,0.8280358598207009,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:31:44.819128,0.096396,udp,147.32.84.170,45984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,72,133,102.5,0.35121951219512193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:44.819651,0.205565,udp,147.32.84.170,53155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:45.025590,0.001962,udp,147.32.84.170,50257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:45.358992,0.139724,udp,147.32.84.170,32919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,156,78,78,78.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:31:47.839976,0.125283,udp,147.32.87.135,2836.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,18,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 18:31:52.362072,0.000202,udp,147.32.84.138,53570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:31:53.763245,0.169346,tcp,147.32.86.17,1336.0,->,217.198.112.231,110.0,FSPA_FSPA,0.0,0.0,34,14885,874,14011,437.79411764705884,0.05871682902250588,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:31:59.392445,0.00031,udp,147.32.84.170,58997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:32:00.341966,0.000281,udp,147.32.85.25,36790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:00.348529,0.000221,udp,147.32.85.25,53037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:00.646210,0.000276,udp,147.32.85.34,49961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:00.653335,0.00027,udp,147.32.85.34,63489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:00.699637,0.000444,udp,147.32.85.34,54664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:03.971491,3049.428711,udp,212.21.35.61,21226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:05.026245,3444.210693,udp,209.31.0.147,63743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1955,153,1802,488.75,0.0782608695652174,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:10.697008,3308.300781,udp,147.32.84.94,7103.0,->,96.54.142.41,7483.0,INT,0.0,,12,1008,1008,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:32:11.234137,0.00032,udp,147.32.84.59,38822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:13.020341,0.000394,udp,147.32.84.2,34998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,359,85,274,179.5,0.23676880222841226,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:13.118007,3526.490234,udp,147.32.84.149,36607.0,<->,147.231.100.5,123.0,CON,0.0,0.0,62,5580,2790,2790,90.0,0.5,18,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 18:32:14.777298,3288.178467,udp,114.37.100.148,34034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5002,214,4788,625.25,0.042782886845261894,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:19.389439,0.001586,udp,200.63.120.16,21967.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,487,60,273.5,0.8903107861060329,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:20.965214,3071.92749,udp,69.17.196.188,50400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:22.543932,0.000249,udp,147.32.84.138,46261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:29.391843,0.000367,udp,147.32.84.170,45282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:32:30.991296,0.000341,udp,151.16.29.102,21345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:33.056326,0.0,tcp,113.105.171.62,80.0,->,147.32.87.119,42259.0,SA_,0.0,,1,66,66,0,66.0,1.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:32:36.042689,0.290226,tcp,147.32.84.170,42265.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:32:37.895587,0.246299,udp,147.32.84.164,49862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:38.142061,0.000412,udp,147.32.84.164,45307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:39.391302,0.000357,udp,147.32.84.170,45571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:32:39.978648,0.000332,udp,147.32.86.20,52747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:41.569979,3046.178711,udp,79.119.220.223,12651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:43.094173,0.000232,udp,147.32.84.138,49171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:46.579306,0.000252,udp,147.32.84.164,52378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:46.580315,0.006907,tcp,147.32.84.164,44283.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3448,974,2474,313.45454545454544,0.28248259860788866,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:46.667510,0.000421,udp,147.32.84.164,36476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:46.669655,0.0004,udp,147.32.84.164,58116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:46.671035,0.000322,udp,147.32.84.164,45186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:46.672512,0.000286,udp,147.32.84.164,52817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:32:48.914490,0.000262,udp,147.32.86.20,60895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:32:50.023077,0.028586,tcp,147.32.86.96,44005.0,->,147.32.87.49,12489.0,_FSPA,,0.0,8,584,0,584,73.0,0.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:32:58.233862,1193.762573,udp,189.41.173.132,9403.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:32:59.392265,0.000318,udp,147.32.84.170,36590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:32:59.393391,0.017944,tcp,147.32.84.170,50213.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:01.102386,0.000384,udp,147.32.86.20,56708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:01.986490,249.49411,tcp,147.32.84.59,52043.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,25,2268,1240,1028,90.72,0.54673721340388,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:33:02.307542,2390.89624,udp,147.32.84.59,7525.0,<->,46.4.102.182,50012.0,CON,0.0,0.0,7149,6707820,6382865,324955,938.2878724297104,0.9515557960708546,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:33:06.269524,3534.536377,tcp,77.183.45.145,16428.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,347,43954,28625,15329,126.6685878962536,0.6512490330800382,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:33:06.749645,0.000352,udp,147.32.84.59,51180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,366,83,283,183.0,0.226775956284153,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:07.039493,0.000431,udp,147.32.84.170,52571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:07.207986,0.02504,udp,147.32.84.59,64098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:07.896912,0.000289,udp,147.32.84.59,64213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,80,151,115.5,0.3463203463203463,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:09.391351,0.00028,udp,147.32.84.170,44659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:09.392156,0.000347,udp,147.32.84.170,55031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:12.052363,74.356644,tcp,147.32.84.59,56123.0,->,80.239.149.25,80.0,FSPA_FSPA,0.0,0.0,24,9601,2630,6971,400.0416666666667,0.273929798979273,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:33:13.073099,0.250706,tcp,147.32.84.170,39197.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:13.612650,0.26293,tcp,147.32.84.170,60255.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:14.289838,3037.227051,udp,46.138.208.84,38597.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:14.797939,0.000439,udp,147.32.84.59,56046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,86,272,179.0,0.24022346368715083,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:15.026335,0.000168,udp,147.32.84.138,60221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:17.545057,24.636017,tcp,147.32.84.170,58064.0,->,77.78.98.137,80.0,FSPA_FSPA,0.0,0.0,121,126706,5134,121572,1047.1570247933885,0.040518996732593564,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:17.673209,0.000153,udp,147.32.84.138,50983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:17.901406,0.0002,udp,147.32.84.170,55487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,72,133,102.5,0.35121951219512193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:17.901809,0.141916,udp,147.32.84.170,38276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,156,78,78,78.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:17.901935,0.000229,udp,147.32.84.170,43888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,72,133,102.5,0.35121951219512193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:17.902290,0.000393,udp,147.32.84.170,56383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,72,134,103.0,0.34951456310679613,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:18.183696,0.00042,udp,147.32.84.170,37129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,78,179,128.5,0.3035019455252918,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:19.382191,0.000257,udp,147.32.84.138,38518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:19.392391,0.000331,udp,147.32.84.170,36844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:21.607377,0.000303,udp,147.32.84.59,55995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:22.867406,1373.936523,udp,178.42.161.6,3681.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:25.204633,0.000241,udp,147.32.84.170,52175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:25.205257,0.000337,udp,147.32.84.170,47507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:25.206661,0.000349,udp,147.32.84.170,45724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:25.207681,246.995132,tcp,147.32.84.170,59191.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,43,19312,1868,17444,449.1162790697674,0.09672742336371168,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:25.207872,246.994843,tcp,147.32.84.170,49432.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,43,20175,1868,18307,469.1860465116279,0.0925898389095415,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:25.314898,0.000419,udp,147.32.84.170,33910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:28.725386,0.000354,udp,180.183.109.4,34102.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:29.392034,0.000446,udp,147.32.84.170,52160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:29.393026,0.018013,tcp,147.32.84.170,41198.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:29.670993,6.039525,tcp,147.32.85.47,3248.0,->,77.75.72.3,80.0,FSPA_FSPA,0.0,0.0,44,28275,3183,25092,642.6136363636364,0.11257294429708223,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:33:33.774827,0.000316,udp,99.30.128.223,64967.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:36.078959,15.302088,udp,147.32.84.94,7103.0,->,85.240.183.78,49383.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:33:37.698489,0.00023,udp,147.32.84.138,38985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:42.289844,0.000355,udp,147.32.84.170,34721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:42.290586,0.000475,udp,147.32.84.170,43947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:42.679532,0.161513,udp,147.32.85.76,54320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,87,194,140.5,0.3096085409252669,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:44.665340,0.020937,udp,147.32.85.76,56835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,76,242,159.0,0.2389937106918239,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:44.918484,9.390464,udp,147.32.84.229,13363.0,<->,178.187.123.150,48227.0,CON,0.0,0.0,4,453,138,315,113.25,0.304635761589404,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:46.876343,0.000271,udp,147.32.84.170,53186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:46.876812,0.000161,udp,147.32.84.170,51401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:46.877222,0.000307,udp,147.32.84.170,59705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:47.420416,0.170102,tcp,147.32.86.20,1525.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,67,60946,1513,59433,909.6417910447761,0.024825255143897877,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:33:49.301773,3412.677979,udp,175.109.220.40,32092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:33:50.668284,0.000373,udp,147.32.86.20,56495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:54.233226,0.000208,udp,147.32.84.170,40613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:56.830156,0.000284,udp,147.32.84.138,45423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:33:59.391220,0.000418,udp,147.32.84.170,35729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:33:59.392237,0.000341,udp,147.32.84.170,55920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:03.515402,0.000457,udp,89.252.61.196,6216.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,628,74,554,314.0,0.1178343949044586,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:04.967973,0.000271,udp,147.32.84.138,49177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:34:05.189766,16.994604,tcp,147.32.84.170,51323.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.190809,0.000387,udp,147.32.84.170,59587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.191284,0.000233,udp,147.32.84.170,58717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.191574,16.992723,tcp,147.32.84.170,33589.0,->,78.24.14.69,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.191816,12.918543,tcp,147.32.84.170,33593.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,14,2054,1119,935,146.71428571428572,0.5447906523855891,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.245893,0.000314,udp,147.32.84.170,33881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.965327,0.000394,udp,147.32.84.170,49913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,77,174,125.5,0.30677290836653387,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.966691,0.000153,udp,147.32.84.170,56143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.967057,0.000285,udp,147.32.84.170,58008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.967334,0.010844,udp,147.32.84.170,53947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,78,166,122.0,0.319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.990273,0.000249,udp,147.32.84.170,56415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.994516,0.000337,udp,147.32.84.170,38966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.995645,0.000195,udp,147.32.84.170,47999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.997810,0.000198,udp,147.32.84.170,52328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:05.999309,0.000204,udp,147.32.84.170,33073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.000442,0.000204,udp,147.32.84.170,36327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.002482,0.000314,udp,147.32.84.170,53779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.003396,0.000304,udp,147.32.84.170,52590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.009382,0.000268,udp,147.32.84.170,49292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.010704,0.0005,udp,147.32.84.170,52631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.014255,0.000323,udp,147.32.84.170,52399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:06.623615,0.000225,udp,147.32.85.25,45064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:34:09.038759,0.000279,udp,147.32.84.170,51011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:09.040048,0.313948,tcp,147.32.84.170,42309.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:09.393333,0.017942,tcp,147.32.84.170,55972.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:10.444262,0.000386,udp,147.32.84.138,34753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:34:19.393381,0.00037,udp,147.32.84.170,48025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:21.977568,1961.052124,udp,86.30.224.158,9254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:23.059132,0.000346,udp,78.173.77.138,18016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:24.285085,0.000375,udp,147.32.84.59,61582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:34:27.290148,1.81938,udp,77.209.213.74,7281.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,65,52747,996,51751,811.4923076923077,0.018882590479079378,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:32.821103,110.366402,tcp,212.19.33.49,57350.0,->,147.32.84.2,80.0,FSPA_FSRPA,0.0,0.0,17,6062,814,5248,356.5882352941176,0.1342791158033652,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:34:38.345432,2964.849854,udp,147.32.84.229,13363.0,<->,46.185.44.227,28863.0,CON,0.0,0.0,6,739,553,186,123.16666666666667,0.7483085250338295,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:39.909929,0.006363,tcp,147.32.84.170,39375.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1569,823,746,156.9,0.5245379222434672,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:40.031664,0.000346,udp,147.32.84.170,40838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:41.674758,2799.381592,udp,147.32.84.229,13363.0,<->,85.24.71.64,54897.0,CON,0.0,0.0,4,626,502,124,156.5,0.8019169329073482,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:48.069000,0.000377,udp,78.141.181.223,34049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,270,208,62,135.0,0.7703703703703704,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:34:51.995529,0.006528,tcp,147.32.84.170,33613.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3448,979,2469,313.45454545454544,0.28393271461716935,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:59.121366,8.987741,tcp,186.2.144.37,49734.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,4,248,62,186,62.0,0.25,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:34:59.428722,0.041912,udp,147.32.84.170,55731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:34:59.471506,0.018755,tcp,147.32.84.170,46330.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:03.622562,0.168989,udp,147.32.85.25,39541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:04.199252,0.005534,tcp,147.32.84.170,39387.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1651,861,790,165.1,0.5215021199273168,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:06.255244,9.012799,tcp,109.236.84.83,54177.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:35:08.616426,0.000237,udp,147.32.84.170,35780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:09.117233,0.000221,udp,147.32.84.170,42371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,70,137,103.5,0.33816425120772947,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:09.126945,0.007875,tcp,147.32.84.170,33625.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1776,989,787,177.6,0.5568693693693694,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:10.180796,0.206825,tcp,66.249.72.19,47632.0,->,147.32.84.2,36135.0,FSA_FSPA,0.0,0.0,8,797,272,525,99.625,0.34127979924717694,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:35:10.746077,3418.366211,udp,147.32.84.157,50725.0,<->,212.71.128.157,123.0,CON,0.0,0.0,66,5940,2970,2970,90.0,0.5,18,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 18:35:11.038622,0.000257,udp,147.32.84.170,50408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:11.381764,2096.494629,udp,217.162.134.218,8888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,747,561,186,124.5,0.751004016064257,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:35:13.936629,0.005563,udp,147.32.84.170,44520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:13.936876,0.003586,udp,147.32.84.170,52863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:13.937631,0.000287,udp,147.32.84.170,48033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:13.940558,0.005656,udp,147.32.84.170,56167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:13.953073,0.005531,udp,147.32.84.170,57821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:15.047166,0.00025,udp,147.32.84.138,52033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:16.725985,0.000293,udp,147.32.84.138,41590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:17.533284,1.3536,tcp,66.249.72.19,35832.0,->,147.32.84.2,21.0,FSPA_FSPA,0.0,0.0,34,3117,1161,1956,91.67647058823529,0.37247353224254093,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:35:19.079971,0.007298,tcp,147.32.84.170,33633.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1780,993,787,178.0,0.5578651685393259,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:22.765126,3239.729492,udp,62.121.85.162,31518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:35:24.722976,2202.611084,udp,147.32.84.59,7525.0,->,188.40.108.121,50012.0,INT,0.0,,92,6972,6972,0,75.78260869565217,1.0,18,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:35:25.454234,2153.199951,udp,147.32.84.59,7525.0,<->,46.4.83.41,51012.0,CON,0.0,0.0,1502,1053955,721631,332324,701.7010652463382,0.6846886252259347,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:35:28.369573,0.000311,udp,147.32.84.164,42768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:28.914912,0.000252,udp,147.32.84.164,40867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,80,168,124.0,0.3225806451612903,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:29.393067,0.000355,udp,147.32.84.170,56031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:29.393980,0.000417,udp,147.32.84.170,38659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:30.569386,28.627884,tcp,147.32.86.111,34642.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,17,3958,2879,1079,232.8235294117647,0.7273875694795351,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:35:31.042487,0.000256,udp,147.32.84.164,35917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.043514,0.006305,tcp,147.32.84.164,34702.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3440,966,2474,312.72727272727275,0.28081395348837207,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.059278,0.000377,udp,147.32.84.164,58890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.059941,0.000215,udp,147.32.84.164,41322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.131897,0.000377,udp,147.32.84.164,42427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.132535,0.000212,udp,147.32.84.164,49276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.133650,0.00026,udp,147.32.84.164,59203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.134257,0.000312,udp,147.32.84.164,46164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.152657,159.66835,tcp,147.32.84.164,59145.0,->,74.125.232.200,80.0,FSRPA_FSPA,0.0,0.0,564,326362,193017,133345,578.6560283687943,0.5914199569802857,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:31.215502,1.152112,tcp,66.249.72.19,37248.0,->,147.32.84.2,21.0,FSPA_FSPA,0.0,0.0,30,2720,1010,1710,90.66666666666667,0.3713235294117647,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:35:32.649918,0.014804,tcp,147.32.84.164,36376.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1723,933,790,172.3,0.5414973882762624,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:33.666677,0.006329,tcp,147.32.84.164,34708.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:34.577704,0.006365,tcp,147.32.84.164,34711.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:35.437767,0.00586,tcp,147.32.84.164,36384.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1758,968,790,175.8,0.5506257110352674,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:36.240226,0.005266,tcp,147.32.84.164,36386.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1757,967,790,175.7,0.5503699487763233,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:36.728174,0.000274,udp,147.32.84.138,57575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:37.104342,0.02185,tcp,147.32.84.164,36389.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1767,977,790,176.7,0.5529145444255801,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:37.556293,0.019909,udp,147.32.84.164,45125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:37.576526,0.000418,udp,147.32.84.164,60204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:37.955116,0.006652,tcp,147.32.84.164,34723.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:39.391557,0.019986,udp,147.32.84.170,57513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:40.181404,2418.628906,udp,84.252.41.165,37326.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:35:40.313662,0.000428,udp,147.32.84.164,56238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:40.314312,0.000396,udp,147.32.84.164,52513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:40.322145,0.000393,udp,147.32.84.138,41031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:40.427437,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,18,1,flow=Background,Background,-1 2011-08-16 18:35:40.820981,7.33457,tcp,147.32.84.164,49514.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,113,81509,26847,54662,721.3185840707964,0.3293746702818094,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:41.079468,1.9e-05,icmp,147.32.86.96,,<-,147.32.87.54,38710.0,ECR,,0.0,2,196,0,196,98.0,0.0,18,0,flow=Background,Background,-1 2011-08-16 18:35:42.236227,0.004831,tcp,147.32.84.164,36407.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1816,1026,790,181.6,0.5649779735682819,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:42.712294,438.382843,tcp,147.32.84.164,40165.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,341,247803,15950,231853,726.6950146627566,0.06436564529081569,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:44.158284,0.008184,tcp,147.32.84.164,34744.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:44.174594,0.00487,tcp,147.32.84.164,36414.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1691,945,746,169.1,0.5588409225310467,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:45.046940,0.006168,tcp,147.32.84.164,34747.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:45.846356,0.000278,udp,147.32.85.25,50111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:46.589664,0.00023,udp,147.32.84.138,40994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:48.244435,0.006121,tcp,147.32.84.164,34755.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3055,1059,1996,277.72727272727275,0.34664484451718497,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:49.391626,0.000293,udp,147.32.84.170,34953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:50.060442,6.849645,tcp,147.32.84.164,49542.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,52,32785,12375,20410,630.4807692307693,0.3774592039042245,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:50.935894,0.016389,tcp,147.32.84.164,36434.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1784,994,790,178.4,0.5571748878923767,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:51.181319,0.000227,udp,147.32.84.59,63059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:51.605324,19.691643,tcp,147.32.84.59,56182.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,416,276,140,69.33333333333333,0.6634615384615384,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:35:52.378151,0.000374,udp,147.32.84.59,63993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:35:55.305393,2080.01416,udp,147.32.84.59,7525.0,<->,88.198.21.14,54012.0,CON,0.0,0.0,1251,929942,773784,156158,743.3589128697042,0.8320776994694292,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:35:56.632495,0.006129,tcp,147.32.84.164,34773.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:56.667889,0.800169,tcp,147.32.84.164,49556.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,37,22086,9754,12332,596.918918918919,0.4416372362582632,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:59.391613,0.000392,udp,147.32.84.170,54888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:35:59.609932,0.00611,tcp,147.32.84.164,34782.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:59.620270,7.525997,tcp,147.32.84.164,49564.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,113,78351,29072,49279,693.3716814159292,0.3710482316754094,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:35:59.623633,0.05859,tcp,147.32.84.164,36453.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1720,974,746,172.0,0.5662790697674419,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:00.552379,0.030301,tcp,147.32.84.164,36457.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1685,939,746,168.5,0.5572700296735905,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:02.718832,0.007923,tcp,147.32.84.170,58503.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3505,1005,2500,318.6363636363636,0.2867332382310984,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:02.770737,0.011743,tcp,147.32.84.170,58505.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1776,989,787,177.6,0.5568693693693694,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:07.976580,0.557953,tcp,147.32.84.164,49579.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:08.061039,0.000608,udp,89.78.214.11,39556.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,80,473,276.5,0.14466546112115733,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:36:08.323801,64.767387,tcp,147.32.84.164,49582.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,39,23323,9704,13619,598.025641025641,0.41606997384556016,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:08.434692,0.000307,udp,147.32.84.59,42584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:09.394325,0.000272,udp,147.32.84.170,52446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:10.101391,0.000522,udp,147.32.84.59,55013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,82,318,200.0,0.205,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:11.232278,0.000409,udp,147.32.84.170,49486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:11.721822,0.006447,tcp,147.32.84.164,34802.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2957,998,1959,268.8181818181818,0.3375042272573554,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:11.734640,0.006226,tcp,147.32.84.164,36472.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1659,913,746,165.9,0.5503315250150693,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:11.747968,0.020096,udp,147.32.84.164,37653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:11.777771,0.00027,udp,147.32.84.170,57206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:11.778469,0.000178,udp,147.32.84.170,33726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:11.806610,0.008246,tcp,147.32.84.170,58510.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1824,1037,787,182.4,0.5685307017543859,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:12.075380,0.000432,udp,212.106.47.227,53505.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-UDP-Established,Background,-1 2011-08-16 18:36:13.055686,117.161278,tcp,85.180.199.52,49531.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,17,1798,496,1302,105.76470588235294,0.27586206896551724,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:36:13.101033,2.999384,tcp,147.32.84.59,40639.0,->,192.168.1.3,19987.0,S_,0.0,,2,148,148,0,74.0,1.0,18,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:36:13.456261,2199.750244,udp,147.32.84.59,7525.0,<->,46.4.116.181,52012.0,CON,0.0,0.0,894,678387,513607,164780,758.8221476510067,0.7571002982073655,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:36:16.669263,0.007012,tcp,147.32.84.164,34805.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3427,961,2466,311.54545454545456,0.2804201925882696,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:17.590759,3073.260498,udp,61.225.3.2,63783.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:36:17.914326,0.000335,udp,147.32.84.170,45756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:17.916589,0.000236,udp,147.32.84.170,40217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:17.917250,0.000243,udp,147.32.84.170,34581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:17.917812,0.000317,udp,147.32.84.170,41916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:19.401347,0.0,udp,87.118.126.158,2335.0,->,147.32.86.13,6257.0,INT,0.0,,1,144,144,0,144.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:36:23.259788,0.000229,udp,147.32.84.138,44627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:23.819869,0.006347,tcp,147.32.84.164,34811.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3427,961,2466,311.54545454545456,0.2804201925882696,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:27.445489,0.020555,udp,147.32.84.170,41739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,77,119,98.0,0.39285714285714285,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:27.488026,0.761293,tcp,147.32.84.170,34475.0,->,64.12.239.116,443.0,FSPA_FSPA,0.0,0.0,22,7256,1358,5898,329.8181818181818,0.18715545755237045,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:29.071051,0.000259,udp,147.32.84.59,44394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:29.132877,0.000467,udp,147.32.84.59,54651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:29.798545,3570.315674,tcp,147.32.84.170,54274.0,->,64.12.73.133,443.0,SPA_SPA,0.0,0.0,181,13476,5934,7542,74.45303867403315,0.44033837934105075,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:32.831395,0.0074,tcp,147.32.84.170,58528.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1799,1012,787,179.9,0.5625347415230684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:33.794169,2091.876709,udp,147.32.84.59,7525.0,<->,46.4.101.72,53012.0,CON,0.0,0.0,1174,894243,577536,316707,761.706132879046,0.6458378762819502,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:36:33.953567,0.000225,udp,147.32.84.138,49381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:34.642177,0.000305,udp,147.32.84.59,60630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:34.656473,1957.757568,udp,147.32.84.229,13363.0,<->,95.133.171.189,32218.0,CON,0.0,0.0,6,1076,826,250,179.33333333333334,0.7676579925650557,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:36:39.393547,0.017879,tcp,147.32.84.170,47336.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:44.029634,0.0003,udp,147.32.84.170,40933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:44.917008,0.000179,udp,147.32.84.138,51196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:47.351601,0.000269,udp,147.32.84.138,36826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:48.426682,0.000205,udp,147.32.84.164,36179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.426821,0.000369,udp,147.32.84.164,39751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.426875,0.0004,udp,147.32.84.164,47904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.427728,0.000332,udp,147.32.84.164,55285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.428394,0.020051,udp,147.32.84.164,37263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.428515,12.644223,tcp,147.32.84.164,49006.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.428523,12.644502,tcp,147.32.84.164,49007.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.448553,12.63726,tcp,147.32.84.164,36922.0,->,209.85.229.120,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.448616,12.635457,tcp,147.32.84.164,36925.0,->,209.85.229.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.448764,12.624257,tcp,147.32.84.164,49014.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.552531,450.294434,tcp,147.32.84.164,59828.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,163,86008,26360,59648,527.6564417177914,0.3064831178495024,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.553368,0.000262,udp,147.32.84.164,55999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.904737,0.000286,udp,147.32.84.164,43569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.906234,0.000497,udp,147.32.84.164,34985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.912164,0.000206,udp,147.32.84.164,43250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.912170,0.000308,udp,147.32.84.164,57384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,70,254,162.0,0.21604938271604937,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.914779,0.000412,udp,147.32.84.164,51543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.927588,0.000455,udp,147.32.84.164,51044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:48.929014,0.000299,udp,147.32.84.164,36183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.168723,0.245677,udp,147.32.84.164,38683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.377925,0.007088,tcp,147.32.84.170,58531.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3024,1044,1980,274.90909090909093,0.34523809523809523,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:49.392165,0.000449,udp,147.32.84.170,60039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:49.394028,0.018703,tcp,147.32.84.170,58400.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:49.403782,0.008292,tcp,147.32.84.170,58534.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1815,1028,787,181.5,0.5663911845730027,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:49.943998,0.037993,udp,147.32.84.164,41481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,78,169,123.5,0.3157894736842105,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.966254,0.019895,udp,147.32.84.164,38915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,70,183,126.5,0.2766798418972332,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.976438,0.000346,udp,147.32.84.164,49684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.977110,0.000312,udp,147.32.84.164,33730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.983104,0.000164,udp,147.32.84.164,35251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.983426,0.000278,udp,147.32.84.164,45043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:49.994218,0.018034,udp,147.32.84.164,39448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:50.000631,0.098469,udp,147.32.84.164,54332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,142,71,71,71.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:50.671623,0.000228,udp,147.32.84.138,54216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:36:51.851020,0.005746,tcp,147.32.84.170,37321.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1710,920,790,171.0,0.5380116959064327,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:53.764631,115.516235,tcp,147.32.84.59,33057.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,16,4105,3054,1051,256.5625,0.7439707673568818,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:36:55.247339,0.000244,udp,147.32.84.164,37089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,91,146,118.5,0.38396624472573837,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:55.247910,0.001926,udp,147.32.84.164,50072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,91,227,159.0,0.2861635220125786,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:55.252706,0.000295,udp,147.32.84.164,46019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,82,198,140.0,0.29285714285714287,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:55.258135,0.023029,udp,147.32.84.164,48925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:55.274462,0.000296,udp,147.32.84.164,54274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,79,138,108.5,0.3640552995391705,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:36:56.232241,0.000348,udp,109.54.179.88,50313.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-UDP-Established,Background,-1 2011-08-16 18:36:59.392555,0.000377,udp,147.32.84.170,47460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:59.393726,0.018402,tcp,147.32.84.170,39226.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:59.588839,0.007119,tcp,147.32.84.170,58539.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2987,1019,1968,271.54545454545456,0.3411449614998326,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:36:59.772865,0.000447,udp,91.179.72.232,62661.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,636,75,561,318.0,0.1179245283018868,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:00.802139,0.00031,udp,147.32.86.20,52596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:37:01.399961,0.362498,udp,147.32.84.229,13363.0,<->,113.61.164.53,19122.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:02.421587,2046.551025,udp,147.32.84.59,34059.0,->,147.32.119.84,26676.0,INT,0.0,,12,1737,1737,0,144.75,1.0,18,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:37:03.522043,0.000232,udp,147.32.84.164,39870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:04.977036,0.000242,udp,147.32.84.164,51322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:04.991645,0.00023,udp,147.32.84.164,33078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:04.992499,0.000256,udp,147.32.84.164,35029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,70,153,111.5,0.31390134529147984,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:04.993175,0.025817,tcp,147.32.84.164,36516.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1611,865,746,161.1,0.5369335816263191,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:05.158384,0.000247,udp,147.32.84.164,35361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:05.158391,0.00041,udp,147.32.84.164,37753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:05.159194,0.000143,udp,147.32.84.164,46220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:05.159200,0.000379,udp,147.32.84.164,56706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:09.392717,0.000381,udp,147.32.84.170,51531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:09.393890,0.017841,tcp,147.32.84.170,39233.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:11.265948,0.006529,tcp,147.32.84.164,34856.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3055,1059,1996,277.72727272727275,0.34664484451718497,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:11.301212,0.004837,tcp,147.32.84.164,36526.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1683,937,746,168.3,0.5567439096850861,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:11.516001,0.000343,udp,147.32.84.164,38364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:11.519795,0.000272,udp,147.32.84.164,42000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:12.327545,0.000255,udp,147.32.84.170,39674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:12.328107,0.000191,udp,147.32.84.170,54012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:12.346514,0.000263,udp,147.32.84.170,51846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:12.928094,0.006179,tcp,147.32.84.164,34858.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:12.941073,0.005501,tcp,147.32.84.164,36528.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1693,947,746,169.3,0.5593620791494389,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:14.410373,0.17969,udp,147.32.84.164,47144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:14.412929,0.000248,udp,147.32.84.164,49259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:15.039716,0.000416,udp,147.32.84.170,58419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:15.778555,611.807617,udp,85.223.147.174,14338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,483,359,124,120.75,0.7432712215320911,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:16.289449,0.006227,tcp,147.32.84.164,34862.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:18.821000,0.005077,tcp,147.32.84.164,36534.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1692,946,746,169.2,0.5591016548463357,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:19.199675,3024.129395,udp,70.189.180.204,17391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:19.391545,0.000405,udp,147.32.84.170,40537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:21.716784,0.005785,tcp,147.32.84.164,36537.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1692,946,746,169.2,0.5591016548463357,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:21.989109,0.000375,udp,89.173.11.243,26713.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:22.954317,0.000242,udp,147.32.84.138,39979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:37:24.547093,0.257869,tcp,147.32.84.164,36539.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1742,996,746,174.2,0.5717566016073479,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:26.361182,1.154676,tcp,147.32.84.164,44315.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:27.602863,0.006618,tcp,147.32.84.164,34876.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:28.400685,0.156817,tcp,147.32.84.164,44320.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:31.917877,0.006289,tcp,147.32.84.164,34887.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:33.904919,0.492667,tcp,147.32.84.164,44334.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:34.318163,0.006297,tcp,147.32.84.164,34893.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:34.521042,0.007552,tcp,147.32.84.170,37341.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1699,909,790,169.9,0.5350206003531489,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.547773,0.00032,udp,147.32.84.170,59089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.548685,0.000308,udp,147.32.84.170,48080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.549010,0.000219,udp,147.32.84.170,33697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.549237,0.000354,udp,147.32.84.170,50715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.549682,0.00032,udp,147.32.84.170,44693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:34.550917,0.00023,udp,147.32.84.170,40867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:35.928457,0.172449,tcp,147.32.84.164,44340.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:36.201793,0.006109,tcp,147.32.84.164,34899.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:39.224551,0.474865,tcp,147.32.84.164,44349.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:39.504575,0.006422,tcp,147.32.84.164,34908.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:39.764224,0.000227,udp,147.32.84.138,45525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:37:40.135715,0.198636,tcp,147.32.84.164,44352.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,23,11903,5040,6863,517.5217391304348,0.4234226665546501,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:40.457208,0.006296,tcp,147.32.84.164,34911.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:41.081395,0.308942,tcp,147.32.84.164,44355.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,23,11597,5040,6557,504.2173913043478,0.434595153919117,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:43.553118,0.00579,tcp,147.32.84.164,36590.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1721,975,746,172.1,0.5665310865775712,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:44.533111,0.006951,tcp,147.32.84.164,34923.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:44.661885,0.000276,udp,147.32.84.171,45049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,75,143,109.0,0.3440366972477064,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:37:46.039875,0.00035,udp,147.32.84.170,38933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:46.227338,0.200053,udp,147.32.84.229,13363.0,<->,142.161.206.169,22489.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:47.342808,0.382955,udp,147.32.84.229,13363.0,<->,123.240.212.15,43067.0,CON,0.0,0.0,4,3027,60,2967,756.75,0.019821605550049554,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:49.392689,0.00037,udp,147.32.84.170,54602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:50.544733,0.006556,tcp,147.32.84.164,34936.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:50.557247,0.00507,tcp,147.32.84.164,36606.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1778,988,790,177.8,0.5556805399325084,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:50.656517,0.00041,udp,147.32.84.164,42333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:50.656524,0.000493,udp,147.32.84.164,36368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:51.878154,0.005772,tcp,147.32.84.164,36609.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1675,929,746,167.5,0.5546268656716418,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:52.172052,0.009735,udp,147.32.84.164,57931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,75,123,99.0,0.3787878787878788,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:52.181999,0.00027,udp,147.32.84.164,41400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,75,123,99.0,0.3787878787878788,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:53.050226,0.006404,tcp,147.32.84.164,34942.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:53.079515,0.004563,tcp,147.32.84.164,36612.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1682,936,746,168.2,0.5564803804994055,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:54.019993,0.006579,tcp,147.32.84.164,34945.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:54.064729,3055.843994,udp,85.81.113.26,12688.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:37:55.080737,6.644376,tcp,147.32.84.164,44392.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,125,87412,29534,57878,699.296,0.33787123049466894,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:55.693828,0.009289,tcp,147.32.84.170,58567.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2996,1027,1969,272.3636363636364,0.34279038718291055,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:37:56.088261,0.006568,tcp,147.32.84.164,34951.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:58.512683,0.000238,udp,147.32.84.138,39519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:37:59.187137,0.005184,tcp,147.32.84.164,36626.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1771,981,790,177.1,0.5539243365330322,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:37:59.213087,1.300216,tcp,147.32.84.164,44400.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,45,27030,10018,17012,600.6666666666666,0.3706252312245653,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:00.528527,0.006891,tcp,147.32.84.164,34959.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:00.813738,0.008014,tcp,147.32.84.170,37358.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1692,902,790,169.2,0.533096926713948,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:01.394554,0.000374,udp,147.32.84.164,35171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:01.395972,249.69577,tcp,147.32.84.164,42467.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,23,3228,2200,1028,140.34782608695653,0.6815365551425031,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:02.584821,0.096449,udp,147.32.84.229,13363.0,<->,94.24.193.217,29592.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:38:02.957404,986.038391,udp,147.32.84.59,7525.0,<->,176.9.23.171,53012.0,CON,0.0,0.0,364,281005,249327,31678,771.9917582417582,0.8872689098058754,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:38:03.197527,0.101267,tcp,147.32.84.164,36636.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1677,931,746,167.7,0.5551580202742994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:03.504856,0.01918,udp,147.32.84.164,41126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:04.805497,0.00534,tcp,147.32.84.164,36639.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1688,942,746,168.8,0.5580568720379147,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:06.151356,0.000323,udp,147.32.84.164,55151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:06.168647,0.000329,udp,147.32.84.164,45959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:06.170327,0.006391,tcp,147.32.84.164,36642.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1752,962,790,175.2,0.5490867579908676,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.116656,2079.888184,udp,147.32.84.59,7525.0,<->,188.40.122.155,50012.0,CON,0.0,0.0,1325,1016389,590625,425764,767.086037735849,0.5811013302977501,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:38:07.616392,0.006217,tcp,147.32.84.164,34975.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3055,1059,1996,277.72727272727275,0.34664484451718497,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.757248,0.000286,udp,147.32.84.164,57297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.757656,0.000215,udp,147.32.84.164,51671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.757708,0.000264,udp,147.32.84.164,53155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.757714,0.000322,udp,147.32.84.164,44365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.759525,0.00033,udp,147.32.84.164,51892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,73,161,117.0,0.31196581196581197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:07.759574,0.000289,udp,147.32.84.164,57178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:08.040006,0.00751,tcp,147.32.84.170,58583.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1812,1025,787,181.2,0.5656732891832229,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:08.472915,0.577638,tcp,147.32.84.164,44420.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,12,4047,2551,1496,337.25,0.6303434642945391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:09.392731,0.000425,udp,147.32.84.170,59966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:09.394867,0.018263,tcp,147.32.84.170,46522.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:09.779547,0.000314,udp,147.32.85.25,46374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:10.955478,4.290085,tcp,147.32.84.164,44425.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,39,23283,9820,13463,597.0,0.421766954430271,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:11.085720,390.014954,tcp,147.32.84.164,53036.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,334,191660,110537,81123,573.8323353293413,0.5767348429510591,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:12.287985,0.007779,tcp,147.32.84.170,58590.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1808,1021,787,180.8,0.5647123893805309,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:12.696969,3015.337402,udp,108.88.90.54,7194.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:38:13.371773,0.429401,tcp,147.32.84.170,45090.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:13.578015,0.294609,tcp,147.32.84.170,51560.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:13.766844,1.297934,tcp,147.32.84.164,44431.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,24,13609,5094,8515,567.0416666666666,0.37431111764273645,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:14.089832,240.049423,tcp,147.32.84.170,45096.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:14.089926,240.04953,tcp,147.32.84.170,45097.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:14.315098,0.000382,udp,147.32.84.170,60149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:14.337391,0.00025,udp,147.32.84.170,56226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:14.885156,461.871307,tcp,95.103.127.120,17948.0,->,147.32.85.84,13716.0,FSPA_FSPA,0.0,0.0,45,6500,3816,2684,144.44444444444446,0.587076923076923,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:38:15.312129,1.003582,tcp,147.32.84.164,44435.0,->,74.125.232.203,80.0,FSRPA_FSPA,0.0,0.0,45,27666,10018,17648,614.8,0.3621051109665293,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:16.567957,0.000311,udp,147.32.84.138,36893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:17.030718,0.000323,udp,147.32.84.170,48964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:17.031711,0.000347,udp,147.32.84.170,47605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:17.369857,0.000214,udp,147.32.84.13,41259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:18.459898,0.000199,udp,147.32.84.170,39592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:19.391854,0.000536,udp,147.32.84.170,43749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:19.870280,0.006141,tcp,147.32.84.164,34997.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:19.938858,0.006909,tcp,147.32.84.170,58611.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3030,1046,1984,275.45454545454544,0.3452145214521452,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:22.262758,3.791862,tcp,147.32.84.164,49785.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,92,60164,22199,37965,653.9565217391304,0.36897480220730006,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:26.204078,0.006169,tcp,147.32.84.164,35010.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:26.217218,0.005546,tcp,147.32.84.164,36680.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1692,946,746,169.2,0.5591016548463357,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:27.281284,0.006847,tcp,147.32.84.164,35013.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:28.494573,0.933626,tcp,147.32.84.164,49799.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,45,26929,10018,16911,598.4222222222222,0.3720152994912548,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:28.832811,0.000321,udp,147.32.84.164,58932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:29.391890,0.000439,udp,147.32.84.170,54222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:30.451868,0.005338,tcp,147.32.84.164,36692.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1682,936,746,168.2,0.5564803804994055,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:30.926644,0.002219,udp,147.32.84.164,59901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,516,76,440,258.0,0.14728682170542637,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:30.937496,0.049688,tcp,147.32.84.170,37404.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1626,880,746,162.6,0.5412054120541205,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:32.414133,0.006348,tcp,147.32.84.164,36698.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1681,935,746,168.1,0.5562165377751338,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:33.374421,10.96021,tcp,95.115.228.113,50564.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:38:33.522039,0.010881,tcp,147.32.84.170,58623.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1792,1005,787,179.2,0.5608258928571429,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:33.858079,0.006,tcp,147.32.84.164,35031.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:33.872414,0.005902,tcp,147.32.84.164,36701.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1761,971,790,176.1,0.5513912549687677,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:36.189005,1.190871,tcp,147.32.84.164,49821.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,39,21318,9820,11498,546.6153846153846,0.4606435875785721,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:36.960062,0.009412,tcp,147.32.84.170,58626.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1808,1021,787,180.8,0.5647123893805309,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:37.161359,0.006279,tcp,147.32.84.164,35041.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:37.175287,0.005145,tcp,147.32.84.164,36711.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1808,1018,790,180.8,0.5630530973451328,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:37.784458,0.000188,udp,147.32.84.138,45353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:38.766735,0.035269,udp,147.32.84.164,54384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:41.470624,0.000346,udp,147.32.84.170,43042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,337,75,262,168.5,0.22255192878338279,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:41.471050,0.000256,udp,147.32.84.170,46908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:41.471652,0.000278,udp,147.32.84.170,34373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:41.472606,0.000251,udp,147.32.84.170,56152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:42.823769,1.358168,tcp,147.32.84.164,49831.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,30,16431,7397,9034,547.7,0.450185624733735,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:42.826614,0.014322,tcp,147.32.84.164,36720.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1770,980,790,177.0,0.5536723163841808,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:42.844795,2.505756,tcp,147.32.84.164,49833.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,37,21001,9754,11247,567.5945945945946,0.46445407361554214,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:44.051153,0.006425,tcp,147.32.84.164,35053.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:44.063772,0.000213,udp,147.32.84.164,41270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:44.064240,0.000268,udp,147.32.84.164,57140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:45.094111,0.000202,udp,147.32.84.138,58771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:45.154676,0.006915,tcp,147.32.84.164,36727.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1779,989,790,177.9,0.5559302979201799,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:45.174274,1.491285,tcp,147.32.84.164,49840.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,45,27453,10018,17435,610.0666666666667,0.3649145812843769,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:46.297812,0.00607,tcp,147.32.84.164,36730.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1687,941,746,168.7,0.5577949021932425,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:47.396448,1.156267,tcp,147.32.84.164,49845.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,19,8599,4908,3691,452.57894736842104,0.5707640423305036,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:47.921893,0.000358,udp,147.32.84.164,41878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:47.923326,263.172821,tcp,147.32.84.164,59508.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,115,92511,4208,88303,804.4434782608696,0.045486482688545146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:50.523690,0.006696,tcp,147.32.84.164,35074.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3055,1059,1996,277.72727272727275,0.34664484451718497,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:51.620818,0.991983,tcp,147.32.84.164,49860.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,30,17136,7397,9739,571.2,0.43166433239962654,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:51.827642,0.000404,udp,147.32.84.138,53071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:52.437043,0.000287,udp,147.32.84.59,61183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:52.591012,0.006817,tcp,147.32.84.164,35080.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:53.750556,0.006549,tcp,147.32.84.164,35083.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:53.765728,0.004637,tcp,147.32.84.164,36753.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1690,944,746,169.0,0.5585798816568047,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:53.942403,0.007025,tcp,147.32.84.170,58633.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3526,1016,2510,320.54545454545456,0.2881452070334657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:54.763624,0.000382,udp,171.243.127.153,12117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:38:56.033657,0.00674,tcp,147.32.84.164,35089.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3600,1060,2540,327.27272727272725,0.29444444444444445,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:56.049047,0.014349,tcp,147.32.84.164,36759.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1768,978,790,176.8,0.5531674208144797,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:57.440394,0.0015,udp,24.231.51.50,7576.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:38:57.510643,0.000246,udp,147.32.87.252,54777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:38:57.959486,0.047445,tcp,147.32.84.164,36765.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,11,1826,1036,790,166.0,0.5673603504928806,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:58.912003,1.094401,tcp,147.32.84.164,49881.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,45,27229,10018,17211,605.0888888888888,0.36791655955047925,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:38:59.391647,0.00042,udp,147.32.84.170,47327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:59.392608,0.000352,udp,147.32.84.170,50894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:38:59.991636,0.00633,tcp,147.32.84.164,35101.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3056,1060,1996,277.8181818181818,0.3468586387434555,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:00.223244,0.00941,tcp,147.32.84.170,58639.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1807,1020,787,180.7,0.5644714997232982,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:01.028100,1.456215,tcp,147.32.84.164,49887.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,45,27393,10018,17375,608.7333333333333,0.36571386850655274,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:01.386086,0.000214,udp,147.32.84.138,34249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:01.943346,0.000327,udp,147.32.85.74,42968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,72,155,113.5,0.31718061674008813,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:03.289550,247.806259,tcp,147.32.84.164,49893.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,37,15072,5514,9558,407.35135135135135,0.365843949044586,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:03.946687,0.000371,udp,147.32.84.138,55612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:04.751063,0.006258,tcp,147.32.84.170,37426.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1688,898,790,168.8,0.5319905213270142,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:05.619715,0.000572,udp,78.185.119.137,7889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,75,476,275.5,0.13611615245009073,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:06.066427,0.078848,udp,147.32.87.252,43811.0,<->,129.177.32.27,62646.0,CON,0.0,0.0,2,600,79,521,300.0,0.13166666666666665,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:06.323806,0.057096,udp,147.32.87.252,43811.0,<->,176.14.184.251,42198.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:06.649023,0.000175,udp,147.32.84.164,35834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,82,189,135.5,0.3025830258302583,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.653500,0.000169,udp,147.32.84.164,35885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.654018,0.00017,udp,147.32.84.164,60563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.671635,0.009648,udp,147.32.84.164,34288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,361,88,273,180.5,0.24376731301939059,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.792767,0.000204,udp,147.32.84.164,36560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.792815,0.000379,udp,147.32.84.164,56237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,74,174,124.0,0.29838709677419356,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.792874,0.000327,udp,147.32.84.164,45835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.793305,0.000369,udp,147.32.84.164,53217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:06.793313,0.000515,udp,147.32.84.164,50702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.037212,0.000532,udp,147.32.84.164,56174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.038127,0.000256,udp,147.32.84.164,34640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.038735,0.019367,udp,147.32.84.164,57254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.038826,0.000735,udp,147.32.84.164,36976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.040050,0.000655,udp,147.32.84.164,35216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.042727,0.000233,udp,147.32.84.164,44110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.043980,0.000262,udp,147.32.84.164,60395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.044381,0.00031,udp,147.32.84.164,53581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.364805,0.000563,udp,95.134.168.10,10338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,580,72,508,290.0,0.12413793103448276,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:07.780245,0.245964,udp,147.32.84.164,41813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:07.837736,0.044595,tcp,147.32.84.164,49902.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,10,1989,1299,690,198.9,0.6530920060331825,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:08.026385,0.0005,udp,147.32.84.164,50248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:09.393954,0.018183,tcp,147.32.84.170,60954.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:09.487057,0.006174,tcp,147.32.84.170,37430.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1725,935,790,172.5,0.5420289855072464,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:09.498381,0.010206,tcp,147.32.84.170,58646.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1818,1031,787,181.8,0.5671067106710671,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:09.917705,0.29737,tcp,147.32.84.164,49905.0,->,74.125.232.201,80.0,FSRPA_FSPA,0.0,0.0,14,3525,2359,1166,251.78571428571428,0.6692198581560284,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.744235,0.00381,udp,147.32.84.164,49322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,80,150,115.0,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.762054,0.001901,udp,147.32.84.164,59495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.764381,0.007168,udp,147.32.84.164,53204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,79,144,111.5,0.3542600896860987,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.770547,0.000262,udp,147.32.84.164,42862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,76,173,124.5,0.30522088353413657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.771137,0.000404,udp,147.32.84.164,59507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:10.778001,0.031007,udp,147.32.84.164,57380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:13.021774,248.074707,tcp,147.32.84.164,49908.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,21,2715,1666,1049,129.28571428571428,0.6136279926335175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:13.556683,0.007498,udp,147.32.84.164,59376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,75,136,105.5,0.35545023696682465,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:13.564843,0.005836,udp,147.32.84.164,54717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,75,232,153.5,0.24429967426710097,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:13.591185,0.006853,udp,147.32.84.164,50618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,76,207,141.5,0.26855123674911663,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:13.737219,3599.897705,udp,147.32.84.94,7103.0,<->,46.4.85.137,52012.0,CON,0.0,0.0,1188,974206,22920,951286,820.0387205387206,0.023526851610439683,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:16.220042,0.000385,udp,147.32.84.170,55834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:16.932842,14.148389,tcp,147.32.84.164,49320.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:17.306042,0.206354,tcp,147.32.86.20,1754.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,33450,1149,32301,777.9069767441861,0.034349775784753366,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:39:18.284648,0.000242,udp,147.32.84.164,45201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.284807,0.00034,udp,147.32.84.164,36719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.295949,22.779312,tcp,147.32.84.164,37910.0,->,95.168.192.72,80.0,FSPA_FSPA,0.0,0.0,175,160415,21453,138962,916.6571428571428,0.13373437646105413,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.303646,0.017481,udp,147.32.84.164,39684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.317093,552.799805,tcp,147.32.84.164,38269.0,->,74.125.232.240,80.0,FSPA_FSRPA,0.0,0.0,43,10867,8026,2841,252.72093023255815,0.7385663016471887,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.330147,0.120085,tcp,147.32.84.164,43104.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1407,702,705,140.7,0.4989339019189765,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.373006,0.011927,udp,147.32.84.164,43532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,76,154,115.0,0.33043478260869563,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.373025,0.011789,udp,147.32.84.164,46695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,73,151,112.0,0.32589285714285715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.388306,0.013659,tcp,147.32.84.164,47653.0,->,88.86.123.28,80.0,FSPA_FSPA,0.0,0.0,10,2334,786,1548,233.4,0.33676092544987146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.393293,0.008125,tcp,147.32.84.164,55711.0,->,88.86.123.27,80.0,FSPA_FSPA,0.0,0.0,12,7144,1009,6135,595.3333333333334,0.1412374020156775,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.522404,0.000267,udp,147.32.84.138,51282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:18.568322,0.00377,tcp,147.32.84.164,36857.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2563,1555,1008,284.77777777777777,0.6067108856808427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.573461,0.475763,tcp,147.32.84.164,44020.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,10,1647,844,803,164.7,0.5124468731026108,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.825793,0.000273,udp,147.32.84.164,52279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:18.826616,0.000296,udp,147.32.84.164,34861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.028795,0.000248,udp,147.32.84.170,58586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:19.096653,952.046082,tcp,147.32.84.164,57386.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,196,85201,63345,21856,434.69897959183675,0.7434771892348682,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.100345,0.025665,udp,147.32.84.164,50559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.126227,0.000393,udp,147.32.84.164,49857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.128439,0.00023,udp,147.32.84.164,43861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.129016,0.000162,udp,147.32.84.164,35303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.129443,0.000378,udp,147.32.84.164,35349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:19.391825,0.000545,udp,147.32.84.170,60706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:19.573894,0.000233,tcp,82.192.95.114,7777.0,->,147.32.87.59,19720.0,SA_R,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:39:20.566460,13.818787,udp,147.32.84.229,13363.0,<->,111.184.20.15,36701.0,CON,0.0,0.0,10,660,360,300,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:22.437848,0.000323,udp,147.32.84.59,53323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:22.849750,0.000244,udp,147.32.85.25,43404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:23.822392,0.146333,tcp,147.32.84.170,37441.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1681,935,746,168.1,0.5562165377751338,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:23.855250,0.000261,udp,147.32.84.170,41310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:25.681569,0.000163,udp,147.32.84.170,46303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,72,131,101.5,0.35467980295566504,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:25.681932,16.523567,tcp,147.32.84.170,34223.0,->,77.78.110.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:25.683601,16.521906,tcp,147.32.84.170,58677.0,->,78.24.14.69,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:28.339448,0.377442,tcp,147.32.84.164,44029.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,10,2170,841,1329,217.0,0.38755760368663594,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.349379,0.232759,tcp,147.32.84.164,57586.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,112,81978,14173,67805,731.9464285714286,0.17288784795920856,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.349469,0.237031,tcp,147.32.84.164,57587.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,95,67056,13787,53269,705.8526315789474,0.20560427105702697,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.349562,0.265381,tcp,147.32.84.164,57588.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,145,116072,14704,101368,800.4965517241379,0.1266799917292715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.349666,0.245824,tcp,147.32.84.164,57589.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,136,112238,14415,97823,825.2794117647059,0.12843243821165737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.350502,0.008486,udp,147.32.84.164,45938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,73,143,108.0,0.33796296296296297,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.351913,0.036166,udp,147.32.84.164,38435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,73,143,108.0,0.33796296296296297,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.359775,0.001974,udp,147.32.84.164,37728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,73,249,161.0,0.2267080745341615,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.362098,2.715789,tcp,147.32.84.164,57591.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,12,3949,850,3099,329.0833333333333,0.21524436566219296,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.391229,2.686666,tcp,147.32.84.164,57592.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,27,17426,1230,16196,645.4074074074074,0.07058418455181913,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.435109,0.190536,udp,147.32.84.164,55715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,76,254,165.0,0.23030303030303031,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.484307,2.593592,tcp,147.32.84.164,57594.0,->,217.198.116.8,80.0,FSPA_FSPA,0.0,0.0,16,6934,996,5938,433.375,0.14364003461205654,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.515613,0.000268,udp,147.32.84.164,33078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:28.626109,32.603085,tcp,147.32.84.164,56652.0,->,72.233.69.5,80.0,FSPA_FSPA,0.0,0.0,18,5048,2859,2189,280.44444444444446,0.5663629160063391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:29.342318,11.854397,tcp,147.32.84.164,35445.0,->,216.34.181.49,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:29.391881,0.000437,udp,147.32.84.170,60971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:29.393943,0.017669,tcp,147.32.84.170,58549.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:30.082017,0.095828,udp,147.32.84.164,43407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,69,141,105.0,0.32857142857142857,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.082200,0.005855,udp,147.32.84.164,49796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,68,138,103.0,0.3300970873786408,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.093515,0.000262,udp,147.32.84.164,60424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.094128,0.001907,udp,147.32.84.164,44951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,83,259,171.0,0.24269005847953215,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.107298,0.000294,udp,147.32.84.164,49129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,74,138,106.0,0.3490566037735849,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.142818,0.01967,udp,147.32.84.164,56023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.178802,0.002,udp,147.32.84.164,39845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,69,247,158.0,0.21835443037974683,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.189276,0.001906,udp,147.32.84.164,41279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,79,257,168.0,0.23511904761904762,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.595739,0.000343,udp,147.32.84.164,51886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,76,188,132.0,0.2878787878787879,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:30.688612,0.0,igmp,147.32.87.4,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:39:30.938218,0.051174,udp,147.32.84.164,39925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,75,160,117.5,0.3191489361702128,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:35.253045,549.71698,udp,147.32.84.94,7103.0,->,38.117.109.20,7335.0,INT,0.0,,8,672,672,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:39:38.455869,3045.729004,udp,79.226.247.167,9874.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:39:38.603120,0.030983,udp,147.32.84.164,36017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.603233,0.033151,udp,147.32.84.164,59245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,76,161,118.5,0.3206751054852321,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.603302,0.000963,udp,147.32.84.164,47775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,78,159,118.5,0.3291139240506329,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.605386,242.492218,tcp,147.32.84.164,40092.0,->,74.125.232.219,80.0,FSPA_FSPA,0.0,0.0,28,4995,2521,2474,178.39285714285714,0.5047047047047047,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.634334,0.00051,udp,147.32.84.164,60545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.735805,0.017474,udp,147.32.84.164,36308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,527,86,441,263.5,0.16318785578747627,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.915206,0.001894,udp,147.32.84.164,34103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:38.917410,0.000263,udp,147.32.84.164,54947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:39.264099,311.947479,tcp,147.32.84.164,38486.0,->,64.95.73.13,80.0,FSPA_FSPA,0.0,0.0,82,28514,21459,7055,347.7317073170732,0.7525776811390895,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:44.548535,0.000397,udp,147.32.86.17,44164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:45.141675,1.485083,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,458,142,316,152.66666666666666,0.31004366812227074,18,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 18:39:46.627454,1.941413,tcp,147.32.84.165,1535.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,18,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 18:39:49.387330,0.030713,udp,147.32.84.164,51114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,76,146,111.0,0.34234234234234234,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:49.392822,0.000329,udp,147.32.84.170,43070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:49.443139,26.902756,tcp,147.32.84.164,56566.0,->,216.69.227.71,80.0,SPA_SRPA,0.0,0.0,16,7074,1454,5620,442.125,0.2055414192818773,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:50.022022,0.000385,udp,147.32.84.170,36627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:50.188675,10.903123,tcp,147.32.84.164,38111.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,29,17387,1623,15764,599.551724137931,0.0933456030367516,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:50.188757,10.903031,tcp,147.32.84.164,38112.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,37,24311,2144,22167,657.0540540540541,0.0881905310353338,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:39:50.394987,461.505402,arp,147.32.87.7,,who,147.32.87.16,,INT,,,2,120,120,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:39:51.341432,0.001327,udp,147.32.84.59,63746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,514,79,435,257.0,0.15369649805447472,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:39:51.832331,0.0,icmp,147.32.84.59,771.0,->,147.32.80.9,64212.0,URP,0.0,,1,70,70,0,70.0,1.0,18,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:39:55.675742,1254.999023,icmp,208.70.31.226,771.0,->,147.32.84.94,44299.0,URP,0.0,,8,896,896,0,112.0,1.0,18,0,flow=Background,Background,-1 2011-08-16 18:39:59.387745,0.000243,udp,147.32.84.170,45208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,75,154,114.5,0.32751091703056767,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:59.387872,0.000305,udp,147.32.84.170,57233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:59.388362,0.000331,udp,147.32.84.170,37724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:39:59.388372,0.00057,udp,147.32.84.170,41920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:00.420133,0.000193,udp,147.32.85.34,55260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:00.431215,0.000236,udp,147.32.85.34,59213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:03.350220,0.006687,tcp,147.32.84.170,58689.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3582,1047,2535,325.6363636363636,0.29229480737018426,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:03.407501,0.007423,tcp,147.32.84.170,58691.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1819,1032,787,181.9,0.5673446948873007,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:06.378845,0.001326,udp,147.32.84.164,49872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.378981,14.851196,tcp,147.32.84.164,56685.0,->,72.233.69.5,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.378983,0.001263,udp,147.32.84.164,58182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.379178,0.001189,udp,147.32.84.164,49249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.380573,0.000801,udp,147.32.84.164,49782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,76,251,163.5,0.2324159021406728,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.380574,0.000958,udp,147.32.84.164,48999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.381327,254.718277,tcp,147.32.84.164,53833.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,27,7143,1401,5742,264.55555555555554,0.19613607727845442,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.381527,14.69965,tcp,147.32.84.164,43603.0,->,81.31.45.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.381876,0.142686,tcp,147.32.84.164,42238.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,10,1698,1135,563,169.8,0.6684334511189635,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.382403,117.720985,tcp,147.32.84.164,52792.0,->,77.93.192.144,80.0,SPA_SRPA,0.0,0.0,465,487330,15757,471573,1048.021505376344,0.032333326493341266,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.384772,0.002792,udp,147.32.84.164,45325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,71,218,144.5,0.24567474048442905,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.408668,0.009991,udp,147.32.84.164,39756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,580,80,500,290.0,0.13793103448275862,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.419146,14.665996,tcp,147.32.84.164,43158.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:06.419154,14.665677,tcp,147.32.84.164,43159.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:07.481683,0.008514,tcp,147.32.84.170,58692.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3575,1049,2526,325.0,0.2934265734265734,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:09.392735,0.000437,udp,147.32.84.170,37310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:09.492216,0.000441,udp,62.45.252.196,45743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:09.535319,0.69523,tcp,147.32.84.59,56354.0,->,204.13.8.37,80.0,FSPA_FSPA,0.0,0.0,11,2089,1404,685,189.9090909090909,0.672091910004787,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:40:10.048875,0.007472,tcp,147.32.84.170,58698.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1790,1003,787,179.0,0.5603351955307263,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:10.837193,0.000305,udp,147.32.84.170,47678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:10.838451,0.000423,udp,147.32.84.170,48813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:10.839438,0.365274,tcp,147.32.84.170,42933.0,->,50.17.203.200,81.0,FSPA_FSRA,0.0,0.0,10,1178,858,320,117.8,0.7283531409168081,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:11.720884,0.006983,tcp,147.32.84.170,37486.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1679,889,790,167.9,0.5294818344252531,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:13.721216,100.384239,tcp,147.32.84.164,52802.0,->,77.93.192.144,80.0,SPA_SRPA,0.0,0.0,46,26664,5609,21055,579.6521739130435,0.21035853585358535,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:13.724364,0.000555,udp,147.32.84.164,60656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:13.725161,241.743988,tcp,147.32.84.164,40436.0,->,74.125.232.200,443.0,FSPA_FSPA,0.0,0.0,63,13932,4217,9715,221.14285714285714,0.3026844674131496,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:13.725927,497.390198,tcp,147.32.84.164,40512.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,40,8376,5630,2746,209.4,0.6721585482330468,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.005276,0.000198,udp,147.32.84.164,43715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.005749,0.000396,udp,147.32.84.164,39991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,73,168,120.5,0.3029045643153527,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.061975,100.042664,tcp,147.32.84.164,52807.0,->,77.93.192.144,80.0,SPA_SRPA,0.0,0.0,71,53332,6671,46661,751.1549295774648,0.12508437710942774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.064007,0.0231,tcp,147.32.84.164,48519.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,15,8979,938,8041,598.6,0.10446597616661098,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.092148,0.007973,tcp,147.32.84.164,54734.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2258,1250,1008,250.88888888888889,0.5535872453498671,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.100346,0.000248,udp,147.32.84.164,45155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.106744,0.00536,udp,147.32.84.164,35031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.113016,0.006061,udp,147.32.84.164,49405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,80,203,141.5,0.2826855123674912,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.115890,0.002518,udp,147.32.84.164,38766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,71,230,150.5,0.23588039867109634,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.119621,0.000347,udp,147.32.84.164,56769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.121923,0.000637,udp,147.32.84.164,53967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,70,182,126.0,0.2777777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.123007,0.005167,udp,147.32.84.164,53180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,76,172,124.0,0.3064516129032258,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.128438,0.010426,udp,147.32.84.164,54196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,354,76,278,177.0,0.21468926553672316,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.131585,0.000212,udp,147.32.84.164,37842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,72,142,107.0,0.3364485981308411,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.149412,0.003171,udp,147.32.84.164,58059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,76,173,124.5,0.30522088353413657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.159346,0.009389,udp,147.32.84.164,33039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.197125,0.00257,udp,147.32.84.164,49531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,70,182,126.0,0.2777777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.206416,0.165549,udp,147.32.84.164,55370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,74,149,111.5,0.33183856502242154,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.218302,0.000343,udp,147.32.84.164,38826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.252892,0.05419,tcp,147.32.84.164,48527.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,19,12067,1069,10998,635.1052631578947,0.08858871301897737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.255321,6.823201,tcp,147.32.84.164,43284.0,->,77.75.77.86,80.0,FSPA_FSPA,0.0,0.0,18,8027,2209,5818,445.94444444444446,0.27519621278186124,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.258938,0.048419,tcp,147.32.84.164,48531.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,13,7308,872,6436,562.1538461538462,0.11932129173508484,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.259223,0.048353,tcp,147.32.84.164,48533.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,14,8460,938,7522,604.2857142857143,0.11087470449172576,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.306590,0.062369,tcp,147.32.84.164,48536.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,15,8186,938,7248,545.7333333333333,0.11458587832885414,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.306739,0.06155,tcp,147.32.84.164,48537.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,14,8416,872,7544,601.1428571428571,0.10361216730038023,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.307307,0.062435,tcp,147.32.84.164,48541.0,->,89.185.254.155,80.0,FSPA_FSA,0.0,0.0,14,6461,938,5523,461.5,0.14517876489707476,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.367390,0.166462,udp,147.32.84.164,42712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,75,172,123.5,0.30364372469635625,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.372766,0.162433,udp,147.32.84.164,48978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,74,218,146.0,0.2534246575342466,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.372953,656.752563,tcp,147.32.84.164,40547.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,42,7503,5043,2460,178.64285714285714,0.6721311475409836,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.390414,0.01742,tcp,147.32.84.164,48549.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,13,7825,872,6953,601.9230769230769,0.11143769968051118,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.407144,0.143325,tcp,147.32.84.164,48555.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,15,9569,872,8697,637.9333333333333,0.09112759954018183,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.414134,0.136347,tcp,147.32.84.164,48558.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,15,7717,938,6779,514.4666666666667,0.12154982506155242,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.528501,0.022492,tcp,147.32.84.164,48561.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,16,10569,938,9631,660.5625,0.08875011827041347,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.549813,0.005013,tcp,147.32.84.164,48564.0,->,89.185.254.155,80.0,FSPA_FSA,0.0,0.0,13,7057,938,6119,542.8461538461538,0.1329176703981862,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.556008,0.122241,tcp,147.32.84.164,48571.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,17,9439,1004,8435,555.2352941176471,0.10636719991524526,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.564198,0.10746,tcp,147.32.84.164,48574.0,->,89.185.254.155,80.0,FSPA_FSPA,0.0,0.0,17,9724,1004,8720,572.0,0.1032496914849856,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.730910,0.00598,udp,147.32.84.164,36940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.731644,0.000416,udp,147.32.84.164,45786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,78,229,153.5,0.254071661237785,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:14.776900,0.006848,tcp,147.32.84.164,48577.0,->,89.185.254.155,80.0,FSPA_FSA,0.0,0.0,10,4220,805,3415,422.0,0.19075829383886256,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:15.317992,0.000282,udp,147.32.84.164,39239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:15.318005,0.000282,udp,147.32.84.164,51146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:15.319074,0.000314,udp,147.32.84.164,36158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:15.319308,4.12736,tcp,147.32.84.164,60719.0,->,74.125.232.198,443.0,SRPA_SPA,0.0,0.0,15,3798,1014,2784,253.2,0.2669826224328594,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:15.885451,5.948917,tcp,66.249.72.233,53918.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1556,720,836,155.6,0.46272493573264784,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:40:17.117680,0.000195,udp,147.32.84.170,41478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:17.118243,0.000464,udp,147.32.84.170,46815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,74,133,103.5,0.357487922705314,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:17.119027,0.000331,udp,147.32.84.170,55791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:17.137617,0.007591,tcp,147.32.84.170,37489.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1695,905,790,169.5,0.5339233038348082,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:19.391954,0.000446,udp,147.32.84.170,53352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:19.719084,7.193223,tcp,147.32.84.164,42332.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,27,10158,6770,3388,376.22222222222223,0.6664697775152589,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:20.721903,0.000157,udp,147.32.84.138,45986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:21.002969,156.277664,tcp,147.32.84.59,51420.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,49,31178,2652,28526,636.2857142857143,0.08505997818974918,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:40:22.532447,0.001793,udp,109.199.230.219,16207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,507,60,283.5,0.8941798941798942,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:23.346177,0.000323,udp,147.32.84.138,34643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:24.777802,0.00047,udp,95.73.89.173,48407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,73,465,269.0,0.13568773234200743,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:25.386769,0.223543,tcp,147.32.84.164,44845.0,->,68.142.83.179,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:27.825296,3141.627441,udp,124.169.252.205,15481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1506,545,961,376.5,0.3618857901726428,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:29.212894,0.000316,udp,147.32.84.138,37065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:29.392028,0.000348,udp,147.32.84.170,58513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:29.394048,0.018409,tcp,147.32.84.170,46652.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:31.820530,0.006485,tcp,147.32.84.170,37501.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1626,880,746,162.6,0.5412054120541205,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:32.508102,0.157808,udp,147.32.86.168,51111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:40:34.274468,0.107901,udp,147.32.84.164,58275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,341,85,256,170.5,0.24926686217008798,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:34.978596,0.010067,udp,147.32.84.164,41419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:35.980333,15.258983,tcp,147.32.84.164,39708.0,->,208.94.117.26,80.0,FSPA_FSPA,0.0,0.0,69,47673,3030,44643,690.9130434782609,0.06355798879869108,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:36.231879,0.061783,udp,94.196.245.112,3104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,672,551,121,168.0,0.8199404761904762,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:36.471739,0.000434,udp,147.32.84.164,42270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:36.473274,0.370338,tcp,147.32.84.164,52180.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,9,1559,777,782,173.22222222222223,0.49839640795381657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:36.484823,14.754749,tcp,147.32.84.164,39716.0,->,208.94.117.26,80.0,FSPA_FSPA,0.0,0.0,47,29901,2038,27863,636.1914893617021,0.06815825557673656,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:37.360352,0.020024,udp,147.32.84.164,34215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,71,130,100.5,0.35323383084577115,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:40:37.435751,1587.367188,udp,147.32.84.229,13363.0,<->,58.70.116.100,3560.0,CON,0.0,0.0,28,1876,1036,840,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:37.625768,0.007056,tcp,147.32.84.170,58718.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2999,1027,1972,272.6363636363636,0.34244748249416473,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:44.630454,2576.148926,udp,206.205.144.221,46388.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1655,224,1431,275.8333333333333,0.13534743202416918,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:46.985058,0.007542,tcp,147.32.84.170,59704.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1683,893,790,168.3,0.5306001188354129,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:48.469944,2978.506836,udp,201.34.87.62,14944.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:48.533293,0.209252,tcp,147.32.84.170,44923.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,12,3571,1071,2500,297.5833333333333,0.29991598991879026,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:48.550836,0.005965,tcp,147.32.84.170,59707.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1671,881,790,167.1,0.5272292040694195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:48.573507,0.007237,tcp,147.32.84.170,44925.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1776,989,787,177.6,0.5568693693693694,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:49.391870,0.000392,udp,147.32.84.170,43985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:49.709564,0.009225,tcp,147.32.84.170,59711.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1597,851,746,159.7,0.532874139010645,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:50.267276,9.1e-05,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,18,1,flow=Background,Background,-1 2011-08-16 18:40:52.142968,0.000376,udp,147.32.84.170,32958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:40:53.132803,0.00103,udp,91.79.5.93,12331.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:40:59.392004,0.000467,udp,147.32.84.170,54142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:09.391838,0.000507,udp,147.32.84.170,51178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:09.392857,0.000356,udp,147.32.84.170,57294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:10.677976,608.017944,udp,67.230.149.19,58494.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,466,342,124,116.5,0.7339055793991416,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:41:11.565742,1.538372,tcp,147.32.84.59,65283.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,29,16013,2253,13760,552.1724137931035,0.1406981827265347,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:41:12.499494,0.000401,udp,147.32.87.223,59273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,102,164,133.0,0.38345864661654133,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:15.041464,0.000388,udp,147.32.84.138,43010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:15.816991,0.000268,udp,66.87.116.102,51909.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:41:19.394068,0.018156,tcp,147.32.84.170,49245.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:22.836793,0.000389,udp,112.119.194.57,39407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:41:23.043515,0.232667,tcp,147.32.84.170,52427.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:29.394885,0.018196,tcp,147.32.84.170,57356.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:33.013816,0.000164,udp,147.32.85.25,48688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:36.499868,0.000368,udp,85.177.138.247,23856.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:41:37.084823,0.000245,udp,147.32.85.34,57059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:39.392388,0.000411,udp,147.32.84.170,39689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:39.394350,0.018886,tcp,147.32.84.170,40285.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:41:44.375163,0.000279,udp,147.32.86.20,54585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:50.007426,64.376572,tcp,147.32.86.17,1560.0,->,209.85.149.103,80.0,SRPA_SPA,0.0,0.0,8,1699,1161,538,212.375,0.683343143025309,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:41:52.486255,0.000217,udp,147.32.84.138,60840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:41:55.975967,6.530219,tcp,66.249.72.116,48752.0,->,147.32.84.2,443.0,FSRPA_FSPA,0.0,0.0,24,9408,1529,7879,392.0,0.16252125850340135,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:41:58.187895,0.207495,tcp,147.32.86.20,1869.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,33761,1149,32612,785.1395348837209,0.034033352092651285,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:41:59.239040,0.000119,tcp,147.32.80.7,39076.0,->,147.32.85.34,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:41:59.439258,2620.359863,udp,147.32.84.94,7103.0,->,151.67.229.46,7167.0,INT,0.0,,13,1092,1092,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:42:00.396667,1236.409058,udp,89.46.15.162,46883.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1104,158,946,276.0,0.1431159420289855,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:05.651331,0.542926,udp,192.168.88.138,58809.0,->,192.168.95.255,137.0,INT,0.0,,3,276,276,0,92.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:42:06.412778,0.117846,tcp,147.32.85.34,55148.0,->,147.32.80.7,25.0,FSPA_FSPA,0.0,0.0,20,2595,1396,1199,129.75,0.5379576107899807,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:42:09.989360,1752.592651,udp,90.146.177.175,24197.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3285,122,3163,547.5,0.03713850837138508,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:12.683963,3587.706787,udp,147.32.84.94,7103.0,<->,188.40.108.69,50012.0,CON,0.0,0.0,762,632934,14256,618678,830.6220472440945,0.02252367545431277,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:13.770884,6.358378,tcp,66.249.72.50,63400.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18000,1883,16117,580.6451612903226,0.10461111111111111,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:42:14.508320,0.000784,tcp,208.69.59.148,50634.0,->,147.32.87.22,21.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:42:17.959105,3063.183838,udp,203.136.7.66,61180.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:18.763841,0.002341,udp,147.32.85.6,58984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,77,207,142.0,0.2711267605633803,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:19.392171,0.000345,udp,147.32.84.170,48641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:19.394077,0.018389,tcp,147.32.84.170,57362.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:21.304888,0.000311,udp,147.32.84.59,34639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:22.898399,0.000439,udp,178.3.96.31,26855.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,255,193,62,127.5,0.7568627450980392,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:23.042137,2882.140625,udp,147.32.84.94,7103.0,->,165.97.21.132,7319.0,INT,0.0,,8,672,672,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:42:25.035090,0.305316,tcp,147.32.84.170,52435.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:25.752205,3031.078613,udp,77.231.135.124,40470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:26.400664,0.000529,udp,147.32.84.138,43844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:26.653520,0.010092,udp,147.32.86.111,52281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,74,141,107.5,0.34418604651162793,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:28.732405,701.079712,udp,147.32.84.229,13363.0,<->,137.110.133.124,42481.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:29.041163,0.000304,udp,147.32.84.170,60525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,74,150,112.0,0.33035714285714285,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:29.041893,0.000298,udp,147.32.84.170,41947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:29.394309,0.017926,tcp,147.32.84.170,60379.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.843743,0.000323,udp,147.32.84.170,41139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.844511,0.007251,tcp,147.32.84.170,44948.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2982,1020,1962,271.09090909090907,0.3420523138832998,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.869622,0.000341,udp,147.32.84.170,40719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.871239,0.007296,tcp,147.32.84.170,59732.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1616,870,746,161.6,0.5383663366336634,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.881481,0.000353,udp,147.32.84.170,33441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.883078,0.000206,udp,147.32.84.170,55895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:31.883673,0.000338,udp,147.32.84.170,34010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:32.118002,0.00182,udp,190.152.131.154,14294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:36.165967,0.008543,tcp,147.32.84.170,59735.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1680,890,790,168.0,0.5297619047619048,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:38.815026,0.000227,udp,147.32.86.20,55974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:39.392197,0.000482,udp,147.32.84.170,52113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:41.215551,0.007472,tcp,147.32.84.170,59742.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1701,911,790,170.1,0.5355673133450911,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:41.252576,0.000269,udp,147.32.86.20,63251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:42.865687,0.000292,udp,147.32.85.34,50749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:44.231319,0.000361,udp,147.32.85.34,63792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,556,69,487,278.0,0.12410071942446044,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:42:46.185489,3339.834961,udp,82.143.206.103,18466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1526,1084,442,127.16666666666667,0.7103538663171691,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:42:49.392370,0.000321,udp,147.32.84.170,55970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:49.393188,0.000306,udp,147.32.84.170,59468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:51.003379,0.206418,tcp,147.32.86.20,1906.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31212,1089,30123,780.3,0.03489042675893887,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:42:53.424579,0.006593,tcp,147.32.84.170,59746.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1632,886,746,163.2,0.5428921568627451,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:56.029332,0.241529,tcp,147.32.84.170,52455.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:57.248380,0.007176,tcp,147.32.84.170,44970.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3008,1034,1974,273.45454545454544,0.34375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:57.261016,0.01028,tcp,147.32.84.170,59754.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1704,914,790,170.4,0.5363849765258216,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:42:59.394635,0.000272,udp,147.32.84.170,34057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:01.264320,0.000195,udp,147.32.87.223,51066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,101,163,132.0,0.38257575757575757,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:02.964248,0.007043,tcp,147.32.84.170,44974.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3010,1034,1976,273.6363636363636,0.34352159468438537,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:03.425993,0.000206,udp,147.32.84.138,37245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:05.467609,141.008606,udp,95.169.214.221,56837.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,620,401,219,103.33333333333333,0.646774193548387,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:05.791432,134.973557,udp,80.95.18.111,61169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,495,345,150,123.75,0.696969696969697,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:09.392019,0.000505,udp,147.32.84.170,47428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:09.393107,0.000375,udp,147.32.84.170,50259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:09.394295,0.018526,tcp,147.32.84.170,60410.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:13.373892,0.2843,tcp,147.32.84.170,33754.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:13.430932,0.64089,tcp,147.32.84.170,47866.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:15.786692,0.000197,udp,147.32.84.138,44877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:19.393680,0.000285,udp,147.32.84.170,33723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:19.394724,0.01841,tcp,147.32.84.170,40330.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:29.393364,0.000285,udp,147.32.84.170,53086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:29.603483,0.000498,udp,147.32.84.164,46466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,71,214,142.5,0.24912280701754386,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.603742,0.000564,udp,147.32.84.164,43446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,76,155,115.5,0.329004329004329,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.603831,0.000552,udp,147.32.84.164,40426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.604329,0.000525,udp,147.32.84.164,60511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,71,218,144.5,0.24567474048442905,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.604616,0.000747,udp,147.32.84.164,47317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605187,0.00022,udp,147.32.84.164,38399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605306,11.492307,tcp,147.32.84.164,56692.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605357,11.650955,tcp,147.32.84.164,49498.0,->,72.233.69.4,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605366,11.488557,tcp,147.32.84.164,34354.0,->,81.31.45.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605413,11.488517,tcp,147.32.84.164,34355.0,->,81.31.45.72,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605514,0.118599,tcp,147.32.84.164,35581.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,10,1732,1169,563,173.2,0.6749422632794457,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.605518,0.000344,udp,147.32.84.164,57189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.606705,11.487378,tcp,147.32.84.164,38078.0,->,77.93.192.144,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:29.962428,0.00021,udp,147.32.84.138,35311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:30.229782,0.000265,udp,147.32.84.164,37281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,71,158,114.5,0.31004366812227074,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:43:31.443076,0.053993,udp,147.32.84.229,13363.0,<->,91.218.72.19,6446.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:31.966875,0.00027,udp,147.32.84.170,55938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:31.970493,0.000359,udp,147.32.84.170,48687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:31.971153,0.000377,udp,147.32.84.170,52140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:32.483336,0.000308,udp,147.32.84.170,42868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:32.619803,0.000235,udp,147.32.85.25,51845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:33.991447,0.000282,udp,147.32.84.186,53496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:35.058889,133.103516,tcp,147.32.84.170,44995.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,4804,2043,2761,228.76190476190476,0.425270607826811,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:35.390042,0.196467,udp,147.32.84.229,13363.0,<->,76.175.63.108,36471.0,CON,0.0,0.0,2,149,83,66,74.5,0.5570469798657718,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:37.388148,0.000571,udp,78.183.8.96,13752.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,77,496,286.5,0.1343804537521815,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:39.393159,0.000349,udp,147.32.84.170,44905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:39.485350,0.007045,tcp,147.32.84.170,59783.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1616,870,746,161.6,0.5383663366336634,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:40.017841,0.000389,udp,201.229.240.71,53366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:43:40.567307,0.000234,udp,147.32.86.20,65252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:40.708549,6.01007,udp,147.32.84.229,13363.0,->,124.11.192.194,29591.0,INT,0.0,,3,246,246,0,82.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:43:42.143313,132.857452,tcp,147.32.84.170,45002.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,4811,2042,2769,229.0952380952381,0.4244439825400125,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:42.168373,139.39328,tcp,147.32.84.170,45004.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,4774,2035,2739,227.33333333333334,0.42626728110599077,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:49.447851,0.00765,tcp,147.32.84.170,59790.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1734,944,790,173.4,0.544405997693195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:51.994123,72.327263,tcp,121.12.169.234,80.0,->,147.32.84.48,12870.0,SA_R,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:43:52.327503,0.000163,udp,147.32.84.138,58646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:43:53.614130,136.082779,tcp,147.32.84.170,45009.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,22,6545,2058,4487,297.5,0.3144385026737968,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:53.627680,0.006555,tcp,147.32.84.170,59793.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1710,920,790,171.0,0.5380116959064327,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:59.332869,0.00692,tcp,147.32.84.170,59801.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1701,911,790,170.1,0.5355673133450911,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:59.392315,0.000372,udp,147.32.84.170,49964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:43:59.394343,0.018296,tcp,147.32.84.170,60453.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:00.308159,0.000227,udp,147.32.85.34,54090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:01.967619,0.000324,udp,147.32.84.164,36687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.967693,0.000312,udp,147.32.84.164,38144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.967839,0.011288,tcp,147.32.84.164,44452.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,17,10512,1087,9425,618.3529411764706,0.10340563165905632,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.968120,0.006433,tcp,147.32.84.164,44456.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,2013,944,1069,201.3,0.4689518132141083,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.968490,0.002866,udp,147.32.84.164,44589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,83,137,110.0,0.37727272727272726,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.968643,0.002769,udp,147.32.84.164,48686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.968727,0.000926,udp,147.32.84.164,44074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.968734,0.040487,udp,147.32.84.164,34142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,77,210,143.5,0.2682926829268293,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.970168,19.232584,tcp,147.32.84.164,53099.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,11,1756,859,897,159.63636363636363,0.4891799544419134,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.971924,0.002163,udp,147.32.84.164,44207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,77,232,154.5,0.24919093851132687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.973165,0.009513,tcp,147.32.84.164,44460.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,13,7208,1008,6200,554.4615384615385,0.13984461709211987,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.973820,0.009111,tcp,147.32.84.164,44462.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,2531,940,1591,253.1,0.37139470564994076,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.975365,0.056266,tcp,147.32.84.164,33313.0,->,46.243.48.66,80.0,FSPA_FSPA,0.0,0.0,12,2355,1029,1326,196.25,0.4369426751592357,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:01.977220,0.009775,tcp,147.32.84.164,44469.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1775,933,842,177.5,0.5256338028169014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.164445,0.019677,udp,147.32.84.164,50201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,88,144,116.0,0.3793103448275862,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.164945,0.005105,tcp,147.32.84.164,44478.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1810,935,875,181.0,0.5165745856353591,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.170221,78.9272,tcp,147.32.84.164,37153.0,->,46.243.48.90,80.0,FSPA_FSPA,0.0,0.0,13,2069,1076,993,159.15384615384616,0.5200579990333495,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.170225,88.926704,tcp,147.32.84.164,37154.0,->,46.243.48.90,80.0,FSPA_FSPA,0.0,0.0,118,105019,5356,99663,889.9915254237288,0.05100029518468087,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.179742,78.917313,tcp,147.32.84.164,53993.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,37,23218,2954,20264,627.5135135135135,0.12722887414936687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.184426,0.000153,udp,147.32.84.164,35804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,88,144,116.0,0.3793103448275862,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.184866,0.001872,udp,147.32.84.164,36708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,88,245,166.5,0.26426426426426425,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.186673,0.005659,tcp,147.32.84.164,44484.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1752,943,809,175.2,0.53824200913242,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.186742,0.012034,tcp,147.32.84.164,44485.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,34,26649,1542,25107,783.7941176470588,0.05786333445907914,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.186854,0.008707,tcp,147.32.84.164,44486.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,25,13938,1400,12538,557.52,0.10044482709140479,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.187744,78.909378,tcp,147.32.84.164,54002.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,1420,1534364,28967,1505397,1080.538028169014,0.018878831880831407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.192606,0.015504,tcp,147.32.84.164,44496.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,11,5380,946,4434,489.09090909090907,0.1758364312267658,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.194440,0.013866,tcp,147.32.84.164,44497.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,12,5222,1007,4215,435.1666666666667,0.19283799310608962,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.197645,0.01154,tcp,147.32.84.164,44499.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1915,936,979,191.5,0.48877284595300263,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.203236,0.016757,tcp,147.32.84.164,44501.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1628,936,692,162.8,0.5749385749385749,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.206104,0.025667,tcp,147.32.84.164,44502.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1627,935,692,162.7,0.5746773202212662,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.207108,0.025848,tcp,147.32.84.164,44503.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1914,944,970,191.4,0.49320794148380354,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.207362,0.025694,tcp,147.32.84.164,44504.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,1642,936,706,164.2,0.5700365408038977,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.262936,0.003314,udp,147.32.84.164,53735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.270180,0.00283,udp,147.32.84.164,32935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.275887,0.000333,udp,147.32.84.164,53788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.278269,0.003466,udp,147.32.84.164,47063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.284261,0.003564,udp,147.32.84.164,41625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,80,235,157.5,0.25396825396825395,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.286676,0.002773,udp,147.32.84.164,56955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.293175,0.00262,udp,147.32.84.164,37875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,77,232,154.5,0.24919093851132687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.297487,0.000489,udp,147.32.84.164,59777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,75,129,102.0,0.36764705882352944,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.298809,0.002243,udp,147.32.84.164,38611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,70,131,100.5,0.3482587064676617,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.299729,0.002227,udp,147.32.84.164,33691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.305774,0.03942,udp,147.32.84.164,37347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,75,145,110.0,0.3409090909090909,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.333428,0.000388,udp,147.32.84.164,36123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.339842,78.757103,tcp,147.32.84.164,54021.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,22,10334,1206,9128,469.72727272727275,0.1167021482485001,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.339978,78.756973,tcp,147.32.84.164,54024.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,22,11816,1135,10681,537.0909090909091,0.09605619498984427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.341590,0.002376,udp,147.32.84.164,34847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,77,232,154.5,0.24919093851132687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.352584,0.037141,udp,147.32.84.164,39909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,79,234,156.5,0.2523961661341853,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.359858,0.009965,udp,147.32.84.164,60658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.360381,0.001578,udp,147.32.84.164,49966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.362311,0.000285,udp,147.32.84.164,46292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.362771,0.001891,udp,147.32.84.164,35209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,74,229,151.5,0.24422442244224424,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.547549,0.002498,udp,147.32.84.164,45679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,442,79,363,221.0,0.17873303167420815,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.721125,0.000252,udp,147.32.84.164,44360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:02.870302,0.001848,udp,147.32.84.164,53242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,71,226,148.5,0.23905723905723905,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.104039,7.988526,tcp,147.32.84.164,60015.0,->,46.243.48.233,80.0,FSPA_FSPA,0.0,0.0,55,43789,4595,39194,796.1636363636363,0.10493502934526935,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.149230,37.950554,tcp,147.32.84.164,43789.0,->,80.239.149.27,80.0,FSPA_FSRPA,0.0,0.0,13,5652,879,4773,434.7692307692308,0.15552016985138004,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.171269,0.002142,udp,147.32.84.164,37982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,84,140,112.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.172820,77.923851,tcp,147.32.84.164,37198.0,->,46.243.48.90,80.0,FSPA_FSPA,0.0,0.0,28,17389,1238,16151,621.0357142857143,0.07119443326240726,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.173469,0.000253,udp,147.32.84.164,60393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.205884,0.0003,udp,147.32.84.164,56663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,79,135,107.0,0.3691588785046729,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.205895,0.002089,udp,147.32.84.164,55304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,79,236,157.5,0.2507936507936508,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.212206,77.884216,tcp,147.32.84.164,37200.0,->,46.243.48.90,80.0,FSPA_FSPA,0.0,0.0,17,6901,975,5926,405.94117647058823,0.14128387190262282,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.229291,7.863278,tcp,147.32.84.164,60021.0,->,46.243.48.233,80.0,FSPA_FSPA,0.0,0.0,11,1497,833,664,136.0909090909091,0.5564462257849031,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.230645,0.002417,udp,147.32.84.164,51882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.232589,0.023074,udp,147.32.84.164,37029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,78,134,106.0,0.36792452830188677,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.247556,0.022795,udp,147.32.84.164,41319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,78,134,106.0,0.36792452830188677,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.255983,0.001842,udp,147.32.84.164,43767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,78,134,106.0,0.36792452830188677,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.258775,0.001899,udp,147.32.84.164,41093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,78,235,156.5,0.24920127795527156,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.269277,17.823429,tcp,147.32.84.164,37208.0,->,46.243.48.90,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.271198,0.022882,udp,147.32.84.164,54511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,78,235,156.5,0.24920127795527156,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.806490,0.002227,udp,147.32.84.164,54059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,83,259,171.0,0.24269005847953215,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.813198,0.00038,udp,147.32.84.164,52600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,424,75,349,212.0,0.17688679245283018,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.816384,0.003453,udp,147.32.84.164,47392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.820071,0.000251,udp,147.32.84.164,39771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.826079,77.271034,tcp,147.32.84.164,54065.0,->,46.243.48.231,80.0,FSPA_FSPA,0.0,0.0,18,7093,1057,6036,394.05555555555554,0.14902016072183843,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:03.860361,0.201859,tcp,147.32.84.164,44557.0,->,46.243.48.68,80.0,FSPA_FSPA,0.0,0.0,10,2041,907,1134,204.1,0.44439000489955904,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:09.395417,0.018381,tcp,147.32.84.170,49336.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:13.471971,0.000524,udp,79.132.190.146,9927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:44:14.415733,0.000272,udp,147.32.84.59,58781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:14.453091,0.00034,udp,147.32.84.59,51240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:14.668389,0.000322,udp,147.32.84.59,46393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:15.173088,0.006397,tcp,147.32.84.170,59812.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1700,910,790,170.0,0.5352941176470588,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:17.248076,0.007277,tcp,147.32.84.170,45031.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2993,1025,1968,272.09090909090907,0.3424657534246575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:17.278687,0.005621,tcp,147.32.84.170,59815.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1693,903,790,169.3,0.5333727111636148,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:18.154952,0.00025,udp,147.32.84.164,50750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.155795,0.000272,udp,147.32.84.164,57413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.811846,2.123444,tcp,147.32.84.164,48824.0,->,209.85.148.147,80.0,FSRPA_FSPA,0.0,0.0,67,42214,5441,36773,630.0597014925373,0.12889088927843842,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.811902,12.289704,tcp,147.32.84.164,48825.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.817132,0.000236,udp,147.32.84.164,53625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.817622,0.000219,udp,147.32.84.164,33167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:18.819769,0.000341,udp,147.32.85.25,54335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:18.999571,0.000198,udp,147.32.84.164,39237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,77,124,100.5,0.38308457711442784,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.000706,0.052645,udp,147.32.84.164,35998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,77,175,126.0,0.3055555555555556,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.201026,0.019754,udp,147.32.84.164,54648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.219137,0.24696,udp,147.32.84.164,45014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.227384,0.00027,udp,147.32.84.164,43819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.259706,0.00032,udp,147.32.84.164,39984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.261852,0.000381,udp,147.32.84.164,49494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.286135,0.000334,udp,147.32.84.164,32852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:19.395285,0.000325,udp,147.32.84.170,49637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:19.466261,0.246424,udp,147.32.84.164,36916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.049082,0.000332,udp,147.32.84.164,43994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.049747,0.000247,udp,147.32.84.164,40620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.053692,0.000253,udp,147.32.84.164,55438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.054279,0.000166,udp,147.32.84.164,37748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.055371,0.000197,udp,147.32.84.164,39944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.056383,0.000304,udp,147.32.84.164,42818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,67,132,99.5,0.33668341708542715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.058253,0.019744,udp,147.32.84.164,41168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,87,161,124.0,0.35080645161290325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:20.472413,0.000316,udp,147.32.84.164,49091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,69,132,100.5,0.34328358208955223,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:21.452606,0.078786,udp,147.32.84.164,47221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:21.531721,0.035906,udp,147.32.84.164,37725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,73,185,129.0,0.28294573643410853,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.198541,0.000405,udp,147.32.84.164,45605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.199250,0.000304,udp,147.32.84.164,46572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.256207,18.871414,tcp,147.32.84.164,58729.0,->,83.223.83.68,80.0,FSPA_FSPA,0.0,0.0,258,208363,12758,195605,807.6085271317829,0.061229680893440774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.256277,18.871637,tcp,147.32.84.164,58730.0,->,83.223.83.68,80.0,FSPA_FSPA,0.0,0.0,74,50248,7565,42683,679.027027027027,0.15055325585097915,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.774007,0.42307,udp,147.32.84.164,50957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,289,91,198,144.5,0.314878892733564,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:22.924836,0.239642,udp,147.32.84.164,38833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,76,211,143.5,0.26480836236933797,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:23.593260,0.006564,tcp,147.32.84.170,45035.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2995,1025,1970,272.27272727272725,0.34223706176961605,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:23.620552,0.008544,tcp,147.32.84.170,45037.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1796,1009,787,179.6,0.561804008908686,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:24.203881,0.000296,udp,147.32.84.164,48778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:24.205164,0.000303,udp,147.32.84.164,41098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,77,232,154.5,0.24919093851132687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:28.073665,0.000228,udp,147.32.84.164,46753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:28.074833,0.000308,udp,147.32.84.164,55363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:30.059517,0.000262,udp,147.32.84.164,32830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:30.060090,0.000344,udp,147.32.84.164,35800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:31.562075,152.15387,tcp,147.32.84.170,45043.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,22,6534,2053,4481,297.0,0.31420263238445056,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:31.580574,152.187119,tcp,147.32.84.170,45045.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,20,3595,2021,1574,179.75,0.5621696801112657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.904207,0.000621,udp,147.32.84.170,47335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,70,136,103.0,0.33980582524271846,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.905983,0.000302,udp,147.32.84.170,55366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.932412,0.000163,udp,147.32.84.170,36754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.933399,0.0002,udp,147.32.84.170,47108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.934461,0.000336,udp,147.32.84.170,53569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:36.935029,0.000191,udp,147.32.84.170,37322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:39.093208,0.000252,udp,147.32.84.164,54450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,66,131,98.5,0.3350253807106599,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:44:39.110601,0.0,tcp,147.32.84.165,1536.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.112324,0.0,tcp,147.32.84.165,1537.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.120843,0.0,tcp,147.32.84.165,1539.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.276451,0.0,tcp,147.32.84.165,1540.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.291870,0.0,tcp,147.32.84.165,1541.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.292719,0.0,tcp,147.32.84.165,1543.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.476874,0.0,tcp,147.32.84.165,1544.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:39.477031,0.0,tcp,147.32.84.165,1545.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:40.004544,9.035829,tcp,94.197.127.226,40735.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,600,234,366,75.0,0.39,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:44:40.288099,0.0,tcp,147.32.84.165,1548.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:41.089198,0.0,tcp,147.32.84.165,1551.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:47.040310,0.000258,udp,147.32.84.138,41157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:47.283079,0.005983,tcp,147.32.84.170,45050.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2988,1023,1965,271.6363636363636,0.34236947791164657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:47.305573,0.006408,tcp,147.32.84.170,59834.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1619,873,746,161.9,0.5392217418159357,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:47.316485,0.010175,tcp,147.32.84.170,45052.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1794,1007,787,179.4,0.5613154960981048,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:49.111999,3.990921,tcp,79.153.32.210,51542.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1543,852,691,77.15,0.5521710952689566,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:44:49.392424,0.000348,udp,147.32.84.170,33748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:49.394488,0.017958,tcp,147.32.84.170,35012.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:52.907085,0.0,tcp,147.32.84.165,1773.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:52.907264,0.0,tcp,147.32.84.165,1772.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:52.907269,0.0,tcp,147.32.84.165,1775.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:52.907273,0.0,tcp,147.32.84.165,1777.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:52.907331,0.0,tcp,147.32.84.165,1776.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:52.907341,0.0,tcp,147.32.84.165,1779.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:53.507558,0.0,tcp,147.32.84.165,1785.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:44:53.965430,0.000265,udp,147.32.84.138,45169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:54.419188,0.00019,udp,147.32.84.138,53446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:44:57.927060,0.007037,tcp,147.32.84.170,59841.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1668,878,790,166.8,0.526378896882494,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:59.393270,0.000338,udp,147.32.84.170,54995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:59.496118,0.006291,tcp,147.32.84.170,59845.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1606,860,746,160.6,0.5354919053549191,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:59.521344,145.217255,tcp,147.32.84.170,45063.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,20,3569,1995,1574,178.45,0.5589801064724013,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:44:59.744380,0.612792,tcp,147.32.84.164,48269.0,->,199.59.149.232,80.0,FSPA_FSPA,0.0,0.0,11,2905,1464,1441,264.09090909090907,0.5039586919104991,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:00.057864,0.039248,tcp,147.32.84.164,35741.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:01.599125,147.668304,tcp,147.32.84.170,45067.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,5309,2017,3292,252.8095238095238,0.37992088905631943,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:04.707731,0.000568,udp,187.85.213.33,10671.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,632,76,556,316.0,0.12025316455696203,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:45:04.924581,0.0,tcp,147.32.84.165,2012.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:04.924651,0.0,tcp,147.32.84.165,2015.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:04.924656,0.0,tcp,147.32.84.165,2013.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:04.924752,0.0,tcp,147.32.84.165,2016.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:04.924757,0.0,tcp,147.32.84.165,2019.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:04.924807,0.0,tcp,147.32.84.165,2017.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:05.525003,0.0,tcp,147.32.84.165,2024.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:05.525094,0.0,tcp,147.32.84.165,2027.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:06.500556,0.000519,udp,147.32.84.164,59974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:06.503366,0.000256,udp,147.32.84.164,37239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:06.503370,0.000452,udp,147.32.84.164,37064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,77,197,137.0,0.28102189781021897,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:07.292834,0.007357,tcp,147.32.84.170,45068.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2984,1018,1966,271.27272727272725,0.34115281501340483,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:07.569811,7.146229,tcp,147.32.84.170,59854.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,11,1733,987,746,157.54545454545453,0.569532602423543,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:07.907605,0.254976,tcp,147.32.84.13,51079.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,2839,825,2014,236.58333333333334,0.2905952800281789,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:45:09.393475,0.000441,udp,147.32.84.170,34877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:09.394444,0.000401,udp,147.32.84.170,56503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:12.800516,141.748825,tcp,147.32.84.170,45077.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,5341,2043,3298,254.33333333333334,0.38251263808275604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:14.492878,0.00027,udp,147.32.84.170,44682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:16.308345,384.009918,udp,147.32.84.94,7103.0,->,217.156.203.253,59015.0,INT,0.0,,5,420,420,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:45:16.941700,0.0,tcp,147.32.84.165,2253.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.941716,0.0,tcp,147.32.84.165,2252.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.941722,0.0,tcp,147.32.84.165,2255.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.941728,0.0,tcp,147.32.84.165,2257.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.941788,0.0,tcp,147.32.84.165,2256.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.941833,0.0,tcp,147.32.84.165,2259.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:16.942589,0.0,tcp,147.32.84.165,2261.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:17.542133,0.0,tcp,147.32.84.165,2264.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:18.512772,140.443832,tcp,147.32.84.170,45081.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,22,6560,2061,4499,298.1818181818182,0.31417682926829266,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:18.546852,0.008177,tcp,147.32.84.170,59865.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1699,909,790,169.9,0.5350206003531489,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:20.059002,0.038099,tcp,147.32.84.164,35743.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:23.914089,0.007451,tcp,147.32.84.170,59869.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1687,897,790,168.7,0.5317131001778305,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:24.187569,0.113762,tcp,88.131.106.22,22547.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1590,782,808,159.0,0.4918238993710692,18,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 18:45:25.389941,0.648311,tcp,147.32.84.164,35331.0,->,118.107.172.76,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.349304,0.000293,udp,147.32.84.164,58052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,82,136,109.0,0.3761467889908257,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.349930,0.000169,udp,147.32.84.164,47903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,82,136,109.0,0.3761467889908257,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.350394,0.000272,udp,147.32.84.164,46234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,82,237,159.5,0.25705329153605017,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.358352,0.000288,udp,147.32.84.164,42318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,80,134,107.0,0.37383177570093457,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.358746,0.000195,udp,147.32.84.164,33418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,80,134,107.0,0.37383177570093457,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:27.358753,0.000302,udp,147.32.84.164,43472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,75,195,135.0,0.2777777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:28.141830,0.000318,udp,147.32.85.89,40831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:28.958715,0.0,tcp,147.32.84.165,2495.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:28.958814,0.0,tcp,147.32.84.165,2493.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:28.958898,0.0,tcp,147.32.84.165,2492.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:28.958904,0.0,tcp,147.32.84.165,2499.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:28.958948,0.0,tcp,147.32.84.165,2497.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:28.959044,0.0,tcp,147.32.84.165,2496.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:29.367971,0.000475,udp,78.40.254.44,23969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:45:29.559981,0.0,tcp,147.32.84.165,2507.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:29.560063,0.0,tcp,147.32.84.165,2505.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:30.059542,0.037543,tcp,147.32.84.164,44473.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:31.040960,0.000283,udp,147.32.84.170,39339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:31.279361,0.009604,tcp,147.32.84.170,59877.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1636,890,746,163.6,0.5440097799511002,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:35.220617,3.310971,tcp,208.98.15.10,80.0,->,147.32.86.122,20809.0,SA_,0.0,,2,124,124,0,62.0,1.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:45:35.920841,0.000333,udp,147.32.86.111,64972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:36.382379,0.006453,udp,87.198.47.25,23005.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3037,60,2977,759.25,0.01975633849193283,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:45:36.635330,0.000253,udp,147.32.84.138,45675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:38.324186,0.001337,udp,86.184.211.148,3348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,74,469,271.5,0.13627992633517497,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:45:38.385746,0.207178,tcp,147.32.86.20,2031.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,32687,1089,31598,797.2439024390244,0.0333159971854254,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:45:38.631409,0.000195,udp,147.32.84.170,55097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.631806,0.000276,udp,147.32.84.170,39573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.631978,0.00022,udp,147.32.84.170,42320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.632027,132.65567,tcp,147.32.84.170,45098.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,5356,2043,3313,255.04761904761904,0.38144137415982077,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.632271,0.000354,udp,147.32.84.170,45961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.633280,0.000303,udp,147.32.84.170,60408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:38.633999,0.000291,udp,147.32.84.170,51738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,76,192,134.0,0.2835820895522388,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:39.254349,0.020667,udp,147.32.84.164,53807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:39.393566,0.019579,udp,147.32.84.170,44232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:39.414741,0.018305,tcp,147.32.84.170,40445.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:39.938458,0.00024,udp,147.32.84.59,58301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:40.061475,0.000255,udp,147.32.84.164,54504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:40.863797,0.657619,tcp,147.32.86.194,4327.0,->,90.183.38.65,995.0,FSPA_FSPA,0.0,0.0,143,108549,3971,104578,759.083916083916,0.03658255718615556,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:45:40.887179,0.000212,udp,147.32.85.25,34802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:40.975949,0.0,tcp,147.32.84.165,2687.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:40.975956,0.0,tcp,147.32.84.165,2689.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:40.976041,0.0,tcp,147.32.84.165,2690.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:40.976048,0.0,tcp,147.32.84.165,2692.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:40.976129,0.0,tcp,147.32.84.165,2693.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:41.577499,0.0,tcp,147.32.84.165,2698.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:45.666682,128.197403,tcp,147.32.84.170,45103.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,21,5392,2063,3329,256.76190476190476,0.38260385756676557,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:45.687950,0.007209,tcp,147.32.84.170,59887.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1649,903,746,164.9,0.5476046088538509,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:46.398429,0.000205,udp,147.32.84.21,52970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:48.215492,0.000285,udp,147.32.84.164,34256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,76,196,136.0,0.27941176470588236,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:49.395738,0.017888,tcp,147.32.84.170,37685.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:50.060870,0.036296,tcp,147.32.84.164,44476.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:45:52.993339,0.0,tcp,147.32.84.165,2867.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:52.993354,0.0,tcp,147.32.84.165,2869.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:52.993411,0.0,tcp,147.32.84.165,2870.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:52.993417,0.0,tcp,147.32.84.165,2872.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:52.993583,0.0,tcp,147.32.84.165,2873.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:52.993596,0.0,tcp,147.32.84.165,2875.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:53.594890,0.0,tcp,147.32.84.165,2876.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:45:54.964064,0.007476,tcp,147.32.84.170,45000.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2960,1004,1956,269.09090909090907,0.33918918918918917,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:45:56.431105,0.000385,udp,147.32.85.25,49356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:57.955522,0.000248,udp,147.32.84.138,56542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:45:59.394434,0.000267,udp,147.32.84.170,34154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:01.094443,0.000325,udp,147.32.85.34,58444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:01.489436,0.043831,tcp,147.32.84.164,44479.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2994,1863,1131,249.5,0.6222444889779559,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.030004,851.633606,udp,111.240.53.232,20803.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,983,618,365,163.83333333333334,0.6286876907426246,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:02.042855,0.000196,udp,147.32.84.170,53452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:02.381286,0.000325,udp,147.32.84.164,53250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.381292,0.000394,udp,147.32.84.164,35427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.382116,0.000659,udp,147.32.84.164,44049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,75,126,100.5,0.373134328358209,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.382916,248.740128,tcp,147.32.84.164,57649.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,29,6531,4944,1587,225.20689655172413,0.7570050528249885,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.591471,0.000323,udp,147.32.84.164,42197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,86,142,114.0,0.37719298245614036,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.838176,0.000165,udp,147.32.84.164,47811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,66,122,94.0,0.35106382978723405,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.844417,18.275356,tcp,147.32.84.164,36763.0,->,95.168.214.66,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.844428,18.27529,tcp,147.32.84.164,36764.0,->,95.168.214.66,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.844480,28.256332,tcp,147.32.84.164,36765.0,->,95.168.214.66,80.0,FSPA_FSPA,0.0,0.0,15,4110,987,3123,274.0,0.24014598540145984,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.845083,0.000494,udp,147.32.84.164,57923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,74,173,123.5,0.29959514170040485,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.860940,18.242783,tcp,147.32.84.164,57225.0,->,81.31.45.72,80.0,FSPA_FSPA,0.0,0.0,49,34136,2566,31570,696.6530612244898,0.07516990860089055,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.861234,18.242479,tcp,147.32.84.164,57226.0,->,81.31.45.72,80.0,FSPA_FSPA,0.0,0.0,165,166850,4031,162819,1011.2121212121212,0.024159424632903805,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.862815,0.008256,udp,147.32.84.164,53693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,80,429,254.5,0.15717092337917485,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.887898,0.00178,udp,147.32.84.164,45645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,174,87,87,87.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.894325,0.020245,udp,147.32.84.164,47712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.958119,240.037445,tcp,147.32.84.164,47589.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,26,2513,1417,1096,96.65384615384616,0.5638678869876641,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.962641,0.017049,udp,147.32.84.164,57197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:02.968491,0.000327,udp,147.32.84.164,39341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:03.009149,0.000385,udp,147.32.84.164,55714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,75,161,118.0,0.3177966101694915,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:03.758779,0.000438,udp,147.32.84.164,42197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:04.080671,17.019966,tcp,147.32.84.164,36775.0,->,95.168.214.66,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:04.151095,0.000273,udp,147.32.84.164,45817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,69,154,111.5,0.3094170403587444,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:04.181136,2458.766357,udp,147.32.84.94,7103.0,<->,213.3.26.155,7139.0,CON,0.0,0.0,86,70970,69680,1290,825.2325581395348,0.9818233056220939,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:04.709581,0.000509,udp,147.32.84.164,47652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:04.727003,306.399323,tcp,147.32.84.164,56467.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,30,5556,4054,1502,185.2,0.7296616270698344,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:04.747359,0.009181,tcp,147.32.84.164,45294.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2198,1190,1008,244.22222222222223,0.5414012738853503,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:05.010569,0.0,tcp,147.32.84.165,3049.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.010667,0.0,tcp,147.32.84.165,3047.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.010675,0.0,tcp,147.32.84.165,3052.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.010758,0.0,tcp,147.32.84.165,3050.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.010765,0.0,tcp,147.32.84.165,3055.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.611755,0.0,tcp,147.32.84.165,3056.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.611774,0.0,tcp,147.32.84.165,3058.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:05.956875,0.000367,udp,147.32.84.164,36766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:06.233672,0.019877,udp,147.32.84.164,37647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:06.253729,0.010211,udp,147.32.84.164,45316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:06.702319,0.000244,udp,147.32.85.25,55740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:08.657038,8.987216,tcp,147.32.85.76,4178.0,->,188.65.120.130,80.0,S_,0.0,,3,186,186,0,62.0,1.0,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:46:09.393576,0.000387,udp,147.32.84.170,50780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:09.395646,0.01823,tcp,147.32.84.170,47478.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:10.066542,0.038593,tcp,147.32.84.164,44508.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:11.075035,0.000558,udp,77.94.116.115,27421.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,589,77,512,294.5,0.1307300509337861,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:13.004094,0.000361,udp,195.190.181.56,52558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:13.333957,0.376332,udp,147.32.84.229,13363.0,<->,220.208.235.110,19221.0,CON,0.0,0.0,4,3030,60,2970,757.5,0.019801980198019802,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:17.028376,0.0,tcp,147.32.84.165,3227.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:17.028381,0.0,tcp,147.32.84.165,3229.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:17.028487,0.0,tcp,147.32.84.165,3230.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:17.028536,0.0,tcp,147.32.84.165,3232.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:17.028587,0.0,tcp,147.32.84.165,3233.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:17.629596,0.0,tcp,147.32.84.165,3238.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:20.838731,0.000236,udp,147.32.85.34,65038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:21.450050,16.680159,tcp,203.80.252.114,4346.0,->,147.32.84.229,80.0,FSA_FSA,0.0,0.0,7,430,242,188,61.42857142857143,0.5627906976744186,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:46:22.752389,8.7e-05,udp,147.32.84.138,58931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:27.227346,0.005981,tcp,147.32.84.170,34997.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1699,909,790,169.9,0.5350206003531489,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:28.063398,1.588311,udp,147.32.87.48,4418.0,->,147.32.87.102,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,18,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:46:28.889763,0.355622,udp,112.105.51.20,2430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:29.045771,0.0,tcp,147.32.84.165,3377.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:29.045931,0.0,tcp,147.32.84.165,3379.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:29.046004,0.0,tcp,147.32.84.165,3381.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:29.046097,0.0,tcp,147.32.84.165,3383.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:29.047677,0.0,tcp,147.32.84.165,3385.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:29.118526,0.007564,tcp,147.32.84.170,35000.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1616,870,746,161.6,0.5383663366336634,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:29.393648,0.000349,udp,147.32.84.170,47992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:29.646715,0.0,tcp,147.32.84.165,3387.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:30.064416,0.036998,tcp,147.32.84.164,44510.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:31.994308,0.008417,tcp,147.32.84.170,35004.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1656,910,746,165.6,0.5495169082125604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:32.024425,0.007781,tcp,147.32.84.170,45025.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1829,1042,787,182.9,0.5697102241662111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:33.040393,0.000268,udp,147.32.84.170,36782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:34.109234,0.007171,tcp,147.32.84.170,45027.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3564,1036,2528,324.0,0.29068462401795736,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:37.081297,0.000224,udp,147.32.84.138,50809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:38.118732,0.010621,tcp,147.32.84.170,35011.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1737,947,790,173.7,0.5451928612550374,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:38.407036,1488.278442,udp,87.239.84.86,35619.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,2758,1962,796,125.36363636363636,0.7113850616388687,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:39.394542,0.000377,udp,147.32.84.170,42769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:39.395659,0.018519,tcp,147.32.84.170,43050.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:39.979957,0.000285,udp,147.32.84.138,51364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:40.065838,0.000273,udp,147.32.84.164,36152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:40.067232,0.037896,tcp,147.32.84.164,44515.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:41.063457,0.0,tcp,147.32.84.165,3498.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:41.063557,0.0,tcp,147.32.84.165,3500.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:41.664002,0.0,tcp,147.32.84.165,3504.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:41.664109,0.0,tcp,147.32.84.165,3506.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:41.664189,0.0,tcp,147.32.84.165,3508.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:42.815063,0.000578,udp,24.190.70.138,45676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,79,471,275.0,0.14363636363636365,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:42.849509,15.301188,udp,147.32.84.94,7103.0,->,92.228.168.89,7406.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:46:42.855569,3215.498535,udp,147.32.84.94,7103.0,<->,85.10.199.112,50012.0,CON,0.0,0.0,895,738645,16965,721680,825.3016759776536,0.022967731454216843,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:43.499679,2806.317383,udp,95.96.237.209,14448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:43.758357,2.204091,udp,109.72.73.169,24819.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,668,548,120,167.0,0.8203592814371258,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:45.006103,0.000352,udp,147.32.84.170,59736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.009176,0.007665,tcp,147.32.84.170,35015.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1699,909,790,169.9,0.5350206003531489,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.021254,0.000315,udp,147.32.84.170,39450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,77,198,137.5,0.28,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.022041,0.000337,udp,147.32.84.170,56021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.022178,0.017763,udp,147.32.84.170,50014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,67,126,96.5,0.3471502590673575,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.022185,0.000461,udp,147.32.84.170,39546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,75,278,176.5,0.21246458923512748,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.023479,0.000365,udp,147.32.84.170,47280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.024211,0.000284,udp,147.32.84.170,60535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.024275,0.000227,udp,147.32.84.170,36357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:45.026711,0.000266,udp,147.32.84.170,50492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,78,194,136.0,0.2867647058823529,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:46.844164,3213.964355,udp,147.32.84.94,7103.0,<->,46.4.113.69,52012.0,CON,0.0,0.0,801,661015,14919,646096,825.2372034956304,0.022569835782849105,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:49.394721,0.000384,udp,147.32.84.170,37085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:49.395883,0.019062,tcp,147.32.84.170,42721.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:50.360449,0.000265,udp,147.32.84.138,44786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:51.229744,0.246072,udp,147.32.84.164,58559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.557862,0.000399,udp,147.32.84.164,38280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.557876,0.000493,udp,147.32.84.164,53702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.560354,0.002881,udp,147.32.84.164,42033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.560570,7.555658,tcp,147.32.84.164,50113.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.560686,5.512887,tcp,147.32.84.164,45317.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.562215,0.00041,udp,147.32.84.164,41370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.562219,0.000456,udp,147.32.84.164,48297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.562923,5.604941,tcp,147.32.84.164,45320.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.564572,0.002321,udp,147.32.84.164,60391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.566568,19.539927,tcp,147.32.84.164,50597.0,->,77.75.76.68,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.566959,9.537714,tcp,147.32.84.164,54240.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2416,1494,922,219.63636363636363,0.6183774834437086,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.566978,9.537683,tcp,147.32.84.164,54243.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,26,15801,3370,12431,607.7307692307693,0.21327764065565472,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.567001,9.537875,tcp,147.32.84.164,54244.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,19,8241,5113,3128,433.7368421052632,0.6204344132993569,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.567057,9.537619,tcp,147.32.84.164,54245.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,19,8878,5141,3737,467.2631578947368,0.5790718630322145,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.568176,19.538048,tcp,147.32.84.164,54265.0,->,77.75.73.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.568191,19.538019,tcp,147.32.84.164,54266.0,->,77.75.73.86,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.568351,19.538065,tcp,147.32.84.164,36701.0,->,77.75.72.7,80.0,FSPA_FSPA,0.0,0.0,62,46695,4483,42212,753.1451612903226,0.09600599635935325,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.568580,19.537626,tcp,147.32.84.164,36705.0,->,77.75.72.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.570229,9.534124,tcp,147.32.84.164,46375.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,23,10209,1230,8979,443.8695652173913,0.12048192771084337,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.644570,0.00162,udp,147.32.84.164,60201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.646565,0.000274,udp,147.32.84.164,51330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.647029,0.000267,udp,147.32.84.164,35523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,67,184,125.5,0.26693227091633465,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.665520,0.000184,udp,147.32.84.164,57822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.666021,0.001493,udp,147.32.84.164,46967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,75,192,133.5,0.2808988764044944,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.723302,241.275803,tcp,147.32.84.164,38142.0,->,74.125.232.201,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.838217,0.000492,udp,147.32.84.164,60713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.840075,0.000513,udp,147.32.84.164,41890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:51.959121,0.000306,udp,147.32.84.164,46267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,73,183,128.0,0.28515625,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.021945,0.014647,udp,147.32.84.164,39865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.022071,0.009978,udp,147.32.84.164,33068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.022091,0.001816,udp,147.32.84.164,54851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.024210,0.000873,udp,147.32.84.164,60331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,79,194,136.5,0.2893772893772894,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.025519,0.490898,tcp,147.32.84.164,49664.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,10,2629,1043,1586,262.9,0.39672879421833396,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.026777,19.079111,tcp,147.32.84.164,49668.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.027359,0.001178,udp,147.32.84.164,45124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.029072,19.083256,tcp,147.32.84.164,51089.0,->,74.125.232.207,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.031666,0.003281,udp,147.32.84.164,47434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.032348,0.00324,udp,147.32.84.164,35280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.032362,0.003291,udp,147.32.84.164,39843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.033898,59.073231,tcp,147.32.84.164,40925.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,12,2441,1086,1355,203.41666666666666,0.44489963129864807,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.035271,19.069803,tcp,147.32.84.164,40751.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.035933,19.069157,tcp,147.32.84.164,49804.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.035998,19.06908,tcp,147.32.84.164,49807.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.036046,19.069048,tcp,147.32.84.164,49808.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.039327,0.313148,tcp,147.32.84.164,47667.0,->,194.79.52.195,80.0,FSPA_FSPA,0.0,0.0,27,23276,1827,21449,862.074074074074,0.07849286819041072,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.039335,19.065474,tcp,147.32.84.164,47668.0,->,194.79.52.195,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.344834,0.00212,udp,147.32.84.164,47131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.344876,0.00527,udp,147.32.84.164,35645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.350328,0.002436,udp,147.32.84.164,37020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.354471,0.001999,udp,147.32.84.164,48112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.356785,0.000339,udp,147.32.84.164,41874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.357783,0.00043,udp,147.32.84.164,41776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.359245,0.004205,udp,147.32.84.164,34125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.360477,0.002145,udp,147.32.84.164,44351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.361750,0.002202,udp,147.32.84.164,50732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.363537,0.002285,udp,147.32.84.164,49809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.366833,0.002971,udp,147.32.84.164,35518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.370028,0.000279,udp,147.32.84.164,48026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.372293,0.000446,udp,147.32.84.164,46145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.446544,0.000398,udp,147.32.84.164,47667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.503255,0.002075,udp,147.32.84.164,42122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,77,156,116.5,0.33047210300429186,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.505634,0.000494,udp,147.32.84.164,58068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,77,208,142.5,0.27017543859649124,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.505890,0.000345,udp,147.32.84.164,56480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.506134,0.000411,udp,147.32.84.164,49788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,76,207,141.5,0.26855123674911663,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.509485,0.002118,udp,147.32.84.164,38660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.511869,0.000193,udp,147.32.84.164,43840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,76,131,103.5,0.3671497584541063,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.512131,0.002071,udp,147.32.84.164,58897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.512689,0.005341,udp,147.32.84.164,41230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,77,183,130.0,0.29615384615384616,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.518890,0.000315,udp,147.32.84.164,40868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,77,174,125.5,0.30677290836653387,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.518946,0.000385,udp,147.32.84.164,43133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:52.522736,0.002022,udp,147.32.84.164,42058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:46:53.080377,0.0,tcp,147.32.84.165,3618.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:53.080648,0.0,tcp,147.32.84.165,3620.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:53.080791,0.0,tcp,147.32.84.165,3622.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:53.681183,0.0,tcp,147.32.84.165,3624.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:53.681261,0.0,tcp,147.32.84.165,3626.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:46:53.741923,0.000228,udp,147.32.85.34,59073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:54.566403,0.000259,udp,147.32.85.25,41953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:46:59.239596,0.000502,udp,78.57.146.222,21579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:46:59.394712,0.000357,udp,147.32.84.170,60656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:59.395905,0.018275,tcp,147.32.84.170,47508.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:46:59.870055,0.191941,udp,147.32.86.168,48024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,406,73,333,203.0,0.17980295566502463,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:00.179277,0.000337,udp,147.32.84.170,44064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:01.031301,0.000201,udp,147.32.84.138,44047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:02.194421,0.00381,tcp,147.32.84.164,38177.0,->,77.75.72.69,80.0,FSPA_FSPA,0.0,0.0,10,1399,849,550,139.9,0.6068620443173696,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.423385,8.682012,tcp,147.32.84.164,46420.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,31,20223,1458,18765,652.3548387096774,0.07209612817089453,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.481992,0.000249,udp,147.32.84.164,45094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.484085,0.001881,udp,147.32.84.164,40772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,78,188,133.0,0.2932330827067669,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.486241,0.002323,udp,147.32.84.164,35330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.507336,0.002056,udp,147.32.84.164,46643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,74,117,95.5,0.387434554973822,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.509479,0.002269,udp,147.32.84.164,51232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.660884,0.000288,udp,147.32.84.164,56418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.661455,0.000177,udp,147.32.84.164,46270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.661746,0.003561,tcp,147.32.84.164,50185.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1947,1075,872,216.33333333333334,0.5521314843348741,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.676058,18.429117,tcp,147.32.84.164,33380.0,->,77.75.73.254,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.676902,0.009616,udp,147.32.84.164,38638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,383,120,263,191.5,0.3133159268929504,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.677086,0.005288,udp,147.32.84.164,59699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,120,177,148.5,0.40404040404040403,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.683816,0.009068,udp,147.32.84.164,39601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,120,251,185.5,0.32345013477088946,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.684951,0.004824,udp,147.32.84.164,45881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,120,251,185.5,0.32345013477088946,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.701059,7.500059,tcp,147.32.84.164,54314.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,4537,2965,1572,324.07142857142856,0.6535155389023584,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.701477,7.49954,tcp,147.32.84.164,54316.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,4557,2985,1572,325.5,0.6550362080315998,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.702713,7.498308,tcp,147.32.84.164,54318.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,17,6505,4283,2222,382.6470588235294,0.6584166026133743,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:02.703524,0.004101,tcp,147.32.84.164,50201.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1947,1075,872,216.33333333333334,0.5521314843348741,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:03.733426,0.008759,tcp,147.32.84.170,35024.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1695,905,790,169.5,0.5339233038348082,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:04.483228,0.001584,udp,147.32.84.164,42487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,84,201,142.5,0.29473684210526313,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:04.485240,0.003082,tcp,147.32.84.164,35893.0,->,77.75.77.140,80.0,FSPA_FSPA,0.0,0.0,12,1781,818,963,148.41666666666666,0.45929253228523303,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:04.773010,0.006204,tcp,147.32.84.170,35028.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1770,980,790,177.0,0.5536723163841808,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:05.023252,0.000215,udp,147.32.84.138,57879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:05.098078,0.0,tcp,147.32.84.165,3738.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:05.098253,0.0,tcp,147.32.84.165,3740.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:05.098260,0.0,tcp,147.32.84.165,3742.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:05.698510,0.0,tcp,147.32.84.165,3744.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:05.698598,0.0,tcp,147.32.84.165,3746.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:06.190767,2546.943604,udp,147.32.84.94,7103.0,->,184.94.108.220,7200.0,INT,0.0,,4,280,280,0,70.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:47:08.801393,0.000407,udp,85.220.4.108,58011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:09.394791,0.000334,udp,147.32.84.170,45560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:09.795550,0.000334,udp,147.32.84.59,60451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,79,173,126.0,0.3134920634920635,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:14.337785,0.197051,tcp,147.32.84.170,35032.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1776,986,790,177.6,0.5551801801801802,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:16.124516,2.669516,tcp,66.249.66.19,41121.0,->,147.32.84.222,80.0,FSPA_FSPA,0.0,0.0,40,23690,1752,21938,592.25,0.07395525538201773,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:47:17.115162,0.0,tcp,147.32.84.165,3858.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:17.115298,0.0,tcp,147.32.84.165,3860.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:17.115384,0.0,tcp,147.32.84.165,3862.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:17.716288,0.0,tcp,147.32.84.165,3864.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:17.716348,0.0,tcp,147.32.84.165,3866.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:19.393774,0.000484,udp,147.32.84.170,53011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:20.831773,0.000299,udp,147.32.84.138,34555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:21.533312,0.0075,tcp,147.32.84.170,45055.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3072,1069,2003,279.27272727272725,0.3479817708333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:22.909169,0.007799,tcp,147.32.84.170,45058.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3551,1030,2521,322.8181818181818,0.2900591382709096,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:23.801320,0.000512,udp,188.231.191.232,44028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:29.132684,0.0,tcp,147.32.84.165,3978.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.132752,0.0,tcp,147.32.84.165,3977.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.132758,0.0,tcp,147.32.84.165,3980.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.132809,0.0,tcp,147.32.84.165,3979.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.132816,0.0,tcp,147.32.84.165,3982.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.289058,0.006758,tcp,147.32.84.170,35048.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1606,860,746,160.6,0.5354919053549191,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:29.733036,0.0,tcp,147.32.84.165,3983.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.733143,0.0,tcp,147.32.84.165,3984.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.733150,0.0,tcp,147.32.84.165,3985.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.733199,0.0,tcp,147.32.84.165,3986.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:29.733205,0.0,tcp,147.32.84.165,3987.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:32.954399,0.000378,udp,147.32.86.20,49544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:34.016744,0.000169,udp,147.32.84.138,45868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:34.556681,0.005488,tcp,147.32.84.170,35058.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1695,905,790,169.5,0.5339233038348082,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:35.038207,0.000499,udp,147.32.84.170,49605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:35.257495,0.000382,udp,84.73.89.56,42299.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,252,190,62,126.0,0.753968253968254,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:35.679621,0.000454,udp,85.26.155.54,45688.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:37.046807,0.000146,udp,147.32.85.25,51910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:39.393821,0.000426,udp,147.32.84.170,49247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:40.496916,0.00038,udp,119.105.160.25,48528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:40.524099,10.583288,tcp,147.32.84.164,44453.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,16,4736,948,3788,296.0,0.20016891891891891,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:47:40.781418,0.005652,tcp,147.32.84.170,35066.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1603,857,746,160.3,0.5346225826575172,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:41.149552,0.0,tcp,147.32.84.165,4098.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:41.149694,0.0,tcp,147.32.84.165,4100.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:41.149771,0.0,tcp,147.32.84.165,4102.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:41.750907,0.0,tcp,147.32.84.165,4104.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:41.751047,0.0,tcp,147.32.84.165,4106.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:45.343877,2774.662598,udp,147.32.84.229,13363.0,<->,78.248.210.226,52069.0,CON,0.0,0.0,8,3283,214,3069,410.375,0.0651842826682912,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:46.018275,0.000252,udp,147.32.84.170,52589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,70,169,119.5,0.2928870292887029,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:46.027499,0.0004,udp,147.32.84.170,51520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:46.029183,0.000255,udp,147.32.84.170,56107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:46.030922,0.000356,udp,147.32.84.170,55297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,78,138,108.0,0.3611111111111111,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:46.210996,0.000354,udp,147.32.84.59,55921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:49.783189,0.00034,udp,147.32.84.138,51756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:50.843324,0.000424,udp,84.50.170.16,59592.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:47:51.555136,0.000279,udp,147.32.84.59,32823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:53.167173,0.0,tcp,147.32.84.165,4218.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:53.167306,0.0,tcp,147.32.84.165,4220.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:53.167384,0.0,tcp,147.32.84.165,4222.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:53.768055,0.0,tcp,147.32.84.165,4224.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:53.768069,0.0,tcp,147.32.84.165,4226.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:47:53.804233,0.369172,tcp,147.32.85.76,4286.0,->,174.129.221.29,80.0,FSPA_FSA,0.0,0.0,8,1531,1057,474,191.375,0.6903984323971261,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:47:53.854099,0.006013,tcp,147.32.84.170,35082.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1618,872,746,161.8,0.5389369592088998,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:55.792853,0.000201,udp,147.32.84.138,37479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:56.603878,0.000338,udp,147.32.84.59,38746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:47:58.712183,0.007759,tcp,147.32.84.170,45104.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3548,1032,2516,322.54545454545456,0.29086809470124014,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:47:59.396679,0.018251,tcp,147.32.84.170,50437.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:00.750583,0.000307,udp,147.32.85.34,58825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:01.482306,0.000244,udp,147.32.84.138,41999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:01.813390,0.012541,tcp,147.32.84.170,45108.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3013,1036,1977,273.90909090909093,0.3438433455028211,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:04.972930,3244.678955,icmp,193.206.143.102,3331.0,->,147.32.84.94,,URFIL,0.0,,12,840,840,0,70.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:48:05.184168,0.0,tcp,147.32.84.165,4338.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.184247,0.0,tcp,147.32.84.165,4337.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.184311,0.0,tcp,147.32.84.165,4340.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.184379,0.0,tcp,147.32.84.165,4339.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.184387,0.0,tcp,147.32.84.165,4342.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.359082,0.136326,udp,147.32.84.59,51127.0,<->,99.249.20.90,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:48:05.785705,0.0,tcp,147.32.84.165,4343.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.785720,0.0,tcp,147.32.84.165,4344.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.785726,0.0,tcp,147.32.84.165,4345.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.785816,0.0,tcp,147.32.84.165,4346.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:05.785830,0.0,tcp,147.32.84.165,4347.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:08.444935,0.006545,tcp,147.32.84.170,35099.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1615,869,746,161.5,0.5380804953560372,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:09.393662,0.00051,udp,147.32.84.170,54095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:09.395876,0.017913,tcp,147.32.84.170,43138.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:09.652481,0.006317,tcp,147.32.84.170,45122.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2999,1028,1971,272.6363636363636,0.34278092697565854,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:09.680904,0.007093,tcp,147.32.84.170,45124.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1799,1012,787,179.9,0.5625347415230684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:12.255872,0.000275,udp,147.32.84.59,38661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:13.183560,0.007012,tcp,147.32.84.170,45126.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2983,1017,1966,271.1818181818182,0.34093194770365404,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:14.103381,240.045792,tcp,147.32.84.170,37958.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:15.262631,0.00653,tcp,147.32.84.170,45143.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,3007,1033,1974,273.3636363636364,0.3435317592284669,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:15.292365,0.00768,tcp,147.32.84.170,45145.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,10,1804,1017,787,180.4,0.5637472283813747,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:17.202081,0.0,tcp,147.32.84.165,4458.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.202186,0.0,tcp,147.32.84.165,4457.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.202190,0.0,tcp,147.32.84.165,4460.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.202277,0.0,tcp,147.32.84.165,4459.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.202282,0.0,tcp,147.32.84.165,4462.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.803056,0.0,tcp,147.32.84.165,4463.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.803132,0.0,tcp,147.32.84.165,4464.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.803138,0.0,tcp,147.32.84.165,4465.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.803181,0.0,tcp,147.32.84.165,4466.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.803235,0.0,tcp,147.32.84.165,4467.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:17.894681,0.00035,udp,147.32.84.59,34274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:19.393758,0.000368,udp,147.32.84.170,45209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:19.395812,0.018068,tcp,147.32.84.170,37835.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:22.285577,0.000249,udp,147.32.84.138,50104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:23.997273,6.366585,udp,147.32.84.229,13363.0,->,114.47.175.9,58095.0,INT,0.0,,3,222,222,0,74.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:48:25.855547,0.000679,udp,90.130.145.125,12669.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,75,478,276.5,0.13562386980108498,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:48:26.129375,0.005937,tcp,147.32.84.170,35131.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1675,885,790,167.5,0.5283582089552239,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:27.009502,62.105923,tcp,200.150.79.162,42686.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,25,3948,1287,2661,157.92,0.32598784194528874,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:48:28.191541,0.007007,tcp,147.32.84.170,45153.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2958,1002,1956,268.90909090909093,0.33874239350912777,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:28.988529,0.000347,udp,147.32.84.164,49402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:28.989838,0.004262,tcp,147.32.84.164,54064.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2817,1945,872,234.75,0.6904508342208022,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:29.219180,0.0,tcp,147.32.84.165,4578.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.219248,0.0,tcp,147.32.84.165,4577.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.219255,0.0,tcp,147.32.84.165,4580.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.219306,0.0,tcp,147.32.84.165,4579.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.219368,0.0,tcp,147.32.84.165,4582.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.396115,0.018151,tcp,147.32.84.170,40080.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:29.671271,0.004982,tcp,147.32.84.164,54065.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2770,1944,826,230.83333333333334,0.7018050541516245,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:29.820481,0.0,tcp,147.32.84.165,4583.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.820501,0.0,tcp,147.32.84.165,4584.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.820506,0.0,tcp,147.32.84.165,4585.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.820604,0.0,tcp,147.32.84.165,4586.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:29.820613,0.0,tcp,147.32.84.165,4587.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:33.953738,0.000217,udp,147.32.85.25,55817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:34.378969,0.000164,udp,147.32.84.59,17412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,72,154,113.0,0.3185840707964602,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:34.629457,0.000445,udp,147.32.84.59,64554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:34.996849,0.120802,udp,147.32.84.229,13363.0,<->,208.88.186.6,34036.0,CON,0.0,0.0,2,137,75,62,68.5,0.5474452554744526,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:48:36.267090,1.238575,tcp,220.181.108.84,62829.0,->,147.32.87.27,80.0,SRPA_SA,0.0,0.0,14,6848,666,6182,489.14285714285717,0.09725467289719626,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:48:36.642311,0.140701,tcp,88.147.147.130,4613.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:48:37.042779,0.000319,udp,147.32.84.170,54076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:41.229995,0.000399,udp,109.178.54.48,13483.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,18,1,flow=Background-UDP-Established,Background,-1 2011-08-16 18:48:41.236697,0.0,tcp,147.32.84.165,4698.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.236780,0.0,tcp,147.32.84.165,4697.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.236829,0.0,tcp,147.32.84.165,4700.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.236840,0.0,tcp,147.32.84.165,4699.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.236879,0.0,tcp,147.32.84.165,4702.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.837114,0.0,tcp,147.32.84.165,4703.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.837202,0.0,tcp,147.32.84.165,4704.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.837209,0.0,tcp,147.32.84.165,4705.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.837252,0.0,tcp,147.32.84.165,4706.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:41.837325,0.0,tcp,147.32.84.165,4707.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:42.055656,0.007338,tcp,147.32.84.170,45168.0,->,78.24.14.69,80.0,FSPA_FSPA,0.0,0.0,11,2919,989,1930,265.3636363636364,0.3388146625556698,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:43.612755,0.000319,udp,147.32.84.59,54384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:43.805616,0.000336,udp,147.32.84.59,54125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:44.399642,0.000264,udp,147.32.84.138,47176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:47.387136,0.000174,udp,147.32.84.170,56225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,67,114,90.5,0.3701657458563536,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:47.387863,0.000358,udp,147.32.84.170,49262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,185,67,118,92.5,0.3621621621621622,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:47.696494,0.000477,udp,147.32.84.164,44807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,76,193,134.5,0.2825278810408922,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:48.790951,0.030628,udp,147.32.84.170,38882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,82,143,112.5,0.36444444444444446,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:48.791622,0.00034,udp,147.32.84.170,41612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:48.822754,0.030152,udp,147.32.84.170,52233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,82,210,146.0,0.2808219178082192,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:49.394871,0.000428,udp,147.32.84.170,46354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:49.396089,0.018067,tcp,147.32.84.170,42855.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:49.403021,0.000201,udp,147.32.84.59,57086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,87,182,134.5,0.32342007434944237,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:49.944183,0.000257,udp,147.32.84.170,52289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.107421,0.018416,udp,147.32.84.170,50513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,83,169,126.0,0.32936507936507936,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.328627,0.000457,udp,147.32.84.170,51516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.329784,51.920635,tcp,147.32.84.170,58563.0,->,80.239.149.24,80.0,FSPA_FSPA,0.0,0.0,51,14090,9196,4894,276.27450980392155,0.6526614620298083,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.329839,81.922371,tcp,147.32.84.170,58564.0,->,80.239.149.24,80.0,FSPA_FSRPA,0.0,0.0,46,15510,7494,8016,337.17391304347825,0.4831721470019342,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.339003,0.143964,udp,147.32.84.170,42716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,94,176,135.0,0.34814814814814815,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.510066,0.000497,udp,147.32.84.170,52499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.510205,0.00147,udp,147.32.84.170,54314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.511269,0.002579,udp,147.32.84.170,49475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,613,81,532,306.5,0.13213703099510604,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.514625,31.743336,tcp,147.32.84.170,44233.0,->,92.123.64.162,80.0,FSPA_FSRPA,0.0,0.0,11,1469,912,557,133.54545454545453,0.6208304969366917,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.515439,61.744678,tcp,147.32.84.170,48763.0,->,92.123.64.137,80.0,FSPA_FSPA,0.0,0.0,19,3418,2261,1157,179.89473684210526,0.6614979520187244,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.533564,0.01816,udp,147.32.84.170,52734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,77,122,99.5,0.3869346733668342,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:50.619423,0.000304,udp,147.32.84.170,51397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.075663,0.000267,udp,147.32.84.170,39693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.076149,0.00036,udp,147.32.84.170,35036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.076772,0.000291,udp,147.32.84.170,38283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.077661,351.282654,tcp,147.32.84.170,44647.0,->,66.220.153.19,80.0,FSPA_FSPA,0.0,0.0,175,104445,15970,88475,596.8285714285714,0.15290344200296807,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.102986,0.0003,udp,147.32.84.170,55791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.106204,0.000163,udp,147.32.84.170,45472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.107393,331.251434,tcp,147.32.84.170,44648.0,->,66.220.153.19,80.0,FSPA_FSPA,0.0,0.0,57,25739,5382,20357,451.56140350877195,0.20909903259644896,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.121509,11.289414,tcp,147.32.84.170,47609.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.121572,20.801813,tcp,147.32.84.170,47610.0,->,69.63.180.43,80.0,FSPA_FSA,0.0,0.0,8,1618,1412,206,202.25,0.8726823238566132,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.121675,11.288644,tcp,147.32.84.170,47613.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.284746,0.000495,udp,147.32.84.170,33799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,80,479,279.5,0.14311270125223613,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:51.907872,0.000304,udp,147.32.84.138,44161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:52.472207,0.000263,udp,147.32.84.170,33500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,79,158,118.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.472841,0.000165,udp,147.32.84.170,46488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,79,158,118.5,0.3333333333333333,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.472918,0.002095,udp,147.32.84.170,49352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,439,76,363,219.5,0.17312072892938496,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.546861,3e-05,udp,147.32.84.170,36678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.566525,0.000424,udp,147.32.84.170,53078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.690339,0.000209,udp,147.32.84.170,49719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,82,141,111.5,0.36771300448430494,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:52.691042,0.000277,udp,147.32.84.170,39521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,82,199,140.5,0.2918149466192171,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:53.253619,0.0,tcp,147.32.84.165,4819.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.253709,0.0,tcp,147.32.84.165,4818.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.253714,0.0,tcp,147.32.84.165,4821.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.253765,0.0,tcp,147.32.84.165,4820.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.253816,0.0,tcp,147.32.84.165,4823.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.855112,0.0,tcp,147.32.84.165,4824.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.855116,0.0,tcp,147.32.84.165,4825.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.855120,0.0,tcp,147.32.84.165,4826.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.855247,0.0,tcp,147.32.84.165,4827.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:53.855251,0.0,tcp,147.32.84.165,4828.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,18,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 18:48:54.360912,0.00019,udp,147.32.85.25,50676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:48:54.587518,0.000597,udp,109.185.205.172,18103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,321,64,257,160.5,0.19937694704049844,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:48:54.918779,0.019634,udp,147.32.84.170,34780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,68,260,164.0,0.2073170731707317,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:55.137240,0.000467,udp,147.32.84.170,32941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:55.139487,0.000311,udp,147.32.84.170,39470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:55.247614,0.000353,udp,147.32.84.170,56940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,73,138,105.5,0.3459715639810427,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:55.674376,0.040185,udp,147.32.84.59,54866.0,<->,78.134.95.140,17828.0,CON,0.0,0.0,2,602,79,523,301.0,0.13122923588039867,18,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:48:57.408386,0.070902,udp,147.32.84.170,34971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:57.821307,0.245018,udp,147.32.84.170,55527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:58.066542,0.034988,udp,147.32.84.170,55883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:58.172080,0.058517,udp,147.32.84.170,56522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:58.415054,0.00497,tcp,147.32.84.164,54068.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2769,1943,826,230.75,0.7016973636691947,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:58.859458,0.052177,udp,147.32.84.170,35233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:58.894287,0.00028,udp,147.32.84.164,56889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:58.894828,0.000281,udp,147.32.84.164,40015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:48:58.921219,0.019951,udp,147.32.84.170,60584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,521,83,438,260.5,0.15930902111324377,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:58.954410,303.314087,tcp,147.32.84.170,56301.0,->,92.123.68.128,80.0,FSPA_FSPA,0.0,0.0,115,110032,2844,107188,956.8,0.02584702631961611,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:59.339204,0.017118,udp,147.32.84.170,60419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:59.374132,0.019611,udp,147.32.84.170,41549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,82,180,131.0,0.31297709923664124,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:59.394067,0.000342,udp,147.32.84.170,53841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:48:59.394996,0.000252,udp,147.32.84.170,35662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:00.089127,0.028304,udp,147.32.84.170,47966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:04.846182,1.020545,tcp,212.22.198.196,1924.0,->,147.32.84.189,51413.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:49:06.652586,0.040214,udp,147.32.84.229,13363.0,<->,149.5.45.6,43025.0,CON,0.0,0.0,2,137,75,62,68.5,0.5474452554744526,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:49:08.021917,0.0003,udp,147.32.84.170,46249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:08.022613,0.000232,udp,147.32.84.170,42403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:08.343706,0.000179,udp,147.32.84.164,50437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.346119,0.064001,tcp,147.32.84.164,35589.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,29,25894,1923,23971,892.8965517241379,0.07426430833397699,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.346570,0.000247,udp,147.32.84.164,41530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.346889,0.000999,udp,147.32.84.164,40695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.346893,12.767444,tcp,147.32.84.164,35593.0,->,194.79.52.194,80.0,FSA_SRA,0.0,0.0,6,376,194,182,62.666666666666664,0.5159574468085106,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.346897,0.001234,udp,147.32.84.164,40591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.347274,0.001405,udp,147.32.84.164,36386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.347762,0.000983,udp,147.32.84.164,44399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.347959,12.763992,tcp,147.32.84.164,49869.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.347963,12.763833,tcp,147.32.84.164,49870.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.348015,12.763796,tcp,147.32.84.164,49872.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.348019,0.001092,udp,147.32.84.164,55584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.348070,174.269897,tcp,147.32.84.164,49873.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,71,53233,14448,38785,749.7605633802817,0.27141059117464733,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.348801,0.000314,udp,147.32.84.164,36763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.348889,0.000482,udp,147.32.84.164,40339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.349126,12.763133,tcp,147.32.84.164,33687.0,->,194.79.54.62,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.349364,12.769792,tcp,147.32.84.164,58493.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.349481,12.769785,tcp,147.32.84.164,58497.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.387176,12.724292,tcp,147.32.84.164,52244.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.499645,0.002035,udp,147.32.84.164,59816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.610806,0.000273,udp,147.32.84.164,53616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.674284,0.017342,udp,147.32.84.170,60541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,78,142,110.0,0.35454545454545455,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:08.684561,0.000243,udp,147.32.84.138,44915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:49:08.701195,0.002107,udp,147.32.84.164,33506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.710188,303.648407,tcp,147.32.84.170,55262.0,->,66.220.153.27,80.0,FSPA_FSPA,0.0,0.0,26,6307,4428,1879,242.57692307692307,0.7020770572379895,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:08.735786,0.00024,udp,147.32.84.164,43775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.735800,0.00039,udp,147.32.84.164,36213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.736381,0.000236,udp,147.32.84.164,57218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,73,147,110.0,0.33181818181818185,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.736996,0.000239,udp,147.32.84.164,35629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.738377,0.000347,udp,147.32.84.164,40713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.738880,0.000242,udp,147.32.84.164,48569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.739057,0.00027,udp,147.32.84.164,36289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.739430,0.000361,udp,147.32.84.164,32887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.739560,0.001933,udp,147.32.84.164,38760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.740097,0.000279,udp,147.32.84.164,42869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.741500,0.000257,udp,147.32.84.164,53871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.741550,0.000277,udp,147.32.84.164,60458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.743345,0.000534,udp,147.32.84.164,56359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.744156,0.000504,udp,147.32.84.164,36670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.746787,0.000437,udp,147.32.84.164,57425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,71,200,135.5,0.26199261992619927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.781712,0.002172,udp,147.32.84.164,59128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.781886,0.002617,udp,147.32.84.164,45661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,85,155,120.0,0.3541666666666667,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.784202,0.000429,udp,147.32.84.164,56222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,83,170,126.5,0.32806324110671936,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.784904,0.000315,udp,147.32.84.164,53272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,85,172,128.5,0.33073929961089493,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.846009,0.000384,udp,147.32.84.164,39236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.846653,0.000287,udp,147.32.84.164,53807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,74,154,114.0,0.32456140350877194,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.847312,0.002153,udp,147.32.84.164,39524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,73,152,112.5,0.3244444444444444,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.861992,0.000211,udp,147.32.84.164,34155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.862392,0.000282,udp,147.32.84.164,52257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:08.863263,0.000223,udp,147.32.84.164,45414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:09.404982,0.000225,udp,147.32.84.138,56384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:49:10.051452,0.000289,udp,147.32.84.164,41351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:49:12.555397,0.000318,udp,147.32.84.170,59252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:12.556200,0.000306,udp,147.32.84.170,52076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:13.759253,0.019368,udp,80.14.63.192,49781.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,659,539,120,164.75,0.8179059180576631,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:49:16.335984,0.002909,udp,147.32.84.170,44925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.336384,0.140753,udp,147.32.84.170,42333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.336788,0.000798,udp,147.32.84.170,45250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.337374,0.000477,udp,147.32.84.170,41014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,79,181,130.0,0.3038461538461538,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.337843,75.911446,tcp,147.32.84.170,40075.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,161,130930,15859,115071,813.2298136645962,0.12112579240815703,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.337908,75.911537,tcp,147.32.84.170,40077.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,94,60977,13854,47123,648.6914893617021,0.22720041983042788,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.340445,15.905109,tcp,147.32.84.170,40091.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,110,71327,21983,49344,648.4272727272727,0.3082002607708161,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.340635,15.904963,tcp,147.32.84.170,40094.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,85,54329,17776,36553,639.1647058823529,0.3271917392184653,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.358184,305.908447,tcp,147.32.84.170,57338.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,25,3424,2231,1193,136.96,0.6515771028037384,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.458220,0.038681,tcp,147.32.84.170,38719.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,10,1613,733,880,161.3,0.45443273403595785,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.486515,3.419847,tcp,147.32.84.170,54671.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,13,3284,2144,1140,252.6153846153846,0.6528623629719854,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.486624,0.730572,tcp,147.32.84.170,54672.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,13,3144,2041,1103,241.84615384615384,0.6491730279898219,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.491531,0.000373,udp,147.32.84.170,38115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,89,302,195.5,0.22762148337595908,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.595682,15.655492,tcp,147.32.84.170,43015.0,->,92.123.68.145,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.595894,15.655837,tcp,147.32.84.170,43849.0,->,92.123.68.122,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.595959,15.65543,tcp,147.32.84.170,43850.0,->,92.123.68.122,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.596204,15.656524,tcp,147.32.84.170,49752.0,->,92.122.212.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.596387,15.655632,tcp,147.32.84.170,57735.0,->,92.122.213.40,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.596561,15.646812,tcp,147.32.84.170,49766.0,->,195.113.232.74,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:16.619035,0.008349,udp,147.32.84.170,51401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,486,79,407,243.0,0.16255144032921812,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.207153,0.000189,udp,147.32.84.170,48616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.207807,0.000462,udp,147.32.84.170,43107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,78,197,137.5,0.28363636363636363,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.209903,0.000277,udp,147.32.84.170,56105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.210468,0.000271,udp,147.32.84.170,51093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.211007,0.002264,udp,147.32.84.170,55508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.213192,0.002334,udp,147.32.84.170,47364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.213691,0.000336,udp,147.32.84.170,45270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.214478,0.000427,udp,147.32.84.170,38166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,75,194,134.5,0.2788104089219331,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.215899,0.000282,udp,147.32.84.170,52016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.217713,0.000276,udp,147.32.84.170,45894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.217830,0.000445,udp,147.32.84.170,34565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.218829,0.002114,udp,147.32.84.170,50241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:17.850944,0.000217,udp,147.32.84.138,36640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:49:19.394026,0.000294,udp,147.32.84.170,56085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:19.395844,0.018858,tcp,147.32.84.170,47749.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:19.909165,0.00022,udp,147.32.84.170,59848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:19.910673,0.019853,tcp,147.32.84.170,49263.0,->,193.179.124.35,80.0,FSPA_FSPA,0.0,0.0,10,1464,840,624,146.4,0.5737704918032787,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:20.075205,0.000289,udp,147.32.84.170,52026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:20.670472,2.9e-05,udp,147.32.84.170,60179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:21.223144,11.027046,tcp,147.32.84.170,54704.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:22.504103,52.020367,udp,178.245.5.217,5637.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:49:25.283780,0.000325,udp,147.32.84.59,34750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:49:27.060064,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:49:29.395986,0.018449,tcp,147.32.84.170,37975.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:29.997917,552.231567,udp,147.32.84.229,13363.0,<->,218.167.49.190,19936.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:49:31.667035,70.582611,tcp,147.32.84.170,40136.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,134,125853,8973,116880,939.2014925373135,0.07129746609139234,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.046382,70.20314,tcp,147.32.84.170,40137.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,86,75916,7472,68444,882.7441860465116,0.0984245745297434,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.046855,70.202675,tcp,147.32.84.170,40139.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,128,113373,9182,104191,885.7265625,0.08098930080354229,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.049783,0.021893,udp,147.32.84.170,44746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,506,80,426,253.0,0.15810276679841898,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.161835,587.05011,tcp,147.32.84.170,47627.0,->,74.125.232.207,443.0,FSPA_FSPA,0.0,0.0,1717,1396652,187417,1209235,813.4257425742575,0.13419019197337634,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.381492,19.86981,tcp,147.32.84.170,54718.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.400680,0.000208,udp,147.32.84.170,33731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.402180,9.841876,tcp,147.32.84.170,49245.0,->,77.75.77.86,80.0,FSPA_FSRPA,0.0,0.0,23,13246,2287,10959,575.9130434782609,0.17265589611958326,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.724072,69.524239,tcp,147.32.84.170,40148.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,28,14826,3939,10887,529.5,0.2656819101578308,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.724758,0.000326,udp,147.32.84.170,47676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.726495,249.538757,tcp,147.32.84.170,44722.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,24,3997,2966,1031,166.54166666666666,0.7420565424068051,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.790053,0.000242,udp,147.32.84.170,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.790719,0.000249,udp,147.32.84.170,36576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,71,190,130.5,0.2720306513409962,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.791175,0.000344,udp,147.32.84.170,37086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,79,161,120.0,0.32916666666666666,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.791526,0.000267,udp,147.32.84.170,49389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.791569,0.020558,udp,147.32.84.170,43914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:32.814246,309.447266,tcp,147.32.84.170,36571.0,->,195.113.232.73,80.0,FSPA_FSPA,0.0,0.0,22,2779,1629,1150,126.31818181818181,0.5861820798848507,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:33.364372,0.00036,udp,147.32.84.170,51330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:33.376175,240.777542,tcp,147.32.84.170,41265.0,->,74.125.232.203,443.0,SRPA_FSPA,0.0,0.0,27,2579,1483,1096,95.51851851851852,0.5750290810391625,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:33.384402,0.017242,udp,147.32.84.170,34341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:33.384948,0.009812,udp,147.32.84.170,49818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:33.396489,332.796997,tcp,147.32.84.170,39691.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,166,100124,6622,93502,603.156626506024,0.06613798889377172,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:39.041679,0.000245,udp,147.32.84.170,59875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:49:41.491954,8.939367,tcp,211.234.198.52,43587.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,6,390,132,258,65.0,0.3384615384615385,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:49:42.432492,0.000243,udp,147.32.84.138,52497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:49:46.497825,712.682312,udp,201.41.166.48,34459.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,952,532,420,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:49:47.978171,0.310732,tcp,147.32.87.249,1681.0,->,147.32.87.2,80.0,_FSPA,,0.0,12,3894,0,3894,324.5,0.0,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:49:49.218438,3585.511719,tcp,86.138.82.230,1062.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,276,32291,22886,9405,116.9963768115942,0.7087423740361092,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:49:57.966353,6.0017,tcp,147.32.85.76,4484.0,->,68.232.43.5,80.0,FSPA_FSPA,0.0,0.0,11,1354,793,561,123.0909090909091,0.585672082717873,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:49:58.862737,0.00015,udp,147.32.84.138,47998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:00.414933,0.000392,udp,147.32.85.34,58364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:07.052322,0.000212,udp,147.32.84.164,57393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.245817,0.00256,udp,147.32.84.164,48492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,85,155,120.0,0.3541666666666667,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.245907,0.00311,udp,147.32.84.164,33654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,87,157,122.0,0.35655737704918034,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.249090,0.0024,udp,147.32.84.164,50600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.249268,0.027163,udp,147.32.84.164,42653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,74,171,122.5,0.3020408163265306,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.249932,0.002649,udp,147.32.84.164,41264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.251811,0.000466,udp,147.32.84.164,51809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,79,166,122.5,0.3224489795918367,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.252775,0.000339,udp,147.32.84.164,35444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,79,166,122.5,0.3224489795918367,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:07.256356,0.000429,udp,147.32.84.164,42003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,78,152,115.0,0.3391304347826087,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:09.395040,0.000333,udp,147.32.84.170,50897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:10.043136,0.242894,tcp,147.32.84.170,52844.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:10.350612,311.242859,udp,147.32.84.229,13363.0,<->,66.229.40.161,62685.0,CON,0.0,0.0,6,1362,776,586,227.0,0.5697503671071953,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:12.255504,0.0,icmp,147.32.84.59,8.0,->,192.168.1.101,256.0,ECO,0.0,,1,106,106,0,106.0,1.0,18,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 18:50:12.270728,1.095738,tcp,83.9.65.172,50543.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1420,794,626,78.88888888888889,0.5591549295774648,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:50:18.128564,0.000237,udp,147.32.84.164,58944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:18.494885,1.047223,tcp,147.32.3.51,1410.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:50:18.613202,0.000337,udp,147.32.84.164,36211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:19.039126,0.031031,tcp,147.32.84.164,35651.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,7,1950,1478,472,278.57142857142856,0.757948717948718,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:19.313157,0.000269,udp,147.32.84.164,50867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:19.313724,0.004649,tcp,147.32.84.164,44192.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2087,1501,586,231.88888888888889,0.7192141830378533,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:19.395239,0.000397,udp,147.32.84.170,50126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:20.427796,0.000318,udp,147.32.84.19,54205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:21.449446,0.000401,udp,41.250.184.123,8267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:21.632342,0.000338,udp,147.32.84.164,49644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:21.632987,0.006223,tcp,147.32.84.164,33738.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,16,7888,1107,6781,493.0,0.1403397565922921,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:21.633055,140.301331,tcp,147.32.84.164,49934.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,30,15019,7291,7728,500.6333333333333,0.48545176110260335,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:21.763704,0.000334,udp,147.32.84.164,59820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:21.765247,0.003783,tcp,147.32.84.164,45502.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2258,1250,1008,250.88888888888889,0.5535872453498671,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:21.821597,0.000418,udp,147.32.84.164,34036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:22.236223,0.015219,tcp,147.32.84.164,44205.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2399,1634,765,266.55555555555554,0.681117132138391,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.239693,0.000225,udp,147.32.84.164,42152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.241014,0.009497,tcp,147.32.84.164,35666.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,4199,1621,2578,466.55555555555554,0.38604429626101455,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.271607,0.005489,tcp,147.32.84.164,49820.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,14,7756,975,6781,554.0,0.12570912841670964,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.271683,0.011158,tcp,147.32.84.164,49821.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,49,48555,1566,46989,990.9183673469388,0.03225208526413346,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.453069,0.000334,udp,147.32.84.164,48741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.515845,0.000295,udp,147.32.84.164,35994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:25.516559,0.007885,tcp,147.32.84.164,44211.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2527,1762,765,280.77777777777777,0.6972694895132568,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:27.334842,0.115441,udp,147.32.84.229,13363.0,<->,66.65.167.245,1935.0,CON,0.0,0.0,2,258,183,75,129.0,0.7093023255813954,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:28.637836,8.996165,tcp,147.32.84.171,46586.0,->,180.193.5.26,10823.0,S_,0.0,,3,222,222,0,74.0,1.0,18,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:50:29.152164,0.000368,udp,147.32.84.164,60970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:29.187768,0.000306,udp,147.32.84.164,36914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:29.394222,0.000274,udp,147.32.84.170,54861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:29.394974,0.000328,udp,147.32.84.170,35258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:29.425029,0.000286,udp,147.32.84.164,51371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:29.426059,0.00886,tcp,147.32.84.164,51702.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2527,1762,765,280.77777777777777,0.6972694895132568,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.216837,0.010946,tcp,147.32.84.164,40416.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,4199,1621,2578,466.55555555555554,0.38604429626101455,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.243847,0.000206,udp,147.32.84.164,57241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.244264,0.000275,udp,147.32.84.164,41105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.245450,0.006479,tcp,147.32.84.164,33292.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,14,7756,975,6781,554.0,0.12570912841670964,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.371910,0.040004,tcp,147.32.84.164,56192.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2122,1250,872,235.77777777777777,0.589066918001885,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.423383,0.000247,udp,147.32.84.164,42098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:32.424658,0.010252,tcp,147.32.84.164,51707.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2527,1762,765,280.77777777777777,0.6972694895132568,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:33.384008,41.309875,udp,174.49.211.34,10978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:33.677168,0.00031,udp,147.32.84.138,40423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:33.687466,0.000174,udp,147.32.84.138,39453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:35.653065,1355.349365,udp,220.236.34.194,22002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,729,149,580,182.25,0.20438957475994513,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:35.736018,0.000387,udp,208.88.186.5,34042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,265,203,62,132.5,0.7660377358490567,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:36.362098,496.139038,udp,178.219.32.35,22018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,380,200,180,63.333333333333336,0.5263157894736842,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:37.008963,0.035887,tcp,147.32.85.5,51852.0,->,89.102.255.197,55650.0,FSA_FSPA,0.0,0.0,8,1628,272,1356,203.5,0.16707616707616707,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:50:37.047986,0.000156,udp,147.32.84.138,41111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:38.792527,0.000251,udp,147.32.84.59,39158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:39.502017,0.000392,udp,147.32.84.170,34991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:40.596546,0.000191,udp,147.32.84.170,57899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:41.022643,0.000366,udp,147.32.84.170,46899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:42.748241,2.432979,tcp,66.249.66.119,43363.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,12,3134,858,2276,261.1666666666667,0.2737715379706445,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:50:43.813627,0.000432,udp,147.32.84.170,52863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:45.013905,0.000218,udp,147.32.84.138,56015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:45.241004,2502.653809,udp,114.36.89.57,26264.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:50:45.720041,0.246258,udp,147.32.84.170,39742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:51.167410,0.019903,udp,147.32.84.164,37817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.167484,0.000864,udp,147.32.84.164,43954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.168657,2.345548,tcp,147.32.84.164,41549.0,->,74.125.232.206,80.0,FSRPA_FSPA,0.0,0.0,53,30517,6209,24308,575.7924528301887,0.20346036635318018,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.168661,19.958059,tcp,147.32.84.164,41550.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.168805,19.958389,tcp,147.32.84.164,41554.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.168965,0.001154,udp,147.32.84.164,33304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,341,85,256,170.5,0.24926686217008798,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169015,249.973267,tcp,147.32.84.164,40654.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,23,3488,1180,2308,151.65217391304347,0.338302752293578,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169626,489.989777,tcp,147.32.84.164,56952.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,68,28665,4350,24315,421.54411764705884,0.15175300889586604,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169752,249.97258,tcp,147.32.84.164,56957.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,25,5876,1246,4630,235.04,0.2120490129339687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169840,249.972702,tcp,147.32.84.164,55712.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,31,7527,2383,5144,242.80645161290323,0.3165935963863425,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169933,249.972565,tcp,147.32.84.164,55714.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,27,6692,1312,5380,247.85185185185185,0.19605499103407054,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.169990,249.972549,tcp,147.32.84.164,55716.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,24,2749,1752,997,114.54166666666667,0.6373226627864678,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.185835,19.94067,tcp,147.32.84.164,34662.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:51.185950,19.940548,tcp,147.32.84.164,34666.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:52.046502,0.000386,udp,147.32.84.170,34472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:52.636724,0.503518,tcp,147.32.84.13,38977.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,5187,1219,3968,305.11764705882354,0.23501060343165606,18,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 18:50:53.048861,248.093124,tcp,147.32.84.164,47959.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,28,6974,1821,5153,249.07142857142858,0.2611127043303699,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.234085,297.910645,tcp,147.32.84.164,47962.0,->,74.125.232.199,80.0,FSPA_FSRPA,0.0,0.0,59,25728,4152,21576,436.06779661016947,0.16138059701492538,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.322424,0.000295,udp,147.32.84.164,51156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.392626,0.020312,udp,147.32.84.164,43688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,363,78,285,181.5,0.21487603305785125,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.541612,0.01832,udp,147.32.84.164,53665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.560325,0.009398,udp,147.32.84.164,35052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,73,153,113.0,0.3230088495575221,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.560330,0.020566,udp,147.32.84.164,52339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,66,468,267.0,0.12359550561797752,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.590667,0.000256,udp,147.32.84.164,45115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,71,146,108.5,0.3271889400921659,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.593074,0.000219,udp,147.32.84.164,47510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,71,146,108.5,0.3271889400921659,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.974256,0.000579,udp,147.32.84.164,37991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,71,150,110.5,0.3212669683257919,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.974343,0.001002,udp,147.32.84.164,42842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.974500,0.001028,udp,147.32.84.164,52655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,76,155,115.5,0.329004329004329,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.974683,0.000852,udp,147.32.84.164,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.975011,0.001149,udp,147.32.84.164,53223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,71,492,281.5,0.1261101243339254,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.977089,0.044736,tcp,147.32.84.164,59431.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,11,3552,1041,2511,322.90909090909093,0.29307432432432434,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.977135,0.360104,tcp,147.32.84.164,59432.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,13,4586,1456,3130,352.7692307692308,0.3174880069777584,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.977799,17.144918,tcp,147.32.84.164,56724.0,->,81.31.45.72,80.0,FSPA_FSPA,0.0,0.0,11,1659,1147,512,150.8181818181818,0.6913803496081977,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:53.977811,17.144901,tcp,147.32.84.164,56725.0,->,81.31.45.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:54.086513,0.00042,udp,147.32.84.164,45748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,580,80,500,290.0,0.13793103448275862,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:54.257662,0.00026,udp,147.32.84.138,34774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:50:54.584437,0.000303,udp,147.32.84.164,60801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:54.585081,0.000174,udp,147.32.84.164,57688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.337147,0.005245,udp,147.32.84.164,33250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.728806,0.000213,udp,147.32.84.164,35926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.833651,0.005759,udp,147.32.84.164,36408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.840140,0.002935,udp,147.32.84.164,49559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.842125,0.030526,udp,147.32.84.164,51908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,75,238,156.5,0.23961661341853036,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.853788,0.028406,udp,147.32.84.164,49642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.876288,0.003343,udp,147.32.84.164,54727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.880028,0.000349,udp,147.32.84.164,37739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.895044,0.002837,udp,147.32.84.164,48016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,72,223,147.5,0.2440677966101695,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.903065,0.002808,udp,147.32.84.164,49995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,77,214,145.5,0.2646048109965636,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.919323,0.00026,udp,147.32.84.170,49601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:57.920032,0.000565,udp,147.32.84.170,43400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:57.931824,0.002522,udp,147.32.84.164,47031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,73,222,147.5,0.24745762711864408,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.953938,0.002899,udp,147.32.84.164,33114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:57.959388,0.108982,udp,147.32.84.164,39321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,72,149,110.5,0.3257918552036199,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.010667,0.000307,udp,147.32.84.164,40731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.033413,0.106297,udp,147.32.84.164,58732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.045068,0.000253,udp,147.32.84.164,33195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.069575,23.050184,tcp,147.32.84.164,34691.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,12,2981,828,2153,248.41666666666666,0.2777591412277759,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.102057,0.004546,udp,147.32.84.164,34157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,82,152,117.0,0.3504273504273504,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.106992,0.001986,udp,147.32.84.164,35517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,82,233,157.5,0.26031746031746034,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.140634,0.003259,udp,147.32.84.164,35755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,76,185,130.5,0.29118773946360155,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:50:58.660946,245.498367,tcp,147.32.84.170,55537.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4754,1548,3206,153.3548387096774,0.3256205300799327,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.662881,0.000345,udp,147.32.84.170,50168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.825951,0.000274,udp,147.32.84.170,51945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.831224,0.000262,udp,147.32.84.170,37873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.833614,0.000355,udp,147.32.84.170,59213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.834292,0.000362,udp,147.32.84.170,36872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,106,294,200.0,0.265,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:58.837749,0.000324,udp,147.32.84.170,39674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:59.396300,0.018494,tcp,147.32.84.170,60229.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:50:59.447331,0.02023,udp,147.32.84.170,33663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:01.342997,0.044308,udp,147.32.84.164,51390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.344898,0.369872,tcp,147.32.84.164,58704.0,->,75.101.155.168,80.0,FSPA_FSPA,0.0,0.0,9,2182,786,1396,242.44444444444446,0.3602199816681943,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.350011,1.657821,tcp,147.32.84.164,44174.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,18,7922,2415,5507,440.1111111111111,0.3048472607927291,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.350215,9.899415,tcp,147.32.84.164,44175.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,259,254312,11567,242745,981.8996138996139,0.045483500581962315,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.350797,1.609501,tcp,147.32.84.164,44176.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,30,19209,1421,17788,640.3,0.07397574053828934,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.350920,1.609932,tcp,147.32.84.164,44178.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,35,24705,1476,23229,705.8571428571429,0.05974499089253188,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.351040,479.809326,tcp,147.32.84.164,52046.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,41,13161,7954,5207,321.0,0.6043613707165109,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.455369,0.019944,udp,147.32.84.164,43988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.463034,0.035968,udp,147.32.84.164,60810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,183,68,115,91.5,0.37158469945355194,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.463088,0.000398,udp,147.32.84.164,53319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.480035,1432.748657,udp,147.32.84.94,7103.0,->,188.24.58.102,7472.0,INT,0.0,,12,1008,1008,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:51:01.499675,0.000227,udp,147.32.84.164,56201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,68,168,118.0,0.288135593220339,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.544992,0.029708,udp,147.32.84.229,13363.0,<->,94.26.15.181,4205.0,CON,0.0,0.0,2,1085,171,914,542.5,0.1576036866359447,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:01.729085,0.035203,udp,147.32.84.164,46182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,80,193,136.5,0.29304029304029305,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.729185,0.040504,udp,147.32.84.164,35986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,90,214,152.0,0.29605263157894735,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.785626,0.660769,tcp,147.32.84.164,35704.0,->,204.13.8.181,80.0,FSPA_FSPA,0.0,0.0,12,4578,776,3802,381.5,0.16950633464394932,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:01.979698,1.436384,tcp,147.32.84.164,35707.0,->,204.13.8.181,80.0,FSPA_FSPA,0.0,0.0,10,1828,1051,777,182.8,0.574945295404814,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.824289,0.149053,udp,147.32.84.164,41188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,93,155,124.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.828879,8.421192,tcp,147.32.84.164,44190.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,26,13672,4257,9415,525.8461538461538,0.3113662960795787,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.829033,8.421418,tcp,147.32.84.164,44192.0,->,209.35.17.17,80.0,FSPA_FSPA,0.0,0.0,25,14159,4175,9984,566.36,0.2948654566000424,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.859913,0.139911,udp,147.32.84.164,42509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,86,140,113.0,0.3805309734513274,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.911090,1.00365,udp,147.32.84.164,44839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,71,152,111.5,0.3183856502242152,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.948169,308.197174,tcp,147.32.84.164,42001.0,->,2.21.108.20,80.0,FSPA_FSPA,0.0,0.0,22,2919,1402,1517,132.6818181818182,0.4803014731072285,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:02.974326,0.149966,udp,147.32.84.164,41788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,531,93,438,265.5,0.1751412429378531,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.000048,0.000508,udp,147.32.84.164,44925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,86,140,113.0,0.3805309734513274,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.233362,0.146448,udp,147.32.84.164,42145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,82,240,161.0,0.2546583850931677,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.370391,0.202916,udp,147.32.84.164,33620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,80,134,107.0,0.37383177570093457,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.520620,0.16058,udp,147.32.84.164,46782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,74,153,113.5,0.32599118942731276,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.520657,0.000655,udp,147.32.84.164,33943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,76,216,146.0,0.2602739726027397,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.574219,0.134266,udp,147.32.84.164,48421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,80,224,152.0,0.2631578947368421,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.664427,0.000443,udp,147.32.84.170,52026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,346,130,216,173.0,0.37572254335260113,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:03.666778,240.493408,tcp,147.32.84.170,55549.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4848,1594,3254,156.38709677419354,0.3287953795379538,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:03.681521,0.020925,udp,147.32.84.164,43391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,490,74,416,245.0,0.1510204081632653,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.694378,307.444611,tcp,147.32.84.164,59301.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,22,2522,1332,1190,114.63636363636364,0.528152260111023,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:03.814402,0.000379,udp,147.32.84.170,51695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,99,287,193.0,0.25647668393782386,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:03.931783,0.000302,udp,147.32.84.164,35055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,81,135,108.0,0.375,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.005666,0.09429,udp,147.32.84.164,40997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,83,137,110.0,0.37727272727272726,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.067818,0.133104,udp,147.32.84.164,57583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,78,132,105.0,0.37142857142857144,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.222178,0.000233,udp,147.32.84.170,57941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:04.238113,249.944351,tcp,147.32.84.170,50875.0,->,209.85.149.84,443.0,FSPA_FSPA,0.0,0.0,32,4652,1543,3109,145.375,0.3316852966466036,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:04.248416,0.000253,udp,147.32.84.164,51826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,73,141,107.0,0.3411214953271028,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.249678,0.193355,udp,147.32.84.164,51100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.335896,0.505175,udp,147.32.84.164,33913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:04.658808,0.095847,udp,147.32.84.164,51675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,80,238,159.0,0.25157232704402516,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:05.016200,3138.081543,udp,193.134.202.252,24435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,729,543,186,121.5,0.7448559670781894,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:06.138111,0.000339,udp,147.32.84.59,46163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:06.737403,249.20018,tcp,147.32.84.170,42661.0,->,74.125.232.222,443.0,FSPA_FSPA,0.0,0.0,58,9177,3834,5343,158.22413793103448,0.41778358940830335,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:08.188696,0.000368,udp,147.32.84.138,48014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:10.796369,3549.796631,udp,93.209.217.226,61652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2111,1553,558,117.27777777777777,0.7356702984367598,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:12.046455,0.000189,udp,147.32.84.170,57039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:12.047015,0.000302,udp,147.32.84.170,47155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:13.850185,0.00215,udp,147.32.84.59,64941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,78,235,156.5,0.24920127795527156,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:16.784418,0.000247,udp,147.32.84.138,49313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:16.789077,0.000168,udp,147.32.84.138,33555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:18.056105,0.000262,udp,147.32.84.138,53927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:18.192688,0.000287,udp,147.32.85.89,36672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:19.394325,0.00044,udp,147.32.84.170,34875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:19.396274,0.017737,tcp,147.32.84.170,36466.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:22.761067,0.000329,udp,147.32.84.59,44641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:22.788149,2.462689,tcp,66.249.66.154,37559.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,12,2657,736,1921,221.41666666666666,0.27700414000752727,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:51:27.189576,0.000257,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,18,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 18:51:29.180616,0.000366,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,18,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 18:51:29.395139,0.000331,udp,147.32.84.170,48834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:30.715520,922.808289,udp,109.178.1.130,30962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,260,140,120,65.0,0.5384615384615384,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:31.446035,0.000332,udp,147.32.86.168,33928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,103,153,128.0,0.40234375,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:35.016793,0.054792,udp,41.207.163.6,36013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,669,548,121,167.25,0.8191330343796711,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:35.539712,0.000409,udp,83.35.192.235,29453.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:39.394343,0.000468,udp,147.32.84.170,41282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:41.105864,0.000502,udp,147.32.84.164,39113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.105913,0.000458,udp,147.32.84.164,33581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.105920,440.053619,tcp,147.32.84.164,34745.0,->,74.125.232.194,80.0,FSPA_FSRPA,0.0,0.0,240,199966,8088,191878,833.1916666666667,0.04044687596891471,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.105924,10.02273,tcp,147.32.84.164,34746.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.105980,10.022267,tcp,147.32.84.164,34748.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106030,10.022239,tcp,147.32.84.164,34749.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106037,10.022068,tcp,147.32.84.164,34750.0,->,74.125.232.194,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106228,10.022176,tcp,147.32.84.164,41676.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106232,440.053345,tcp,147.32.84.164,41677.0,->,74.125.232.206,80.0,FSPA_FSRPA,0.0,0.0,40,10337,8293,2044,258.425,0.8022637128760762,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106290,10.021971,tcp,147.32.84.164,41679.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106541,0.000171,udp,147.32.84.164,43516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.106882,0.000327,udp,147.32.84.164,47476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.107468,20.197071,tcp,147.32.84.164,47187.0,->,74.125.53.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.637550,31.784216,udp,88.199.169.108,40805.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1200,1080,120,300.0,0.9,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:41.731985,0.019604,udp,147.32.84.164,34100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.850252,0.157439,udp,147.32.84.164,48030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,68,134,101.0,0.33663366336633666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.850348,0.067552,udp,147.32.84.164,46809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,69,132,100.5,0.34328358208955223,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.860755,249.284103,tcp,147.32.84.164,52434.0,->,74.125.232.217,80.0,FSPA_FSRPA,0.0,0.0,33,11791,1559,10232,357.3030303030303,0.13221948944109915,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.871537,0.000385,udp,147.32.84.164,35103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,429,76,353,214.5,0.17715617715617715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:41.960256,0.000177,udp,147.32.84.164,57402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:42.008035,0.000281,udp,147.32.84.164,56032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,68,134,101.0,0.33663366336633666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:42.290427,0.236703,udp,147.32.84.164,48487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:42.527346,0.237019,udp,147.32.84.164,45236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,73,157,115.0,0.3173913043478261,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:42.599971,0.020233,udp,147.32.84.164,58773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:42.620596,0.000219,udp,147.32.84.164,37774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:43.013467,0.000362,udp,147.32.84.164,42965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,74,159,116.5,0.31759656652360513,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:43.035185,468.124969,tcp,147.32.84.164,48589.0,->,74.125.232.193,80.0,FSPA_FSRPA,0.0,0.0,60,22261,17679,4582,371.01666666666665,0.7941691747899915,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:51:45.359510,0.00044,udp,70.179.24.63,32888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,86,61,73.5,0.5850340136054422,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:48.730961,0.712954,udp,83.149.1.203,46117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,264,179,85,132.0,0.678030303030303,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:51:48.812325,0.000181,udp,147.32.84.138,53531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:49.394376,0.000446,udp,147.32.84.170,43919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:49.395202,0.00037,udp,147.32.84.170,40811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:49.396047,0.017596,tcp,147.32.84.170,49157.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:50.527447,0.00033,udp,147.32.85.76,52476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:51:52.305943,189.025208,tcp,147.32.85.76,4532.0,->,74.125.232.218,80.0,FSPA_FSPA,0.0,0.0,78,36395,24602,11793,466.6025641025641,0.6759719741722764,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:51:52.782017,188.639603,tcp,147.32.85.76,4544.0,->,195.113.232.97,80.0,FSPA_FSPA,0.0,0.0,639,506903,40239,466664,793.2754303599374,0.07938205139839377,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:51:53.942738,3358.375977,udp,77.176.203.85,40065.0,->,147.32.86.165,12114.0,INT,0.0,,6,891,891,0,148.5,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:51:59.395317,0.000371,udp,147.32.84.170,48142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:51:59.396417,0.018033,tcp,147.32.84.170,36471.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:00.327041,1242.026489,udp,74.110.233.202,50998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1112,158,954,278.0,0.1420863309352518,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:03.992440,0.000228,udp,147.32.84.59,51347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,79,207,143.0,0.2762237762237762,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:06.489323,3.006701,tcp,147.32.84.21,39368.0,->,77.75.76.46,,S_,0.0,,2,148,148,0,74.0,1.0,18,,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:52:09.788500,2440.988281,udp,71.237.23.34,56248.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:11.133627,0.000218,udp,147.32.84.138,48397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:11.396591,0.000192,udp,147.32.85.25,58381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:13.045486,0.000184,udp,147.32.84.138,60013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:19.396459,0.018412,tcp,147.32.84.170,40061.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:21.191046,0.003526,udp,114.47.14.66,63268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3034,60,2974,758.5,0.01977587343441002,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:23.286415,0.000212,udp,147.32.84.59,35538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:27.796467,0.000336,udp,147.32.86.77,51990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:28.468642,0.000237,udp,147.32.84.138,50220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:29.395918,0.017962,tcp,147.32.84.170,49162.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:32.172465,0.000434,udp,115.133.223.232,25074.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:35.071095,17.197964,tcp,209.85.226.85,48099.0,->,147.32.87.33,443.0,FSPA_FSPA,0.0,0.0,28,13385,1638,11747,478.0357142857143,0.12237579379902877,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:52:35.619235,1443.796997,udp,119.236.91.64,9280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1105,151,954,276.25,0.13665158371040723,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:42.627083,3394.037842,udp,129.116.232.112,55017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,694,139,555,173.5,0.20028818443804033,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:45.044829,0.245176,tcp,147.32.84.170,58664.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:49.394132,0.0004,udp,147.32.84.170,40601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:49.395065,0.000301,udp,147.32.84.170,48056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:52:51.154434,0.000266,udp,147.32.84.138,57602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:52:54.650747,12.044092,udp,130.225.103.21,12282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,454,330,124,113.5,0.7268722466960352,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:57.397607,0.000408,udp,147.32.84.164,57363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,499,87,412,249.5,0.1743486973947896,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:52:57.468805,0.009717,udp,147.32.84.164,54165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:52:58.105658,0.019734,udp,147.32.84.164,56546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:52:59.337241,0.076813,udp,147.32.84.229,13363.0,<->,80.92.181.79,16287.0,CON,0.0,0.0,4,3023,60,2963,755.75,0.01984783327820046,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:52:59.394531,0.000541,udp,147.32.84.170,33809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:00.559199,0.023485,tcp,147.32.86.17,1892.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1994,1275,719,221.55555555555554,0.6394182547642929,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:53:01.328224,0.000294,udp,147.32.84.138,40463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:01.339097,0.00027,udp,147.32.84.138,54800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:06.936350,0.000462,udp,147.32.86.20,60990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:09.396698,0.018461,tcp,147.32.84.170,36480.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:13.560326,0.000464,udp,90.206.6.215,64900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:53:16.028331,0.000203,udp,147.32.84.170,38612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:19.802509,3599.995117,tcp,84.42.140.191,42569.0,->,147.32.87.214,22.0,SPA_SPA,0.0,0.0,2902,397008,147670,249338,136.80496209510682,0.37195724015636966,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:53:24.839961,60.340652,tcp,90.181.2.82,17470.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,13,2347,1281,1066,180.53846153846155,0.5458031529612271,18,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 18:53:29.027327,3599.06665,udp,94.122.84.68,46397.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1261,722,539,157.625,0.5725614591593973,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:53:29.394635,0.00049,udp,147.32.84.170,51618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:39.396645,0.018276,tcp,147.32.84.170,60273.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:40.274035,39.480499,udp,81.247.164.10,19917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1593,1413,180,265.5,0.8870056497175142,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:53:47.888518,0.000997,tcp,147.32.87.249,1720.0,->,147.32.87.54,2222.0,_FSA,,0.0,6,364,0,364,60.666666666666664,0.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:53:49.395394,0.000394,udp,147.32.84.170,51904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:51.104846,0.000207,udp,147.32.84.138,39056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:55.687349,0.000228,udp,147.32.86.20,58719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:58.409927,0.000185,udp,147.32.84.59,50657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:53:59.394669,0.000323,udp,147.32.84.170,60562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:53:59.396555,0.018412,tcp,147.32.84.170,40080.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:00.433833,0.004046,udp,110.134.189.231,12236.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,763,76,687,381.5,0.09960681520314547,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:54:01.089667,0.000335,udp,147.32.85.34,60516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:01.113091,0.000272,udp,147.32.85.34,64907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:02.940003,0.154416,udp,147.32.84.229,13363.0,<->,24.78.74.88,10604.0,CON,0.0,0.0,2,543,76,467,271.5,0.13996316758747698,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:54:04.218543,3026.9646,udp,113.165.165.4,56914.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:54:05.695200,0.000444,udp,147.32.85.25,60802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:09.700145,0.00031,udp,147.32.84.138,54730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:09.700337,0.000289,udp,147.32.84.138,40500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:11.946493,660.600708,tcp,147.32.84.59,35251.0,->,74.125.232.213,443.0,FSPA_FSPA,0.0,0.0,301,172573,122320,50253,573.3322259136213,0.7088014927016393,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:54:14.663497,0.000385,udp,147.32.84.138,59105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:14.673313,0.000187,udp,147.32.84.138,54548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:18.027440,0.00049,udp,147.32.84.170,55840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:18.028445,0.000336,udp,147.32.84.170,37282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:18.145934,0.002687,udp,147.32.86.182,63741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:19.394709,0.000447,udp,147.32.84.170,43852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:22.527923,0.00019,udp,147.32.84.138,46677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:23.392914,279.819641,tcp,97.125.214.159,26541.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,7,516,216,300,73.71428571428571,0.4186046511627907,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:54:24.261117,0.000258,udp,147.32.84.138,44722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:29.395639,0.000399,udp,147.32.84.170,55600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:31.088497,0.008143,tcp,147.32.86.182,54304.0,->,77.75.77.9,80.0,FSRPA_FSPA,0.0,0.0,12,3044,2277,767,253.66666666666666,0.7480289093298291,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:54:39.007185,2054.852783,udp,147.32.84.94,7103.0,->,213.133.111.196,7565.0,INT,0.0,,5,420,420,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:54:43.324170,0.000526,udp,94.156.159.70,57093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:54:48.283909,0.000129,udp,147.32.84.138,59884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:54:49.394575,0.000404,udp,147.32.84.170,60439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:54:49.700798,0.020004,udp,147.32.84.164,57547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.947651,0.019999,udp,147.32.84.164,37888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.947764,0.000376,udp,147.32.84.164,52517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.947873,0.000332,udp,147.32.84.164,44247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.947883,0.020552,udp,147.32.84.164,57445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,85,183,134.0,0.31716417910447764,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.947895,10.195191,tcp,147.32.84.164,48060.0,->,74.125.232.199,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.959753,10.183151,tcp,147.32.84.164,52700.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.968021,0.000184,udp,147.32.84.164,42779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:50.979374,10.163527,tcp,147.32.84.164,33011.0,->,74.125.232.218,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.553023,0.000419,udp,147.32.84.164,49556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.553679,0.000331,udp,147.32.84.164,42103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,68,134,101.0,0.33663366336633666,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.553683,0.000334,udp,147.32.84.164,41532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,69,132,100.5,0.34328358208955223,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.553687,0.00057,udp,147.32.84.164,56910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,429,76,353,214.5,0.17715617715617715,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.554155,0.000264,udp,147.32.84.164,44804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,69,137,103.0,0.33495145631067963,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.555316,0.000414,udp,147.32.84.164,33302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,363,78,285,181.5,0.21487603305785125,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:51.555322,0.000568,udp,147.32.84.164,34896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:52.379952,0.01964,udp,147.32.84.164,53840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:54:56.440031,0.000349,udp,46.53.161.25,14471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:54:57.273024,5.088901,tcp,178.56.210.44,1267.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,4,258,126,132,64.5,0.4883720930232558,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:54:58.452790,5.365815,tcp,147.32.85.76,1038.0,->,74.125.232.199,80.0,FSPA_FSPA,0.0,0.0,10,2444,1688,756,244.4,0.690671031096563,18,1,flow=Background-google-analytics8,Background,-1 2011-08-16 18:54:59.396869,0.018177,tcp,147.32.84.170,36501.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:07.786488,0.000193,udp,147.32.84.138,47958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:09.394870,0.000549,udp,147.32.84.170,55717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:10.504636,0.000631,udp,90.59.235.134,21309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,941,75,866,470.5,0.07970244420828905,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:12.688793,0.238193,tcp,72.14.199.195,42708.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,1669,601,1068,166.9,0.36009586578789693,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:55:12.703289,0.00022,udp,147.32.84.138,43424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:14.419053,0.000401,udp,147.32.85.21,41387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:18.006691,9.000099,tcp,147.32.84.179,51731.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:55:19.159852,0.000276,udp,147.32.84.138,58978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:19.739864,0.154114,udp,147.32.84.229,13363.0,<->,173.74.125.30,29552.0,CON,0.0,0.0,2,535,475,60,267.5,0.8878504672897196,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:20.045372,0.000379,udp,147.32.84.170,33145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:21.085092,0.000289,udp,147.32.84.59,53101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:21.424471,17.615412,tcp,147.32.84.59,56443.0,->,209.85.149.95,443.0,FSPA_FSPA,0.0,0.0,22,6530,1759,4771,296.8181818181818,0.2693721286370597,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:55:26.935689,0.000434,udp,92.226.57.126,17679.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:27.504397,0.231674,tcp,147.32.86.20,2451.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,35098,1091,34007,816.2325581395348,0.031084392273063994,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:55:28.490843,0.000255,udp,147.32.84.170,34836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,84,280,182.0,0.23076923076923078,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:28.517933,240.126572,tcp,147.32.84.170,55605.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,35,8016,2118,5898,229.02857142857144,0.26422155688622756,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:28.519279,0.000374,udp,147.32.84.170,33097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:34.970822,3156.235352,udp,85.252.108.31,54227.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1653,1219,434,118.07142857142857,0.7374470659407139,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:37.041350,0.000322,udp,147.32.85.36,58154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:39.414961,0.000408,udp,147.32.84.170,58894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:42.130949,0.231993,tcp,147.32.86.20,2460.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,33398,1029,32369,814.5853658536586,0.03081022815737469,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:55:44.496348,0.000328,udp,147.32.85.25,33547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:45.755147,0.000374,udp,147.32.86.17,39607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,385,86,299,192.5,0.22337662337662337,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:48.774310,0.000412,udp,109.12.231.187,11326.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:51.028277,0.000214,udp,147.32.84.170,33165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:51.030068,0.264345,tcp,147.32.84.170,34865.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:53.505030,0.000314,udp,147.32.86.20,52432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:55:55.733370,0.768836,udp,93.73.150.75,14928.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,650,530,120,162.5,0.8153846153846154,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:58.450071,0.000545,udp,77.85.229.69,20715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,696,74,622,348.0,0.10632183908045977,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:55:59.395026,0.000327,udp,147.32.84.170,46498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:55:59.396967,0.020273,tcp,147.32.84.170,38365.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:01.034597,0.000394,udp,202.225.232.212,8429.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:03.517331,3444.865723,udp,147.32.84.94,7103.0,->,91.15.236.147,7156.0,INT,0.0,,5,420,420,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:56:03.653235,0.000328,udp,147.32.84.59,39087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,87,176,131.5,0.33079847908745247,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:08.075060,0.000462,udp,84.50.39.43,52259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,78,467,272.5,0.14311926605504588,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:09.396597,0.017628,tcp,147.32.84.170,50014.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:11.050264,0.000454,udp,89.14.199.145,3288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,72,475,273.5,0.1316270566727605,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:11.503488,0.020736,udp,147.32.84.59,64962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:17.631481,31.690144,tcp,60.248.150.212,80.0,->,147.32.85.120,23089.0,SA_,0.0,,2,120,120,0,60.0,1.0,18,0,flow=Background-TCP-Established,Background,-1 2011-08-16 18:56:19.397103,0.018334,tcp,147.32.84.170,38368.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:22.035172,0.000313,udp,147.32.84.170,34406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:22.036047,0.30709,tcp,147.32.84.170,34870.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:23.236273,0.000314,udp,147.32.85.89,32946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:28.678916,0.000541,udp,175.104.18.15,18140.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:29.420869,0.000272,udp,147.32.84.138,36524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:29.430634,0.000266,udp,147.32.84.138,48345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:39.395120,0.000292,udp,147.32.84.170,40473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:49.294673,0.004206,udp,147.32.84.229,13363.0,<->,68.111.148.26,10835.0,CON,0.0,0.0,4,3035,2975,60,758.75,0.9802306425041186,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:49.394896,0.000305,udp,147.32.84.170,55078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:49.395696,0.000349,udp,147.32.84.170,35772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:52.171734,0.000346,udp,147.32.85.25,42160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:53.045413,0.239889,tcp,147.32.84.170,34874.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:55.565404,0.000318,udp,147.32.84.59,59414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:56.584234,3070.46167,udp,149.5.45.251,43047.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,288,168,120,72.0,0.5833333333333334,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:56:59.233424,0.000276,udp,147.32.85.34,58724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:59.395538,0.000309,udp,147.32.84.170,32872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:56:59.425947,0.000264,udp,147.32.84.138,39052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:56:59.849224,0.000101,icmp,66.140.111.5,8.0,<->,147.32.85.109,4.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,18,1,flow=Background,Background,-1 2011-08-16 18:57:00.850759,0.000121,icmp,66.140.111.5,8.0,<->,147.32.85.109,4.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,18,1,flow=Background,Background,-1 2011-08-16 18:57:09.397314,0.017639,tcp,147.32.84.170,50353.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,8,544,272,272,68.0,0.5,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:19.395159,0.000333,udp,147.32.84.170,60945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:19.396022,0.000311,udp,147.32.84.170,50898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:19.396799,0.018519,tcp,147.32.84.170,47647.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:24.015369,0.000285,udp,147.32.84.170,56436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:25.101417,0.000262,udp,147.32.84.138,57026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:29.397629,0.017871,tcp,147.32.84.170,36761.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:31.066018,0.000376,udp,147.32.86.77,48563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:31.664110,0.000337,udp,147.32.86.182,63538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:32.082048,15.237773,udp,147.32.84.94,7103.0,->,199.120.127.164,59787.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:57:33.623208,0.000262,udp,147.32.84.138,59890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:34.434363,0.000429,udp,189.68.145.18,9904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:57:34.561194,0.156308,udp,147.32.86.77,50128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,76,191,133.5,0.2846441947565543,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:39.395210,0.000457,udp,147.32.84.170,54969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:39.396177,0.000244,udp,147.32.84.170,46849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:39.397123,0.018438,tcp,147.32.84.170,50357.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:42.543214,0.000311,udp,147.32.84.138,54433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:44.616948,0.917079,udp,147.32.84.171,49086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:45.647812,0.000229,udp,147.32.84.138,35473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:48.394286,0.000251,udp,147.32.84.138,41794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:48.517130,0.006515,tcp,147.32.86.182,54395.0,->,77.75.77.9,80.0,SRPA_FSPA,0.0,0.0,11,2783,2016,767,253.0,0.724398131512756,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:57:49.340391,3021.709717,udp,41.143.15.107,23928.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:57:49.396150,0.000313,udp,147.32.84.170,53564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:57:49.562604,0.00032,udp,147.32.85.25,57232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:53.511186,0.000252,udp,147.32.84.138,51064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:57:54.376343,3374.979492,udp,115.189.186.73,23134.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,951,703,248,118.875,0.7392218717139852,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:57:56.907841,15.301078,udp,147.32.84.94,7103.0,->,91.128.191.53,7483.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:57:59.395243,0.000421,udp,147.32.84.170,53763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:00.607114,231.901825,udp,81.200.48.33,21133.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,673,553,120,168.25,0.8216939078751857,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:58:00.623938,0.0002,udp,147.32.85.25,52494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:01.596222,0.000308,udp,147.32.85.74,57209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,72,171,121.5,0.2962962962962963,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:02.481605,1.132321,udp,208.88.186.11,34001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,685,564,121,171.25,0.8233576642335766,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:58:05.003456,0.35401,udp,147.32.84.229,13363.0,<->,125.227.132.185,25048.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:58:05.806633,0.000212,udp,147.32.85.25,40757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:13.850942,0.244085,tcp,147.32.84.170,55190.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:14.904859,0.907859,tcp,178.17.32.75,52055.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,353,342881,8632,334249,971.3342776203966,0.025174914912170696,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:58:15.344197,3.380152,tcp,164.132.9.165,2172.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,11,873,477,396,79.36363636363636,0.5463917525773195,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:58:17.625884,0.247358,udp,147.32.84.164,57765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:58:17.873402,0.246189,udp,147.32.84.164,45917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,18,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 18:58:19.296786,0.32715,udp,147.32.84.229,13363.0,<->,14.42.248.42,47984.0,CON,0.0,0.0,2,168,83,85,84.0,0.49404761904761907,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:58:19.395331,0.000297,udp,147.32.84.170,50674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:26.035861,0.000385,udp,147.32.84.170,58415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:26.749816,0.000243,udp,147.32.84.138,59910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:29.200283,0.0,igmp,147.32.87.24,,->,239.255.255.250,,INT,0.0,,1,60,60,0,60.0,1.0,18,,flow=Background,Background,-1 2011-08-16 18:58:29.395124,0.000435,udp,147.32.84.170,52794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:29.395943,0.000349,udp,147.32.84.170,49182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:30.364917,5.999113,tcp,147.32.85.76,1683.0,->,68.232.43.5,80.0,FSPA_FSPA,0.0,0.0,11,1337,776,561,121.54545454545455,0.5804038893044129,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:58:33.495142,3588.155762,udp,41.188.119.83,13032.0,->,147.32.84.171,6881.0,INT,0.0,,62,4464,4464,0,72.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:58:43.724520,2498.611328,udp,77.85.21.248,12123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:58:46.997517,0.000267,udp,147.32.84.138,51563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:49.396109,0.000272,udp,147.32.84.170,38620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:49.608300,0.000233,udp,147.32.84.138,60397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:53.971909,0.000293,udp,147.32.84.59,53811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,73,145,109.0,0.3348623853211009,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:54.307113,0.066359,tcp,147.32.84.59,60381.0,->,78.138.112.61,80.0,FSPA_FSPA,0.0,0.0,10,2488,1089,1399,248.8,0.43770096463022506,18,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 18:58:56.348095,0.037371,udp,147.32.84.59,45164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:58.329848,0.000364,udp,147.32.85.76,60746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,74,297,185.5,0.19946091644204852,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:58:59.395378,0.000507,udp,147.32.84.170,44719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:58:59.396452,0.000312,udp,147.32.84.170,52573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:01.891352,8e-06,udp,147.32.85.36,48257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,78,223,150.5,0.2591362126245847,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:02.695254,3199.949707,udp,186.220.239.12,6007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,406,226,180,67.66666666666667,0.5566502463054187,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:59:09.395405,0.000478,udp,147.32.84.170,33649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:09.396382,0.000398,udp,147.32.84.170,59399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:10.158324,81.52095,tcp,147.32.86.17,2372.0,->,77.75.73.154,80.0,FSPA_FSPA,0.0,0.0,726,703148,47388,655760,968.5234159779615,0.06739406213201203,18,1,flow=Background-TCP-Established,Background,-1 2011-08-16 18:59:18.557696,0.030641,udp,147.32.84.59,52950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,80,433,256.5,0.15594541910331383,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:18.603257,0.000402,udp,147.32.84.59,59447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,75,321,198.0,0.1893939393939394,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:19.671555,731.813293,udp,147.32.84.94,7103.0,->,173.162.242.201,1880.0,INT,0.0,,8,672,672,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:59:19.717857,0.000174,udp,147.32.84.138,52974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:25.572068,0.00039,udp,147.32.84.138,56085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:29.395466,0.000399,udp,147.32.84.170,50125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:29.396389,0.00044,udp,147.32.84.170,49807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:29.397570,0.018036,tcp,147.32.84.170,50048.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:35.064400,3252.705566,udp,186.227.129.14,38844.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1060,940,120,265.0,0.8867924528301887,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:59:37.861027,15.234646,udp,147.32.84.94,7103.0,->,91.128.191.53,7544.0,INT,0.0,,4,336,336,0,84.0,1.0,18,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 18:59:39.397543,0.017999,tcp,147.32.84.170,47672.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:42.588412,0.000256,udp,147.32.84.138,51339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:43.861154,2463.733398,udp,147.32.84.94,7103.0,<->,77.10.145.39,7004.0,CON,0.0,0.0,150,122020,119830,2190,813.4666666666667,0.982052122602852,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:59:44.085651,9.012434,tcp,147.32.85.76,1929.0,->,188.65.120.129,80.0,S_,0.0,,3,186,186,0,62.0,1.0,18,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 18:59:48.717664,0.000316,udp,147.32.84.138,45019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:50.165053,0.000161,udp,147.32.85.25,50465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:52.890562,0.030426,udp,147.32.85.76,59754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,118,486,302.0,0.19536423841059603,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:56.401585,0.000426,udp,80.187.111.188,57843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:59:58.438158,0.000556,udp,85.64.231.126,46616.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,971,78,893,485.5,0.08032955715756952,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 18:59:59.033142,0.000366,udp,147.32.84.170,58720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:59.036097,0.318852,tcp,147.32.84.170,34904.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:59.260861,0.000201,udp,147.32.84.138,54556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,18,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 18:59:59.396537,0.000439,udp,147.32.84.170,52839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,18,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 18:59:59.584826,1154.421387,udp,95.35.172.104,11404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,494,370,124,123.5,0.7489878542510121,18,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:00:01.143948,0.00025,udp,147.32.85.34,58876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:01.150967,0.000327,udp,147.32.84.242,46295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:09.124129,0.000681,udp,74.237.176.51,62998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1122,77,1045,561.0,0.06862745098039216,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:00:09.954651,0.000216,udp,147.32.84.13,48176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:14.854017,3599.979736,udp,147.32.84.164,57501.0,<->,79.141.174.9,27017.0,CON,0.0,0.0,620,85848,58482,27366,138.46451612903226,0.6812272854347219,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:00:19.396673,0.000278,udp,147.32.84.170,53722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:19.397652,0.017706,tcp,147.32.84.170,53887.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:19.996571,5.693007,tcp,147.32.85.76,2061.0,->,68.232.43.5,80.0,FSPA_FSPA,0.0,0.0,11,1352,791,561,122.9090909090909,0.5850591715976331,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:00:21.014287,0.01306,tcp,147.32.84.215,57477.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:00:22.175269,0.492519,udp,41.185.89.92,29863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,267,147,120,66.75,0.550561797752809,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:00:25.397895,0.098656,tcp,147.32.84.164,60109.0,->,213.242.110.94,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:00:29.397695,0.018265,tcp,147.32.84.170,38407.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:29.662900,0.000225,udp,147.32.84.138,34484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:30.043146,0.000321,udp,147.32.84.170,36054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:30.043899,0.000315,udp,147.32.84.170,42662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:31.876096,2.52283,tcp,66.249.72.115,59531.0,->,147.32.84.2,21.0,FSPA_FSPA,0.0,0.0,43,3993,1387,2606,92.86046511627907,0.3473578762834961,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:00:32.414891,0.000336,udp,147.32.84.138,59340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:32.597218,0.683881,tcp,147.32.84.13,57742.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,230,200342,6254,194088,871.0521739130435,0.031216619580517316,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:00:33.675103,18.202856,udp,173.22.105.128,2762.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1062,942,120,265.5,0.8870056497175142,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:00:34.437698,0.116973,tcp,147.32.84.13,57745.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,16,4873,1241,3632,304.5625,0.25466858198235176,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:00:36.871418,0.000391,udp,147.32.86.77,60005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,82,164,123.0,0.3333333333333333,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:36.882424,0.000359,udp,147.32.86.77,48829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,81,134,107.5,0.3767441860465116,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:38.376793,20.387419,tcp,147.32.86.17,2458.0,->,77.75.73.155,80.0,FSPA_FSPA,0.0,0.0,28,19123,1816,17307,682.9642857142857,0.09496417926057626,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:00:38.482014,0.562558,tcp,147.32.3.51,1479.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:00:38.661500,0.17639,udp,147.32.86.111,59826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:39.415910,0.000422,udp,147.32.84.170,33718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:39.417111,0.01884,tcp,147.32.84.170,38409.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:40.790130,0.00037,udp,147.32.84.138,46881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:41.522005,1.874836,tcp,147.32.84.59,65421.0,->,199.59.149.232,443.0,FSPA_FSPA,0.0,0.0,58,48555,2765,45790,837.1551724137931,0.05694573164452683,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:00:44.071967,0.004164,udp,178.174.153.36,36176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3036,60,2976,759.0,0.019762845849802372,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:00:49.251035,3573.884766,tcp,147.32.84.170,39376.0,->,74.125.39.125,443.0,SPA_SPA,0.0,0.0,217,22809,11272,11537,105.11059907834101,0.49419088956113816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:53.739575,0.000348,udp,147.32.84.138,55233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:57.869091,2168.021729,udp,147.32.84.94,7103.0,->,67.189.182.247,7243.0,INT,0.0,,20,1680,1680,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:00:59.395549,0.000396,udp,147.32.84.170,57222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:59.433298,0.000302,udp,147.32.84.138,39169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:00:59.715129,240.178787,tcp,147.32.84.170,54412.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,55,11183,3138,8045,203.3272727272727,0.28060448895645174,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:59.722911,250.065826,tcp,147.32.84.170,54413.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:59.723133,250.066055,tcp,147.32.84.170,54414.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:00:59.723692,250.066437,tcp,147.32.84.170,54417.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:03.590565,0.358968,tcp,147.32.86.168,34797.0,->,74.125.232.215,443.0,FSPA_FSPA,0.0,0.0,19,5525,1702,3823,290.7894736842105,0.3080542986425339,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:01:03.895128,0.000482,udp,147.32.86.20,64089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:04.256840,0.000497,udp,78.189.104.172,59226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,76,468,272.0,0.13970588235294118,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:06.488107,0.001709,udp,196.20.104.137,23958.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:09.345460,0.000469,udp,109.175.54.6,17634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,314,64,250,157.0,0.20382165605095542,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:09.397795,0.018419,tcp,147.32.84.170,50596.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:10.658617,0.0,icmp,146.185.18.252,2563.0,->,147.32.86.67,,URHPRO,0.0,,1,90,90,0,90.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:01:13.304224,226.529037,tcp,147.32.84.59,50244.0,->,74.125.232.198,443.0,FSRPA_FSPA,0.0,0.0,604,446245,63149,383096,738.816225165563,0.14151194971372227,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:01:16.358742,0.001764,udp,95.54.65.232,10280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,512,60,286.0,0.8951048951048951,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:19.092995,0.000269,udp,147.32.84.138,41708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:19.274410,4.600045,udp,174.141.213.42,59672.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,392,207,185,65.33333333333333,0.5280612244897959,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:19.396084,0.000408,udp,147.32.84.170,54186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:21.891862,15.300821,udp,147.32.84.94,7103.0,->,85.251.82.152,7411.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:01:22.714027,2339.115234,udp,147.32.84.94,7103.0,<->,93.94.233.215,7515.0,CON,0.0,0.0,51,36687,36003,684,719.3529411764706,0.9813557936053643,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:29.397632,0.020117,tcp,147.32.84.170,60286.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:32.033467,0.000326,udp,147.32.84.170,35902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:32.136141,0.000248,udp,147.32.84.138,37076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:32.365634,0.317797,tcp,147.32.84.59,48168.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,14,2583,1470,1113,184.5,0.5691056910569106,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:01:33.860627,0.139836,udp,147.32.84.229,13363.0,<->,129.74.64.157,44305.0,CON,0.0,0.0,2,620,560,60,310.0,0.9032258064516129,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:40.519069,120.301758,tcp,93.181.81.150,18294.0,->,147.32.84.229,13363.0,SRPA_FSRPA,0.0,0.0,18,1360,621,739,75.55555555555556,0.4566176470588235,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:01:42.183158,0.000288,udp,147.32.84.138,43291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:46.772223,0.000506,udp,70.18.157.104,50370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:48.041266,0.000274,udp,147.32.84.138,48116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:49.396657,0.00048,udp,147.32.84.170,37945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:49.397592,0.000356,udp,147.32.84.170,54302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:01:49.756845,0.119392,udp,147.32.84.229,13363.0,<->,208.88.186.5,34027.0,CON,0.0,0.0,2,138,76,62,69.0,0.5507246376811594,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:01:59.484654,0.00017,udp,147.32.85.25,57752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:01:59.584468,0.000158,udp,147.32.85.25,35283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:00.737946,0.000245,udp,147.32.85.34,56671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:00.768570,3189.813477,udp,98.18.169.148,11353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:08.329055,0.000284,udp,147.32.84.138,47551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:08.938674,330.41803,udp,147.32.84.94,7103.0,->,62.204.108.184,63857.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:02:09.125434,0.057756,udp,62.178.14.109,15980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,217,185,67.0,0.5398009950248757,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:09.396864,0.00039,udp,147.32.84.170,46712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:09.398833,0.017871,tcp,147.32.84.170,35692.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:09.993124,0.000361,udp,147.32.85.25,42558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:17.024109,0.20744,tcp,147.32.86.20,2760.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,42,33532,1089,32443,798.3809523809524,0.03247644041512585,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:02:23.530223,0.00071,udp,85.101.119.97,11104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,77,484,280.5,0.13725490196078433,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:27.439848,0.071466,udp,147.32.84.229,13363.0,<->,95.30.8.225,30719.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:28.521815,946.113586,icmp,93.131.137.204,3331.0,->,147.32.84.94,,URFIL,0.0,,8,560,560,0,70.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:02:29.398160,0.00073,udp,147.32.84.170,47327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:30.255324,0.000519,udp,98.150.2.123,24467.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,76,483,279.5,0.13595706618962433,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:33.065328,0.000769,udp,88.160.14.10,23186.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1156,176,980,578.0,0.1522491349480969,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:34.047577,0.000303,udp,147.32.84.170,38734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:39.398920,0.017735,tcp,147.32.84.170,40034.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:43.151224,0.168122,udp,147.32.84.229,13363.0,<->,97.97.51.124,27838.0,CON,0.0,0.0,2,1033,102,931,516.5,0.09874152952565343,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:47.236046,10.990565,tcp,147.32.86.111,35214.0,->,173.231.142.98,20913.0,FSPA_FSPA,0.0,0.0,10,764,451,313,76.4,0.5903141361256544,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:02:49.401083,0.018047,tcp,147.32.84.170,35697.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:02:49.809590,0.0,tcp,219.139.45.120,41096.0,->,147.32.84.24,22.0,S_,0.0,,1,74,74,0,74.0,1.0,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:02:52.713138,0.000211,udp,147.32.84.138,40174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:54.443484,0.000213,udp,147.32.84.59,59350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:02:54.761558,55.243992,tcp,147.32.84.59,5837.0,->,2.20.182.41,443.0,SRPA_FSPA,0.0,0.0,29,13459,2601,10858,464.1034482758621,0.19325358496173564,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:02:55.182932,1.680586,udp,147.32.84.94,7103.0,<->,68.197.165.229,7324.0,CON,0.0,0.0,34,27249,26721,528,801.4411764705883,0.9806231421336563,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:02:59.397505,0.000382,udp,147.32.84.170,38943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:01.803417,1054.955933,udp,95.158.132.11,5030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,728,140,588,182.0,0.19230769230769232,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:02.334257,0.000546,udp,190.191.207.231,50274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:05.047189,0.238414,tcp,147.32.84.170,56801.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:06.461073,2.02351,udp,68.33.39.207,35295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1102,152,950,275.5,0.13793103448275862,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:06.532607,0.000472,udp,175.168.47.182,5018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:07.945844,3521.942871,udp,200.101.229.26,46958.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3301,206,3095,412.625,0.062405331717661314,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:13.448259,0.019683,udp,147.32.84.170,49264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:13.468356,0.000561,udp,147.32.84.170,55453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:13.469823,246.326126,tcp,147.32.84.170,51920.0,->,74.125.232.207,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:13.514447,0.298663,tcp,147.32.84.170,49402.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:19.397724,0.0003,udp,147.32.84.170,33378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:19.398749,0.018143,tcp,147.32.84.170,40048.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:28.894099,0.000349,udp,87.178.32.220,42399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:31.024844,428.816833,udp,147.32.84.229,13363.0,<->,69.123.133.13,52249.0,CON,0.0,0.0,14,955,433,522,68.21428571428571,0.45340314136125653,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:35.607416,0.028749,udp,147.32.84.59,35242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,77,182,129.5,0.2972972972972973,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:03:36.044475,0.000292,udp,147.32.84.170,53145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:37.445143,0.137107,tcp,147.32.84.59,58508.0,->,195.71.11.67,80.0,FSPA_FSPA,0.0,0.0,18,9717,1048,8669,539.8333333333334,0.10785221776268396,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:03:38.497735,0.000382,udp,147.32.84.59,62490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:03:39.398099,0.000383,udp,147.32.84.170,49040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:41.831275,0.000543,udp,147.32.84.21,46091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:03:45.067324,0.000229,udp,147.32.84.138,50207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:03:46.477947,0.000373,udp,70.116.76.123,44435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,153,86,67,76.5,0.5620915032679739,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:48.744054,0.000381,udp,65.167.208.4,26320.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:03:49.398110,0.000368,udp,147.32.84.170,34674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:03:49.651297,0.000335,udp,147.32.86.20,55522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:01.958125,0.000298,udp,147.32.84.13,51087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:04.259773,1000.407837,udp,147.32.84.94,7103.0,->,83.233.27.185,7373.0,INT,0.0,,12,1008,1008,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:04:09.398243,0.000362,udp,147.32.84.170,32975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:09.399399,0.018054,tcp,147.32.84.170,46519.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:09.837106,0.000356,udp,84.13.35.14,58839.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:10.999242,15.299842,udp,147.32.84.94,7103.0,->,81.11.251.40,10092.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:04:11.565703,0.000342,udp,147.32.85.112,29146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,75,162,118.5,0.31645569620253167,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:12.281092,3057.302246,udp,93.86.40.246,40730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:19.396933,0.000406,udp,147.32.84.170,46724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:19.397790,0.000362,udp,147.32.84.170,42739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:21.657513,0.114101,tcp,147.32.86.178,1735.0,->,147.32.87.4,110.0,_FSPA,,0.0,18,1394,0,1394,77.44444444444444,0.0,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:04:26.417479,0.000465,udp,78.131.24.117,63994.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:27.966264,0.0,tcp,76.164.193.170,80.0,->,147.32.84.44,16934.0,SA_,0.0,,1,62,62,0,62.0,1.0,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:04:29.397105,0.000375,udp,147.32.84.170,39771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:31.780674,311.304932,udp,24.74.209.222,1692.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,765,190,575,191.25,0.24836601307189543,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:35.039075,0.000309,udp,147.32.84.138,52743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:35.638434,0.000264,udp,147.32.84.138,36295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:37.429001,0.000541,udp,213.23.104.154,53348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:39.836073,3598.111572,tcp,75.64.48.219,33371.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,187,16617,9640,6977,88.86096256684492,0.5801287837756515,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:04:40.960843,0.006323,tcp,147.32.86.17,2575.0,->,77.75.72.5,80.0,FSPA_FSPA,0.0,0.0,10,1594,993,601,159.4,0.622961104140527,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:04:48.032913,2774.612061,udp,147.32.84.94,7103.0,->,92.243.160.222,14055.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:04:48.844770,0.247569,udp,147.32.84.164,41258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:04:49.092480,0.000311,udp,147.32.84.164,34976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:04:49.396918,0.000403,udp,147.32.84.170,52331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:49.398539,0.018387,tcp,147.32.84.170,44558.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:04:52.192387,0.000208,udp,147.32.84.13,56830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:54.875266,2011.912109,udp,147.32.84.94,7103.0,->,202.60.240.93,7247.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:04:56.988963,0.001596,udp,94.234.170.24,12417.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:04:57.146974,0.037117,udp,147.32.84.59,34059.0,<->,94.101.194.189,14201.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,19,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:04:58.716433,0.000387,udp,147.32.86.20,50677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:04:59.397146,0.000517,udp,147.32.84.170,37231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:06.547668,0.000259,udp,147.32.85.25,55222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:07.435791,228.648224,tcp,147.32.84.59,36889.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,69,22216,14880,7336,321.9710144927536,0.6697875405113431,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:05:09.047729,0.271287,tcp,147.32.84.170,56826.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:09.237645,21.101728,tcp,147.32.86.17,2609.0,->,77.75.73.153,80.0,FSPA_FSPA,0.0,0.0,21,12926,1089,11837,615.5238095238095,0.08424880086647069,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:05:09.542973,0.000365,udp,147.32.84.164,59855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,567,77,490,283.5,0.13580246913580246,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:09.553871,0.00054,udp,147.32.84.164,55083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:09.573972,0.107352,udp,147.32.84.164,37147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,84,280,182.0,0.23076923076923078,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:10.963051,0.019935,udp,147.32.84.164,45260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:10.983257,0.02003,udp,147.32.84.164,42170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.078684,566.106018,tcp,147.32.84.164,40629.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,116,38040,17694,20346,327.9310344827586,0.46514195583596213,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.080928,0.000276,udp,147.32.84.164,46268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.083272,358.113708,tcp,147.32.84.164,39047.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,278,137324,12346,124978,493.9712230215827,0.08990416824444379,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.089145,363.557587,tcp,147.32.84.164,34507.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,3538,3087038,91129,2995909,872.5375918598078,0.029519882813233915,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.090788,248.487885,tcp,147.32.84.164,34509.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.090898,248.488174,tcp,147.32.84.164,39054.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,27,2560,1464,1096,94.81481481481481,0.571875,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:11.094151,0.000186,udp,147.32.85.6,57660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:11.224076,0.000242,udp,147.32.85.6,65062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:12.491091,15.301228,udp,147.32.84.94,7103.0,->,92.76.237.161,7156.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:05:13.508843,0.000519,udp,74.113.139.51,64432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,73,495,284.0,0.12852112676056338,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:18.049981,0.000324,udp,147.32.84.164,45967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.050533,0.000465,udp,147.32.84.164,52788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,84,272,178.0,0.23595505617977527,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.050537,0.000592,udp,147.32.84.164,58931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,106,294,200.0,0.265,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.051432,241.527573,tcp,147.32.84.164,34516.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4754,1548,3206,153.3548387096774,0.3256205300799327,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.073530,0.000536,udp,147.32.84.164,44483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,83,499,291.0,0.14261168384879724,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.074519,241.504395,tcp,147.32.84.164,42078.0,->,74.125.232.200,443.0,SRPA_FSPA,0.0,0.0,31,4957,1547,3410,159.90322580645162,0.3120839217268509,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.280329,0.000419,udp,147.32.84.164,42058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,106,192,149.0,0.35570469798657717,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:18.283463,241.29393,tcp,147.32.84.164,34519.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4792,1570,3222,154.58064516129033,0.32762938230383976,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:19.398146,0.000389,udp,147.32.84.170,38337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:19.399282,0.018047,tcp,147.32.84.170,50638.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:19.783553,0.000236,udp,147.32.84.138,45408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:21.235420,2018.870361,udp,147.32.84.229,13363.0,<->,95.155.225.129,28463.0,CON,0.0,0.0,8,1519,1249,270,189.875,0.8222514812376563,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:23.648236,0.000573,udp,147.32.84.164,53679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:24.139948,0.000452,udp,147.32.84.164,50712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,136,324,230.0,0.2956521739130435,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:24.140910,245.43692,tcp,147.32.84.164,34524.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4854,1600,3254,156.58064516129033,0.3296250515039143,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:29.399159,0.017861,tcp,147.32.84.170,46529.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:32.730714,0.000189,udp,147.32.84.138,53869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:33.658417,0.000387,udp,147.32.86.20,60194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:34.003747,3561.024414,tcp,217.29.8.3,1929.0,,147.32.84.229,80.0,PA_PA,0.0,0.0,315,33379,22469,10910,105.96507936507936,0.6731477875310824,19,1,flow=Background,Background,-1 2011-08-16 19:05:34.480042,0.000304,udp,147.32.84.138,35096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:38.030046,0.000396,udp,85.56.6.131,40300.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:40.403960,11.714355,udp,86.67.168.36,44060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,824,540,284,206.0,0.6553398058252428,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:40.915022,0.013924,tcp,147.32.85.6,54069.0,->,77.75.76.2,80.0,FSPA_FSPA,0.0,0.0,10,1466,826,640,146.6,0.5634379263301501,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:05:44.845063,0.000235,udp,147.32.84.138,46332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:47.621385,0.000382,udp,147.32.85.25,47689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:49.399331,0.018228,tcp,147.32.84.170,60330.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:05:51.432216,0.000178,udp,147.32.84.138,54051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:05:56.885937,3559.625732,udp,24.115.199.150,63761.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,42,5000,3087,1913,119.04761904761905,0.6174,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:57.001146,0.246048,udp,147.32.84.164,58891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.248172,244.23381,tcp,147.32.84.164,60119.0,->,74.125.232.200,80.0,FSPA_FSRPA,0.0,0.0,25,5335,3445,1890,213.4,0.6457357075913777,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.343558,0.060843,udp,147.32.84.164,60556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,86,149,117.5,0.3659574468085106,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.435750,14.168015,tcp,147.32.84.164,57109.0,->,98.129.229.188,80.0,FSPA_FSPA,0.0,0.0,26,16191,1266,14925,622.7307692307693,0.07819158791921438,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.596777,0.00051,udp,46.55.160.79,54451.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,74,480,277.0,0.13357400722021662,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:05:57.751984,0.000303,udp,147.32.84.164,37725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.753146,23.813898,tcp,147.32.84.164,38714.0,->,67.212.77.13,80.0,FSPA_FSPA,0.0,0.0,11,1796,869,927,163.27272727272728,0.4838530066815145,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:57.766586,0.000289,udp,147.32.84.164,37040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,80,151,115.5,0.3463203463203463,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:58.811929,0.000286,udp,147.32.84.164,39997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,84,168,126.0,0.3333333333333333,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:58.812374,0.000322,udp,147.32.84.164,53126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,354,84,270,177.0,0.23728813559322035,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:59.138339,0.02503,udp,147.32.84.164,44211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,87,169,128.0,0.33984375,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:59.138346,0.177021,udp,147.32.84.164,35812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,74,190,132.0,0.2803030303030303,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:59.163696,0.000589,udp,147.32.84.164,50990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,354,87,267,177.0,0.2457627118644068,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:59.181210,0.000364,udp,147.32.84.164,50610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:05:59.399594,0.017983,tcp,147.32.84.170,33676.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:06:00.347394,0.000251,udp,147.32.84.138,52204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:06:06.902756,0.000213,udp,147.32.84.138,50294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:06:09.480154,1.127868,udp,147.32.84.229,13363.0,<->,188.232.55.67,3436.0,CON,0.0,0.0,4,873,714,159,218.25,0.8178694158075601,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:06:11.048352,0.235693,tcp,147.32.84.170,38304.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:06:13.901538,0.000341,icmp,147.32.86.96,,<-,147.32.87.29,56139.0,RED,,0.0,2,196,0,196,98.0,0.0,19,0,flow=Background,Background,-1 2011-08-16 19:06:14.378436,0.000488,udp,2.118.142.178,53305.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:06:21.998409,6.017792,udp,147.32.84.229,13363.0,->,220.129.120.200,13199.0,INT,0.0,,3,273,273,0,91.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:06:29.397183,0.000273,udp,147.32.84.170,39538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:06:36.732820,0.000228,udp,147.32.84.138,39451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:06:38.525868,2950.563232,udp,212.39.6.44,57541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:06:39.814929,8.737234,tcp,147.32.86.17,2738.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,16,6745,3955,2790,421.5625,0.586360266864344,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:06:45.050081,15.371769,udp,147.32.84.94,7103.0,->,66.181.95.242,53231.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:06:47.365714,0.00066,udp,89.31.88.192,51354.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,611,76,535,305.5,0.12438625204582651,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:06:47.989604,0.000306,udp,147.32.84.138,58560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:06:53.284665,0.000513,udp,147.32.86.20,54505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:06:57.456779,7.697056,tcp,147.32.85.6,54108.0,->,91.103.160.56,80.0,FSPA_FSPA,0.0,0.0,14,4329,819,3510,309.2142857142857,0.1891891891891892,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:06:59.397379,0.000376,udp,147.32.84.170,42008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:06:59.398303,0.000282,udp,147.32.84.170,33374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:06:59.399285,0.01803,tcp,147.32.84.170,48100.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:00.446393,0.000292,udp,147.32.84.138,55589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:04.058416,0.277013,udp,147.32.84.164,46321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.335863,0.314355,tcp,147.32.84.164,46154.0,->,199.7.59.72,80.0,FSPA_FSPA,0.0,0.0,12,2614,798,1816,217.83333333333334,0.30527926549349654,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.998590,0.000171,udp,147.32.84.164,40461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.998815,0.000301,udp,147.32.84.164,35323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.998978,0.000314,udp,147.32.84.164,55390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.998985,0.000321,udp,147.32.84.164,40016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:04.999423,0.000531,udp,147.32.84.164,36689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:05.000123,16.572144,tcp,147.32.84.164,43685.0,->,67.212.77.12,80.0,FSPA_FSPA,0.0,0.0,11,1794,862,932,163.0909090909091,0.48049052396878483,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:05.211608,0.000285,udp,147.32.84.164,55088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,103,189,146.0,0.3527397260273973,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:06.170405,2503.102295,udp,74.115.72.161,59945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:08.153950,0.000565,udp,147.32.84.164,41630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,99,287,193.0,0.25647668393782386,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:08.154759,1.415024,tcp,147.32.84.164,50901.0,->,74.125.232.206,443.0,SRPA_SPA,0.0,0.0,15,3779,1011,2768,251.93333333333334,0.2675310928817147,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:08.154766,241.42865,tcp,147.32.84.164,60783.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4785,1563,3222,154.3548387096774,0.3266457680250784,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:08.714517,0.000336,udp,147.32.84.164,38529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,73,123,98.0,0.37244897959183676,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:08.721733,0.000424,udp,147.32.84.164,43305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:09.397372,0.000445,udp,147.32.84.170,41780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:10.099885,0.000237,udp,147.32.84.164,54149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:10.100427,0.000521,udp,147.32.84.164,45340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,79,265,172.0,0.22965116279069767,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:10.101183,240.132187,tcp,147.32.84.164,45001.0,->,209.85.149.95,443.0,FSPA_FSPA,0.0,0.0,64,36629,2697,33932,572.328125,0.07363018373419968,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:10.350171,0.000415,udp,147.32.86.20,57075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:10.402820,0.000245,udp,147.32.84.138,42140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:10.687173,0.000246,udp,147.32.84.164,42132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,111,192,151.5,0.36633663366336633,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:07:13.392058,0.000255,udp,147.32.84.138,37234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:17.447435,0.003858,udp,147.32.84.59,33755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,82,179,130.5,0.31417624521072796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:21.893820,2023.318481,udp,147.32.84.94,7103.0,<->,88.147.163.22,7596.0,CON,0.0,0.0,61,46895,45839,1056,768.7704918032787,0.9774816078473185,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:22.290243,6.056035,udp,187.79.69.210,63310.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:22.475656,0.000556,udp,69.65.73.40,55413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,78,477,277.5,0.14054054054054055,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:25.796000,0.075624,tcp,147.32.84.59,53537.0,->,193.46.63.195,80.0,FSPA_FSPA,0.0,0.0,10,1580,802,778,158.0,0.5075949367088608,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:07:26.330604,0.000339,udp,147.32.84.59,47777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,76,183,129.5,0.29343629343629346,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:28.542904,2159.771729,udp,147.32.84.229,13363.0,<->,93.116.52.84,46879.0,CON,0.0,0.0,4,1126,584,542,281.5,0.5186500888099467,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:29.398119,0.000357,udp,147.32.84.170,42695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:29.399010,0.000365,udp,147.32.84.170,45819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:39.399068,0.00045,udp,147.32.84.170,48630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:40.081420,0.000444,udp,94.71.14.180,19379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:41.028961,213.430679,udp,147.32.84.229,13363.0,<->,212.103.122.221,35725.0,CON,0.0,0.0,5,419,350,69,83.8,0.8353221957040573,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:41.742633,1670.716919,udp,62.73.111.228,3865.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:42.403934,0.000262,udp,147.32.85.25,45255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:44.046963,0.000466,udp,147.32.84.170,39350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:46.373693,0.000255,udp,147.32.84.138,44222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:48.245359,0.350016,tcp,85.70.37.60,60618.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,10,2390,920,1470,239.0,0.38493723849372385,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:07:49.397601,0.000333,udp,147.32.84.170,58920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:49.398452,0.000329,udp,147.32.84.170,46618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:52.465109,7.371006,tcp,147.32.85.6,54175.0,->,91.103.160.56,80.0,FSPA_FSPA,0.0,0.0,19,7158,1510,5648,376.7368421052632,0.2109527801061749,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:07:52.876537,0.000214,udp,147.32.85.25,37694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:07:53.227166,0.04337,tcp,147.32.85.6,54185.0,->,91.103.160.52,80.0,FSPA_FSPA,0.0,0.0,71,57387,2230,55157,808.2676056338029,0.038858975029187795,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:07:54.978192,0.11546,udp,147.32.84.229,13363.0,<->,68.174.22.118,37888.0,CON,0.0,0.0,4,666,545,121,166.5,0.8183183183183184,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:07:59.397484,0.00042,udp,147.32.84.170,39592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:07:59.399594,0.018275,tcp,147.32.84.170,45851.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:01.367804,0.000197,udp,147.32.84.138,39632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:04.392894,0.000431,udp,99.244.49.149,4671.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:08:08.852726,0.00037,udp,147.32.86.20,59255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:09.397498,0.000434,udp,147.32.84.170,60176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:09.398443,0.000365,udp,147.32.84.170,54321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:09.426717,13.477398,tcp,147.32.84.59,42924.0,->,87.248.203.253,80.0,FSPA_FSPA,0.0,0.0,80,54023,5184,48839,675.2875,0.09595912851933436,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:08:11.485915,0.02054,udp,147.32.84.59,50463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:14.096868,240.044067,tcp,147.32.84.170,46415.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:14.131157,0.28957,tcp,147.32.84.170,49148.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:15.033714,0.000265,udp,147.32.84.170,33177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:15.034468,0.000352,udp,147.32.84.170,58023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:15.035719,0.28004,tcp,147.32.84.170,38332.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:26.672550,1553.432739,udp,147.32.84.229,13363.0,<->,200.82.145.158,32869.0,CON,0.0,0.0,34,2431,1020,1411,71.5,0.4195804195804196,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:08:28.035716,0.000391,udp,147.32.84.138,41818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:29.398262,0.000485,udp,147.32.84.170,45672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:29.399175,0.000458,udp,147.32.84.170,45113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:29.400380,0.018131,tcp,147.32.84.170,45867.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:31.983078,0.000589,udp,65.23.3.67,32226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,940,73,867,470.0,0.07765957446808511,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:08:33.432237,0.000244,udp,147.32.84.138,35300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:37.462311,57.190304,udp,220.136.47.71,45582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:08:37.801124,15.300602,udp,147.32.84.94,7103.0,->,95.16.4.193,23796.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:08:38.102295,0.23396,tcp,147.32.86.20,3032.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,42,35141,1031,34110,836.6904761904761,0.02933894880623773,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:08:39.595932,0.000253,udp,147.32.85.25,59571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:46.047329,0.000383,udp,147.32.84.170,48785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:46.049357,0.250876,tcp,147.32.84.170,38336.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:49.400368,0.02011,tcp,147.32.84.170,45870.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:52.940966,0.00031,udp,147.32.84.138,57587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:08:58.123633,0.246624,udp,147.32.84.170,57178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:08:59.399622,0.018234,tcp,147.32.84.170,48129.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:00.852232,0.00034,udp,147.32.86.20,53525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:09:05.420901,122.492134,tcp,147.32.84.59,57454.0,->,74.125.232.219,80.0,FSPA_FSPA,0.0,0.0,10,1601,890,711,160.1,0.5559025608994379,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:09:05.585920,0.0,udp,192.168.88.138,54224.0,->,192.168.95.255,137.0,INT,0.0,,1,92,92,0,92.0,1.0,19,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:09:06.307373,3464.047363,udp,94.171.100.185,46228.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1859,314,1545,232.375,0.1689080150618612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:06.843249,132.449997,tcp,195.205.171.48,4887.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,27,5252,2018,3234,194.5185185185185,0.3842345773038842,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:09:09.398573,0.000296,udp,147.32.84.170,45325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:10.836847,3039.520508,udp,190.48.149.11,23830.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:14.089809,783.28833,udp,91.209.51.52,1809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,486,362,124,121.5,0.7448559670781894,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:15.344568,0.000281,udp,147.32.84.170,56866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,79,154,116.5,0.33905579399141633,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:15.691818,0.000378,udp,147.32.84.170,57060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:15.692569,0.000139,udp,147.32.84.170,41414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:15.693019,0.000282,udp,147.32.84.170,36559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:15.694164,248.460739,tcp,147.32.84.170,40674.0,->,74.125.232.223,443.0,FSPA_FSRPA,0.0,0.0,28,2620,1464,1156,93.57142857142857,0.5587786259541985,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:17.046776,0.254615,tcp,147.32.84.170,38346.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:19.398814,0.000284,udp,147.32.84.170,53977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:19.919158,2838.658447,udp,46.9.143.232,46999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,717,590,127,179.25,0.8228730822873083,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:20.303879,0.362071,udp,147.32.84.229,13363.0,<->,114.39.34.90,35780.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:22.534102,241.614319,tcp,147.32.84.170,54821.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4785,1563,3222,154.3548387096774,0.3266457680250784,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:22.570890,0.017114,udp,147.32.84.170,49432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:23.016480,241.130142,tcp,147.32.84.170,54824.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4757,1551,3206,153.4516129032258,0.3260458272020181,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:23.782709,0.000342,udp,147.32.84.170,51215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:23.803728,240.345062,tcp,147.32.84.170,41114.0,->,209.85.149.95,443.0,SRPA_FSPA,0.0,0.0,31,4570,1542,3028,147.41935483870967,0.337417943107221,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:26.763466,0.038429,udp,147.32.86.17,29965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,80,256,168.0,0.23809523809523808,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:09:27.805655,146.357574,tcp,147.32.84.170,49046.0,->,87.248.214.40,443.0,FSPA_FSPA,0.0,0.0,5734,4930955,195598,4735357,859.9502964771539,0.03966736666629487,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:27.858224,366.490387,tcp,147.32.84.170,33806.0,->,68.71.216.44,443.0,FSPA_FSPA,0.0,0.0,275,266947,14860,252087,970.7163636363637,0.05566648061225637,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:28.834091,0.000402,udp,147.32.84.170,48442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,102,188,145.0,0.35172413793103446,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:28.835649,245.311493,tcp,147.32.84.170,54834.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2619,1523,1096,97.0,0.5815196639938908,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:28.835869,303.756744,tcp,147.32.84.170,54837.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,36,5460,2337,3123,151.66666666666666,0.428021978021978,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:32.416540,41.864342,tcp,147.32.84.170,54030.0,->,75.126.76.195,443.0,FSPA_FSPA,0.0,0.0,18,3767,2261,1506,209.27777777777777,0.6002123705866738,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:32.424575,29.81098,tcp,147.32.84.170,54031.0,->,75.126.76.195,443.0,FSPA_FSPA,0.0,0.0,15,2674,1722,952,178.26666666666668,0.643979057591623,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:32.862347,0.000363,udp,147.32.84.138,56899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:09:35.649612,308.696136,tcp,147.32.84.170,33817.0,->,68.71.216.44,443.0,FSPA_FSPA,0.0,0.0,29,4181,2404,1777,144.17241379310346,0.5749820617077255,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:38.965283,5.980218,tcp,66.249.72.35,62614.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1669,719,950,166.9,0.43079688436189334,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:09:39.398104,0.000392,udp,147.32.84.170,48744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:46.609135,32.231701,tcp,147.32.84.170,49062.0,->,87.248.214.40,443.0,FSPA_FSPA,0.0,0.0,4765,3963302,196480,3766822,831.7527806925499,0.04957482422485089,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:47.517814,246.631104,tcp,147.32.84.170,54849.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,27,2586,1490,1096,95.77777777777777,0.5761794276875484,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:48.046639,0.000269,udp,147.32.84.170,46095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:48.047480,0.000276,udp,147.32.84.170,60348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:48.048639,0.271777,tcp,147.32.84.170,38379.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:49.192729,0.000202,udp,147.32.84.138,49036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:09:49.200327,0.000266,udp,147.32.84.19,48317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:09:51.603530,242.544907,tcp,147.32.84.170,41142.0,->,209.85.149.95,443.0,SRPA_FSPA,0.0,0.0,27,2580,1484,1096,95.55555555555556,0.5751937984496124,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:09:51.696649,3060.95752,udp,187.198.153.93,29268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:53.434418,0.000702,udp,128.176.236.102,15442.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,74,482,278.0,0.13309352517985612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:09:57.073626,0.000313,udp,98.111.169.189,11473.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:00.470898,0.000434,udp,147.32.85.34,53519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:10:02.108492,12.171756,tcp,147.32.84.170,54047.0,->,75.126.76.195,443.0,FSPA_FSPA,0.0,0.0,15,2404,1517,887,160.26666666666668,0.6310316139767055,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:09.625884,0.00053,udp,93.185.62.254,3198.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:14.319686,2598.929932,udp,147.32.84.229,13363.0,<->,220.150.126.227,51481.0,CON,0.0,0.0,22,1545,884,661,70.22727272727273,0.572168284789644,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:14.319739,54.806824,udp,147.32.84.229,13363.0,->,78.137.29.83,61776.0,INT,0.0,,6,480,480,0,80.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:10:15.747825,0.000284,udp,147.32.84.138,44971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:10:19.046025,0.281262,tcp,147.32.84.170,38390.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:19.397794,0.000456,udp,147.32.84.170,46947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:19.399855,0.018105,tcp,147.32.84.170,48181.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:22.151956,0.01778,udp,147.32.84.59,52010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,86,175,130.5,0.32950191570881227,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:10:32.111833,0.020334,udp,147.32.84.170,58686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,92,155,123.5,0.3724696356275304,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:32.133854,302.169098,tcp,147.32.84.170,54053.0,->,75.126.76.195,443.0,FSPA_FSPA,0.0,0.0,24,2005,1145,860,83.54166666666667,0.571072319201995,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:34.337911,0.840253,udp,147.32.84.229,13363.0,<->,190.36.245.143,31850.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:36.783500,3010.709717,udp,201.9.155.145,61305.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:38.747675,0.000291,udp,147.32.84.138,42103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:10:39.324369,2554.230469,udp,78.69.7.237,2796.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:39.510531,0.017896,tcp,147.32.84.170,45930.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:40.362637,1694.055908,udp,147.32.84.94,7103.0,<->,88.130.103.160,7188.0,CON,0.0,0.0,106,83597,81605,1992,788.6509433962265,0.9761713937103006,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:44.260864,3015.857422,udp,65.31.37.54,61426.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:50.017864,0.019722,udp,147.32.84.170,47994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:50.046159,0.000306,udp,147.32.84.170,34198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:50.047512,0.35139,tcp,147.32.84.170,38399.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:51.375640,0.000222,udp,147.32.84.138,36627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:10:52.819464,0.048226,udp,147.32.84.170,33185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.819957,0.000453,udp,147.32.84.170,51497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,83,156,119.5,0.3472803347280335,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.820556,0.000324,udp,147.32.84.170,40656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,68,169,118.5,0.2869198312236287,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.820563,0.025469,udp,147.32.84.170,47268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.820715,0.00134,udp,147.32.84.170,33187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,83,233,158.0,0.2626582278481013,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.822643,10.008649,tcp,147.32.84.170,53911.0,->,62.168.44.115,80.0,FSA_FSA,0.0,0.0,7,434,254,180,62.0,0.5852534562211982,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.822703,10.008597,tcp,147.32.84.170,53912.0,->,62.168.44.115,80.0,FSA_FSA,0.0,0.0,7,434,254,180,62.0,0.5852534562211982,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.822830,3.790278,tcp,147.32.84.170,44158.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,1934,1054,880,214.88888888888889,0.5449844881075491,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.822891,6.113575,tcp,147.32.84.170,44159.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.823773,20.101667,tcp,147.32.84.170,37731.0,->,69.63.190.22,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.823823,310.120117,tcp,147.32.84.170,37732.0,->,69.63.190.22,80.0,FSPA_FSPA,0.0,0.0,58,29047,7345,21702,500.8103448275862,0.2528660446861982,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.823880,310.11972,tcp,147.32.84.170,37734.0,->,69.63.190.22,80.0,FSPA_FSPA,0.0,0.0,26,5410,1765,3645,208.07692307692307,0.32624768946395566,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.823922,20.101246,tcp,147.32.84.170,37735.0,->,69.63.190.22,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.834170,250.012817,tcp,147.32.84.170,38853.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,27,4975,3388,1587,184.25925925925927,0.6810050251256281,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.834185,19.99964,tcp,147.32.84.170,38855.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.846468,0.054474,udp,147.32.84.170,53061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,509,80,429,254.5,0.15717092337917485,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.868795,0.000348,udp,147.32.84.170,39828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,79,181,130.0,0.3038461538461538,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.869758,6.387115,tcp,147.32.84.170,39109.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.869763,6.387369,tcp,147.32.84.170,39110.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.901591,4.967077,tcp,147.32.84.170,50358.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,13,3418,2291,1127,262.9230769230769,0.6702750146284376,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:52.956786,19.876507,tcp,147.32.84.170,33652.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.001134,0.000294,udp,147.32.84.170,45197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,89,145,117.0,0.3803418803418803,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.025349,0.019791,tcp,147.32.84.170,47087.0,->,62.168.44.118,80.0,FSPA_FSPA,0.0,0.0,10,1438,814,624,143.8,0.5660639777468707,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.102522,0.000188,udp,147.32.84.170,40294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.128155,0.00028,udp,147.32.84.170,46379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.131547,49.70208,tcp,147.32.84.170,53467.0,->,80.239.149.26,80.0,FSPA_FSRPA,0.0,0.0,12,4406,1185,3221,367.1666666666667,0.26895142986836135,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.131562,49.702049,tcp,147.32.84.170,53468.0,->,80.239.149.26,80.0,FSPA_FSRPA,0.0,0.0,12,4058,1186,2872,338.1666666666667,0.29226219812715626,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.131682,309.713409,tcp,147.32.84.170,34304.0,->,195.113.232.89,80.0,FSPA_FSPA,0.0,0.0,23,4071,1719,2352,177.0,0.42225497420781133,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.576938,0.000297,udp,147.32.84.170,39284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.583285,0.000444,udp,147.32.84.170,52326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,79,206,142.5,0.2771929824561403,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.584544,0.000149,udp,147.32.84.170,40721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:53.585289,0.000146,udp,147.32.84.170,35743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:54.737728,0.000924,udp,147.32.84.170,58911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,74,423,248.5,0.1488933601609658,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:54.746198,0.00192,udp,147.32.84.170,54123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,504,76,428,252.0,0.15079365079365079,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:56.896100,0.001578,udp,46.126.149.175,22338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:10:57.896214,14.93041,tcp,147.32.84.170,60398.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,22,13235,2233,11002,601.5909090909091,0.16871930487344164,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:57.903446,14.923081,tcp,147.32.84.170,34313.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.240572,0.000523,udp,147.32.84.170,40429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.282856,0.00038,udp,147.32.84.170,53212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.324055,0.000286,udp,147.32.84.170,35646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,71,153,112.0,0.3169642857142857,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.328429,0.000365,udp,147.32.84.170,44702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,71,175,123.0,0.2886178861788618,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.571368,0.001845,udp,147.32.84.170,56198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:58.597118,0.000483,udp,147.32.84.170,57605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,513,82,431,256.5,0.15984405458089668,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:10:59.398412,0.00042,udp,147.32.84.170,60090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:00.227246,0.01757,udp,147.32.84.170,55733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,83,169,126.0,0.32936507936507936,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:00.477998,0.000214,udp,147.32.84.170,56830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:03.008180,0.00042,udp,147.32.84.138,35074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:03.241166,0.000308,udp,147.32.84.171,41061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,85,135,110.0,0.38636363636363635,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:09.379503,386.130554,tcp,147.32.84.164,52758.0,->,64.12.68.227,443.0,FSPA_FSPA,0.0,0.0,45,4078,1874,2204,90.62222222222222,0.45953898970083373,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:11:09.398539,0.00042,udp,147.32.84.170,52574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:11.769711,3267.130615,udp,147.32.84.229,13363.0,<->,67.191.93.112,54420.0,CON,0.0,0.0,6,914,719,195,152.33333333333334,0.7866520787746171,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:11:14.852771,0.000242,udp,147.32.84.138,58878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:15.447688,291.278564,udp,2.98.181.113,45335.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,512,240,272,64.0,0.46875,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:11:15.590637,17.237162,tcp,147.32.84.170,53504.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,14,3154,1936,1218,225.28571428571428,0.6138237159162968,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:15.687162,0.000257,udp,147.32.84.138,51086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:16.461115,0.043954,tcp,147.32.84.170,44218.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2219,1339,880,246.55555555555554,0.6034249662009914,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:17.243853,0.005733,tcp,147.32.84.170,46599.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2401,1642,759,240.1,0.6838817159516868,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:17.339693,0.003977,tcp,147.32.84.170,44220.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2130,1250,880,236.66666666666666,0.5868544600938967,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:19.168278,0.003479,udp,94.27.95.102,21892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:11:19.250889,0.006872,tcp,147.32.84.170,46604.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,2401,1642,759,240.1,0.6838817159516868,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:19.346010,0.004647,tcp,147.32.84.170,44225.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2219,1339,880,246.55555555555554,0.6034249662009914,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:19.397886,0.000354,udp,147.32.84.170,35126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:21.046953,0.237009,tcp,147.32.84.170,36133.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:24.936429,6.032748,udp,147.32.84.229,13363.0,->,218.110.89.216,19893.0,INT,0.0,,3,234,234,0,78.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:11:28.096503,0.000273,udp,147.32.84.138,39284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:30.348935,0.000287,udp,147.32.85.34,61896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,86,220,153.0,0.28104575163398693,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:32.097039,126.037109,udp,62.68.196.105,55267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1884,1320,564,117.75,0.7006369426751592,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:11:38.065759,0.00027,udp,147.32.84.138,60102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:39.397670,0.000354,udp,147.32.84.170,59913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:39.398454,0.000332,udp,147.32.84.170,51496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:11:44.566164,0.001918,udp,147.32.85.6,58220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,74,131,102.5,0.36097560975609755,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:11:51.048420,0.168847,udp,147.32.84.229,13363.0,<->,208.115.74.125,10751.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:11:59.399816,0.018642,tcp,147.32.84.170,52652.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:02.496685,0.000309,udp,147.32.84.170,38752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:05.921080,0.000287,udp,147.32.84.170,34849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.363067,0.009994,udp,147.32.84.170,49375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,121,171,146.0,0.4143835616438356,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.363299,0.000384,udp,147.32.84.170,44413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,89,169,129.0,0.3449612403100775,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.363390,0.107831,udp,147.32.84.170,58033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.363765,434.501282,tcp,147.32.84.170,47655.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,85,49322,19049,30273,580.2588235294118,0.38621710392928105,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.363884,254.490433,tcp,147.32.84.170,47657.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,23,5974,4935,1039,259.7391304347826,0.8260796786072983,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.364021,0.020669,udp,147.32.84.170,54999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,71,495,283.0,0.1254416961130742,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.365856,14.472836,tcp,147.32.84.170,38929.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384053,254.470047,tcp,147.32.84.170,36001.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,25,6005,1276,4729,240.2,0.21248959200666112,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384266,254.469727,tcp,147.32.84.170,36005.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,25,5876,1276,4600,235.04,0.21715452688904016,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384319,14.453805,tcp,147.32.84.170,36006.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384380,254.469635,tcp,147.32.84.170,36007.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,32,10462,1917,8545,326.9375,0.18323456318103612,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384436,14.453897,tcp,147.32.84.170,36009.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384592,254.469421,tcp,147.32.84.170,36012.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,39,14039,2612,11427,359.97435897435895,0.18605313768786952,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384694,14.453472,tcp,147.32.84.170,36014.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.384804,14.453556,tcp,147.32.84.170,36017.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.385196,14.453804,tcp,147.32.84.170,51101.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.385247,14.453757,tcp,147.32.84.170,51102.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.385297,14.453292,tcp,147.32.84.170,51104.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.385445,0.009723,udp,147.32.84.170,54390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,386,85,301,193.0,0.22020725388601037,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.471845,14.466901,tcp,147.32.84.170,54271.0,->,74.125.226.31,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.471896,14.467089,tcp,147.32.84.170,54272.0,->,74.125.226.31,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:08.472878,14.365693,tcp,147.32.84.170,37296.0,->,74.125.232.220,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.397958,0.000321,udp,147.32.84.170,38185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.399990,0.018178,tcp,147.32.84.170,43575.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.608016,0.000347,udp,147.32.84.170,45711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.609774,243.243286,tcp,147.32.84.170,39460.0,->,74.125.232.219,80.0,FSPA_FSPA,0.0,0.0,24,3544,2154,1390,147.66666666666666,0.6077878103837472,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.704252,0.010245,udp,147.32.84.170,45264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,78,167,122.5,0.3183673469387755,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.717971,0.000364,udp,147.32.84.170,58747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:09.720841,253.133148,tcp,147.32.84.170,48430.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,34,10868,1983,8885,319.6470588235294,0.18246227456753772,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:10.082602,12.755255,tcp,147.32.84.170,39463.0,->,74.125.232.219,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:10.083429,12.755473,tcp,147.32.84.170,51125.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:12.518719,0.000392,udp,68.98.11.21,50682.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:14.165708,0.009992,udp,147.32.84.170,38922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,109,280,194.5,0.2802056555269923,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:14.176131,0.02007,udp,147.32.84.170,45205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:14.207038,0.000372,udp,147.32.84.170,49500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,594,84,510,297.0,0.1414141414141414,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:14.308275,0.000426,udp,147.32.84.170,44812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,76,171,123.5,0.3076923076923077,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:14.344554,0.000299,udp,147.32.84.170,50190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,67,163,115.0,0.29130434782608694,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:14.803671,0.000361,udp,147.32.84.170,53744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:15.282269,0.009983,udp,147.32.84.170,50640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:15.853109,0.000263,udp,147.32.84.138,37858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:18.842990,0.107651,udp,147.32.84.170,39400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,85,142,113.5,0.3744493392070485,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:19.399241,0.000345,udp,147.32.84.170,47587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:19.952807,0.000258,udp,147.32.84.138,54011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:20.363804,2590.275391,udp,147.32.84.94,7103.0,->,75.135.192.103,7110.0,INT,0.0,,12,1008,1008,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:12:20.682012,0.000305,udp,147.32.84.79,35472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:23.051445,0.000303,udp,147.32.84.170,53556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:27.274431,40.138634,udp,2.102.133.209,58497.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,480,356,124,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:27.661616,0.000404,udp,180.131.219.63,40391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:28.191586,0.000423,udp,74.57.74.144,25208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:28.931221,0.00015,udp,147.32.84.138,59710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:35.628192,11.178779,udp,95.65.75.51,47319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1004,812,192,125.5,0.8087649402390438,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:35.825924,0.299236,udp,147.32.87.48,4674.0,->,147.32.87.117,161.0,INT,0.0,,16,2096,2096,0,131.0,1.0,19,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:12:39.377236,0.000163,udp,147.32.84.138,44818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:39.401116,0.018082,tcp,147.32.84.170,52718.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:43.472214,3356.825928,udp,81.91.219.104,18744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,690,504,186,115.0,0.7304347826086957,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:48.364937,0.169007,tcp,147.32.86.20,3226.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,67,59484,1571,57913,887.820895522388,0.02641046331786699,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:12:49.400035,0.01799,tcp,147.32.84.170,43598.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:54.047950,0.000274,udp,147.32.84.170,46773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:55.445508,0.002655,udp,147.32.84.170,45373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:57.277619,0.000417,udp,212.21.53.132,40273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:12:57.448733,485.424835,tcp,147.32.84.170,60249.0,->,209.85.148.103,80.0,FSPA_FSPA,0.0,0.0,81,34779,10081,24698,429.3703703703704,0.289858822852871,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:12:59.316939,0.000247,udp,147.32.84.19,54144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:12:59.399938,0.000262,udp,147.32.84.170,52504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:00.819930,12.022939,tcp,147.32.84.170,60254.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:00.820083,12.02277,tcp,147.32.84.170,60255.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.030774,0.106999,udp,147.32.84.170,45899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.031531,0.000356,udp,147.32.84.170,44297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.032383,0.000504,udp,147.32.84.170,52988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.045562,0.000337,udp,147.32.84.170,55571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.063745,0.000393,udp,147.32.84.170,35735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.138554,0.107281,udp,147.32.84.170,55030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.199991,0.000336,udp,147.32.84.170,46502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.295115,0.246751,udp,147.32.84.170,57667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.318140,0.000273,udp,147.32.84.170,34588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.319467,0.000307,udp,147.32.84.170,45670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.542089,0.247503,udp,147.32.84.170,54536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.694705,0.123298,udp,147.32.84.170,39492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,80,259,169.5,0.2359882005899705,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.759236,0.000477,udp,147.32.84.170,51159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,469,79,390,234.5,0.16844349680170576,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.760516,0.326787,udp,147.32.84.170,51344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.789796,0.24985,udp,147.32.84.170,40586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.819047,0.000229,udp,147.32.84.170,33091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.819712,0.000365,udp,147.32.84.170,40255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,75,261,168.0,0.22321428571428573,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.820944,0.040994,udp,147.32.84.170,42101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,82,193,137.5,0.29818181818181816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:01.862329,0.000398,udp,147.32.84.170,37091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,82,257,169.5,0.24188790560471976,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:02.028289,0.000157,udp,147.32.84.170,37505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,79,130,104.5,0.37799043062200954,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:02.043092,0.279164,udp,147.32.84.170,51949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:02.087787,0.112165,udp,147.32.84.170,58430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:06.817878,6.138391,tcp,147.32.84.170,51598.0,->,216.34.181.97,80.0,FSPA_FSPA,0.0,0.0,15,5026,957,4069,335.06666666666666,0.19040986868284918,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:06.818023,14.904499,tcp,147.32.84.170,51599.0,->,216.34.181.97,80.0,SPA_FSRPA,0.0,0.0,102,91581,3529,88052,897.8529411764706,0.03853419377381771,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:06.818171,12.062045,tcp,147.32.84.170,51600.0,->,216.34.181.97,80.0,SPA_FSRPA,0.0,0.0,30,15700,2153,13547,523.3333333333334,0.13713375796178343,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.527730,15.324054,tcp,147.32.84.170,41942.0,->,91.198.174.232,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.528349,0.000431,udp,147.32.84.170,33231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.528472,0.017942,udp,147.32.84.170,46275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,78,156,117.0,0.3333333333333333,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.528794,0.00035,udp,147.32.84.170,53578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,85,136,110.5,0.38461538461538464,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.530082,0.01799,udp,147.32.84.170,55759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,80,225,152.5,0.26229508196721313,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.546828,0.018215,udp,147.32.84.170,58609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,78,256,167.0,0.23353293413173654,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.547637,5.302523,tcp,147.32.84.170,48023.0,->,91.198.174.233,80.0,FSPA_FSPA,0.0,0.0,11,1549,921,628,140.8181818181818,0.5945771465461588,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.548729,15.303282,tcp,147.32.84.170,54283.0,->,91.198.174.234,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:07.981535,0.014837,udp,147.32.84.170,47738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,76,143,109.5,0.3470319634703196,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.113104,0.000302,udp,147.32.84.170,54356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.113178,0.284232,udp,147.32.84.170,54698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.113270,0.282699,udp,147.32.84.170,38849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.116967,0.000424,udp,147.32.84.170,43577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.117788,0.00032,udp,147.32.84.170,40030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.221941,0.017675,udp,147.32.84.59,60248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,84,84,84.0,0.5,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:13:08.400740,0.28612,udp,147.32.84.170,37126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:08.970586,0.281258,udp,147.32.84.170,52981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:09.266155,0.000242,udp,147.32.84.170,44403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:09.270776,0.283105,udp,147.32.84.170,53547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:09.399030,0.000434,udp,147.32.84.170,34295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:09.400986,0.018408,tcp,147.32.84.170,60279.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:10.128879,0.280404,udp,147.32.84.170,39921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:10.408140,0.133578,udp,147.32.84.170,51338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:10.409482,0.017943,udp,147.32.84.170,57658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:11.897970,0.0004,udp,147.32.84.138,59583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:13:13.082112,0.538451,tcp,147.32.84.170,46468.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:13.178041,0.079774,tcp,147.32.84.59,40213.0,->,194.64.250.200,80.0,FSPA_FSPA,0.0,0.0,24,15367,1543,13824,640.2916666666666,0.10040996941498015,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:13:13.225511,0.075201,tcp,147.32.84.59,60078.0,->,91.215.100.139,80.0,FSPA_FSPA,0.0,0.0,10,1514,769,745,151.4,0.5079260237780714,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:13:13.612931,0.276482,tcp,147.32.84.170,46469.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:13.881673,0.373905,tcp,147.32.84.170,46471.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:18.348324,0.000562,udp,94.231.184.2,54390.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:13:24.854208,0.000292,udp,147.32.85.25,43349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:13:24.926722,0.20649,tcp,147.32.86.20,3255.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30097,1029,29068,771.7179487179487,0.034189454098415124,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:13:25.034259,0.000257,udp,147.32.84.170,52630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:29.399966,0.000432,udp,147.32.84.170,46066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:44.611486,2.130094,tcp,109.185.227.73,12751.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,21,1622,842,780,77.23809523809524,0.5191122071516646,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:13:47.959097,0.000337,udp,95.27.234.134,2319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:13:49.401241,0.018486,tcp,147.32.84.170,35785.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:13:50.067770,7e-06,udp,147.32.87.48,4686.0,->,147.32.86.243,161.0,INT,0.0,,2,262,262,0,131.0,1.0,19,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:13:50.992525,2393.889648,arp,147.32.87.1,,who,147.32.87.26,,INT,,,3,180,180,0,60.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:13:52.717592,0.001588,udp,180.73.92.187,33232.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:13:56.047501,0.000308,udp,147.32.84.170,54652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:00.682733,0.000226,udp,147.32.85.34,50797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:14:03.292276,0.000263,udp,147.32.84.138,46689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:14:08.233451,0.003654,udp,60.251.67.160,51115.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3026,60,2966,756.5,0.01982815598149372,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:14:09.405779,0.004396,udp,147.32.84.170,43287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:18.317434,0.103606,tcp,147.32.84.59,45209.0,->,195.71.11.108,80.0,FSPA_FSPA,0.0,0.0,9,1838,1251,587,204.22222222222223,0.6806311207834603,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:14:19.281595,0.00029,udp,147.32.84.170,34504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:20.236333,0.025174,udp,147.32.84.229,13363.0,<->,83.81.52.240,9599.0,CON,0.0,0.0,2,591,75,516,295.5,0.12690355329949238,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:14:27.043520,0.369909,tcp,147.32.84.170,36259.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:37.039545,0.000165,udp,147.32.84.138,48601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:14:39.401500,0.018178,tcp,147.32.84.170,60297.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:40.492646,0.17019,tcp,147.32.86.20,3317.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,66,59693,1511,58182,904.439393939394,0.025312850753019617,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:14:44.272354,0.004226,udp,89.189.151.168,54236.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3026,60,2966,756.5,0.01982815598149372,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:14:45.223063,0.001711,udp,83.208.52.15,10480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,518,458,60,259.0,0.8841698841698842,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:14:46.820699,0.000429,udp,79.27.30.83,58892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:14:47.379418,0.010174,udp,147.32.84.59,52832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,73,259,166.0,0.21987951807228914,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:14:49.399211,0.000504,udp,147.32.84.170,36974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:51.358268,0.000241,udp,147.32.84.138,39936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:14:58.046436,0.000333,udp,147.32.84.170,42783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:14:58.661100,0.000404,udp,147.32.84.138,36675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:04.869841,0.171876,tcp,147.32.86.20,3333.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,66,59419,1513,57906,900.2878787878788,0.025463235665359567,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:15:09.401286,0.017896,tcp,147.32.84.170,52775.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:15:13.262619,0.000191,udp,147.32.84.138,59381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:16.721248,0.000696,udp,46.70.19.148,62609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,73,468,270.5,0.13493530499075784,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:15:19.209823,0.000334,udp,147.32.84.164,38257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:15:19.210581,134.940979,tcp,147.32.84.164,36433.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,48,12121,3077,9044,252.52083333333334,0.2538569424964937,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:15:19.226925,134.926254,tcp,147.32.84.164,36435.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,17,1828,1160,668,107.52941176470588,0.6345733041575492,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:15:19.227078,134.925629,tcp,147.32.84.164,36437.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,17,1828,1160,668,107.52941176470588,0.6345733041575492,19,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:15:20.627298,0.000436,udp,199.8.13.1,12413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:15:24.531912,0.000252,udp,147.32.85.25,52036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:24.634980,0.0002,udp,147.32.85.25,44836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:25.406458,0.08126,tcp,147.32.84.164,39548.0,->,195.242.214.53,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:15:28.065356,15.30275,udp,147.32.84.94,7103.0,->,89.20.235.118,10710.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:15:29.047119,0.000201,udp,147.32.84.170,53347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:15:29.049159,0.272832,tcp,147.32.84.170,36268.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:15:29.472855,0.000237,udp,147.32.84.19,59257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:33.316906,0.0,tcp,113.105.171.58,80.0,->,147.32.86.89,17219.0,SA_,0.0,,1,66,66,0,66.0,1.0,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:15:39.187666,0.000352,udp,147.32.84.138,50768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:42.340087,0.145561,udp,147.32.84.229,13363.0,<->,77.39.70.72,26263.0,CON,0.0,0.0,2,569,75,494,284.5,0.13181019332161686,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:15:44.076079,0.00037,udp,147.32.84.166,35976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:44.774300,0.00043,udp,147.32.84.59,36553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:15:47.000316,0.001925,icmp,147.32.87.249,,<-,147.32.87.47,2.0,RED,,0.0,2,148,0,148,74.0,0.0,19,1,flow=Background,Background,-1 2011-08-16 19:15:50.931852,15.350213,udp,147.32.84.94,7103.0,->,85.2.221.143,59882.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:15:51.370271,2.440785,udp,74.98.252.17,16369.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,663,543,120,165.75,0.8190045248868778,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:15:59.317891,0.71111,udp,147.32.84.229,13363.0,<->,212.126.51.174,32204.0,CON,0.0,0.0,4,2997,60,2937,749.25,0.02002002002002002,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:15:59.402001,0.018659,tcp,147.32.84.170,46677.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:15:59.924387,0.279905,udp,149.254.219.248,17295.0,<->,147.32.84.229,443.0,CON,0.0,0.0,6,386,185,201,64.33333333333333,0.4792746113989637,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:00.046760,0.000311,udp,147.32.84.170,38762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:00.048841,0.288505,tcp,147.32.84.170,52843.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:09.401432,0.000342,udp,147.32.84.170,49669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:10.498602,0.000211,udp,147.32.84.138,34853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:16:13.298892,0.000232,udp,147.32.84.138,37083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:16:16.005431,0.000318,udp,212.152.113.63,42932.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:18.850423,605.147095,tcp,84.197.112.79,50282.0,->,147.32.84.171,6881.0,FSPA_FSPA,0.0,0.0,33,5871,4510,1361,177.9090909090909,0.7681825924033384,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:16:19.086828,0.000287,udp,147.32.84.138,35214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:16:19.790035,0.013425,tcp,147.32.85.74,39313.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:16:30.524415,0.400534,udp,147.32.84.229,13363.0,<->,59.113.2.179,24879.0,CON,0.0,0.0,2,190,130,60,95.0,0.6842105263157895,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:31.036490,0.306154,tcp,147.32.84.170,52847.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:41.204874,10.80038,tcp,147.32.84.170,36054.0,->,216.34.181.97,80.0,SPA_FSRPA,0.0,0.0,27,17393,1598,15795,644.1851851851852,0.09187604208589663,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:41.768619,0.476206,udp,147.32.84.170,52224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,73,167,120.0,0.30416666666666664,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:41.769804,0.001356,udp,147.32.84.170,56698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,76,142,109.0,0.3486238532110092,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:49.402933,0.017851,tcp,147.32.84.170,37936.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:16:51.749250,0.000527,udp,95.86.45.178,5037.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:53.716643,2218.09375,udp,147.32.84.94,7103.0,->,64.234.103.101,29808.0,INT,0.0,,9,756,756,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:16:53.924332,401.208252,tcp,147.32.84.59,52278.0,->,212.47.26.210,80.0,FSPA_FSPA,0.0,0.0,41,9369,4841,4528,228.5121951219512,0.5167040239086349,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:16:54.317464,3504.879883,udp,190.225.217.32,14678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:54.340692,0.004806,udp,217.189.218.100,20348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:16:59.402486,0.018358,tcp,147.32.84.170,46199.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:02.251320,0.000177,udp,147.32.84.170,40970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:05.961996,0.001495,udp,71.88.248.66,39665.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:06.310296,0.000454,udp,109.155.191.59,54658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:08.318305,0.000354,udp,190.225.108.170,40739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:09.403312,0.018831,tcp,147.32.84.170,42466.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:12.595610,0.000211,udp,147.32.84.138,51121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:17:13.034282,0.076069,tcp,147.32.84.59,54600.0,->,193.46.63.195,80.0,FSPA_FSPA,0.0,0.0,10,1595,817,778,159.5,0.5122257053291536,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:17:14.813771,0.000235,udp,147.32.84.170,37761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:14.814475,0.010016,udp,147.32.84.170,44615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:14.814538,0.010108,udp,147.32.84.170,59963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:14.883999,247.989563,tcp,147.32.84.170,48711.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,45,20139,3232,16907,447.53333333333336,0.16048463180892794,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:19.402606,0.018126,tcp,147.32.84.170,38358.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:26.582264,0.001787,udp,189.31.0.19,62337.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:26.731557,0.000476,udp,201.42.199.91,31134.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:27.663660,1807.285034,udp,151.24.198.175,22684.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:29.402846,0.018248,tcp,147.32.84.170,42473.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:35.331513,0.0,icmp,85.6.232.178,771.0,->,147.32.84.94,49142.0,URP,0.0,,1,70,70,0,70.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:17:37.838842,0.000341,udp,147.32.84.138,36730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:17:39.400541,0.000464,udp,147.32.84.170,39624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:17:39.594176,2446.97998,udp,24.107.197.236,62989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:45.198779,0.000397,udp,80.187.110.140,54700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:46.874883,0.371189,tcp,67.195.111.228,34146.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,3472,782,2690,289.3333333333333,0.2252304147465438,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:17:47.962155,0.000116,tcp,66.249.68.207,62989.0,->,147.32.85.115,80.0,S_,0.0,,1,74,74,0,74.0,1.0,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:17:50.722252,0.000456,udp,129.171.249.151,20082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,85,60,72.5,0.5862068965517241,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:17:55.659428,0.000238,udp,147.32.84.138,60022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:17:56.396779,100.456917,tcp,147.32.84.168,58775.0,->,69.171.242.39,443.0,FSPA_FSPA,0.0,0.0,21,4734,2906,1828,225.42857142857142,0.6138572032108154,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:17:59.402617,0.018276,tcp,147.32.84.170,42246.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:04.045115,0.000285,udp,147.32.84.170,57236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:07.509810,2469.272949,udp,91.124.184.131,32063.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:08.376703,326.75705,tcp,147.32.84.59,52417.0,->,212.47.26.210,80.0,FSPA_FSPA,0.0,0.0,27,5315,2351,2964,196.85185185185185,0.44233301975540923,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:18:09.400523,0.00038,udp,147.32.84.170,52537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:09.402520,0.017965,tcp,147.32.84.170,46214.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:13.086446,0.265266,tcp,147.32.84.170,42827.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:15.906326,0.000529,udp,93.1.131.186,15287.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:21.222607,0.000184,udp,147.32.84.138,35116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:21.452768,0.000127,udp,147.32.85.25,38588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:22.447624,3271.139893,udp,85.87.27.224,34744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,940,520,420,67.14285714285714,0.5531914893617021,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:24.464034,0.0012,udp,87.144.199.10,2180.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:26.911890,0.103766,tcp,147.32.84.59,33345.0,->,195.71.11.108,80.0,FSPA_FSPA,0.0,0.0,9,1455,1031,424,161.66666666666666,0.7085910652920963,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:18:29.400539,0.000383,udp,147.32.84.170,41122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:35.049750,0.278294,tcp,147.32.84.170,52878.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:36.357252,0.000143,udp,147.32.84.138,60224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:38.435014,0.000235,udp,147.32.85.89,58370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:46.732365,0.000352,udp,147.32.84.59,46113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,70,137,103.5,0.33816425120772947,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:47.063933,0.000261,udp,147.32.84.59,39114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,74,186,130.0,0.2846153846153846,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:49.402504,0.018141,tcp,147.32.84.170,38376.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:18:49.481308,0.000381,udp,143.53.150.40,42875.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:51.733596,0.000437,udp,118.71.68.127,60145.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:18:54.024679,3564.671143,tcp,78.45.147.31,36620.0,->,147.32.84.19,993.0,SPA_SPA,0.0,0.0,750,98702,40218,58484,131.60266666666666,0.40746894693116653,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:18:58.115665,0.000157,udp,147.32.85.25,58009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:58.983177,0.00018,udp,147.32.84.138,50287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:18:59.002948,0.000258,udp,147.32.84.138,58216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:02.602584,0.000244,udp,147.32.84.138,46089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:06.047390,0.00038,udp,147.32.84.170,55674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:06.048826,0.246394,tcp,147.32.84.170,52882.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:09.400629,0.000506,udp,147.32.84.170,43366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:09.402730,0.017813,tcp,147.32.84.170,42493.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:19.403641,0.017786,tcp,147.32.84.170,42263.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:20.953342,0.000519,udp,98.231.129.252,45245.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:20.981085,15.300736,udp,147.32.84.94,7103.0,->,178.0.175.1,35004.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:19:28.185105,0.000521,udp,78.61.6.188,30425.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,616,75,541,308.0,0.12175324675324675,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:29.401532,0.0003,udp,147.32.84.170,49761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:30.170983,0.001529,udp,187.124.61.182,29746.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:34.344936,0.000215,udp,147.32.85.25,43232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:34.834846,0.000447,udp,84.62.171.193,55009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:36.170093,0.000643,udp,109.154.217.134,2220.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:37.046732,0.000241,udp,147.32.84.170,34660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:37.048877,0.226302,tcp,147.32.84.170,52886.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:39.400694,0.000337,udp,147.32.84.170,44564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:39.769746,0.000251,udp,147.32.84.138,49317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:40.692580,0.000243,udp,147.32.84.138,36726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:48.934002,0.000149,udp,147.32.84.138,60905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:49.402541,0.01806,tcp,147.32.84.170,38384.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:19:50.865380,0.000189,udp,147.32.85.25,38645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:52.360237,3001.832031,udp,116.14.102.61,18289.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:58.678335,0.000325,udp,147.32.84.138,58753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:19:58.844652,0.001665,udp,12.36.252.123,11425.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:19:59.789778,3245.329102,udp,71.56.1.109,60575.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,822,462,360,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:00.848214,0.000269,udp,147.32.85.34,64938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,86,212,149.0,0.28859060402684567,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:08.047845,0.00033,udp,147.32.84.170,59938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:20:08.921232,0.000562,udp,151.200.30.237,50793.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:08.936680,0.416077,udp,147.32.84.94,7103.0,<->,94.134.200.92,7568.0,CON,0.0,0.0,40,32720,32114,606,818.0,0.981479217603912,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:09.061208,0.000426,udp,88.213.224.207,22707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:09.296307,0.001912,udp,147.32.84.59,41364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,479,81,398,239.5,0.16910229645093947,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:11.214028,0.00024,udp,147.32.84.138,35001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:12.689373,3103.098633,udp,86.26.5.228,57651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1583,1110,473,113.07142857142857,0.7012002526847757,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:15.393597,1703.803711,udp,78.34.125.216,41155.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,637,453,184,106.16666666666667,0.7111459968602826,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:19.005228,0.009915,udp,147.32.86.92,45866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:22.350292,8.295951,tcp,147.32.86.77,47574.0,->,93.184.220.20,80.0,FSPA_FSRPA,0.0,0.0,11,3323,1594,1729,302.09090909090907,0.4796870297923563,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:20:23.409523,8.447766,tcp,41.78.18.131,16725.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,16,1096,582,514,68.5,0.531021897810219,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:20:23.450864,0.000297,udp,147.32.85.89,44809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:24.223615,0.009156,tcp,147.32.84.13,33849.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2062,1389,673,229.11111111111111,0.6736178467507274,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:20:25.554604,2020.857788,udp,147.32.84.229,13363.0,<->,77.127.60.162,7948.0,CON,0.0,0.0,18,1352,644,708,75.11111111111111,0.47633136094674555,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:32.241328,1159.828003,udp,93.173.143.55,41237.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1090,970,120,272.5,0.8899082568807339,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:35.045043,0.000168,udp,147.32.84.138,55253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:40.911756,0.987551,tcp,147.32.86.194,4343.0,->,90.183.38.65,995.0,FSPA_FSPA,0.0,0.0,144,109680,4170,105510,761.6666666666666,0.03801969365426696,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:20:42.474335,0.000218,udp,147.32.85.25,58143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:42.744458,0.000242,udp,147.32.84.59,53763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,85,214,149.5,0.2842809364548495,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:48.067222,0.000198,udp,147.32.84.59,39091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,85,214,149.5,0.2842809364548495,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:20:49.401554,0.000297,udp,147.32.84.170,39445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:20:49.402480,0.018147,tcp,147.32.84.170,42275.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:20:52.297534,3110.745361,udp,115.171.2.150,13163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:20:59.400778,0.000411,udp,147.32.84.170,54603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:03.287429,0.000301,udp,147.32.84.138,48401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:06.777443,710.429138,udp,147.32.84.229,13363.0,<->,149.5.45.7,43031.0,CON,0.0,0.0,22,1496,814,682,68.0,0.5441176470588235,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:21:07.238137,0.000397,udp,147.32.84.138,34382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:09.402138,0.000358,udp,147.32.84.170,33231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:09.403226,0.018084,tcp,147.32.84.170,54227.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:13.522827,954.355347,udp,147.32.84.94,7103.0,->,211.143.252.74,7543.0,INT,0.0,,5,420,420,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:21:20.453890,0.01532,tcp,147.32.84.13,41784.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2191,1632,559,243.44444444444446,0.7448653582838887,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:21:21.898325,0.003857,tcp,147.32.84.13,41908.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2709,1467,1242,301.0,0.5415282392026578,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:21:25.112978,0.000312,udp,147.32.84.170,39393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:25.150665,0.000311,udp,147.32.84.170,39771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:25.151686,250.037125,tcp,147.32.84.170,43001.0,->,209.85.149.102,80.0,FSPA_FSPA,0.0,0.0,48,19960,12650,7310,415.8333333333333,0.6337675350701403,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:29.402707,0.017823,tcp,147.32.84.170,42246.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:29.949261,0.074756,tcp,90.183.39.17,41342.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1647,786,861,164.7,0.4772313296903461,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:21:36.213578,3553.919189,udp,147.32.87.30,123.0,<->,82.100.63.250,123.0,CON,0.0,0.0,112,10080,5040,5040,90.0,0.5,19,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 19:21:39.402745,0.017828,tcp,147.32.84.170,42885.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:41.864343,0.000411,udp,188.123.248.126,57535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:21:49.399832,0.000339,udp,147.32.85.25,39540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:49.402541,0.018325,tcp,147.32.84.170,60526.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:51.483041,1367.155151,udp,86.144.21.148,40614.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,647,527,120,161.75,0.8145285935085008,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:21:53.907816,0.000178,udp,147.32.84.138,53120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:54.658157,0.000304,udp,147.32.85.25,49608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:55.651833,0.00028,udp,147.32.84.138,57909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:21:56.328510,0.782359,tcp,147.32.84.171,42209.0,->,92.83.207.240,11562.0,FSPA_FSPA,0.0,0.0,12,1514,596,918,126.16666666666667,0.39365918097754293,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:21:59.400985,0.000308,udp,147.32.84.170,50940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:21:59.403025,0.018381,tcp,147.32.84.170,50227.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:12.047221,0.000355,udp,147.32.84.170,53925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:12.621902,0.000521,udp,87.253.14.164,14884.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:22:14.749902,15.300965,udp,147.32.84.94,7103.0,->,96.238.95.67,7383.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:22:26.610771,0.000202,udp,147.32.84.138,38882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:31.348539,1845.796509,udp,86.123.118.137,13974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:22:33.775429,0.000388,udp,147.32.84.138,35189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:34.067582,0.000256,udp,147.32.84.186,41457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:36.067645,0.000215,udp,147.32.84.138,53563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:37.094182,0.000509,udp,109.67.119.242,60420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:22:39.401084,0.000327,udp,147.32.84.170,37956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:39.401979,0.000287,udp,147.32.84.170,57542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:40.289196,0.000314,udp,147.32.85.34,54918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:41.439229,0.000687,udp,99.121.72.120,7108.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,74,480,277.0,0.13357400722021662,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:22:42.398208,0.000399,udp,221.246.47.205,40175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,156,90,66,78.0,0.5769230769230769,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:22:43.047958,0.00028,udp,147.32.84.170,33410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:43.048864,0.000453,udp,147.32.84.170,33540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:43.050273,0.26054,tcp,147.32.84.170,51242.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:49.403413,0.01858,tcp,147.32.84.170,50234.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:22:57.270798,0.00024,udp,147.32.84.138,35809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:22:59.403026,0.018406,tcp,147.32.84.170,54244.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:02.049432,0.000273,udp,147.32.84.138,41123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:23:09.400999,0.000415,udp,147.32.84.170,50896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:09.401941,0.000313,udp,147.32.84.170,39826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:09.402995,0.018769,tcp,147.32.84.170,60536.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:12.742177,0.367893,tcp,147.32.85.76,2690.0,->,184.73.248.79,80.0,FSPA_FSPA,0.0,0.0,11,2468,1716,752,224.36363636363637,0.6952998379254457,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:23:14.043994,0.00036,udp,147.32.84.170,36151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:14.238372,0.000195,udp,147.32.84.138,57526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:23:17.497834,15.233552,tcp,74.125.75.20,57219.0,->,147.32.84.222,80.0,FSPA_FSPA,0.0,0.0,10,1982,758,1224,198.2,0.38244197780020184,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:23:18.595128,2633.082031,udp,89.102.23.3,59949.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1221,859,362,122.1,0.7035217035217035,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:23:19.401039,0.000429,udp,147.32.84.170,60495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:19.402041,0.000566,udp,147.32.84.170,48094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:19.403298,0.018314,tcp,147.32.84.170,50244.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:27.811173,0.019613,udp,147.32.84.59,59321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:23:34.327909,2.665885,udp,147.32.84.94,7103.0,<->,77.208.100.159,7229.0,CON,0.0,0.0,41,30795,29877,918,751.0975609756098,0.9701899659035558,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:23:36.481921,0.000228,udp,147.32.84.138,50046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:23:43.657920,0.000262,udp,147.32.85.25,56500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:23:45.049220,0.289863,tcp,147.32.84.170,51256.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:47.708482,0.000603,udp,78.101.175.43,55841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:23:49.403188,0.018497,tcp,147.32.84.170,50248.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:50.246694,0.000458,udp,77.48.244.30,19110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:23:59.401047,0.000441,udp,147.32.84.170,38661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:23:59.622005,3398.092041,udp,174.48.72.173,61309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,800,588,212,133.33333333333334,0.735,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:01.274284,0.000475,udp,147.32.85.34,55031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:24:01.549971,0.000211,udp,147.32.84.138,47121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:24:07.210625,0.000443,udp,201.157.2.197,31742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:08.673291,0.0,tcp,147.32.84.165,4886.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:08.673497,0.0,tcp,147.32.84.165,4887.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:08.679533,0.0,tcp,147.32.84.165,4889.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:08.851322,0.0,tcp,147.32.84.165,4890.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:08.851521,0.0,tcp,147.32.84.165,4891.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:08.871619,0.0,tcp,147.32.84.165,4893.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:09.051594,0.0,tcp,147.32.84.165,4894.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:09.051758,0.0,tcp,147.32.84.165,4895.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:09.401107,0.000509,udp,147.32.84.170,39970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:09.402179,0.000326,udp,147.32.84.170,45110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:09.613472,0.0,tcp,147.32.84.165,4898.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:09.812421,0.0,tcp,147.32.84.165,4899.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:10.815992,0.000496,udp,201.43.35.211,42107.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:11.175726,0.000193,udp,147.32.84.138,52208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:24:16.049018,0.000327,udp,147.32.84.170,33685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:16.049879,0.000364,udp,147.32.84.170,45196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:21.559228,6.019096,udp,147.32.84.229,13363.0,->,222.96.235.35,37226.0,INT,0.0,,3,231,231,0,77.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:24:21.898401,44.227512,tcp,147.32.85.76,2746.0,->,67.192.92.227,80.0,FSPA_FSPA,0.0,0.0,13,3029,2559,470,233.0,0.8448332783096731,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:24:22.129982,0.0,tcp,147.32.84.165,1164.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.130132,0.0,tcp,147.32.84.165,1165.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.700001,0.10221,tcp,147.32.84.59,36137.0,->,195.71.11.67,80.0,FSPA_FSPA,0.0,0.0,10,2282,823,1459,228.2,0.36064855390008765,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:24:22.731374,0.0,tcp,147.32.84.165,1174.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.731501,0.0,tcp,147.32.84.165,1176.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.731629,0.0,tcp,147.32.84.165,1177.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.731683,0.0,tcp,147.32.84.165,1178.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:22.731778,0.0,tcp,147.32.84.165,1180.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:31.324322,82.369003,udp,147.32.84.229,13363.0,<->,68.106.129.54,24789.0,CON,0.0,0.0,6,3133,120,3013,522.1666666666666,0.038301947015639964,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:32.858430,3300.203369,udp,85.179.22.7,43815.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,3328,2614,714,151.27272727272728,0.7854567307692307,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:33.010787,0.318743,udp,147.32.84.229,13363.0,<->,114.167.63.122,42940.0,CON,0.0,0.0,2,1059,76,983,529.5,0.07176581680830972,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:34.147266,0.0,tcp,147.32.84.165,1405.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.147358,0.0,tcp,147.32.84.165,1402.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.147366,0.0,tcp,147.32.84.165,1404.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.748200,0.0,tcp,147.32.84.165,1417.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.748249,0.0,tcp,147.32.84.165,1414.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.748257,0.0,tcp,147.32.84.165,1416.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.748399,0.0,tcp,147.32.84.165,1421.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:34.748452,0.0,tcp,147.32.84.165,1418.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:39.401888,0.000363,udp,147.32.84.170,50701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:40.514571,0.217711,udp,147.32.84.229,13363.0,<->,173.29.40.66,51867.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:46.165281,0.0,tcp,147.32.84.165,1645.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.165466,0.0,tcp,147.32.84.165,1646.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.362974,0.000432,udp,188.84.254.143,39992.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:46.766019,0.0,tcp,147.32.84.165,1655.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.766104,0.0,tcp,147.32.84.165,1657.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.766230,0.0,tcp,147.32.84.165,1658.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.766235,0.0,tcp,147.32.84.165,1659.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:46.766243,0.0,tcp,147.32.84.165,1661.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:47.315458,0.354069,udp,147.32.84.229,13363.0,<->,124.244.226.56,50332.0,CON,0.0,0.0,4,3039,60,2979,759.75,0.019743336623889437,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:49.403909,0.000257,udp,147.32.84.170,47721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:24:52.368742,0.00055,udp,62.133.64.2,14618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:52.923559,0.000522,udp,87.252.227.84,42959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:24:54.927596,0.429076,tcp,147.32.84.165,1534.0,->,222.189.228.111,3389.0,FA_R,0.0,0.0,2,120,60,60,60.0,0.5,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:24:56.164743,0.000293,udp,147.32.85.25,38274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:24:58.182138,0.0,tcp,147.32.84.165,1886.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.182152,0.0,tcp,147.32.84.165,1883.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.182158,0.0,tcp,147.32.84.165,1885.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.783272,0.0,tcp,147.32.84.165,1898.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.783276,0.0,tcp,147.32.84.165,1895.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.783314,0.0,tcp,147.32.84.165,1897.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.783388,0.0,tcp,147.32.84.165,1902.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:58.783398,0.0,tcp,147.32.84.165,1899.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:24:59.402119,0.00035,udp,147.32.84.170,60269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:02.513215,1664.687378,udp,147.32.84.94,7103.0,->,77.228.244.189,7547.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:25:04.442638,3073.557129,udp,24.44.2.150,46952.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,1497,765,732,68.04545454545455,0.5110220440881763,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:08.882875,2555.624512,udp,67.197.113.226,12500.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1196,1015,181,199.33333333333334,0.8486622073578596,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:09.161167,0.000274,udp,147.32.84.59,37327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:10.199288,0.0,tcp,147.32.84.165,2081.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:10.199296,0.0,tcp,147.32.84.165,2079.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:10.800712,0.0,tcp,147.32.84.165,2090.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:10.800719,0.0,tcp,147.32.84.165,2088.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:10.800722,0.0,tcp,147.32.84.165,2093.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:10.800775,0.0,tcp,147.32.84.165,2091.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:12.752528,2443.519775,udp,82.12.167.132,63867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,960,712,248,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:14.496984,0.000374,udp,94.75.121.216,42673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:15.850950,0.000397,udp,80.213.196.46,55695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,80,66,73.0,0.547945205479452,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:17.982096,127.826691,udp,147.32.84.229,13363.0,->,201.51.32.186,63667.0,INT,0.0,,9,657,657,0,73.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:25:18.046917,0.000326,udp,147.32.84.170,45511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:18.047804,0.00037,udp,147.32.84.170,43993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:18.049195,0.226923,tcp,147.32.84.170,51268.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:19.402123,0.000302,udp,147.32.84.170,53787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:19.403248,0.018145,tcp,147.32.84.170,54269.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:22.216956,0.0,tcp,147.32.84.165,2261.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.217029,0.0,tcp,147.32.84.165,2259.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.818171,0.0,tcp,147.32.84.165,2270.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.818324,0.0,tcp,147.32.84.165,2268.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.818482,0.0,tcp,147.32.84.165,2273.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.818559,0.0,tcp,147.32.84.165,2271.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:22.818783,0.0,tcp,147.32.84.165,2276.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:24.130359,1271.33374,udp,147.32.84.94,7103.0,<->,63.229.201.14,7205.0,CON,0.0,0.0,76,63179,62045,1134,831.3026315789474,0.9820509979581823,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:29.735495,0.000332,udp,147.32.84.138,58530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:34.234178,0.0,tcp,147.32.84.165,2439.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.234352,0.0,tcp,147.32.84.165,2441.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.835384,0.0,tcp,147.32.84.165,2448.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.835472,0.0,tcp,147.32.84.165,2450.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.835479,0.0,tcp,147.32.84.165,2451.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.835641,0.0,tcp,147.32.84.165,2453.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:34.835655,0.0,tcp,147.32.84.165,2454.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:35.234964,0.000252,udp,147.32.84.59,55784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,85,222,153.5,0.2768729641693811,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:35.297293,1515.590576,udp,147.32.84.229,13363.0,<->,87.228.30.134,4990.0,CON,0.0,0.0,6,976,613,363,162.66666666666666,0.6280737704918032,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:37.209133,0.272638,udp,147.32.84.229,13363.0,<->,186.23.90.240,57398.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:39.401372,0.010059,udp,147.32.84.170,34817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:39.412000,0.000423,udp,147.32.84.170,36575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:42.603566,0.000366,udp,147.32.86.77,38568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,74,148,111.0,0.3333333333333333,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:46.251951,0.0,tcp,147.32.84.165,2621.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:46.251961,0.0,tcp,147.32.84.165,2619.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:46.852794,0.0,tcp,147.32.84.165,2630.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:46.852808,0.0,tcp,147.32.84.165,2628.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:46.852813,0.0,tcp,147.32.84.165,2633.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:46.852817,0.0,tcp,147.32.84.165,2631.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:49.047844,0.000418,udp,147.32.84.170,60949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:49.401960,0.000363,udp,147.32.84.170,37762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:49.402847,0.000333,udp,147.32.84.170,49195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:25:52.108249,27.355497,tcp,41.238.24.42,2222.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,15,1073,519,554,71.53333333333333,0.483690587138863,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:25:52.505700,0.000374,udp,147.32.86.20,57401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:56.117753,3227.026367,udp,76.176.127.202,29954.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,729,543,186,121.5,0.7448559670781894,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:58.076442,0.003498,udp,92.240.231.58,38841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3032,60,2972,758.0,0.01978891820580475,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:25:58.269390,61.246315,tcp,147.32.84.165,2755.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:25:58.269405,0.0,tcp,147.32.84.165,2771.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:58.689456,0.0,tcp,147.32.84.165,2775.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:58.809644,0.000225,udp,147.32.84.138,47547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:25:58.870260,0.0,tcp,147.32.84.165,2777.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:58.870318,0.0,tcp,147.32.84.165,2779.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:58.870378,0.0,tcp,147.32.84.165,2781.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:25:59.403291,0.01764,tcp,147.32.84.170,36541.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:26:00.803553,0.100145,tcp,147.32.86.96,37122.0,->,147.32.87.51,12489.0,_FSPA,,0.0,8,586,0,586,73.25,0.0,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:26:00.879611,0.000271,udp,147.32.85.34,52932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,85,225,155.0,0.27419354838709675,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:00.905914,0.00021,udp,147.32.85.34,65399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,85,225,155.0,0.27419354838709675,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:03.425629,0.000196,udp,147.32.85.25,55367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:04.191700,0.00044,udp,217.173.221.242,48465.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:04.274957,0.000248,udp,147.32.85.89,58083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,78,200,139.0,0.2805755395683453,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:04.276730,0.179017,tcp,147.32.80.13,49903.0,->,147.32.85.63,80.0,FSPA_FSPA,0.0,0.0,33,22167,1267,20900,671.7272727272727,0.057157035232552895,19,1,flow=From-Background-CVUT-Proxy,Background,-1 2011-08-16 19:26:06.925862,30.002876,udp,130.132.153.127,41742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:09.403034,0.00042,udp,147.32.84.170,57979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:26:09.403988,0.000313,udp,147.32.84.170,56484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:26:10.286306,0.0,tcp,147.32.84.165,2891.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:10.286470,0.0,tcp,147.32.84.165,2893.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:10.887336,0.0,tcp,147.32.84.165,2897.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:10.887441,0.0,tcp,147.32.84.165,2899.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:10.887548,0.0,tcp,147.32.84.165,2901.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:11.487873,0.0,tcp,147.32.84.165,2903.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:11.672002,0.298634,udp,147.32.84.229,13363.0,<->,126.116.40.159,37225.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:12.326345,0.000497,udp,128.151.71.18,44544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:19.504064,0.00057,udp,46.249.22.143,14333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,75,468,271.5,0.13812154696132597,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:22.304142,0.0,tcp,147.32.84.165,3011.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:22.904692,0.0,tcp,147.32.84.165,3017.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:22.904814,0.0,tcp,147.32.84.165,3019.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:22.904873,0.0,tcp,147.32.84.165,3021.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:23.075152,3224.582031,udp,147.32.84.229,13363.0,<->,128.112.36.227,29853.0,CON,0.0,0.0,6,1280,1098,182,213.33333333333334,0.8578125,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:26:23.505840,0.0,tcp,147.32.84.165,3023.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:29.402338,0.000376,udp,147.32.84.170,33294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:26:31.313589,1.836082,tcp,147.32.84.171,46344.0,->,201.165.14.129,47822.0,FSPA_FSPA,0.0,0.0,15,1914,808,1106,127.6,0.4221525600835946,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:26:31.802326,0.275687,udp,147.32.84.229,13363.0,->,121.103.221.79,19947.0,INT,0.0,,1,78,78,0,78.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:26:34.320967,0.0,tcp,147.32.84.165,3131.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:34.922163,0.0,tcp,147.32.84.165,3137.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:34.922243,0.0,tcp,147.32.84.165,3139.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:34.922386,0.0,tcp,147.32.84.165,3141.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:35.358079,0.0,icmp,69.4.233.55,2563.0,->,147.32.86.29,,URHPRO,0.0,,1,90,90,0,90.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:26:35.523021,0.0,tcp,147.32.84.165,3143.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:35.955628,1446.180786,udp,147.32.84.94,7103.0,->,213.37.130.147,7246.0,INT,0.0,,12,1008,1008,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:26:46.338476,0.0,tcp,147.32.84.165,3251.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:46.556990,0.000289,udp,147.32.84.138,40932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:46.939383,0.0,tcp,147.32.84.165,3257.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:46.939397,0.0,tcp,147.32.84.165,3259.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:46.939561,0.0,tcp,147.32.84.165,3261.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:47.540298,0.0,tcp,147.32.84.165,3263.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:48.089042,0.000255,udp,147.32.84.59,57282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,85,222,153.5,0.2768729641693811,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:48.168599,0.000371,udp,147.32.84.59,34935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,85,227,156.0,0.2724358974358974,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:51.601849,0.000374,udp,147.32.84.19,47672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,80,221,150.5,0.26578073089701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:26:58.355395,0.0,tcp,147.32.84.165,3370.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.355409,0.0,tcp,147.32.84.165,3371.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.355427,0.0,tcp,147.32.84.165,3372.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.956782,0.0,tcp,147.32.84.165,3377.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.956796,0.0,tcp,147.32.84.165,3376.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.956851,0.0,tcp,147.32.84.165,3379.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.956856,0.0,tcp,147.32.84.165,3378.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:58.956892,0.0,tcp,147.32.84.165,3381.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:59.401466,0.000356,udp,147.32.84.170,35620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:26:59.557780,0.0,tcp,147.32.84.165,3382.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:26:59.557794,61.275761,tcp,147.32.84.165,3397.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:26:59.972691,0.0,tcp,147.32.84.165,3387.0,->,147.32.82.85,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:03.515665,0.000357,udp,147.32.84.59,37815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,85,227,156.0,0.2724358974358974,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:27:10.373225,0.0,tcp,147.32.84.165,3493.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:10.974341,0.0,tcp,147.32.84.165,3499.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:10.974581,0.0,tcp,147.32.84.165,3501.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:10.974774,0.0,tcp,147.32.84.165,3503.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:11.575136,0.0,tcp,147.32.84.165,3505.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:11.890985,0.0,icmp,147.32.84.164,771.0,->,109.92.100.168,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:27:12.273012,0.954767,udp,147.32.87.48,4819.0,->,147.32.87.98,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,19,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:27:19.402332,0.000351,udp,147.32.84.170,41296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:27:19.403438,0.018465,tcp,147.32.84.170,35418.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:27:22.390145,0.0,tcp,147.32.84.165,3613.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:22.886685,0.000533,udp,98.168.132.83,36872.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:27:22.991140,0.0,tcp,147.32.84.165,3619.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:22.991289,0.0,tcp,147.32.84.165,3621.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:22.991372,0.0,tcp,147.32.84.165,3623.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:23.592062,0.0,tcp,147.32.84.165,3625.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:24.050202,90.233543,udp,147.32.84.94,7103.0,->,80.93.118.66,62822.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:27:24.167562,0.527173,tcp,67.195.115.43,58480.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,2293,805,1488,229.3,0.35106846925425206,19,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 19:27:25.549376,2567.379883,tcp,147.32.84.130,49970.0,->,81.31.46.106,80.0,FSPA_FSPA,0.0,0.0,1103841,922656850,22142342,900514508,835.8602824138621,0.02399845836510074,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:27:26.460857,0.000668,udp,77.103.96.91,51655.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:27:28.863840,0.374584,tcp,147.32.85.76,2999.0,->,174.129.30.226,80.0,FSPA_FSPA,0.0,0.0,12,2528,1776,752,210.66666666666666,0.7025316455696202,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:27:34.407974,0.0,tcp,147.32.84.165,3732.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:34.408044,0.0,tcp,147.32.84.165,3733.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:34.408051,0.0,tcp,147.32.84.165,3734.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.008400,0.0,tcp,147.32.84.165,3739.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.008408,0.0,tcp,147.32.84.165,3738.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.008448,0.0,tcp,147.32.84.165,3741.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.008500,0.0,tcp,147.32.84.165,3740.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.008507,0.0,tcp,147.32.84.165,3743.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.609330,0.0,tcp,147.32.84.165,3744.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:35.609424,0.0,tcp,147.32.84.165,3745.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:40.497948,0.000297,udp,147.32.85.89,55320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,78,200,139.0,0.2805755395683453,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:27:42.131636,537.481567,udp,147.32.84.94,7103.0,->,98.83.147.49,7134.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:27:42.552213,0.000458,udp,92.242.126.110,23477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:27:45.846368,3012.440186,udp,178.180.26.0,40480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1434,1062,372,119.5,0.7405857740585774,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:27:46.425409,0.0,tcp,147.32.84.165,3852.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:46.425485,0.0,tcp,147.32.84.165,3853.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:46.425490,0.0,tcp,147.32.84.165,3854.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.026206,0.0,tcp,147.32.84.165,3859.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.026308,0.0,tcp,147.32.84.165,3858.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.026416,0.0,tcp,147.32.84.165,3861.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.026475,0.0,tcp,147.32.84.165,3860.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.026549,0.0,tcp,147.32.84.165,3863.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.626865,0.0,tcp,147.32.84.165,3864.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:47.627005,0.0,tcp,147.32.84.165,3865.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:48.016772,0.000196,udp,147.32.84.138,58329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:27:52.051063,0.2295,tcp,147.32.84.170,49168.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:27:58.442476,0.0,tcp,147.32.84.165,3972.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:58.442558,0.0,tcp,147.32.84.165,3973.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:58.442569,0.0,tcp,147.32.84.165,3974.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.043252,0.0,tcp,147.32.84.165,3979.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.043341,0.0,tcp,147.32.84.165,3978.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.043347,0.0,tcp,147.32.84.165,3981.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.043394,0.0,tcp,147.32.84.165,3980.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.043459,0.0,tcp,147.32.84.165,3983.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.644314,0.0,tcp,147.32.84.165,3984.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:27:59.644393,0.0,tcp,147.32.84.165,3985.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:02.518853,0.000226,udp,147.32.85.6,59735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:28:09.034098,9.2e-05,icmp,147.32.87.249,,<-,147.32.87.49,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,19,1,flow=Background,Background,-1 2011-08-16 19:28:10.459895,0.0,tcp,147.32.84.165,4093.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:10.459909,61.435413,tcp,147.32.84.165,4012.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:28:10.459914,0.0,tcp,147.32.84.165,4094.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:10.872303,0.0,tcp,147.32.84.165,4097.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.060790,0.0,tcp,147.32.84.165,4100.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.060804,0.0,tcp,147.32.84.165,4099.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.060809,0.0,tcp,147.32.84.165,4102.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.060859,0.0,tcp,147.32.84.165,4101.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.060865,0.0,tcp,147.32.84.165,4104.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.661577,0.0,tcp,147.32.84.165,4105.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:11.661684,0.0,tcp,147.32.84.165,4106.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:13.347639,0.351046,tcp,147.32.84.170,42941.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:13.971227,0.353297,tcp,147.32.84.170,54257.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:14.106160,240.043182,tcp,147.32.84.170,42951.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:15.760192,0.000316,udp,147.32.84.138,54730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:28:19.401478,0.000398,udp,147.32.84.170,54745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:19.403453,0.018307,tcp,147.32.84.170,36571.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:22.477154,0.0,tcp,147.32.84.165,4213.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:22.477170,0.0,tcp,147.32.84.165,4214.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:22.477175,0.0,tcp,147.32.84.165,4215.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.050975,0.303702,tcp,147.32.84.170,49184.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:23.078258,0.0,tcp,147.32.84.165,4220.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.078274,0.0,tcp,147.32.84.165,4219.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.078278,0.0,tcp,147.32.84.165,4222.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.078330,0.0,tcp,147.32.84.165,4221.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.078334,0.0,tcp,147.32.84.165,4224.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.678993,0.0,tcp,147.32.84.165,4225.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:23.679074,0.0,tcp,147.32.84.165,4226.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,19,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 19:28:28.964825,0.000472,udp,96.231.213.104,21817.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:28:29.404187,0.000281,udp,147.32.84.170,39858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:29.440998,1.041603,udp,212.183.128.101,42141.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:28:35.211626,0.000287,udp,147.32.84.68,61164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:28:39.402354,0.000331,udp,147.32.84.170,57175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:39.404397,0.018516,tcp,147.32.84.170,45718.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:40.476788,1743.135742,udp,147.32.84.94,7103.0,<->,188.40.45.42,50012.0,CON,0.0,0.0,350,303663,5889,297774,867.6085714285714,0.019393208919097817,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:28:45.127536,160.017044,tcp,78.102.51.73,49827.0,->,147.32.84.242,22.0,FSRPA_FSPA,0.0,0.0,350,216444,193438,23006,618.4114285714286,0.8937092273290089,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:28:49.402538,0.000434,udp,147.32.84.170,33808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:49.901362,0.0,tcp,113.105.171.59,80.0,->,147.32.85.122,58153.0,SA_,0.0,,1,66,66,0,66.0,1.0,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:28:54.049240,0.000341,udp,147.32.84.170,37961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:54.051490,0.362311,tcp,147.32.84.170,49188.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:28:55.715312,0.000167,udp,147.32.84.138,49189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:28:59.403663,0.000244,udp,147.32.84.170,45124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:29:00.027317,0.0004,udp,147.32.84.138,40445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:09.403820,0.000327,udp,147.32.84.170,43744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:29:09.521935,246.120667,udp,147.32.84.229,13363.0,<->,8.29.3.35,22525.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:29:11.289497,61.813023,tcp,147.32.84.165,4237.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1593,497,1096,132.75,0.31198995605775265,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:29:14.015818,0.168639,tcp,147.32.86.20,3986.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,64,58071,1451,56620,907.359375,0.02498665426805118,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:29:15.949745,0.000265,udp,147.32.84.138,57478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:18.077375,0.000347,udp,147.32.84.138,55691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:19.402597,0.000406,udp,147.32.84.170,43159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:29:20.418327,0.181475,udp,147.32.84.229,13363.0,<->,98.25.100.21,19989.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:29:21.818562,0.000295,udp,147.32.84.138,59429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:28.478846,1846.459961,arp,147.32.87.36,,who,147.32.87.1,,CON,,,6,360,180,180,60.0,0.5,19,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 19:29:32.536393,0.000387,udp,147.32.84.138,42627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:34.056924,1357.90625,udp,24.197.240.218,4403.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:29:38.531428,0.00028,udp,147.32.85.89,35460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:41.850562,0.000188,udp,147.32.84.138,53994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:29:49.402674,0.00044,udp,147.32.84.170,33457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:29:51.423293,15.285673,udp,147.32.84.94,7103.0,->,202.60.240.93,7544.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:29:53.989224,3277.778564,udp,117.4.132.199,21235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,559,426,133,139.75,0.7620751341681574,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:29:59.403302,0.000408,udp,147.32.84.170,57159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:30:01.217785,0.000246,udp,147.32.85.34,57344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:02.669550,0.000285,udp,147.32.84.138,50136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:08.311834,0.00034,udp,147.32.85.25,43720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:09.903152,0.000281,udp,147.32.87.36,48503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,19,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 19:30:09.932583,0.000171,udp,147.32.87.36,38268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,19,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 19:30:12.517879,61.771961,tcp,147.32.84.165,4238.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:30:13.731860,0.648691,udp,77.22.45.30,61375.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,655,535,120,163.75,0.816793893129771,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:30:25.346034,0.126017,udp,147.32.84.229,13363.0,<->,69.55.254.137,2613.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:30:27.048591,0.000404,udp,147.32.84.170,58356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:30:27.049996,0.26773,tcp,147.32.84.170,49200.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:30:28.289264,0.000285,udp,147.32.84.59,60641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,78,284,181.0,0.2154696132596685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:28.350716,0.000415,udp,147.32.84.59,50996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,76,282,179.0,0.2122905027932961,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:39.423290,0.000454,udp,147.32.84.170,39551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:30:40.778481,0.000551,udp,95.51.35.146,52831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:30:49.402517,0.000372,udp,147.32.84.170,56750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:30:52.297982,0.000354,udp,147.32.84.2,47875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:30:56.775209,0.000273,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,19,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 19:31:02.512259,0.041639,udp,147.32.84.171,49154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,79,237,158.0,0.25,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:04.662307,1583.103027,udp,147.32.84.94,7103.0,<->,188.40.108.118,50012.0,CON,0.0,0.0,443,389261,6981,382280,878.6930022573364,0.01793398259779428,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:05.623788,0.001511,udp,80.48.95.53,17174.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:05.660548,3488.622314,udp,149.5.45.251,43034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1616,886,730,134.66666666666666,0.5482673267326733,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:07.778986,3004.437988,udp,85.78.6.65,24076.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1097,547,550,274.25,0.4986326344576117,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:09.403635,0.000478,udp,147.32.84.170,34727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:31:10.645678,0.000193,udp,147.32.85.25,47830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:11.834095,0.206502,tcp,147.32.86.20,4082.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31050,1089,29961,776.25,0.035072463768115944,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:31:13.686168,64.755257,tcp,147.32.84.165,4254.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:31:15.668436,0.000241,udp,147.32.84.138,60326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:20.179952,0.000314,udp,147.32.84.59,42969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:21.167489,0.000638,udp,190.52.132.87,54192.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,78,490,284.0,0.13732394366197184,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:29.052829,0.281687,tcp,147.32.84.170,60653.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:31:29.402570,0.000321,udp,147.32.84.170,41698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:31:30.121233,0.103502,tcp,147.32.84.164,51539.0,->,79.141.166.3,27030.0,FSPA_FSPA,0.0,0.0,2359,2687568,40099,2647469,1139.2827469266638,0.014920180624266996,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:31:30.907850,0.0,igmp,147.32.87.5,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:31:30.985185,0.000385,udp,82.137.93.190,55693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:31.360686,0.029116,tcp,147.32.84.215,34846.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:31:39.403710,0.000313,udp,147.32.84.170,47253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:31:41.885018,23.533066,udp,147.32.84.229,13363.0,<->,213.88.74.227,50742.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:31:42.711311,1.143509,tcp,147.32.86.20,4106.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,104,103670,1826,101844,996.8269230769231,0.017613581556863125,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:31:45.331978,0.000411,udp,147.32.84.59,37952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:50.754968,0.000316,udp,147.32.84.59,32997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:31:59.402813,0.000324,udp,147.32.84.170,54196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:32:00.047705,0.256238,tcp,147.32.84.170,60658.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:32:00.552905,0.001806,udp,85.176.68.254,61900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,489,60,274.5,0.8907103825136612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:00.926687,0.000285,udp,147.32.85.34,63145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:00.937250,0.000365,udp,147.32.85.34,57757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:00.944834,0.000244,udp,147.32.85.34,50409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:05.380796,0.000563,udp,93.164.55.76,50812.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:07.124712,2201.137695,udp,81.159.78.98,38517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1732,1491,241,216.5,0.8608545034642032,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:09.405214,0.018229,tcp,147.32.84.170,49046.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:32:11.525197,0.000324,udp,147.32.84.59,35715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:14.179498,2.01535,udp,178.56.170.96,56104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1090,970,120,272.5,0.8899082568807339,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:16.848252,0.026657,udp,147.32.84.68,59504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,72,335,203.5,0.1769041769041769,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:17.838460,64.800819,tcp,147.32.84.165,4255.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:32:19.403743,0.000296,udp,147.32.84.170,60841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:32:23.123665,0.874364,udp,147.32.84.94,7103.0,<->,77.22.54.7,7581.0,CON,0.0,0.0,48,38356,37594,762,799.0833333333334,0.9801334862863698,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:28.721846,15.237065,udp,147.32.84.94,7103.0,->,195.122.245.187,7250.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:32:29.785160,970.003906,udp,147.32.84.229,13363.0,<->,190.75.80.237,7626.0,CON,0.0,0.0,6,3510,514,2996,585.0,0.14643874643874644,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:36.429465,0.000236,udp,147.32.84.138,37875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:32:39.402950,0.000407,udp,147.32.84.170,52415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:32:43.111906,1527.67749,udp,147.32.84.94,7103.0,<->,46.4.80.233,52012.0,CON,0.0,0.0,696,390810,23304,367506,561.5086206896551,0.059629999232363555,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:50.031132,6.038614,udp,147.32.84.229,13363.0,->,114.36.46.112,54661.0,INT,0.0,,3,1422,1422,0,474.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:32:53.247110,3538.061768,rtp,147.32.84.229,13363.0,<->,78.141.179.10,34060.0,CON,0.0,0.0,11,8429,3118,5311,766.2727272727273,0.3699133942341915,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:58.451165,0.000413,udp,188.106.88.108,17136.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:32:59.637705,2.454998,tcp,66.249.72.115,57994.0,->,147.32.84.2,21.0,FSPA_FSPA,0.0,0.0,35,3283,1258,2025,93.8,0.38318611026500154,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:33:02.050718,0.271799,tcp,147.32.84.170,60666.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:03.422087,6.053076,udp,147.32.84.229,13363.0,->,46.9.3.44,63704.0,INT,0.0,,3,987,987,0,329.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:33:05.147539,0.0,icmp,89.191.240.171,8.0,->,147.32.84.210,3.0,ECO,0.0,,1,60,60,0,60.0,1.0,19,1,flow=Background,Background,-1 2011-08-16 19:33:09.405058,0.018636,tcp,147.32.84.170,33217.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:14.003958,0.000276,udp,147.32.84.138,33261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:33:17.124563,0.000623,udp,212.97.236.84,60620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,177,74,125.5,0.7051792828685259,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:19.403026,0.000381,udp,147.32.84.170,52400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:20.118889,0.00062,udp,201.255.79.95,43813.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,74,495,284.5,0.13005272407732865,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:22.031629,61.823494,tcp,147.32.84.165,4256.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:33:22.475714,0.000431,udp,79.100.80.153,1701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:25.839285,3465.264648,udp,147.32.84.15,32858.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,19,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 19:33:28.213231,0.001755,udp,88.164.196.81,7014.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:29.675339,0.000427,udp,46.74.223.219,61129.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,191,62,126.5,0.7549407114624506,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:30.085384,0.000202,udp,88.87.17.51,9728.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:32.184331,0.0,udp,147.32.84.94,7103.0,->,89.178.175.148,7260.0,INT,0.0,,1,84,84,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:33:32.452483,0.000238,udp,147.32.84.138,41643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:33:33.041488,0.001613,udp,82.253.89.233,35780.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:33.048536,0.000366,udp,147.32.84.170,54166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:37.582513,0.002141,udp,147.32.84.130,49306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,85,192,138.5,0.30685920577617326,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:33:39.286523,21.291311,tcp,147.32.85.47,3506.0,->,170.107.181.167,80.0,FSPA_FSPA,0.0,0.0,21,5848,4346,1502,278.4761904761905,0.7431600547195623,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:33:39.404005,0.000332,udp,147.32.84.170,59876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:43.318860,146.391586,udp,24.37.102.73,2181.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,679,150,529,169.75,0.22091310751104565,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:33:47.079746,4.4e-05,icmp,147.32.87.249,,<-,147.32.87.38,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,19,1,flow=Background,Background,-1 2011-08-16 19:33:49.403138,0.000439,udp,147.32.84.170,38788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:49.405121,0.018527,tcp,147.32.84.170,33228.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:33:58.981117,2698.217041,udp,84.49.197.223,47247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:01.226012,0.000382,udp,216.23.162.4,16022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:03.929914,0.00047,udp,147.32.84.138,36795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:34:04.050404,0.000255,udp,147.32.84.170,51728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:08.783272,0.000608,udp,74.15.182.18,32918.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:09.404930,0.018183,tcp,147.32.84.170,33231.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:15.560285,0.0,udp,147.32.84.94,7103.0,->,188.61.149.65,32810.0,INT,0.0,,1,84,84,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:34:17.313869,28.356203,tcp,147.32.85.76,3377.0,->,192.221.101.253,80.0,FSPA_FSPA,0.0,0.0,17,8370,857,7513,492.3529411764706,0.10238948626045401,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:34:19.403106,0.000487,udp,147.32.84.170,33631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:19.405269,0.020554,tcp,147.32.84.170,41647.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:23.239704,61.850075,tcp,147.32.84.165,4257.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:34:24.021139,0.000388,udp,151.67.95.221,47866.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:28.715668,0.000305,udp,147.32.84.138,57586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:34:31.918904,0.000541,udp,109.108.192.57,52363.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:36.321226,0.000408,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,19,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 19:34:37.622551,15.218114,udp,147.32.84.94,7103.0,->,91.201.230.130,7458.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:34:38.220054,0.208216,tcp,147.32.86.20,4240.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,41,34218,1031,33187,834.5853658536586,0.03013034075632708,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:34:38.976922,3057.387695,udp,190.4.77.141,11385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:39.403178,0.000492,udp,147.32.84.170,60498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:39.405292,0.018797,tcp,147.32.84.170,33235.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:45.134547,3032.049805,udp,95.221.212.55,6834.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,401,221,180,66.83333333333333,0.5511221945137157,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:45.751417,8.432204,udp,64.179.141.167,55551.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,689,568,121,172.25,0.8243831640058055,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:34:50.565237,3599.969482,tcp,31.223.223.139,1621.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,216,19967,12741,7226,92.43981481481481,0.6381028697350628,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:34:59.404033,0.000361,udp,147.32.84.170,45334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:34:59.405200,0.018096,tcp,147.32.84.170,42300.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:05.453297,0.000193,udp,147.32.87.40,50289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:06.790214,0.000436,udp,213.87.74.66,61598.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:07.864329,1881.664795,udp,147.32.84.229,13363.0,->,125.14.47.12,47801.0,INT,0.0,,6,450,450,0,75.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:35:07.864506,0.357222,udp,147.32.84.229,13363.0,<->,114.46.35.52,2022.0,CON,0.0,0.0,2,559,81,478,279.5,0.1449016100178891,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:08.301529,0.000589,udp,93.214.14.129,61196.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:08.660115,0.000356,udp,147.32.84.13,41833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:09.405140,0.018884,tcp,147.32.84.170,45153.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:10.214821,0.037563,tcp,147.32.84.13,55214.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2129,1040,1089,236.55555555555554,0.488492249882574,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:35:11.072355,0.000443,udp,147.32.85.34,54303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,73,266,169.5,0.2153392330383481,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:14.850168,0.000505,udp,84.115.175.155,11675.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,77,475,276.0,0.13949275362318841,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:19.403688,0.000284,udp,147.32.84.170,53961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:19.405597,0.018068,tcp,147.32.84.170,49077.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:21.268779,0.113574,tcp,147.32.84.13,55239.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1844,980,864,184.4,0.5314533622559653,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:35:21.619320,0.113743,tcp,147.32.84.13,55255.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,3883,1048,2835,323.5833333333333,0.269894411537471,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:35:24.477596,61.81562,tcp,147.32.84.165,4258.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:35:29.404281,0.000329,udp,147.32.84.170,45636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:39.096801,0.001815,udp,203.99.179.5,23800.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,482,60,271.0,0.8892988929889298,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:41.228480,0.000215,udp,147.32.84.138,38074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:43.262831,0.0,icmp,147.32.84.164,771.0,->,188.134.47.10,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:35:43.355111,3346.506836,udp,147.32.84.8,32885.0,<->,82.208.56.89,123.0,CON,0.0,0.0,46,4140,2070,2070,90.0,0.5,19,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 19:35:46.511969,0.000148,udp,147.32.84.138,38471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:49.404116,0.000471,udp,147.32.84.170,44558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:49.405291,0.01823,tcp,147.32.84.170,42307.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:50.774516,13.354174,tcp,147.32.85.76,3514.0,->,94.236.101.82,80.0,FSPA_FSPA,0.0,0.0,13,2914,2444,470,224.15384615384616,0.8387096774193549,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:35:53.308995,0.000555,udp,83.90.155.25,28532.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,123,63,60,61.5,0.5121951219512195,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:53.925652,0.000419,udp,84.228.31.114,57044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:55.786436,0.000294,udp,147.32.84.138,46301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:56.789373,0.000165,udp,147.32.85.25,47538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:35:57.637569,0.000474,udp,116.228.2.27,2972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,159,93,66,79.5,0.5849056603773585,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:35:59.404161,0.000453,udp,147.32.84.170,36015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:35:59.405478,0.018373,tcp,147.32.84.170,49147.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:36:00.711151,0.00032,udp,147.32.85.34,57530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:02.751571,0.287472,tcp,147.32.85.6,54478.0,->,77.75.72.46,995.0,FSPA_FSPA,0.0,0.0,71,38978,2490,36488,548.9859154929577,0.063882189953307,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:36:08.052042,0.29446,tcp,147.32.84.170,45000.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:36:12.156329,0.000273,udp,147.32.84.138,44487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:25.273515,0.018911,udp,147.32.84.184,41626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:25.696138,61.613354,tcp,147.32.84.165,4259.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:36:29.405725,0.00039,udp,147.32.84.170,43376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:36:38.917814,1.3e-05,udp,147.32.84.138,56982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:39.049180,0.000288,udp,147.32.84.170,42281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:36:45.359469,0.000304,udp,147.32.84.138,37797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:47.100581,0.000209,udp,147.32.84.138,46986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:36:57.321401,389.483704,tcp,147.32.84.59,47858.0,->,74.125.232.214,443.0,FSPA_FSRPA,0.0,0.0,45,13567,5703,7864,301.4888888888889,0.42035822215670376,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:36:57.771335,0.000393,udp,78.177.152.157,61734.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:36:59.405373,0.000376,udp,147.32.84.170,47056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:36:59.406502,0.018145,tcp,147.32.84.170,57544.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:03.575511,0.000239,udp,147.32.84.138,44278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:37:09.405299,0.000301,udp,147.32.84.170,41537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:19.406353,0.0178,tcp,147.32.84.170,46001.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:25.643564,0.000378,udp,89.132.141.230,26238.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:26.886573,61.281994,tcp,147.32.84.165,4260.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:37:28.053118,0.308904,tcp,147.32.86.20,4370.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:37:28.215702,0.203377,udp,91.10.41.182,53436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,811,528,283,202.75,0.6510480887792849,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:34.644031,0.000537,udp,77.167.57.32,8477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:37.303013,1356.31958,udp,178.169.128.63,15020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,711,525,186,118.5,0.7383966244725738,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:39.405318,0.000356,udp,147.32.84.170,42279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:39.406330,0.01816,tcp,147.32.84.170,36622.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:41.053074,0.344276,tcp,147.32.84.170,45013.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:41.991997,0.000498,udp,80.219.76.6,5014.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:44.293481,8.916841,tcp,213.87.134.253,1765.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,312,78,234,78.0,0.25,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:37:45.311566,0.000358,udp,147.32.84.171,41892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:37:46.460392,0.001667,udp,84.149.78.45,56763.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:37:47.270469,0.000205,udp,147.32.84.138,58083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:37:49.404429,0.000402,udp,147.32.84.170,54277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:37:51.374665,6.007491,udp,147.32.84.229,13363.0,->,85.138.5.204,30135.0,INT,0.0,,3,222,222,0,74.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:37:52.000184,6.0815,udp,147.32.84.229,13363.0,->,85.230.58.164,31406.0,INT,0.0,,3,441,441,0,147.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:37:52.856581,0.000207,udp,147.32.84.138,49633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:01.350017,0.000218,udp,147.32.85.34,56406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:01.351043,0.000317,udp,147.32.85.34,51914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:02.071136,2457.138428,udp,91.188.36.236,53443.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,736,550,186,122.66666666666667,0.7472826086956522,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:38:09.404501,0.000337,udp,147.32.84.170,43458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:09.409811,0.000245,udp,147.32.84.138,34242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:09.417214,0.000172,udp,147.32.84.138,42624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:13.113850,2906.263428,udp,147.32.84.229,13363.0,<->,178.169.136.5,34198.0,CON,0.0,0.0,10,6230,202,6028,623.0,0.03242375601926164,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:38:13.658357,0.296332,tcp,147.32.84.170,38183.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:14.107702,240.038635,tcp,147.32.84.170,40488.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:14.108839,250.039124,tcp,147.32.84.170,40490.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:17.909617,3002.907959,icmp,147.32.87.1,261.0,->,147.32.87.54,37664.0,RED,0.0,,42,2940,2940,0,70.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:38:19.909761,0.000579,udp,88.100.85.208,16148.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:38:22.494885,0.300247,tcp,147.32.86.20,4416.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,31152,1029,30123,798.7692307692307,0.033031587057010786,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:38:26.173295,289.243958,tcp,147.32.85.76,3626.0,->,195.113.232.88,80.0,FSPA_FSPA,0.0,0.0,26,9429,6449,2980,362.65384615384613,0.6839537596775904,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:38:27.753220,61.253761,tcp,147.32.84.165,4261.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:38:37.013053,0.000254,udp,147.32.85.25,46615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:39.404537,0.000846,udp,147.32.84.170,43399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:39.405908,0.000658,udp,147.32.84.170,54418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:43.050385,0.238376,tcp,147.32.84.170,45033.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:38:48.752533,0.000281,udp,147.32.84.138,52837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:48.752595,0.000227,udp,147.32.84.138,41588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:51.026041,0.000335,udp,147.32.85.76,53314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:38:59.406661,0.018024,tcp,147.32.84.170,57572.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:03.097640,0.000282,udp,147.32.84.59,40662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:39:06.887623,0.000267,udp,147.32.84.138,35421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:39:09.406704,0.018236,tcp,147.32.84.170,39798.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:10.169265,0.000435,udp,41.238.59.232,13587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:39:14.051524,0.252374,tcp,147.32.84.170,45037.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:19.406601,0.02043,tcp,147.32.84.170,55098.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:27.251273,0.001787,udp,147.32.85.76,59534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:39:28.590977,61.266987,tcp,147.32.84.165,4262.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:39:29.404477,0.000424,udp,147.32.84.170,43465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:29.405489,0.000302,udp,147.32.84.170,53661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:30.506114,8.00652,udp,95.112.103.249,26630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1223,626,597,203.83333333333334,0.5118560915780866,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:39:39.404657,0.000305,udp,147.32.84.170,47415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:39.406566,0.018241,tcp,147.32.84.170,49188.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:40.944007,409.959656,tcp,147.32.84.59,36918.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,93,32324,21992,10332,347.5698924731183,0.6803613414181413,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:39:41.974469,207.27803,udp,79.149.242.103,38715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,383,203,180,63.833333333333336,0.5300261096605744,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:39:44.079318,0.000245,udp,147.32.85.25,53677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:39:44.569688,2491.505615,udp,122.134.224.3,42932.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:39:49.404439,0.000456,udp,147.32.84.170,52034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:39:51.075325,0.049679,tcp,147.32.86.17,3261.0,->,2.21.98.110,443.0,FSPA_FSPA,0.0,0.0,21,8404,4143,4261,400.1904761904762,0.49297953355544977,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:39:55.167983,1.259723,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,458,142,316,152.66666666666666,0.31004366812227074,19,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 19:39:56.428217,1.885233,tcp,147.32.84.165,4263.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,19,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 19:39:59.406690,0.018466,tcp,147.32.84.170,39805.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:01.324334,0.000325,udp,147.32.85.34,51755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:40:04.496128,0.000483,udp,62.24.78.18,62351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:05.728375,0.000362,udp,147.32.84.36,52661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:40:05.855238,0.000181,udp,147.32.84.138,52432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:40:08.141237,0.00034,udp,147.32.86.20,53144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:40:10.852054,0.024702,udp,147.32.84.170,35876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:10.877931,0.000425,udp,147.32.84.170,35443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:13.798925,0.361198,udp,147.32.84.229,13363.0,<->,111.250.100.51,37173.0,CON,0.0,0.0,4,679,558,121,169.75,0.8217967599410898,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:14.399545,1211.248901,udp,69.171.160.171,18824.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,711,525,186,118.5,0.7383966244725738,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:16.050843,0.000337,udp,147.32.84.170,57591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:19.405450,0.000485,udp,147.32.84.170,53394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:19.406756,0.01834,tcp,147.32.84.170,57584.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:23.795350,0.0,tcp,76.164.193.170,80.0,->,147.32.84.122,49522.0,SA_,0.0,,1,62,62,0,62.0,1.0,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:40:24.257539,0.000424,udp,147.32.86.92,47575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,85,236,160.5,0.26479750778816197,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:40:26.402323,39.676327,tcp,62.212.204.160,3292.0,->,147.32.84.229,80.0,FSPA_FSRPA,0.0,0.0,22,1623,859,764,73.77272727272727,0.5292667898952557,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:40:28.576951,26.847839,udp,147.32.84.229,13363.0,<->,208.88.186.4,34002.0,CON,0.0,0.0,4,466,293,173,116.5,0.628755364806867,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:29.404686,0.000488,udp,147.32.84.170,38744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:29.428814,61.287647,tcp,147.32.84.165,4264.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:40:33.653602,0.000541,udp,80.187.111.1,45345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:34.274531,3572.550293,udp,147.32.84.25,46891.0,<->,82.208.56.89,123.0,CON,0.0,0.0,80,7200,3600,3600,90.0,0.5,19,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 19:40:39.416111,0.018068,tcp,147.32.84.170,55109.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:44.668535,0.423525,udp,71.33.182.24,25942.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,178,73,125.5,0.7091633466135459,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:40:47.051494,0.000231,udp,147.32.84.170,56570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:47.052274,0.000393,udp,147.32.84.170,58209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:49.404601,0.000394,udp,147.32.84.170,32777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:49.406483,0.018167,tcp,147.32.84.170,36661.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:40:49.473226,10.567421,udp,41.205.52.14,59223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1039,633,406,259.75,0.6092396535129933,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:41:00.955450,0.207564,tcp,147.32.86.20,4547.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,31300,969,30331,823.6842105263158,0.030958466453674123,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:41:01.830950,0.000289,udp,147.32.84.138,34560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:03.996385,0.000396,udp,95.42.99.133,10814.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:41:09.433653,9.051016,tcp,109.236.80.143,64197.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:41:13.816552,0.00041,icmp,147.32.86.96,,<-,147.32.87.5,24931.0,RED,,0.0,2,196,0,196,98.0,0.0,19,0,flow=Background,Background,-1 2011-08-16 19:41:14.391246,0.000197,udp,147.32.84.138,43040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:18.052503,0.284305,tcp,147.32.84.170,38170.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:41:19.406762,0.018435,tcp,147.32.84.170,50869.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:41:22.340006,0.021387,udp,147.32.86.194,51618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:26.033278,0.00028,udp,147.32.84.138,51876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:29.404673,0.000357,udp,147.32.84.170,49619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:41:30.287315,61.279202,tcp,147.32.84.165,4265.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:41:39.406623,0.01979,tcp,147.32.84.170,43466.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:41:43.046830,0.000354,udp,147.32.84.138,53667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:48.267792,0.000385,udp,147.32.84.59,56842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:41:49.406752,0.020685,tcp,147.32.84.170,50873.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:41:53.027723,1235.760864,udp,31.41.16.129,44648.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,714,528,186,119.0,0.7394957983193278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:41:59.405804,0.000522,udp,147.32.84.170,53780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:10.932936,0.000355,udp,147.32.84.138,41167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:42:14.392843,0.019915,udp,147.32.84.184,51535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:42:19.351109,9.000386,tcp,147.32.84.179,51846.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:42:20.051452,0.000392,udp,147.32.84.170,33772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:20.053670,0.24923,tcp,147.32.84.170,38179.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:29.406807,0.018427,tcp,147.32.84.170,50878.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:31.144652,61.26759,tcp,147.32.84.165,4266.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:42:37.843663,0.0,icmp,147.32.84.164,771.0,->,178.44.165.74,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:42:40.505771,0.000299,udp,147.32.85.25,35471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:42:49.404774,0.000318,udp,147.32.84.170,51016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:49.406652,0.018147,tcp,147.32.84.170,44664.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:49.958254,570.041138,icmp,83.230.216.45,771.0,->,147.32.84.229,64265.0,URP,0.0,,20,2080,2080,0,104.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:42:50.849605,0.000276,udp,147.32.85.25,49603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:42:51.051916,0.265542,tcp,147.32.84.170,38183.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:42:57.358026,0.032369,tcp,147.32.85.74,36019.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:42:59.404959,0.000418,udp,147.32.84.170,49882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:09.405110,0.00031,udp,147.32.84.170,37305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:19.406912,0.018398,tcp,147.32.84.170,44674.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:22.049878,0.00025,udp,147.32.84.170,49788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:27.390734,0.032101,tcp,147.32.85.74,36032.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:43:29.406957,0.018247,tcp,147.32.84.170,50892.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:31.515338,0.001428,udp,91.206.15.120,13494.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:43:31.993194,61.265598,tcp,147.32.84.165,4267.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:43:39.408284,0.017732,tcp,147.32.84.170,44677.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:44.279399,0.000288,udp,147.32.84.138,39097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:43:49.405297,0.000362,udp,147.32.84.170,34314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:49.406225,0.000354,udp,147.32.84.170,35423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:49.407366,0.018346,tcp,147.32.84.170,44678.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:50.438278,362.556915,udp,147.32.84.94,7103.0,<->,88.198.22.3,50012.0,CON,0.0,0.0,154,123370,3108,120262,801.1038961038961,0.025192510334765342,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:43:50.438801,748.253784,udp,147.32.84.94,7103.0,<->,46.4.95.178,50012.0,CON,0.0,0.0,3057,2942120,28732,2913388,962.4206738632646,0.00976574714831482,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:43:52.121377,0.000362,udp,98.88.79.199,9833.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:43:53.051654,0.000242,udp,147.32.84.170,47171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:43:54.754568,23.324188,tcp,147.32.85.76,4167.0,->,195.8.215.136,80.0,FSPA_FSPA,0.0,0.0,20,6694,3874,2820,334.7,0.5787272184045413,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:43:58.588796,0.000195,udp,147.32.85.25,36226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:00.622923,0.000238,udp,147.32.85.34,50177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:01.152815,0.048036,udp,147.32.85.6,61454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,370,83,287,185.0,0.22432432432432434,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:09.556093,0.000285,udp,147.32.85.34,50106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:12.598414,0.000272,udp,147.32.84.138,42650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:12.785920,0.000371,udp,92.106.244.180,57638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:44:17.623080,19.136044,tcp,147.32.85.76,4204.0,->,94.236.101.82,80.0,FSPA_FSPA,0.0,0.0,27,11186,6712,4474,414.2962962962963,0.6000357589844448,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:44:19.405209,0.000267,udp,147.32.84.170,42120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:44:24.053106,0.000291,udp,147.32.84.170,35586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:44:32.841034,61.261784,tcp,147.32.84.165,4268.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:44:35.376913,24.545326,tcp,147.32.85.76,4242.0,->,195.8.214.62,80.0,FSRPA_SPA,0.0,0.0,2006,2118632,38419,2080213,1056.1475573280159,0.01813387129053087,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:44:36.129603,0.0,igmp,147.32.87.7,,->,224.0.1.35,,INT,0.0,,1,60,60,0,60.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:44:39.407246,0.018065,tcp,147.32.84.170,46416.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:44:45.831946,0.00028,udp,147.32.84.138,60532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:44:46.865444,0.000686,udp,188.192.197.77,64753.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,80,477,278.5,0.1436265709156194,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:44:49.406016,0.000317,udp,147.32.84.170,59502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:44:49.407058,0.017865,tcp,147.32.84.170,46417.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:44:51.253583,113.34082,tcp,147.32.86.194,4462.0,->,77.75.76.72,80.0,FSPA_FSRPA,0.0,0.0,31,17193,3286,13907,554.6129032258065,0.19112429477112777,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:44:58.031450,6.797851,tcp,66.249.72.182,39735.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,9990,1124,8866,499.5,0.11251251251251251,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:44:59.406169,0.000453,udp,147.32.84.170,33351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:00.946681,1559.038208,udp,78.128.99.94,9764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,885,507,378,147.5,0.5728813559322034,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:04.045357,0.000147,udp,147.32.84.138,34485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:45:07.898229,10.953583,tcp,86.189.12.232,50848.0,->,147.32.84.229,443.0,SRA_SA,0.0,0.0,16,1086,606,480,67.875,0.5580110497237569,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:45:09.405264,0.000473,udp,147.32.84.170,44607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:09.406240,0.000307,udp,147.32.84.170,55532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:19.339539,0.000221,tcp,67.195.115.95,59949.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 19:45:19.406201,0.000382,udp,147.32.84.170,47413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:20.911616,3342.722656,udp,213.113.126.116,46125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,953,705,248,119.125,0.7397691500524659,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:22.448243,921.040649,icmp,147.32.87.252,771.0,->,193.16.101.12,15587.0,URP,0.0,,5,549,549,0,109.8,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:45:25.414334,765.24884,udp,147.32.84.94,7103.0,<->,188.40.83.104,50012.0,CON,0.0,0.0,687,640562,7984,632578,932.4046579330422,0.01246405500170163,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:25.424342,0.223862,tcp,147.32.84.164,50737.0,->,208.111.182.251,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:45:26.056566,0.231113,tcp,147.32.84.170,38209.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:29.407960,0.000313,udp,147.32.84.170,41974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:29.408972,0.018114,tcp,147.32.84.170,48939.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:31.172360,3052.659912,udp,2.40.143.41,10803.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:33.698777,61.217567,tcp,147.32.84.165,4269.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:45:34.040813,0.000315,udp,147.32.84.59,45454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:45:34.044364,0.000197,udp,147.32.84.59,43234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:45:36.408887,0.000226,udp,147.32.84.138,59109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:45:37.174492,0.297887,udp,66.188.99.245,14355.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,703,582,121,175.75,0.8278805120910384,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:45.109137,9.00178,tcp,182.55.140.49,51869.0,->,147.32.85.123,13815.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:45:48.833597,1521.759766,udp,78.84.55.94,6013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,546,422,124,136.5,0.7728937728937729,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:53.035280,2473.542969,udp,124.27.120.245,33534.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:45:54.864874,0.000298,tcp,147.32.96.45,2066.0,->,147.32.84.165,21.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:45:56.947853,0.000342,udp,147.32.84.138,41380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:45:57.053755,0.224003,tcp,147.32.84.170,51380.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:45:57.277888,17.508587,tcp,147.32.84.184,33060.0,->,199.59.149.232,443.0,FSPA_FSPA,0.0,0.0,23,9386,2250,7136,408.0869565217391,0.23971873002343916,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:45:59.407271,0.018509,tcp,147.32.84.170,43073.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:46:01.340993,0.000253,udp,147.32.85.34,57169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:46:09.633053,3028.97583,udp,86.56.13.92,52944.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:11.334115,0.000241,udp,147.32.84.138,35683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:46:13.320542,3586.339844,udp,147.32.84.229,13363.0,<->,114.42.191.252,43979.0,CON,0.0,0.0,123,20644,10369,10275,167.83739837398375,0.5022766905638442,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:13.488189,0.000286,udp,147.32.84.138,42640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:46:14.590360,0.000322,udp,147.32.86.20,56727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:46:20.315928,2899.195068,udp,46.211.220.28,12885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:29.362562,2972.198486,udp,147.32.84.229,13363.0,<->,114.35.138.177,44413.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:34.496157,61.272366,tcp,147.32.84.165,4270.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:46:36.782956,0.000195,udp,88.216.28.143,23462.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,159,99,60,79.5,0.6226415094339622,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:37.777576,3071.639404,udp,88.83.173.67,1342.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1386,1014,372,115.5,0.7316017316017316,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:38.061057,15.221945,icmp,92.106.252.149,771.0,->,147.32.84.94,10198.0,URP,0.0,,4,280,280,0,70.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:46:39.405192,0.000385,udp,147.32.84.170,39313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:46:39.906258,0.000608,udp,112.200.28.203,8144.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,72,479,275.5,0.1306715063520871,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:44.777274,0.0,tcp,147.32.84.164,51880.0,->,79.141.166.3,27030.0,S_,0.0,,1,74,74,0,74.0,1.0,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:46:45.326339,0.00059,udp,151.42.107.118,14281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,314,64,250,157.0,0.20382165605095542,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:46.818387,0.0,tcp,147.32.84.164,59790.0,->,79.141.166.2,27030.0,S_,0.0,,1,74,74,0,74.0,1.0,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:46:47.833722,0.000632,udp,92.101.70.55,7578.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:52.679715,0.000531,udp,91.48.186.95,58802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,75,464,269.5,0.1391465677179963,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:56.199802,0.000434,udp,187.23.3.222,48922.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:46:57.098048,0.000303,udp,147.32.84.170,43589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:46:57.098719,0.000482,udp,147.32.84.170,42364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:46:57.701592,0.035439,tcp,147.32.85.74,36122.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:47:03.343074,0.171798,tcp,147.32.86.20,4825.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,63,59727,1331,58396,948.047619047619,0.02228472884959901,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:47:09.257931,0.000289,udp,147.32.84.138,34757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:09.406281,0.000385,udp,147.32.84.170,50511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:19.406483,0.000388,udp,147.32.84.170,43331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:19.407645,0.0178,tcp,147.32.84.170,52562.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:22.208211,0.001384,udp,62.203.30.46,53538.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:47:25.462740,604.605835,udp,178.125.227.15,15795.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:47:26.235544,0.000217,udp,147.32.84.138,43005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:26.642438,0.000198,udp,147.32.85.25,51953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:29.066733,0.000341,udp,147.32.84.170,35751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:29.067960,0.244839,tcp,147.32.84.170,51393.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:30.235688,0.0,igmp,147.32.87.7,,->,224.0.1.35,,INT,0.0,,1,60,60,0,60.0,1.0,19,,flow=Background,Background,-1 2011-08-16 19:47:31.971878,0.00022,tcp,147.32.96.45,2077.0,->,147.32.84.165,21.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:47:33.479303,0.001801,udp,147.32.86.17,25882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,475,79,396,237.5,0.16631578947368422,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:33.971754,0.000444,udp,190.27.208.74,17780.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:47:35.353766,61.250149,tcp,147.32.84.165,4271.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:47:44.327602,0.00018,udp,147.32.84.138,35348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:49.406307,0.000255,udp,147.32.84.170,45887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:47:50.522804,9.057637,tcp,80.90.168.147,32764.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,6,390,132,258,65.0,0.3384615384615385,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:47:51.753048,0.000257,udp,147.32.84.138,59937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:47:59.405554,0.000401,udp,147.32.84.170,46229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:00.861918,0.013104,tcp,147.32.85.74,48860.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:48:02.366070,0.000585,udp,99.178.137.209,27844.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:48:07.265405,0.000201,udp,147.32.87.36,38421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,19,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 19:48:09.405776,0.000342,udp,147.32.84.170,48388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:09.406696,0.000267,udp,147.32.84.170,43058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:09.407663,0.017856,tcp,147.32.84.170,52569.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:09.764721,0.206537,udp,147.32.84.94,7103.0,<->,90.145.87.22,7465.0,CON,0.0,0.0,36,28401,27795,606,788.9166666666666,0.9786627231435513,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:48:10.047891,0.000263,udp,147.32.84.59,52001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:12.897842,0.000303,udp,147.32.85.25,53938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:17.214065,0.000186,udp,147.32.84.138,50055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:18.088616,0.351253,udp,147.32.84.229,13363.0,<->,111.252.71.90,48769.0,CON,0.0,0.0,2,571,511,60,285.5,0.8949211908931699,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:48:19.621807,0.000447,udp,128.12.181.209,61060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:48:20.360827,0.0001,udp,147.32.84.138,34707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:23.858891,7.222211,tcp,147.32.86.17,3631.0,->,82.208.7.127,80.0,FSPA_FSPA,0.0,0.0,18,10261,1030,9231,570.0555555555555,0.10038007991423838,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:48:24.849265,0.000347,udp,147.32.84.138,37426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:29.405629,0.000495,udp,147.32.84.170,59890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:30.372040,0.000468,udp,147.32.84.138,44405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:33.774208,0.000436,udp,147.32.85.25,51805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,88,123,105.5,0.41706161137440756,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:36.192211,61.238602,tcp,147.32.84.165,4272.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:48:39.405633,0.00041,udp,147.32.84.170,44328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:39.406583,0.000391,udp,147.32.84.170,35623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:39.407716,0.018085,tcp,147.32.84.170,50419.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:48:41.162267,0.000375,udp,147.32.84.138,38791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:48:47.314585,0.004674,udp,82.130.152.21,49374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:48:59.406721,0.000344,udp,147.32.84.170,58331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:01.727346,114.729454,tcp,147.32.85.76,4472.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,10,3334,1677,1657,333.4,0.502999400119976,19,1,flow=Background-google-analytics10,Background,-1 2011-08-16 19:49:03.742801,0.010147,udp,147.32.84.59,54869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:49:09.336964,0.00054,udp,188.143.41.46,19084.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:49:09.407182,0.00031,udp,147.32.84.170,58680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:19.159978,2426.250732,udp,88.103.31.92,19808.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:49:19.405557,0.00035,udp,147.32.84.170,44021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:19.407523,0.018633,tcp,147.32.84.170,43104.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:20.066095,0.000446,udp,184.151.127.194,48836.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:49:28.703966,0.00021,udp,147.32.85.89,60409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:49:29.406513,0.000312,udp,147.32.84.170,36102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:33.428092,0.000303,udp,147.32.84.138,39680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:49:34.695202,0.000664,udp,119.241.22.211,59786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,77,483,280.0,0.1375,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:49:37.020331,61.242802,tcp,147.32.84.165,4273.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:49:39.405718,0.0003,udp,147.32.84.170,50405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:39.406555,0.000307,udp,147.32.84.170,58790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:40.974414,0.206401,tcp,147.32.86.20,4947.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29922,1029,28893,787.421052631579,0.03438941247242831,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:49:49.407662,0.017766,tcp,147.32.84.170,50428.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:51.029608,0.000246,udp,147.32.84.138,55935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:49:51.109915,796.418579,udp,78.229.16.49,22658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,534,294,240,66.75,0.550561797752809,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:49:59.406668,0.000285,udp,147.32.84.170,60257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:49:59.715663,480.00708,udp,147.32.84.94,7103.0,<->,81.14.227.249,37117.0,CON,0.0,0.0,82,65589,64299,1290,799.8658536585366,0.9803320678772355,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:50:00.476476,0.231761,tcp,147.32.86.20,4961.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,35079,1091,33988,815.7906976744187,0.031101228655320848,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:50:01.030662,0.000275,udp,147.32.84.138,49470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:01.240688,0.000964,udp,147.32.85.34,53961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:03.977235,4.804179,udp,94.112.231.163,18405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1056,936,120,264.0,0.8863636363636364,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:50:08.892563,0.000299,udp,147.32.84.138,41387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:09.405788,0.000569,udp,147.32.84.170,33369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:09.408073,0.018099,tcp,147.32.84.170,56516.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:14.790277,0.000857,udp,90.197.8.23,33275.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:50:23.131486,0.000242,udp,147.32.84.138,57844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:27.058577,0.00014,udp,147.32.84.138,44668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:35.053622,0.000352,udp,147.32.84.170,56166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:35.054911,0.320613,tcp,147.32.84.170,51422.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:37.847101,61.229118,tcp,147.32.84.165,4274.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:50:39.405619,0.019835,udp,147.32.84.170,49024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:41.915317,0.206434,tcp,147.32.86.20,4993.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,31782,1029,30753,794.55,0.03237681706626392,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:50:42.585459,3476.442627,udp,147.32.84.229,13363.0,<->,67.149.50.181,47586.0,CON,0.0,0.0,6,409,229,180,68.16666666666667,0.5599022004889975,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:50:48.500298,0.00019,udp,147.32.85.25,40264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:48.967259,2178.426758,udp,147.32.84.229,13363.0,<->,80.221.44.128,21624.0,CON,0.0,0.0,4,734,575,159,183.5,0.7833787465940054,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:50:50.171574,0.013239,tcp,147.32.86.17,3675.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,2083,1335,748,208.3,0.6409025444071051,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:50:50.593987,0.613962,tcp,147.32.85.76,4594.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,15,3054,1947,1107,203.6,0.637524557956778,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:50:53.579398,0.000188,udp,147.32.85.25,37867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:54.309602,0.000157,udp,147.32.84.138,53312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:50:59.405629,0.000486,udp,147.32.84.170,40855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:59.406652,0.000315,udp,147.32.84.170,40813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:50:59.407690,0.018078,tcp,147.32.84.170,43696.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:04.456300,0.364253,udp,147.32.84.229,13363.0,<->,123.194.244.181,6160.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:06.053013,0.000507,udp,147.32.84.170,58085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:06.054103,0.000346,udp,147.32.84.170,43483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:06.055378,0.257363,tcp,147.32.84.170,33461.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:11.526769,0.069283,udp,147.32.84.229,13363.0,<->,95.158.33.162,21774.0,CON,0.0,0.0,2,140,79,61,70.0,0.5642857142857143,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:14.030802,0.000354,udp,147.32.85.25,39304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:16.464225,0.000229,udp,147.32.84.138,37043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:19.091819,1582.199707,udp,87.120.99.233,46678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,275,155,120,68.75,0.5636363636363636,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:21.902412,0.000104,udp,147.32.84.138,45837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:29.345070,0.389975,udp,147.32.84.229,13363.0,<->,220.130.160.140,47865.0,CON,0.0,0.0,4,3002,60,2942,750.5,0.019986675549633577,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:30.900540,0.000191,udp,147.32.84.138,42093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:35.234534,0.000308,udp,147.32.85.25,50385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:37.052913,0.000291,udp,147.32.84.170,50640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:37.512055,3169.10498,udp,195.228.70.40,28598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,938,690,248,117.25,0.7356076759061834,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:37.538116,14.174981,tcp,147.32.85.76,4650.0,->,63.245.209.165,443.0,FSPA_FSRPA,0.0,0.0,22,5742,1563,4179,261.0,0.2722048066875653,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:51:38.675284,61.256405,tcp,147.32.84.165,4275.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:51:39.407855,0.018009,tcp,147.32.84.170,36130.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:39.716199,30.1248,udp,46.107.77.13,22085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:44.993845,0.000214,udp,147.32.84.138,58600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:46.844297,0.000242,udp,147.32.84.138,43298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:49.407360,0.000486,udp,147.32.84.170,55965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:49.409396,0.018057,tcp,147.32.84.170,43703.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:51.880907,0.000809,udp,87.120.99.53,14432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,635,75,560,317.5,0.11811023622047244,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:51:55.036530,0.000182,udp,147.32.84.138,57841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:51:59.406017,0.000263,udp,147.32.84.170,34514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:51:59.406854,0.000252,udp,147.32.84.170,55937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:00.857310,0.000211,udp,147.32.85.34,60887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:04.940597,0.019859,udp,147.32.85.76,55039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:08.052848,0.000213,udp,147.32.84.170,47087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:08.054006,0.250233,tcp,147.32.84.170,33469.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:09.407099,0.000337,udp,147.32.84.170,35948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:10.345958,0.000213,udp,147.32.84.138,49099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:12.378989,15.298741,udp,147.32.84.94,7103.0,->,174.100.216.216,7479.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:52:15.749942,0.000382,udp,95.249.8.55,36689.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:19.406013,0.000387,udp,147.32.84.170,51960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:19.406951,0.000411,udp,147.32.84.170,37152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:23.639999,0.000668,udp,77.40.105.185,33975.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,73,463,268.0,0.13619402985074627,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:29.408109,0.017772,tcp,147.32.84.170,36136.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:29.515779,439.026337,udp,95.154.16.117,65282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,973,333,640,121.625,0.34224049331963,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:34.880131,0.348597,udp,147.32.84.229,13363.0,<->,114.43.196.205,38321.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:35.105458,809.568604,udp,147.32.84.229,13363.0,<->,208.88.187.25,33033.0,CON,0.0,0.0,4,703,162,541,175.75,0.23044096728307253,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:39.055411,0.000293,udp,147.32.84.170,49424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:39.408107,0.018445,tcp,147.32.84.170,60450.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:39.513553,61.237591,tcp,147.32.84.165,4276.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:52:44.301122,789.706543,udp,79.13.187.217,64546.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,722,536,186,120.33333333333333,0.7423822714681441,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:52:44.589615,0.659743,udp,147.32.87.48,1106.0,->,147.32.87.126,161.0,INT,0.0,,76,9996,9996,0,131.52631578947367,1.0,19,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:52:46.304875,0.000341,udp,147.32.84.138,50503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:48.732431,0.000282,udp,147.32.85.89,41902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:49.407024,0.000308,udp,147.32.84.170,56446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:52:52.242370,15.30067,udp,147.32.84.94,7103.0,->,62.131.128.172,63145.0,INT,0.0,,4,336,336,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:52:53.519887,0.000204,udp,147.32.84.138,55885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:52:53.705270,185.547516,udp,81.71.160.184,55601.0,->,147.32.87.194,34106.0,INT,0.0,,9,709,709,0,78.77777777777777,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:53:04.497470,2433.745361,udp,79.225.106.186,11434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:53:10.054644,0.398648,tcp,147.32.84.170,33478.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:13.089558,0.336464,tcp,147.32.84.170,33339.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:14.299951,15.226019,icmp,174.55.251.109,771.0,->,147.32.84.94,16133.0,URP,0.0,,4,280,280,0,70.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:53:14.431516,0.334833,tcp,147.32.84.170,41891.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:15.136084,0.000599,udp,87.49.240.75,16709.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:53:18.254385,6.73561,tcp,66.249.72.134,65203.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18000,1883,16117,580.6451612903226,0.10461111111111111,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:53:18.825990,0.000217,udp,147.32.85.25,39570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:53:19.406107,0.000442,udp,147.32.84.170,38406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:22.895865,0.000192,udp,147.32.84.138,37687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:53:23.378952,0.000409,udp,147.32.84.170,35296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:27.280371,0.020407,udp,147.32.84.184,34295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:53:29.408035,0.020444,tcp,147.32.84.170,36726.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:33.340824,2986.79541,udp,92.36.24.115,15441.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2675,2375,300,267.5,0.8878504672897196,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:53:33.365617,0.000373,udp,147.32.85.34,51338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:53:34.746320,0.000454,udp,79.209.34.163,47491.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:53:39.406001,0.000487,udp,147.32.84.170,48218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:40.341261,61.262989,tcp,147.32.84.165,4277.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:53:49.408163,0.01854,tcp,147.32.84.170,36729.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:53:51.446307,0.000684,udp,85.198.189.92,46464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:53:59.309776,6.017123,udp,147.32.84.229,13363.0,->,77.123.61.59,54286.0,INT,0.0,,3,180,180,0,60.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:53:59.408272,0.018473,tcp,147.32.84.170,36730.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:03.561493,0.000194,udp,147.32.84.138,54117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:07.936323,0.000468,udp,84.248.90.202,40869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:09.977428,0.066417,tcp,89.176.234.132,1052.0,->,147.32.86.238,3910.0,FSRPA_FSPA,0.0,0.0,14,4535,1299,3236,323.92857142857144,0.286438809261301,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:54:11.516535,0.000212,udp,147.32.84.138,57976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:12.056163,0.286121,tcp,147.32.84.170,33494.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:12.660193,0.000584,udp,76.25.64.20,23666.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,75,465,270.0,0.1388888888888889,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:13.596230,0.003751,udp,79.194.191.129,9043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3040,60,2980,760.0,0.019736842105263157,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:13.824690,0.000586,udp,203.82.80.112,29083.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:17.318777,0.000445,udp,98.230.181.158,27379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,80,61,70.5,0.5673758865248227,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:29.407121,0.000395,udp,147.32.84.170,58255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:35.925779,193.594208,udp,95.103.192.87,16994.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,740,554,186,123.33333333333333,0.7486486486486487,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:38.527731,3.452078,udp,66.30.250.42,4759.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1142,156,986,285.5,0.13660245183887915,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:39.409941,0.018434,tcp,147.32.84.170,36161.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:41.178440,61.260876,tcp,147.32.84.165,4278.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:54:41.952445,0.000566,udp,78.60.148.187,52574.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:42.422202,0.000234,udp,147.32.84.138,42297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:43.053962,0.259878,tcp,147.32.84.170,33498.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:45.988534,0.000436,udp,190.246.94.100,44233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:46.797951,0.000247,udp,147.32.84.138,53244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:49.407265,0.000271,udp,147.32.84.170,38931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:49.408223,0.018178,tcp,147.32.84.170,32821.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:54:50.789882,3046.939453,udp,41.227.129.119,16331.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:54:54.785221,176.033508,udp,147.32.84.94,7103.0,->,114.32.13.128,57361.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:54:57.117361,0.000452,udp,147.32.84.59,45240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:57.124354,0.000257,udp,147.32.84.59,58649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:54:58.636107,3545.747559,icmp,109.96.98.251,259.0,->,147.32.84.171,28000.0,URH,0.0,,6,612,612,0,102.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:54:59.962645,0.000639,udp,85.26.232.178,5537.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:02.376905,0.000329,udp,147.32.84.59,52277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:02.407163,0.000301,udp,147.32.84.59,56141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:03.205057,0.000465,udp,189.11.240.81,60645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:08.276685,0.000377,udp,147.32.86.92,47577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:09.408350,0.018303,tcp,147.32.84.170,36165.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:55:10.453575,0.000376,udp,173.166.6.201,1243.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:12.641622,0.000312,udp,147.32.84.138,47105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:13.706201,2540.844482,udp,71.136.44.107,13657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,812,625,187,135.33333333333334,0.7697044334975369,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:15.961278,134.53125,udp,147.32.84.94,7103.0,->,46.223.48.224,7168.0,INT,0.0,,8,672,672,0,84.0,1.0,19,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 19:55:18.363670,0.000313,udp,147.32.85.25,58506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:19.406300,0.000383,udp,147.32.84.170,44426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:55:19.408244,0.018156,tcp,147.32.84.170,36167.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:55:25.428313,0.088579,tcp,147.32.84.164,60176.0,->,77.67.60.58,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,19,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 19:55:30.257853,0.000477,udp,147.32.84.59,62919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,87,139,113.0,0.38495575221238937,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:30.368813,0.000481,udp,131.111.16.20,39355.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:34.159356,0.000261,udp,147.32.85.25,36467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:55:39.155608,1.921041,udp,147.32.84.94,7103.0,<->,81.201.220.57,7374.0,CON,0.0,0.0,46,38218,37534,684,830.8260869565217,0.9821026741326077,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:39.416772,0.000326,udp,147.32.84.170,52526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:55:42.026482,61.233341,tcp,147.32.84.165,4279.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:55:43.917456,15.483033,udp,88.101.29.67,10008.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:47.575822,0.000564,udp,81.28.6.254,45351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:52.035171,681.782288,udp,77.78.18.126,36247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3504,416,3088,438.0,0.1187214611872146,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:53.982635,0.000511,udp,85.31.125.200,17488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,210,150,60,70.0,0.7142857142857143,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:55.014053,0.000417,udp,118.9.128.210,61606.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,19,1,flow=Background-UDP-Established,Background,-1 2011-08-16 19:55:56.734830,0.000575,udp,94.178.159.170,48618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:01.988444,0.000441,udp,147.32.84.138,50667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:06.195837,3542.624512,tcp,86.45.5.72,27734.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,202,17609,9805,7804,87.17326732673267,0.5568175364870237,19,0,flow=Background-TCP-Established,Background,-1 2011-08-16 19:56:06.197719,0.032332,tcp,147.32.84.215,48407.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:56:09.407105,0.000438,udp,147.32.84.170,54322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:09.409045,0.017925,tcp,147.32.84.170,58391.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:13.034101,3074.859863,udp,92.115.93.121,41261.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:13.940154,2488.143066,udp,77.211.100.253,38059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1240,930,310,124.0,0.75,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:15.052720,0.000387,udp,147.32.84.170,40735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:19.406496,0.000267,udp,147.32.84.170,40764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:19.408362,0.018017,tcp,147.32.84.170,55980.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:21.302510,0.344532,udp,147.32.84.229,13363.0,<->,31.186.179.81,54295.0,CON,0.0,0.0,4,3024,60,2964,756.0,0.01984126984126984,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:25.351683,0.00052,udp,78.42.184.70,5364.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:28.723097,0.000274,udp,147.32.84.138,60012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:28.731960,0.000306,udp,147.32.84.138,42794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:35.005521,0.000624,udp,178.222.20.113,26032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,155,88,67,77.5,0.567741935483871,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:37.423189,16.008678,icmp,213.196.218.177,259.0,->,147.32.84.94,54724.0,URH,0.0,,4,448,448,0,112.0,1.0,19,0,flow=Background,Background,-1 2011-08-16 19:56:39.407504,0.000443,udp,147.32.84.170,51438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:39.538032,6.064039,udp,124.171.8.31,7285.0,<->,147.32.84.94,7103.0,CON,0.0,0.0,172,130500,126462,4038,758.7209302325581,0.9690574712643678,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:41.913173,0.000536,udp,93.183.162.64,57718.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:56:42.844779,61.257214,tcp,147.32.84.165,4280.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:56:49.407574,0.000366,udp,147.32.84.170,47338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:49.408682,0.018259,tcp,147.32.84.170,58397.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:52.084634,0.000175,udp,147.32.84.138,58622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:52.861753,0.000276,udp,147.32.84.138,45532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:52.878854,0.000233,udp,147.32.84.138,32880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:54.509531,0.000247,udp,147.32.84.138,51847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:56:59.406547,0.000426,udp,147.32.84.170,54682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:56:59.407474,0.000414,udp,147.32.84.170,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:05.547389,0.000243,udp,147.32.84.138,52446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:57:09.406483,0.000418,udp,147.32.84.170,37666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:09.407446,0.000376,udp,147.32.84.170,40006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:11.554677,0.527189,udp,147.32.84.94,7103.0,<->,95.34.21.153,7491.0,CON,0.0,0.0,27,22691,22319,372,840.4074074074074,0.9836058349125204,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:18.145607,0.011664,tcp,147.32.85.6,54546.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,10,1927,1160,767,192.7,0.6019719771665801,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:57:18.627939,2434.087402,udp,201.110.130.13,37127.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:19.295498,0.037724,udp,147.32.84.229,13363.0,<->,109.246.1.245,4015.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:38.793412,0.000172,udp,147.32.84.138,48062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:57:38.872182,36.137653,udp,41.189.242.144,16202.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1050,930,120,262.5,0.8857142857142857,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:42.787938,8.944084,tcp,212.118.142.100,48779.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,4,308,74,234,77.0,0.24025974025974026,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:57:43.683333,61.272457,tcp,147.32.84.165,4281.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:57:44.327760,2157.630371,udp,46.109.92.199,17306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:48.052119,0.000298,udp,147.32.84.170,46492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:48.053395,0.228415,tcp,147.32.84.170,35605.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:48.154379,0.000203,udp,147.32.84.138,60393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:57:48.701259,1287.100952,udp,109.53.211.244,37244.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1650,231,1419,275.0,0.14,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:49.407508,0.000297,udp,147.32.84.170,47471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:57:51.227623,1.746028,udp,88.75.103.245,33911.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1100,563,537,275.0,0.5118181818181818,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:53.003875,10.634816,udp,178.176.204.41,61991.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,684,563,121,171.0,0.8230994152046783,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:55.489941,2427.312744,udp,190.194.89.148,55927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:57:56.854776,2885.251221,udp,147.32.84.229,13363.0,<->,76.109.89.225,64113.0,CON,0.0,0.0,4,795,673,122,198.75,0.8465408805031447,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:01.005239,0.000236,udp,147.32.85.34,61810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:01.015889,0.000209,udp,147.32.85.34,51893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:01.053884,0.000316,udp,147.32.85.34,54980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:01.063792,0.000271,udp,147.32.85.34,52608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:01.080473,0.00021,udp,147.32.85.34,56811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:04.984241,2.125862,tcp,66.249.71.57,34000.0,->,147.32.84.212,80.0,FSPA_FSPA,0.0,0.0,25,10970,1152,9818,438.8,0.10501367365542388,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:58:09.407530,0.000302,udp,147.32.84.170,45526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:09.408531,0.017926,tcp,147.32.84.170,58407.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:13.206099,2806.860352,udp,117.200.163.188,23678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1961,727,1234,326.8333333333333,0.37072921978582357,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:13.410372,0.308658,tcp,147.32.84.170,47263.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:14.110562,240.04892,tcp,147.32.84.170,48626.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:15.976666,1934.630127,udp,31.128.64.140,8522.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,701,151,550,175.25,0.21540656205420827,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:19.053869,0.000289,udp,147.32.84.170,59037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:19.054701,0.000386,udp,147.32.84.170,38253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:19.406752,0.000455,udp,147.32.84.170,52874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:23.355269,2885.950439,udp,84.245.235.38,20578.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,773,587,186,128.83333333333334,0.759379042690815,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:26.865136,0.000209,udp,147.32.85.25,36944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:27.855342,0.000114,tcp,195.113.134.30,50566.0,->,147.32.87.5,80.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 19:58:29.406655,0.000519,udp,147.32.84.170,39810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:29.804208,0.000549,udp,213.112.36.28,36638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:33.032598,0.046107,tcp,147.32.84.3,52793.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,92,74484,3126,71358,809.6086956521739,0.04196874496536169,19,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 19:58:34.251861,116.096695,tcp,147.32.85.6,54567.0,->,209.85.149.101,80.0,FSPA_FSPA,0.0,0.0,20,8121,3183,4938,406.05,0.3919468045807167,19,1,flow=Background-TCP-Established,Background,-1 2011-08-16 19:58:36.442556,1482.004517,udp,77.87.34.227,1738.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1909,1185,724,190.9,0.6207438449449973,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:39.407800,0.000241,udp,147.32.84.170,54918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:44.530125,61.27335,tcp,147.32.84.165,4282.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:58:46.738070,2898.40625,udp,92.224.105.248,2379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:58:48.227190,0.019476,udp,147.32.84.59,57062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,74,260,167.0,0.2215568862275449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:49.407720,0.000333,udp,147.32.84.170,38092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:50.050436,0.000258,udp,147.32.84.170,47493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:58:52.418664,0.000307,udp,147.32.85.34,57170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:58:59.122756,7e-06,icmp,147.32.87.249,,<-,147.32.87.48,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,19,1,flow=Background,Background,-1 2011-08-16 19:58:59.328181,0.137433,tcp,147.32.84.59,44963.0,->,213.20.245.92,80.0,FSPA_FSPA,0.0,0.0,12,4546,1884,2662,378.8333333333333,0.41443026836779584,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:59:00.595035,0.001954,udp,114.40.112.180,60458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,601,541,60,300.5,0.9001663893510815,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:01.190669,0.000672,udp,95.53.191.111,39978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,75,486,280.5,0.13368983957219252,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:06.888322,0.000206,udp,147.32.84.138,57200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:59:07.817058,0.000403,udp,147.32.85.25,47087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:59:10.090278,0.000493,udp,189.72.98.7,61607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:29.407673,0.000389,udp,147.32.84.170,46033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:30.007101,47.589111,udp,80.83.24.34,35110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:37.157792,0.00184,udp,68.91.95.109,1106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:39.406777,0.000439,udp,147.32.84.170,44564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:40.062325,0.000398,udp,188.176.8.166,17790.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,19,0,flow=Background-UDP-Established,Background,-1 2011-08-16 19:59:40.910327,240.035568,tcp,147.32.84.59,47095.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,19,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 19:59:45.387827,61.251667,tcp,147.32.84.165,4283.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,19,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 19:59:49.406826,0.00039,udp,147.32.84.170,38713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:49.408723,0.01944,tcp,147.32.84.170,57072.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:52.053623,0.00023,udp,147.32.84.170,51515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:52.055609,0.321248,tcp,147.32.84.170,35634.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 19:59:58.793911,0.000203,udp,147.32.85.89,58358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:59:59.101294,0.000206,udp,147.32.84.138,48509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,19,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 19:59:59.406994,0.000345,udp,147.32.84.170,35038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,19,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:01.400127,0.000239,udp,147.32.85.34,50510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:00:01.404945,0.000299,udp,147.32.85.34,56568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:00:09.407566,0.000273,udp,147.32.84.170,33349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:09.934373,0.000195,udp,147.32.87.36,60083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,20,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:00:09.963325,0.000239,udp,147.32.87.36,36402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,20,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:00:14.831826,0.000656,udp,80.186.136.20,13182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:00:19.407793,0.000416,udp,147.32.84.170,49181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:23.047166,0.000258,udp,147.32.84.170,42371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:23.047859,0.000256,udp,147.32.84.170,59134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:25.429921,0.018632,tcp,147.32.84.164,52809.0,->,194.124.229.17,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:00:28.225684,794.588745,udp,189.31.184.185,7717.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1204,209,995,200.66666666666666,0.17358803986710963,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:00:28.875472,0.00024,udp,147.32.84.138,48055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:00:29.406658,0.00037,udp,147.32.84.170,52264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:29.408579,0.017949,tcp,147.32.84.170,56025.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:31.309129,0.340612,udp,147.32.84.229,13363.0,<->,140.113.68.121,12128.0,CON,0.0,0.0,4,3016,60,2956,754.0,0.01989389920424403,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:00:33.803710,0.000425,udp,195.3.158.10,55839.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:00:35.022455,1.416028,tcp,90.180.82.174,27783.0,->,147.32.84.36,443.0,FSPA_FSPA,0.0,0.0,1195,1259698,22832,1236866,1054.1405857740585,0.018124979161672085,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:00:39.514161,0.000502,udp,147.32.84.170,41274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:46.225700,61.220493,tcp,147.32.84.165,4284.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:00:48.065836,0.207411,tcp,147.32.86.20,1501.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:00:54.052732,0.000393,udp,147.32.84.170,60564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:59.406890,0.000329,udp,147.32.84.170,55754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:00:59.408854,0.018599,tcp,147.32.84.170,37204.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:01.645871,0.000177,udp,147.32.84.138,37019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:01.831886,0.000172,udp,147.32.85.25,60776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:01.926359,0.00023,udp,147.32.85.121,36836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:07.035148,15.86367,tcp,67.195.115.23,60215.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,14,4950,851,4099,353.57142857142856,0.17191919191919192,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:01:08.895855,0.000408,udp,147.32.84.138,45127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:09.406738,0.000386,udp,147.32.84.170,55227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:09.407687,0.00028,udp,147.32.84.170,52819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:09.408677,0.01829,tcp,147.32.84.170,37205.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:10.322721,1.733498,tcp,147.32.84.171,49348.0,->,86.170.124.128,27756.0,FSPA_FSA,0.0,0.0,10,744,538,206,74.4,0.7231182795698925,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:01:11.501766,0.000531,udp,24.150.139.67,7241.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:01:17.150355,0.000315,udp,147.32.85.25,42059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:19.406990,0.000454,udp,147.32.84.170,40372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:19.629529,1.590012,tcp,46.132.156.206,1863.0,->,147.32.84.171,6881.0,FSPA_FSA,0.0,0.0,9,606,364,242,67.33333333333333,0.6006600660066007,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:01:25.148901,607.950806,udp,98.220.225.159,55011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,686,382,304,171.5,0.5568513119533528,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:01:29.406945,0.000469,udp,147.32.84.170,55858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:01:32.452071,0.00023,udp,147.32.84.138,52969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:32.463288,0.000375,udp,147.32.84.138,41525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:34.618897,0.000427,udp,201.141.250.185,3692.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:01:43.387031,0.000238,udp,147.32.85.25,36599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:45.588266,3028.590088,udp,147.32.84.229,13363.0,<->,114.44.184.113,16230.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:01:47.043907,61.230949,tcp,147.32.84.165,4285.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:01:52.367317,0.799666,tcp,204.124.180.236,59352.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,25,18324,1415,16909,732.96,0.07722113075747654,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:01:53.882684,0.000328,udp,147.32.86.20,50127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:54.565687,0.000133,udp,147.32.84.138,45999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:01:56.057355,0.242419,tcp,147.32.84.170,44317.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:05.983039,0.000435,udp,212.25.54.244,18156.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:07.337609,0.002319,udp,94.153.139.181,38403.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:09.408046,0.000307,udp,147.32.84.170,39204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:14.889330,0.368684,udp,147.32.84.229,13363.0,<->,125.224.66.148,50862.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:27.054084,0.000372,udp,147.32.84.170,47221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:29.408705,0.000466,udp,147.32.84.170,56062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:29.481953,0.430949,udp,147.32.87.48,1202.0,->,147.32.87.116,161.0,INT,0.0,,22,2882,2882,0,131.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:02:29.845498,0.000483,udp,50.99.195.97,20798.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:35.826233,0.000298,udp,147.32.85.25,36688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:02:39.408483,0.00044,udp,147.32.84.170,53498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:39.410652,0.018596,tcp,147.32.84.170,36398.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:02:47.373594,0.000239,udp,147.32.84.138,48499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:02:47.861520,61.235432,tcp,147.32.84.165,4286.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:02:51.193688,0.000456,udp,94.141.181.80,56327.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:52.352607,0.000365,udp,147.32.84.138,46990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:02:53.539491,0.000339,udp,147.32.84.59,38658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:02:55.354140,0.000249,udp,188.226.105.191,10171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:02:59.409965,0.000359,udp,147.32.84.170,53723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:01.568922,3025.19043,udp,78.57.26.100,40087.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:04.610548,0.000689,udp,95.132.233.182,41128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:04.884539,0.000356,udp,147.32.84.138,58996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:03:05.175465,0.000666,udp,189.161.112.126,11903.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:07.790856,0.000411,udp,78.108.103.193,34860.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:19.408174,0.000352,udp,147.32.84.170,47916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:21.739215,3041.615967,udp,91.38.174.200,44889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:25.074271,3115.089355,udp,173.212.97.91,7891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1211,901,310,121.1,0.7440132122213047,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:29.054439,0.000375,udp,147.32.84.170,58244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:29.408051,0.000269,udp,147.32.84.170,60047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:29.409060,0.01801,tcp,147.32.84.170,39875.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:29.503734,8e-06,udp,147.32.87.48,1211.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:03:33.594340,0.000313,udp,147.32.84.59,33504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:03:33.871855,0.207086,tcp,147.32.86.20,1647.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:03:36.618070,0.000242,udp,147.32.84.19,43311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,78,232,155.0,0.25161290322580643,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:03:36.835709,3014.007812,udp,161.24.13.56,12697.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3187,165,3022,531.1666666666666,0.05177282711013492,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:38.225115,0.0,tcp,147.32.84.165,4287.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.237608,0.0,tcp,147.32.84.165,4288.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.243510,0.0,tcp,147.32.84.165,4290.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.414031,0.0,tcp,147.32.84.165,4291.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.414473,0.000416,udp,147.32.84.19,49253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,74,281,177.5,0.2084507042253521,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:03:38.424138,0.0,tcp,147.32.84.165,4292.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.434128,0.0,tcp,147.32.84.165,4294.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.614383,0.0,tcp,147.32.84.165,4295.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:38.623727,0.0,tcp,147.32.84.165,4296.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:39.345450,0.0,tcp,147.32.84.165,4298.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:40.145986,0.0,tcp,147.32.84.165,4300.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:48.417119,0.000752,udp,92.194.109.182,30309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,76,487,281.5,0.1349911190053286,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:03:49.408093,0.000347,udp,147.32.84.170,38345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:03:51.862846,0.0,tcp,147.32.84.165,4526.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:51.863032,61.212852,tcp,147.32.84.165,4499.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:03:51.863098,0.0,tcp,147.32.84.165,4525.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:51.863149,0.0,tcp,147.32.84.165,4527.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:51.863200,0.0,tcp,147.32.84.165,4531.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:52.463435,0.0,tcp,147.32.84.165,4537.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:52.463613,0.0,tcp,147.32.84.165,4539.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:52.463627,0.0,tcp,147.32.84.165,4538.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:03:52.557784,0.230917,tcp,147.32.86.20,1664.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,45,36942,1151,35791,820.9333333333333,0.031156948730442315,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:03:56.932555,0.0,udp,147.32.84.59,63878.0,->,192.168.1.101,427.0,INT,0.0,,1,86,86,0,86.0,1.0,20,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 20:04:00.056436,0.000596,udp,147.32.84.170,49732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:04:00.990255,0.000269,udp,147.32.85.34,62974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:03.790677,0.0,tcp,147.32.84.165,4761.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:03.790691,0.0,tcp,147.32.84.165,4762.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:03.790696,0.0,tcp,147.32.84.165,4763.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:03.790916,0.0,tcp,147.32.84.165,4765.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:03.790930,0.0,tcp,147.32.84.165,4767.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:04.390757,0.0,tcp,147.32.84.165,4775.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:04.390880,0.0,tcp,147.32.84.165,4773.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:04.390887,0.0,tcp,147.32.84.165,4774.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:09.407228,0.000466,udp,147.32.84.170,50649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:04:12.659681,563.30188,udp,98.230.72.95,39441.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,4188,3295,893,261.75,0.7867717287488061,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:04:15.807680,0.0,tcp,147.32.84.165,1064.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:15.807838,0.0,tcp,147.32.84.165,1062.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:15.807845,0.0,tcp,147.32.84.165,1063.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:15.807906,0.0,tcp,147.32.84.165,1067.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:16.408709,0.0,tcp,147.32.84.165,1074.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:16.408734,0.0,tcp,147.32.84.165,1075.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:16.408829,0.0,tcp,147.32.84.165,1076.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:19.409228,0.018472,tcp,147.32.84.170,36418.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:04:22.497876,0.035658,udp,147.32.84.171,59207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,70,226,148.0,0.23648648648648649,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:23.970604,3412.390381,udp,98.148.176.162,62678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:04:26.823202,6.061919,tcp,147.32.84.181,53159.0,->,82.99.162.242,80.0,SRPA_FSPA,0.0,0.0,62,47008,4910,42098,758.1935483870968,0.10445030633083731,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:04:27.824498,0.0,tcp,147.32.84.165,1302.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:27.824579,0.0,tcp,147.32.84.165,1303.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:27.824628,0.0,tcp,147.32.84.165,1304.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:27.824717,0.0,tcp,147.32.84.165,1306.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:27.824791,0.0,tcp,147.32.84.165,1308.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:28.425692,0.0,tcp,147.32.84.165,1316.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:28.425860,0.0,tcp,147.32.84.165,1314.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:28.425873,0.0,tcp,147.32.84.165,1315.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:34.048358,0.000243,udp,147.32.85.25,42338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:34.090532,0.000154,udp,147.32.85.25,36092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:39.842275,0.0,tcp,147.32.84.165,1499.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:39.842440,0.0,tcp,147.32.84.165,1498.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:39.842454,0.0,tcp,147.32.84.165,1501.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:39.842460,0.0,tcp,147.32.84.165,1502.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:40.443016,0.0,tcp,147.32.84.165,1508.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:40.443198,0.0,tcp,147.32.84.165,1507.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:40.443212,0.0,tcp,147.32.84.165,1510.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:41.591660,2.82359,tcp,66.249.66.211,34366.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8659,994,7665,481.05555555555554,0.11479385610347616,20,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 20:04:45.630353,19.88102,tcp,72.234.59.75,50861.0,->,147.32.85.100,3126.0,S_,0.0,,9,670,670,0,74.44444444444444,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:04:45.639543,0.000338,udp,147.32.84.138,36470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:49.587225,0.000232,udp,147.32.85.25,37476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:49.603203,0.007577,udp,147.32.84.181,62396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,84,213,148.5,0.2828282828282828,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:49.611443,0.00305,udp,147.32.84.181,52720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,84,152,118.0,0.3559322033898305,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:04:50.630748,0.000418,udp,93.137.122.118,59786.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,1,flow=Background-UDP-Established,Background,-1 2011-08-16 20:04:51.859434,0.0,tcp,147.32.84.165,1678.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:51.859515,0.0,tcp,147.32.84.165,1679.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:51.859675,0.0,tcp,147.32.84.165,1682.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:51.859753,0.0,tcp,147.32.84.165,1681.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:52.460297,0.0,tcp,147.32.84.165,1687.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:52.460311,0.0,tcp,147.32.84.165,1688.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:04:55.482894,8.929049,tcp,94.43.219.197,1809.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:04:59.407270,0.000442,udp,147.32.84.170,58347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:02.051440,0.000323,udp,147.32.84.170,53840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:03.876968,61.209827,tcp,147.32.84.165,1719.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:05:03.877063,0.0,tcp,147.32.84.165,1859.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:03.877115,0.0,tcp,147.32.84.165,1860.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:03.877202,0.0,tcp,147.32.84.165,1863.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:03.877206,0.0,tcp,147.32.84.165,1862.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:04.477485,0.0,tcp,147.32.84.165,1868.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:04.477558,0.0,tcp,147.32.84.165,1869.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:04.477617,0.0,tcp,147.32.84.165,1872.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:09.409437,0.017993,tcp,147.32.84.170,37244.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:12.222496,3026.182373,udp,88.100.209.40,27511.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1569,1119,450,130.75,0.7131931166347992,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:05:12.241832,0.00051,udp,112.119.11.194,24408.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,73,467,270.0,0.13518518518518519,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:05:15.893858,0.0,tcp,147.32.84.165,2040.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:15.893995,0.0,tcp,147.32.84.165,2039.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:15.894002,0.0,tcp,147.32.84.165,2042.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:15.894112,0.0,tcp,147.32.84.165,2043.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:16.494709,0.0,tcp,147.32.84.165,2049.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:16.494846,0.0,tcp,147.32.84.165,2048.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:16.494854,0.0,tcp,147.32.84.165,2051.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:19.408337,0.000264,udp,147.32.84.170,58066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:22.147232,0.00044,udp,151.48.19.199,21652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:05:27.911870,0.0,tcp,147.32.84.165,2189.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:27.911929,0.0,tcp,147.32.84.165,2191.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:27.911990,0.0,tcp,147.32.84.165,2193.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:28.512073,0.0,tcp,147.32.84.165,2195.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:28.512206,0.0,tcp,147.32.84.165,2197.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:29.101228,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,20,,flow=Background,Background,-1 2011-08-16 20:05:29.407359,0.000451,udp,147.32.84.170,49036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:33.054200,0.000328,udp,147.32.84.170,44831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:36.394828,0.000489,udp,208.54.40.162,19142.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,154,88,66,77.0,0.5714285714285714,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:05:36.827347,0.000208,udp,147.32.84.138,56899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:05:39.407678,0.027896,udp,147.32.84.170,41879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:39.928808,0.0,tcp,147.32.84.165,2309.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:39.928976,0.0,tcp,147.32.84.165,2311.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:39.929025,0.0,tcp,147.32.84.165,2313.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:40.530028,0.0,tcp,147.32.84.165,2315.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:40.530151,0.0,tcp,147.32.84.165,2317.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:40.541246,0.0,tcp,147.32.84.165,2319.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:49.004852,6.011746,udp,147.32.84.229,13363.0,->,89.216.169.110,17697.0,INT,0.0,,3,1362,1362,0,454.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:05:49.408385,0.000486,udp,147.32.84.170,43085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:05:50.652033,0.000316,udp,147.32.84.138,42424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:05:51.946229,0.0,tcp,147.32.84.165,2429.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:51.946285,0.0,tcp,147.32.84.165,2431.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:52.546891,0.0,tcp,147.32.84.165,2435.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:52.546907,0.0,tcp,147.32.84.165,2437.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:52.546961,0.0,tcp,147.32.84.165,2439.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:05:54.031176,110.264252,tcp,147.32.84.59,6237.0,->,69.171.229.25,80.0,SRPA_SPA,0.0,0.0,7,1052,559,493,150.28571428571428,0.5313688212927756,20,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 20:05:59.314138,0.000357,udp,147.32.86.20,63082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:01.756352,0.00023,udp,147.32.85.34,58939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:01.785732,0.000348,udp,147.32.85.34,64576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:03.963701,0.0,tcp,147.32.84.165,2549.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:03.963960,0.0,tcp,147.32.84.165,2551.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:04.564214,0.0,tcp,147.32.84.165,2555.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:04.564313,0.0,tcp,147.32.84.165,2557.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:04.564373,0.0,tcp,147.32.84.165,2559.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:07.988044,0.000411,udp,147.32.85.25,38606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:08.014574,0.029145,tcp,147.32.84.59,52865.0,->,62.168.44.117,80.0,SRPA_FSPA,0.0,0.0,12,3846,2026,1820,320.5,0.5267810712428497,20,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 20:06:09.408208,0.000295,udp,147.32.84.170,40900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:09.409309,0.018469,tcp,147.32.84.170,50554.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:12.315657,0.153743,tcp,147.32.86.20,1785.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,62,55156,1453,53703,889.6129032258065,0.02634346217999855,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:06:12.782354,2574.614014,udp,147.32.84.229,13363.0,<->,78.111.145.7,12179.0,CON,0.0,0.0,10,6211,3102,3109,621.1,0.49943648365802606,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:15.367753,3040.036377,udp,93.150.60.244,8885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:15.982232,61.214195,tcp,147.32.84.165,2576.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:06:15.982240,0.0,tcp,147.32.84.165,2670.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:15.982318,0.0,tcp,147.32.84.165,2672.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:16.583032,0.0,tcp,147.32.84.165,2676.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:16.583140,0.0,tcp,147.32.84.165,2678.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:16.583154,0.0,tcp,147.32.84.165,2680.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:22.450913,0.00059,udp,80.99.243.98,62863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:27.998968,0.0,tcp,147.32.84.165,2789.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:27.999066,0.0,tcp,147.32.84.165,2790.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:27.999116,0.0,tcp,147.32.84.165,2791.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:27.999123,0.0,tcp,147.32.84.165,2792.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:27.999166,0.0,tcp,147.32.84.165,2793.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:28.600502,0.0,tcp,147.32.84.165,2796.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:28.600517,0.0,tcp,147.32.84.165,2795.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:28.600522,0.0,tcp,147.32.84.165,2798.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:28.600527,0.0,tcp,147.32.84.165,2797.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:28.600563,0.0,tcp,147.32.84.165,2800.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:29.409472,0.000305,udp,147.32.84.170,57166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:32.606051,0.000474,udp,70.72.87.142,46134.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:35.056986,0.000292,udp,147.32.84.170,45750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:35.996550,3112.777344,udp,88.235.114.90,32448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:37.108021,0.000505,udp,93.32.161.152,10813.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,74,476,275.0,0.13454545454545455,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:06:38.409282,0.000221,udp,147.32.84.138,42314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:39.408508,0.000359,udp,147.32.84.170,37014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:40.016394,0.0,tcp,147.32.84.165,2910.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:40.016509,0.0,tcp,147.32.84.165,2912.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:40.617252,0.0,tcp,147.32.84.165,2916.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:40.617266,0.0,tcp,147.32.84.165,2918.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:40.617431,0.0,tcp,147.32.84.165,2920.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:44.054211,0.00023,udp,147.32.85.25,36833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:47.645370,0.000151,udp,147.32.84.138,36999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:06:52.033747,0.0,tcp,147.32.84.165,3030.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:52.033827,0.0,tcp,147.32.84.165,3032.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:52.635075,0.0,tcp,147.32.84.165,3036.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:52.635090,0.0,tcp,147.32.84.165,3038.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:52.635150,0.0,tcp,147.32.84.165,3040.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:06:59.408461,0.000409,udp,147.32.84.170,49855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:06:59.409405,0.000308,udp,147.32.84.170,60294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:07:04.051016,0.0,tcp,147.32.84.165,3149.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.051185,0.0,tcp,147.32.84.165,3150.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.051197,0.0,tcp,147.32.84.165,3151.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.051247,0.0,tcp,147.32.84.165,3152.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.051328,0.0,tcp,147.32.84.165,3153.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.399635,0.00029,udp,147.32.85.25,48615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:04.652564,0.0,tcp,147.32.84.165,3156.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.652583,0.0,tcp,147.32.84.165,3155.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.652599,0.0,tcp,147.32.84.165,3158.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.652636,0.0,tcp,147.32.84.165,3157.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:04.652856,0.0,tcp,147.32.84.165,3160.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:05.944027,0.231465,tcp,147.32.86.20,1832.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,46,37913,1151,36762,824.195652173913,0.030358979769472213,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:07:10.547856,0.00034,udp,147.32.84.138,43652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:15.292092,0.000288,udp,147.32.84.138,35922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:16.068401,0.0,tcp,147.32.84.165,3269.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.068416,0.0,tcp,147.32.84.165,3270.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.068421,0.0,tcp,147.32.84.165,3271.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.068630,0.0,tcp,147.32.84.165,3272.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.068643,0.0,tcp,147.32.84.165,3273.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.669231,0.0,tcp,147.32.84.165,3276.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.669347,0.0,tcp,147.32.84.165,3275.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.669409,0.0,tcp,147.32.84.165,3278.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.669484,0.0,tcp,147.32.84.165,3277.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:16.669547,0.0,tcp,147.32.84.165,3280.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:17.575235,0.00047,udp,147.32.84.138,52822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:18.387959,0.000277,udp,147.32.85.34,64652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:19.410649,0.018105,tcp,147.32.84.170,36170.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:07:25.499896,0.000371,udp,147.32.85.25,56062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:28.086394,0.0,tcp,147.32.84.165,3391.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.086450,61.191433,tcp,147.32.84.165,3297.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:07:28.086457,0.0,tcp,147.32.84.165,3392.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.086512,0.0,tcp,147.32.84.165,3393.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.086519,0.0,tcp,147.32.84.165,3394.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.486594,0.0,tcp,147.32.84.165,3395.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.686645,0.0,tcp,147.32.84.165,3398.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.686659,0.0,tcp,147.32.84.165,3397.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.686664,0.0,tcp,147.32.84.165,3400.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.686813,0.0,tcp,147.32.84.165,3399.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:28.686827,0.0,tcp,147.32.84.165,3402.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:35.661806,0.000156,udp,147.32.85.25,50096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:07:39.408554,0.000404,udp,147.32.84.170,49352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:07:39.409535,0.000282,udp,147.32.84.170,44525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:07:40.103583,0.0,tcp,147.32.84.165,3511.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.103657,0.0,tcp,147.32.84.165,3512.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.103663,0.0,tcp,147.32.84.165,3513.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.103718,0.0,tcp,147.32.84.165,3514.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.103726,0.0,tcp,147.32.84.165,3515.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.704031,0.0,tcp,147.32.84.165,3518.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.704118,0.0,tcp,147.32.84.165,3517.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.704122,0.0,tcp,147.32.84.165,3520.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.704162,0.0,tcp,147.32.84.165,3519.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:40.704213,0.0,tcp,147.32.84.165,3522.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:43.519622,0.001739,udp,68.196.8.201,41319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,518,458,60,259.0,0.8841698841698842,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:07:49.410529,0.018512,tcp,147.32.84.170,50567.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:07:49.650370,0.305701,udp,147.32.84.229,13363.0,<->,203.209.149.12,21200.0,CON,0.0,0.0,2,541,481,60,270.5,0.88909426987061,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:07:52.120380,0.0,tcp,147.32.84.165,3631.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.120395,0.0,tcp,147.32.84.165,3632.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.120449,0.0,tcp,147.32.84.165,3633.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.120462,0.0,tcp,147.32.84.165,3634.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.120607,0.0,tcp,147.32.84.165,3635.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.721495,0.0,tcp,147.32.84.165,3638.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.721565,0.0,tcp,147.32.84.165,3637.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.721574,0.0,tcp,147.32.84.165,3640.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.721642,0.0,tcp,147.32.84.165,3639.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:52.721648,0.0,tcp,147.32.84.165,3642.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:07:53.781348,3063.727295,udp,2.49.233.60,27192.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,496,372,124,124.0,0.75,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:07:57.655609,0.00058,udp,95.42.54.252,50404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,73,69,71.0,0.5140845070422535,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:01.527321,0.000265,udp,147.32.85.34,64250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:01.533792,0.000288,udp,147.32.85.34,63529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:04.116789,0.450151,udp,147.32.84.229,13363.0,<->,98.127.246.35,63126.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:04.125812,0.000399,udp,147.32.84.59,56392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:09.846869,0.000189,udp,147.32.84.59,34356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:11.329770,0.08728,udp,147.32.84.229,13363.0,<->,213.88.74.109,17510.0,CON,0.0,0.0,4,2993,60,2933,748.25,0.020046775810223856,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:11.563544,0.000203,udp,147.32.84.138,59284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:13.094865,0.424795,tcp,147.32.84.170,57133.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:14.113974,250.036484,tcp,147.32.84.170,57141.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:14.760039,602.91394,tcp,119.152.110.172,59663.0,->,147.32.86.58,80.0,SR_,0.0,,3,192,192,0,64.0,1.0,20,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:08:18.865371,0.000208,udp,147.32.85.89,60317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:08:19.411637,0.017609,tcp,147.32.84.170,33098.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:28.884450,61.194355,tcp,147.32.84.165,3655.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:08:29.410575,0.017781,tcp,147.32.84.170,50782.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:33.594996,0.001687,udp,67.232.33.38,60431.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:37.575028,0.000565,udp,83.33.62.34,38479.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:39.408663,0.000377,udp,147.32.84.170,41186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:39.409587,0.000418,udp,147.32.84.170,49639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:45.791967,0.000548,udp,95.146.118.40,28611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,73,473,273.0,0.1336996336996337,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:08:49.132998,0.169476,tcp,147.32.86.20,1919.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,61,53681,1453,52228,880.016393442623,0.027067305005495427,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:08:49.409756,0.000303,udp,147.32.84.170,33351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:08:55.828039,0.000162,udp,147.32.84.138,43267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:09:05.177841,0.000237,udp,147.32.84.59,37608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:09:08.344011,2040.163086,udp,70.135.34.41,41803.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,400,220,180,66.66666666666667,0.55,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:08.754197,0.000439,udp,83.194.43.17,46862.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:08.883326,0.000214,udp,147.32.84.138,37693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:09:10.057775,0.218466,tcp,147.32.84.170,46258.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:09:17.432374,0.002289,udp,87.102.150.231,35044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:19.410669,0.000405,udp,147.32.84.170,59939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:09:20.399557,0.000302,udp,147.32.84.138,42168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:09:29.127815,0.000639,udp,68.34.191.232,9156.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,611,81,530,305.5,0.132569558101473,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:29.186573,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,20,,flow=Background,Background,-1 2011-08-16 20:09:29.672920,61.21806,tcp,147.32.84.165,3656.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:09:30.684533,383.862366,udp,98.214.78.117,28780.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1099,458,641,91.58333333333333,0.4167424931756142,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:30.932293,0.000388,udp,147.32.84.138,45186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:09:33.173841,2470.699463,udp,147.32.84.229,13363.0,<->,82.38.97.41,47450.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:36.263356,0.206319,tcp,147.32.86.20,1960.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:09:36.264297,338.893219,udp,1.66.99.154,48558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,432,252,180,72.0,0.5833333333333334,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:09:41.058307,0.216511,tcp,147.32.84.170,46262.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:09:49.411672,0.017891,tcp,147.32.84.170,38280.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:09:59.409793,0.00044,udp,147.32.84.170,38783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:09:59.410719,0.000312,udp,147.32.84.170,43858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:10:01.255473,0.000317,udp,147.32.85.34,65504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:10:05.111582,0.004132,udp,109.107.65.38,33474.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3025,60,2965,756.25,0.019834710743801654,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:09.409840,0.0004,udp,147.32.84.170,42388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:10:11.051198,0.21748,tcp,147.32.84.170,46266.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:10:11.748039,3544.735596,udp,41.135.19.240,3875.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,622,438,184,103.66666666666667,0.7041800643086816,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:11.783725,955.581604,udp,147.32.84.229,13363.0,<->,81.198.5.97,46689.0,CON,0.0,0.0,14,1766,1464,302,126.14285714285714,0.8289920724801813,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:12.012658,0.170257,tcp,147.32.86.20,1990.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,60,53965,1393,52572,899.4166666666666,0.025813026961919762,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:10:12.201995,0.000454,udp,77.87.207.9,6691.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:13.828318,0.000275,udp,147.32.84.21,40126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,73,274,173.5,0.21037463976945245,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:10:16.419844,0.000477,udp,178.148.8.151,19513.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:21.546146,3.036933,udp,85.16.136.74,137.0,->,147.32.84.229,137.0,INT,0.0,,3,276,276,0,92.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:10:26.348387,0.000219,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,20,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 20:10:29.409916,0.000435,udp,147.32.84.170,33565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:10:30.492237,61.195084,tcp,147.32.84.165,3687.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:10:39.409867,0.010002,udp,147.32.84.170,34679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:10:39.639791,0.309383,tcp,147.32.86.20,2012.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:10:44.335729,3087.679932,udp,152.96.193.206,20583.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1205,895,310,120.5,0.7427385892116183,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:10:57.008940,0.000189,udp,147.32.84.138,33562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:10:59.410629,0.000458,udp,147.32.84.170,36968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:11:02.629219,0.000566,udp,151.1.218.49,1383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:11:19.409798,0.000371,udp,147.32.84.170,36632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:11:24.828264,0.000536,udp,190.246.241.5,33863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,72,463,267.5,0.13457943925233645,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:11:29.411955,0.017949,tcp,147.32.84.170,53833.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:11:31.288685,61.191105,tcp,147.32.84.165,3688.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:11:39.412018,0.020224,tcp,147.32.84.170,41310.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:11:40.838130,0.000237,udp,147.32.84.59,36966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,86,197,141.5,0.303886925795053,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:11:41.868712,0.000617,udp,178.74.227.133,37149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:11:43.057748,0.000282,udp,147.32.84.170,47952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:11:44.142539,0.000218,udp,147.32.85.25,53524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:11:48.557640,0.000319,udp,147.32.84.138,53892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:11:59.410853,0.000306,udp,147.32.84.170,56598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:12:01.013722,0.000416,udp,147.32.85.34,60219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:14.604602,0.386659,udp,147.32.84.229,13363.0,<->,61.62.205.36,50305.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:12:14.660793,0.000208,udp,147.32.84.138,33203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:15.566544,0.00022,udp,147.32.85.25,47687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:19.410107,0.000471,udp,147.32.84.170,41884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:12:30.956319,0.000283,udp,147.32.86.20,59071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:32.086355,61.168751,tcp,147.32.84.165,3689.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:12:35.906051,0.000277,udp,147.32.84.59,37677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:42.220754,0.00024,udp,147.32.84.138,35427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:12:42.225501,0.000598,udp,109.129.126.154,44612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,78,476,277.0,0.1407942238267148,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:12:45.055731,0.000457,udp,147.32.84.170,55997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:12:45.056757,0.000356,udp,147.32.84.170,45852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:12:52.367555,0.000243,udp,147.32.84.138,60227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:13:03.334997,0.267944,udp,147.32.84.229,13363.0,<->,188.121.197.221,13632.0,CON,0.0,0.0,4,675,554,121,168.75,0.8207407407407408,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:13:10.940044,0.000319,udp,147.32.84.138,42884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:13:12.090350,3445.297852,udp,66.108.234.109,54122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3689,3509,180,461.125,0.9512062889671998,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:13:13.702279,0.24976,tcp,147.32.84.170,37770.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:13:13.765025,0.252612,tcp,147.32.84.170,37724.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:13:14.009717,0.249145,tcp,147.32.84.170,37725.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:13:32.874067,61.163555,tcp,147.32.84.165,3690.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:13:34.123712,0.0,igmp,147.32.87.7,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,20,,flow=Background,Background,-1 2011-08-16 20:13:35.735355,0.000608,udp,74.198.150.251,61220.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:13:42.972855,0.000438,udp,147.32.84.138,58535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:13:46.307785,0.000702,udp,86.46.99.46,61020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,601,78,523,300.5,0.129783693843594,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:13:50.067949,0.000197,udp,147.32.84.138,46050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:13:54.308523,2.097084,tcp,89.218.117.114,41358.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,29,19027,1547,17480,656.1034482758621,0.08130551321805855,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:13:54.384003,2.300005,tcp,166.137.136.42,50201.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,27,2278,1287,991,84.37037037037037,0.5649692712906058,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:13:59.412336,0.01815,tcp,147.32.84.170,53860.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:14:00.069181,20.994562,tcp,87.155.72.19,54022.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,14,1181,655,526,84.35714285714286,0.554614733276884,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:14:00.670437,0.00076,udp,213.91.130.55,63778.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,655,85,570,327.5,0.1297709923664122,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:08.724905,0.000604,udp,115.87.216.245,56579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:16.222550,3368.045654,udp,76.69.222.214,54201.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,979,731,248,122.375,0.7466802860061287,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:18.057322,0.000255,udp,147.32.84.170,51864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:14:18.059589,0.24676,tcp,147.32.84.170,43896.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:14:19.410191,0.000361,udp,147.32.84.170,43062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:14:24.642540,0.00053,udp,90.178.149.159,52979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,75,475,275.0,0.13636363636363635,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:27.010630,0.000469,udp,79.216.174.18,27207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:33.642945,61.168648,tcp,147.32.84.165,3691.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:14:35.230237,0.413867,tcp,94.230.152.3,11945.0,->,147.32.87.3,37922.0,FSPA_FSPA,0.0,0.0,14,3955,933,3022,282.5,0.2359039190897598,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:14:38.323894,3058.268799,udp,2.40.61.148,5876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1434,1062,372,119.5,0.7405857740585774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:38.512867,3067.363525,tcp,178.89.68.8,50359.0,->,147.32.84.229,13363.0,SPA_SRPA,0.0,0.0,782,103786,64793,38993,132.71867007672634,0.6242942208004933,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:14:38.767920,2630.858643,udp,190.245.18.230,32166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:39.411276,0.000277,udp,147.32.84.170,56505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:14:41.678982,0.000151,udp,147.32.85.25,34258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:14:45.456201,2246.096924,udp,149.5.45.5,43059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,468,287,181,78.0,0.6132478632478633,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:49.086639,0.000257,udp,147.32.86.20,63143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:14:49.624126,0.000479,udp,178.122.35.7,25026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:14:59.413756,0.018006,tcp,147.32.84.170,53868.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:00.797269,9.076805,tcp,61.147.68.190,4964.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:15:07.718691,0.000285,udp,147.32.85.25,39010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:09.410525,0.000337,udp,147.32.84.170,36311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:09.411379,0.000284,udp,147.32.84.170,54146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:09.412419,0.033581,tcp,147.32.84.170,33183.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:15.326671,0.000227,udp,147.32.84.138,38444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:20.059563,0.000354,udp,147.32.84.170,45992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:20.060857,0.229481,tcp,147.32.84.170,43905.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:22.850491,0.000222,udp,147.32.85.34,50541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:27.441156,0.084818,tcp,147.32.84.164,56166.0,->,79.141.170.11,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:15:34.086572,0.000223,udp,147.32.84.138,44055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:34.440216,61.133308,tcp,147.32.84.165,3692.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:15:38.922332,0.000392,udp,147.32.84.138,60563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:39.410550,0.020124,udp,147.32.84.170,54292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:41.160129,0.000241,udp,147.32.84.138,46192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:49.410498,0.000381,udp,147.32.84.170,46336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:49.411439,0.00035,udp,147.32.84.170,47529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:53.566629,2935.821289,udp,147.32.84.229,13363.0,<->,220.136.82.177,27900.0,CON,0.0,0.0,6,1199,1018,181,199.83333333333334,0.8490408673894912,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:15:54.438117,0.000241,udp,147.32.85.25,40649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:15:59.411587,0.000422,udp,147.32.84.170,56242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:15:59.412772,0.017803,tcp,147.32.84.170,55868.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:04.486044,3024.095947,udp,108.12.90.142,3923.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,593,220,373,98.83333333333333,0.37099494097807756,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:06.209480,0.000505,udp,212.93.105.43,22299.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:07.618443,0.013212,tcp,147.32.84.215,58964.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:16:09.411704,0.000366,udp,147.32.84.170,38219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:09.412824,0.018337,tcp,147.32.84.170,42410.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:10.418904,6.030583,udp,147.32.85.56,44076.0,->,111.254.126.112,11551.0,INT,0.0,,3,216,216,0,72.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:16:15.926202,6.461269,tcp,66.249.72.35,45126.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,24,12992,1143,11849,541.3333333333334,0.08797721674876847,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:16:17.700822,2414.964844,udp,64.7.3.126,21253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:21.056978,0.000458,udp,147.32.84.170,37525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:21.059291,0.246085,tcp,147.32.84.170,49301.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:21.470360,0.000492,udp,95.42.85.249,5405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:29.410634,0.000448,udp,147.32.84.170,52368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:35.060323,0.000216,udp,147.32.84.138,33830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:16:35.187269,61.156818,tcp,147.32.84.165,3693.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:16:39.410489,0.000373,udp,147.32.84.170,49024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:39.411408,0.000299,udp,147.32.84.170,42304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:40.714902,2762.90918,udp,128.141.238.137,50123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,52,3328,1560,1768,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:41.292667,0.394298,udp,147.32.84.229,13363.0,<->,203.129.44.180,8052.0,CON,0.0,0.0,4,2992,60,2932,748.0,0.020053475935828877,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:43.783264,2.067413,udp,147.32.84.229,13363.0,<->,149.5.45.242,33033.0,CON,0.0,0.0,3,1020,960,60,340.0,0.9411764705882353,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:44.836936,0.000171,udp,147.32.84.138,54352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:16:45.581188,2.522849,tcp,66.249.66.121,43914.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,10,1142,698,444,114.2,0.6112084063047285,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:16:46.368324,0.082973,udp,147.32.84.229,13363.0,<->,85.85.39.32,42349.0,CON,0.0,0.0,2,540,480,60,270.0,0.8888888888888888,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:49.411082,0.000364,udp,147.32.84.170,37222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:49.412191,0.018293,tcp,147.32.84.170,51091.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:52.056849,0.000268,udp,147.32.84.170,43592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:52.057654,0.00019,udp,147.32.84.170,36622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:16:52.145957,0.165155,udp,147.32.84.130,51268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,93,148,120.5,0.38589211618257263,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:16:52.591662,0.206474,tcp,147.32.86.20,2344.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:16:54.976942,0.000387,udp,93.103.96.159,43218.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:55.050321,2377.984863,udp,147.32.84.229,13363.0,<->,206.188.156.13,23266.0,CON,0.0,0.0,10,2140,1660,480,214.0,0.7757009345794392,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:55.714074,2271.255859,udp,147.32.84.229,13363.0,<->,76.103.203.58,62511.0,CON,0.0,0.0,8,1858,1617,241,232.25,0.8702906350914962,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:16:59.412835,0.018024,tcp,147.32.84.170,51093.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:09.410743,0.000394,udp,147.32.84.170,56797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:09.411657,0.000316,udp,147.32.84.170,58501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:09.412735,0.018467,tcp,147.32.84.170,34052.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:15.992562,8.919876,tcp,46.170.111.36,61598.0,->,147.32.86.165,12114.0,S_,0.0,,3,198,198,0,66.0,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:17:16.256363,0.000179,udp,147.32.84.138,55258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:17:19.411576,0.000324,udp,147.32.84.170,52807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:19.412711,0.017997,tcp,147.32.84.170,52688.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:23.057185,0.000337,udp,147.32.84.170,59781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:34.869172,0.004377,udp,98.229.37.127,19509.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3022,60,2962,755.5,0.01985440105890139,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:17:35.955215,61.146744,tcp,147.32.84.165,3694.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:17:36.237782,0.000235,udp,147.32.84.59,59474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:17:38.327739,0.000103,tcp,77.223.128.211,80.0,->,147.32.84.127,29522.0,SA_,0.0,,1,60,60,0,60.0,1.0,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:17:39.412852,0.018108,tcp,147.32.84.170,52691.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:41.263853,0.000294,udp,147.32.84.59,33193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:17:47.816231,0.000169,udp,147.32.84.138,37120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:17:49.411606,0.000297,udp,147.32.84.170,53110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:17:53.894341,1985.185913,udp,75.92.246.233,54734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1197,1016,181,199.5,0.8487886382623224,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:17:54.057074,0.00028,udp,147.32.84.170,46453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:00.172085,37.985268,tcp,194.1.157.190,55024.0,->,147.32.84.19,80.0,SRPA_FSPA,0.0,0.0,43,33321,3251,30070,774.9069767441861,0.09756609945679902,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:18:01.336020,0.000494,udp,147.32.84.59,42732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:18:01.448281,0.000267,udp,147.32.85.34,62799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:18:01.458035,0.000206,udp,147.32.85.34,64999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:18:02.083646,0.000684,udp,93.155.182.42,8345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:13.092486,0.299811,tcp,147.32.84.170,48299.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.106760,0.405926,tcp,147.32.84.170,39324.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.112270,0.000396,udp,147.32.84.170,57037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.116686,240.634369,tcp,147.32.84.170,39327.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.117027,240.634048,tcp,147.32.84.170,39328.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.137831,0.017593,udp,147.32.84.170,45161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:14.389719,10.545499,tcp,147.32.84.170,40135.0,->,199.7.57.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:19.411844,0.000264,udp,147.32.84.170,52081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:20.884768,2100.694824,udp,147.32.84.229,13363.0,->,89.28.68.5,4026.0,INT,0.0,,15,2217,2217,0,147.8,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:18:22.642052,6.05098,udp,147.32.84.229,13363.0,->,213.88.18.80,31370.0,INT,0.0,,3,234,234,0,78.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:18:24.060920,0.237588,tcp,147.32.84.170,49331.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:26.275970,0.167641,udp,147.32.84.229,13363.0,<->,72.178.124.44,14844.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:26.386587,2597.164795,udp,46.109.161.211,4690.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1439,1067,372,119.91666666666667,0.7414871438498958,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:29.412811,0.033144,tcp,147.32.84.170,51119.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:31.256931,0.14173,udp,147.32.86.194,55494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,77,171,124.0,0.31048387096774194,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:18:32.303461,3083.1875,udp,173.168.229.161,62190.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:36.733245,61.159081,tcp,147.32.84.165,3695.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:18:46.058794,10.306991,udp,84.57.151.103,29350.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,499,375,124,124.75,0.751503006012024,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:49.412904,0.018139,tcp,147.32.84.170,34079.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:52.075870,0.000487,udp,87.121.108.140,33729.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:18:55.060542,0.242316,tcp,147.32.84.170,49335.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:18:59.239443,0.00048,udp,95.176.23.137,55021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:00.278990,0.000277,udp,147.32.84.138,59434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:19:00.951948,0.000589,udp,86.101.107.39,10209.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,75,468,271.5,0.13812154696132597,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:05.005904,0.000462,udp,208.51.22.18,15010.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:14.278612,1.469045,tcp,147.32.84.171,39242.0,->,41.188.119.83,13032.0,FSRPA_FSPA,0.0,0.0,12,1494,592,902,124.5,0.3962516733601071,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:19:14.377330,0.0,tcp,81.214.189.108,22250.0,?>,147.32.84.171,52839.0,RA_,0.0,,1,60,60,0,60.0,1.0,20,0,flow=Background,Background,-1 2011-08-16 20:19:19.071840,0.000346,udp,147.32.84.69,62972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,73,289,181.0,0.20165745856353592,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:19:19.412873,0.017973,tcp,147.32.84.170,34271.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:19:24.141136,0.022135,udp,147.32.84.229,13363.0,<->,82.204.103.186,45303.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:24.992583,6.002282,udp,147.32.84.229,13363.0,->,82.58.34.239,62635.0,INT,0.0,,3,447,447,0,149.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:19:34.006287,0.807168,tcp,220.181.108.167,18294.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,11,1108,552,556,100.72727272727273,0.4981949458483754,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:19:37.480975,61.239529,tcp,147.32.84.165,3696.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:19:39.410968,0.00032,udp,147.32.84.170,52193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:19:40.785357,0.000376,udp,174.95.153.38,42602.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:45.286373,0.025035,udp,147.32.84.229,13363.0,<->,78.141.179.9,34030.0,CON,0.0,0.0,5,5288,60,5228,1057.6,0.0113464447806354,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:19:57.062857,0.28598,tcp,147.32.84.170,49343.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:19:57.767841,3599.922363,tcp,74.125.232.202,443.0,,147.32.84.59,40200.0,PA_PA,0.0,0.0,495,103365,45461,57904,208.8181818181818,0.4398103806897886,20,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 20:19:59.410780,0.000447,udp,147.32.84.170,34000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:19:59.412878,0.0184,tcp,147.32.84.170,34089.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:03.577601,0.000199,udp,147.32.84.138,60958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:05.683868,620.116089,udp,91.127.234.150,12335.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,486,362,124,121.5,0.7448559670781894,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:20:05.929470,0.00033,udp,147.32.84.36,42938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:07.333117,0.061543,udp,147.32.84.229,13363.0,<->,188.27.77.189,63785.0,CON,0.0,0.0,4,3076,60,3016,769.0,0.01950585175552666,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:20:07.388805,0.000331,udp,147.32.84.138,59156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:09.411898,0.000275,udp,147.32.84.170,43100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:09.619396,0.00023,udp,147.32.84.138,50261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:11.964610,2.4e-05,udp,147.32.84.138,54446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:19.411933,0.000362,udp,147.32.84.170,43617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:21.291439,0.000234,udp,147.32.84.138,32954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:28.058504,0.000307,udp,147.32.84.170,48887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:36.073232,0.000157,udp,147.32.84.138,44663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:20:37.049126,0.000383,udp,62.40.58.241,29940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:20:38.299351,61.286392,tcp,147.32.84.165,3697.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:20:49.412838,0.00033,udp,147.32.84.170,45285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:58.337093,3452.963135,udp,147.32.84.229,13363.0,<->,89.153.201.7,64640.0,CON,0.0,0.0,8,1209,837,372,151.125,0.6923076923076923,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:20:59.052295,0.213319,tcp,147.32.84.170,49351.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:20:59.414384,0.018748,tcp,147.32.84.170,52732.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:00.932439,0.0,icmp,109.226.108.92,259.0,->,147.32.84.229,28130.0,URH,0.0,,1,88,88,0,88.0,1.0,20,0,flow=Background,Background,-1 2011-08-16 20:21:03.666988,0.000694,udp,147.32.86.20,55941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:21:09.413118,0.000335,udp,147.32.84.170,35582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:11.295397,0.000589,udp,178.0.179.109,52503.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,580,75,505,290.0,0.12931034482758622,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:12.981632,2755.229736,udp,147.32.84.229,13363.0,<->,213.211.61.195,52860.0,CON,0.0,0.0,22,1608,913,695,73.0909090909091,0.5677860696517413,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:19.413705,0.000594,udp,147.32.84.170,34081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:19.416017,0.018306,tcp,147.32.84.170,44086.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:20.113301,2301.491699,udp,63.226.212.230,61030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,2946,1700,1246,210.42857142857142,0.5770536320434487,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:23.129878,0.000423,udp,109.122.15.223,20077.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:25.485076,0.000572,udp,91.89.131.12,60698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,220,83,137,110.0,0.37727272727272726,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:28.636612,0.55379,tcp,67.195.112.170,41833.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,16,8084,978,7106,505.25,0.12097971301335972,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:21:28.741204,0.00045,udp,94.21.154.148,12879.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:29.273758,0.000476,udp,121.214.97.89,62039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:29.414223,0.033933,tcp,147.32.84.170,56854.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:38.281530,0.000204,udp,147.32.84.138,54886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:21:39.157327,61.281956,tcp,147.32.84.165,3698.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:21:44.148228,380.813263,udp,147.32.84.229,13363.0,<->,111.251.58.96,55244.0,CON,0.0,0.0,4,2064,154,1910,516.0,0.07461240310077519,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:21:44.770248,0.00037,udp,147.32.84.170,57581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:21:57.976667,0.000211,udp,147.32.84.138,41953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:21:58.231025,0.003681,udp,78.132.208.163,22290.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3040,60,2980,760.0,0.019736842105263157,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:22:01.004764,0.00023,udp,147.32.85.34,65455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:22:09.412183,0.000402,udp,147.32.84.170,40499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:22:12.144414,0.000281,udp,147.32.84.59,60117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:22:18.639805,3354.84082,udp,62.158.42.86,26281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,704,518,186,117.33333333333333,0.7357954545454546,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:22:19.412285,0.000541,udp,147.32.84.170,58525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:22:19.414431,0.018154,tcp,147.32.84.170,48726.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:22:19.778409,0.000355,udp,151.33.74.85,47426.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:22:23.938665,3042.023682,udp,81.64.199.63,25373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:22:28.980477,0.1364,tcp,147.32.86.20,2636.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,24799,913,23886,751.4848484848485,0.03681600064518731,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:22:29.414286,0.017912,tcp,147.32.84.170,52343.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:22:30.762859,0.000175,udp,147.32.84.138,56571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:22:31.060445,0.266849,tcp,147.32.84.170,33433.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:22:40.016000,61.281925,tcp,147.32.84.165,3699.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:22:54.842773,0.000153,udp,147.32.85.25,53585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:01.499247,0.000414,udp,94.31.147.163,48445.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:23:02.061248,0.000269,udp,147.32.84.170,49474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:02.062526,0.345473,tcp,147.32.84.170,33437.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:04.143460,3050.198242,udp,194.47.168.38,34526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1346,881,465,134.6,0.6545319465081724,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:23:09.412399,0.000395,udp,147.32.84.170,57410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:19.415454,0.01801,tcp,147.32.84.170,60651.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:29.108641,0.000319,udp,147.32.86.20,49905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:33.060246,0.000331,udp,147.32.84.170,53299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:37.738102,0.000433,udp,68.143.144.9,55977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:23:39.413511,0.000362,udp,147.32.84.170,46073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:23:40.874570,61.267097,tcp,147.32.84.165,3700.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:23:43.018101,0.000183,udp,147.32.84.138,41160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:49.010051,0.000267,udp,147.32.84.138,56787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:51.088760,0.000263,udp,147.32.84.138,41682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:51.389104,0.001535,udp,212.104.118.43,20394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,517,457,60,258.5,0.8839458413926499,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:23:55.491970,0.000323,udp,147.32.84.138,41362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:23:59.415715,0.018654,tcp,147.32.84.170,56881.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:04.063300,0.000337,udp,147.32.84.170,47319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:04.064304,0.000257,udp,147.32.84.170,60588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:06.387293,0.000561,udp,114.178.241.215,27250.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,76,475,275.5,0.13793103448275862,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:08.346761,0.00023,udp,147.32.85.25,50901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:24:09.415914,0.018173,tcp,147.32.84.170,48747.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:19.415337,0.018307,tcp,147.32.84.170,60659.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:19.577605,2701.511719,udp,147.32.84.229,13363.0,<->,128.122.140.16,31587.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:22.036099,0.000438,udp,93.123.45.101,7049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:31.454949,0.000323,udp,147.32.85.84,54772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:24:33.832545,0.000258,udp,147.32.84.138,32865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:24:35.089015,0.00034,udp,147.32.84.170,50604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:36.448095,0.000421,udp,109.106.156.133,38265.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,78,67,72.5,0.5379310344827586,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:37.086419,0.0,udp,147.32.84.153,56327.0,->,83.167.228.113,123.0,INT,0.0,,1,90,90,0,90.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:24:41.721770,61.274345,tcp,147.32.84.165,3701.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:24:45.214979,0.000566,udp,190.24.19.87,54128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:49.415839,0.000441,udp,147.32.84.170,57034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:51.409438,0.000263,udp,147.32.84.138,60367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:24:52.928857,0.000428,udp,68.195.4.57,50076.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:24:59.413562,0.000344,udp,147.32.84.170,36886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:24:59.415522,0.018017,tcp,147.32.84.170,44123.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:06.059488,0.00025,udp,147.32.84.170,37916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:06.060292,0.000384,udp,147.32.84.170,51795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:09.415603,0.017911,tcp,147.32.84.170,49933.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:09.921868,0.902531,udp,108.66.115.213,9820.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:18.769828,0.000727,udp,87.22.199.207,31881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,78,477,277.5,0.14054054054054055,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:19.415708,0.018448,tcp,147.32.84.170,44126.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:23.816864,3583.629883,tcp,147.32.3.51,1305.0,->,147.32.87.21,10010.0,PA_PA,0.0,0.0,927,64048,32180,31868,69.09169363538295,0.5024356732450662,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:25:29.413665,0.000414,udp,147.32.84.170,45866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:32.867905,15.852323,tcp,81.68.99.5,51249.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,66,5852,3382,2470,88.66666666666667,0.577922077922078,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:25:32.967683,0.218216,tcp,93.85.74.87,4936.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,9,685,425,260,76.11111111111111,0.6204379562043796,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:25:39.413767,0.019779,udp,147.32.84.170,60971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:39.435221,0.03363,tcp,147.32.84.170,52375.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:42.580246,61.252838,tcp,147.32.84.165,3702.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:25:43.280562,3026.854492,udp,201.51.220.52,41017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:45.852977,2439.930908,udp,94.179.95.53,26161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1212,902,310,121.2,0.7442244224422442,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:48.332837,0.00038,udp,109.61.164.186,54824.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:49.414686,0.000739,udp,147.32.84.170,53304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:25:52.445051,0.000461,udp,190.164.170.200,55424.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:25:56.771703,0.000228,udp,147.32.84.138,58368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:26:05.224227,0.015807,udp,147.32.86.192,50821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:26:06.558092,0.000483,udp,94.165.154.86,58135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,226,164,62,113.0,0.7256637168141593,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:07.059931,0.000302,udp,147.32.84.170,52490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:07.061867,0.267058,tcp,147.32.84.170,56039.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:11.619023,0.173178,tcp,147.32.86.20,2838.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,64,57940,1451,56489,905.3125,0.025043148084225062,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:26:15.297404,3047.491699,udp,78.29.82.191,21840.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1488,1116,372,124.0,0.75,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:19.416596,0.018235,tcp,147.32.84.170,45103.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:34.046541,0.819497,tcp,220.181.108.173,21082.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,10,1741,551,1190,174.1,0.3164847788627226,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:26:37.517822,0.000182,udp,147.32.85.25,52881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:26:39.301731,3595.088867,udp,147.32.84.229,13363.0,<->,188.187.161.111,47410.0,CON,0.0,0.0,117,20809,10010,10799,177.85470085470087,0.48104185688884615,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:39.415606,0.000348,udp,147.32.84.170,33438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:40.289723,0.032463,udp,178.140.21.204,63106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:43.409508,61.246738,tcp,147.32.84.165,3703.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:26:49.415767,0.000289,udp,147.32.84.170,36247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:54.030821,0.000465,udp,212.183.54.198,50741.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:54.973479,168.700851,udp,90.205.63.242,47092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2067,1537,530,258.375,0.7435897435897436,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:26:59.414578,0.00039,udp,147.32.84.170,47976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:26:59.416494,0.018513,tcp,147.32.84.170,47234.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:01.682973,883.998108,udp,94.253.145.147,7676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,739,465,274,123.16666666666667,0.6292286874154263,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:27:09.416941,0.017756,tcp,147.32.84.170,36329.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:13.478567,0.000339,udp,147.32.85.25,37641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:27:20.034460,0.000234,udp,147.32.84.138,45032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:27:21.882872,3061.237549,udp,186.223.164.36,30350.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:27:24.853565,0.001797,udp,213.108.208.139,64486.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,477,60,268.5,0.888268156424581,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:27:25.791719,0.00024,udp,147.32.85.112,25405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:27:26.631791,3432.934814,udp,64.130.179.99,30742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,118,20533,10477,10056,174.0084745762712,0.5102517898017825,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:27:29.415618,0.000517,udp,147.32.84.170,49647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:39.063599,0.000311,udp,147.32.84.170,55100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:39.065752,0.228489,tcp,147.32.84.170,56051.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:39.416848,0.019114,tcp,147.32.84.170,32928.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:44.246299,61.206306,tcp,147.32.84.165,3704.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:27:49.414923,0.000447,udp,147.32.84.170,51668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:27:57.239665,3135.928223,udp,59.85.62.228,43702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:27:57.370716,0.000187,udp,147.32.84.184,56778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:01.492722,0.000359,udp,147.32.85.34,62783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:01.539872,0.000313,udp,147.32.85.34,56032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:08.969607,0.000613,udp,188.110.1.82,38554.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,77,465,271.0,0.14206642066420663,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:09.907756,123.811783,tcp,147.32.84.181,53235.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,11,3398,1501,1897,308.90909090909093,0.44173042966450854,20,1,flow=Background-google-analytics9,Background,-1 2011-08-16 20:28:10.584849,0.000191,udp,147.32.85.25,33182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:13.624771,0.466247,tcp,147.32.84.170,49558.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,22,4821,1411,3410,219.13636363636363,0.29267786766231074,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:14.119719,0.000285,udp,147.32.84.170,58947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:14.121644,240.049179,tcp,147.32.84.170,44165.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:19.417151,0.017972,tcp,147.32.84.170,32945.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:21.231316,0.000623,udp,74.7.206.114,6657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,77,474,275.5,0.1397459165154265,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:22.436901,0.308914,tcp,147.32.86.20,2952.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:28:22.505646,1068.688477,udp,213.246.95.223,10340.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1181,1001,180,196.83333333333334,0.8475867908552075,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:22.600296,3136.639893,udp,92.76.181.14,29022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:26.671782,0.000562,udp,98.163.209.18,26369.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:29.415694,0.000373,udp,147.32.84.170,59003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:30.218591,6.912579,tcp,66.249.72.182,40230.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,19,9250,1019,8231,486.8421052631579,0.11016216216216217,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:28:34.328226,0.000181,udp,147.32.84.138,58309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:39.414975,0.000294,udp,147.32.84.170,34530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:41.064538,0.262981,tcp,147.32.84.170,56072.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:45.074238,61.150192,tcp,147.32.84.165,3705.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:28:46.145413,0.186226,udp,147.32.86.194,51696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,75,203,139.0,0.2697841726618705,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:49.416078,0.00034,udp,147.32.84.170,46430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:49.417093,0.03405,tcp,147.32.84.170,36354.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:28:50.562905,0.000333,udp,147.32.84.138,58066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:50.726440,3013.684082,udp,189.107.130.156,40615.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:28:51.685448,0.000427,udp,147.32.86.20,63252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:52.113985,0.000266,udp,147.32.84.138,35391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:28:52.501411,0.206362,tcp,147.32.86.20,2979.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:28:59.415038,0.000562,udp,147.32.84.170,48528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:29:12.062451,0.000235,udp,147.32.84.170,47006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:29:13.286262,0.043577,udp,147.32.84.229,13363.0,<->,77.221.20.240,28457.0,CON,0.0,0.0,4,3029,60,2969,757.25,0.019808517662594914,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:13.660971,3489.169678,udp,83.108.9.236,44995.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:18.200226,0.000674,udp,99.251.65.88,12405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:18.464608,0.000171,udp,147.32.84.138,45277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:29:19.415153,0.000348,udp,147.32.84.170,53281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:29:21.858586,0.00026,udp,82.132.211.242,25183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:25.926370,1653.455811,udp,217.162.45.240,48977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1554,1374,180,259.0,0.8841698841698842,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:27.717296,11.015172,tcp,95.112.225.151,53537.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:29:30.465910,0.000416,tcp,147.32.87.36,80.0,->,147.32.86.194,1084.0,SA_,0.0,,2,124,124,0,62.0,1.0,20,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:29:33.303524,0.151991,udp,147.32.84.229,13363.0,<->,68.162.215.194,12867.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:45.841636,61.184437,tcp,147.32.84.165,3706.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:29:46.940523,0.000363,udp,147.32.86.20,64422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:29:50.100073,0.000485,udp,63.88.3.170,30115.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,1,flow=Background-UDP-Established,Background,-1 2011-08-16 20:29:52.700780,0.000193,udp,147.32.84.138,44888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:29:56.853453,0.000454,udp,84.244.92.50,9057.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:01.132142,0.000524,udp,147.32.87.36,46047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,20,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:30:01.136960,1800.063232,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,2,120,0,120,60.0,0.0,20,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:30:02.452063,0.00016,udp,147.32.84.138,34164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:06.674542,0.00027,udp,147.32.85.25,49086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:07.251621,1.105006,tcp,147.32.86.20,3045.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,93339,1586,91753,1003.6451612903226,0.016991825496309152,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:30:08.522126,3083.003174,udp,87.2.217.14,17472.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:09.416885,0.018017,tcp,147.32.84.170,50206.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:30:10.046390,0.000258,udp,147.32.87.36,59301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,20,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:30:11.049962,0.000202,udp,147.32.84.188,36125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,92,142,117.0,0.39316239316239315,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:13.697997,3276.357666,udp,147.32.84.229,13363.0,<->,98.223.76.212,16661.0,CON,0.0,0.0,4,694,557,137,173.5,0.8025936599423631,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:14.065854,0.000243,udp,147.32.84.170,53185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:30:21.835116,8e-05,udp,147.32.85.25,49203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:24.068978,2.961162,tcp,184.95.34.162,1709.0,->,147.32.84.70,1080.0,S_,0.0,,2,124,124,0,62.0,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:30:24.864752,0.000351,udp,147.32.85.34,63108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:26.787502,0.000502,udp,166.137.141.188,60642.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:27.451379,0.694773,tcp,147.32.84.164,52174.0,->,61.110.243.237,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:30:28.722495,3218.278564,udp,217.66.100.132,47590.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:29.416059,0.000433,udp,147.32.84.170,58922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:30:37.845299,0.000174,udp,147.32.85.25,45049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:40.293200,2422.144043,udp,147.32.84.229,13363.0,<->,201.43.70.189,37112.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:30:44.615857,6.900011,tcp,66.249.72.134,46358.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,17968,1883,16085,579.6129032258065,0.10479741763134462,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:30:46.610409,61.253525,tcp,147.32.84.165,3707.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:30:49.075407,0.000275,udp,147.32.84.138,33594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:30:59.417305,0.017687,tcp,147.32.84.170,36371.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:05.712173,0.00012,udp,147.32.84.138,37829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:31:06.499413,0.003693,udp,71.195.27.78,43638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3032,60,2972,758.0,0.01978891820580475,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:14.741946,18.770672,tcp,213.226.63.142,50363.0,->,147.32.85.84,13716.0,FSPA_FSPA,0.0,0.0,18,1495,804,691,83.05555555555556,0.5377926421404682,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:31:16.063011,0.000361,udp,147.32.84.170,59947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:19.417480,0.018279,tcp,147.32.84.170,53068.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:26.069532,0.208111,tcp,147.32.86.20,3113.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:31:28.260601,0.000381,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,20,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 20:31:29.416670,0.000345,udp,147.32.84.170,35194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:31.596345,0.000412,udp,99.226.111.52,36202.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,1,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:33.997867,1900.915161,udp,147.32.84.229,13363.0,<->,139.19.193.80,9462.0,CON,0.0,0.0,12,1441,984,457,120.08333333333333,0.6828591256072172,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:36.353389,2249.977295,udp,87.249.150.129,32046.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1070,950,120,267.5,0.8878504672897196,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:37.784059,3355.392334,udp,81.69.144.229,3885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2198,1578,620,109.9,0.7179253867151957,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:39.416307,0.000279,udp,147.32.84.170,39619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:44.231328,0.00039,udp,147.32.84.25,33044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:31:45.278126,0.153959,udp,147.32.84.229,13363.0,<->,66.130.224.181,5204.0,CON,0.0,0.0,2,556,73,483,278.0,0.13129496402877697,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:47.447974,61.204048,tcp,147.32.84.165,3708.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:31:49.416074,0.000366,udp,147.32.84.170,44578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:31:52.772845,0.034129,udp,147.32.84.229,13363.0,<->,158.129.18.148,21333.0,CON,0.0,0.0,2,162,96,66,81.0,0.5925925925925926,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:31:59.416452,0.000257,udp,147.32.84.170,41190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:02.260468,44.977524,udp,78.141.179.7,34026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,296,176,120,74.0,0.5945945945945946,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:32:09.257847,0.000637,udp,79.136.120.145,51139.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,590,77,513,295.0,0.13050847457627118,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:32:09.417340,0.018497,tcp,147.32.84.170,50174.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:09.806710,0.000314,udp,147.32.84.138,43058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:15.653735,0.000269,udp,147.32.84.138,39876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:16.063873,0.000408,udp,147.32.84.170,41836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:16.065225,0.316757,tcp,147.32.84.170,50168.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:19.416414,0.000379,udp,147.32.84.170,33247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:22.926695,0.000551,udp,85.64.130.196,32067.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,248,62,155.0,0.8,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:32:29.417401,0.018527,tcp,147.32.84.170,58022.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:33.908420,0.00022,udp,147.32.84.138,38316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:47.063374,0.000191,udp,147.32.84.170,38698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:48.275143,61.110405,tcp,147.32.84.165,3709.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:32:49.415588,0.00048,udp,147.32.84.170,40882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:49.417680,0.017787,tcp,147.32.84.170,54113.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:32:51.352681,0.000251,udp,147.32.84.138,40158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:52.872570,0.000189,udp,147.32.85.25,52986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:53.056098,0.000151,udp,147.32.85.25,57695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:32:57.734103,8.996201,tcp,147.32.84.171,59986.0,->,187.13.150.100,51693.0,S_,0.0,,3,222,222,0,74.0,1.0,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:33:03.030344,0.000463,udp,79.108.187.122,52205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:03.294435,0.000281,udp,147.32.84.138,45359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:06.959702,0.000339,udp,151.49.10.49,13180.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:09.416687,0.000321,udp,147.32.84.170,53700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:09.418592,0.017931,tcp,147.32.84.170,33469.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:13.957498,0.285815,tcp,147.32.84.170,45295.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:15.466474,0.00047,udp,95.14.17.64,20902.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:15.706748,9.044806,tcp,178.152.164.3,65135.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,584,218,366,73.0,0.3732876712328767,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:33:19.415629,0.000383,udp,147.32.84.170,57943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:19.416585,0.000243,udp,147.32.84.170,37494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:21.860991,2236.799805,udp,147.32.84.229,13363.0,<->,78.141.179.10,34003.0,CON,0.0,0.0,12,4522,4185,337,376.8333333333333,0.9254754533392304,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:26.794344,1845.899902,udp,145.94.88.196,44193.0,->,147.32.85.8,57989.0,INT,0.0,,12,1725,1725,0,143.75,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:33:29.164378,0.000234,udp,147.32.85.25,54467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:29.417571,0.018115,tcp,147.32.84.170,33478.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:34.636346,0.000281,udp,147.32.85.25,49065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:34.636808,0.000136,udp,147.32.85.25,38098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:39.119276,0.000507,udp,84.57.73.106,20815.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:39.417608,0.017922,tcp,147.32.84.170,50192.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:39.485336,0.000243,udp,147.32.84.138,40349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:41.846151,0.000487,udp,192.162.142.148,59968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:48.063554,0.000263,udp,147.32.84.170,39645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:49.033363,61.044437,tcp,147.32.84.165,3710.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:33:49.417673,0.018142,tcp,147.32.84.170,58039.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:33:52.130049,0.000701,udp,85.178.80.240,62049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,577,78,499,288.5,0.13518197573656845,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:33:53.950902,0.000443,udp,147.32.86.20,51546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:33:59.417760,0.018232,tcp,147.32.84.170,33482.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:34:00.126893,38.290226,tcp,94.153.204.145,51285.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,31,2340,1214,1126,75.48387096774194,0.5188034188034188,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:34:00.723407,3512.568604,tcp,130.225.244.179,42124.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,267,24287,13315,10972,90.9625468164794,0.5482356816403837,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:34:07.631869,0.000389,udp,94.189.216.70,55012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:08.226056,0.275439,udp,147.32.84.229,13363.0,<->,186.18.177.28,23760.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:19.062124,0.000459,udp,147.32.84.170,44599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:34:19.063058,0.00034,udp,147.32.84.170,52892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:34:21.680926,6.30585,udp,147.32.84.229,13363.0,->,200.81.178.161,47465.0,INT,0.0,,3,246,246,0,82.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:34:21.801345,0.000204,udp,147.32.85.25,39467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:34:29.272410,3580.93335,udp,147.32.84.229,13363.0,<->,88.187.36.192,20617.0,CON,0.0,0.0,300,20252,11252,9000,67.50666666666666,0.5555994469682006,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:29.415186,3546.35498,udp,151.24.19.192,25793.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1659,1225,434,118.5,0.7383966244725738,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:34.235769,0.000435,udp,74.137.171.159,64648.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:44.093849,0.000223,udp,147.32.85.89,37802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:34:44.182875,1811.540161,tcp,151.41.22.174,49162.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,395,51009,32836,18173,129.13670886075948,0.6437295379246799,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:34:46.001510,0.000579,udp,87.120.99.53,18533.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,636,76,560,318.0,0.11949685534591195,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:49.415566,0.000327,udp,147.32.84.170,38333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:34:49.731086,61.037346,tcp,147.32.84.165,3711.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:34:50.057147,0.000261,udp,147.32.84.170,57123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:34:58.493418,3011.360596,udp,118.137.180.95,18446.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:34:58.953100,0.000419,udp,147.32.86.20,54245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:35:05.801723,3580.020752,udp,147.32.84.20,59733.0,<->,212.96.160.147,123.0,CON,0.0,0.0,226,20340,10170,10170,90.0,0.5,20,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 20:35:07.611210,0.000549,udp,81.227.81.101,63557.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,77,484,280.5,0.13725490196078433,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:35:09.417296,0.000336,udp,147.32.84.170,34263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:35:13.578614,0.233243,tcp,147.32.86.20,3318.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,46,37913,1151,36762,824.195652173913,0.030358979769472213,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:35:14.129325,0.000705,udp,178.27.168.126,8684.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,73,474,273.5,0.13345521023765997,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:35:17.782146,0.376277,tcp,147.32.84.184,60339.0,->,204.9.163.158,80.0,FSPA_FSPA,0.0,0.0,10,1153,461,692,115.3,0.3998265394622723,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:35:21.029683,0.000122,udp,147.32.84.138,39847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:35:23.881033,0.0,tcp,113.105.171.57,80.0,->,147.32.84.17,54111.0,SA_,0.0,,1,66,66,0,66.0,1.0,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:35:24.984660,0.967,tcp,94.230.144.34,61407.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,13,898,480,418,69.07692307692308,0.534521158129176,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:35:27.452873,0.0,tcp,147.32.84.164,36158.0,->,122.50.3.182,27031.0,S_,0.0,,1,74,74,0,74.0,1.0,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:35:29.417452,0.018668,tcp,147.32.84.170,46481.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:35:35.805589,1523.011963,tcp,109.116.46.221,49667.0,->,147.32.84.229,80.0,SPA_SPA,0.0,0.0,319,42611,31377,11234,133.576802507837,0.7363591560864565,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:35:43.473773,3225.074951,udp,93.123.69.112,28576.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1499,1127,372,124.91666666666667,0.7518345563709139,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:35:49.417955,0.01843,tcp,147.32.84.170,33496.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:35:50.428366,61.026882,tcp,147.32.84.165,3712.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:35:59.466559,3019.488525,udp,147.32.84.229,13363.0,<->,192.33.103.154,50074.0,CON,0.0,0.0,12,4232,1053,3179,352.6666666666667,0.24881852551984876,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:36:06.549021,1166.031982,udp,200.120.38.75,9125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:36:19.419306,0.018294,tcp,147.32.84.170,39215.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:36:31.462098,0.000161,udp,147.32.85.25,45708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:36:34.805911,0.000293,udp,147.32.84.59,42921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:36:37.100535,0.000382,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,20,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 20:36:39.416848,0.00031,udp,147.32.84.170,45248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:36:39.563359,0.102407,udp,147.32.84.229,13363.0,<->,94.243.224.50,47115.0,CON,0.0,0.0,2,539,479,60,269.5,0.8886827458256029,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:36:40.980170,2.7e-05,udp,147.32.84.59,53268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:36:43.977739,0.0,icmp,147.32.84.164,771.0,->,178.236.63.8,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:36:51.115723,61.008896,tcp,147.32.84.165,3713.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:36:52.882540,0.000779,udp,50.13.52.162,64386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,79,473,276.0,0.1431159420289855,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:36:53.648058,0.000311,udp,147.32.84.138,47231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:36:54.063807,0.000351,udp,147.32.84.170,42363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:36:56.841882,0.000285,udp,147.32.85.25,38128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:36:58.466958,0.0004,udp,95.134.38.149,10983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:36:58.608757,3041.186279,udp,94.62.250.32,7460.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:00.009276,3570.128662,tcp,147.32.84.170,54274.0,->,64.12.73.133,443.0,PA_A,0.0,0.0,178,10680,5340,5340,60.0,0.5,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:01.881191,0.000709,udp,72.252.162.178,17404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:12.239546,0.000267,udp,147.32.86.20,54707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:37:13.347671,0.118895,udp,208.54.35.136,20203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,685,564,121,171.25,0.8233576642335766,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:19.417939,0.018644,tcp,147.32.84.170,35765.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:25.059096,0.000321,udp,147.32.84.170,55149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:29.415824,0.000346,udp,147.32.84.170,60081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:29.417881,0.01825,tcp,147.32.84.170,60521.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:30.115944,0.136016,tcp,147.32.86.20,3440.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,40,32743,971,31772,818.575,0.029655193476468254,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:37:34.996141,0.312854,udp,147.32.84.229,13363.0,<->,110.165.157.119,49748.0,CON,0.0,0.0,2,142,82,60,71.0,0.5774647887323944,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:39.417735,0.018705,tcp,147.32.84.170,39226.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:39.664724,0.000568,udp,79.100.29.164,17033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:39.931939,0.000386,udp,147.32.84.59,55114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:37:39.972969,0.000727,udp,122.150.162.13,41306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,82,471,276.5,0.14828209764918626,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:43.845400,0.000269,udp,147.32.85.25,33564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:37:46.988066,787.413879,udp,109.130.141.179,23741.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1040,220,820,173.33333333333334,0.21153846153846154,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:48.940006,0.000136,udp,147.32.85.25,36609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:37:49.417004,0.000289,udp,147.32.84.170,52082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:49.417975,0.018276,tcp,147.32.84.170,38463.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:37:51.769310,3093.858643,udp,83.31.105.89,8518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:37:51.793795,61.037777,tcp,147.32.84.165,3714.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:37:58.133068,0.000322,udp,147.32.84.138,57833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:37:59.419122,0.019239,tcp,147.32.84.170,38465.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:01.862766,0.0002,udp,147.32.85.34,55967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:38:01.888719,0.000197,udp,147.32.85.34,63524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:38:09.923182,0.000271,udp,147.32.84.138,40336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:38:13.460792,0.423005,tcp,147.32.84.170,57951.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:14.119379,0.308823,tcp,147.32.84.170,57953.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:14.122053,0.000366,udp,147.32.84.170,46459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:14.123773,240.046509,tcp,147.32.84.170,37502.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:14.123786,391.494232,tcp,147.32.84.170,37505.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,100,37567,27514,10053,375.67,0.7323981153672106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:14.958400,1147.432129,udp,147.32.84.229,13363.0,<->,78.141.179.10,34048.0,CON,0.0,0.0,8,1304,1060,244,163.0,0.8128834355828221,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:38:18.882515,0.041375,tcp,147.32.86.96,44179.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,598,0,598,74.75,0.0,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:38:19.417332,0.000466,udp,147.32.84.170,55032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:19.917518,0.000451,udp,95.29.211.228,59400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:38:26.065018,0.000239,udp,147.32.84.170,42658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:29.416986,0.000293,udp,147.32.84.170,60829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:34.299719,1.3e-05,udp,147.32.87.48,1559.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:38:34.976935,0.000267,udp,147.32.85.25,51783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:38:40.825732,783.661438,udp,88.117.89.137,61325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,681,153,528,170.25,0.22466960352422907,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:38:52.471929,61.033417,tcp,147.32.84.165,3715.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:38:52.536618,962.605408,udp,87.15.247.26,49961.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3583,137,3446,597.1666666666666,0.03823611498744069,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:38:57.061801,0.00027,udp,147.32.84.170,52388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:57.062964,0.236894,tcp,147.32.84.170,43526.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:38:58.407889,3519.941162,udp,147.32.84.229,13363.0,<->,79.173.94.255,30338.0,CON,0.0,0.0,81,5611,3026,2585,69.27160493827161,0.5392978078773837,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:38:58.576445,8.343068,tcp,66.249.72.134,41725.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,47,28474,2784,25690,605.8297872340426,0.09777340731895764,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:39:00.999055,2574.468262,udp,89.43.247.64,60344.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,511,329,182,85.16666666666667,0.6438356164383562,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:39:01.233352,0.000383,udp,147.32.85.36,37176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:39:09.417198,0.000218,udp,147.32.84.170,56654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:14.027549,2549.436523,udp,147.32.84.229,13363.0,<->,87.241.165.112,17775.0,CON,0.0,0.0,6,798,616,182,133.0,0.7719298245614035,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:39:14.290446,3592.691895,udp,147.32.84.13,53948.0,<->,82.208.56.89,123.0,CON,0.0,0.0,66,5940,2970,2970,90.0,0.5,20,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 20:39:18.153930,0.124672,udp,147.32.84.229,13363.0,<->,69.141.92.75,20253.0,CON,0.0,0.0,2,543,76,467,271.5,0.13996316758747698,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:39:19.416171,0.000314,udp,147.32.84.170,49217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:19.418092,0.018202,tcp,147.32.84.170,47128.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:24.774702,0.000512,udp,77.85.140.106,44233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:39:25.726835,0.000255,udp,147.32.84.138,36578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:39:29.416260,0.00035,udp,147.32.84.170,51530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:33.082156,0.00055,udp,85.156.192.72,22807.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,1,flow=Background-UDP-Established,Background,-1 2011-08-16 20:39:39.418199,0.018194,tcp,147.32.84.170,60550.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:49.417029,0.000228,udp,147.32.84.170,33369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:53.169331,60.99007,tcp,147.32.84.165,3716.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:39:59.065049,0.000286,udp,147.32.84.170,57100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:59.066370,0.294679,tcp,147.32.84.170,43534.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:39:59.418341,0.018426,tcp,147.32.84.170,35799.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:01.224740,0.00042,udp,193.120.212.20,26001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:02.210456,1492.09021,udp,79.22.56.79,25335.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,620,420,200,103.33333333333333,0.6774193548387096,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:02.789307,0.000161,udp,147.32.84.138,58018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:04.317501,109.898674,tcp,94.163.220.101,64056.0,->,147.32.84.229,13363.0,SA_FSA,0.0,0.0,9,552,126,426,61.333333333333336,0.22826086956521738,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:40:04.915554,9.113044,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,6,671,355,316,111.83333333333333,0.5290611028315947,20,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 20:40:09.416185,0.000434,udp,147.32.84.170,50747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:09.417214,0.000309,udp,147.32.84.170,38828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:10.865628,0.364495,tcp,147.32.84.170,47291.0,->,50.17.203.200,81.0,FSPA_FSRA,0.0,0.0,10,1178,858,320,117.8,0.7283531409168081,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:11.712347,0.000264,udp,147.32.84.138,32865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:14.029310,1.624962,tcp,147.32.84.165,3717.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,20,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 20:40:16.274631,0.000216,udp,147.32.84.138,57598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:16.377249,6.027362,udp,147.32.84.229,13363.0,->,114.47.128.219,8486.0,INT,0.0,,3,543,543,0,181.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:40:18.086334,0.000271,udp,147.32.84.138,33309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:24.164795,0.001977,udp,95.160.161.78,18389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:29.456694,0.100915,tcp,147.32.84.164,46231.0,->,95.141.27.2,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,20,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 20:40:37.134816,0.024158,tcp,147.32.86.194,1150.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,50,42555,1592,40963,851.1,0.037410410057572556,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:40:37.810360,946.573608,udp,147.32.84.229,13363.0,<->,94.230.201.29,12122.0,CON,0.0,0.0,4,285,141,144,71.25,0.49473684210526314,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:39.426454,0.000328,udp,147.32.84.170,51984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:41.406623,0.00032,udp,147.32.84.138,41705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:44.312159,0.000315,udp,147.32.86.20,64680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:47.877768,0.000225,udp,147.32.84.138,35233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:48.838081,0.150421,udp,147.32.84.229,13363.0,<->,173.179.139.169,13095.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:49.236214,2864.783203,udp,83.252.181.205,33031.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:40:49.371459,0.000355,udp,147.32.84.138,37483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:40:49.416422,0.000382,udp,147.32.84.170,38815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:40:53.484536,0.000101,icmp,195.160.236.12,8.0,->,147.32.84.130,12000.0,TXD,0.0,,1,60,60,0,60.0,1.0,20,0,flow=Background,Background,-1 2011-08-16 20:40:53.836173,60.992809,tcp,147.32.84.165,3718.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:40:59.416449,0.000418,udp,147.32.84.170,50188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:03.920403,0.000345,udp,125.209.121.2,41278.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,503,60,281.5,0.8934280639431617,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:06.401081,0.000215,udp,147.32.84.138,56473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:09.419225,0.000268,udp,147.32.84.170,60570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:09.420253,0.018391,tcp,147.32.84.170,42493.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:20.717480,2464.743652,udp,87.15.211.167,19094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:26.591651,0.005112,udp,64.7.137.162,29515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:26.856733,0.000543,udp,41.35.105.204,32847.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:31.002660,0.000188,udp,147.32.85.25,59365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:32.067322,0.000275,udp,147.32.84.170,41343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:32.067923,0.000377,udp,147.32.84.170,59640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:33.689129,0.179346,udp,90.181.117.136,14693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,831,686,145,207.75,0.825511432009627,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:35.137640,0.000211,udp,147.32.84.138,48076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:39.416575,0.000333,udp,147.32.84.170,54981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:41:42.118173,0.000224,udp,147.32.84.59,58005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:44.325906,0.000437,udp,147.32.84.25,41164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:45.311129,3491.626953,udp,78.141.177.65,58165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,5117,750,4367,255.85,0.1465702560093805,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:41:52.630160,0.000163,udp,147.32.85.25,47168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:41:54.494219,61.025368,tcp,147.32.84.165,3719.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:42:01.422038,0.000319,udp,147.32.85.34,55618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:42:09.418362,0.017901,tcp,147.32.84.170,35891.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:42:22.705728,0.00052,udp,71.52.64.107,15673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:42:29.416641,0.000329,udp,147.32.84.170,57846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:42:29.418592,0.018024,tcp,147.32.84.170,57964.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:42:34.065000,0.211835,tcp,147.32.84.170,48837.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:42:35.952986,0.187122,udp,147.32.84.229,13363.0,<->,99.62.35.55,1172.0,CON,0.0,0.0,2,550,78,472,275.0,0.14181818181818182,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:42:39.416685,0.000378,udp,147.32.84.170,45941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:42:41.063624,0.000267,udp,147.32.84.138,45911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:42:42.100663,0.001587,udp,86.183.12.165,52772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:42:45.846292,0.000239,udp,147.32.84.138,39442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:42:46.362944,3114.941895,udp,141.83.167.143,56554.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,873,318,555,124.71428571428571,0.3642611683848797,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:42:50.551571,397.201782,udp,79.114.135.56,25766.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1625,1102,523,203.125,0.6781538461538461,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:42:53.766807,0.000179,udp,147.32.84.138,59717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:42:55.182279,61.00502,tcp,147.32.84.165,3720.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:42:59.416753,0.000333,udp,147.32.84.170,60954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:01.630595,0.000403,udp,147.32.86.20,58066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:03.998568,1.455657,tcp,77.183.9.135,49699.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,17,1359,676,683,79.94117647058823,0.4974245768947756,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:43:04.013627,61.880466,tcp,147.32.84.59,6350.0,->,66.220.147.38,443.0,SRPA_SPA,0.0,0.0,16,6288,1220,5068,393.0,0.1940203562340967,20,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 20:43:04.064945,0.00032,udp,147.32.84.170,55781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:09.416763,0.000353,udp,147.32.84.170,44489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:13.004383,0.206194,tcp,147.32.86.20,3745.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:43:13.482129,0.221002,tcp,147.32.84.170,41931.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:13.674223,0.278191,tcp,147.32.84.170,39027.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:13.815968,1.31505,tcp,147.32.86.20,3746.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,97,94011,1766,92245,969.1855670103092,0.018785035793683718,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:43:14.670116,0.0006,udp,219.117.218.40,12195.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,74,471,272.5,0.13577981651376148,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:43:16.243387,0.0,tcp,147.32.84.165,3721.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.269061,0.0,tcp,147.32.84.165,3722.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.270319,0.0,tcp,147.32.84.165,3724.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.304231,0.000146,udp,147.32.85.25,39579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:16.432721,0.0,tcp,147.32.84.165,3725.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.432958,0.0,tcp,147.32.84.165,3726.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.433635,0.0,tcp,147.32.84.165,3728.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.633305,0.0,tcp,147.32.84.165,3729.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:16.633488,0.0,tcp,147.32.84.165,3730.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:17.204447,0.0,tcp,147.32.84.165,3732.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:17.403863,0.0,tcp,147.32.84.165,3736.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:19.417714,0.000414,udp,147.32.84.170,53852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:19.419842,0.017882,tcp,147.32.84.170,57977.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:23.805596,0.000197,udp,147.32.84.138,57142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:27.914406,0.000396,udp,147.32.84.138,42640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:29.922462,0.0,tcp,147.32.84.165,3959.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:29.922478,0.0,tcp,147.32.84.165,3958.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:29.922483,0.0,tcp,147.32.84.165,3960.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:29.922568,0.0,tcp,147.32.84.165,3963.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:30.298362,0.0,udp,147.32.84.229,13363.0,->,184.65.38.105,37075.0,INT,0.0,,1,69,69,0,69.0,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:43:30.522793,0.0,tcp,147.32.84.165,3970.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:30.522857,0.0,tcp,147.32.84.165,3972.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:30.522901,0.0,tcp,147.32.84.165,3971.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:35.066958,0.000368,udp,147.32.84.170,41435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:37.768759,0.000574,udp,207.236.107.26,25848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:43:39.420403,0.018534,tcp,147.32.84.170,35909.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:43:41.939652,0.0,tcp,147.32.84.165,4198.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:41.939722,0.0,tcp,147.32.84.165,4200.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:41.939822,0.0,tcp,147.32.84.165,4199.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:41.939833,0.0,tcp,147.32.84.165,4202.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:41.939840,0.0,tcp,147.32.84.165,4204.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:42.230166,0.00026,udp,147.32.85.25,36975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:42.540118,0.0,tcp,147.32.84.165,4211.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:42.540126,0.0,tcp,147.32.84.165,4210.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:42.540176,0.0,tcp,147.32.84.165,4212.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:52.315425,0.000681,udp,46.7.22.200,44274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:43:52.540423,0.000287,udp,147.32.84.138,45677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:43:53.956721,0.0,tcp,147.32.84.165,4439.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:53.956734,0.0,tcp,147.32.84.165,4438.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:53.956871,0.0,tcp,147.32.84.165,4440.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:53.956886,0.0,tcp,147.32.84.165,4443.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:53.957603,0.0,tcp,147.32.84.165,4442.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:54.557905,0.0,tcp,147.32.84.165,4452.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:54.558018,0.0,tcp,147.32.84.165,4451.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:54.558025,0.0,tcp,147.32.84.165,4450.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:43:55.084126,17.987534,tcp,162.129.251.62,59270.0,->,147.32.85.109,80.0,FSPA_FSPA,0.0,0.0,14,2941,922,2019,210.07142857142858,0.3134988099285957,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:43:55.954898,0.574979,tcp,147.32.84.171,56800.0,->,83.82.139.7,37774.0,FSPA_FSPA,0.0,0.0,12,1512,596,916,126.0,0.3941798941798942,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:43:57.119912,204.166977,icmp,78.250.163.37,771.0,->,147.32.84.229,3113.0,URP,0.0,,11,770,770,0,70.0,1.0,20,0,flow=Background,Background,-1 2011-08-16 20:43:59.417739,0.000383,udp,147.32.84.170,35669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:03.263466,0.000276,udp,147.32.85.25,33650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:44:05.974270,0.0,tcp,147.32.84.165,4682.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:05.974388,61.00555,tcp,147.32.84.165,4514.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:44:05.974399,0.0,tcp,147.32.84.165,4681.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:05.974451,0.0,tcp,147.32.84.165,4680.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:05.974455,0.0,tcp,147.32.84.165,4686.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:06.063357,0.000209,udp,147.32.84.170,39018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:06.574695,0.0,tcp,147.32.84.165,4693.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:06.574765,0.0,tcp,147.32.84.165,4692.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:06.574817,0.0,tcp,147.32.84.165,4694.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:09.420022,0.017835,tcp,147.32.84.170,34692.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:09.461533,0.339154,udp,86.33.35.34,10689.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,867,709,158,216.75,0.817762399077278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:11.743847,6.862305,tcp,66.249.72.134,63188.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,28,14266,1815,12451,509.5,0.12722557128837797,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:44:17.991804,0.0,tcp,147.32.84.165,4875.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:17.991919,0.0,tcp,147.32.84.165,4876.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:17.992050,0.0,tcp,147.32.84.165,4878.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:17.992112,0.0,tcp,147.32.84.165,4879.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:18.592664,0.0,tcp,147.32.84.165,4884.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:18.592676,0.0,tcp,147.32.84.165,4885.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:18.592804,0.0,tcp,147.32.84.165,4887.0,->,147.32.80.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:19.418593,0.000337,udp,147.32.84.170,39348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:20.006815,0.000448,udp,79.8.105.211,14709.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:23.571077,0.00051,udp,147.32.87.48,1620.0,->,147.32.86.254,161.0,INT,0.0,,2,262,262,0,131.0,1.0,20,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:44:29.367241,21.146509,tcp,81.65.11.139,51361.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,10,783,462,321,78.3,0.5900383141762452,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:44:30.009252,0.0,tcp,147.32.84.165,1118.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.009313,0.0,tcp,147.32.84.165,1117.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.009319,0.0,tcp,147.32.84.165,1121.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.009394,0.0,tcp,147.32.84.165,1120.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.610003,0.0,tcp,147.32.84.165,1127.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.610104,0.0,tcp,147.32.84.165,1126.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:30.610111,0.0,tcp,147.32.84.165,1130.0,->,192.168.1.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:31.355410,2606.998291,udp,201.83.1.181,55389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:34.114535,0.000438,udp,85.82.130.123,29683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:35.520639,0.000409,udp,211.78.173.12,15959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:36.065104,0.0003,udp,147.32.84.170,44079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:36.065968,0.000308,udp,147.32.84.170,35124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:44:38.550675,31.818016,udp,49.49.127.84,10333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,470,312,158,117.5,0.6638297872340425,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:42.026476,0.0,tcp,147.32.84.165,1297.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:42.026491,0.0,tcp,147.32.84.165,1298.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:42.026496,0.0,tcp,147.32.84.165,1300.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:42.026501,0.0,tcp,147.32.84.165,1301.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:42.627477,0.0,tcp,147.32.84.165,1306.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:42.627532,0.0,tcp,147.32.84.165,1307.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:49.048610,0.000426,icmp,147.32.87.249,,<-,147.32.87.54,2.0,RED,,0.0,2,148,0,148,74.0,0.0,20,1,flow=Background,Background,-1 2011-08-16 20:44:49.695828,0.171449,tcp,147.32.86.20,3831.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,69921,1631,68290,944.8783783783783,0.023326325424407546,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:44:53.547293,1823.828735,udp,76.110.67.243,27838.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,464,340,124,116.0,0.7327586206896551,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:44:54.043267,0.0,tcp,147.32.84.165,1477.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.043387,0.0,tcp,147.32.84.165,1478.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.043408,0.0,tcp,147.32.84.165,1480.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.043462,0.0,tcp,147.32.84.165,1481.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.644382,0.0,tcp,147.32.84.165,1486.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.644396,0.0,tcp,147.32.84.165,1487.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:54.644452,0.0,tcp,147.32.84.165,1489.0,->,147.32.80.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:44:59.539583,8.1e-05,udp,147.32.84.138,60946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:45:04.184534,0.000191,udp,147.32.85.89,43197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:45:06.061199,0.0,tcp,147.32.84.165,1626.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:06.061261,0.0,tcp,147.32.84.165,1628.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:06.061320,0.0,tcp,147.32.84.165,1630.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:06.662097,61.011463,tcp,147.32.84.165,1651.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:45:06.662103,0.0,tcp,147.32.84.165,1632.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:06.662142,0.0,tcp,147.32.84.165,1634.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:07.063371,0.000418,udp,147.32.84.170,33284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:09.418451,0.000392,udp,147.32.84.170,57796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:10.916570,0.000195,udp,147.32.85.25,53118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:45:18.078615,0.0,tcp,147.32.84.165,1747.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:18.078741,0.0,tcp,147.32.84.165,1749.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:18.078750,0.0,tcp,147.32.84.165,1751.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:18.678953,0.0,tcp,147.32.84.165,1753.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:18.679034,0.0,tcp,147.32.84.165,1755.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:18.680636,0.0,tcp,147.32.84.165,1757.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:29.417977,0.000365,udp,147.32.84.170,48166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:29.420119,0.018317,tcp,147.32.84.170,34702.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:30.095631,0.0,tcp,147.32.84.165,1867.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:30.095699,0.0,tcp,147.32.84.165,1869.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:30.696580,0.0,tcp,147.32.84.165,1873.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:30.696595,0.0,tcp,147.32.84.165,1875.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:30.696681,0.0,tcp,147.32.84.165,1877.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:38.061732,0.000214,udp,147.32.84.170,48602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:39.418041,0.019731,udp,147.32.84.170,58217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:41.845546,0.000153,udp,147.32.85.25,50933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:45:42.112793,0.0,tcp,147.32.84.165,1987.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:42.112809,0.0,tcp,147.32.84.165,1989.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:42.713981,0.0,tcp,147.32.84.165,1993.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:42.713997,0.0,tcp,147.32.84.165,1995.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:42.714202,0.0,tcp,147.32.84.165,1997.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:49.419008,0.000475,udp,147.32.84.170,37195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:53.548482,1976.647583,udp,147.32.84.229,13363.0,<->,72.43.123.18,5827.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:45:54.130331,0.0,tcp,147.32.84.165,2107.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:54.130406,0.0,tcp,147.32.84.165,2109.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:54.731144,0.0,tcp,147.32.84.165,2113.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:54.731232,0.0,tcp,147.32.84.165,2115.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:54.731320,0.0,tcp,147.32.84.165,2117.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:45:56.339873,0.000508,udp,92.119.172.27,11663.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:45:57.923312,1227.551636,udp,147.32.84.229,13363.0,<->,200.90.110.155,36561.0,CON,0.0,0.0,13,1295,917,378,99.61538461538461,0.7081081081081081,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:45:59.417820,0.000483,udp,147.32.84.170,50301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:45:59.418867,0.000301,udp,147.32.84.170,57491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:01.819126,0.000234,udp,147.32.85.34,63626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:46:01.875435,0.000263,udp,147.32.85.34,60540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:46:01.885952,254.319443,udp,147.32.84.229,13363.0,<->,78.90.194.252,2554.0,CON,0.0,0.0,6,958,483,475,159.66666666666666,0.5041753653444676,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:46:06.057573,0.0,tcp,147.32.84.165,2224.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.057640,0.0,tcp,147.32.84.165,2225.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.057647,0.0,tcp,147.32.84.165,2226.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.057699,0.0,tcp,147.32.84.165,2227.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.057706,0.0,tcp,147.32.84.165,2228.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.658201,0.0,tcp,147.32.84.165,2231.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.658218,0.0,tcp,147.32.84.165,2230.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.658224,0.0,tcp,147.32.84.165,2233.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.658228,0.0,tcp,147.32.84.165,2232.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.658259,0.0,tcp,147.32.84.165,2235.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:06.954910,0.233862,udp,147.32.84.229,13363.0,<->,87.16.43.117,47909.0,CON,0.0,0.0,2,144,84,60,72.0,0.5833333333333334,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:46:09.065343,0.000466,udp,147.32.84.170,60139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:09.418097,0.000286,udp,147.32.84.170,60409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:09.419992,0.018355,tcp,147.32.84.170,52659.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:18.075078,61.104446,tcp,147.32.84.165,2258.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:46:18.075086,0.0,tcp,147.32.84.165,2346.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:18.075192,0.0,tcp,147.32.84.165,2348.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:18.675426,0.0,tcp,147.32.84.165,2352.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:18.675535,0.0,tcp,147.32.84.165,2354.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:18.675549,0.0,tcp,147.32.84.165,2356.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:18.794984,0.000472,udp,212.225.231.180,46083.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:46:19.418081,0.00045,udp,147.32.84.170,33630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:29.419990,0.018105,tcp,147.32.84.170,47197.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:30.092723,0.0,tcp,147.32.84.165,2466.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:30.092737,0.0,tcp,147.32.84.165,2468.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:30.692826,0.0,tcp,147.32.84.165,2472.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:30.692926,0.0,tcp,147.32.84.165,2474.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:30.692978,0.0,tcp,147.32.84.165,2476.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:33.402368,0.000429,udp,98.30.234.145,15728.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,182,111,71,91.0,0.6098901098901099,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:46:38.726667,6.035572,icmp,163.180.125.139,771.0,->,147.32.84.229,837.0,URP,0.0,,3,402,402,0,134.0,1.0,20,1,flow=Background,Background,-1 2011-08-16 20:46:40.065971,0.000246,udp,147.32.84.170,41801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:40.067135,0.242588,tcp,147.32.84.170,56186.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:46:42.109911,0.0,tcp,147.32.84.165,2585.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.109977,0.0,tcp,147.32.84.165,2586.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.109982,0.0,tcp,147.32.84.165,2587.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.110089,0.0,tcp,147.32.84.165,2588.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.110103,0.0,tcp,147.32.84.165,2589.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.710555,0.0,tcp,147.32.84.165,2592.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.710691,0.0,tcp,147.32.84.165,2591.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.710707,0.0,tcp,147.32.84.165,2594.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.710712,0.0,tcp,147.32.84.165,2593.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:42.710716,0.0,tcp,147.32.84.165,2596.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:45.519528,0.000237,udp,147.32.84.59,60234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:46:47.511934,0.000611,udp,115.39.241.41,47358.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:46:51.853501,0.000335,udp,147.32.84.138,56162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:46:54.127222,0.0,tcp,147.32.84.165,2705.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.127236,0.0,tcp,147.32.84.165,2706.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.127241,0.0,tcp,147.32.84.165,2707.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.127291,0.0,tcp,147.32.84.165,2708.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.127297,0.0,tcp,147.32.84.165,2709.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.727838,0.0,tcp,147.32.84.165,2712.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.727852,0.0,tcp,147.32.84.165,2711.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.727857,0.0,tcp,147.32.84.165,2714.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.727907,0.0,tcp,147.32.84.165,2713.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:54.727912,0.0,tcp,147.32.84.165,2716.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:46:55.415572,0.00041,udp,85.225.206.107,64587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:47:00.538279,0.00029,udp,147.32.84.59,41616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:04.691684,0.000273,udp,147.32.84.138,37788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:06.144469,0.0,tcp,147.32.84.165,2825.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.144549,0.0,tcp,147.32.84.165,2826.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.144556,0.0,tcp,147.32.84.165,2827.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.144599,0.0,tcp,147.32.84.165,2828.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.144661,0.0,tcp,147.32.84.165,2829.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.744974,0.0,tcp,147.32.84.165,2832.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.744989,0.0,tcp,147.32.84.165,2831.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.744996,0.0,tcp,147.32.84.165,2834.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.745178,0.0,tcp,147.32.84.165,2833.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:06.745197,0.0,tcp,147.32.84.165,2836.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:09.419957,0.000333,udp,147.32.84.170,36739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:18.161629,0.0,tcp,147.32.84.165,2945.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.161644,0.0,tcp,147.32.84.165,2946.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.161649,0.0,tcp,147.32.84.165,2947.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.161653,0.0,tcp,147.32.84.165,2948.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.161823,0.0,tcp,147.32.84.165,2949.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.391879,0.00044,udp,147.32.86.20,50516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:18.432143,158.129105,tcp,208.54.45.202,52964.0,->,147.32.84.229,443.0,SRA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:47:18.762896,0.0,tcp,147.32.84.165,2952.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.762901,0.0,tcp,147.32.84.165,2951.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.763021,0.0,tcp,147.32.84.165,2954.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.763034,0.0,tcp,147.32.84.165,2953.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:18.763039,0.0,tcp,147.32.84.165,2956.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:19.418193,0.000322,udp,147.32.84.170,48190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:19.419053,0.000358,udp,147.32.84.170,58760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:23.530842,0.000159,udp,147.32.84.138,55386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:30.179429,0.0,tcp,147.32.84.165,3066.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.179443,61.108891,tcp,147.32.84.165,2973.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:47:30.179448,0.0,tcp,147.32.84.165,3067.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.179496,0.0,tcp,147.32.84.165,3068.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.179501,0.0,tcp,147.32.84.165,3069.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.543710,0.0,tcp,147.32.84.165,3070.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.779869,0.0,tcp,147.32.84.165,3073.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.779883,0.0,tcp,147.32.84.165,3072.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.779943,0.0,tcp,147.32.84.165,3075.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.779948,0.0,tcp,147.32.84.165,3074.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:30.779989,0.0,tcp,147.32.84.165,3077.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,20,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:47:39.418880,0.000431,udp,147.32.84.170,50186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:39.420025,0.017791,tcp,147.32.84.170,37511.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:41.059424,0.314489,tcp,147.32.84.170,56194.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:41.087697,3053.633789,udp,87.119.134.127,33945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:47:43.234825,0.000209,udp,147.32.84.138,40971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:49.419206,0.000417,udp,147.32.84.170,54613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:49.420289,0.018441,tcp,147.32.84.170,55225.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:47:55.768647,0.000337,udp,147.32.86.20,55698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:47:56.373715,0.000567,udp,190.14.166.51,11777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:47:59.420119,0.018195,tcp,147.32.84.170,55226.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:01.704400,0.000207,udp,147.32.85.34,63922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:48:02.503614,653.536621,udp,84.237.190.54,8185.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1440,164,1276,360.0,0.11388888888888889,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:04.618736,0.000819,udp,151.21.25.48,11859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:07.269863,0.000235,udp,147.32.87.36,54824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,20,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:48:12.066447,0.235405,tcp,147.32.84.170,56198.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:13.378848,0.30625,tcp,147.32.84.170,37113.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:13.692804,1.21898,tcp,147.32.84.171,47238.0,->,46.47.77.209,12283.0,FSPA_FSPA,0.0,0.0,16,1557,839,718,97.3125,0.5388567758509955,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:48:14.126368,403.823975,tcp,147.32.84.170,47857.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,105,41071,30410,10661,391.15238095238095,0.7404251174794867,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:15.358786,3483.76001,tcp,90.172.28.44,1051.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,460,49598,31842,17756,107.82173913043478,0.6420016936166781,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:48:19.419070,0.000364,udp,147.32.84.170,35108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:26.258399,0.000531,udp,92.238.198.48,27024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:30.179219,0.000304,udp,147.32.84.138,45059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:48:30.907889,61.143776,tcp,147.32.84.165,3090.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:48:34.403581,0.000199,udp,147.32.84.138,35001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:48:39.420445,0.018255,tcp,147.32.84.170,60207.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:48:39.481741,3151.96875,udp,192.108.76.67,42218.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1478,1106,372,123.16666666666667,0.7483085250338295,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:40.620679,636.927979,udp,147.32.84.229,13363.0,<->,93.114.97.82,37959.0,CON,0.0,0.0,4,488,364,124,122.0,0.7459016393442623,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:47.217961,383.879333,udp,109.184.87.114,32579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,906,286,620,113.25,0.31567328918322296,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:48.982987,635.674683,udp,79.12.187.75,60191.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1092,887,205,182.0,0.8122710622710623,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:54.038670,0.421448,udp,204.101.237.195,21561.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,180,73,126.5,0.7114624505928854,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:54.791848,0.000551,udp,41.101.22.218,54737.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:48:59.419432,0.000424,udp,147.32.84.170,44781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:08.533615,1.489661,tcp,84.231.13.201,4464.0,->,147.32.84.171,6881.0,SPA_FSRA,0.0,0.0,9,775,473,302,86.11111111111111,0.6103225806451613,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:49:14.573458,1.899605,udp,58.145.188.60,44089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,480,338,142,120.0,0.7041666666666667,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:49:19.719455,0.000331,udp,147.32.84.138,55394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:49:19.926358,0.253383,tcp,147.32.86.17,3810.0,->,217.198.112.231,110.0,FSPA_FSPA,0.0,0.0,35,14978,934,14044,427.9428571428571,0.062358125250367206,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:49:29.418241,0.000325,udp,147.32.84.170,43936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:31.675253,61.112923,tcp,147.32.84.165,3091.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:49:35.524920,9.001071,tcp,94.197.127.227,64533.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,308,74,234,77.0,0.24025974025974026,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:49:39.714728,0.000632,udp,89.243.97.94,16427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:49:41.632933,0.000271,udp,147.32.85.25,60713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:49:42.715373,0.0,tcp,119.145.144.60,48838.0,->,147.32.84.223,22.0,S_,0.0,,1,74,74,0,74.0,1.0,20,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:49:45.067984,0.000278,udp,147.32.84.170,56137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:45.070002,0.232078,tcp,147.32.84.170,56222.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:45.451724,0.000503,udp,99.31.110.9,46927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:49:49.419425,0.000239,udp,147.32.84.170,49478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:49.420432,0.017723,tcp,147.32.84.170,60217.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:49:50.332946,0.000381,udp,147.32.86.20,49160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:49:51.404552,0.000209,udp,147.32.84.138,57922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:49:53.937401,86.532875,udp,46.7.163.234,35219.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:49:56.435563,0.000683,udp,81.67.54.37,2785.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:01.782063,0.00042,udp,147.32.85.34,52088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:01.811794,0.000368,udp,147.32.85.34,58421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:04.060934,0.000218,udp,147.32.84.138,49918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:04.346676,0.000247,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 20:50:13.793386,0.000225,udp,147.32.84.138,52819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:14.952695,0.539264,udp,206.29.182.193,63788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:15.299380,0.000354,udp,147.32.86.194,57368.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:17.301061,2003.269043,udp,147.32.84.229,13363.0,<->,140.129.19.100,32358.0,CON,0.0,0.0,8,3347,193,3154,418.375,0.05766357932476845,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:19.420318,0.018028,tcp,147.32.84.170,55257.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:50:29.418396,0.000364,udp,147.32.84.170,41320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:50:32.422536,61.126156,tcp,147.32.84.165,3138.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:50:33.677227,0.001512,udp,82.66.199.162,21270.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:39.144408,0.000314,udp,147.32.85.25,36714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:50:43.626784,0.177587,udp,147.32.84.229,13363.0,<->,128.97.3.159,50260.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:47.071049,0.000299,udp,147.32.84.170,60368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:50:49.419483,0.000266,udp,147.32.84.170,55207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:50:54.985682,0.681145,udp,147.32.84.229,13363.0,<->,190.159.39.228,14115.0,CON,0.0,0.0,2,272,182,90,136.0,0.6691176470588235,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:50:59.419385,0.000283,udp,147.32.84.170,35181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:01.706067,30.698141,udp,147.32.84.229,13363.0,->,190.9.100.238,21055.0,INT,0.0,,6,1065,1065,0,177.5,1.0,20,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 20:51:09.419979,0.000641,udp,147.32.84.170,54503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:09.421392,0.018686,tcp,147.32.84.170,54401.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:09.782341,0.000518,udp,82.169.119.41,15092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:11.486181,3422.430176,udp,147.32.84.229,13363.0,<->,147.102.24.150,31888.0,CON,0.0,0.0,8,2867,694,2173,358.375,0.2420648761771887,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:12.014838,0.000195,udp,147.32.84.138,40327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:51:18.068500,0.000387,udp,147.32.84.170,52698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:19.418648,0.000434,udp,147.32.84.170,38061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:19.696183,0.000166,udp,147.32.84.138,52137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:51:24.713661,3271.822754,udp,147.32.84.229,13363.0,<->,173.177.42.48,34505.0,CON,0.0,0.0,4,1082,946,136,270.5,0.8743068391866913,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:29.239079,0.000237,udp,147.32.85.89,40201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:51:33.170897,61.135899,tcp,147.32.84.165,3139.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:51:38.546358,3381.619141,udp,87.184.205.155,62601.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:39.420660,0.018344,tcp,147.32.84.170,54405.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:40.872493,0.025564,udp,147.32.84.229,13363.0,<->,78.141.181.225,34019.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:43.940148,523.662048,icmp,81.200.151.36,771.0,->,147.32.84.229,15979.0,URP,0.0,,32,3232,3232,0,101.0,1.0,20,0,flow=Background,Background,-1 2011-08-16 20:51:47.853324,2505.018311,udp,89.135.3.27,58092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:51:48.966391,0.206459,tcp,147.32.86.20,4203.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:51:49.065616,0.000455,udp,147.32.84.170,36161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:49.418808,0.000319,udp,147.32.84.170,38341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:51:51.028891,0.00025,udp,147.32.84.138,60579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:51:59.192358,9.000068,tcp,147.32.84.179,52021.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,20,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:51:59.419240,0.000408,udp,147.32.84.170,59534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:01.568482,0.000187,udp,147.32.85.34,51562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:52:01.568948,0.000221,udp,147.32.85.34,58739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:52:03.705532,0.000228,udp,147.32.84.138,52908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:52:09.422747,0.017954,tcp,147.32.84.170,54409.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:09.695122,0.000447,udp,178.223.14.56,30662.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:16.108646,3101.948242,udp,84.40.105.128,24950.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3228,183,3045,538.0,0.056691449814126396,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:19.640595,0.000549,udp,188.123.238.44,63661.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,586,80,506,293.0,0.13651877133105803,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:20.067452,0.431459,tcp,147.32.84.170,46056.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:27.002928,0.000409,udp,212.74.157.253,15306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:29.419612,0.000373,udp,147.32.84.170,55005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:33.928314,61.131069,tcp,147.32.84.165,3140.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:52:35.672414,3584.980469,udp,81.154.222.209,59888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1710,1469,241,213.75,0.8590643274853801,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:36.204164,0.000418,udp,201.193.211.226,62699.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:36.743113,0.000446,udp,188.123.241.226,25855.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:39.420926,0.018398,tcp,147.32.84.170,54413.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:39.772690,0.346901,udp,84.123.125.73,64455.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,694,574,120,173.5,0.8270893371757925,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:40.034825,268.692688,udp,147.32.84.229,13363.0,<->,75.138.23.112,54727.0,CON,0.0,0.0,4,280,143,137,70.0,0.5107142857142857,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:41.434449,0.000247,udp,147.32.84.138,60249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:52:49.420929,0.000564,udp,147.32.84.170,36718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:49.421925,0.000442,udp,147.32.84.170,38338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:50.024692,0.012027,tcp,147.32.85.6,54717.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2057,1093,964,228.55555555555554,0.5313563441905688,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:52:51.065762,0.000224,udp,147.32.84.170,40255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:52:51.246044,1128.102905,udp,78.90.47.215,13444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3321,222,3099,415.125,0.06684733514001806,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:52:54.919931,0.000217,udp,147.32.84.138,52007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:52:59.418971,0.000343,udp,147.32.84.170,34303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:09.419635,0.000316,udp,147.32.84.170,38319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:10.352472,0.35975,udp,147.32.85.84,13716.0,<->,125.230.82.111,4575.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:11.062593,0.000415,udp,147.32.85.34,64353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:53:13.833106,0.44316,tcp,147.32.84.170,45073.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:19.419020,0.000242,udp,147.32.84.170,59459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:19.420856,0.017948,tcp,147.32.84.170,46728.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:22.069000,0.230562,tcp,147.32.84.170,46070.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:23.577898,0.000333,udp,147.32.84.138,56042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:53:25.474775,3307.288574,tcp,147.32.85.21,48892.0,,74.125.43.108,993.0,PA_PA,0.0,0.0,85,11164,3962,7202,131.34117647058824,0.35489072017198137,20,1,flow=Background,Background,-1 2011-08-16 20:53:27.451761,0.024779,udp,147.32.84.184,50814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:53:28.019369,0.009712,udp,147.32.84.170,34941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:28.040466,240.06575,tcp,147.32.84.170,37120.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,23,4723,2994,1729,205.34782608695653,0.6339191192038959,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:28.096823,250.018265,tcp,147.32.84.170,42885.0,->,209.85.149.139,80.0,FSPA_FSPA,0.0,0.0,37,12615,8675,3940,340.94594594594594,0.6876734046769719,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:28.863618,2063.55249,udp,67.249.220.0,12448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,675,531,144,168.75,0.7866666666666666,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:33.228878,2.520332,tcp,66.249.66.211,60050.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1193,733,460,119.3,0.6144174350377201,20,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 20:53:33.275384,0.132954,udp,147.32.84.229,13363.0,<->,74.72.178.144,44725.0,CON,0.0,0.0,4,3026,60,2966,756.5,0.01982815598149372,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:34.675761,61.181259,tcp,147.32.84.165,3141.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:53:42.147028,0.363184,udp,147.32.84.229,13363.0,<->,123.240.169.79,28526.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:43.617370,0.000422,udp,212.5.146.239,31280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:44.341263,0.000271,udp,147.32.84.138,43312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:53:49.421194,0.017959,tcp,147.32.84.170,54430.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:53:49.936316,2486.438721,udp,147.32.84.229,13363.0,<->,149.5.45.8,43053.0,CON,0.0,0.0,4,444,144,300,111.0,0.32432432432432434,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:53:55.327582,0.000437,udp,147.32.85.25,42797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:53:59.420865,0.018621,tcp,147.32.84.170,36582.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:00.118282,0.000414,udp,147.32.84.138,44964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:00.126098,0.000281,udp,147.32.84.138,37540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:01.703292,0.00021,udp,147.32.85.34,53558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:01.706932,0.000321,udp,147.32.85.34,49188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:01.746209,0.000269,udp,147.32.85.34,56059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:02.420550,2199.570557,udp,147.32.84.229,13363.0,<->,78.20.122.206,1875.0,CON,0.0,0.0,6,1001,578,423,166.83333333333334,0.5774225774225774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:04.608236,683.727722,udp,95.65.111.117,40647.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,985,769,216,164.16666666666666,0.7807106598984772,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:04.983999,0.000517,udp,178.208.100.220,36825.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:06.420258,602.985168,udp,184.162.233.98,1714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,674,553,121,168.5,0.8204747774480712,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:11.550495,0.00085,udp,217.111.199.190,29462.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:12.106504,0.318738,udp,147.32.84.229,13363.0,<->,140.114.99.121,59215.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:17.084466,0.381279,tcp,67.195.111.228,41232.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2409,712,1697,240.9,0.2955583229555832,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:54:20.917102,0.000579,udp,213.226.210.112,15625.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:21.196158,199.386093,udp,147.32.84.229,13363.0,<->,76.176.171.94,39058.0,CON,0.0,0.0,6,599,271,328,99.83333333333333,0.4524207011686144,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:23.611925,410.790009,udp,65.175.204.16,9981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,923,683,240,115.375,0.7399783315276273,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:24.069251,0.000168,udp,147.32.84.170,51238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:29.421794,0.000271,udp,147.32.84.170,59836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:35.454123,61.164593,tcp,147.32.84.165,3142.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:54:36.505436,0.000233,udp,147.32.84.138,60724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:39.419054,0.000397,udp,147.32.84.170,47550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:49.691977,0.000208,udp,147.32.84.138,41573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:51.212003,0.000288,udp,147.32.84.59,47008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:51.214763,0.000437,udp,147.32.84.59,54034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:54:54.149430,1624.413818,udp,147.32.84.229,13363.0,<->,69.121.11.19,2527.0,CON,0.0,0.0,8,951,704,247,118.875,0.7402733964248159,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:54:55.065655,0.000439,udp,147.32.84.170,45620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:59.419047,0.000251,udp,147.32.84.170,46394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:54:59.421043,0.018129,tcp,147.32.84.170,36590.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:09.419114,0.000356,udp,147.32.84.170,55867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:09.419964,0.000345,udp,147.32.84.170,43236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:09.421077,0.018836,tcp,147.32.84.170,36591.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:10.277626,2007.049072,udp,147.32.84.229,13363.0,<->,84.22.3.198,25923.0,CON,0.0,0.0,8,970,309,661,121.25,0.3185567010309278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:55:25.402842,0.000239,udp,147.32.84.138,56973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:55:29.418971,0.000423,udp,147.32.84.170,38131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:30.014189,0.000228,udp,147.32.84.138,35186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:55:36.262333,61.083714,tcp,147.32.84.165,3143.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:55:39.419076,0.019827,udp,147.32.84.170,34689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:39.439415,0.000322,udp,147.32.84.170,57857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:42.869303,50.787769,udp,65.3.249.222,50943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1334,1212,122,166.75,0.9085457271364318,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:55:44.929388,0.000569,udp,111.103.75.135,53192.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,620,76,544,310.0,0.12258064516129032,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:55:45.718789,3.010256,tcp,139.179.104.213,49247.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,3,192,126,66,64.0,0.65625,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:55:49.420096,0.000277,udp,147.32.84.170,37231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:51.742879,0.000468,udp,190.241.185.122,43976.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:55:55.064682,0.000338,udp,147.32.84.170,36109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:59.419281,0.000277,udp,147.32.84.170,49654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:55:59.420088,0.000319,udp,147.32.84.170,39388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:02.064478,0.000393,udp,147.32.85.34,61551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:02.072697,0.000341,udp,147.32.85.34,62792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:02.421740,0.000195,udp,147.32.84.138,35592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:05.768260,0.110904,udp,147.32.86.194,60864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:06.057117,0.004278,tcp,77.75.76.115,46553.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,10,1568,929,639,156.8,0.5924744897959183,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:56:10.287049,0.000401,tcp,147.32.87.36,80.0,->,147.32.86.194,1574.0,SA_,0.0,,2,124,124,0,62.0,1.0,20,0,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 20:56:12.838267,0.001014,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,20,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 20:56:15.386210,7.855194,tcp,147.32.115.11,49208.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,10,1873,1208,665,187.3,0.6449546182594768,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:56:19.421240,0.017786,tcp,147.32.84.170,57592.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:19.895951,0.000272,udp,147.32.85.25,33752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:24.591376,0.000605,udp,182.177.98.14,11068.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:56:26.068699,0.000224,udp,147.32.84.170,38843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:29.419289,0.000299,udp,147.32.84.170,43436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:34.194497,0.000246,udp,147.32.84.138,57648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:36.979564,61.106339,tcp,147.32.84.165,3144.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:56:39.420091,0.000391,udp,147.32.84.170,58642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:39.421170,0.018037,tcp,147.32.84.170,53532.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:43.398392,0.000281,udp,147.32.84.138,42780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:49.421969,0.01826,tcp,147.32.84.170,48785.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:56:52.769678,3212.350098,udp,86.26.171.224,50362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:56:55.289171,0.000366,udp,147.32.86.20,63505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:56:57.065431,0.000262,udp,147.32.84.170,42115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:02.833429,0.005289,tcp,147.32.87.54,2036.0,->,89.202.157.197,80.0,FSPA_FSPA,0.0,0.0,12,3503,2972,531,291.9166666666667,0.8484156437339423,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:57:09.420249,0.000358,udp,147.32.84.170,57995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:16.792720,0.000236,udp,147.32.84.138,35312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:17.862481,2336.473877,tcp,147.32.84.170,34752.0,->,64.12.73.165,443.0,SPA_SRPA,0.0,0.0,179,13938,6192,7746,77.8659217877095,0.44425312096427033,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:21.717350,0.000329,udp,147.32.85.25,37750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:21.776892,0.000181,udp,147.32.85.25,33487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:22.105227,0.000408,udp,147.32.86.20,55367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:26.463101,0.000198,udp,147.32.84.138,53649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:28.068036,0.000356,udp,147.32.84.170,57401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:29.420260,0.000339,udp,147.32.84.170,36038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:36.455581,0.000792,udp,2.30.24.211,64466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,961,75,886,480.5,0.07804370447450572,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:57:37.268808,0.012819,tcp,147.32.85.74,39025.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 20:57:37.716813,61.110668,tcp,147.32.84.165,3145.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:57:38.816594,0.000502,udp,71.159.229.148,29390.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:57:46.089251,0.000194,udp,147.32.84.138,55285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:53.569827,0.00048,udp,107.8.149.32,45061.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:57:55.112775,0.000362,udp,147.32.84.138,44326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:57:57.923978,0.00059,udp,220.236.49.56,49750.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,75,487,281.0,0.13345195729537365,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:57:59.068024,0.000307,udp,147.32.84.170,56625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:59.068889,0.0003,udp,147.32.84.170,42514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:59.420333,0.00025,udp,147.32.84.170,52687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:57:59.481351,0.998083,tcp,147.32.86.20,4531.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,97,96452,1706,94746,994.3505154639175,0.017687554431219676,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:58:00.360164,0.000146,udp,147.32.84.138,42827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:58:09.097758,70.690514,udp,147.32.84.229,13363.0,<->,95.27.136.239,42725.0,CON,0.0,0.0,8,1780,1111,669,222.5,0.6241573033707866,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:58:13.546489,0.214441,tcp,147.32.84.170,51501.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:13.753318,0.217295,tcp,147.32.84.170,51502.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:14.126070,0.000269,udp,147.32.84.170,58119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:14.126977,391.455597,tcp,147.32.84.170,53844.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,97,37351,27515,9836,385.0618556701031,0.7366603303793741,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:14.127103,240.036438,tcp,147.32.84.170,53847.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:14.127265,250.036774,tcp,147.32.84.170,53849.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:14.338356,3059.280029,udp,46.98.109.193,19990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:58:26.061394,9.83936,tcp,147.32.86.194,1662.0,->,145.36.215.180,80.0,FSPA_FSPA,0.0,0.0,12,3717,1068,2649,309.75,0.28732849071832123,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:58:26.227788,0.000425,udp,213.192.18.18,65523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:58:29.419253,0.000465,udp,147.32.84.170,39936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:29.690401,0.000489,udp,77.255.137.41,48947.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:58:30.068737,0.231981,tcp,147.32.84.170,36410.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:38.455070,61.119099,tcp,147.32.84.165,3146.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,20,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 20:58:38.564147,0.000157,udp,147.32.84.138,48145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:58:45.100198,0.000607,udp,109.74.120.125,10427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,311,64,247,155.5,0.2057877813504823,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:58:45.795044,0.000199,udp,147.32.84.138,38396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:58:49.422165,0.018419,tcp,147.32.84.170,57625.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:57.857797,2038.358765,tcp,90.173.193.226,1228.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,301,47652,28065,19587,158.31229235880397,0.5889574414505162,20,0,flow=Background-TCP-Established,Background,-1 2011-08-16 20:58:58.084826,0.000327,udp,147.32.84.138,58092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:58:58.935813,0.00033,udp,147.32.84.138,57959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:58:59.419479,0.000578,udp,147.32.84.170,60264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:59.420597,0.000383,udp,147.32.84.170,33103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:58:59.421716,0.017972,tcp,147.32.84.170,43803.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:00.542819,0.968757,tcp,147.32.86.194,1692.0,->,217.11.242.243,80.0,FSPA_FSPA,0.0,0.0,43,28078,7612,20466,652.9767441860465,0.2711019303369186,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:59:01.058749,0.000304,udp,147.32.84.170,44739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:09.419492,0.000434,udp,147.32.84.170,41126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:19.420292,0.000278,udp,147.32.84.170,45737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:25.002419,811.75531,udp,67.246.49.238,11400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,471,347,124,117.75,0.7367303609341825,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:59:29.420301,0.000341,udp,147.32.84.170,42530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:30.538310,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,20,,flow=Background,Background,-1 2011-08-16 20:59:31.865712,0.001332,udp,41.104.70.164,10005.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,20,0,flow=Background-UDP-Established,Background,-1 2011-08-16 20:59:32.067930,0.000401,udp,147.32.84.170,33900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:32.068862,0.000373,udp,147.32.84.170,43447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:39.203058,8.941579,tcp,147.32.84.165,3147.0,->,222.189.228.111,3389.0,S_,0.0,,3,186,186,0,62.0,1.0,20,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 20:59:41.874928,0.310357,tcp,147.32.86.20,4622.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:59:44.732335,0.000163,udp,147.32.84.138,38278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:59:46.996735,97.96125,tcp,95.139.1.185,1761.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,23,2063,600,1463,89.69565217391305,0.290838584585555,20,1,flow=Background-TCP-Established,Background,-1 2011-08-16 20:59:47.298141,0.0004,udp,147.32.85.25,53351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:59:49.420398,0.000426,udp,147.32.84.170,48007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 20:59:52.092169,0.000263,udp,147.32.84.138,41958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:59:52.836365,0.00017,udp,147.32.85.25,60138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,20,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 20:59:59.421499,0.018228,tcp,147.32.84.170,48823.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,20,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:01.197180,0.000404,udp,147.32.87.36,42691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,21,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 21:00:01.558911,0.000328,udp,147.32.85.34,63236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:01.563709,0.000398,udp,147.32.85.34,53780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:01.581604,0.000411,udp,147.32.85.34,56232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:01.594315,0.000272,udp,147.32.85.34,65080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:03.145871,0.000242,udp,147.32.85.25,33920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:03.249694,0.000368,udp,147.32.84.138,34923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:05.445069,0.000328,udp,147.32.84.138,44147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:06.142849,0.000295,udp,147.32.87.40,55041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:13.401293,0.000167,udp,147.32.85.25,34031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:15.225318,3599.818115,udp,147.32.84.164,57501.0,<->,79.141.174.9,27017.0,CON,0.0,0.0,577,67518,52536,14982,117.0155979202773,0.7781036168132942,21,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 21:00:15.544886,0.001695,udp,70.53.156.245,51022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:00:19.419462,0.000423,udp,147.32.84.170,44436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:19.420305,0.000369,udp,147.32.84.170,56383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:21.875692,0.000516,udp,186.4.153.2,35733.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:00:29.474665,3195.102295,udp,147.32.87.29,137.0,->,147.32.87.63,137.0,INT,0.0,,4,368,368,0,92.0,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:00:31.689989,897.851257,udp,77.208.27.169,47620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2337,444,1893,194.75,0.18998716302952504,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:00:37.127520,0.13673,tcp,147.32.86.20,4670.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:00:38.219711,0.00015,udp,147.32.84.138,48051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:00:39.419530,0.019634,udp,147.32.84.170,43557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:39.439710,0.000316,udp,147.32.84.170,50937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:43.218325,0.000453,udp,82.137.12.129,4089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:00:49.420438,0.000297,udp,147.32.84.170,45986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:49.421443,0.01841,tcp,147.32.84.170,57641.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:00:50.325021,1611.64978,udp,189.111.28.252,3149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1769,305,1464,221.125,0.1724137931034483,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:00:54.371371,0.000271,udp,147.32.85.25,38257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:01:00.169625,0.587186,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,71,126,98.5,0.3604060913705584,21,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 21:01:00.757329,61.096012,tcp,147.32.84.165,3148.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:01:04.067853,0.000282,udp,147.32.84.170,38629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:06.143481,0.000322,udp,147.32.84.138,51918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:01:06.377129,0.000411,udp,147.32.86.20,54491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:01:08.419439,0.000513,udp,83.4.106.22,21830.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,73,480,276.5,0.13200723327305605,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:09.422034,0.017579,tcp,147.32.84.170,49951.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:18.246700,3417.826172,udp,80.202.99.156,45161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,36,10612,9532,1080,294.77777777777777,0.8982284206558613,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:19.421729,0.018528,tcp,147.32.84.170,44309.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:22.910292,0.001725,udp,93.155.160.222,48881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,590,530,60,295.0,0.8983050847457628,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:23.555646,0.000374,udp,147.32.84.138,32842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:01:27.478233,0.543766,tcp,147.32.87.24,1890.0,->,65.55.185.26,443.0,SRPA_SPA,0.0,0.0,17,8290,2331,5959,487.6470588235294,0.28118214716525936,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:01:28.607041,0.00167,udp,201.13.163.191,42374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:29.419852,0.000352,udp,147.32.84.170,37002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:29.421753,0.017812,tcp,147.32.84.170,48436.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:29.958434,0.000276,udp,147.32.84.138,44643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:01:30.290691,0.034232,udp,147.32.84.229,13363.0,<->,84.192.102.23,46985.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:30.709928,0.000466,udp,193.138.153.212,3313.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:35.067361,0.000235,udp,147.32.84.170,39391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:39.421859,0.018314,tcp,147.32.84.170,54332.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:42.236773,617.568115,udp,41.125.208.233,23706.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,504,380,124,126.0,0.753968253968254,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:44.118786,0.000683,udp,217.118.66.15,42594.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:58.525582,0.000456,udp,84.131.54.72,54056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:01:59.419992,0.000462,udp,147.32.84.170,49627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:01:59.422037,0.01947,tcp,147.32.84.170,41057.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:01.487461,61.09259,tcp,147.32.84.165,3149.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:02:08.214908,0.000397,icmp,147.32.84.19,,<-,147.32.87.27,26577.0,RED,,0.0,2,196,0,196,98.0,0.0,21,0,flow=Background,Background,-1 2011-08-16 21:02:09.419795,0.000413,udp,147.32.84.170,34890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:09.421772,0.017973,tcp,147.32.84.170,54336.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:12.319593,185.529968,udp,217.79.83.130,56588.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1197,657,540,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:14.645724,0.002102,udp,147.32.85.6,57101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:18.327945,0.000157,udp,147.32.85.25,58225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:19.422034,0.018126,tcp,147.32.84.170,49177.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:19.852385,0.139702,udp,147.32.87.135,2986.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,21,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 21:02:21.534864,0.000273,udp,147.32.84.138,50654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:23.352505,0.0001,udp,147.32.85.25,49224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:23.437327,0.00021,udp,147.32.85.25,54567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:23.748270,0.000192,udp,147.32.85.25,49087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:24.717839,0.000144,udp,147.32.84.138,58148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:28.912626,0.000226,udp,147.32.84.138,42866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:29.419970,0.000367,udp,147.32.84.170,50736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:29.420859,0.000324,udp,147.32.84.170,52328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:30.309813,0.000484,udp,82.59.124.159,17786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:36.738724,0.000579,udp,70.176.59.43,22352.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,80,471,275.5,0.14519056261343014,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:37.071838,0.00031,udp,147.32.84.170,59422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:37.072784,0.249071,tcp,147.32.84.170,53368.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:39.421843,0.0183,tcp,147.32.84.170,49963.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:02:42.705381,0.000261,udp,147.32.84.138,39833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:02:46.756875,0.000594,udp,129.177.138.109,55283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:50.503734,11.772557,udp,89.245.68.5,60435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,774,139,635,193.5,0.17958656330749354,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:59.285618,0.086689,udp,147.32.84.229,13363.0,<->,109.199.229.68,57442.0,CON,0.0,0.0,4,3033,60,2973,758.25,0.019782393669634024,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:02:59.421902,0.018306,tcp,147.32.84.170,49182.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:02.215570,61.08918,tcp,147.32.84.165,3150.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:03:03.733027,7.991617,udp,147.32.87.48,1801.0,->,147.32.86.230,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:03:05.683553,0.000624,udp,93.181.38.190,12786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,75,495,285.0,0.13157894736842105,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:03:06.503533,0.000388,udp,174.7.94.117,32393.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:03:09.421934,0.000309,udp,147.32.84.170,41502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:13.481442,0.397436,tcp,147.32.84.170,40743.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:14.157402,0.298126,tcp,147.32.84.170,40746.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:16.065207,0.000165,udp,147.32.85.25,42373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:03:19.286830,5.142997,tcp,38.99.96.232,31249.0,->,147.32.85.109,80.0,FSPA_FSPA,0.0,0.0,11,1746,591,1155,158.72727272727272,0.3384879725085911,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:03:22.902893,1606.546631,udp,174.114.132.115,33569.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,656,518,138,164.0,0.7896341463414634,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:03:25.850525,0.000163,udp,147.32.84.138,36861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:03:26.642940,0.000258,udp,147.32.85.25,55095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:03:27.287436,6.036125,udp,147.32.84.229,13363.0,->,78.37.39.109,56387.0,INT,0.0,,3,180,180,0,60.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:03:29.421276,0.000445,udp,147.32.84.170,33627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:35.641038,0.000578,udp,98.121.166.56,39209.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:03:39.421232,0.000237,udp,147.32.84.170,53643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:42.023415,0.00023,udp,147.32.85.25,42417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:03:49.421700,0.000297,udp,147.32.84.170,41738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:49.423786,0.018476,tcp,147.32.84.170,44335.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:03:59.423264,0.018375,tcp,147.32.84.170,49979.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:02.954340,61.058365,tcp,147.32.84.165,3151.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:04:03.171575,0.000281,udp,147.32.85.34,54220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:03.190207,0.000391,udp,147.32.85.34,60790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:03.214740,0.000306,udp,147.32.85.34,59880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:08.224795,0.209828,tcp,66.249.72.38,41046.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,10,1971,623,1348,197.1,0.3160832064941654,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:04:09.421157,0.000418,udp,147.32.84.170,44414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:09.423328,0.018613,tcp,147.32.84.170,48463.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:10.069171,0.287327,tcp,147.32.84.170,53387.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:18.300728,5.060882,udp,2.88.241.191,14620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:04:18.467976,0.000184,udp,147.32.85.25,44350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:18.836163,0.329022,udp,147.32.84.229,13363.0,<->,118.167.119.117,38720.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:04:19.423265,0.018318,tcp,147.32.84.170,49982.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:23.729234,0.000414,udp,147.32.84.59,54589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:25.562749,3033.861084,udp,188.49.37.85,17246.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,680,380,300,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:04:25.684305,1345.703125,tcp,193.84.86.2,2055.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,239,25089,13622,11467,104.97489539748953,0.5429471082944717,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:04:29.421333,0.00036,udp,147.32.84.170,49499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:29.423453,0.018121,tcp,147.32.84.170,49983.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:31.796984,0.047037,udp,147.32.85.56,44076.0,->,85.187.231.45,41094.0,INT,0.0,,1,63,63,0,63.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:04:31.950894,0.135336,tcp,147.32.86.20,4806.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,36,29121,913,28208,808.9166666666666,0.03135194533154768,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:04:37.056311,0.000402,udp,122.201.47.211,40394.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:04:40.585417,0.00026,udp,147.32.84.138,49077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:40.609110,0.000189,udp,147.32.84.138,33051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:04:41.069763,0.000368,udp,147.32.84.170,59627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:49.422280,0.000295,udp,147.32.84.170,60746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:04:52.493732,0.000595,udp,222.239.186.174,16935.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:04:57.138279,0.150571,tcp,147.32.86.20,4829.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:04:59.422000,0.000252,udp,147.32.84.170,45857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:03.661695,61.090572,tcp,147.32.84.165,3152.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:05:06.229961,2717.4104,udp,121.107.193.82,1226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:06.234605,0.000212,udp,147.32.85.25,53906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:05:09.329044,0.150823,tcp,147.32.86.20,4839.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:05:09.423321,0.021336,tcp,147.32.84.170,49988.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:12.067486,0.000235,udp,147.32.84.170,33505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:12.068740,0.22757,tcp,147.32.84.170,53395.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:12.250088,2844.233887,udp,62.57.72.233,18151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1212,902,310,121.2,0.7442244224422442,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:22.051235,0.000375,udp,147.32.85.25,56475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:05:27.548610,0.00032,udp,147.32.84.138,37327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:05:32.690539,130.453812,udp,64.179.161.47,31742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:36.357783,3062.790039,udp,83.250.82.214,23371.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,536,296,240,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:39.329206,0.000369,udp,195.78.104.5,63054.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:39.979426,0.0004,udp,72.49.145.6,50448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:43.063602,0.000271,udp,147.32.84.170,53816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:49.422132,0.000334,udp,147.32.84.170,49896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:05:52.613445,0.039327,udp,147.32.86.96,42811.0,<->,80.250.21.93,161.0,CON,0.0,0.0,4,360,163,197,90.0,0.4527777777777778,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:05:58.852554,0.000431,udp,194.63.138.77,12484.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:06:00.273806,0.01654,udp,147.32.84.229,13363.0,<->,192.91.244.160,45911.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:06:04.369495,61.155334,tcp,147.32.84.165,3153.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:06:06.319254,0.000364,udp,147.32.84.138,55541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:06:09.422303,0.000421,udp,147.32.84.170,42696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:06:11.671292,0.000525,udp,69.246.180.223,28103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:06:12.967447,2999.889404,arp,147.32.87.11,,who,147.32.87.1,,CON,,,8,480,240,240,60.0,0.5,21,,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-16 21:06:13.354685,0.000226,udp,147.32.85.25,51124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:06:19.424138,0.018798,tcp,147.32.84.170,43501.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:06:20.875350,109.09613,tcp,92.90.16.196,18445.0,->,147.32.84.229,13363.0,SA_FSA,0.0,0.0,9,552,126,426,61.333333333333336,0.22826086956521738,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:06:39.422317,0.000402,udp,147.32.84.170,50372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:06:45.067806,0.000344,udp,147.32.84.170,36007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:06:46.911911,0.000197,udp,147.32.84.138,50976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:06:47.399541,0.000533,udp,201.76.214.3,52879.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,75,486,280.5,0.13368983957219252,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:06:49.464876,0.000212,udp,147.32.84.138,38286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:06:56.113856,2.998966,tcp,81.132.167.188,57707.0,->,147.32.87.220,80.0,S_,0.0,,2,132,132,0,66.0,1.0,21,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:06:59.421304,0.000328,udp,147.32.84.170,49746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:07:05.137327,61.151264,tcp,147.32.84.165,3154.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:07:06.681412,3028.895264,udp,113.254.4.179,28349.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:07:09.421581,0.000288,udp,147.32.84.170,43907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:07:09.423544,0.01855,tcp,147.32.84.170,55534.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:07:12.723188,9.134903,tcp,62.168.34.62,54491.0,->,147.32.87.37,80.0,FSRPA_SPA,0.0,0.0,129,136872,5940,130932,1061.0232558139535,0.043398211467648606,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:07:16.182779,0.000502,udp,89.178.48.203,61453.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:07:17.463693,3392.007568,udp,92.105.46.159,42328.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1752,1318,434,125.14285714285714,0.752283105022831,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:07:19.421589,0.000379,udp,147.32.84.170,46489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:07:29.896767,0.100924,tcp,147.32.86.20,4965.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,20,11274,671,10603,563.7,0.059517473833599434,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:07:34.377192,0.000245,udp,147.32.85.89,37375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:07:39.014569,0.000514,udp,31.181.105.222,20604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,624,75,549,312.0,0.1201923076923077,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:07:48.109604,0.000414,udp,94.43.139.91,20946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:07:57.496616,0.000264,udp,147.32.84.138,37870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:07:59.149037,0.170729,tcp,147.32.86.20,4989.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,75,70672,1631,69041,942.2933333333333,0.023078446909667195,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:07:59.421668,0.000369,udp,147.32.84.170,49378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:00.236895,0.000286,udp,147.32.84.138,54847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:08:03.954565,0.002128,icmp,147.32.86.96,,<-,147.32.87.51,44832.0,RED,,0.0,2,196,0,196,98.0,0.0,21,0,flow=Background,Background,-1 2011-08-16 21:08:04.381329,0.000241,udp,147.32.85.89,56589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:08:05.925324,61.078835,tcp,147.32.84.165,3155.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:08:07.270679,0.000441,udp,147.32.86.20,63636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:08:13.107355,0.353512,tcp,147.32.84.170,50372.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:13.511594,0.336858,tcp,147.32.84.170,42584.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:13.744530,0.303944,tcp,147.32.84.170,50375.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:13.840816,0.260803,tcp,147.32.84.170,42586.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:14.093645,0.25195,tcp,147.32.84.170,42587.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:16.313511,2948.973633,udp,72.174.252.35,58135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,3708,427,3281,264.85714285714283,0.11515641855447681,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:08:19.422509,0.000257,udp,147.32.84.170,37726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:24.716924,1667.478516,udp,173.29.157.132,8915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1610,1415,195,268.3333333333333,0.8788819875776398,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:08:29.421569,0.000385,udp,147.32.84.170,53869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:29.422514,0.000294,udp,147.32.84.170,47494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:39.422583,0.00027,udp,147.32.84.170,47280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:42.274612,0.0,icmp,147.32.84.115,771.0,->,76.164.193.170,18068.0,URP,3.0,,1,90,90,0,90.0,1.0,21,0,flow=Background,Background,-1 2011-08-16 21:08:43.026221,0.136716,tcp,147.32.86.20,1054.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,32,23736,853,22883,741.75,0.03593697337377823,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:08:49.423671,0.017742,tcp,147.32.84.170,45375.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:08:54.884115,0.229014,udp,95.73.158.55,17478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,705,495,210,117.5,0.7021276595744681,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:08:55.254935,0.000225,udp,147.32.84.138,59156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:08:59.422341,0.000379,udp,147.32.84.170,50744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:01.103558,0.000461,udp,84.82.75.231,49802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:09:05.282396,0.000169,udp,147.32.84.138,37299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:09:05.773755,0.269665,tcp,147.32.86.20,1072.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:09:06.652300,61.05595,tcp,147.32.84.165,3156.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:09:09.421810,0.00027,udp,147.32.84.170,58477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:19.421577,0.000585,udp,147.32.84.170,36913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:19.423626,0.018183,tcp,147.32.84.170,54018.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:20.063841,0.000316,udp,147.32.84.170,40460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:20.065112,0.236623,tcp,147.32.84.170,59923.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:25.145908,3131.465332,udp,213.146.167.58,22707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:09:27.633967,0.020411,udp,147.32.84.184,50375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:09:27.984495,2519.033447,udp,147.32.84.229,13363.0,->,24.30.29.86,55619.0,INT,0.0,,6,912,912,0,152.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:09:36.458469,1757.11145,udp,92.248.128.55,33030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,782,185,597,195.5,0.23657289002557544,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:09:39.422684,0.000312,udp,147.32.84.170,37810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:39.423740,0.018366,tcp,147.32.84.170,54021.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:40.713077,0.170634,tcp,147.32.86.20,1108.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:09:44.539116,0.001566,udp,72.184.244.84,2095.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:09:45.360243,0.000389,udp,147.32.85.25,45787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:09:45.767705,0.000321,udp,147.32.85.25,33381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:09:46.123970,0.206908,tcp,89.20.226.104,11394.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,11,784,390,394,71.27272727272727,0.49744897959183676,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:09:51.068956,0.000268,udp,147.32.84.170,48159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:59.422620,0.000283,udp,147.32.84.170,40036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:09:59.423523,0.018356,tcp,147.32.84.170,43542.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:02.803041,0.000262,udp,147.32.85.34,56165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:10:02.807543,0.000274,udp,147.32.85.34,55457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:10:07.350312,61.079502,tcp,147.32.84.165,3157.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:10:09.421664,0.000405,udp,147.32.84.170,60496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:09.440716,0.000412,udp,180.131.219.55,19678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:10:11.927437,0.000636,udp,88.31.126.154,48593.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:10:17.535099,0.000347,udp,147.32.85.25,52806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:10:19.230355,0.000661,udp,99.39.234.4,27626.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,76,477,276.5,0.13743218806509946,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:10:19.423690,0.018326,tcp,147.32.84.170,58655.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:26.645065,0.000664,udp,217.229.249.167,63860.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:10:26.793171,0.000258,udp,147.32.84.138,54960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:10:29.422647,0.000384,udp,147.32.84.170,48369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:29.423678,0.018172,tcp,147.32.84.170,58657.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:39.421846,0.111539,udp,147.32.84.170,48223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:39.534968,0.01792,tcp,147.32.84.170,55574.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:10:51.404743,0.170827,tcp,147.32.86.20,1168.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:10:53.258017,2.8336,udp,216.180.191.127,23631.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1117,690,427,139.625,0.6177260519247986,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:01.763475,0.000559,udp,147.32.85.74,36733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,72,155,113.5,0.31718061674008813,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:11:03.121486,0.467738,udp,147.32.84.171,40992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:11:08.077538,61.054626,tcp,147.32.84.165,3158.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:11:12.467605,0.000355,udp,147.32.84.138,38294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:11:12.734437,632.992493,udp,87.119.101.183,55371.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,626,362,264,156.5,0.5782747603833865,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:14.104113,1833.400391,udp,213.175.82.107,27336.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,683,147,536,170.75,0.21522693997071743,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:18.683920,32.46172,tcp,92.41.176.205,51719.0,->,147.32.84.229,80.0,SRPA_SPA,0.0,0.0,39,14471,13084,1387,371.05128205128204,0.9041531338539147,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:11:22.025720,0.000611,udp,109.104.176.25,16330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,75,486,280.5,0.13368983957219252,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:24.068412,0.000302,udp,147.32.84.170,37401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:11:24.935942,2347.983887,udp,178.190.199.201,12470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1919,1564,355,191.9,0.8150078165711307,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:29.422077,0.000385,udp,147.32.84.170,35977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:11:33.600436,0.00034,udp,147.32.84.138,37369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:11:34.440152,0.001606,udp,174.131.237.10,28117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:36.829457,2740.951416,udp,213.190.34.53,63215.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:11:43.064368,0.210622,udp,78.128.207.242,55432.0,->,239.255.255.250,1900.0,INT,0.0,,3,1144,1144,0,381.3333333333333,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:11:46.655767,0.000351,udp,147.32.86.20,50840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:11:49.422107,0.000359,udp,147.32.84.170,60597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:11:55.069373,0.282365,tcp,147.32.84.170,48401.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:11:59.422060,0.000348,udp,147.32.84.170,49257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:11:59.423033,0.000361,udp,147.32.84.170,46793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:02.534192,3057.379639,udp,186.29.120.160,38919.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1220,910,310,122.0,0.7459016393442623,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:05.208899,0.000324,udp,147.32.84.138,39727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:12:07.808172,0.000484,udp,166.205.15.113,38203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,80,67,73.5,0.54421768707483,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:08.775965,61.116219,tcp,147.32.84.165,3159.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:12:09.146317,0.003974,udp,201.217.81.78,33889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3039,60,2979,759.75,0.019743336623889437,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:09.424245,0.018412,tcp,147.32.84.170,37598.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:25.045741,568.728088,udp,147.32.84.229,13363.0,<->,125.14.170.38,20148.0,CON,0.0,0.0,6,1176,995,181,196.0,0.8460884353741497,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:26.069424,0.000312,udp,147.32.84.170,53264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:26.070722,0.224375,tcp,147.32.84.170,48405.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:33.003921,0.09621,udp,147.32.84.229,13363.0,<->,79.16.61.186,33741.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:42.617581,0.000562,udp,95.79.71.241,38424.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:45.736331,0.000315,udp,147.32.84.138,57410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:12:45.773311,0.000419,udp,98.212.49.21,45598.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:49.425215,0.01819,tcp,147.32.84.170,41696.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:50.457492,0.000305,udp,147.32.84.138,57344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:12:56.705316,0.00483,udp,122.216.155.110,48900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3038,60,2978,759.5,0.019749835418038184,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:12:57.069928,0.000278,udp,147.32.84.170,50623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:57.071207,0.275678,tcp,147.32.84.170,48409.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:59.423255,0.000388,udp,147.32.84.170,38917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:59.424132,0.000392,udp,147.32.84.170,40240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:12:59.425231,0.017683,tcp,147.32.84.170,33985.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:09.424632,0.000293,udp,147.32.84.170,48669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:09.445999,0.00061,udp,77.120.33.35,7725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:13:09.493696,61.162498,tcp,147.32.84.165,3160.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:13:13.454605,0.308894,tcp,147.32.84.170,49293.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:13.598105,0.000297,udp,147.32.86.20,56803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:13:13.997307,0.319813,tcp,147.32.84.170,33874.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:16.822989,0.000504,udp,187.38.246.246,59670.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:13:19.425406,0.017767,tcp,147.32.84.170,53659.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:21.703830,2866.061279,udp,173.252.57.211,19758.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3209,165,3044,534.8333333333334,0.051417887192271736,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:13:29.423286,0.000328,udp,147.32.84.170,36002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:29.424087,0.000306,udp,147.32.84.170,38356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:34.504947,0.000484,udp,94.112.46.186,58106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:13:38.434946,0.00024,udp,147.32.84.138,33094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:13:39.424157,0.000287,udp,147.32.84.170,38302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:39.908058,0.000371,udp,78.21.13.87,25176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:13:49.423290,0.000355,udp,147.32.84.170,38302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:49.425176,0.018069,tcp,147.32.84.170,41710.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:13:59.424254,0.000276,udp,147.32.84.170,38896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:02.529974,0.000315,udp,147.32.85.34,62045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:14:05.215257,117.145096,tcp,74.239.229.253,57148.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,16,2308,442,1866,144.25,0.19150779896013864,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:14:08.347499,3470.98291,udp,147.32.84.229,13363.0,<->,89.162.43.12,55138.0,CON,0.0,0.0,6,3142,133,3009,523.6666666666666,0.04232972628898791,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:09.423396,0.000459,udp,147.32.84.170,35342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:10.311493,61.081116,tcp,147.32.84.165,3161.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:14:11.261014,0.00052,udp,69.110.90.160,2531.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,172,69,120.5,0.7136929460580913,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:11.478511,8.999941,tcp,147.32.84.179,52076.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,21,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:14:14.138636,0.000197,udp,147.32.85.34,51904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:14:16.591267,3047.942383,udp,178.223.81.208,13318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:18.489849,75.89949,tcp,147.32.84.68,51841.0,->,195.113.232.75,80.0,SRPA_SPA,0.0,0.0,8,966,559,407,120.75,0.5786749482401656,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:14:19.424180,0.000383,udp,147.32.84.170,44381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:24.638970,0.000232,udp,147.32.84.138,52960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:14:24.819718,1.219081,tcp,147.32.3.51,2016.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,21,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:14:30.069540,0.000342,udp,147.32.84.170,57446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:30.070804,0.239651,tcp,147.32.84.170,48428.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:33.462226,0.000329,udp,147.32.84.138,47721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:14:36.224992,889.245667,udp,147.32.84.229,13363.0,<->,66.116.2.90,34389.0,CON,0.0,0.0,6,3752,713,3039,625.3333333333334,0.1900319829424307,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:39.378617,0.001856,udp,92.21.147.155,14477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:39.423440,0.000461,udp,147.32.84.170,47491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:44.272356,0.000603,udp,178.162.82.40,34792.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:46.048051,23.659534,tcp,80.27.101.44,65228.0,->,147.32.84.229,80.0,FSRPA_SPA,0.0,0.0,13,994,510,484,76.46153846153847,0.5130784708249497,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:14:49.126957,2997.344971,udp,86.38.204.237,58509.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:49.424452,0.000443,udp,147.32.84.170,59650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:49.425553,0.020116,tcp,147.32.84.170,53671.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:14:55.833276,3107.527588,udp,90.213.222.178,37605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:14:57.602759,0.000359,udp,147.32.86.20,65328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:14:59.671272,0.000427,udp,24.213.130.196,19927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:01.076097,0.000382,udp,147.32.84.170,46590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:01.077368,0.243578,tcp,147.32.84.170,48432.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:02.023878,0.998659,tcp,147.32.86.92,48033.0,->,147.32.87.34,4949.0,_SPA,,0.0,78,16886,0,16886,216.48717948717947,0.0,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:15:05.677705,0.000266,udp,147.32.86.92,39832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,78,212,145.0,0.2689655172413793,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:15:10.989428,61.202694,tcp,147.32.84.165,3162.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:15:17.632811,3036.7229,udp,174.130.99.6,26044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:19.425383,0.000383,udp,147.32.84.170,53400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:19.426502,0.018056,tcp,147.32.84.170,53675.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:20.226729,3569.034912,udp,91.23.215.159,53721.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:31.930194,0.000738,udp,95.227.249.46,27592.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,78,483,280.5,0.13903743315508021,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:32.070237,0.000236,udp,147.32.84.170,45268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:32.071013,0.000368,udp,147.32.84.170,55498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:34.961197,0.000258,udp,147.32.84.138,52147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:15:35.495564,0.000518,udp,88.247.218.11,51607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:37.299816,1439.248779,udp,147.32.84.229,13363.0,<->,95.180.51.82,40425.0,CON,0.0,0.0,4,330,165,165,82.5,0.5,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:38.688108,0.00045,udp,77.67.32.162,17552.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,72,477,274.5,0.13114754098360656,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:39.424256,0.019671,udp,147.32.84.170,41076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:39.444428,0.000415,udp,147.32.84.170,46234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:46.586340,0.00043,udp,173.172.22.207,47835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:48.261396,0.000228,udp,147.32.85.25,38116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:15:58.258415,0.000531,udp,91.139.198.64,45515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:15:59.424482,0.000377,udp,147.32.84.170,50074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:15:59.425447,0.000254,udp,147.32.84.170,58635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:01.931604,0.001688,udp,114.73.99.10,3448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:02.597053,0.000233,udp,147.32.85.34,56971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,85,224,154.5,0.2750809061488673,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:16:03.073226,0.226832,tcp,147.32.84.170,48440.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:04.289542,0.000191,udp,147.32.84.138,59577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:16:04.892917,0.037181,tcp,147.32.86.96,60782.0,->,147.32.87.38,12489.0,_FSPA,,0.0,8,590,0,590,73.75,0.0,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:16:05.620743,0.000482,udp,166.248.34.198,45727.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:11.798826,61.184219,tcp,147.32.84.165,3163.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:16:13.001516,0.000304,udp,147.32.84.59,50911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,86,224,155.0,0.27741935483870966,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:16:24.021707,0.000445,udp,122.201.44.56,29998.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:29.424340,0.00038,udp,147.32.84.170,53454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:29.425223,0.000353,udp,147.32.84.170,49147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:29.426418,0.017846,tcp,147.32.84.170,40033.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:34.072010,0.000373,udp,147.32.84.170,57149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:34.972911,0.000264,udp,147.32.85.25,38678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:16:35.198611,0.000272,udp,147.32.84.138,60187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:16:39.426603,0.018339,tcp,147.32.84.170,60628.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:48.307411,0.002269,udp,41.78.17.181,29062.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:49.424631,0.000464,udp,147.32.84.170,42804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:16:50.108792,3015.736816,udp,203.206.45.209,65125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:55.663346,2819.141846,udp,82.234.77.199,19820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1065,929,136,266.25,0.8723004694835681,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:16:59.424693,0.000449,udp,147.32.84.170,34953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:04.954031,0.000257,udp,147.32.84.138,55197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:05.304461,0.359512,udp,147.32.84.229,13363.0,<->,111.251.80.92,58060.0,CON,0.0,0.0,4,3012,60,2952,753.0,0.0199203187250996,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:17:09.426090,0.000379,udp,147.32.84.170,46678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:09.878040,0.000431,udp,92.113.107.4,50806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:17:11.215733,0.00029,udp,147.32.85.25,57898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:12.585623,61.226849,tcp,147.32.84.165,3164.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:17:14.346378,613.995667,udp,188.126.48.217,59687.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,6173,193,5980,617.3,0.03126518710513527,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:17:19.424508,0.00049,udp,147.32.84.170,59087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:19.426521,0.018343,tcp,147.32.84.170,60633.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:20.073442,3050.142334,udp,91.157.58.142,10915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1712,1220,492,107.0,0.7126168224299065,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:17:29.424685,0.000387,udp,147.32.84.170,60586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:29.426630,0.017974,tcp,147.32.84.170,60634.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:17:32.087363,0.000233,udp,147.32.85.25,43491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:39.305276,0.036694,udp,147.32.84.171,41130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:42.427252,0.000222,udp,147.32.85.25,38182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:43.322000,0.000237,udp,147.32.84.138,58680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:43.522469,0.573731,udp,92.230.68.174,59002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,132,103,117.5,0.5617021276595745,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:17:47.335912,0.00024,udp,147.32.84.138,39351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:47.667902,0.00025,udp,147.32.85.25,55573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:17:59.425269,0.000354,udp,147.32.84.170,51025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:02.459572,0.000327,udp,147.32.85.34,52849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:18:07.053828,0.000177,udp,147.32.84.170,50596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:07.054633,0.324866,tcp,147.32.84.170,44509.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:13.393640,61.254608,tcp,147.32.84.165,3165.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:18:14.132715,240.046432,tcp,147.32.84.170,44851.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:15.821043,4.301079,tcp,212.118.142.81,50207.0,->,147.32.84.229,443.0,FSRPA_SPA,0.0,0.0,11,841,526,315,76.45454545454545,0.6254458977407847,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:18:19.424833,0.000338,udp,147.32.84.170,45727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:24.319625,9.107434,tcp,84.42.157.102,33875.0,->,147.32.87.54,80.0,S_,0.0,,3,186,186,0,62.0,1.0,21,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:18:28.599965,38.620239,tcp,94.243.119.151,1909.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,25,2339,1088,1251,93.56,0.46515604959384355,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:18:29.426323,0.000342,udp,147.32.84.170,49455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:29.427321,0.018079,tcp,147.32.84.170,34141.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:34.499817,3072.999756,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,21,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 21:18:35.304720,0.000187,udp,147.32.84.138,44879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:18:38.074255,0.000324,udp,147.32.84.170,40610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:39.426777,0.01847,tcp,147.32.84.170,34143.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:40.142931,0.000583,udp,205.201.246.194,5085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:18:49.425001,0.000221,udp,147.32.84.170,33168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:18:50.718596,0.000249,udp,147.32.84.138,49666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:18:54.576443,0.000189,udp,147.32.85.25,35933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:18:55.678543,0.23275,tcp,147.32.86.20,1599.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:18:59.424916,0.000298,udp,147.32.84.170,48191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:19:01.655977,0.000568,udp,77.2.61.243,9716.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,73,469,271.0,0.13468634686346864,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:06.240528,0.309748,tcp,147.32.86.20,1608.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,26499,858,25641,803.0,0.0323785803237858,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:19:08.072199,0.084661,tcp,147.32.85.74,58268.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:19:09.071590,0.000243,udp,147.32.84.170,51490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:19:09.073698,0.210798,tcp,147.32.84.170,44529.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:19:09.426775,0.018329,tcp,147.32.84.170,40067.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:19:09.489928,0.000262,udp,147.32.86.20,57593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:19:09.801052,268.581909,udp,94.76.87.211,33918.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3211,167,3044,535.1666666666666,0.05200872002491436,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:14.241300,61.178738,tcp,147.32.84.165,3166.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:19:19.424900,0.000339,udp,147.32.84.170,36572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:19:21.354941,1949.622681,udp,147.32.84.229,13363.0,<->,109.175.161.136,20448.0,CON,0.0,0.0,8,984,736,248,123.0,0.7479674796747967,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:23.704346,1.982994,udp,200.222.65.142,38351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:24.427430,0.000178,udp,147.32.84.138,53562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:19:37.482676,0.000697,udp,201.191.198.120,48682.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:39.979778,0.003199,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,21,1,flow=Background,Background,-1 2011-08-16 21:19:43.058429,0.000361,udp,222.151.203.110,65447.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:19:49.427103,0.018201,tcp,147.32.84.170,34152.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:04.417496,0.00027,udp,147.32.85.34,54441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:04.428408,0.000309,udp,147.32.85.34,50586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:09.425790,0.000267,udp,147.32.84.170,52806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:09.426765,0.019689,tcp,147.32.84.170,35119.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:14.171571,0.000621,udp,24.62.88.184,10766.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,77,465,271.0,0.14206642066420663,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:14.395360,0.000487,udp,147.32.84.170,51326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:14.396820,300.254761,tcp,147.32.84.170,56359.0,->,74.125.232.200,443.0,FSPA_FSPA,0.0,0.0,60,15356,9078,6278,255.93333333333334,0.591169575410263,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:14.933230,0.000588,udp,88.134.106.57,53859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:15.003856,3042.617432,udp,149.106.47.72,56807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1464,1092,372,122.0,0.7459016393442623,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:15.049935,61.135967,tcp,147.32.84.165,3167.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:20:19.425797,0.0003,udp,147.32.84.170,35179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:19.766976,0.000227,udp,147.32.84.138,49228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:21.601020,0.000429,udp,46.158.165.156,24523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:24.533798,0.000217,udp,147.32.84.138,44001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:30.824635,0.000563,udp,213.146.167.48,20703.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,615,75,540,307.5,0.12195121951219512,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:33.915631,0.000321,udp,147.32.84.59,47063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:34.688462,3035.137695,udp,119.30.231.168,63094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:36.330059,3574.533203,udp,147.32.87.1,520.0,->,224.0.0.9,520.0,REQ,192.0,,130,31980,31980,0,246.0,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:20:37.079805,1379.78479,udp,147.32.84.229,13363.0,<->,91.77.20.127,60352.0,CON,0.0,0.0,4,681,135,546,170.25,0.19823788546255505,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:39.444876,0.000341,udp,147.32.84.170,55116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:41.071604,0.000209,udp,147.32.84.170,50695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:41.073599,0.213356,tcp,147.32.84.170,44543.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:20:48.395575,0.000407,udp,147.32.84.138,52507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:48.974126,0.000226,udp,147.32.84.59,42457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:53.311545,402.37149,udp,147.32.84.229,13363.0,<->,93.72.251.45,22349.0,CON,0.0,0.0,6,3184,150,3034,530.6666666666666,0.0471105527638191,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:55.930722,0.000388,udp,147.32.86.20,58510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:20:57.965112,0.000574,udp,24.213.130.196,26867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:20:58.027275,0.996655,tcp,147.32.84.171,42351.0,->,69.165.155.70,46318.0,FSPA_FSA,0.0,0.0,8,612,406,206,76.5,0.6633986928104575,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:21:01.480562,19.01502,tcp,66.87.20.215,45520.0,->,147.32.84.229,443.0,SA_FSA,0.0,0.0,5,350,206,144,70.0,0.5885714285714285,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:21:03.331860,0.004194,udp,125.194.215.234,2675.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3041,60,2981,760.25,0.019730351857941468,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:09.176596,3246.21167,udp,193.6.214.89,45251.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,836,223,613,139.33333333333334,0.26674641148325356,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:09.426756,0.017732,tcp,147.32.84.170,40083.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:10.627028,1029.963623,udp,24.0.214.207,42730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,416,236,180,69.33333333333333,0.5673076923076923,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:14.666377,846.096436,udp,141.2.219.85,64405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2202,682,1520,275.25,0.3097184377838329,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:15.786843,61.176121,tcp,147.32.84.165,3168.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:21:19.426845,0.018279,tcp,147.32.84.170,46500.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:27.428083,0.00072,udp,91.99.171.151,34891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,430,83,347,215.0,0.1930232558139535,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:29.425869,0.000286,udp,147.32.84.170,35869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:30.843522,1412.355591,udp,90.164.237.58,25840.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1671,958,713,167.1,0.5733093955715141,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:34.076777,0.000501,udp,114.150.216.219,6658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:39.425150,0.00041,udp,147.32.84.170,35404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:42.072959,0.000309,udp,147.32.84.170,47730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:43.501858,13.965004,tcp,95.64.160.136,49421.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,21,1572,786,786,74.85714285714286,0.5,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:21:44.074488,0.000351,udp,147.32.84.138,39211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:21:48.738973,0.000609,udp,86.180.222.204,27999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,75,476,275.5,0.13611615245009073,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:49.426035,0.00028,udp,147.32.84.170,58413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:21:51.075528,0.00987,udp,147.32.84.130,57695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,77,265,171.0,0.22514619883040934,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:21:51.544186,0.000407,udp,93.82.154.6,59197.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:21:51.996847,0.00033,udp,147.32.86.20,55274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:21:59.858321,23.67886,udp,147.32.84.229,13363.0,<->,114.178.173.25,10543.0,CON,0.0,0.0,4,665,544,121,166.25,0.8180451127819549,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:05.826466,3465.731934,udp,147.32.84.229,13363.0,<->,173.21.238.160,11637.0,CON,0.0,0.0,4,789,652,137,197.25,0.826362484157161,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:09.061026,0.000513,udp,96.40.139.166,5867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,75,483,279.0,0.13440860215053763,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:10.762392,0.001553,udp,208.54.7.129,46648.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:13.073546,0.233161,tcp,147.32.84.170,35241.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:15.582624,0.000405,udp,24.248.173.169,58324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:16.584994,61.148476,tcp,147.32.84.165,3169.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:22:16.602236,0.00056,udp,82.158.78.120,49408.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:22.640974,2519.096191,udp,82.112.144.165,18721.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1162,156,1006,290.5,0.1342512908777969,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:25.578312,47.01902,udp,147.32.84.229,13363.0,<->,94.178.59.41,36151.0,CON,0.0,0.0,4,663,542,121,165.75,0.8174962292609351,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:28.580494,0.071775,udp,147.32.84.229,13363.0,<->,94.156.106.182,35635.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:29.425242,0.00045,udp,147.32.84.170,59571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:29.426216,0.000357,udp,147.32.84.170,55005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:30.542774,0.000332,udp,147.32.84.138,37792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:22:32.277233,0.00053,udp,212.16.132.205,25005.0,->,147.32.84.1,14929.0,INT,0.0,,1,109,109,0,109.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:22:39.428651,0.017971,tcp,147.32.84.170,34498.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:44.074272,0.000309,udp,147.32.84.170,38593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:44.075186,0.000231,udp,147.32.84.170,55972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:22:45.793352,0.0,tcp,147.32.84.165,3170.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:45.793565,0.0,tcp,147.32.84.165,3171.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:45.805510,0.0,tcp,147.32.84.165,3173.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:45.976613,0.0,tcp,147.32.84.165,3174.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:45.976818,0.0,tcp,147.32.84.165,3175.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:45.986784,0.0,tcp,147.32.84.165,3177.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:46.177289,0.0,tcp,147.32.84.165,3178.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:46.177400,0.0,tcp,147.32.84.165,3179.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:46.938267,0.0,tcp,147.32.84.165,3182.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:47.739392,0.0,tcp,147.32.84.165,3181.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:48.331790,0.000444,udp,63.148.78.244,29689.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:49.953394,0.02013,udp,147.32.84.59,51379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:22:54.909516,0.158604,udp,147.32.84.229,13363.0,<->,216.249.235.25,35199.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:57.036147,1619.825439,udp,68.49.159.156,39081.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,945,379,566,236.25,0.40105820105820106,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:57.455567,3009.394531,udp,86.177.123.15,55811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:22:59.656310,0.0,tcp,147.32.84.165,3414.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656504,0.0,tcp,147.32.84.165,3412.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656515,0.0,tcp,147.32.84.165,3411.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656519,0.0,tcp,147.32.84.165,3418.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656569,0.0,tcp,147.32.84.165,3416.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656576,0.0,tcp,147.32.84.165,3415.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.656630,0.0,tcp,147.32.84.165,3422.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:22:59.693440,12.316077,tcp,209.85.210.132,40131.0,->,147.32.84.19,995.0,FSRPA_FSPA,0.0,0.0,70,25685,3147,22538,366.92857142857144,0.12252287327233793,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:23:04.840149,180.233536,udp,96.246.104.107,4732.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,629,130,499,157.25,0.2066772655007949,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:09.188172,0.00031,udp,147.32.86.20,63087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:23:09.426418,0.000416,udp,147.32.84.170,57895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:11.248921,0.000443,udp,147.32.84.170,37911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:11.285647,0.000278,udp,147.32.84.170,50134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:11.674017,0.0,tcp,147.32.84.165,3652.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674112,0.0,tcp,147.32.84.165,3651.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674118,0.0,tcp,147.32.84.165,3654.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674171,0.0,tcp,147.32.84.165,3656.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674206,0.0,tcp,147.32.84.165,3655.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674257,0.0,tcp,147.32.84.165,3658.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:11.674317,0.0,tcp,147.32.84.165,3660.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:12.274906,0.0,tcp,147.32.84.165,3663.0,->,147.33.84.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:12.310870,3583.134766,udp,147.32.84.229,13363.0,<->,114.43.110.107,64499.0,CON,0.0,0.0,143,21893,10761,11132,153.0979020979021,0.4915269720915361,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:12.437450,0.20601,tcp,147.32.86.20,1825.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:23:13.123825,0.42867,tcp,147.32.84.170,59514.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:13.544735,0.317258,tcp,147.32.84.170,59515.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:14.122616,0.385501,tcp,147.32.84.170,51571.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:23.691167,61.093956,tcp,147.32.84.165,3803.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:23:23.691182,0.0,tcp,147.32.84.165,3895.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.691245,0.0,tcp,147.32.84.165,3893.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.691250,0.0,tcp,147.32.84.165,3892.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.691364,0.0,tcp,147.32.84.165,3899.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.712225,0.0,tcp,147.32.84.165,3897.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.712239,0.0,tcp,147.32.84.165,3896.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:23.712799,0.0,tcp,147.32.84.165,3903.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:24.291620,0.0,tcp,147.32.84.165,3905.0,->,192.168.0.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:24.514304,0.000195,udp,147.32.84.138,58420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:23:29.427328,0.018296,tcp,147.32.84.170,56872.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:35.708642,0.0,tcp,147.32.84.165,4132.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.708662,0.0,tcp,147.32.84.165,4135.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.708898,0.0,tcp,147.32.84.165,4133.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.708914,0.0,tcp,147.32.84.165,4136.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.708963,0.0,tcp,147.32.84.165,4139.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.709089,0.0,tcp,147.32.84.165,4137.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:35.709152,0.0,tcp,147.32.84.165,4140.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:36.309437,0.0,tcp,147.32.84.165,4147.0,->,147.32.79.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:39.429196,0.017953,tcp,147.32.84.170,46980.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:40.792693,0.003733,udp,95.190.222.241,36592.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3041,60,2981,760.25,0.019730351857941468,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:41.013450,3262.661865,udp,188.233.21.116,45381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:44.867307,0.000556,udp,67.188.157.128,35481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:46.075762,0.230361,tcp,147.32.84.170,35261.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:47.726103,0.0,tcp,147.32.84.165,4326.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:47.726117,0.0,tcp,147.32.84.165,4328.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:47.726122,0.0,tcp,147.32.84.165,4329.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:47.726127,0.0,tcp,147.32.84.165,4331.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:47.726284,0.0,tcp,147.32.84.165,4332.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:47.726298,0.0,tcp,147.32.84.165,4334.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:48.062929,0.001494,udp,70.35.70.29,59511.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,571,511,60,285.5,0.8949211908931699,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:48.922135,3046.423584,udp,86.106.233.134,44910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:23:49.258490,0.000208,udp,147.32.84.59,38287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:23:49.427590,0.018093,tcp,147.32.84.170,36140.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:23:52.250899,0.20755,tcp,147.32.86.20,1859.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:23:56.792808,0.036135,udp,147.32.84.130,52473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,86,266,176.0,0.24431818181818182,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:23:59.743004,0.0,tcp,147.32.84.165,4506.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:59.743019,0.0,tcp,147.32.84.165,4508.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:59.743150,0.0,tcp,147.32.84.165,4509.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:59.743164,0.0,tcp,147.32.84.165,4511.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:59.743169,0.0,tcp,147.32.84.165,4512.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:23:59.743279,0.0,tcp,147.32.84.165,4515.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:00.344332,0.0,tcp,147.32.84.165,4516.0,->,192.168.1.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:00.781601,1405.262085,udp,87.195.247.11,14651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,118,18884,8791,10093,160.03389830508473,0.4655263715314552,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:01.334680,0.000136,udp,147.32.85.25,49136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:01.433918,0.000291,udp,147.32.85.25,34332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:01.891924,0.161231,udp,147.32.84.229,13363.0,<->,71.89.105.25,2333.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:03.190049,0.000242,udp,147.32.85.34,49980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:03.220206,0.000317,udp,147.32.85.34,49440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:05.801904,0.000279,udp,147.32.84.138,59941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:06.586639,0.000225,udp,147.32.85.25,38194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:09.184580,2512.408447,udp,72.189.14.149,27598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,414,234,180,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:09.426386,0.000414,udp,147.32.84.170,34197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:24:10.302434,1965.833618,udp,86.26.5.228,57651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1416,1044,372,118.0,0.7372881355932204,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:10.794559,1183.876831,udp,67.167.1.4,42379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:11.760492,0.0,tcp,147.32.84.165,4689.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:11.760506,0.0,tcp,147.32.84.165,4687.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:11.760511,0.0,tcp,147.32.84.165,4692.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:11.760644,0.0,tcp,147.32.84.165,4690.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:11.760657,0.0,tcp,147.32.84.165,4695.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:11.760661,0.0,tcp,147.32.84.165,4693.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:12.361373,0.0,tcp,147.32.84.165,4698.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:16.639974,0.000244,udp,147.32.84.138,41674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:24:17.066468,0.000241,udp,147.32.84.170,39473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:24:22.119754,2438.414062,udp,85.226.186.13,53489.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:23.777534,0.0,tcp,147.32.84.165,4867.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:23.777544,0.0,tcp,147.32.84.165,4869.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:23.777721,0.0,tcp,147.32.84.165,4870.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:23.777733,0.0,tcp,147.32.84.165,4872.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:23.777798,0.0,tcp,147.32.84.165,4873.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:23.777848,0.0,tcp,147.32.84.165,4875.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:24.278030,3577.614502,udp,24.58.212.87,61630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,124,21442,10635,10807,172.91935483870967,0.49598918011379534,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:26.150960,0.000701,udp,190.177.140.117,19144.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:26.365410,2423.696533,udp,219.44.107.88,55058.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:29.427431,0.018107,tcp,147.32.84.170,46987.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:24:30.726649,5.03221,udp,92.25.107.100,12001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,805,214,591,134.16666666666666,0.26583850931677017,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:31.658428,0.000381,udp,200.2.133.198,37682.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:35.795444,61.060986,tcp,147.32.84.165,4906.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:24:35.795526,0.0,tcp,147.32.84.165,1069.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:35.795607,0.0,tcp,147.32.84.165,1071.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:35.795713,0.0,tcp,147.32.84.165,1073.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:35.795788,0.0,tcp,147.32.84.165,1075.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:35.797567,0.0,tcp,147.32.84.165,1077.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:36.396285,0.0,tcp,147.32.84.165,1079.0,->,147.32.81.38,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:39.427714,0.017844,tcp,147.32.84.170,36146.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:24:47.812452,0.0,tcp,147.32.84.165,1189.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:47.812466,0.0,tcp,147.32.84.165,1191.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:47.814744,0.0,tcp,147.32.84.165,1193.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:48.413780,0.0,tcp,147.32.84.165,1195.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:48.413794,0.0,tcp,147.32.84.165,1197.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:57.149199,3582.980957,udp,24.231.148.62,13240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,124,22488,11749,10739,181.3548387096774,0.5224564212024191,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:24:59.426532,0.00025,udp,147.32.84.170,43306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:24:59.829722,0.0,tcp,147.32.84.165,1309.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:59.829736,0.0,tcp,147.32.84.165,1311.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:59.829836,0.0,tcp,147.32.84.165,1313.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:24:59.870469,0.000415,udp,24.132.75.60,50211.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:00.431053,0.0,tcp,147.32.84.165,1315.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:00.431055,0.0,tcp,147.32.84.165,1317.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:05.247424,3569.042236,udp,113.254.184.225,33151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,119,20528,10005,10523,172.50420168067228,0.48738308651597817,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:11.847505,0.0,tcp,147.32.84.165,1429.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:11.847520,0.0,tcp,147.32.84.165,1431.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:11.847673,0.0,tcp,147.32.84.165,1433.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:12.447821,0.0,tcp,147.32.84.165,1435.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:12.447834,0.0,tcp,147.32.84.165,1437.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:16.593234,0.197669,tcp,147.32.84.130,50294.0,->,66.150.167.189,80.0,SR_SA,0.0,0.0,3,192,126,66,64.0,0.65625,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:25:18.214241,0.000233,udp,147.32.84.138,41162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:25:19.138179,0.000175,udp,147.32.85.25,57116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:25:19.427726,0.017686,tcp,147.32.84.170,34529.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:25:23.864443,0.0,tcp,147.32.84.165,1549.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:23.864638,0.0,tcp,147.32.84.165,1551.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:23.864779,0.0,tcp,147.32.84.165,1553.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:24.331219,0.000309,udp,147.32.85.25,54743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,434,82,352,217.0,0.1889400921658986,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:25:24.465122,0.0,tcp,147.32.84.165,1555.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:24.465211,0.0,tcp,147.32.84.165,1557.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:27.127195,3102.364014,udp,203.250.65.230,51414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:27.929156,0.000623,udp,216.6.159.165,54036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,82,490,286.0,0.14335664335664336,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:29.388468,1315.543335,udp,147.32.84.229,13363.0,<->,128.173.223.196,26335.0,CON,0.0,0.0,12,828,468,360,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:29.530402,0.000215,udp,147.32.85.89,37151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:25:30.389090,1318.194092,udp,147.32.84.229,13363.0,<->,78.90.77.144,60229.0,CON,0.0,0.0,21,1434,894,540,68.28571428571429,0.6234309623430963,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:34.949176,0.000222,udp,147.32.85.25,60516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:25:35.882156,0.0,tcp,147.32.84.165,1669.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:35.882170,0.0,tcp,147.32.84.165,1668.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:35.882328,0.0,tcp,147.32.84.165,1671.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:35.882341,0.0,tcp,147.32.84.165,1670.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:35.882346,0.0,tcp,147.32.84.165,1673.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:36.483107,0.0,tcp,147.32.84.165,1674.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:36.483121,0.0,tcp,147.32.84.165,1675.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:36.483126,0.0,tcp,147.32.84.165,1676.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:36.483130,0.0,tcp,147.32.84.165,1677.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:36.483134,0.0,tcp,147.32.84.165,1678.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:39.425559,0.010033,udp,147.32.84.170,55291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:25:39.437306,0.018255,tcp,147.32.84.170,34531.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:25:44.948726,3355.849854,udp,213.21.81.179,6868.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2404,1784,620,120.2,0.7420965058236273,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:47.898898,61.067772,tcp,147.32.84.165,1694.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:25:47.898988,0.0,tcp,147.32.84.165,1790.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:47.899130,0.0,tcp,147.32.84.165,1792.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:48.251445,0.0,tcp,147.32.84.165,1794.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:48.499901,0.0,tcp,147.32.84.165,1796.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:48.499915,0.0,tcp,147.32.84.165,1798.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:49.074280,0.223994,tcp,147.32.84.170,35278.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:25:59.426321,0.000283,udp,147.32.84.170,43055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:25:59.769475,608.434692,udp,85.71.124.154,18148.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,481,357,124,120.25,0.7422037422037422,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:25:59.916677,0.0,tcp,147.32.84.165,1910.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:59.916790,0.0,tcp,147.32.84.165,1912.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:25:59.916856,0.0,tcp,147.32.84.165,1914.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:00.517684,0.0,tcp,147.32.84.165,1916.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:00.517697,0.0,tcp,147.32.84.165,1918.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:00.564714,0.000314,udp,147.32.84.138,49844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:03.067816,0.000207,udp,147.32.85.34,61231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:09.426511,0.000319,udp,147.32.84.170,55764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:11.934038,0.0,tcp,147.32.84.165,2030.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:11.934052,0.0,tcp,147.32.84.165,2029.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:11.934107,0.0,tcp,147.32.84.165,2032.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:11.934235,0.0,tcp,147.32.84.165,2031.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:11.934248,0.0,tcp,147.32.84.165,2034.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:12.534728,0.0,tcp,147.32.84.165,2035.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:12.534809,0.0,tcp,147.32.84.165,2036.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:12.534816,0.0,tcp,147.32.84.165,2037.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:12.534858,0.0,tcp,147.32.84.165,2038.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:12.534926,0.0,tcp,147.32.84.165,2039.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:19.427096,0.000433,udp,147.32.84.170,40861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:19.428144,0.000438,udp,147.32.84.170,56135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:19.429213,0.018607,tcp,147.32.84.170,50876.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:20.066853,0.219432,tcp,147.32.84.170,59166.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:22.839149,0.000181,udp,147.32.84.138,32964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:23.951256,0.0,tcp,147.32.84.165,2150.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:23.951325,0.0,tcp,147.32.84.165,2149.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:23.951330,0.0,tcp,147.32.84.165,2152.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:23.951383,0.0,tcp,147.32.84.165,2151.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:23.951389,0.0,tcp,147.32.84.165,2154.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.552134,0.0,tcp,147.32.84.165,2155.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.552149,0.0,tcp,147.32.84.165,2156.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.552156,0.0,tcp,147.32.84.165,2157.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.552244,0.0,tcp,147.32.84.165,2158.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.552258,0.0,tcp,147.32.84.165,2159.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:24.733507,0.000562,udp,178.123.31.219,17043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:26:32.710296,3022.690674,udp,46.223.112.179,16207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:26:34.072577,0.000391,udp,70.188.189.224,20171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:26:35.010570,8.997402,tcp,147.32.84.171,57757.0,->,85.226.59.194,44986.0,S_,0.0,,3,222,222,0,74.0,1.0,21,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:26:35.969869,0.0,tcp,147.32.84.165,2270.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:35.969884,0.0,tcp,147.32.84.165,2269.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:35.969889,0.0,tcp,147.32.84.165,2272.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:35.969941,0.0,tcp,147.32.84.165,2271.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:35.969946,0.0,tcp,147.32.84.165,2274.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:36.570419,0.0,tcp,147.32.84.165,2275.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:36.570437,0.0,tcp,147.32.84.165,2276.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:36.570442,0.0,tcp,147.32.84.165,2277.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:36.570446,0.0,tcp,147.32.84.165,2278.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:36.570450,0.0,tcp,147.32.84.165,2279.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:39.426649,0.000415,udp,147.32.84.170,58073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:39.427635,0.000229,udp,147.32.84.170,34420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:41.215123,0.000225,udp,147.32.84.138,35668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:46.066509,0.001561,udp,85.181.144.104,55099.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,517,457,60,258.5,0.8839458413926499,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:26:47.987034,0.0,tcp,147.32.84.165,2390.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:47.987053,0.0,tcp,147.32.84.165,2389.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:47.987058,0.0,tcp,147.32.84.165,2392.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:47.987063,0.0,tcp,147.32.84.165,2391.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:47.987097,0.0,tcp,147.32.84.165,2394.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:48.587570,0.0,tcp,147.32.84.165,2395.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:48.587661,0.0,tcp,147.32.84.165,2396.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:48.587711,0.0,tcp,147.32.84.165,2397.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:48.587718,0.0,tcp,147.32.84.165,2398.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:48.587761,0.0,tcp,147.32.84.165,2399.0,->,147.32.88.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:26:49.426723,0.0004,udp,147.32.84.170,47452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:49.428510,0.017793,tcp,147.32.84.170,33868.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:50.073122,0.000231,udp,147.32.84.170,47934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:50.075102,0.221901,tcp,147.32.84.170,59170.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:26:51.257205,0.000304,udp,147.32.84.138,47884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:53.984382,0.000235,udp,147.32.84.138,44520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:26:59.426779,0.000329,udp,147.32.84.170,41915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:00.004328,61.080978,tcp,147.32.84.165,2415.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:27:00.004425,0.0,tcp,147.32.84.165,2511.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.004436,0.0,tcp,147.32.84.165,2510.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.004442,0.0,tcp,147.32.84.165,2513.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.004577,0.0,tcp,147.32.84.165,2512.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.366498,169.596848,udp,147.32.84.229,13363.0,<->,2.94.159.123,20793.0,CON,0.0,0.0,4,728,607,121,182.0,0.8337912087912088,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:00.369981,0.0,tcp,147.32.84.165,2515.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.605430,0.0,tcp,147.32.84.165,2516.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.605445,0.0,tcp,147.32.84.165,2517.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.605450,0.0,tcp,147.32.84.165,2518.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.605454,0.0,tcp,147.32.84.165,2519.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.605500,0.0,tcp,147.32.84.165,2520.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,21,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 21:27:00.768928,1149.730347,udp,78.232.141.29,39587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,3828,120,3708,425.3333333333333,0.03134796238244514,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:09.426602,0.000487,udp,147.32.84.170,41854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:11.903087,19.190742,icmp,86.49.116.224,8.0,<->,147.32.86.92,22197.0,ECO,0.0,0.0,40,3920,1960,1960,98.0,0.5,21,0,flow=Background,Background,-1 2011-08-16 21:27:19.428870,0.017963,tcp,147.32.84.170,50884.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:21.074385,0.000331,udp,147.32.84.170,40848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:21.419267,0.194611,udp,147.32.84.229,13363.0,<->,128.218.141.12,29090.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:22.664178,521.216553,udp,147.32.84.229,13363.0,<->,78.139.30.7,4933.0,CON,0.0,0.0,8,3768,717,3051,471.0,0.19028662420382167,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:29.426866,0.000404,udp,147.32.84.170,54241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:31.291906,1169.742676,udp,147.32.84.229,13363.0,<->,88.167.52.6,52268.0,CON,0.0,0.0,12,3975,474,3501,331.25,0.11924528301886793,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:32.997151,0.000152,udp,147.32.84.138,34463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:27:33.520902,6.489478,tcp,66.249.72.182,57359.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,9848,1060,8788,492.4,0.10763606823720552,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:27:41.176552,2466.241455,udp,174.88.67.68,29535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,466,342,124,116.5,0.7339055793991416,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:49.427743,0.000348,udp,147.32.84.170,57152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:51.900526,3013.620117,udp,147.32.85.56,44076.0,<->,216.80.65.100,62931.0,CON,0.0,0.0,12,810,450,360,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:52.074705,0.000186,udp,147.32.84.170,59820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:27:59.209265,0.111137,udp,147.32.84.229,13363.0,<->,109.232.117.254,38476.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:27:59.427711,0.000293,udp,147.32.84.170,56231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:00.732796,61.130657,tcp,147.32.84.165,2530.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:28:02.511165,0.000375,udp,147.32.86.20,54066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:02.913484,0.000331,udp,147.32.85.34,60412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:08.907120,0.000631,udp,217.111.199.190,19602.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:28:09.427729,0.000326,udp,147.32.84.170,48930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:10.388436,0.00041,udp,86.135.164.25,28829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:28:14.133611,0.000363,udp,147.32.84.170,34421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:14.134367,0.00035,udp,147.32.84.170,46428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:14.135251,240.04715,tcp,147.32.84.170,36592.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:14.135291,391.499115,tcp,147.32.84.170,36593.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,100,37573,27487,10086,375.73,0.7315625582199984,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:18.349549,0.000216,udp,147.32.84.138,51753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:19.426719,0.00039,udp,147.32.84.170,57356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:19.427720,0.000326,udp,147.32.84.170,45157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:22.013952,0.000318,udp,147.32.86.20,64078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:23.071427,0.230803,tcp,147.32.84.170,59194.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:29.426837,0.000547,udp,147.32.84.170,47959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:34.392090,0.000524,udp,71.209.35.57,59801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,74,489,281.5,0.13143872113676733,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:28:39.426925,0.000445,udp,147.32.84.170,42415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:41.063588,8.000683,udp,147.32.87.48,2058.0,->,147.32.86.241,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:28:42.093464,0.00031,udp,147.32.85.25,57381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:42.915410,0.000289,udp,147.32.84.138,38581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:42.939314,0.000193,udp,147.32.84.138,50548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:43.823867,1828.664429,udp,71.206.225.126,58459.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1073,535,538,268.25,0.49860205032618826,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:28:49.396584,0.000341,udp,68.46.146.76,34267.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:28:49.429554,0.017911,tcp,147.32.84.170,53012.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:53.823830,0.00025,udp,147.32.84.138,55242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:28:54.074938,0.000236,udp,147.32.84.170,49842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:59.429119,0.018238,tcp,147.32.84.170,50910.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:28:59.640432,9.00019,tcp,147.32.84.179,52113.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,21,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:29:01.290698,2.47587,tcp,66.249.66.250,43205.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1554,722,832,155.4,0.4646074646074646,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:29:01.440825,61.237049,tcp,147.32.84.165,2531.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:29:01.739932,0.000506,udp,24.74.31.54,36334.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:04.234079,0.000395,udp,147.32.84.188,53158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:05.826717,0.000265,udp,147.32.84.59,33264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:08.626848,20.904343,tcp,41.239.222.5,4449.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,10,822,368,454,82.2,0.44768856447688565,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:29:19.427799,0.000458,udp,147.32.84.170,50667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:29:20.754738,0.000386,udp,78.139.144.112,21203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:22.781812,3062.633545,udp,187.39.245.36,60856.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:25.075302,0.000279,udp,147.32.84.170,36770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:29:26.166055,0.000218,udp,147.32.84.138,35603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:29.428890,0.000389,udp,147.32.84.170,55049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:29:30.786423,1355.870972,udp,178.2.52.132,63571.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,960,712,248,120.0,0.7416666666666667,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:32.924613,0.000327,udp,147.32.84.138,44649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:33.901653,0.0003,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 21:29:34.508753,0.000253,udp,147.32.85.25,56492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:35.141763,0.000358,udp,147.32.86.20,63128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:35.913185,0.000329,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,21,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 21:29:37.915079,0.00027,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,21,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 21:29:39.427838,0.000544,udp,147.32.84.170,46757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:29:39.940202,3128.452148,udp,84.250.137.216,46495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:40.988299,0.000438,udp,147.32.84.138,39368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:48.150029,0.000249,udp,147.32.84.138,54323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:49.766927,0.20634,tcp,147.32.86.20,2106.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:29:49.977203,0.000105,udp,147.32.84.138,33044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:50.018558,0.604317,udp,81.81.17.174,50996.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,392,207,185,65.33333333333333,0.5280612244897959,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:52.106357,0.000112,udp,147.32.84.138,55951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:54.706412,0.000356,udp,147.32.85.34,58674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:29:56.075894,0.000243,udp,147.32.84.170,50380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:29:58.910378,0.000547,udp,87.120.29.177,52141.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:29:59.428119,0.000389,udp,147.32.84.170,55852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:01.286938,0.000215,udp,147.32.87.36,33702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,21,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 21:30:02.279207,61.241009,tcp,147.32.84.165,2578.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:30:02.763304,0.000215,udp,147.32.85.34,53731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:04.870428,0.066973,udp,86.145.79.222,49184.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:08.087063,0.000388,udp,147.32.86.92,59577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:09.429886,0.018076,tcp,147.32.84.170,33907.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:11.692467,2419.084961,udp,78.141.179.7,34030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,292,172,120,73.0,0.589041095890411,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:15.869860,0.246918,udp,147.32.84.170,44441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:16.609635,0.246422,udp,147.32.84.170,49133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:17.191631,0.0003,udp,147.32.84.138,52177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:18.726397,0.000224,udp,147.32.84.138,42959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:19.536921,1202.427979,udp,62.212.44.186,2605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,732,546,186,122.0,0.7459016393442623,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:24.062072,0.001867,udp,64.237.18.94,2751.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:26.077335,0.000272,udp,147.32.84.170,45369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:26.079414,0.272382,tcp,147.32.84.170,59211.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:30:26.748831,0.000547,udp,77.187.208.227,50226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,75,471,273.0,0.13736263736263737,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:34.573928,0.000335,udp,147.32.85.89,45571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:43.933891,3351.320557,udp,91.76.93.127,21247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:47.277026,3177.015625,udp,147.32.84.229,13363.0,<->,178.116.221.13,18864.0,CON,0.0,0.0,10,3544,351,3193,354.4,0.09904063205417607,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:50.720183,2.3e-05,udp,147.32.84.138,54102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:30:54.021851,6.386202,udp,200.117.132.95,33284.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,982,572,410,245.5,0.5824847250509165,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:30:57.066216,0.000261,udp,147.32.84.170,55736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:00.302263,0.000317,udp,147.32.84.171,36119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,383,71,312,191.5,0.185378590078329,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:31:02.968772,886.834412,udp,147.32.84.229,13363.0,<->,201.213.218.235,50268.0,CON,0.0,0.0,4,1095,548,547,273.75,0.5004566210045662,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:03.086869,70.354515,tcp,147.32.84.165,2579.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,632,639,105.91666666666667,0.4972462627852085,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:31:03.498609,0.000428,udp,85.26.184.204,43666.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:09.428213,0.000449,udp,147.32.84.170,54311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:09.429185,0.000345,udp,147.32.84.170,51971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:19.428269,0.000402,udp,147.32.84.170,45587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:21.848610,8e-06,icmp,147.32.86.96,,<-,147.32.87.52,36656.0,ECR,,0.0,2,196,0,196,98.0,0.0,21,0,flow=Background,Background,-1 2011-08-16 21:31:24.501050,0.000184,udp,147.32.84.138,32887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:31:28.019123,0.377948,udp,147.32.84.229,13363.0,<->,118.169.185.134,49629.0,CON,0.0,0.0,4,685,564,121,171.25,0.8233576642335766,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:29.430349,0.018155,tcp,147.32.84.170,57625.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:32.911306,0.000352,udp,147.32.85.25,50389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:31:39.428975,0.000244,udp,147.32.84.170,59528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:31:42.391523,7.553396,tcp,66.249.72.176,34390.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,44,25119,2053,23066,570.8863636363636,0.08173096062741352,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:31:45.483203,6.08758,udp,147.32.84.229,13363.0,->,208.101.96.159,45347.0,INT,0.0,,3,534,534,0,178.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:31:46.062383,0.039672,udp,147.32.84.229,13363.0,<->,85.24.199.120,14358.0,CON,0.0,0.0,2,544,484,60,272.0,0.8897058823529411,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:46.349594,0.000444,udp,74.198.9.235,54930.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:53.355709,0.0009,udp,117.254.56.85,21654.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,74,472,273.0,0.13553113553113552,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:31:57.074670,0.000483,udp,78.90.42.190,37024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:01.832446,0.000212,udp,147.32.84.138,50253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:02.559897,0.000213,udp,147.32.85.34,65100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:02.582295,0.00029,udp,147.32.85.34,55591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:02.587450,0.000234,udp,147.32.85.34,60816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:03.276683,2040.018433,udp,147.32.84.229,13363.0,<->,77.47.198.26,26274.0,CON,0.0,0.0,8,6112,120,5992,764.0,0.01963350785340314,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:06.939058,61.302155,tcp,147.32.84.165,2580.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:32:07.910299,0.000393,icmp,147.32.87.249,,<-,147.32.87.49,2.0,RED,,0.0,2,148,0,148,74.0,0.0,21,1,flow=Background,Background,-1 2011-08-16 21:32:09.428262,0.000414,udp,147.32.84.170,43054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:09.430383,0.017806,tcp,147.32.84.170,57630.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:11.268747,0.000272,udp,147.32.84.59,39896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:14.900464,0.000535,udp,86.120.147.116,57988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,574,73,501,287.0,0.12717770034843207,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:17.274332,1696.31604,udp,147.32.84.229,13363.0,<->,76.20.219.71,20135.0,CON,0.0,0.0,6,3356,124,3232,559.3333333333334,0.03694874851013111,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:17.650130,0.940826,tcp,147.32.86.20,2235.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,97,96428,1706,94722,994.1030927835052,0.0176919566930767,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:32:19.067473,0.159661,udp,147.32.84.229,13363.0,<->,68.12.4.231,2488.0,CON,0.0,0.0,2,151,91,60,75.5,0.6026490066225165,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:19.429643,0.000329,udp,147.32.84.170,52603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:20.162910,0.000167,udp,147.32.84.138,43734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:26.643071,0.071913,udp,147.32.84.229,13363.0,<->,88.125.147.165,55041.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:28.075368,0.000275,udp,147.32.84.170,42713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:29.430673,0.000266,udp,147.32.84.170,55277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:29.431668,0.018332,tcp,147.32.84.170,53016.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:31.961322,0.000187,udp,147.32.84.138,55505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:32.266417,0.000563,udp,203.190.2.86,58472.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:36.511730,1256.013062,udp,190.18.114.198,63490.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,736,550,186,122.66666666666667,0.7472826086956522,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:43.718080,0.000187,udp,147.32.84.138,44216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:47.344644,1809.538818,udp,195.41.138.111,62835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,719,533,186,119.83333333333333,0.741307371349096,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:49.428397,0.00035,udp,147.32.84.170,55230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:49.430432,0.017943,tcp,147.32.84.170,34333.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:54.782062,0.000469,udp,108.98.52.14,41499.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:56.135616,0.000497,udp,188.220.211.98,49174.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:32:57.860989,0.000315,udp,147.32.84.138,48683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:32:59.077696,0.000314,udp,147.32.84.170,55471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:59.078605,0.248789,tcp,147.32.84.170,55980.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:32:59.428437,0.000464,udp,147.32.84.170,44805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:03.558675,3541.12085,tcp,151.25.23.39,26688.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,797,133993,93717,40276,168.12170639899622,0.6994171337308666,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:33:04.989923,0.010489,udp,147.32.84.19,57355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,74,166,120.0,0.30833333333333335,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:07.807953,61.30024,tcp,147.32.84.165,2581.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:33:09.428404,0.000498,udp,147.32.84.170,53285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:09.429442,0.000357,udp,147.32.84.170,55910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:10.586813,0.000388,udp,147.32.84.138,57838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:14.059583,0.392035,tcp,147.32.84.170,58163.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:19.051093,3596.537598,tcp,196.210.194.138,57095.0,->,147.32.84.229,13363.0,SPAC_SPA,0.0,0.0,489,64497,43110,21387,131.8957055214724,0.6684031815433276,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:33:19.431207,0.018263,tcp,147.32.84.170,58050.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:22.816321,6.00761,udp,147.32.84.229,13363.0,->,137.112.13.203,55048.0,INT,0.0,,3,1431,1431,0,477.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:33:23.535826,0.000429,udp,82.113.99.11,15629.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:33:23.914809,0.000272,udp,147.32.84.138,54007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:25.844860,0.000428,udp,213.6.226.139,23906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:33:29.429825,0.000425,udp,147.32.84.170,44850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:30.075216,0.000318,udp,147.32.84.170,47911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:31.291128,3514.183105,udp,147.32.84.229,13363.0,<->,78.102.26.148,53443.0,CON,0.0,0.0,14,3716,367,3349,265.42857142857144,0.098762109795479,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:33:31.778462,0.000178,udp,147.32.84.138,59004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:32.349865,0.181788,udp,147.32.84.229,13363.0,<->,174.4.171.253,34226.0,CON,0.0,0.0,2,569,509,60,284.5,0.8945518453427065,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:33:35.109059,0.0,tcp,81.214.189.108,25163.0,?>,147.32.84.171,48821.0,RA_,0.0,,1,60,60,0,60.0,1.0,21,0,flow=Background,Background,-1 2011-08-16 21:33:39.431375,0.018184,tcp,147.32.84.170,53031.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:33:40.997242,0.000259,udp,147.32.85.25,42506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:43.533693,0.000261,udp,147.32.84.138,55546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:47.153816,119.89566,tcp,147.32.85.88,58199.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,1660,1035,625,150.9090909090909,0.6234939759036144,21,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 21:33:50.071579,0.000236,udp,147.32.84.138,39868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:33:58.002125,0.002006,tcp,147.32.86.89,4365.0,->,147.32.87.54,8081.0,_FSPA,,0.0,6,970,0,970,161.66666666666666,0.0,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:33:59.430697,0.000316,udp,147.32.84.170,48320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:01.076310,0.000341,udp,147.32.84.170,52580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:01.077788,0.222844,tcp,147.32.84.170,55995.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:06.740802,0.000217,udp,147.32.85.25,42016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:08.674952,61.3008,tcp,147.32.84.165,2582.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:34:09.232474,15.069586,tcp,209.85.228.90,57136.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,10,1505,741,764,150.5,0.49235880398671095,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:34:17.131639,0.000269,udp,147.32.85.25,38629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:17.289531,0.000221,udp,147.32.85.25,47452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:19.428583,0.000495,udp,147.32.84.170,50637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:25.822849,274.789276,udp,178.192.85.56,59027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,488,364,124,122.0,0.7459016393442623,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:27.507377,0.000226,udp,147.32.85.25,50139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:28.713957,3029.471436,udp,46.13.16.9,13399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1552,1038,514,129.33333333333334,0.6688144329896907,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:29.189538,0.000665,udp,24.57.104.114,19671.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,197,131,66,98.5,0.6649746192893401,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:29.429046,0.000386,udp,147.32.84.170,46268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:29.429892,0.000321,udp,147.32.84.170,33196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:32.078860,0.00029,udp,147.32.84.170,45806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:32.080164,0.232666,tcp,147.32.84.170,55999.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:32.772938,3027.285889,udp,149.169.138.12,18515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:34.485663,0.001507,udp,79.190.155.246,3696.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:36.748132,2558.615234,udp,188.2.176.245,53176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,805,611,194,134.16666666666666,0.7590062111801242,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:39.430907,0.000199,udp,147.32.84.170,57685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:34:42.072534,0.000221,udp,147.32.84.138,54935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:53.124114,0.000245,udp,147.32.85.25,44284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:34:57.635657,0.00042,udp,98.229.83.76,22330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:34:59.429567,0.000384,udp,147.32.84.170,49298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:03.074803,0.000232,udp,147.32.84.170,54113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:03.075699,0.000334,udp,147.32.84.170,47998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:03.077025,0.24502,tcp,147.32.84.170,56003.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:04.955710,622.075867,udp,82.107.60.166,61488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,480,356,124,120.0,0.7416666666666667,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:09.429747,0.000393,udp,147.32.84.170,47207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:09.542245,64.156792,tcp,147.32.84.165,2583.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:35:11.856502,0.004395,tcp,77.75.76.115,52586.0,->,147.32.84.74,80.0,FSPA_FSPA,0.0,0.0,10,2030,1000,1030,203.0,0.49261083743842365,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:35:12.650840,0.000653,udp,91.66.56.183,1421.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:17.518536,0.247717,udp,147.32.84.170,38553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:18.842707,0.000342,udp,147.32.86.20,63177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:35:26.500669,1476.622559,udp,78.94.106.86,52204.0,<->,147.32.84.229,13363.0,CON,3.0,0.0,6,637,453,184,106.16666666666667,0.7111459968602826,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:26.649936,0.000617,udp,85.65.126.146,40743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:29.430581,0.018586,tcp,147.32.84.170,53046.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:29.954650,3516.040771,arp,147.32.87.49,,who,147.32.87.1,,CON,,,54,3240,1620,1620,60.0,0.5,21,,flow=Background,Background,-1 2011-08-16 21:35:32.655770,0.000293,udp,147.32.86.20,51676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:35:34.076004,0.00032,udp,147.32.84.170,51847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:34.076879,0.000305,udp,147.32.84.170,54368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:38.901726,0.000298,udp,147.32.84.138,39280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:35:39.449119,0.000558,udp,147.32.84.170,36789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:35:41.077590,0.00023,udp,147.32.84.138,59313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:35:41.875753,0.000507,udp,95.135.71.126,2362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:47.132762,0.003377,udp,77.127.63.140,49611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3037,60,2977,759.25,0.01975633849193283,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:48.003433,0.000647,udp,95.103.103.210,10949.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:35:49.430604,0.018411,tcp,147.32.84.170,34364.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:02.673409,0.000229,udp,147.32.85.34,52402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:36:02.700606,0.000279,udp,147.32.85.34,60693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:36:05.079249,0.000434,udp,147.32.84.170,33069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:10.545203,7e-05,tcp,147.32.80.7,41624.0,->,147.32.87.4,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:36:13.254449,61.312054,tcp,147.32.84.165,2584.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:36:19.431375,0.018521,tcp,147.32.84.170,52342.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:25.953620,0.000434,icmp,147.32.87.249,,<-,147.32.87.5,2.0,RED,,0.0,2,148,0,148,74.0,0.0,21,1,flow=Background,Background,-1 2011-08-16 21:36:26.185498,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,21,1,flow=Background,Background,-1 2011-08-16 21:36:26.908457,635.832397,udp,204.236.109.73,60811.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,462,338,124,115.5,0.7316017316017316,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:36:29.428809,0.000369,udp,147.32.84.170,34785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:35.245801,0.36687,udp,147.32.84.229,13363.0,<->,118.161.208.84,2632.0,CON,0.0,0.0,4,3019,60,2959,754.75,0.01987413050679033,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:36:36.078040,0.243898,tcp,147.32.84.170,59157.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:39.429502,0.000318,udp,147.32.84.170,50068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:40.273496,2539.22583,icmp,79.94.22.221,259.0,->,147.32.84.229,20318.0,URH,0.0,,15,2664,2664,0,177.6,1.0,21,0,flow=Background,Background,-1 2011-08-16 21:36:43.930269,0.000279,udp,147.32.84.21,43346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:36:44.225095,0.350547,udp,147.32.84.229,13363.0,<->,114.43.120.39,37653.0,CON,0.0,0.0,2,315,66,249,157.5,0.20952380952380953,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:36:47.215681,2899.033936,udp,94.209.97.116,40604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3579,134,3445,596.5,0.037440625873148926,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:36:49.430856,0.017718,tcp,147.32.84.170,50208.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:36:54.122509,0.000334,udp,147.32.84.138,35136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:36:59.430887,0.018081,tcp,147.32.84.170,59414.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:07.078663,0.214959,tcp,147.32.84.170,59161.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:13.604788,0.000452,udp,131.204.254.71,55497.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:37:14.132909,64.35675,tcp,147.32.84.165,2585.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:37:19.429736,0.000371,udp,147.32.84.170,38235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:19.430833,0.017914,tcp,147.32.84.170,33493.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:24.416790,0.000355,udp,147.32.84.138,57184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:37:24.431205,0.000294,udp,147.32.84.138,47988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:37:29.429761,0.000321,udp,147.32.84.170,38759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:33.253973,0.00036,udp,147.32.84.3,32831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:37:34.424505,0.000532,udp,89.215.52.177,7845.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:37:36.956598,0.000255,udp,147.32.84.59,51135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:37:37.076429,0.000287,udp,147.32.84.170,48664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:39.430721,0.018247,tcp,147.32.84.170,50215.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:49.430731,0.01822,tcp,147.32.84.170,50216.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:37:50.787343,0.000326,udp,147.32.86.20,65333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:37:53.277370,0.00029,udp,194.126.117.170,40212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:37:57.842675,3066.779541,udp,89.178.28.128,17955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:37:59.431062,0.017628,tcp,147.32.84.170,59422.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:03.476852,0.000276,udp,147.32.85.34,56432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:38:03.517230,0.000304,udp,147.32.85.34,50296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:38:04.224365,2082.264893,udp,217.211.65.95,56267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1482,540,942,370.5,0.3643724696356275,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:38:05.978708,1.459915,tcp,147.32.84.171,47988.0,->,71.49.225.122,56053.0,FSPA_FSPA,0.0,0.0,12,1512,596,916,126.0,0.3941798941798942,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:38:13.110958,0.256853,tcp,147.32.84.170,34006.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:13.633740,0.307754,tcp,147.32.84.170,34009.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:13.671457,3.00029,tcp,89.103.44.79,59483.0,->,147.32.86.179,58675.0,S_,0.0,,2,148,148,0,74.0,1.0,21,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 21:38:14.135633,0.000308,udp,147.32.84.170,44621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:14.544495,0.824752,tcp,147.32.84.170,55731.0,->,199.7.57.72,80.0,FSPA_FSPA,0.0,0.0,13,2793,786,2007,214.84615384615384,0.2814178302900107,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:18.056195,61.300732,tcp,147.32.84.165,2586.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:38:19.429943,0.000322,udp,147.32.84.170,44719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:19.430794,0.000311,udp,147.32.84.170,41885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:20.588788,1665.080566,udp,93.123.61.2,49367.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,279,159,120,69.75,0.5698924731182796,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:38:27.252566,0.000583,udp,84.198.178.228,42416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:38:34.697868,0.135214,tcp,147.32.86.20,2557.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,25654,853,24801,777.3939393939394,0.03325017541124191,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:38:39.077392,0.000394,udp,147.32.84.170,41201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:39.432175,0.018383,tcp,147.32.84.170,59441.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:40.513774,3.763831,tcp,189.13.232.162,1273.0,->,147.32.87.33,443.0,FSRPA_FSPA,0.0,0.0,11,1339,863,476,121.72727272727273,0.6445108289768484,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:38:43.798212,0.000293,udp,147.32.84.138,44956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:38:45.240380,3301.128662,udp,174.57.10.80,41982.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2246,573,1673,140.375,0.25512021371326804,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:38:49.431920,0.018217,tcp,147.32.84.170,32943.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:38:51.630322,3599.70166,udp,147.32.84.229,13363.0,<->,86.58.5.179,8295.0,CON,0.0,0.0,8,3304,217,3087,413.0,0.06567796610169492,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:39:07.308767,0.000333,udp,147.32.84.59,57735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:39:09.431861,0.018215,tcp,147.32.84.170,33520.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,8,544,272,272,68.0,0.5,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:12.972676,2232.227539,udp,79.24.93.107,64821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,976,728,248,122.0,0.7459016393442623,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:39:16.884735,0.000262,udp,147.32.84.138,56094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:39:18.923479,61.28611,tcp,147.32.84.165,2587.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:39:21.594465,0.001514,udp,147.32.87.48,2167.0,->,147.32.86.254,161.0,INT,0.0,,2,262,262,0,131.0,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:39:29.429984,0.000392,udp,147.32.84.170,45214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:29.432071,0.017685,tcp,147.32.84.170,59447.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:39.431092,0.000465,udp,147.32.84.170,45442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:39.650727,0.000221,udp,147.32.85.89,49695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:39:40.641077,0.000201,udp,147.32.84.138,52087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:39:41.078967,0.000329,udp,147.32.84.170,35331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:49.431802,0.017982,tcp,147.32.84.170,32951.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:52.802567,1.099483,udp,193.247.250.35,36378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,979,825,154,244.75,0.8426966292134831,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:39:55.249674,0.000201,udp,147.32.85.25,34313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:39:59.432176,0.017862,tcp,147.32.84.170,32952.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:39:59.805728,0.000258,udp,147.32.84.138,33483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:01.113596,0.000505,udp,147.32.84.186,34334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:03.387192,0.000381,udp,147.32.85.34,55143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:03.428070,0.000205,udp,147.32.85.34,54844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:07.036600,3587.975098,udp,147.32.84.13,53948.0,<->,82.208.56.89,123.0,CON,0.0,0.0,70,6300,3150,3150,90.0,0.5,21,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 21:40:07.447701,3127.0896,udp,70.49.188.75,26866.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:40:10.763047,2640.776855,udp,147.32.84.229,13363.0,<->,96.18.58.92,55525.0,CON,0.0,0.0,10,694,321,373,69.4,0.46253602305475505,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:40:11.033709,0.009858,udp,147.32.84.170,52486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:11.054797,240.257416,tcp,147.32.84.170,54973.0,->,209.85.149.141,80.0,FSPA_FSPA,0.0,0.0,20,2844,1011,1833,142.2,0.35548523206751054,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:12.075514,0.000221,udp,147.32.84.170,39911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:13.430506,0.000253,udp,147.32.84.138,50915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:16.695710,0.010135,udp,147.32.84.21,44420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:18.093578,0.000212,udp,147.32.84.59,50466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:19.781316,61.285995,tcp,147.32.84.165,2588.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:40:22.365241,0.924721,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,71,316,193.5,0.1834625322997416,21,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 21:40:23.290818,4.713477,tcp,147.32.84.165,2589.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,21,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 21:40:29.210486,3592.385986,udp,217.128.252.209,20367.0,->,147.32.86.239,161.0,INT,0.0,,184,22337,22337,0,121.39673913043478,1.0,21,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:40:31.493674,0.685152,tcp,147.32.84.164,56050.0,->,202.80.110.131,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,21,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 21:40:38.877999,6.004762,udp,147.32.84.229,13363.0,->,110.2.116.19,49458.0,INT,0.0,,3,1398,1398,0,466.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:40:43.074489,0.000456,udp,147.32.84.170,48433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:43.891989,0.949665,tcp,147.32.86.20,2671.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,98,95794,1766,94028,977.4897959183673,0.018435392613316073,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:40:46.455295,0.000222,udp,147.32.85.25,49687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:51.593324,0.000238,udp,147.32.84.138,55027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:40:54.957680,0.047181,udp,147.32.84.229,13363.0,<->,89.143.182.21,3549.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:40:59.430024,0.000458,udp,147.32.84.170,48141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:59.431062,0.000373,udp,147.32.84.170,40336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:40:59.432213,0.018198,tcp,147.32.84.170,35298.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:06.832235,1263.717651,udp,24.117.144.144,1353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:41:09.431083,0.000409,udp,147.32.84.170,42648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:11.892618,0.000107,udp,147.32.85.25,38411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:41:14.080630,0.000215,udp,147.32.84.170,35749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:14.082369,0.234547,tcp,147.32.84.170,59210.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:16.833206,132.565063,tcp,85.162.6.11,4559.0,->,147.32.87.38,80.0,SPA_SRPA,0.0,0.0,7,1167,691,476,166.71428571428572,0.5921165381319623,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:41:20.639204,67.339844,tcp,147.32.84.165,2590.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:41:26.936064,0.000176,udp,147.32.84.138,60432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:41:28.317463,0.000251,udp,147.32.84.138,57453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:41:29.430216,0.00037,udp,147.32.84.170,45727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:30.411774,0.000278,udp,147.32.84.138,43722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:41:33.896961,3044.235596,udp,93.107.144.217,39024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:41:40.106751,14.847729,udp,82.135.219.49,41317.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1247,834,413,103.91666666666667,0.6688051323175621,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:41:43.050287,0.0,tcp,64.40.8.45,2138.0,->,147.32.84.101,2138.0,SA_,0.0,,1,60,60,0,60.0,1.0,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:41:49.430287,0.000387,udp,147.32.84.170,39355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:59.431222,0.000457,udp,147.32.84.170,52820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:41:59.990773,3013.267334,udp,94.233.174.165,54413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:03.230131,0.000294,udp,147.32.85.34,64266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:42:03.293659,0.000308,udp,147.32.85.34,55994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:42:06.517092,0.000714,udp,174.112.8.86,21739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,947,76,871,473.5,0.08025343189017951,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:09.133439,0.00047,udp,119.226.66.35,48972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,582,74,508,291.0,0.12714776632302405,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:09.431210,0.000393,udp,147.32.84.170,43794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:09.432348,0.017939,tcp,147.32.84.170,59524.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:13.464091,0.000548,udp,209.149.99.2,43701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:15.077290,0.000248,udp,147.32.84.170,55321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:15.078119,0.000514,udp,147.32.84.170,47895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:17.305815,0.000421,udp,69.113.214.93,22124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:24.905977,0.000256,udp,147.32.84.138,36906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:42:26.060727,0.000583,udp,95.66.22.236,51316.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:27.545494,61.302097,tcp,147.32.84.165,2591.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:42:29.430976,0.000327,udp,147.32.84.170,48290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:29.431772,0.000282,udp,147.32.84.170,58742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:31.145232,1535.100464,udp,147.32.84.229,13363.0,<->,99.35.151.181,39300.0,CON,0.0,0.0,6,1333,236,1097,222.16666666666666,0.17704426106526633,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:42.217259,0.117504,udp,147.32.84.229,13363.0,<->,188.232.106.63,7228.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:42.444926,0.000487,udp,195.112.47.110,58307.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:44.805662,146.428329,udp,147.32.84.229,13363.0,<->,24.203.17.21,21994.0,CON,0.0,0.0,8,548,308,240,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:42:45.080934,0.222722,tcp,147.32.84.170,33677.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:42:47.326246,0.000259,udp,147.32.84.138,42511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:42:48.950572,0.001528,udp,95.135.1.39,32832.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:04.299322,0.000572,udp,58.93.128.152,53493.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,74,495,284.5,0.13005272407732865,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:05.661373,0.001687,udp,178.125.185.225,24472.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:13.471245,0.531762,tcp,147.32.84.170,37871.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:13.745369,0.29636,tcp,147.32.84.170,36608.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:15.252575,0.317083,udp,147.32.84.229,13363.0,<->,123.217.82.183,26215.0,CON,0.0,0.0,4,2985,60,2925,746.25,0.020100502512562814,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:16.078723,0.000327,udp,147.32.84.170,59108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:16.080086,0.215604,tcp,147.32.84.170,33687.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:28.413846,61.301781,tcp,147.32.84.165,2592.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:43:39.432328,0.018338,tcp,147.32.84.170,59154.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:45.013898,0.00165,udp,137.118.192.54,2338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:46.070123,0.000265,udp,147.32.84.170,55037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:49.120747,0.000688,udp,79.132.160.148,5841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,676,77,599,338.0,0.11390532544378698,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:43:49.431456,0.000364,udp,147.32.84.170,45573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:43:59.432416,0.018269,tcp,147.32.84.170,59157.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:44:01.337769,0.000258,udp,147.32.86.20,61027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:44:03.124381,0.000301,udp,147.32.85.34,63232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:44:03.157195,0.000223,udp,147.32.85.34,59052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:44:03.190969,0.000275,udp,147.32.85.34,63613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:44:04.962502,3479.671143,udp,147.32.84.25,46891.0,<->,82.208.56.89,123.0,CON,0.0,0.0,82,7380,3690,3690,90.0,0.5,21,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 21:44:05.232751,0.0,icmp,147.32.84.164,771.0,->,188.134.32.151,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,21,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 21:44:09.430470,0.000447,udp,147.32.84.170,60201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:44:14.737570,0.625052,tcp,92.62.218.2,4151.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:44:16.690966,1824.147705,udp,147.32.84.229,13363.0,<->,114.41.4.251,18040.0,CON,0.0,0.0,4,449,138,311,112.25,0.30734966592427615,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:17.080304,0.213722,tcp,147.32.84.170,33695.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:44:19.430478,0.000313,udp,147.32.84.170,39007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:44:21.904410,2634.710205,udp,115.242.80.250,38954.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:23.893932,2135.781738,udp,50.12.224.146,9978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:24.303884,0.000367,udp,147.32.84.138,33070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:44:24.335245,3478.508057,udp,147.32.84.36,36730.0,<->,84.42.234.250,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,21,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 21:44:24.951746,0.144777,udp,147.32.84.229,13363.0,<->,130.179.123.37,41668.0,CON,0.0,0.0,2,544,76,468,272.0,0.13970588235294118,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:26.578800,2592.707764,udp,147.32.84.229,13363.0,<->,195.189.196.66,48511.0,CON,0.0,0.0,10,840,514,326,84.0,0.611904761904762,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:29.282110,63.755341,tcp,147.32.84.165,2593.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:44:35.594616,0.35585,udp,147.32.84.229,13363.0,<->,118.170.210.74,34690.0,CON,0.0,0.0,2,165,98,67,82.5,0.593939393939394,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:44:36.853455,0.000398,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,21,1,flow=Background,Background,-1 2011-08-16 21:44:37.353518,690.566406,udp,147.32.85.84,13716.0,->,95.103.127.120,48323.0,INT,0.0,,2,140,140,0,70.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:44:59.431605,0.000386,udp,147.32.84.170,34643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:04.314304,0.000681,udp,58.69.194.233,47736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,77,491,284.0,0.13556338028169015,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:07.849687,0.000684,udp,213.109.4.42,59824.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,322,66,256,161.0,0.20496894409937888,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:09.431560,0.000223,udp,147.32.84.170,51845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:18.077125,0.000355,udp,147.32.84.170,50925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:19.432410,0.018177,tcp,147.32.84.170,38752.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:20.341328,0.000208,udp,147.32.84.170,49578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:20.342287,240.147629,tcp,147.32.84.170,44869.0,->,74.125.232.195,443.0,FSPA_FSPA,0.0,0.0,37,5826,3850,1976,157.45945945945945,0.6608307586680399,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:20.708598,0.00051,udp,194.186.172.220,14378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:22.849203,0.000447,udp,88.246.95.189,36546.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:24.547187,0.000521,udp,109.160.117.163,19568.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:32.603894,61.285515,tcp,147.32.84.165,2594.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:45:38.117238,1298.278076,tcp,147.32.84.170,44933.0,->,64.12.73.165,443.0,SPA_SRPA,0.0,0.0,85,6937,3104,3833,81.61176470588235,0.4474556724808995,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:39.430614,0.019682,udp,147.32.84.170,45919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:39.836427,2.255662,udp,68.204.66.76,49072.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1200,614,586,200.0,0.5116666666666667,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:40.467409,0.206987,tcp,147.32.86.20,2942.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:45:42.328130,0.000265,udp,188.230.122.97,7604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,629,75,554,314.5,0.1192368839427663,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:43.405242,468.27594,tcp,193.247.250.35,51959.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,64,6067,3751,2316,94.796875,0.6182627328168782,21,0,flow=Background-TCP-Established,Background,-1 2011-08-16 21:45:47.623787,0.000476,udp,109.245.0.120,2702.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:45:49.082528,0.000261,udp,147.32.84.170,42038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:49.432588,0.018528,tcp,147.32.84.170,38758.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:59.430407,0.00046,udp,147.32.84.170,58378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:45:59.432502,0.018557,tcp,147.32.84.170,59563.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:46:03.355263,0.000367,udp,147.32.85.34,61118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:03.362022,0.000255,udp,147.32.85.34,64114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:09.430663,0.000351,udp,147.32.84.170,33419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:46:11.843109,0.000312,udp,147.32.84.138,58023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:22.369175,0.000217,udp,147.32.85.25,46411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:25.151761,0.000475,udp,147.32.86.20,59806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:29.430639,0.000456,udp,147.32.84.170,56221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:46:30.029732,0.206463,tcp,147.32.86.20,2986.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:46:32.888811,0.00018,udp,147.32.85.25,57422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:33.461002,64.269585,tcp,147.32.84.165,2595.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:46:39.432794,0.018158,tcp,147.32.84.170,37183.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:46:48.116906,0.277844,tcp,66.249.66.204,53787.0,->,147.32.84.75,80.0,FSPA_FSPA,0.0,0.0,14,4570,738,3832,326.42857142857144,0.16148796498905907,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:46:49.432901,0.018203,tcp,147.32.84.170,42008.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:46:50.112208,0.000119,udp,147.32.84.138,44651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:50.112215,0.000162,udp,147.32.84.138,41817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:46:59.431668,0.000295,udp,147.32.84.170,57378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:06.299877,0.000229,udp,147.32.84.138,35311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:47:08.238292,0.000208,udp,147.32.84.138,57695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:47:09.430802,0.000405,udp,147.32.84.170,49458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:09.431735,0.000302,udp,147.32.84.170,45683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:09.432770,0.019669,tcp,147.32.84.170,37187.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:19.432758,0.018898,tcp,147.32.84.170,48374.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:21.078080,0.000291,udp,147.32.84.170,60808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:30.157589,0.135622,tcp,147.32.86.20,3039.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:47:32.327584,0.000784,udp,93.135.29.218,17319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:47:37.302625,64.290497,tcp,147.32.84.165,2596.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:47:40.456401,0.000474,udp,78.145.33.116,25994.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:47:44.984791,0.000546,udp,147.32.85.25,34293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:47:49.430787,0.000378,udp,147.32.84.170,52806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:50.469159,0.000312,udp,147.32.86.20,57507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:47:52.077389,0.000492,udp,147.32.84.170,48497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:55.346221,0.206873,tcp,147.32.86.20,3063.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:47:58.783838,0.000611,udp,95.221.40.10,63307.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,631,78,553,315.5,0.12361331220285261,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:47:59.430880,0.000319,udp,147.32.84.170,49046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:59.431734,0.000424,udp,147.32.84.170,58386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:47:59.445253,0.000152,udp,147.32.84.138,33829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:48:04.639208,3151.505371,udp,90.154.141.28,50542.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1093,151,942,273.25,0.13815187557182068,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:48:13.689143,0.540894,tcp,147.32.84.170,56851.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,22,4821,1411,3410,219.13636363636363,0.29267786766231074,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:48:14.139191,391.610016,tcp,147.32.84.170,33389.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,98,37485,27481,10004,382.5,0.7331199146325197,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:48:14.143179,240.045578,tcp,147.32.84.170,33391.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:48:19.714900,0.000234,udp,147.32.84.138,38851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:48:22.970298,0.206139,tcp,147.32.86.20,3087.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:48:23.077824,0.000103,udp,147.32.84.170,44758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:48:24.071348,0.000516,udp,66.87.117.111,56294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:48:25.407476,0.136502,tcp,147.32.86.20,3090.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:48:27.247537,0.000286,udp,147.32.84.138,38961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:48:41.164993,61.286144,tcp,147.32.84.165,2597.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:48:50.003278,0.318434,udp,213.174.3.102,3113.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,268,195,73,134.0,0.7276119402985075,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:48:54.463649,0.000439,udp,212.118.142.81,35128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:49:03.247425,0.000422,udp,147.32.85.84,50970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:49:08.573311,3043.766602,udp,77.85.3.176,40277.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:49:15.364644,0.000737,udp,109.209.138.89,10528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:49:19.431094,0.00035,udp,147.32.84.170,60948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:19.523893,0.000497,udp,2.127.49.71,39686.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:49:25.079974,0.000275,udp,147.32.84.170,49054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:25.080941,0.000293,udp,147.32.84.170,53929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:29.432993,0.017984,tcp,147.32.84.170,37218.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:38.705886,2.358759,tcp,188.95.127.239,7198.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,59,48841,2055,46786,827.8135593220339,0.04207530558342376,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:49:39.432493,0.000385,udp,147.32.84.170,47754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:42.023241,61.285591,tcp,147.32.84.165,2598.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:49:56.072474,0.02518,udp,147.32.84.170,33577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:49:59.718888,0.000253,udp,147.32.84.138,43581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:03.012494,0.000213,udp,147.32.85.34,52337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:03.017314,0.000268,udp,147.32.85.34,54695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:08.258030,0.025485,udp,209.82.111.194,31258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:09.431747,0.000284,udp,147.32.84.170,47009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:09.432770,0.018295,tcp,147.32.84.170,48409.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:19.431945,0.000323,udp,147.32.84.170,60540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:19.748474,1763.404541,udp,147.32.84.229,13363.0,<->,93.126.70.162,13310.0,CON,0.0,0.0,8,972,300,672,121.5,0.30864197530864196,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:21.007182,0.24755,udp,147.32.84.170,47888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:21.503020,240.18959,tcp,147.32.84.170,60353.0,->,74.125.232.207,443.0,FSPA_FSPA,0.0,0.0,35,6445,3718,2727,184.14285714285714,0.5768813033359194,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:27.079378,0.239632,tcp,147.32.84.170,51862.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:29.432716,0.018076,tcp,147.32.84.170,48413.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:29.918791,0.000212,udp,147.32.84.59,51562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:32.812451,0.148285,udp,147.32.85.84,13716.0,<->,74.57.114.107,16209.0,CON,0.0,0.0,2,564,76,488,282.0,0.1347517730496454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:36.697773,0.046704,udp,147.32.84.229,13363.0,<->,62.107.214.33,30641.0,CON,0.0,0.0,2,429,83,346,214.5,0.19347319347319347,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:38.298212,3043.195801,udp,88.244.220.18,53183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:42.284798,0.14755,udp,147.32.84.229,13363.0,<->,71.71.251.158,3952.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:42.880721,61.286129,tcp,147.32.84.165,2599.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:50:46.202776,0.000386,udp,65.5.225.90,33274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:46.794369,0.000208,udp,147.32.85.25,54634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:51.900450,0.000204,udp,147.32.85.25,53007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:57.005433,0.000178,udp,147.32.85.25,44501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:50:57.805028,0.000489,udp,122.130.106.127,41775.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:50:58.077147,0.000383,udp,147.32.84.170,35317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:58.078046,0.000304,udp,147.32.84.170,40635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:50:58.079255,0.228323,tcp,147.32.84.170,51866.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:09.430918,0.000372,udp,147.32.84.170,57261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:09.432882,0.018418,tcp,147.32.84.170,48418.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:13.648819,0.000255,udp,147.32.84.138,41812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:51:14.573586,0.000797,udp,94.153.248.218,57746.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:19.431037,0.000392,udp,147.32.84.170,58165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:25.642596,0.000685,udp,84.15.180.117,43320.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:29.083206,0.000347,udp,147.32.84.170,33812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:29.084573,0.263134,tcp,147.32.84.170,35486.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:29.432072,0.000205,udp,147.32.84.170,41908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:29.432940,0.018515,tcp,147.32.84.170,33322.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:33.230620,0.000621,udp,124.100.10.18,28787.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,669,78,591,334.5,0.11659192825112108,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:33.596994,0.000272,udp,147.32.85.23,37258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:51:35.472611,0.000263,udp,147.32.84.170,51715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:35.473292,0.000402,udp,147.32.84.170,59232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:35.474479,240.058777,tcp,147.32.84.170,43319.0,->,74.125.232.205,80.0,FSPA_FSPA,0.0,0.0,23,5109,2994,2115,222.1304347826087,0.5860246623605402,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:35.513815,250.036926,tcp,147.32.84.170,46668.0,->,209.85.149.100,80.0,FSPA_FSPA,0.0,0.0,51,20824,14574,6250,408.3137254901961,0.6998655397618133,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:39.431230,0.000386,udp,147.32.84.170,37861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:51:40.108128,0.000689,udp,88.7.211.51,58395.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,75,490,282.5,0.13274336283185842,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:41.738632,0.000576,udp,71.191.203.2,2530.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:41.842355,0.025985,udp,147.32.84.229,13363.0,<->,149.13.32.251,48363.0,CON,0.0,0.0,2,138,60,78,69.0,0.43478260869565216,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:51:42.729481,0.000272,udp,147.32.84.138,54247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:51:43.738669,61.31089,tcp,147.32.84.165,2600.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:51:45.422238,8.970322,tcp,24.250.119.119,51195.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,4,312,78,234,78.0,0.25,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:51:57.099319,0.000311,udp,147.32.84.138,58852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:51:59.433001,0.018453,tcp,147.32.84.170,59541.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:00.070981,0.000241,udp,147.32.84.170,41265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:00.072901,0.2222,tcp,147.32.84.170,35493.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:09.433342,0.0179,tcp,147.32.84.170,33318.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:12.373595,3000.289551,udp,68.108.62.219,44459.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:52:12.889317,0.000252,udp,147.32.84.138,39179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:13.620677,3037.85791,udp,62.228.89.5,22687.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:52:19.433222,0.018058,tcp,147.32.84.170,32863.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:29.431173,0.000494,udp,147.32.84.170,38385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:31.996218,0.000373,udp,147.32.84.138,49483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:39.060309,0.00047,udp,78.83.112.214,36193.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:52:39.147074,0.000479,udp,147.32.84.21,51510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:39.432292,0.0005,udp,147.32.84.170,40418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:39.433496,0.018496,tcp,147.32.84.170,59547.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:39.507945,0.000586,udp,213.226.63.141,11752.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:52:40.926657,0.000162,udp,147.32.84.138,56713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:44.616101,61.297405,tcp,147.32.84.165,2601.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:52:46.178617,0.000277,udp,147.32.84.138,40006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:46.263898,3298.121826,tcp,147.32.84.229,13363.0,,2.28.139.37,50092.0,PA_PA,0.0,0.0,57,4297,2789,1508,75.3859649122807,0.649057481964161,21,0,flow=Background,Background,-1 2011-08-16 21:52:46.660392,0.000355,udp,147.32.85.25,42896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:52:59.431227,0.000455,udp,147.32.84.170,53267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:52:59.732989,651.640259,udp,24.125.42.252,7831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1079,541,538,269.75,0.5013901760889713,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:01.082169,0.225508,tcp,147.32.84.170,35501.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:53:04.761407,0.000164,udp,147.32.85.89,36018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:53:04.918767,0.00046,udp,147.32.86.20,58425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:53:13.123196,0.396501,tcp,147.32.84.170,55673.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:53:17.511623,0.000351,udp,147.32.84.138,42546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:53:28.250333,1442.098755,udp,147.32.84.229,13363.0,<->,220.132.235.28,32225.0,CON,0.0,0.0,4,662,542,120,165.5,0.8187311178247734,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:30.512948,1281.713867,udp,98.227.181.160,51738.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3582,542,3040,597.0,0.15131211613623674,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:33.262561,1370.393555,udp,84.186.227.162,48652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,711,525,186,118.5,0.7383966244725738,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:35.603934,2778.068359,udp,147.32.84.229,13363.0,<->,79.111.236.136,34210.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:36.002455,2394.814453,udp,147.32.84.229,13363.0,<->,174.96.105.168,54416.0,CON,0.0,0.0,14,4014,745,3269,286.7142857142857,0.18560039860488292,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:37.122596,0.000174,udp,147.32.84.138,60417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:53:37.148848,0.001811,udp,90.44.183.195,58883.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:40.606234,0.001688,udp,85.141.92.176,48258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:53:45.485021,64.216179,tcp,147.32.84.165,2602.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:53:51.783378,3021.190186,udp,160.45.35.206,53285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1255,945,310,125.5,0.7529880478087649,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:03.078972,0.000318,udp,147.32.84.170,42985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:03.727932,0.000258,udp,147.32.84.138,34553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:54:05.812884,0.00042,udp,147.32.84.138,41709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:54:05.822139,0.000246,udp,147.32.84.138,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:54:07.714563,3042.591309,udp,24.2.119.52,13139.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3726,623,3103,465.75,0.16720343531937734,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:07.938283,3216.138428,udp,93.40.140.53,3946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:09.433267,0.018257,tcp,147.32.84.170,32884.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:11.794409,0.000213,udp,147.32.84.138,38294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:54:12.720031,0.000493,udp,116.80.243.228,47017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:14.759844,0.000653,udp,189.128.10.57,53686.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:19.238861,6.047617,udp,147.32.84.229,13363.0,->,94.244.183.58,34279.0,INT,0.0,,3,180,180,0,60.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:54:19.431304,0.000343,udp,147.32.84.170,33901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:19.433346,0.018502,tcp,147.32.84.170,59566.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:29.431348,0.000397,udp,147.32.84.170,59509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:29.432346,0.000362,udp,147.32.84.170,47245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:34.078997,0.000333,udp,147.32.84.170,50452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:38.643354,2636.409424,udp,92.55.85.133,15377.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,681,381,300,68.1,0.5594713656387665,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:38.689672,9.9e-05,udp,147.32.85.25,56005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:54:39.432070,0.000523,udp,147.32.84.170,42591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:39.433126,0.000354,udp,147.32.84.170,46752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:39.434220,0.017911,tcp,147.32.84.170,33344.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:40.877339,0.000617,udp,80.108.234.15,55075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:46.352145,61.286179,tcp,147.32.84.165,2603.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:54:46.459129,0.003475,udp,187.126.144.69,29036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3041,60,2981,760.25,0.019730351857941468,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:49.432330,0.000259,udp,147.32.84.170,34555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:54:50.712453,0.000649,udp,190.177.140.117,19516.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:54:51.961238,1788.885742,udp,93.157.236.62,42907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1150,158,992,287.5,0.1373913043478261,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:01.318019,0.000199,udp,147.32.84.138,57562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:55:04.078794,0.000319,udp,147.32.84.170,39220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:08.022119,2999.14917,udp,77.186.19.73,52082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:09.431421,0.000374,udp,147.32.84.170,37180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:22.690525,240.174667,tcp,147.32.84.170,47226.0,->,74.125.232.207,443.0,FSPA_FSPA,0.0,0.0,37,5824,3849,1975,157.40540540540542,0.660885989010989,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:24.267726,0.000113,udp,147.32.84.138,47450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:55:27.116452,0.171196,tcp,147.32.86.20,3460.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:55:29.046048,1821.672974,udp,74.141.102.197,17700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:33.544011,1.010147,udp,78.128.186.196,3910.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:55:35.079288,0.000376,udp,147.32.84.170,34138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:35.080247,0.000371,udp,147.32.84.170,48571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:37.238302,2040.342163,udp,147.32.84.229,13363.0,<->,140.113.10.229,51805.0,CON,0.0,0.0,8,6051,120,5931,756.375,0.01983143282102132,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:40.822157,0.069171,udp,147.32.84.229,13363.0,<->,93.81.114.205,35202.0,CON,0.0,0.0,2,553,493,60,276.5,0.891500904159132,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:45.164872,3456.438477,udp,147.32.84.229,13363.0,->,84.238.50.207,35439.0,INT,0.0,,18,3303,3303,0,183.5,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:55:47.210282,61.300491,tcp,147.32.84.165,2604.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:55:49.432400,0.000427,udp,147.32.84.170,33900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:51.869517,1805.831299,udp,77.212.184.20,12385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1086,714,372,135.75,0.6574585635359116,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:55:55.301465,0.000289,udp,147.32.84.138,56602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:55:59.431495,0.000281,udp,147.32.84.170,41466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:55:59.706962,0.000285,udp,147.32.84.138,60576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:03.107406,0.000273,udp,147.32.85.34,63012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:03.112684,0.000202,udp,147.32.85.34,61783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:09.432102,0.000418,udp,147.32.84.170,42883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:09.433293,0.018174,tcp,147.32.84.170,33447.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:13.658532,3114.85083,udp,81.157.19.92,3930.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:15.329033,0.000229,udp,147.32.84.59,57230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:18.864876,11.134209,tcp,77.228.247.30,50465.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:56:19.431534,0.000327,udp,147.32.84.170,56471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:25.478404,0.000501,udp,109.227.51.112,22240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,149,76,73,74.5,0.5100671140939598,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:28.868296,0.000364,udp,147.32.86.20,63364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:29.431462,0.000316,udp,147.32.84.170,45522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:34.025484,0.000335,udp,99.90.182.48,49898.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,21,1,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:35.452104,2991.356445,udp,178.126.126.178,22182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,494,370,124,123.5,0.7489878542510121,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:37.076233,0.000342,udp,147.32.84.170,44920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:39.428873,0.990869,tcp,147.32.86.20,3526.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,95399,1466,93933,1025.7956989247311,0.015367037390329038,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:56:39.432340,0.000416,udp,147.32.84.170,39247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:42.691816,0.0,udp,31.9.209.61,14002.0,->,147.32.85.26,60764.0,INT,0.0,,1,75,75,0,75.0,1.0,21,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 21:56:44.222204,0.000447,udp,147.32.84.25,60988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:44.323072,0.00025,udp,147.32.84.138,58584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:48.077593,61.286537,tcp,147.32.84.165,2605.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:56:49.431145,0.119582,udp,147.32.84.229,13363.0,<->,208.88.187.95,33033.0,CON,0.0,0.0,2,574,78,496,287.0,0.13588850174216027,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:49.433512,0.018605,tcp,147.32.84.170,51843.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:56:53.024156,0.000237,udp,147.32.85.25,32970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:56:57.263057,0.078985,udp,147.32.84.229,13363.0,<->,81.184.65.253,23990.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:56:59.432089,0.000459,udp,147.32.84.170,53595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:08.079232,0.000317,udp,147.32.84.170,34228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:09.432521,0.000294,udp,147.32.84.170,51312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:13.997797,0.000554,udp,213.139.60.75,41984.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:57:23.853732,1483.347412,udp,78.57.74.249,53113.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,437,257,180,72.83333333333333,0.5881006864988558,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:57:24.169637,2461.203857,udp,24.12.17.163,28864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:57:38.633150,0.000215,udp,147.32.85.25,59444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:57:39.074437,0.000232,udp,147.32.84.170,57136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:39.076269,0.241316,tcp,147.32.84.170,55640.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:39.432480,0.000323,udp,147.32.84.170,51268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:57:39.556437,1.145106,tcp,147.32.86.20,3578.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,99,96683,1826,94857,976.5959595959596,0.01888646401125327,21,1,flow=Background-TCP-Established,Background,-1 2011-08-16 21:57:42.239119,0.000233,udp,147.32.84.138,45390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:57:43.648984,0.000494,udp,147.32.84.171,50197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,78,148,113.0,0.34513274336283184,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:57:44.872462,0.044486,udp,147.32.84.171,55113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,70,207,138.5,0.2527075812274368,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:57:47.347626,0.000541,udp,87.53.228.50,55904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,74,482,278.0,0.13309352517985612,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:57:48.935995,61.284992,tcp,147.32.84.165,2606.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:57:49.432524,0.000382,udp,147.32.84.170,44486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:03.005721,0.000343,udp,147.32.85.34,58620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:58:09.852724,0.000555,udp,74.129.50.129,6262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:10.079436,0.000239,udp,147.32.84.170,43836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:10.080240,0.000297,udp,147.32.84.170,58731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:10.509281,1289.63916,udp,85.54.204.216,52255.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,702,516,186,117.0,0.7350427350427351,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:11.452256,0.000509,udp,80.240.4.99,45706.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,591,73,518,295.5,0.12351945854483926,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:13.246668,0.000294,udp,147.32.84.138,57219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:58:13.431475,0.480898,tcp,147.32.84.170,52692.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:18.716826,0.000629,udp,92.224.240.116,48972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,994,76,918,497.0,0.07645875251509054,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:19.332034,0.000221,udp,147.32.85.34,61502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,82,220,151.0,0.271523178807947,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:58:19.431596,0.000308,udp,147.32.84.170,58329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:39.431689,0.000385,udp,147.32.84.170,56602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:39.432584,0.000388,udp,147.32.84.170,49286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:41.079826,0.000184,udp,147.32.84.170,38068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:41.080581,0.000322,udp,147.32.84.170,43420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:41.780422,1368.627441,udp,147.32.84.229,13363.0,<->,130.237.115.226,65433.0,CON,0.0,0.0,4,668,548,120,167.0,0.8203592814371258,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:49.431624,0.000531,udp,147.32.84.170,34040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:58:49.793016,64.191383,tcp,147.32.84.165,2607.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:58:55.917121,0.000586,udp,41.133.169.83,64024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:57.232349,2177.932861,udp,88.179.72.156,25367.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1708,1063,645,213.5,0.6223653395784543,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:59.011277,0.000417,udp,98.155.209.16,36240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,84,60,72.0,0.5833333333333334,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:58:59.433565,0.018116,tcp,147.32.84.170,33273.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:01.008517,0.000468,udp,84.109.248.192,7720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:09.431571,0.000409,udp,147.32.84.170,50879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:12.068629,0.000368,udp,147.32.84.170,45175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:12.069592,0.000311,udp,147.32.84.170,37891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:12.070508,0.230904,tcp,147.32.84.170,55659.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:18.479075,2459.823486,udp,147.32.84.229,13363.0,<->,85.14.51.8,37068.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:23.166904,0.051277,udp,147.32.84.171,49302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,86,217,151.5,0.2838283828382838,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:59:25.981447,1569.882935,udp,147.32.84.229,13363.0,<->,114.40.49.156,22139.0,CON,0.0,0.0,4,279,158,121,69.75,0.5663082437275986,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:28.600604,0.152574,udp,147.32.84.229,13363.0,<->,71.79.39.206,26810.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:36.263480,0.000422,udp,147.32.84.184,40160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:59:38.920719,0.000418,udp,76.21.0.91,44190.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:39.431839,0.000335,udp,147.32.84.170,48199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:40.182960,3591.866211,udp,86.98.73.250,36047.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,41,10027,1945,8082,244.5609756097561,0.1939762640869652,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:42.974807,0.000257,udp,147.32.84.138,49500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:59:49.433576,0.018068,tcp,147.32.84.170,40139.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,21,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 21:59:50.661241,64.026413,tcp,147.32.84.165,2608.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,21,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 21:59:51.287225,0.000232,udp,147.32.85.25,52390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,21,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 21:59:52.511332,0.000376,udp,85.232.208.113,51301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 21:59:54.038503,2094.882812,udp,173.19.47.142,63013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,544,304,240,68.0,0.5588235294117647,21,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:00.452780,590.743103,tcp,62.47.221.117,49173.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,271,38612,25225,13387,142.47970479704796,0.6532943126489175,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:00:01.449962,0.000398,udp,147.32.87.36,34170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:00:08.821840,0.000233,udp,147.32.84.138,58695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:08.826529,0.000161,udp,147.32.84.138,45240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:09.431562,0.000301,udp,147.32.84.170,33283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:12.910876,0.000177,udp,147.32.84.138,41336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:14.076614,0.000537,udp,147.32.84.170,59295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:15.818692,0.000262,udp,147.32.84.138,50498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:17.285031,3.012107,tcp,147.32.84.21,59054.0,->,74.125.39.108,,S_,0.0,,2,148,148,0,74.0,1.0,22,,flow=Background-google-pop,Background,-1 2011-08-16 22:00:17.811411,0.000525,udp,216.152.4.203,60117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,490,60,275.0,0.8909090909090909,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:17.876633,421.353394,udp,108.28.78.151,59353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,450,137,313,112.5,0.30444444444444446,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:18.303286,0.00015,udp,147.32.84.138,51076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:18.999977,3565.534912,tcp,86.14.147.127,63452.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,2144,234511,143499,91012,109.38013059701493,0.6119073305729795,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:00:19.363892,15.29373,tcp,90.176.63.107,49964.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1963,1265,698,196.3,0.6444218033622007,22,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 22:00:19.431568,0.000388,udp,147.32.84.170,59188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:19.432503,0.000285,udp,147.32.84.170,36472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:22.889695,0.000469,udp,147.32.86.20,63399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:23.092382,0.000257,udp,147.32.84.138,43054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:23.131131,0.247554,udp,147.32.84.170,39078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:23.873354,240.20813,tcp,147.32.84.170,44195.0,->,74.125.232.205,443.0,FSPA_FSPA,0.0,0.0,37,5825,3849,1976,157.43243243243242,0.6607725321888412,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:24.818161,0.000436,udp,217.118.83.205,45688.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,217,155,62,108.5,0.7142857142857143,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:25.779545,0.503229,udp,147.32.84.229,13363.0,<->,213.106.3.249,18800.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:29.431651,0.000392,udp,147.32.84.170,55445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:31.505791,0.688816,tcp,147.32.84.164,33319.0,->,202.80.110.133,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:00:39.143183,0.000341,udp,147.32.86.20,53421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:39.442059,0.00041,udp,147.32.84.170,39580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:40.210023,2127.367188,udp,189.17.30.67,42685.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:46.890144,3119.012451,udp,69.15.168.134,27673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,21,3051,2438,613,145.28571428571428,0.7990822681088168,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:47.247589,0.198489,udp,147.32.84.229,13363.0,<->,72.199.185.229,51283.0,CON,0.0,0.0,4,3047,60,2987,761.75,0.019691499835904167,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:00:49.431552,0.00034,udp,147.32.84.170,47482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:49.432446,0.000336,udp,147.32.84.170,49361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:51.519300,61.30246,tcp,147.32.84.165,2609.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:00:58.384600,0.00025,udp,147.32.84.138,52284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:00:59.432669,0.000275,udp,147.32.84.170,58387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:00:59.687763,0.000565,udp,168.18.233.229,58007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:02.909792,0.002407,udp,147.32.84.138,57642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:01:06.429479,0.000443,udp,24.237.248.131,50350.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:07.026102,0.000444,udp,78.55.56.117,5182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:13.037499,0.000188,udp,147.32.85.25,33359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:01:14.251644,0.099431,udp,147.32.87.52,60507.0,->,224.0.0.252,5355.0,INT,0.0,,2,148,148,0,74.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:01:17.221279,1.090561,udp,147.32.84.229,13363.0,<->,87.120.192.124,31156.0,CON,0.0,0.0,4,665,544,121,166.25,0.8180451127819549,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:19.431841,0.000491,udp,147.32.84.170,33093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:01:19.433792,0.018292,tcp,147.32.84.170,38413.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:01:29.432573,0.000293,udp,147.32.84.170,41140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:01:32.231768,3507.146973,tcp,212.242.195.149,18135.0,->,147.32.84.229,13363.0,FPA_FPA,0.0,0.0,166,12390,6840,5550,74.63855421686748,0.5520581113801453,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:01:33.683647,0.000446,udp,85.130.73.194,22946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:43.333183,0.000245,udp,147.32.84.138,42377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:01:47.081488,0.230957,tcp,147.32.84.170,55879.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:01:49.434979,0.018643,tcp,147.32.84.170,49632.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:01:51.240906,3060.351807,udp,147.32.84.229,13363.0,<->,118.160.192.204,33319.0,CON,0.0,0.0,12,6253,271,5982,521.0833333333334,0.04333919718535103,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:01:51.450624,6.902066,tcp,115.204.140.223,6242.0,->,147.32.87.246,4899.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:01:52.387989,61.284565,tcp,147.32.84.165,2610.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:01:57.278415,0.163183,udp,147.32.84.229,13363.0,<->,24.2.196.101,23454.0,CON,0.0,0.0,4,3003,60,2943,750.75,0.01998001998001998,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:01.082003,0.200466,udp,147.32.85.120,15967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,517,74,443,258.5,0.14313346228239845,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:01.356172,0.000363,udp,147.32.84.138,47001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:09.432835,0.000368,udp,147.32.84.170,41968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:11.454017,0.000509,udp,98.151.255.100,60075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:15.011057,0.000265,udp,147.32.85.25,38458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:15.376451,0.0,tcp,147.32.84.165,2611.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.388908,0.0,tcp,147.32.84.165,2613.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.389242,0.0,tcp,147.32.84.165,2614.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.560152,0.0,tcp,147.32.84.165,2615.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.570145,0.0,tcp,147.32.84.165,2617.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.570414,0.0,tcp,147.32.84.165,2618.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:15.760122,0.0,tcp,147.32.84.165,2619.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:16.371848,0.0,tcp,147.32.84.165,2622.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:16.671583,0.0,tcp,147.32.84.165,2621.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:17.473125,0.0,tcp,147.32.84.165,2624.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:18.078829,0.000267,udp,147.32.84.170,36872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:24.405625,0.000225,udp,147.32.84.138,56349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:27.619787,0.019433,udp,147.32.84.184,54995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:28.983493,0.000571,udp,31.181.69.19,16526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,593,76,517,296.5,0.1281618887015177,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:29.389263,0.0,tcp,147.32.84.165,2853.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389380,0.0,tcp,147.32.84.165,2851.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389387,0.0,tcp,147.32.84.165,2854.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389431,0.0,tcp,147.32.84.165,2857.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389538,0.0,tcp,147.32.84.165,2855.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389588,0.0,tcp,147.32.84.165,2858.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.389595,0.0,tcp,147.32.84.165,2861.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:29.432301,0.000521,udp,147.32.84.170,56946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:30.559532,3030.680664,udp,178.233.80.160,43775.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:32.520250,0.000247,udp,147.32.84.138,51486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:33.839918,0.000449,udp,178.2.223.142,10202.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:37.754427,0.00032,udp,147.32.84.138,37240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:02:39.433741,0.018621,tcp,147.32.84.170,49638.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:41.406807,0.0,tcp,147.32.84.165,3091.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.406821,0.0,tcp,147.32.84.165,3094.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.406943,0.0,tcp,147.32.84.165,3093.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.406957,0.0,tcp,147.32.84.165,3095.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.406992,0.0,tcp,147.32.84.165,3098.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.407051,0.0,tcp,147.32.84.165,3097.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.407134,0.0,tcp,147.32.84.165,3099.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:41.407141,0.0,tcp,147.32.84.165,3102.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:46.522098,0.000403,udp,98.221.83.182,60931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:48.079152,0.000348,udp,147.32.84.170,42279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:49.432994,0.000304,udp,147.32.84.170,60810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:53.424516,0.0,tcp,147.32.84.165,3333.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.424662,61.301903,tcp,147.32.84.165,3367.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:02:53.424670,0.0,tcp,147.32.84.165,3331.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.424762,0.0,tcp,147.32.84.165,3334.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.424770,0.0,tcp,147.32.84.165,3337.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.424895,0.0,tcp,147.32.84.165,3335.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.424902,0.0,tcp,147.32.84.165,3338.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.425018,0.0,tcp,147.32.84.165,3341.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:53.425664,0.0,tcp,147.32.84.165,3339.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:02:56.144988,3061.211426,udp,78.182.193.215,16316.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:02:56.458997,0.17172,tcp,147.32.86.20,3859.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:02:59.433924,0.017691,tcp,147.32.84.170,49641.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:02:59.762385,1.182359,tcp,147.32.84.164,55602.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,2306,2684839,36697,2648142,1164.2840416305291,0.013668231130432775,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:03:02.422705,15.040933,tcp,78.141.78.9,54524.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,435,423938,13821,410117,974.5701149425288,0.03260146530860645,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:03:05.441501,0.0,tcp,147.32.84.165,3576.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441515,0.0,tcp,147.32.84.165,3575.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441695,0.0,tcp,147.32.84.165,3573.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441709,0.0,tcp,147.32.84.165,3580.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441714,0.0,tcp,147.32.84.165,3579.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441794,0.0,tcp,147.32.84.165,3577.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441802,0.0,tcp,147.32.84.165,3584.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:05.441893,0.0,tcp,147.32.84.165,3583.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:13.755590,0.267278,tcp,147.32.84.170,50225.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:03:17.459491,0.0,tcp,147.32.84.165,3767.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:17.459505,0.0,tcp,147.32.84.165,3769.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:17.459510,0.0,tcp,147.32.84.165,3770.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:17.459515,0.0,tcp,147.32.84.165,3772.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:17.459561,0.0,tcp,147.32.84.165,3773.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:17.459617,0.0,tcp,147.32.84.165,3775.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:19.081350,0.000246,udp,147.32.84.170,44720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:03:19.431947,0.000409,udp,147.32.84.170,50310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:03:20.684638,0.000142,udp,147.32.84.138,60213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:03:21.908825,6.072701,udp,95.119.103.18,12770.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,393,213,180,65.5,0.5419847328244275,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:22.637530,0.000521,udp,155.41.240.157,6465.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,73,464,268.5,0.13594040968342644,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:29.142429,2473.644775,udp,99.57.132.11,37633.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:29.432015,0.000382,udp,147.32.84.170,58699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:03:29.476195,0.0,tcp,147.32.84.165,3947.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:29.476281,0.0,tcp,147.32.84.165,3949.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:29.476366,0.0,tcp,147.32.84.165,3950.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:29.476372,0.0,tcp,147.32.84.165,3952.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:29.476494,0.0,tcp,147.32.84.165,3953.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:29.476501,0.0,tcp,147.32.84.165,3955.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:30.077051,0.0,tcp,147.32.84.165,3956.0,->,192.168.1.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:32.217398,1523.573608,udp,78.141.181.224,34012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3291,123,3168,548.5,0.037374658158614404,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:32.768730,577.232788,udp,95.65.106.161,12252.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1124,164,960,281.0,0.14590747330960854,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:38.674618,0.000414,udp,208.54.45.228,45078.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:41.493350,0.0,tcp,147.32.84.165,4129.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:41.493442,0.0,tcp,147.32.84.165,4127.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:41.493448,0.0,tcp,147.32.84.165,4132.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:41.493523,0.0,tcp,147.32.84.165,4130.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:41.493529,0.0,tcp,147.32.84.165,4135.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:41.493613,0.0,tcp,147.32.84.165,4133.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:42.094188,0.0,tcp,147.32.84.165,4138.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:43.474799,0.000359,udp,105.142.196.2,24292.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,22,1,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:48.562426,3344.818115,udp,152.2.114.122,58420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,559,221,338,93.16666666666667,0.3953488372093023,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:48.962750,0.001803,udp,87.228.50.182,14623.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:49.432002,0.000297,udp,147.32.84.170,33968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:03:53.511316,0.0,tcp,147.32.84.165,4307.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:53.511323,0.0,tcp,147.32.84.165,4309.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:53.511420,0.0,tcp,147.32.84.165,4310.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:53.511426,0.0,tcp,147.32.84.165,4312.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:53.511540,0.0,tcp,147.32.84.165,4313.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:53.511548,0.0,tcp,147.32.84.165,4315.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:03:56.542197,0.349097,udp,147.32.84.229,13363.0,<->,111.240.58.141,18662.0,CON,0.0,0.0,2,552,77,475,276.0,0.13949275362318841,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:03:59.692272,3027.05127,udp,190.48.12.195,41997.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,406,226,180,67.66666666666667,0.5566502463054187,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:01.321726,0.00017,udp,147.32.84.138,50719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:04:01.444641,2484.94458,udp,64.13.161.59,37974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:01.884640,2993.867188,udp,93.87.139.202,29155.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,283,151,132,70.75,0.5335689045936396,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:02.882506,0.000216,udp,147.32.85.34,54913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:04:05.189351,0.00121,icmp,147.32.84.19,,<-,147.32.87.27,7572.0,RED,,0.0,2,196,0,196,98.0,0.0,22,0,flow=Background,Background,-1 2011-08-16 22:04:05.528312,64.286308,tcp,147.32.84.165,4349.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:04:05.528408,0.0,tcp,147.32.84.165,4457.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:05.528497,0.0,tcp,147.32.84.165,4459.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:05.528638,0.0,tcp,147.32.84.165,4461.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:05.528648,0.0,tcp,147.32.84.165,4463.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:05.530114,0.0,tcp,147.32.84.165,4465.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:06.128878,0.0,tcp,147.32.84.165,4467.0,->,147.32.81.38,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:09.432068,0.000318,udp,147.32.84.170,52475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:09.432961,0.000263,udp,147.32.84.170,53753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:12.026309,0.309384,tcp,147.32.86.20,3924.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:04:13.253360,2478.718018,udp,64.13.161.45,50381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:17.480317,0.000169,udp,147.32.85.25,38504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:04:17.546160,0.0,tcp,147.32.84.165,4577.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:17.546244,0.0,tcp,147.32.84.165,4579.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:17.548340,0.0,tcp,147.32.84.165,4581.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:18.146488,0.0,tcp,147.32.84.165,4583.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:18.146492,0.0,tcp,147.32.84.165,4585.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:18.799328,3497.937988,udp,208.88.186.11,34059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,26,3982,942,3040,153.15384615384616,0.23656454043194375,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:20.081908,0.264208,tcp,147.32.84.170,55906.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:21.530194,2596.931885,udp,74.140.12.44,14821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,840,526,314,210.0,0.6261904761904762,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:29.562887,0.0,tcp,147.32.84.165,4697.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:29.563013,0.0,tcp,147.32.84.165,4699.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:29.563107,0.0,tcp,147.32.84.165,4701.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:30.163875,0.0,tcp,147.32.84.165,4703.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:30.163976,0.0,tcp,147.32.84.165,4705.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:31.825270,0.000774,udp,210.4.98.114,13260.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,682,77,605,341.0,0.11290322580645161,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:39.432839,0.000405,udp,147.32.84.170,53319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:41.580662,0.0,tcp,147.32.84.165,4817.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:41.580787,0.0,tcp,147.32.84.165,4819.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:41.580936,0.0,tcp,147.32.84.165,4821.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:42.181082,0.0,tcp,147.32.84.165,4823.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:42.181137,0.0,tcp,147.32.84.165,4825.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:49.432194,0.00045,udp,147.32.84.170,46186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:49.434201,0.017899,tcp,147.32.84.170,44892.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:50.986422,0.000248,udp,147.32.84.138,46960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:04:52.745106,0.000558,udp,92.9.131.144,29908.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:04:53.465155,0.000289,udp,147.32.86.20,56246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:04:53.597461,0.0,tcp,147.32.84.165,4938.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:53.597533,0.0,tcp,147.32.84.165,4940.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:53.597671,0.0,tcp,147.32.84.165,4942.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:54.198784,0.0,tcp,147.32.84.165,4944.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:54.198870,0.0,tcp,147.32.84.165,4946.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:04:59.432071,0.000371,udp,147.32.84.170,39256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:04:59.434032,0.018132,tcp,147.32.84.170,38448.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:01.982706,0.000401,udp,65.92.162.8,33483.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:03.964300,0.000264,udp,147.32.86.34,54516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:05.615037,0.0,tcp,147.32.84.165,1101.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:05.615045,0.0,tcp,147.32.84.165,1100.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:05.615080,0.0,tcp,147.32.84.165,1103.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:05.615131,0.0,tcp,147.32.84.165,1102.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:05.615136,0.0,tcp,147.32.84.165,1105.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:06.215617,0.0,tcp,147.32.84.165,1106.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:06.215683,0.0,tcp,147.32.84.165,1107.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:06.215688,0.0,tcp,147.32.84.165,1108.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:06.215743,0.0,tcp,147.32.84.165,1109.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:06.215748,0.0,tcp,147.32.84.165,1110.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:12.696165,0.000523,udp,78.149.174.243,16638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,77,483,280.0,0.1375,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:13.903508,0.000718,udp,62.228.61.37,59816.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:16.614207,0.000421,udp,2.97.20.167,19168.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:17.632529,61.302258,tcp,147.32.84.165,1158.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:05:17.632605,0.0,tcp,147.32.84.165,1222.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:17.632674,0.0,tcp,147.32.84.165,1224.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:18.066174,0.0,tcp,147.32.84.165,1228.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:18.233185,0.0,tcp,147.32.84.165,1230.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:18.233193,0.0,tcp,147.32.84.165,1232.0,->,147.32.82.144,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:19.397194,0.000285,udp,147.32.85.25,46593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:20.396332,0.000304,udp,147.32.84.138,42803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:20.824598,0.0,icmp,147.32.84.164,771.0,->,212.22.198.196,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:05:21.078191,0.000224,udp,147.32.84.170,59418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:22.475427,0.000434,udp,83.191.240.22,13559.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:22.765069,0.001454,udp,93.158.19.161,35273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:24.343815,0.247755,udp,147.32.84.170,41736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:24.840773,0.247401,udp,147.32.84.170,49568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:25.088420,0.000382,udp,147.32.84.170,37402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:25.089750,240.162918,tcp,147.32.84.170,48442.0,->,74.125.232.202,443.0,FSPA_FSPA,0.0,0.0,37,5826,3849,1977,157.45945945945945,0.660659114315139,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:29.432213,0.000587,udp,147.32.84.170,39880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:29.433321,0.000299,udp,147.32.84.170,59347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:29.649406,0.0,tcp,147.32.84.165,1342.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:29.649515,0.0,tcp,147.32.84.165,1344.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:30.250781,0.0,tcp,147.32.84.165,1348.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:30.250865,0.0,tcp,147.32.84.165,1350.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:30.250941,0.0,tcp,147.32.84.165,1352.0,->,147.32.82.204,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:33.368769,0.0,tcp,166.70.175.230,4935.0,->,147.32.85.78,3389.0,S_,0.0,,1,66,66,0,66.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:05:35.578753,31.803888,udp,81.98.72.49,39507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:39.442304,0.000359,udp,147.32.84.170,51668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:39.696549,0.000234,udp,147.32.84.138,58283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:40.657932,0.022589,udp,147.32.85.84,56797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,74,168,121.0,0.30578512396694213,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:41.667351,0.0,tcp,147.32.84.165,1462.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:41.667358,0.0,tcp,147.32.84.165,1461.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:41.667363,0.0,tcp,147.32.84.165,1464.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:41.667426,0.0,tcp,147.32.84.165,1463.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267656,0.0,tcp,147.32.84.165,1468.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267724,0.0,tcp,147.32.84.165,1467.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267729,0.0,tcp,147.32.84.165,1470.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267820,0.0,tcp,147.32.84.165,1469.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267825,0.0,tcp,147.32.84.165,1472.0,->,147.32.83.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:42.267829,0.0,tcp,147.32.84.165,1471.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:45.498557,0.000321,udp,147.32.86.20,54476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:46.866885,0.000573,udp,109.205.248.183,6906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:47.937684,0.170445,tcp,147.32.86.20,3999.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:05:49.435253,0.017911,tcp,147.32.84.170,38455.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:05:49.820173,2019.672485,udp,147.32.84.229,13363.0,<->,190.39.129.235,49177.0,CON,0.0,0.0,4,1054,532,522,263.5,0.5047438330170778,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:05:51.951966,0.039974,udp,147.32.84.68,50740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,580,80,500,290.0,0.13793103448275862,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:52.279281,31.894472,tcp,195.240.16.66,31131.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,18,1330,610,720,73.88888888888889,0.45864661654135336,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:05:53.684627,0.0,tcp,147.32.84.165,1582.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:53.684699,0.0,tcp,147.32.84.165,1581.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:53.684706,0.0,tcp,147.32.84.165,1584.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:53.684755,0.0,tcp,147.32.84.165,1583.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285723,0.0,tcp,147.32.84.165,1588.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285780,0.0,tcp,147.32.84.165,1587.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285787,0.0,tcp,147.32.84.165,1590.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285842,0.0,tcp,147.32.84.165,1589.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285848,0.0,tcp,147.32.84.165,1592.0,->,147.32.83.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:54.285899,0.0,tcp,147.32.84.165,1591.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:05:56.110154,0.000356,udp,147.32.84.59,54819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:05:59.434348,0.018114,tcp,147.32.84.170,38457.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:02.365858,2795.144043,udp,80.98.212.150,40895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:05.002964,0.000378,udp,147.32.85.25,52456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:06:05.701816,0.0,tcp,147.32.84.165,1702.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:05.701906,0.0,tcp,147.32.84.165,1701.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:05.701914,0.0,tcp,147.32.84.165,1704.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:05.701958,0.0,tcp,147.32.84.165,1703.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302679,0.0,tcp,147.32.84.165,1708.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302778,0.0,tcp,147.32.84.165,1707.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302831,0.0,tcp,147.32.84.165,1710.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302837,0.0,tcp,147.32.84.165,1709.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302900,0.0,tcp,147.32.84.165,1712.0,->,147.32.83.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:06.302951,0.0,tcp,147.32.84.165,1711.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:15.019596,0.479162,icmp,184.217.107.57,771.0,->,147.32.84.229,2250.0,URP,0.0,,3,543,543,0,181.0,1.0,22,0,flow=Background,Background,-1 2011-08-16 22:06:15.489514,0.216556,udp,213.29.146.218,54473.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,816,683,133,204.0,0.8370098039215687,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:17.647611,0.000236,udp,147.32.84.138,35190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:06:17.719373,0.0,tcp,147.32.84.165,1822.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:17.719448,0.0,tcp,147.32.84.165,1821.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:17.719455,0.0,tcp,147.32.84.165,1824.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:17.719498,0.0,tcp,147.32.84.165,1823.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320270,0.0,tcp,147.32.84.165,1828.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320284,0.0,tcp,147.32.84.165,1827.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320333,0.0,tcp,147.32.84.165,1830.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320367,0.0,tcp,147.32.84.165,1829.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320473,0.0,tcp,147.32.84.165,1832.0,->,147.32.83.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.320488,0.0,tcp,147.32.84.165,1831.0,->,147.32.88.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:18.408629,0.191504,tcp,109.230.221.183,64431.0,->,147.32.85.101,80.0,FSPA_FSPA,0.0,0.0,24,17302,3981,13321,720.9166666666666,0.23008900705120797,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:06:19.433264,0.000348,udp,147.32.84.170,59410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:29.736773,61.302654,tcp,147.32.84.165,1849.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:06:29.736927,0.0,tcp,147.32.84.165,1943.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:29.736942,0.0,tcp,147.32.84.165,1942.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:29.736947,0.0,tcp,147.32.84.165,1945.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.170589,0.0,tcp,147.32.84.165,1948.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337604,0.0,tcp,147.32.84.165,1949.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337698,0.0,tcp,147.32.84.165,1950.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337705,0.0,tcp,147.32.84.165,1951.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337790,0.0,tcp,147.32.84.165,1952.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337798,0.0,tcp,147.32.84.165,1953.0,->,147.32.83.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:30.337871,0.0,tcp,147.32.84.165,1954.0,->,147.32.88.251,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:06:31.117155,0.000269,udp,147.32.84.138,55140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:06:36.839199,0.000446,udp,158.110.34.57,31999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,152,85,67,76.0,0.5592105263157895,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:39.433122,0.000316,udp,147.32.84.170,38711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:39.434141,0.01782,tcp,147.32.84.170,35375.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:42.377109,0.00054,udp,147.32.86.20,58637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:06:42.467839,3.016287,tcp,120.147.92.228,2331.0,->,147.32.86.44,80.0,S_,0.0,,2,132,132,0,66.0,1.0,22,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:06:45.018280,0.000452,udp,95.154.57.85,10259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:47.840408,0.061442,udp,147.32.84.229,13363.0,<->,151.29.222.185,37611.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:48.875849,0.135471,tcp,147.32.86.20,4051.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:06:49.157594,3179.427734,udp,67.173.82.70,37959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,5679,329,5350,473.25,0.05793273463637964,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:49.433181,0.000362,udp,147.32.84.170,47442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:53.549637,0.025378,udp,147.32.84.229,13363.0,<->,78.141.181.223,34042.0,CON,0.0,0.0,2,251,188,63,125.5,0.749003984063745,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:06:54.077309,0.23451,tcp,147.32.84.170,35786.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:06:59.434257,0.017845,tcp,147.32.84.170,35378.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:04.054309,3065.652832,udp,193.11.22.14,14798.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:07:09.433388,0.000367,udp,147.32.84.170,60230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:19.433186,0.000357,udp,147.32.84.170,57155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:21.428586,0.000406,udp,147.32.84.59,57478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:22.066469,0.000266,udp,147.32.85.25,37010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:24.634358,0.000284,udp,147.32.84.138,45932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:24.794127,0.00049,udp,88.100.177.103,23604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:07:27.030632,2443.518799,udp,190.192.213.44,16208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:07:29.433260,0.000271,udp,147.32.84.170,35974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:29.434269,0.018825,tcp,147.32.84.170,35382.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:30.605468,61.3008,tcp,147.32.84.165,1962.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:07:30.920973,0.000419,icmp,147.32.86.96,,<-,147.32.87.54,42313.0,RED,,0.0,2,196,0,196,98.0,0.0,22,0,flow=Background,Background,-1 2011-08-16 22:07:31.018268,0.622233,udp,147.32.84.229,13363.0,<->,144.136.208.136,13041.0,CON,0.0,0.0,4,658,537,121,164.5,0.8161094224924013,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:07:37.072047,0.000296,udp,147.32.84.138,45007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:40.066717,0.000307,udp,147.32.86.20,58334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:40.151652,0.000708,udp,90.63.185.230,51279.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,945,76,869,472.5,0.08042328042328042,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:07:43.288019,0.000303,udp,147.32.86.86,54211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,82,132,107.0,0.38317757009345793,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:07:49.433330,0.000278,udp,147.32.84.170,35484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:07:59.434651,0.020249,tcp,147.32.84.170,35386.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:02.817253,0.231941,tcp,147.32.86.20,4115.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:08:02.832831,0.000407,udp,147.32.85.34,52527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:04.521044,9.170289,tcp,111.89.80.111,35610.0,->,147.32.85.100,3126.0,S_,0.0,,3,234,234,0,78.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:08:05.623917,0.053101,udp,188.112.157.119,42841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,662,541,121,165.5,0.8172205438066465,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:08:10.546314,0.000347,udp,77.78.60.132,20842.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:08:11.453841,6.310833,tcp,66.249.72.20,60659.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,10,1260,717,543,126.0,0.569047619047619,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:08:13.519902,0.275533,tcp,147.32.84.170,38162.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:14.139406,0.000279,udp,147.32.84.170,49064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:14.145104,240.049316,tcp,147.32.84.170,48575.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:15.015552,0.358005,tcp,147.32.84.170,38171.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:18.325360,0.000102,tcp,113.105.171.56,80.0,->,147.32.87.47,50438.0,SA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:08:18.791228,0.036569,tcp,147.32.86.96,52464.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,598,0,598,74.75,0.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:08:19.433402,0.000261,udp,147.32.84.170,55327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:27.078983,0.00047,udp,147.32.84.170,35782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:27.080015,0.000302,udp,147.32.84.170,37400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:29.192344,0.000183,udp,147.32.84.138,59750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:31.350064,0.000207,udp,147.32.84.138,47216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:31.473010,61.300419,tcp,147.32.84.165,1963.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:08:35.882825,0.000286,udp,147.32.84.138,43916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:36.550647,3256.618408,udp,147.32.84.229,13363.0,<->,78.141.181.221,34054.0,CON,0.0,0.0,13,6289,566,5723,483.7692307692308,0.08999840992208619,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:08:42.615774,0.000289,udp,147.32.84.138,41654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:44.824668,0.000182,udp,147.32.85.25,40995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:47.493861,0.000225,udp,147.32.84.138,34604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:54.096180,0.000166,udp,147.32.84.138,35132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:54.817628,0.205998,tcp,147.32.86.20,4162.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:08:58.082894,0.000277,udp,147.32.84.170,33790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:08:58.866228,0.000279,udp,147.32.84.138,41244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:08:59.433427,0.00035,udp,147.32.84.170,52270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:09:01.190892,0.000175,udp,147.32.84.138,53246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:09:01.191013,0.000167,udp,147.32.84.138,56353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:09:12.092949,3146.279053,udp,74.100.104.124,43128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1479,1107,372,123.25,0.7484787018255578,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:09:15.903590,0.000366,udp,88.71.249.65,31491.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:09:19.434498,0.018018,tcp,147.32.84.170,56284.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:09:20.279288,0.000257,udp,147.32.84.138,54479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:09:25.864197,0.000174,udp,147.32.85.25,41710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:09:26.681340,3.945218,tcp,147.32.84.171,51479.0,->,85.226.59.194,44986.0,FSPA_FSPA,0.0,0.0,13,1612,674,938,124.0,0.41811414392059554,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:09:27.876204,0.000143,udp,147.32.84.138,53450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:09:29.434609,0.018191,tcp,147.32.84.170,35410.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:09:31.557210,574.658508,udp,24.140.113.126,53861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,4785,1600,3185,683.5714285714286,0.3343782654127482,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:09:32.340480,63.625435,tcp,147.32.84.165,2010.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:09:40.784371,60.278229,tcp,196.201.208.32,44906.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,26,5914,1610,4304,227.46153846153845,0.2722353736895502,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:09:43.875173,2435.880859,udp,75.138.186.16,21166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,502,378,124,125.5,0.7529880478087649,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:09:45.157191,17.931568,udp,24.205.136.250,34475.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1064,944,120,266.0,0.8872180451127819,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:09:56.924474,0.000243,udp,147.32.84.138,53187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:10:01.335395,0.000203,udp,147.32.84.138,54744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:10:04.459469,2446.012695,udp,77.22.120.129,45508.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,762,576,186,127.0,0.7559055118110236,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:06.474734,0.000422,udp,190.16.106.127,11400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:09.434631,0.018385,tcp,147.32.84.170,56291.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:12.055098,0.000453,udp,201.241.142.79,1294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:23.321018,0.107703,udp,147.32.84.229,13363.0,<->,72.227.169.133,51680.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:26.255904,0.000385,udp,147.32.84.170,48478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:26.257088,240.150299,tcp,147.32.84.170,49987.0,->,74.125.232.205,443.0,FSPA_FSPA,0.0,0.0,37,5824,3848,1976,157.40540540540542,0.6607142857142857,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:26.796277,0.004013,udp,99.241.120.117,27051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3031,60,2971,757.75,0.01979544704717915,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:29.433356,0.000405,udp,147.32.84.170,39402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:31.080315,0.000272,udp,147.32.84.170,49538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:31.081551,0.259021,tcp,147.32.84.170,33673.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:10:32.352020,3377.4375,udp,2.95.231.234,30290.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,4108,765,3343,410.8,0.186222005842259,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:10:35.532454,61.300858,tcp,147.32.84.165,2011.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:10:48.046056,0.000247,udp,147.32.84.138,42856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:10:57.415479,0.000183,udp,147.32.85.25,48137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:10:58.057070,0.000194,udp,147.32.84.138,50993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:10:59.433475,0.000228,udp,147.32.84.170,44633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:02.483698,0.000797,udp,147.32.85.25,47589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:11:02.981021,0.000287,udp,147.32.84.171,45549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:11:07.176977,8.998946,tcp,147.32.84.171,44986.0,->,92.87.197.69,11562.0,S_,0.0,,3,222,222,0,74.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:11:07.900937,0.00065,udp,147.32.85.25,58290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:11:09.434728,0.01783,tcp,147.32.84.170,35425.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:14.331360,0.000348,udp,147.32.84.138,51607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:11:19.432667,0.00043,udp,147.32.84.170,36915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:19.433614,0.00044,udp,147.32.84.170,39086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:23.142543,0.034461,udp,147.32.85.25,50171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:11:27.637042,736.642212,udp,78.141.179.11,34057.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,950,218,732,158.33333333333334,0.2294736842105263,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:11:28.502244,2475.970459,udp,67.249.220.0,12448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,659,525,134,164.75,0.7966616084977238,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:11:29.434964,0.01887,tcp,147.32.84.170,33502.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:33.081049,0.000279,udp,147.32.84.170,45619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:33.081961,0.000252,udp,147.32.84.170,32824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:36.400094,61.301193,tcp,147.32.84.165,2012.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:11:39.433672,0.000555,udp,147.32.84.170,50736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:39.434946,0.01817,tcp,147.32.84.170,57385.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:11:39.613275,3157.503174,udp,46.0.42.169,40355.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,708,522,186,118.0,0.7372881355932204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:11:48.247769,0.905699,tcp,147.32.3.51,2246.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:11:49.883036,115.902672,tcp,147.32.86.194,1964.0,->,209.85.149.113,80.0,FSPA_FSPA,0.0,0.0,24,10273,4015,6258,428.0416666666667,0.39083033193809014,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:12:03.603857,0.000381,udp,147.32.85.34,54088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:04.080321,0.209157,tcp,147.32.84.170,51490.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:12:20.740129,0.000423,udp,41.98.233.38,27117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,217,155,62,108.5,0.7142857142857143,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:12:24.497954,0.000143,udp,147.32.85.25,41612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:29.352396,0.000189,udp,147.32.84.138,39020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:29.433838,0.000311,udp,147.32.84.170,54321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:12:31.719072,0.000693,udp,78.96.144.61,40974.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,22,1,flow=Background-UDP-Established,Background,-1 2011-08-16 22:12:34.080322,0.000283,udp,147.32.84.170,38533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:12:36.029737,0.000334,udp,147.32.84.138,51495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:37.267685,61.301941,tcp,147.32.84.165,2013.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:12:39.316057,0.120793,udp,147.32.84.229,13363.0,<->,67.85.182.26,5631.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:12:40.860037,0.000296,udp,147.32.84.138,40499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:40.882126,0.000232,udp,147.32.84.138,49527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:12:50.519053,0.000434,udp,64.13.156.159,42539.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,227,165,62,113.5,0.7268722466960352,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:12:50.920662,1.45251,tcp,109.230.222.225,49955.0,->,147.32.85.101,80.0,FSPA_FSPA,0.0,0.0,35,29966,4071,25895,856.1714285714286,0.13585396783020756,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:13:01.437545,0.000447,udp,81.182.225.34,14656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:08.962789,3379.866943,udp,87.59.228.57,43869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:09.434816,0.000382,udp,147.32.84.170,42144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:13:13.382559,0.710495,tcp,147.32.84.170,58863.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:13:14.085490,0.298221,tcp,147.32.84.170,58865.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:13:20.067377,2617.112549,udp,195.158.78.226,51297.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,719,533,186,119.83333333333333,0.741307371349096,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:26.558093,0.000218,udp,147.32.85.25,58281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:13:33.079711,2.270962,udp,89.204.153.97,52480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,681,560,121,170.25,0.8223201174743024,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:36.073921,0.000417,udp,147.32.84.170,40802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:13:37.728643,0.000184,udp,147.32.84.138,37047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:13:38.136463,63.604889,tcp,147.32.84.165,2014.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:13:38.719953,3089.375,udp,78.22.65.226,36741.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:39.891125,0.000555,udp,85.244.214.123,22692.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:49.434917,0.000347,udp,147.32.84.170,45592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:13:52.162358,6.048167,udp,147.32.84.229,13363.0,->,118.161.179.119,9570.0,INT,0.0,,3,225,225,0,75.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:13:55.734259,0.078788,udp,147.32.84.229,13363.0,<->,95.143.220.218,27639.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:13:59.434968,0.000348,udp,147.32.84.170,36676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:02.173664,0.000289,udp,147.32.84.138,39954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:14:03.501156,0.000281,udp,147.32.85.34,59585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:14:07.081276,0.000334,udp,147.32.84.170,39640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:07.082692,0.245994,tcp,147.32.84.170,51510.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:09.436256,0.018214,tcp,147.32.84.170,57409.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:19.434010,0.000477,udp,147.32.84.170,56604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:26.074676,0.000447,udp,147.32.87.48,2513.0,->,147.32.86.254,161.0,INT,0.0,,2,262,262,0,131.0,1.0,22,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:14:29.433802,0.00042,udp,147.32.84.170,57956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:29.435889,0.018354,tcp,147.32.84.170,33530.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:30.696623,0.000223,udp,147.32.84.138,46401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:14:33.305438,0.000191,udp,147.32.85.25,40804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:14:35.510139,0.000149,udp,147.32.84.138,38856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:14:35.715160,60.850822,udp,147.32.84.229,13363.0,<->,69.255.197.209,41251.0,CON,0.0,0.0,8,532,292,240,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:14:39.435026,0.000298,udp,147.32.84.170,59092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:41.308329,61.300297,tcp,147.32.84.165,2015.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:14:45.799163,1713.052246,udp,217.202.253.99,16236.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,370,248,122,92.5,0.6702702702702703,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:14:49.436099,0.017936,tcp,147.32.84.170,38992.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:14:59.510315,0.000563,udp,82.44.148.90,40803.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,22,1,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:00.126083,0.001863,udp,174.57.200.113,5774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:03.226126,0.035217,udp,147.32.84.229,13363.0,<->,88.213.224.32,42758.0,CON,0.0,0.0,4,3060,60,3000,765.0,0.0196078431372549,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:03.580304,2837.000732,udp,147.32.84.229,13363.0,<->,24.212.97.250,59982.0,CON,0.0,0.0,6,795,615,180,132.5,0.7735849056603774,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:06.562603,0.000132,udp,147.32.84.138,57363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:15:17.738651,0.000193,udp,147.32.84.138,35204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:15:19.436095,0.018532,tcp,147.32.84.170,36139.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:22.397503,0.000219,udp,147.32.86.20,55343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:15:26.923749,0.249724,udp,147.32.84.170,38143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:27.460730,3168.088623,udp,67.171.181.36,27028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,702,516,186,117.0,0.7350427350427351,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:29.434097,0.000335,udp,147.32.84.170,49459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:31.273952,0.00175,udp,70.49.228.216,61133.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:31.513348,0.701567,tcp,147.32.84.164,48409.0,->,202.80.110.132,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:15:36.804623,7.028219,tcp,66.249.72.176,59589.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,30,13859,1606,12253,461.96666666666664,0.11588137672270726,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:15:39.444642,0.000418,udp,147.32.84.170,37367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:40.077091,0.000316,udp,147.32.84.170,35559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:40.077975,0.000277,udp,147.32.84.170,59418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:40.079121,0.2373,tcp,147.32.84.170,51524.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:15:42.175467,61.285851,tcp,147.32.84.165,2016.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:15:48.473034,0.000504,udp,95.208.207.21,45544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,76,481,278.5,0.13644524236983843,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:15:48.977602,0.0,icmp,147.32.84.164,771.0,->,109.185.130.197,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:15:49.436126,0.000336,udp,147.32.84.170,57824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:11.081063,0.000296,udp,147.32.84.170,47502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:11.081946,0.000301,udp,147.32.84.170,52177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:11.187469,2836.018555,udp,138.232.204.75,7075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1063,538,525,265.75,0.5061147695202258,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:16:11.740744,0.001627,udp,203.88.11.4,20085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,88,60,74.0,0.5945945945945946,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:16:12.430409,3529.425293,udp,93.155.255.58,20324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:16:16.794701,0.00048,udp,92.241.79.98,62753.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:16:17.516462,0.000271,udp,147.32.84.138,36692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:16:19.434155,0.000372,udp,147.32.84.170,55802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:29.434144,0.000614,udp,147.32.84.170,50836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:29.960133,0.000221,udp,147.32.85.89,42107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:16:31.679593,0.000255,udp,147.32.84.138,53106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:16:36.840261,738.67749,tcp,208.43.179.24,80.0,->,147.32.86.29,41039.0,SA_,0.0,,16,960,960,0,60.0,1.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:16:42.084625,0.000281,udp,147.32.84.170,55926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:16:43.033255,61.300835,tcp,147.32.84.165,2017.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:16:48.121794,0.000584,udp,109.107.211.130,16948.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:16:59.918894,1189.36145,udp,147.32.84.229,13363.0,<->,83.69.13.187,43445.0,CON,0.0,0.0,10,698,518,180,69.8,0.7421203438395415,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:01.908569,0.000267,udp,147.32.84.138,41001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:17:09.178786,1286.422607,udp,147.32.84.229,13363.0,<->,118.169.68.153,17785.0,CON,0.0,0.0,8,3297,216,3081,412.125,0.06551410373066424,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:09.426050,0.000269,udp,147.32.84.138,47204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:17:09.436233,0.018525,tcp,147.32.84.170,55230.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:17:10.278504,666.20813,udp,147.32.84.229,13363.0,->,77.176.65.54,53563.0,INT,0.0,,6,1896,1896,0,316.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:17:11.841213,0.00066,udp,72.234.40.30,36929.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,72,483,277.5,0.12972972972972974,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:13.152085,0.320909,tcp,147.32.84.170,48069.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:17:13.170256,485.797241,udp,147.32.84.229,13363.0,<->,82.136.118.156,64217.0,CON,0.0,0.0,6,407,224,183,67.83333333333333,0.5503685503685504,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:14.116678,6.018416,udp,67.84.212.75,51116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:14.170223,78.089951,udp,147.32.84.229,13363.0,<->,24.146.224.139,36744.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:15.204570,0.216055,udp,75.149.34.205,62188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,262,179,83,131.0,0.683206106870229,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:16.673920,0.004858,tcp,147.32.87.249,3649.0,->,147.32.87.48,80.0,_FSPA,,0.0,8,3576,0,3576,447.0,0.0,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:17:28.111388,5.906455,tcp,61.147.68.190,2436.0,->,147.32.85.100,3126.0,S_,0.0,,2,124,124,0,62.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:17:36.285554,0.000692,udp,84.111.196.223,2519.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,74,477,275.5,0.13430127041742287,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:17:40.529620,0.206063,tcp,147.32.86.20,4624.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:17:43.901189,64.310127,tcp,147.32.84.165,2018.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:17:49.434344,0.000386,udp,147.32.84.170,45758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:17:59.434379,0.000316,udp,147.32.84.170,59114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:07.272714,0.000342,udp,147.32.87.36,53759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:18:07.343708,0.000309,udp,147.32.86.20,51157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:18:09.918171,0.00023,udp,147.32.84.138,40326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:18:12.283347,0.0,icmp,147.32.84.144,771.0,->,61.189.184.76,50195.0,URP,0.0,,1,480,480,0,480.0,1.0,22,0,flow=Background,Background,-1 2011-08-16 22:18:13.414934,0.311754,tcp,147.32.84.170,47963.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:14.142857,0.00025,udp,147.32.84.170,41044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:14.148238,240.044571,tcp,147.32.84.170,35242.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:14.150094,240.043304,tcp,147.32.84.170,35246.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:14.791616,0.000534,udp,46.47.77.50,35544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,771,76,695,385.5,0.09857328145265888,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:15.080016,0.000236,udp,147.32.84.170,42124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:15.082021,0.305565,tcp,147.32.84.170,48089.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:15.905823,0.001777,udp,95.154.133.52,11119.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,495,60,277.5,0.8918918918918919,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:18.710617,0.000456,udp,217.67.64.87,37564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:19.436578,0.017757,tcp,147.32.84.170,55252.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:28.122996,0.000586,udp,208.86.164.228,2220.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,74,489,281.5,0.13143872113676733,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:29.435340,0.000321,udp,147.32.84.170,51810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:32.532595,0.207167,tcp,147.32.86.20,4670.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:18:39.434644,0.000347,udp,147.32.84.170,43327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:41.667883,3439.350342,udp,79.132.30.158,53016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:44.759271,61.285885,tcp,147.32.84.165,2019.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:18:49.026015,0.000245,udp,147.32.85.25,54343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:18:49.434428,0.000398,udp,147.32.84.170,42846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:49.436358,0.018369,tcp,147.32.84.170,59269.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:18:52.256571,675.467896,udp,41.225.136.135,35617.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,875,208,667,145.83333333333334,0.2377142857142857,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:18:54.375809,0.000294,udp,147.32.84.138,58328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:19:04.115260,0.003278,udp,187.135.36.113,46916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:19:07.165611,0.000559,udp,184.107.41.72,37365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,983,75,908,491.5,0.0762970498474059,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:19:07.212409,0.15514,tcp,147.32.84.59,6888.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,11,2800,1883,917,254.54545454545453,0.6725,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:19:26.159294,0.00034,udp,147.32.86.20,63581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:19:29.434582,0.000371,udp,147.32.84.170,60958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:19:36.572319,0.000272,udp,147.32.84.138,42735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:19:41.006525,3.000538,tcp,64.15.156.151,46709.0,->,147.32.85.100,3126.0,S_,0.0,,2,148,148,0,74.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:19:45.616860,61.285629,tcp,147.32.84.165,2020.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:19:46.774695,0.000261,udp,147.32.84.138,36521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:19:48.081307,0.000453,udp,147.32.84.170,53973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:19:48.082364,0.000355,udp,147.32.84.170,34199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:19:49.436806,0.018384,tcp,147.32.84.170,40310.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:19:50.261699,0.00024,udp,147.32.85.25,41276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:19:51.059141,1827.564819,udp,41.141.90.123,38311.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:19:54.484257,6.067026,udp,147.32.84.229,13363.0,->,78.250.253.92,64259.0,INT,0.0,,3,531,531,0,177.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:19:59.075812,0.000613,udp,107.8.84.75,42304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,172,71,121.5,0.7078189300411523,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:19:59.434629,0.000421,udp,147.32.84.170,45876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:19:59.436733,0.018202,tcp,147.32.84.170,55265.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:07.255164,0.00014,udp,147.32.84.138,43209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:20:08.358601,3027.933105,udp,196.215.75.238,29262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:20:13.137042,0.000137,udp,147.32.84.138,51584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:20:19.435374,0.000361,udp,147.32.84.170,41241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:19.436568,0.018376,tcp,147.32.84.170,51482.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:25.131504,0.00048,udp,62.45.160.189,20810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:20:27.586806,0.247191,udp,147.32.84.170,43425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:28.327747,0.246746,udp,147.32.84.170,49831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:29.435400,0.000386,udp,147.32.84.170,33318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:29.436449,0.018099,tcp,147.32.84.170,40316.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:31.206497,0.000254,udp,147.32.85.25,47812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:20:31.515000,0.295074,tcp,147.32.84.164,58501.0,->,63.146.177.252,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:20:39.445358,0.000314,udp,147.32.84.170,59907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:46.474459,61.293247,tcp,147.32.84.165,2021.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:20:47.102019,0.000304,udp,147.32.85.25,55673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:20:49.434377,0.000434,udp,147.32.84.170,41834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:50.080960,0.000296,udp,147.32.84.170,57388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:20:52.256284,0.00021,udp,147.32.85.25,54243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:20:59.166948,0.000413,udp,178.249.174.18,25381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:21:09.399565,3597.923828,arp,147.32.87.53,,who,147.32.87.18,,RSP,,,32,1920,0,1920,60.0,0.0,22,,flow=Background,Background,-1 2011-08-16 22:21:09.434521,0.000538,udp,147.32.84.170,45051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:09.435463,0.000373,udp,147.32.84.170,52395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:09.436562,0.018229,tcp,147.32.84.170,46659.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:17.126109,0.000193,udp,147.32.84.138,44193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:18.287477,0.135604,tcp,147.32.86.20,4818.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:21:19.436605,0.000386,udp,147.32.84.170,46074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:21.084176,0.228319,tcp,147.32.84.170,48115.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:21.607222,215.61824,udp,147.32.84.229,13363.0,<->,65.34.216.39,17575.0,CON,0.0,0.0,12,798,438,360,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:21:22.536686,44.069981,udp,46.135.17.233,9299.0,->,147.32.86.44,10966.0,INT,0.0,,5,712,712,0,142.4,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:21:29.158449,0.001524,udp,80.240.14.12,37482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:21:29.388863,0.000289,udp,147.32.84.79,40400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:32.741900,0.000281,udp,147.32.84.138,45295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:36.978159,0.000506,udp,147.32.86.20,59049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:39.439692,0.01827,tcp,147.32.84.170,36724.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:47.343966,64.328575,tcp,147.32.84.165,2022.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:21:48.659915,0.000187,udp,147.32.85.25,41506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:49.331544,0.000172,tcp,147.32.80.7,38830.0,->,147.32.84.19,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:21:52.082232,0.000319,udp,147.32.84.170,43150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:21:52.269512,0.028447,udp,147.32.84.229,13363.0,<->,94.212.122.155,7049.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:21:55.652118,0.000157,udp,147.32.84.138,58265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:21:59.435777,0.000345,udp,147.32.84.170,43344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:03.009497,0.000246,udp,147.32.85.34,62007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:22:03.021153,0.000251,udp,147.32.85.34,57538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:22:09.399993,0.000282,udp,147.32.84.138,43321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:22:10.747484,0.000376,udp,147.32.84.170,52489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:14.783913,0.000604,udp,178.168.24.175,1045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,74,510,292.0,0.1267123287671233,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:17.646762,0.001762,udp,76.123.232.90,25464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,515,455,60,257.5,0.883495145631068,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:19.436481,0.000381,udp,147.32.84.170,47157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:20.183896,2548.784424,udp,24.42.19.191,32484.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,6048,120,5928,756.0,0.01984126984126984,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:24.678978,0.00052,udp,189.135.219.96,45994.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:25.102736,0.372186,udp,147.32.84.229,13363.0,<->,220.138.104.164,3163.0,CON,0.0,0.0,2,547,487,60,273.5,0.8903107861060329,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:25.214512,3388.610596,udp,81.247.32.93,6487.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:26.894719,8.998156,tcp,147.32.84.171,45793.0,->,81.214.189.108,28999.0,S_,0.0,,3,222,222,0,74.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:22:27.317393,3092.665771,udp,109.94.9.31,26705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1465,1093,372,122.08333333333333,0.7460750853242321,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:29.435840,0.000402,udp,147.32.84.170,52411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:29.436813,0.000353,udp,147.32.84.170,35410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:34.944209,5.929264,tcp,66.249.72.20,34866.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,16,6686,841,5845,417.875,0.1257852228537242,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:22:38.552427,0.341847,tcp,128.237.255.174,62811.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,23,13958,1129,12829,606.8695652173913,0.08088551368390887,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:22:38.968507,3046.523438,udp,204.19.200.182,33669.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:22:39.022866,0.227363,tcp,128.237.255.174,62821.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,14,5009,864,4145,357.7857142857143,0.17248951886604114,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:22:48.192443,64.292877,tcp,147.32.84.165,2023.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:22:49.435626,0.000396,udp,147.32.84.170,39356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:49.437605,0.018614,tcp,147.32.84.170,47174.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:22:59.437787,0.019142,tcp,147.32.84.170,52168.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:09.436812,0.000327,udp,147.32.84.170,33808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:10.614873,66.968155,udp,67.212.184.98,1234.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:23:11.222459,0.000253,udp,147.32.85.25,58982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:23:13.753277,0.47739,tcp,147.32.84.170,55255.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:14.222889,0.41359,tcp,147.32.84.170,55257.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:14.628236,0.306531,tcp,147.32.84.170,55258.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:15.016891,0.000291,udp,147.32.85.89,56671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:23:19.436931,0.000496,udp,147.32.84.170,51717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:20.017632,0.000282,udp,147.32.85.89,34942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:23:25.081235,0.000345,udp,147.32.84.170,38448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:29.436004,0.000311,udp,147.32.84.170,58599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:29.438080,0.018356,tcp,147.32.84.170,36747.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:34.834603,7.999552,udp,147.32.87.48,2601.0,->,147.32.86.239,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,22,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:23:41.738845,0.000251,udp,147.32.85.25,54031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:23:49.046805,64.033173,tcp,147.32.84.165,2024.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:23:49.436613,0.000354,udp,147.32.84.170,41237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:49.437662,0.018827,tcp,147.32.84.170,36749.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:55.107916,0.000282,udp,147.32.86.20,50798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:23:56.065373,0.228854,tcp,147.32.84.170,40068.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:23:59.435943,0.000498,udp,147.32.84.170,47086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:02.371604,0.093675,tcp,147.32.85.112,47269.0,->,90.183.38.59,143.0,FSPA_FSPA,0.0,0.0,18,2034,701,1333,113.0,0.3446411012782694,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:24:02.895480,0.000332,udp,147.32.85.34,60174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:09.435977,0.000377,udp,147.32.84.170,33533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:12.070883,69.374931,tcp,94.98.228.198,64050.0,->,147.32.85.100,3126.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:24:13.359731,0.747928,udp,98.254.93.1,26466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:17.533128,0.000226,udp,147.32.84.138,55080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:19.437068,0.000295,udp,147.32.84.170,58095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:19.438138,0.018272,tcp,147.32.84.170,39122.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:21.815669,0.000305,udp,147.32.84.138,59201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:21.837405,0.000174,udp,147.32.84.138,57096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:22.666546,0.000373,udp,147.32.84.171,34062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,92,175,133.5,0.3445692883895131,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:22.767464,8.6e-05,udp,147.32.85.25,55826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:25.135864,163.239716,udp,78.141.179.8,34050.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,298,178,120,74.5,0.5973154362416108,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:26.083369,0.000325,udp,147.32.84.170,50588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:27.543527,3528.069336,udp,98.228.52.219,26841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3584,137,3447,597.3333333333334,0.03822544642857143,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:29.437848,0.018441,tcp,147.32.84.170,42738.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:33.957111,0.000577,udp,24.141.38.117,38970.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,75,463,269.0,0.13940520446096655,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:34.229055,0.000337,udp,147.32.84.138,52251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:34.419645,1933.416138,udp,68.97.161.105,8427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1096,158,938,274.0,0.14416058394160583,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:38.835759,292.902435,udp,41.72.11.123,45777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,259,139,120,64.75,0.5366795366795367,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:39.436083,0.000378,udp,147.32.84.170,54899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:39.436911,0.00031,udp,147.32.84.170,35114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:24:43.844020,2849.382568,tcp,120.60.129.12,10072.0,->,147.32.84.171,6881.0,FSPA_FSPA,0.0,0.0,38139,36349087,915668,35433419,953.0686960853719,0.02519094908766209,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:24:46.261970,0.000255,udp,147.32.84.138,39058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:49.896918,61.255939,tcp,147.32.84.165,2025.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:24:50.496140,0.00069,udp,94.112.213.10,54915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:24:55.031355,0.000355,udp,147.32.85.89,34216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:24:59.438072,0.01851,tcp,147.32.84.170,42742.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:00.042433,0.000231,udp,147.32.84.138,50166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:25:01.073700,208.321106,udp,147.32.84.229,13363.0,<->,68.99.166.174,18318.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:01.393544,0.000254,udp,147.32.84.171,36633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,87,194,140.5,0.3096085409252669,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:25:05.941153,1877.865112,udp,188.153.65.104,3828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,693,148,545,173.25,0.21356421356421357,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:09.436839,0.000349,udp,147.32.84.170,52862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:12.232038,0.921955,tcp,147.32.3.51,2299.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:25:17.158119,0.000162,udp,147.32.84.138,37566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:25:19.436101,0.000359,udp,147.32.84.170,50090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:19.437992,0.01805,tcp,147.32.84.170,47200.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:27.624928,24.198244,tcp,81.102.251.15,50229.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,51,37169,5659,31510,728.8039215686274,0.1522505313567758,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:25:27.640009,0.061639,udp,147.32.84.229,13363.0,<->,194.30.102.12,17547.0,CON,0.0,0.0,2,309,247,62,154.5,0.7993527508090615,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:28.082365,0.000319,udp,147.32.84.170,42216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:28.083253,0.000268,udp,147.32.84.170,35931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:28.084363,0.272121,tcp,147.32.84.170,40080.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:28.775759,0.248958,udp,147.32.84.170,42780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:29.350728,0.00022,udp,147.32.85.25,52267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:25:29.436949,0.000329,udp,147.32.84.170,50384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:29.437971,0.018071,tcp,147.32.84.170,47202.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:29.766416,240.194992,tcp,147.32.84.170,58454.0,->,74.125.232.206,443.0,FSPA_FSPA,0.0,0.0,38,7997,3723,4274,210.44736842105263,0.46554958109290984,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:29.803232,0.000582,udp,96.19.187.79,48499.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,78,464,271.0,0.14391143911439114,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:31.517738,0.243744,tcp,147.32.84.164,59076.0,->,4.71.244.170,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:25:35.183808,0.000252,udp,147.32.84.138,50434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:25:36.543604,3585.422607,udp,77.99.177.248,38212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,1452,792,660,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:48.388031,0.000573,udp,24.213.130.196,7751.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:49.243072,0.064717,udp,147.32.84.229,13363.0,<->,213.231.25.32,21044.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:49.436103,0.000347,udp,147.32.84.170,41805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:49.436919,0.000322,udp,147.32.84.170,42286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:49.437934,0.018259,tcp,147.32.84.170,42749.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:25:50.416639,0.127226,udp,147.32.84.229,13363.0,<->,74.210.158.125,64535.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:50.734885,61.255962,tcp,147.32.84.165,2026.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:25:58.912496,0.117166,udp,147.32.84.229,13363.0,<->,68.199.47.38,43988.0,CON,0.0,0.0,2,584,93,491,292.0,0.15924657534246575,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:25:59.439310,0.018441,tcp,147.32.84.170,36768.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:06.494585,2.999711,tcp,125.119.63.239,3511.0,->,147.32.85.237,27992.0,S_,0.0,,2,124,124,0,62.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:26:06.714908,0.000238,udp,147.32.84.138,42436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:26:07.434637,46.451164,udp,208.117.234.10,43828.0,->,147.32.85.224,33435.0,INT,0.0,,11,660,660,0,60.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:26:09.436225,0.000318,udp,147.32.84.170,54924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:09.436983,0.00034,udp,147.32.84.170,41256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:14.745645,0.00164,udp,86.45.79.15,10026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:26:26.023455,0.000269,udp,147.32.85.25,33141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:26:29.436160,0.000557,udp,147.32.84.170,39207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:30.081751,0.000177,udp,147.32.84.170,51469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:33.574186,0.00053,udp,203.145.92.119,56592.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:26:44.602790,0.00027,udp,147.32.84.186,45327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:26:46.944973,0.000199,udp,147.32.85.25,46872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:26:48.934148,0.000166,udp,147.32.84.138,48786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:26:49.004099,0.206515,tcp,147.32.86.20,1141.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:26:49.437033,0.000328,udp,147.32.84.170,50446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:26:51.573011,61.271595,tcp,147.32.84.165,2027.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:26:53.499059,3073.000732,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,22,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 22:26:55.453108,3069.826904,udp,147.32.84.229,13363.0,<->,216.196.94.134,19187.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:26:57.130860,0.135805,tcp,147.32.86.20,1148.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:26:59.437319,0.000326,udp,147.32.84.170,35978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:01.011709,0.350141,udp,93.162.35.221,8608.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,264,174,90,132.0,0.6590909090909091,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:04.256395,6.015485,udp,147.32.84.229,13363.0,->,77.205.194.97,30833.0,INT,0.0,,3,207,207,0,69.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:27:07.452352,0.000209,udp,147.32.85.25,51797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:27:08.179176,3.005741,tcp,147.32.84.21,54959.0,->,74.125.39.109,,S_,0.0,,2,148,148,0,74.0,1.0,22,,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:27:13.381088,0.207623,tcp,147.32.86.20,1162.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:27:28.342091,15.454607,tcp,81.102.251.15,50243.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,23,6097,4268,1829,265.0869565217391,0.7000164015089388,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:27:28.504959,0.000234,udp,147.32.84.138,42959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:27:29.437273,0.000539,udp,147.32.84.170,50709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:31.092146,0.000234,udp,147.32.84.138,53492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:27:37.451034,0.000419,udp,213.111.31.86,34820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:38.026279,3526.45752,tcp,86.44.109.255,57622.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,196,17870,10795,7075,91.1734693877551,0.6040850587576945,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:27:39.380335,3130.790527,udp,84.55.22.0,35886.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1326,150,1176,331.5,0.11312217194570136,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:39.437298,0.000294,udp,147.32.84.170,59448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:39.438123,0.00032,udp,147.32.84.170,59600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:41.078398,3005.502686,udp,195.113.45.76,32823.0,->,239.255.255.253,11427.0,REQ,0.0,,6,1176,1176,0,196.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:27:44.361344,2413.515381,udp,147.32.84.229,13363.0,<->,206.223.246.30,18288.0,CON,0.0,0.0,12,4193,3327,866,349.4166666666667,0.7934652993083711,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:45.728468,0.000387,udp,217.164.4.51,51896.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,63,170,116.5,0.2703862660944206,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:49.437309,0.000461,udp,147.32.84.170,39505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:49.438183,0.000308,udp,147.32.84.170,35007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:49.439149,0.017926,tcp,147.32.84.170,48418.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:27:50.786564,0.00045,udp,96.38.132.124,40751.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:27:52.421745,64.180405,tcp,147.32.84.165,2028.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:27:57.224670,0.000368,udp,117.103.163.26,39406.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,22,1,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:04.787017,1828.102661,udp,75.106.220.215,23761.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:07.889305,0.000554,rtcp,151.56.149.66,29968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:09.439336,0.018505,tcp,147.32.84.170,45553.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:28:10.461302,0.00026,udp,147.32.84.59,59920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:12.770966,0.029161,udp,147.32.84.229,13363.0,<->,149.13.32.18,33033.0,CON,0.0,0.0,2,568,81,487,284.0,0.1426056338028169,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:12.908990,0.000245,udp,147.32.84.138,59216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:13.630202,0.256892,tcp,147.32.84.170,34525.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:28:14.357554,0.000264,udp,147.32.84.138,36203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:15.745105,0.000236,udp,147.32.84.59,41197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:19.213246,0.000143,udp,147.32.84.138,41619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:19.218039,0.000244,udp,147.32.84.138,36624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:23.458654,2033.960938,udp,88.204.1.157,50070.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,6004,2973,3031,750.5,0.4951698867421719,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:34.674561,0.223086,tcp,75.148.41.117,51018.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:28:36.384150,0.00065,udp,77.29.0.175,52940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,675,75,600,337.5,0.1111111111111111,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:37.207685,0.000427,udp,87.185.173.152,63582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:37.993715,0.000332,udp,147.32.84.138,58882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:28:45.689830,3141.12085,udp,129.105.17.141,10813.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,378,256,122,94.5,0.6772486772486772,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:28:56.183730,61.255077,tcp,147.32.84.165,2029.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:28:59.439404,0.017892,tcp,147.32.84.170,45565.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:04.906222,0.000312,udp,147.32.84.138,48226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:05.083750,0.000257,udp,147.32.84.170,38490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:05.086022,0.270313,tcp,147.32.84.170,41274.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:19.439565,0.136396,tcp,147.32.86.20,1277.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:29:25.087883,0.000352,udp,147.32.84.138,51362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:29.437548,0.000324,udp,147.32.84.170,60448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:30.408555,0.000293,udp,147.32.84.138,47795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:35.575335,0.000329,udp,147.32.86.20,56901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:36.086413,0.322008,tcp,147.32.84.170,41278.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:38.825937,0.207388,tcp,147.32.86.20,1293.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:29:39.437320,0.000492,udp,147.32.84.170,43202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:47.220952,0.000544,udp,200.88.233.97,63188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:29:49.437491,0.00035,udp,147.32.84.170,45337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:49.439592,0.018364,tcp,147.32.84.170,45572.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:29:51.120855,0.00028,udp,147.32.85.25,57492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:54.293053,0.000258,udp,147.32.84.138,60889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:56.126080,0.000257,udp,147.32.84.59,54537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:29:57.021283,61.273773,tcp,147.32.84.165,2030.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:30:01.490963,0.000223,udp,147.32.84.59,44952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:01.619256,0.00033,udp,147.32.84.186,39681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:01.633914,0.000511,udp,147.32.87.36,41627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:30:01.636934,1800.074707,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,2,120,0,120,60.0,0.0,22,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:30:01.898978,0.000204,udp,147.32.84.59,40406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:06.424018,0.000554,udp,84.84.161.254,50342.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,78,477,277.5,0.14054054054054055,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:06.502694,0.000595,udp,41.95.12.116,8218.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:09.438165,0.000361,udp,147.32.84.170,35496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:10.523277,0.000288,udp,147.32.87.36,52033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:30:13.840816,11.545615,udp,2.38.183.207,47854.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,656,536,120,164.0,0.8170731707317073,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:23.223928,0.073955,udp,147.32.84.229,13363.0,<->,85.95.69.237,33049.0,CON,0.0,0.0,4,3037,60,2977,759.25,0.01975633849193283,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:29.438296,0.000292,udp,147.32.84.170,53614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:29.638294,0.000124,udp,147.32.85.34,52708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:30.462741,0.247213,udp,147.32.84.170,44238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:32.668323,60.827389,tcp,180.242.48.134,49835.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,27,5321,2037,3284,197.07407407407408,0.38282277767336964,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:30:37.053073,0.000293,udp,147.32.84.59,50574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:37.134117,0.000191,udp,147.32.84.59,57863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:37.134960,0.000226,udp,147.32.84.59,55607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:30:38.518873,0.000539,udp,77.71.62.83,16489.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:39.437429,0.019969,udp,147.32.84.170,48558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:39.457911,0.00033,udp,147.32.84.170,37826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:39.458910,0.018169,tcp,147.32.84.170,38487.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:30:41.456613,1446.672241,icmp,69.4.233.53,2563.0,->,147.32.85.60,,URHPRO,0.0,,2,180,180,0,90.0,1.0,22,,flow=Background,Background,-1 2011-08-16 22:30:42.963289,3041.817139,udp,217.144.191.64,60761.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:47.177397,0.015575,tcp,147.32.85.74,34201.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:30:57.869632,64.119865,tcp,147.32.84.165,2031.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:30:58.525862,2346.026367,udp,92.24.49.205,41008.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,406,226,180,67.66666666666667,0.5566502463054187,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:30:59.437431,0.000253,udp,147.32.84.170,59084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:09.083769,0.00029,udp,147.32.84.170,35402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:09.085875,0.276681,tcp,147.32.84.170,41291.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:09.439630,0.018664,tcp,147.32.84.170,57418.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:11.359623,1835.657471,udp,83.78.99.82,34024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,726,540,186,121.0,0.743801652892562,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:11.487704,10.948916,tcp,72.130.197.2,61689.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:31:12.333023,0.0,tcp,188.83.111.220,52698.0,->,147.32.87.238,39371.0,S_,0.0,,1,74,74,0,74.0,1.0,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:31:15.180850,0.000587,udp,187.142.3.190,10566.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,297,235,62,148.5,0.7912457912457912,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:16.432512,0.000222,udp,147.32.84.138,44103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:31:27.440908,0.000489,udp,79.85.155.196,58705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:27.991496,2354.439941,udp,147.32.84.229,13363.0,<->,70.83.120.165,16825.0,CON,0.0,0.0,4,650,136,514,162.5,0.20923076923076922,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:29.437613,0.000322,udp,147.32.84.170,43792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:30.327365,1938.403931,udp,109.186.79.60,63657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,925,192,733,154.16666666666666,0.20756756756756756,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:30.927634,0.000448,udp,92.40.254.7,17449.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:35.649520,0.000716,udp,211.120.203.122,34450.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,683,76,607,341.5,0.11127379209370425,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:31:39.439712,0.018997,tcp,147.32.84.170,37104.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:40.089335,0.253006,tcp,147.32.84.170,54270.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:40.620424,0.000175,udp,147.32.84.138,40024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:31:44.619603,3.451597,tcp,80.48.151.130,3152.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,35,25106,1406,23700,717.3142857142857,0.056002549191428344,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:31:47.288029,0.000376,udp,147.32.84.21,47427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:31:59.437730,0.000335,udp,147.32.84.170,60793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:59.438614,0.000305,udp,147.32.84.170,33549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:31:59.777524,0.000253,udp,147.32.84.138,33759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:00.571348,3082.691162,udp,78.45.26.148,2774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:01.571260,61.255913,tcp,147.32.84.165,2032.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:32:02.238433,0.0,tcp,98.126.52.195,80.0,->,147.32.84.86,48728.0,SA_,0.0,,1,62,62,0,62.0,1.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:32:03.797925,0.000311,udp,147.32.85.115,56210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,78,178,128.0,0.3046875,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:09.129556,0.000237,udp,147.32.85.25,58403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:09.437738,0.000373,udp,147.32.84.170,44311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:09.438734,0.00021,udp,147.32.84.170,54715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:12.088642,0.000213,udp,147.32.84.138,38772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:19.439887,0.018382,tcp,147.32.84.170,48566.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:21.221889,3551.262695,udp,147.32.84.229,13363.0,<->,81.165.0.206,32616.0,CON,0.0,0.0,6,3167,120,3047,527.8333333333334,0.03789074834227976,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:26.267650,0.00034,udp,147.32.84.19,33942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,68,135,101.5,0.33497536945812806,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:27.626216,1852.772827,udp,85.230.188.250,41975.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,928,266,662,116.0,0.28663793103448276,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:27.868081,0.0,udp,147.32.84.99,427.0,->,192.168.88.186,50974.0,INT,0.0,,1,377,377,0,377.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:32:35.883403,0.00068,udp,109.197.63.56,53988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:37.617756,0.00044,udp,78.62.145.229,51104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:37.723018,1873.454224,udp,90.177.61.140,10078.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,929,681,248,116.125,0.7330462863293864,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:39.437801,0.000488,udp,147.32.84.170,35315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:39.439900,0.017864,tcp,147.32.84.170,47914.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:42.109007,0.000405,udp,147.32.84.170,45856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:45.304028,0.102905,tcp,147.32.84.59,7111.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,11,3589,1910,1679,326.27272727272725,0.5321816662022848,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:32:47.656521,0.000274,udp,147.32.84.138,51450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:32:49.437826,0.000471,udp,147.32.84.170,37445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:32:56.116265,0.000915,udp,2.142.1.15,53413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1019,78,941,509.5,0.07654563297350343,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:32:59.439890,0.000369,udp,147.32.84.170,34443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:02.409283,64.269966,tcp,147.32.84.165,2033.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:33:06.825596,0.00062,udp,109.87.78.201,63030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,74,483,278.5,0.13285457809694792,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:33:11.033572,2.717094,tcp,66.249.66.250,42506.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,12,3717,771,2946,309.75,0.20742534301856336,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:33:11.334234,13.747008,tcp,195.34.106.186,4595.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,19,1316,683,633,69.26315789473684,0.5189969604863222,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:33:13.082996,0.000278,udp,147.32.84.170,54845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:13.134667,0.24603,tcp,147.32.84.170,42090.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:13.671728,0.248473,tcp,147.32.84.170,51858.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:13.995775,0.332382,tcp,147.32.84.170,42095.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:17.171758,0.000265,udp,147.32.84.138,44561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:33:19.780066,1.177768,tcp,147.32.84.164,41384.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,2248,2680948,32773,2648175,1192.5925266903914,0.01222440718730837,22,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 22:33:32.023164,0.000361,udp,147.32.86.20,63059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:33:32.825662,15.946489,tcp,89.176.37.58,37374.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,27,9943,2801,7142,368.25925925925924,0.2817057226189279,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:33:37.243360,0.000204,udp,147.32.84.138,45628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:33:40.057818,0.001605,udp,151.25.221.108,10007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:33:49.438813,0.000302,udp,147.32.84.170,37449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:33:50.057024,0.000805,udp,94.155.203.96,40022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,697,75,622,348.5,0.10760401721664276,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:33:54.570389,0.168477,udp,147.32.84.229,13363.0,<->,67.216.245.132,52144.0,CON,0.0,0.0,3,1751,212,1539,583.6666666666666,0.12107367218732153,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:33:56.056196,0.001942,udp,98.231.187.194,56876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:33:59.440068,0.018216,tcp,147.32.84.170,37129.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:03.423021,0.00027,udp,147.32.85.34,59589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:06.260839,64.39711,tcp,147.32.84.165,2034.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:34:09.438959,0.000358,udp,147.32.84.170,41334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:13.048002,0.002575,udp,178.77.230.254,16420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:34:13.138421,0.000303,udp,147.32.84.59,47894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:13.440524,0.000274,udp,147.32.84.138,57715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:13.463655,0.000314,udp,147.32.84.138,34116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:15.087052,0.259043,tcp,147.32.84.170,54296.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:19.437987,0.000469,udp,147.32.84.170,57032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:19.440054,0.018615,tcp,147.32.84.170,48588.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:22.337507,0.000448,udp,173.3.67.59,1702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:34:22.399449,0.00036,udp,147.32.86.20,53662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:24.943982,0.000278,udp,147.32.84.138,32972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:25.113596,0.000309,udp,147.32.85.89,35808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:34.792792,3224.638428,udp,88.91.176.142,43083.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:34:38.181009,0.000239,udp,147.32.85.25,57435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:34:39.438970,0.000355,udp,147.32.84.170,48379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:39.440079,0.018378,tcp,147.32.84.170,47936.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:46.084332,0.000296,udp,147.32.84.170,47280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:46.086567,0.261805,tcp,147.32.84.170,54300.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:34:48.886106,0.000434,udp,91.193.255.44,61794.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:34:58.964683,0.205329,tcp,147.32.86.20,1573.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:34:59.067276,0.0,icmp,62.235.141.64,259.0,->,147.32.84.229,16107.0,URH,0.0,,1,88,88,0,88.0,1.0,22,0,flow=Background,Background,-1 2011-08-16 22:34:59.440016,0.018469,tcp,147.32.84.170,53991.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:01.024895,5.393589,tcp,151.80.8.137,49633.0,->,147.32.87.232,443.0,S_,0.0,,3,186,186,0,62.0,1.0,22,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:35:03.566881,0.000501,udp,212.183.140.39,4349.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:06.848832,2427.385498,udp,78.86.7.218,47055.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:09.438928,0.000326,udp,147.32.84.170,42187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:10.234302,64.194511,tcp,147.32.84.165,2035.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:35:11.252750,0.000197,udp,147.32.84.138,52315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:35:11.963222,213.089523,tcp,147.32.84.59,7260.0,->,209.85.148.147,80.0,FSPA_FSPA,0.0,0.0,15,5343,1371,3972,356.2,0.2565974171813588,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:35:12.666407,0.145566,tcp,147.32.84.59,7261.0,->,109.123.94.117,80.0,SRPA_FSPA,0.0,0.0,20,14347,932,13415,717.35,0.06496131595455495,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:35:13.572099,0.000219,udp,147.32.84.138,56278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:35:15.121073,0.000124,udp,147.32.85.89,45026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:35:17.086743,0.293658,tcp,147.32.84.170,54304.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,11,1297,627,670,117.9090909090909,0.48342328450269856,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:22.456397,365.145844,udp,77.212.80.230,38818.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,504,368,136,126.0,0.7301587301587301,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:29.438947,0.000275,udp,147.32.84.170,46774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:29.812402,0.000587,udp,178.196.109.113,62544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:31.136417,0.247809,udp,147.32.84.170,45067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:31.631255,0.246,udp,147.32.84.170,47587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:32.124224,0.000629,udp,147.32.84.170,55022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:33.901933,0.207103,tcp,147.32.86.20,1604.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:35:36.027127,0.001965,udp,67.181.149.112,49177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:41.002763,3288.786133,udp,202.88.95.92,25483.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:35:48.085569,0.0003,udp,147.32.84.170,42595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:49.438143,0.000352,udp,147.32.84.170,51661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:59.438160,0.000283,udp,147.32.84.170,52532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:59.438986,0.000412,udp,147.32.84.170,36012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:35:59.440109,0.018437,tcp,147.32.84.170,47948.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:03.460308,0.000258,udp,147.32.85.34,61441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:36:03.490466,0.000412,udp,147.32.85.34,49353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:36:03.493134,0.000362,udp,147.32.85.34,49867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:36:09.438153,0.000373,udp,147.32.84.170,42681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:12.391233,2.624064,tcp,66.249.66.211,62021.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1699,727,972,169.9,0.42789876397881105,22,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 22:36:14.005825,61.265118,tcp,147.32.84.165,2036.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:36:18.732563,0.062358,tcp,147.32.84.59,7352.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,11,2990,1886,1104,271.8181818181818,0.6307692307692307,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:36:19.440070,0.01786,tcp,147.32.84.170,46689.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:21.244389,0.000471,udp,75.185.119.68,37581.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:36:24.036305,0.000503,udp,46.18.148.239,8767.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,75,464,269.5,0.1391465677179963,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:36:29.438110,0.000403,udp,147.32.84.170,44212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:38.366366,1957.359375,udp,147.32.84.229,13363.0,<->,69.243.204.48,40123.0,CON,0.0,0.0,8,1023,765,258,127.875,0.7478005865102639,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:36:39.438996,0.000455,udp,147.32.84.170,58546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:39.441095,0.018796,tcp,147.32.84.170,39296.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:47.721704,0.000554,udp,213.175.179.19,33967.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,77,475,276.0,0.13949275362318841,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:36:50.085793,0.000106,udp,147.32.84.170,57937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:50.087613,0.261534,tcp,147.32.84.170,49440.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:36:52.455663,2.435808,tcp,66.249.66.14,64370.0,->,147.32.87.27,443.0,FSRPA_FSPA,0.0,0.0,23,7940,1592,6348,345.2173913043478,0.2005037783375315,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:36:59.437992,0.000389,udp,147.32.84.170,60071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:37:04.646117,500.002167,tcp,147.32.84.165,2037.0,->,195.113.232.98,80.0,SPA_FSPA,0.0,0.0,14,5498,531,4967,392.7142857142857,0.09658057475445617,22,1,flow=From-Botnet-V49-TCP-Established-HTTP-Ad-40,Botnet,1 2011-08-16 22:37:05.535097,0.000434,udp,81.66.209.114,34065.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:07.346512,0.000407,udp,147.32.86.20,59107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:37:14.437733,0.000706,udp,212.242.124.176,29448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,947,76,871,473.5,0.08025343189017951,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:14.853304,64.150681,tcp,147.32.84.165,2038.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:37:18.445882,13.171945,icmp,69.4.233.53,2563.0,->,147.32.85.96,,URHPRO,0.0,,2,180,180,0,90.0,1.0,22,,flow=Background,Background,-1 2011-08-16 22:37:21.085321,0.000284,udp,147.32.84.170,38160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:37:24.888398,0.036952,udp,147.32.84.229,13363.0,<->,193.219.172.139,38950.0,CON,0.0,0.0,2,557,77,480,278.5,0.13824057450628366,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:29.438220,0.000344,udp,147.32.84.170,58746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:37:41.361343,0.00244,udp,88.101.206.228,23456.0,<->,147.32.86.254,161.0,CON,0.0,0.0,2,243,120,123,121.5,0.49382716049382713,22,1,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:41.380901,0.000169,udp,147.32.84.138,59176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:37:43.689743,0.066614,udp,147.32.84.171,35903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,77,162,119.5,0.32217573221757323,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:37:46.475483,0.14218,udp,84.222.85.200,50428.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,776,139,637,194.0,0.1791237113402062,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:49.440404,0.017763,tcp,147.32.84.170,57062.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:37:52.084660,0.00032,udp,147.32.84.170,44353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:37:53.130511,0.000617,udp,86.182.63.35,56211.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,78,473,275.5,0.14156079854809436,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:53.921606,0.000566,udp,78.101.228.206,38245.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,636,79,557,318.0,0.12421383647798742,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:37:57.040785,3592.527344,udp,147.32.84.151,37429.0,<->,147.251.48.140,123.0,CON,0.0,0.0,88,7920,3960,3960,90.0,0.5,22,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 22:37:59.440384,0.018328,tcp,147.32.84.170,57064.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:03.413515,0.000221,udp,147.32.85.34,49538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:38:09.572111,2875.796387,rtp,71.62.84.216,55393.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,809,462,347,80.9,0.5710754017305315,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:38:13.683639,0.252003,tcp,147.32.84.170,33334.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:14.047031,0.402666,tcp,147.32.84.170,41800.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:14.142191,250.041351,tcp,147.32.84.170,33340.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:14.442141,0.33577,tcp,147.32.84.170,41807.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:18.585717,73.656807,tcp,147.32.84.165,2039.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1198,559,639,99.83333333333333,0.4666110183639399,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:38:19.438386,0.000351,udp,147.32.84.170,55100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:23.610133,0.000445,udp,201.75.68.132,55044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:38:28.364546,3582.255371,udp,147.32.84.229,13363.0,<->,78.141.179.10,34048.0,CON,0.0,0.0,10,1143,754,389,114.3,0.6596675415573053,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:38:29.439311,0.000459,udp,147.32.84.170,52901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:29.440423,0.01816,tcp,147.32.84.170,36115.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:33.347130,0.0,udp,96.11.198.116,1143.0,->,147.32.84.96,22304.0,INT,0.0,,1,81,81,0,81.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:38:39.440226,0.01802,tcp,147.32.84.170,39324.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:49.893807,0.00046,udp,85.48.27.80,31597.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,78,478,278.0,0.14028776978417265,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:38:52.111659,0.000492,tcp,184.82.243.16,80.0,->,147.32.84.55,61778.0,SA_R,0.0,0.0,2,120,60,60,60.0,0.5,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:38:54.085611,0.000382,udp,147.32.84.170,50581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:54.087883,0.243863,tcp,147.32.84.170,49468.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:38:57.152364,0.081866,udp,147.32.84.229,13363.0,<->,188.129.191.175,51388.0,CON,0.0,0.0,2,695,155,540,347.5,0.22302158273381295,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:38:59.438459,0.000401,udp,147.32.84.170,36007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:01.099092,0.0005,udp,147.32.86.20,60372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:39:06.454658,0.000399,udp,93.155.255.58,4904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:09.440794,0.017752,tcp,147.32.84.170,57085.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:10.687369,3064.787354,udp,149.5.45.254,43002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2351,1580,771,130.61111111111111,0.6720544449170566,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:11.411089,0.000301,udp,147.32.84.138,50653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:39:19.439308,0.000366,udp,147.32.84.170,57885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:22.558680,61.269859,tcp,147.32.84.165,2040.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:39:23.175764,0.001737,udp,32.97.110.55,16824.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:23.302582,0.000307,udp,147.32.84.138,52426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:39:27.520431,0.000301,udp,201.224.33.237,47940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:29.438282,0.000344,udp,147.32.84.170,37803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:31.852320,0.000591,udp,24.147.182.18,27330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:39.580989,0.000309,udp,147.32.84.59,51922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:39:39.657753,0.000232,udp,147.32.84.59,50123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:39:41.062674,0.000561,udp,83.228.183.138,50129.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:45.971427,0.00034,udp,46.117.191.101,29000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:49.060036,0.001677,udp,61.230.179.15,37925.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:39:56.088992,0.285771,tcp,147.32.84.170,49476.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:59.439339,0.000383,udp,147.32.84.170,45456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:39:59.440395,0.017746,tcp,147.32.84.170,39335.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:01.682297,0.000229,udp,147.32.84.138,57305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:03.226259,0.00037,udp,147.32.85.34,53967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:05.461210,0.0003,udp,147.32.84.59,59690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:07.017999,0.000212,udp,147.32.87.40,49842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:09.033444,0.000382,udp,78.84.76.184,17238.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:40:09.440563,0.018624,tcp,147.32.84.170,36128.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:10.907055,0.000186,udp,147.32.84.170,54673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:10.907673,0.000368,udp,147.32.84.170,34322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:10.908622,120.354614,tcp,147.32.84.170,57280.0,->,50.17.203.200,81.0,FSPA_FSPA,0.0,0.0,16,1722,1056,666,107.625,0.6132404181184669,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:18.401054,0.107385,udp,147.32.84.21,34787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:19.440639,0.018144,tcp,147.32.84.170,59875.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:23.405514,64.275696,tcp,147.32.84.165,2041.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:40:25.499144,0.000229,udp,147.32.86.92,37290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:31.726206,1.660579,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,3,458,142,316,152.66666666666666,0.31004366812227074,22,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 22:40:33.029088,0.246327,udp,147.32.84.170,50488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:33.387763,4.551249,tcp,147.32.84.165,2042.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,10,1011,568,443,101.1,0.5618199802176064,22,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 22:40:35.957704,0.000227,udp,147.32.84.59,57423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:41.154812,0.000232,udp,147.32.85.25,39056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:46.218607,0.000163,udp,147.32.85.25,55968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:40:49.440215,0.018576,tcp,147.32.84.170,59663.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:40:54.091493,2599.950195,udp,187.10.70.175,54355.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:40:56.062082,3554.919922,udp,147.32.84.13,53948.0,<->,82.208.56.89,123.0,CON,0.0,0.0,44,3960,1980,1980,90.0,0.5,22,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 22:41:03.387336,8.403026,udp,46.120.7.165,32955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,429,246,183,71.5,0.5734265734265734,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:05.750106,0.00022,udp,147.32.84.138,48709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:41:09.440936,0.017962,tcp,147.32.84.170,57103.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:09.695409,0.000649,udp,84.209.63.231,5950.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:19.440828,0.018009,tcp,147.32.84.170,45932.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:20.384170,0.007585,tcp,147.32.84.242,39538.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:41:20.495455,0.0078,tcp,147.32.84.242,59542.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:41:24.069315,0.000478,udp,109.84.0.4,46620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:27.257713,61.271843,tcp,147.32.84.165,2043.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:41:29.087435,0.000326,udp,147.32.84.170,51216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:29.438811,0.000251,udp,147.32.84.170,53074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:29.440652,0.01775,tcp,147.32.84.170,39881.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:36.776884,0.000547,udp,178.49.155.114,6581.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:39.085577,1480.652832,udp,99.49.33.253,22183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1086,966,120,271.5,0.8895027624309392,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:39.440844,0.01834,tcp,147.32.84.170,32992.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:40.414900,0.000339,udp,62.198.244.232,53294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:41:44.980647,0.0,tcp,147.32.84.165,2044.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:44.980960,0.0,tcp,147.32.84.165,2045.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:44.990217,0.0,tcp,147.32.84.165,2047.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.153196,0.0,tcp,147.32.84.165,2048.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.153428,0.0,tcp,147.32.84.165,2049.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.173251,0.0,tcp,147.32.84.165,2051.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.353455,0.0,tcp,147.32.84.165,2052.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.353637,0.0,tcp,147.32.84.165,2053.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:45.915030,0.0,tcp,147.32.84.165,2056.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:47.116191,0.0,tcp,147.32.84.165,2058.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:49.440782,0.01779,tcp,147.32.84.170,36902.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:41:58.432009,0.0,tcp,147.32.84.165,2278.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:58.432024,0.0,tcp,147.32.84.165,2276.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033144,0.0,tcp,147.32.84.165,2291.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033159,0.0,tcp,147.32.84.165,2290.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033165,0.0,tcp,147.32.84.165,2288.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033366,0.0,tcp,147.32.84.165,2292.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033385,0.0,tcp,147.32.84.165,2295.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.033390,0.0,tcp,147.32.84.165,2293.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:41:59.441379,0.018249,tcp,147.32.84.170,46064.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:00.086393,0.000249,udp,147.32.84.170,60607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:00.087631,0.278113,tcp,147.32.84.170,52411.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:00.984450,0.000253,udp,147.32.84.138,50970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:03.104163,0.000242,udp,147.32.85.34,51747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:03.115792,0.000199,udp,147.32.85.34,53183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:03.569203,0.000208,udp,147.32.84.138,54304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:06.481532,0.000395,udp,147.32.85.34,52966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:08.873188,0.000188,udp,147.32.85.25,44283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:10.449890,0.0,tcp,147.32.84.165,2519.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:10.449909,0.0,tcp,147.32.84.165,2518.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:11.050252,0.0,tcp,147.32.84.165,2528.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:11.050404,0.0,tcp,147.32.84.165,2531.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:11.050410,0.0,tcp,147.32.84.165,2530.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:11.050459,0.0,tcp,147.32.84.165,2533.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:11.050524,0.0,tcp,147.32.84.165,2532.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:12.249316,36.856586,udp,190.174.62.69,10070.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1617,1437,180,269.5,0.8886827458256029,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:42:20.314865,0.000222,udp,147.32.84.242,52408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:22.467073,0.0,tcp,147.32.84.165,2758.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:22.467087,0.0,tcp,147.32.84.165,2756.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067666,0.0,tcp,147.32.84.165,2771.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067757,0.0,tcp,147.32.84.165,2770.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067767,0.0,tcp,147.32.84.165,2768.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067895,0.0,tcp,147.32.84.165,2772.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067904,0.0,tcp,147.32.84.165,2775.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:23.067944,0.0,tcp,147.32.84.165,2773.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:27.119244,0.0,tcp,113.105.171.62,80.0,->,147.32.87.125,54835.0,SA_,0.0,,1,66,66,0,66.0,1.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:42:29.438904,0.000304,udp,147.32.84.170,58330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:29.440709,0.018168,tcp,147.32.84.170,39888.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:31.084977,0.000376,udp,147.32.84.170,58754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:31.087189,0.262787,tcp,147.32.84.170,52415.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:31.296389,3048.024658,icmp,193.170.37.53,771.0,->,147.32.84.229,19135.0,URP,0.0,,12,2094,2094,0,174.5,1.0,22,0,flow=Background,Background,-1 2011-08-16 22:42:34.484012,0.0,tcp,147.32.84.165,3000.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:34.484017,0.0,tcp,147.32.84.165,2999.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:35.084799,61.257256,tcp,147.32.84.165,2908.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:42:35.084813,0.0,tcp,147.32.84.165,3009.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:35.084986,0.0,tcp,147.32.84.165,3012.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:35.084999,0.0,tcp,147.32.84.165,3011.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:35.085004,0.0,tcp,147.32.84.165,3014.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:35.502733,0.0,tcp,147.32.84.165,3020.0,->,147.32.79.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:38.659353,0.000236,udp,147.32.84.138,39756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:42:43.160852,0.044938,udp,147.32.84.229,13363.0,<->,94.175.152.183,27885.0,CON,0.0,0.0,4,2828,138,2690,707.0,0.048797736916548796,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:42:45.435319,3209.795898,udp,90.170.115.7,58765.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,400,220,180,66.66666666666667,0.55,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:42:46.501608,0.0,tcp,147.32.84.165,3193.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:46.501784,0.0,tcp,147.32.84.165,3195.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:46.613131,0.22349,tcp,147.32.84.171,43262.0,->,193.107.16.156,2710.0,FSPA_FSPA,0.0,0.0,10,1289,712,577,128.9,0.552366175329713,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:42:47.102321,0.0,tcp,147.32.84.165,3202.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:47.102433,0.0,tcp,147.32.84.165,3204.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:47.102559,0.0,tcp,147.32.84.165,3206.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:47.102573,0.0,tcp,147.32.84.165,3205.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:47.102700,0.0,tcp,147.32.84.165,3208.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:48.799860,3047.539307,udp,78.56.138.168,64793.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:42:49.438682,0.00035,udp,147.32.84.170,40866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:49.439466,0.000358,udp,147.32.84.170,39483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:54.373584,0.003725,udp,94.73.53.214,54323.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3020,60,2960,755.0,0.019867549668874173,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:42:56.645914,3118.00293,udp,147.32.87.212,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,22,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 22:42:58.519362,0.0,tcp,147.32.84.165,3375.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:58.519380,0.0,tcp,147.32.84.165,3373.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:59.119693,0.0,tcp,147.32.84.165,3384.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:59.119707,0.0,tcp,147.32.84.165,3382.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:59.119797,0.0,tcp,147.32.84.165,3385.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:59.119812,0.0,tcp,147.32.84.165,3386.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:42:59.439778,0.000315,udp,147.32.84.170,49968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:42:59.440899,0.017913,tcp,147.32.84.170,36911.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:01.253584,0.000175,udp,147.32.84.138,45879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:05.062012,73.912979,icmp,118.168.181.228,771.0,->,147.32.84.229,1359.0,URP,0.0,,6,612,612,0,102.0,1.0,22,0,flow=Background,Background,-1 2011-08-16 22:43:10.536058,0.0,tcp,147.32.84.165,3556.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:10.536072,0.0,tcp,147.32.84.165,3554.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:11.137017,0.0,tcp,147.32.84.165,3565.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:11.137157,0.0,tcp,147.32.84.165,3563.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:11.137171,0.0,tcp,147.32.84.165,3566.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:11.137228,0.0,tcp,147.32.84.165,3567.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:11.137324,0.0,tcp,147.32.84.165,3571.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:13.285587,0.00411,udp,114.26.185.149,13708.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3020,60,2960,755.0,0.019867549668874173,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:14.169159,0.362662,tcp,147.32.84.170,41008.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:15.405882,0.000275,udp,147.32.85.25,48121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:19.441727,0.000376,udp,147.32.84.170,35864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:22.553908,0.0,tcp,147.32.84.165,3734.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:22.553942,0.0,tcp,147.32.84.165,3736.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:23.154597,0.0,tcp,147.32.84.165,3743.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:23.154605,0.0,tcp,147.32.84.165,3745.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:23.154609,0.0,tcp,147.32.84.165,3747.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:23.154613,0.0,tcp,147.32.84.165,3746.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:23.154617,0.0,tcp,147.32.84.165,3749.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:24.718512,538.730408,udp,147.32.84.229,13363.0,<->,195.0.233.229,31870.0,CON,0.0,0.0,4,1099,170,929,274.75,0.15468607825295724,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:26.236679,0.003311,tcp,147.32.84.242,39647.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:43:26.357924,0.135471,udp,147.32.84.229,13363.0,<->,208.120.116.62,2068.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:26.524396,0.000307,udp,147.32.84.242,53898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:34.570887,0.0,tcp,147.32.84.165,3885.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:35.171539,0.0,tcp,147.32.84.165,3891.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:35.171609,0.0,tcp,147.32.84.165,3892.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:35.171753,0.0,tcp,147.32.84.165,3895.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:35.171767,0.0,tcp,147.32.84.165,3897.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:36.029530,0.000521,udp,98.119.149.74,48395.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:36.474617,0.000164,udp,147.32.84.138,46157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:39.015400,2.5e-05,udp,147.32.84.138,55586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:39.039900,0.000243,udp,147.32.84.138,42800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:39.388004,0.000595,udp,178.23.218.50,5021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:39.440666,0.000369,udp,147.32.84.170,39709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:39.441610,0.000258,udp,147.32.84.170,50959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:43.562153,0.000447,udp,86.150.178.26,12205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:46.587999,61.257092,tcp,147.32.84.165,3916.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:43:46.588125,0.0,tcp,147.32.84.165,4006.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:47.189200,0.0,tcp,147.32.84.165,4012.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:47.189215,0.0,tcp,147.32.84.165,4013.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:47.189365,0.0,tcp,147.32.84.165,4016.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:47.190810,0.0,tcp,147.32.84.165,4018.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:47.804182,3264.63916,udp,147.32.84.229,13363.0,<->,91.204.69.114,16523.0,CON,0.0,0.0,8,1305,1013,292,163.125,0.7762452107279694,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:49.439937,0.000428,udp,147.32.84.170,42684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:43:55.235383,0.000427,udp,147.32.86.20,57712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:56.679054,2279.609131,udp,147.32.84.229,13363.0,<->,89.178.70.195,38781.0,CON,0.0,0.0,6,813,200,613,135.5,0.24600246002460024,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:58.154135,0.000229,udp,147.32.84.138,49804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:43:58.605421,0.0,tcp,147.32.84.165,4126.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:58.605435,0.0,tcp,147.32.84.165,4127.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:59.206448,0.0,tcp,147.32.84.165,4132.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:59.206462,0.0,tcp,147.32.84.165,4133.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:43:59.401619,1355.862183,udp,193.227.184.1,32946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,436,312,124,109.0,0.7155963302752294,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:43:59.807475,0.0,tcp,147.32.84.165,4138.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:02.557292,1.229171,tcp,78.80.12.81,49377.0,->,147.32.85.34,995.0,FSPA_FSPA,0.0,0.0,42,10661,1921,8740,253.83333333333334,0.1801894756589438,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:44:06.218789,17.414225,tcp,67.195.111.228,36692.0,->,147.32.84.2,443.0,FSPA_FSPA,0.0,0.0,37,21095,2570,18525,570.1351351351351,0.12182981749229675,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:44:09.441070,0.000319,udp,147.32.84.170,40352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:10.623303,0.0,tcp,147.32.84.165,4246.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:10.623417,0.0,tcp,147.32.84.165,4247.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:11.224112,0.0,tcp,147.32.84.165,4252.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:11.224128,0.0,tcp,147.32.84.165,4253.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:11.303986,3420.670166,udp,147.32.84.186,37738.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,22,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 22:44:11.825053,0.0,tcp,147.32.84.165,4258.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:16.710901,0.000165,udp,147.32.84.138,35669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:44:22.640527,0.0,tcp,147.32.84.165,4367.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:22.640605,0.0,tcp,147.32.84.165,4368.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:23.241114,0.0,tcp,147.32.84.165,4373.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:23.241127,0.0,tcp,147.32.84.165,4374.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:23.842446,0.0,tcp,147.32.84.165,4379.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:26.407484,0.003452,tcp,147.32.84.242,39946.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:44:28.122164,0.000437,udp,62.245.73.166,18600.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:29.441029,0.018232,tcp,147.32.84.170,59796.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:30.965414,3329.05249,udp,194.165.188.86,7834.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,120,16948,4447,12501,141.23333333333332,0.2623908425772953,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:34.657780,0.0,tcp,147.32.84.165,4487.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:34.657794,0.0,tcp,147.32.84.165,4486.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:34.657799,0.0,tcp,147.32.84.165,4488.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.258555,0.0,tcp,147.32.84.165,4492.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.258633,0.0,tcp,147.32.84.165,4493.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.258639,0.0,tcp,147.32.84.165,4495.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.258717,0.0,tcp,147.32.84.165,4494.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.258723,0.0,tcp,147.32.84.165,4496.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.859425,0.0,tcp,147.32.84.165,4499.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:35.859439,0.0,tcp,147.32.84.165,4498.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:43.684523,0.000446,udp,24.109.66.208,55976.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:45.899887,110.324127,udp,87.11.185.184,38258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,432,308,124,108.0,0.7129629629629629,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:46.675179,0.0,tcp,147.32.84.165,4607.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:46.675285,0.0,tcp,147.32.84.165,4608.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:46.805318,0.001743,udp,142.161.213.200,13120.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,501,60,280.5,0.893048128342246,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:47.275860,0.0,tcp,147.32.84.165,4613.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:47.275972,0.0,tcp,147.32.84.165,4614.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:47.876504,0.0,tcp,147.32.84.165,4619.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:47.876668,61.272514,tcp,147.32.84.165,4632.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:44:48.266177,3054.673096,udp,203.217.100.222,12712.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:49.438900,0.000405,udp,147.32.84.170,38155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:49.439852,0.000408,udp,147.32.84.170,53683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:51.109980,0.121825,udp,147.32.84.229,13363.0,<->,208.88.186.9,34016.0,CON,0.0,0.0,2,137,75,62,68.5,0.5474452554744526,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:44:58.692043,0.0,tcp,147.32.84.165,4728.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:58.692175,0.0,tcp,147.32.84.165,4729.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:58.778938,3000.022461,ipv6-icmp,fe80::5054:ff:fe89:354,135.0,->,ff02::1:ff1b:d243,,NNS,0.0,,5,430,430,0,86.0,1.0,22,,flow=Background,Background,-1 2011-08-16 22:44:59.293257,0.0,tcp,147.32.84.165,4734.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:59.293272,0.0,tcp,147.32.84.165,4735.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:44:59.440052,0.000388,udp,147.32.84.170,32870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:59.441212,0.019097,tcp,147.32.84.170,59734.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:44:59.894515,0.0,tcp,147.32.84.165,4740.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:01.165386,0.000354,udp,147.32.86.92,49022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:06.087157,0.274588,tcp,147.32.84.170,52441.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:45:07.827443,121.744377,udp,98.196.63.145,5580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:09.441104,0.017988,tcp,147.32.84.170,39916.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:45:10.709741,0.0,tcp,147.32.84.165,4848.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:10.709755,0.0,tcp,147.32.84.165,4847.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:10.709760,0.0,tcp,147.32.84.165,4849.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.310851,0.0,tcp,147.32.84.165,4853.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.310865,0.0,tcp,147.32.84.165,4854.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.310872,0.0,tcp,147.32.84.165,4856.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.311016,0.0,tcp,147.32.84.165,4855.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.311036,0.0,tcp,147.32.84.165,4857.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.911882,0.0,tcp,147.32.84.165,4860.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:11.911898,0.0,tcp,147.32.84.165,4859.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:19.441152,0.018125,tcp,147.32.84.170,46097.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:45:22.144898,603.484436,udp,82.131.189.252,25939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,470,346,124,117.5,0.7361702127659574,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:22.727358,0.0,tcp,147.32.84.165,4986.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:22.727373,0.0,tcp,147.32.84.165,4985.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:22.727379,0.0,tcp,147.32.84.165,4987.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.328361,0.0,tcp,147.32.84.165,4991.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.328435,0.0,tcp,147.32.84.165,4992.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.328440,0.0,tcp,147.32.84.165,4994.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.328444,0.0,tcp,147.32.84.165,4993.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.328448,0.0,tcp,147.32.84.165,4995.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.928695,0.0,tcp,147.32.84.165,4998.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:23.928711,0.0,tcp,147.32.84.165,4997.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:26.219609,0.000315,udp,147.32.87.36,44418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,88,214,151.0,0.2913907284768212,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:45:28.577579,0.000426,udp,78.83.58.123,63386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:32.819722,0.000368,udp,147.32.84.242,35154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:33.518705,0.003861,tcp,147.32.84.242,55504.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:45:33.543248,0.000359,udp,147.32.84.242,47561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:33.555553,0.00996,tcp,147.32.84.242,60213.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:45:34.744578,0.0,tcp,147.32.84.165,1130.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:34.744592,0.0,tcp,147.32.84.165,1129.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:34.744665,0.0,tcp,147.32.84.165,1131.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:34.831895,0.007724,tcp,147.32.86.88,61275.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,9,834,447,387,92.66666666666667,0.5359712230215827,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:45:35.345137,0.0,tcp,147.32.84.165,1135.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.345151,0.0,tcp,147.32.84.165,1136.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.345201,0.0,tcp,147.32.84.165,1138.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.345210,0.0,tcp,147.32.84.165,1137.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.345308,0.0,tcp,147.32.84.165,1139.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.946032,0.0,tcp,147.32.84.165,1142.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:35.946105,0.0,tcp,147.32.84.165,1141.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:36.288369,0.00024,udp,149.5.45.9,43054.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,168,108,60,84.0,0.6428571428571429,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:37.225524,5.989808,udp,147.32.84.229,13363.0,->,86.126.5.163,51978.0,INT,0.0,,3,180,180,0,60.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:45:38.882048,0.000195,udp,147.32.85.25,42086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:38.887438,0.000294,udp,147.32.85.25,50968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:39.460843,0.017989,tcp,147.32.84.170,46101.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:45:43.107836,0.000227,udp,147.32.84.138,58488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:46.761491,0.0,tcp,147.32.84.165,1250.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:46.761609,0.0,tcp,147.32.84.165,1249.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:46.761673,0.0,tcp,147.32.84.165,1251.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.362392,0.0,tcp,147.32.84.165,1255.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.376347,0.0,tcp,147.32.84.165,1256.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.376476,0.0,tcp,147.32.84.165,1258.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.376484,0.0,tcp,147.32.84.165,1257.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.376488,0.0,tcp,147.32.84.165,1259.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.963926,0.0,tcp,147.32.84.165,1262.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:47.963940,0.0,tcp,147.32.84.165,1261.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:49.441329,0.000276,udp,147.32.84.170,43662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:45:51.533673,134.86618,udp,147.32.84.229,13363.0,<->,149.5.45.168,33033.0,CON,0.0,0.0,5,766,225,541,153.2,0.293733681462141,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:53.094599,9.691605,udp,92.40.253.82,54493.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,536,296,240,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:45:57.743090,0.020387,udp,147.32.84.184,38338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:45:58.779084,0.0,tcp,147.32.84.165,1371.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:58.779099,70.654037,tcp,147.32.84.165,1287.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:45:58.779104,0.0,tcp,147.32.84.165,1370.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.202730,0.0,tcp,147.32.84.165,1375.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.379897,0.0,tcp,147.32.84.165,1376.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.379912,0.0,tcp,147.32.84.165,1377.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.379917,0.0,tcp,147.32.84.165,1379.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.379922,0.0,tcp,147.32.84.165,1378.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.379978,0.0,tcp,147.32.84.165,1380.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.980795,0.0,tcp,147.32.84.165,1383.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:45:59.980811,0.0,tcp,147.32.84.165,1382.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,22,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 22:46:02.508325,21.233856,udp,68.161.191.238,15224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:03.984510,0.000302,udp,147.32.85.34,49926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:04.013191,0.000369,udp,147.32.85.34,56768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:05.108616,0.000843,udp,174.52.168.188,65242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,982,76,906,491.0,0.07739307535641547,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:07.259715,1154.973511,udp,147.32.84.229,13363.0,<->,78.141.179.11,34034.0,CON,0.0,0.0,4,330,210,120,82.5,0.6363636363636364,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:12.012575,0.000336,udp,147.32.84.59,33578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:12.075471,0.00022,udp,147.32.84.59,48046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:14.671192,0.000253,udp,147.32.84.242,55378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:14.894941,0.007838,tcp,147.32.84.242,56512.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:46:14.949337,0.000216,udp,147.32.84.242,52168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:14.970640,0.000262,udp,147.32.84.242,45941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:16.362409,0.000203,udp,147.32.84.138,42231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:16.772610,0.000418,udp,147.32.85.34,58004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,85,258,171.5,0.2478134110787172,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:23.024687,0.000224,udp,147.32.84.138,59379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:24.497926,6.019374,udp,147.32.84.229,13363.0,->,85.210.126.63,64074.0,INT,0.0,,3,1065,1065,0,355.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:46:27.401592,0.000243,udp,147.32.84.59,55915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:27.405029,0.00045,udp,147.32.84.59,41735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:29.441050,0.018124,tcp,147.32.84.170,59050.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:30.584216,0.013594,tcp,90.183.39.17,33024.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1539,812,727,153.9,0.5276153346328785,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:46:31.328280,0.000337,udp,147.32.84.138,48239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:32.883665,0.000316,udp,147.32.84.59,50441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.039804,0.000254,udp,147.32.84.59,46785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.108693,0.000272,udp,147.32.84.59,42217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,87,304,195.5,0.22250639386189258,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.229733,0.000305,udp,147.32.84.242,39914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.239041,0.000272,udp,147.32.84.59,47694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.368236,0.0003,udp,147.32.84.59,55187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.401293,0.000376,udp,147.32.84.242,39709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:33.536504,0.000349,udp,147.32.84.242,57004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:46:39.090027,0.244518,tcp,147.32.84.170,58747.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:39.441347,0.018113,tcp,147.32.84.170,38882.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:39.491563,1.03395,tcp,147.32.86.88,61439.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:46:41.793388,0.000528,udp,193.227.184.1,43800.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:49.440235,0.000346,udp,147.32.84.170,48297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:49.441318,0.017876,tcp,147.32.84.170,52812.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:54.724300,0.187723,udp,147.32.84.229,13363.0,<->,99.254.144.86,5726.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:54.724435,0.054836,udp,147.32.84.229,13363.0,<->,188.26.234.30,64807.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:46:59.440335,0.000298,udp,147.32.84.170,36234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:46:59.627553,64.080765,tcp,147.32.84.165,1394.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:47:02.618206,0.000219,udp,147.32.84.184,35093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:10.086723,0.000339,udp,147.32.84.170,57654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:47:10.087645,0.000269,udp,147.32.84.170,39735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:47:14.100875,0.000243,udp,147.32.86.34,54705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:15.333065,0.000453,udp,147.32.84.242,33735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:16.575351,2224.183838,udp,87.144.8.218,30785.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:19.415565,0.000433,udp,94.175.125.113,39439.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:24.526736,3210.480713,udp,80.109.14.119,37356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1482,924,558,123.5,0.6234817813765182,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:31.536322,1729.813965,udp,84.229.15.105,14049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1503,201,1302,250.5,0.13373253493013973,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:31.637992,0.000292,udp,147.32.84.138,43675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:34.447336,3048.906738,udp,222.130.251.224,13152.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:37.872514,0.000331,udp,147.32.86.20,51147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:38.013158,0.000288,udp,147.32.84.242,35768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:38.355782,0.000266,udp,147.32.84.242,42322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:38.422218,0.000353,udp,147.32.84.138,42200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:49.442715,0.018278,tcp,147.32.84.170,59061.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:47:50.632492,474.383606,udp,77.181.150.73,8262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,534,358,176,133.5,0.6704119850187266,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:54.883334,0.0013,udp,78.167.66.14,52239.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:47:55.893919,0.000313,udp,147.32.84.138,59352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:56.906659,0.000288,udp,147.32.85.25,60673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:47:59.228532,6.142149,udp,147.32.84.229,13363.0,->,151.33.51.61,39766.0,INT,0.0,,3,315,315,0,105.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:47:59.439521,0.000455,udp,147.32.84.170,40610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:47:59.440507,0.000274,udp,147.32.84.170,38426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:03.290404,61.254604,tcp,147.32.84.165,1395.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:48:04.712676,0.000397,udp,200.40.207.78,57288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:06.058772,0.000276,udp,147.32.84.138,40162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:07.500720,0.000242,udp,147.32.84.59,51042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:07.519052,0.000277,udp,147.32.84.59,40006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:09.888172,0.000218,udp,147.32.84.138,60758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:09.893103,0.00025,udp,147.32.84.138,48279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:10.809940,0.639931,tcp,166.205.12.170,34488.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,3,216,138,78,72.0,0.6388888888888888,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:48:13.717790,0.410353,tcp,147.32.84.170,41446.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:14.154324,0.000299,udp,147.32.84.170,41876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:14.156117,391.385254,tcp,147.32.84.170,46349.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,96,37424,27543,9881,389.8333333333333,0.7359715690466011,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:14.156171,240.050278,tcp,147.32.84.170,46350.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:15.731908,3000.951904,udp,147.32.85.84,13716.0,<->,24.186.96.214,65355.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:19.439572,0.000338,udp,147.32.84.170,41772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:19.440418,0.000331,udp,147.32.84.170,47348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:20.080163,0.000253,udp,147.32.84.242,58783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:24.696036,842.992859,udp,78.8.60.206,64008.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,486,362,124,121.5,0.7448559670781894,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:27.026522,0.000411,udp,147.32.84.138,36502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:27.641946,0.000326,udp,147.32.84.59,53483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:29.441396,0.017938,tcp,147.32.84.170,59076.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:38.175443,0.000232,udp,147.32.84.242,51464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:42.941712,0.000482,udp,88.155.147.170,23279.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:43.086379,0.000308,udp,147.32.84.170,43041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:43.087711,0.244896,tcp,147.32.84.170,58774.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:44.496267,0.000415,udp,147.32.86.20,63175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:48:48.501972,0.000384,udp,71.84.50.234,24403.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:49.441818,0.017571,tcp,147.32.84.170,52838.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:48:49.867275,1988.881836,udp,72.252.230.237,11782.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:48:59.440613,0.000303,udp,147.32.84.170,38922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:02.324817,0.000334,udp,147.32.84.242,60204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:49:02.762486,2719.876709,udp,84.19.204.186,54140.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1033,746,287,129.125,0.7221684414327202,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:03.320189,0.322849,udp,147.32.84.229,13363.0,<->,111.240.81.99,30279.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:03.411186,1325.32312,udp,147.32.84.229,13363.0,<->,180.27.18.34,46719.0,CON,0.0,0.0,4,659,538,121,164.75,0.8163884673748103,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:04.127297,61.271347,tcp,147.32.84.165,1411.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:49:09.440462,0.000347,udp,147.32.84.170,37497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:09.737737,3.696488,udp,197.128.77.224,33369.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,658,538,120,164.5,0.817629179331307,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:12.697266,0.0003,udp,147.32.84.59,56572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:49:15.282122,0.011781,tcp,147.32.84.242,57372.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:49:15.387022,0.003419,tcp,147.32.84.242,41236.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:49:15.928134,0.000258,udp,147.32.84.138,49286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:49:19.440607,0.000296,udp,147.32.84.170,54627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:20.074165,0.003858,tcp,147.32.86.34,40754.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:49:20.090325,0.003866,tcp,147.32.84.242,45505.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:49:20.353263,0.003921,tcp,147.32.84.242,45616.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:49:25.509620,0.000414,udp,194.242.14.2,61410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:26.689201,0.000513,udp,84.58.3.234,23205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:27.097032,0.000576,udp,77.179.119.192,47950.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:27.417528,0.142476,udp,147.32.84.229,13363.0,<->,72.240.194.11,20287.0,CON,0.0,0.0,2,574,77,497,287.0,0.13414634146341464,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:29.439578,0.000469,udp,147.32.84.170,57710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:29.440508,0.000312,udp,147.32.84.170,36164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:38.569860,53.832973,udp,147.32.84.229,13363.0,<->,216.121.236.230,34064.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:39.440485,0.000319,udp,147.32.84.170,34507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:43.439618,0.000199,udp,147.32.84.138,53802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:49:44.252699,0.002422,tcp,147.32.84.242,41524.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:49:45.087609,0.000341,udp,147.32.84.170,55969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:45.088930,0.250632,tcp,147.32.84.170,58782.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:49:49.390361,0.000248,udp,147.32.84.138,48212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:49:51.137522,0.001021,udp,212.56.22.213,8938.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,574,73,501,287.0,0.12717770034843207,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:49:59.439838,0.000355,udp,147.32.84.170,57120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:03.578853,0.00027,udp,147.32.85.34,62130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:04.975594,61.259865,tcp,147.32.84.165,1412.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:50:09.439555,0.000353,udp,147.32.84.170,37075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:12.645116,0.054222,udp,147.32.84.229,13363.0,<->,85.15.208.146,41001.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:16.087020,0.000364,udp,147.32.84.170,56106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:17.868217,16.457096,udp,161.247.0.1,52097.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:17.985274,0.363446,udp,147.32.84.229,13363.0,<->,112.105.82.221,21075.0,CON,0.0,0.0,2,572,74,498,286.0,0.12937062937062938,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:18.750420,0.000325,udp,147.32.86.20,50591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:19.439673,0.000397,udp,147.32.84.170,41697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:20.557025,0.000341,udp,147.32.85.25,57238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:24.830525,3221.894043,udp,186.16.155.30,30588.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,282,162,120,70.5,0.574468085106383,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:25.979973,6.695898,tcp,66.249.72.182,57960.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,9871,1067,8804,493.55,0.10809441799209807,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:50:27.003502,0.000227,udp,147.32.84.242,42785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:27.139410,0.003918,tcp,147.32.86.34,40821.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:50:27.151471,0.000222,udp,147.32.86.34,38662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:29.680561,3018.502441,udp,99.255.219.240,56591.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:29.792198,0.000415,udp,147.32.85.34,50832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:35.119378,0.246661,udp,147.32.84.170,44773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:37.168163,3470.132324,udp,147.32.84.136,54137.0,<->,147.231.100.5,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,22,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 22:50:39.403173,0.001633,tcp,147.32.86.5,2502.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:50:39.449965,0.000352,udp,147.32.84.170,34350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:40.503441,1.02188,tcp,147.32.86.88,61828.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:50:42.350633,0.005635,tcp,147.32.86.5,2510.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:50:43.601086,0.005142,tcp,147.32.86.88,61840.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:50:44.024252,0.003916,tcp,147.32.84.242,46174.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:50:44.059518,0.000208,udp,147.32.84.242,52720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:44.071953,0.000263,udp,147.32.84.242,53560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:44.128800,0.008498,tcp,147.32.84.242,58184.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:50:47.086318,0.000253,udp,147.32.84.170,35218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:47.117973,0.000307,udp,147.32.84.138,51121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:47.945884,0.001749,udp,95.69.20.91,41160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:51.421649,0.000238,udp,147.32.85.25,58344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:50:52.589384,0.000789,udp,62.219.164.33,35444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,596,74,522,298.0,0.12416107382550336,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:50:59.439950,0.000394,udp,147.32.84.170,42100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:59.440892,0.000293,udp,147.32.84.170,41964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:50:59.441875,0.018458,tcp,147.32.84.170,38526.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:05.813232,61.271442,tcp,147.32.84.165,1413.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:51:09.440805,0.000355,udp,147.32.84.170,55202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:12.402035,231.608459,udp,41.100.134.230,10536.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,378,198,180,63.0,0.5238095238095238,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:13.829373,0.000537,udp,46.25.119.151,54413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:14.226453,0.000297,udp,147.32.84.138,39506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:18.084808,0.000386,udp,147.32.84.170,34518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:20.845501,0.000419,icmp,147.32.86.96,,<-,147.32.87.51,103.0,RED,,0.0,2,196,0,196,98.0,0.0,22,1,flow=Background,Background,-1 2011-08-16 22:51:21.458117,0.000572,udp,202.64.216.125,24034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,74,501,287.5,0.12869565217391304,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:27.033279,0.000366,udp,147.32.84.242,55680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:27.038355,0.000332,udp,147.32.84.138,35126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:27.246175,0.002434,tcp,147.32.84.242,47363.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:51:27.381089,0.00773,tcp,147.32.84.242,35083.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:51:27.407638,0.007808,tcp,147.32.84.242,35100.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:51:27.438381,0.000293,udp,147.32.84.242,37989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:29.440113,0.000311,udp,147.32.84.170,41275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:34.830584,0.000216,udp,147.32.84.138,47672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:39.441208,0.000282,udp,147.32.84.170,37113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:49.087181,0.00035,udp,147.32.84.170,34764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:49.088470,0.254713,tcp,147.32.84.170,56816.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:49.440030,0.000242,udp,147.32.84.170,34590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:50.382972,0.000353,udp,147.32.84.242,56568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:50.431815,0.008118,tcp,147.32.84.242,35374.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:51:50.522154,0.000223,udp,147.32.84.242,55169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:51:50.560320,0.003908,tcp,147.32.84.242,49290.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:51:51.753124,814.400574,udp,147.32.84.229,13363.0,<->,76.180.193.242,57070.0,CON,0.0,0.0,4,380,258,122,95.0,0.6789473684210526,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:51.865537,0.000574,udp,197.171.161.110,10497.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:54.830062,0.000429,udp,109.225.17.146,20366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:51:57.252308,0.005269,tcp,147.32.86.88,61946.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:51:59.440143,0.000545,udp,147.32.84.170,43284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:59.441157,0.000254,udp,147.32.84.170,41264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:51:59.499412,0.000711,udp,110.142.35.9,60363.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:03.442346,0.000285,udp,147.32.85.34,59682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:06.662041,61.255608,tcp,147.32.84.165,1414.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:52:06.731608,0.000448,udp,190.250.158.247,62972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:09.579957,0.000411,udp,151.26.3.216,20060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:10.745924,0.000585,udp,212.142.70.148,53405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,637,74,563,318.5,0.11616954474097331,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:17.401251,0.000504,udp,68.222.55.27,50976.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,76,465,270.5,0.14048059149722736,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:19.136060,596.337585,udp,147.32.84.229,13363.0,<->,142.151.132.56,47975.0,CON,0.0,0.0,4,676,556,120,169.0,0.8224852071005917,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:30.315599,0.000389,udp,147.32.84.171,44767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:32.193950,0.000327,udp,147.32.84.242,45569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:32.265341,0.003797,tcp,147.32.84.242,49406.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:52:32.448273,0.000295,udp,147.32.84.242,58977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:32.477763,0.000165,udp,147.32.84.242,38168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:32.533352,0.000235,udp,147.32.84.242,47304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:36.623604,0.000466,udp,94.180.221.134,37470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:39.442415,0.000294,udp,147.32.84.170,42799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:52:40.322668,0.005132,tcp,147.32.86.88,62016.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:52:42.247705,0.000401,udp,147.32.84.138,42557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:42.644202,0.000285,udp,147.32.84.138,59858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:47.167372,6.011566,udp,142.177.46.38,11691.0,->,147.32.85.2,31604.0,INT,0.0,,3,441,441,0,147.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:52:49.442546,0.000371,udp,147.32.84.170,60477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:52:50.100482,0.000246,udp,147.32.84.138,49124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:50.121168,0.000325,udp,147.32.84.242,45703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:50.129626,0.000255,udp,147.32.84.242,49103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:50.530266,503.537994,tcp,147.32.84.242,36140.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,30,2910,1653,1257,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:52:52.166733,1.550079,tcp,209.85.160.156,54150.0,->,147.32.84.19,995.0,SRPA_FSPA,0.0,0.0,33,4846,1785,3061,146.84848484848484,0.3683450268262485,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:52:53.385273,0.00022,udp,147.32.84.138,57387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:54.319640,0.000214,udp,147.32.85.25,42260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:52:56.766139,0.000609,udp,186.59.7.172,43059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,374,83,291,187.0,0.22192513368983957,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:52:59.443188,0.018134,tcp,147.32.84.170,38521.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:52:59.637717,0.135677,tcp,147.32.86.20,2528.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:53:01.198424,0.004687,udp,211.76.68.248,64161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3011,60,2951,752.75,0.019926934573231483,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:04.064635,3507.759521,udp,208.88.186.9,34011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,68,5408,3350,2058,79.52941176470588,0.6194526627218935,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:04.783417,1237.31604,udp,62.122.58.2,24962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,731,545,186,121.83333333333333,0.7455540355677155,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:04.917433,1.3e-05,icmp,147.32.87.249,,<-,147.32.87.3,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,22,1,flow=Background,Background,-1 2011-08-16 22:53:05.969056,0.000514,udp,79.167.66.57,15419.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:07.499942,61.272884,tcp,147.32.84.165,1415.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:53:09.335600,0.000397,udp,147.32.84.138,41329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:12.859801,0.0,tcp,113.105.171.57,80.0,->,147.32.86.52,8284.0,SA_,0.0,,1,66,66,0,66.0,1.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:53:13.170911,0.251723,tcp,147.32.84.170,36173.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:13.414940,0.277688,tcp,147.32.84.170,36174.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:13.684842,0.25372,tcp,147.32.84.170,36175.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:14.719793,0.002478,tcp,147.32.84.242,48531.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:53:19.441283,0.000403,udp,147.32.84.170,49766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:29.443521,0.018689,tcp,147.32.84.170,47444.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:32.253119,0.000254,udp,147.32.84.242,34584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:32.324315,0.003918,tcp,147.32.84.242,50163.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:53:32.471453,0.000301,udp,147.32.84.242,34583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:32.507372,0.003935,tcp,147.32.84.242,50244.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:53:39.441296,0.00043,udp,147.32.84.170,56569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:42.324291,1.321058,tcp,147.32.84.59,7654.0,->,74.125.232.216,443.0,FSPA_FSPA,0.0,0.0,16,5005,2817,2188,312.8125,0.5628371628371628,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:53:43.681635,0.000414,udp,99.44.225.189,3881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:46.013105,516.170898,udp,46.35.164.226,7375.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2116,1876,240,264.5,0.8865784499054821,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:53:49.443268,0.018002,tcp,147.32.84.170,55265.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:53.088478,0.00032,udp,147.32.84.170,39541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:53:56.161144,0.000355,udp,147.32.84.242,58694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:56.299804,0.000331,udp,147.32.84.242,35872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:56.378620,0.000284,udp,147.32.84.242,59877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:56.429805,0.00035,udp,147.32.84.242,54444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:53:57.449215,0.022959,udp,147.32.87.36,47663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,22,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 22:54:01.191131,0.170653,udp,147.32.84.229,13363.0,<->,24.212.20.32,61771.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:01.663874,0.000513,udp,193.227.184.1,33989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,75,472,273.5,0.13711151736745886,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:02.633898,3005.76416,udp,46.223.138.196,57959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:05.642093,3345.811035,udp,78.129.0.204,56529.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3669,193,3476,458.625,0.05260288907059144,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:06.291085,0.000188,udp,147.32.84.138,42181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:06.481863,0.000233,udp,147.32.85.25,58483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:06.531761,0.00026,udp,147.32.84.138,58409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:07.550151,0.000166,udp,147.32.84.138,40121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:08.347479,61.271927,tcp,147.32.84.165,1416.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:54:09.441087,0.000417,udp,147.32.84.170,52828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:54:13.285704,0.000167,udp,147.32.84.138,35805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:15.365571,2861.356445,udp,60.229.162.167,39705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1634,1030,604,272.3333333333333,0.6303549571603427,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:19.443279,0.018064,tcp,147.32.84.170,47450.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:54:22.036320,3047.849609,udp,98.199.63.154,9788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,486,362,124,121.5,0.7448559670781894,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:24.090469,0.25913,tcp,147.32.84.170,56843.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:54:27.466549,0.00022,udp,147.32.84.138,47180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:32.664846,1557.037476,udp,147.32.84.229,13363.0,<->,149.13.32.80,33033.0,CON,0.0,0.0,4,728,158,570,182.0,0.21703296703296704,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:32.835107,0.001996,tcp,147.32.86.88,62190.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:54:38.668455,0.00035,udp,147.32.84.242,58459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:38.671794,0.003923,tcp,147.32.86.34,45825.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:54:38.750095,0.000303,udp,147.32.86.34,45796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:38.901090,0.00017,udp,147.32.84.242,55339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:38.929538,0.000241,udp,147.32.84.242,34456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:39.442339,0.000352,udp,147.32.84.170,54415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:54:52.578092,0.000164,udp,147.32.85.25,33965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:54.078778,0.00049,udp,213.93.183.157,21202.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,78,478,278.0,0.14028776978417265,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:54:55.087483,0.000126,udp,147.32.84.170,38305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:54:56.032595,0.000333,udp,147.32.84.242,34010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:54:56.051826,0.007878,tcp,147.32.84.242,37144.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:54:56.159686,0.013007,tcp,147.32.84.242,37229.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:54:56.270846,0.002065,tcp,147.32.84.242,49661.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:55:00.293817,89.694633,tcp,147.32.84.59,7677.0,->,74.125.232.216,443.0,FSPA_FSPA,0.0,0.0,16,5225,2873,2352,326.5625,0.5498564593301435,22,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 22:55:02.509275,1799.554565,arp,147.32.87.30,,who,147.32.87.53,,INT,,,4,240,240,0,60.0,1.0,22,,flow=Background,Background,-1 2011-08-16 22:55:09.196104,64.273041,tcp,147.32.84.165,1417.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:55:17.864635,0.000294,udp,147.32.85.25,52772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:17.868085,0.000254,udp,147.32.85.25,45744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:18.281175,0.000251,udp,147.32.84.138,45287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:19.443403,0.017942,tcp,147.32.84.170,47458.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:21.699887,0.000391,udp,178.214.34.134,32809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:55:26.087845,0.000368,udp,147.32.84.170,58980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:26.088785,0.000267,udp,147.32.84.170,44582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:29.442976,0.000374,udp,147.32.84.170,55581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:29.443919,0.000367,udp,147.32.84.170,53019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:36.050626,0.246472,udp,147.32.84.170,49627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:36.791700,0.000431,udp,147.32.84.170,52948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:36.792962,240.165024,tcp,147.32.84.170,52428.0,->,74.125.232.195,443.0,FSPA_FSPA,0.0,0.0,37,5826,3850,1976,157.45945945945945,0.6608307586680399,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:39.043451,0.00183,tcp,147.32.84.242,49856.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:55:39.222769,7.4e-05,udp,147.32.84.242,56090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:39.315864,0.001967,tcp,147.32.84.242,50006.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:55:39.368718,0.000322,udp,147.32.84.242,38237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:39.432024,0.003983,tcp,147.32.84.242,51539.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:55:39.442633,0.01964,udp,147.32.84.170,54452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:39.462740,0.000403,udp,147.32.84.170,40486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:39.463859,0.017925,tcp,147.32.84.170,55281.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:39.521070,0.003875,tcp,147.32.84.242,51548.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:55:42.627562,1845.150391,udp,78.141.179.11,34004.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,648,175,473,162.0,0.2700617283950617,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:55:44.879081,0.000549,udp,221.189.192.237,64589.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,77,495,286.0,0.1346153846153846,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:55:49.442421,0.000293,udp,147.32.84.170,58803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:52.151068,3036.111084,udp,147.32.84.229,13363.0,<->,132.199.102.57,34164.0,CON,0.0,0.0,8,959,685,274,119.875,0.7142857142857143,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:55:53.800549,0.000319,udp,147.32.84.138,38058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:55:55.756656,1240.530518,udp,81.249.88.200,21738.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,282,162,120,70.5,0.574468085106383,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:55:57.092109,0.000285,udp,147.32.84.170,39837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:57.092868,0.000318,udp,147.32.84.170,49586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:55:59.443216,0.000294,udp,147.32.84.170,40066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:02.642568,0.00388,tcp,147.32.84.242,58644.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:56:02.841079,0.002182,tcp,147.32.84.242,57823.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:56:02.930972,0.000165,udp,147.32.84.242,39728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:03.199177,0.000332,udp,147.32.84.242,53395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:03.484197,0.000264,udp,147.32.85.34,52063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:10.044191,71.054649,tcp,147.32.84.165,1418.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:56:12.896661,0.00026,udp,147.32.84.138,47967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:14.840930,3003.390381,udp,94.53.199.228,7731.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1482,1110,372,123.5,0.7489878542510121,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:16.259486,0.015003,udp,151.26.23.239,9170.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:17.485326,0.157892,udp,147.32.84.229,13363.0,<->,173.212.75.29,25342.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:22.638557,0.000402,udp,84.12.170.202,8365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:26.171398,0.000161,udp,147.32.84.138,55983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:28.441198,602.931396,udp,87.236.31.60,53079.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:29.538062,9.060916,tcp,81.178.174.17,54594.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,6,456,156,300,76.0,0.34210526315789475,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:56:33.208777,0.000651,udp,60.239.111.180,55125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,75,468,271.5,0.13812154696132597,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:56:39.442324,0.000278,udp,147.32.84.170,37744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:39.443267,0.017821,tcp,147.32.84.170,41458.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:44.251774,0.011781,tcp,147.32.84.242,57966.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:56:44.327685,0.000405,udp,147.32.84.242,56939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:44.470482,0.000284,udp,147.32.84.242,42338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:44.561410,0.000273,udp,147.32.84.242,36649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:49.001346,6.003765,udp,147.32.84.229,13363.0,->,118.166.74.246,13195.0,INT,0.0,,3,279,279,0,93.0,1.0,22,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 22:56:49.443822,0.000359,udp,147.32.84.170,60999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:52.963874,0.255084,tcp,77.95.208.64,37954.0,->,147.32.84.229,13363.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:56:55.883970,0.000165,udp,147.32.85.25,55088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:56:59.089647,0.000323,udp,147.32.84.170,59919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:59.441622,0.000418,udp,147.32.84.170,48504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:56:59.537596,0.000435,udp,199.120.124.243,52603.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:57:02.164185,0.000222,udp,147.32.84.242,36013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:02.169510,0.008015,tcp,147.32.84.242,34837.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:57:02.355590,0.000315,udp,147.32.84.242,37286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:02.386100,0.000292,udp,147.32.84.242,40756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:02.400757,0.003877,tcp,147.32.84.242,59454.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:02.415283,0.003876,tcp,147.32.84.242,59465.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:03.420033,0.000272,udp,147.32.84.59,51070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,86,216,151.0,0.2847682119205298,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:03.427882,0.000235,udp,147.32.84.59,35777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,86,216,151.0,0.2847682119205298,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:03.481332,0.003985,tcp,147.32.84.242,59532.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:03.536010,0.000247,udp,147.32.84.242,38812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:03.612687,0.014649,tcp,147.32.84.242,35073.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:57:09.441758,0.000298,udp,147.32.84.170,59049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:12.270925,0.000144,udp,147.32.84.138,42593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:16.292055,0.00045,udp,189.62.62.84,23678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:57:20.675796,61.254814,tcp,147.32.84.165,1419.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:57:29.443371,0.018253,tcp,147.32.84.170,33525.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:30.088768,0.274384,tcp,147.32.84.170,44264.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:33.922247,0.001408,tcp,147.32.86.88,62577.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:57:37.655836,0.000217,udp,147.32.84.138,58962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:39.441745,0.000508,udp,147.32.84.170,33264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:44.025673,0.000298,udp,147.32.84.242,41864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:44.104223,0.000282,udp,147.32.84.242,52526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:44.112725,0.002015,tcp,147.32.84.242,58656.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:57:44.225158,0.004149,tcp,147.32.84.242,59682.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:44.246598,0.003959,tcp,147.32.84.242,59691.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:45.155682,0.00338,tcp,147.32.84.242,58805.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:57:45.235442,0.004005,tcp,147.32.84.242,59793.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:57:49.441734,0.000501,udp,147.32.84.170,38675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:49.442784,0.000394,udp,147.32.84.170,56461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:57:51.568678,2879.122559,udp,188.118.158.102,40200.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:57:54.305478,0.000107,udp,147.32.84.138,42772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:57:56.137378,0.003721,tcp,147.32.87.249,4033.0,->,147.32.87.11,27001.0,_FSA,,0.0,6,364,0,364,60.666666666666664,0.0,22,0,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 22:57:56.438480,3102.632812,udp,147.32.84.229,13363.0,<->,93.155.175.184,46233.0,CON,0.0,0.0,10,2018,1123,895,201.8,0.5564915758176412,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:57:58.605193,0.003148,udp,188.40.66.212,7267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1152,76,1076,576.0,0.06597222222222222,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:58:00.475493,0.0,tcp,184.82.243.16,80.0,->,147.32.86.117,54076.0,SA_,0.0,,1,60,60,0,60.0,1.0,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:58:01.087620,0.000313,udp,147.32.84.170,35589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:01.788774,1.2e-05,icmp,147.32.87.249,,<-,147.32.87.3,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,22,1,flow=Background,Background,-1 2011-08-16 22:58:08.679184,0.000265,udp,147.32.84.242,53637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.686892,0.000301,udp,147.32.84.138,45526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.731661,0.003961,tcp,147.32.84.242,59904.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:58:08.790238,0.00031,udp,147.32.84.242,54750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.829447,0.000296,udp,147.32.84.242,52276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.849520,0.000328,udp,147.32.84.242,50103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.865465,0.000282,udp,147.32.84.242,45647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:08.990316,0.000315,udp,147.32.84.242,33373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:09.039537,0.000299,udp,147.32.84.242,41126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:09.356225,0.000201,udp,147.32.84.242,48198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:09.442409,0.00028,udp,147.32.84.170,41396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:09.443269,0.00028,udp,147.32.84.170,58593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:12.025382,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.49,16236.0,ECR,,0.0,2,196,0,196,98.0,0.0,22,0,flow=Background,Background,-1 2011-08-16 22:58:13.425002,0.308679,tcp,147.32.84.170,49868.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:14.156599,0.000201,udp,147.32.84.170,33493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:14.622082,0.1042,udp,147.32.84.170,33725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:18.925368,0.00162,udp,2.193.160.184,37730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,503,60,281.5,0.8934280639431617,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:58:19.443448,0.018823,tcp,147.32.84.170,41484.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:21.512827,64.129616,tcp,147.32.84.165,1420.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:58:26.896466,0.005131,tcp,147.32.86.88,62663.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:58:28.873559,3241.156494,udp,147.32.84.229,13363.0,<->,85.193.51.206,19282.0,CON,0.0,0.0,20,2153,1515,638,107.65,0.7036692986530423,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:58:35.375134,0.000606,udp,87.120.147.72,58282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:58:39.443775,0.018247,tcp,147.32.84.170,33548.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:58:40.117853,0.000233,udp,147.32.86.20,63721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:41.869088,8e-06,icmp,147.32.86.96,,<-,147.32.87.29,42092.0,ECR,,0.0,2,196,0,196,98.0,0.0,22,0,flow=Background,Background,-1 2011-08-16 22:58:50.657505,0.007914,tcp,147.32.84.242,35907.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:58:57.129108,0.000375,udp,147.32.84.138,45149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:58:57.994201,0.309879,tcp,147.32.86.20,2855.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:00.580748,0.000185,udp,147.32.84.138,43408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:08.416808,0.000329,udp,147.32.84.242,56897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:09.096606,0.000328,udp,147.32.84.242,33324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:09.375554,0.004222,tcp,147.32.84.242,59815.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:09.387521,0.002677,tcp,147.32.84.242,59825.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:09.415763,0.003888,tcp,147.32.84.242,60825.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:59:09.577075,0.00619,tcp,147.32.84.242,59878.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:09.626938,0.000278,udp,147.32.84.242,51941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:10.180985,0.206521,tcp,147.32.86.20,2866.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,22,1,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:11.497218,0.000231,udp,147.32.84.138,39998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:11.970459,1.2e-05,icmp,147.32.86.96,,<-,147.32.87.54,57196.0,ECR,,0.0,2,196,0,196,98.0,0.0,22,0,flow=Background,Background,-1 2011-08-16 22:59:14.958759,616.12085,udp,94.41.211.147,30784.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:59:15.011396,3014.156982,udp,79.146.25.109,17988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1470,1098,372,122.5,0.746938775510204,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:59:19.443898,0.017615,tcp,147.32.84.170,33553.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:59:19.473719,0.000128,udp,147.32.84.138,59042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:22.350891,61.255802,tcp,147.32.84.165,1421.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,22,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 22:59:26.021889,0.000563,udp,79.103.220.140,13279.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,77,481,279.0,0.13799283154121864,22,0,flow=Background-UDP-Established,Background,-1 2011-08-16 22:59:29.442786,0.000443,udp,147.32.84.170,54902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:59:29.606414,0.000211,udp,147.32.85.25,34267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:29.641866,0.000243,udp,147.32.85.25,56933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:38.840923,0.001733,tcp,147.32.86.5,2588.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:42.908368,0.001293,tcp,147.32.86.88,62809.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:49.443659,0.017989,tcp,147.32.84.170,56936.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 22:59:50.036761,0.003852,tcp,147.32.86.34,54223.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,22,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 22:59:50.078217,0.0084,tcp,147.32.84.242,36440.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,22,0,flow=Background-TCP-Established,Background,-1 2011-08-16 22:59:50.114850,0.000365,udp,147.32.84.242,51185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,22,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 22:59:59.443574,0.018486,tcp,147.32.84.170,56937.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,22,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:03.229891,0.000278,udp,147.32.85.34,53496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:03.239783,0.000376,udp,147.32.85.34,50895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:04.264598,0.000244,udp,147.32.84.138,42760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:05.093353,0.230443,tcp,147.32.84.170,44297.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:10.631892,0.000306,udp,147.32.87.36,34518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,23,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 23:00:14.560634,0.000271,udp,147.32.84.242,38673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:14.611207,0.008299,tcp,147.32.84.242,36668.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:14.617088,0.000345,udp,147.32.84.242,34263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:14.744781,0.003865,tcp,147.32.84.242,33047.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:00:14.840000,0.003889,tcp,147.32.84.242,33140.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:00:14.865184,126.00782,tcp,147.32.84.242,36923.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:16.285260,304.096527,tcp,165.228.211.29,62010.0,->,147.32.86.44,10966.0,SRA_,0.0,,3,192,192,0,64.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:00:19.296075,0.000257,udp,147.32.84.138,34604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:19.441763,0.000364,udp,147.32.84.170,50006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:19.442655,0.000381,udp,147.32.84.170,37323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:19.443750,0.018017,tcp,147.32.84.170,41500.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:23.189012,70.143669,tcp,147.32.84.165,1422.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:00:27.371204,0.3084,tcp,147.32.86.20,2935.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,26559,918,25641,781.1470588235294,0.03456455438834293,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:32.018425,0.000257,udp,147.32.84.242,53475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:33.150980,0.000506,udp,71.114.82.135,50352.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:00:35.296828,2441.497559,udp,75.189.224.11,14513.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:00:36.089479,0.253026,tcp,147.32.84.170,44301.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:37.466639,0.245835,udp,147.32.84.170,52820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:43.579211,0.000275,udp,147.32.84.138,50085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:48.317295,0.000358,udp,147.32.84.138,33339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:49.441727,0.000417,udp,147.32.84.170,59247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:50.114388,0.000525,udp,207.228.143.44,25474.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,77,471,274.0,0.14051094890510948,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:00:51.667276,243.668655,tcp,147.32.84.170,52528.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,2685,1523,1162,95.89285714285714,0.5672253258845438,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:51.667280,243.669647,tcp,147.32.84.170,52529.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,2685,1523,1162,95.89285714285714,0.5672253258845438,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:51.667387,243.643494,tcp,147.32.84.170,52535.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4848,1594,3254,156.38709677419354,0.3287953795379538,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:51.667565,243.647858,tcp,147.32.84.170,41505.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,31,4957,1547,3410,159.90322580645162,0.3120839217268509,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:51.668478,243.651184,tcp,147.32.84.170,52544.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4848,1594,3254,156.38709677419354,0.3287953795379538,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:51.676931,0.000245,udp,147.32.84.170,40171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:00:54.496751,0.000448,udp,147.32.84.25,51968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:00:56.557582,0.008696,tcp,147.32.86.34,48659.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:56.607058,0.007564,tcp,147.32.86.34,48671.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:56.718405,0.009263,tcp,147.32.84.242,37131.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:00:59.443170,0.00027,udp,147.32.84.170,52659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:07.076804,0.000402,udp,147.32.84.138,49866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:07.089400,0.0004,udp,147.32.84.170,58679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:07.090348,0.000334,udp,147.32.84.170,32997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:07.091660,0.237792,tcp,147.32.84.170,44336.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:08.698414,1.00623,tcp,147.32.86.88,62953.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:01:12.562686,3027.908936,udp,213.102.145.200,47828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:01:13.750493,0.001576,udp,78.248.250.75,20788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:01:14.032570,0.000295,udp,147.32.84.242,51883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:14.238394,0.001999,tcp,147.32.84.242,43220.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:01:14.293398,0.000281,udp,147.32.84.242,39966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:14.360722,0.000293,udp,147.32.84.242,39261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:18.192746,0.000423,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,23,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-16 23:01:19.442906,0.000286,udp,147.32.84.170,33608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:24.951971,3403.188477,udp,99.231.150.176,16900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:01:27.952989,0.000251,udp,147.32.84.138,54345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:29.442061,0.000498,udp,147.32.84.170,50172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:29.443192,0.000299,udp,147.32.84.170,49996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:29.623258,0.995578,udp,147.32.87.48,2983.0,->,147.32.87.102,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:01:32.004589,6.223695,tcp,147.32.84.242,36541.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:01:32.791300,0.000338,udp,125.25.9.189,41983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:01:32.909634,61.255199,tcp,147.32.84.165,1423.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:01:33.794883,0.000167,udp,147.32.84.138,36331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:38.082210,0.0003,udp,147.32.84.170,44523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:39.442088,0.000333,udp,147.32.84.170,46881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:45.240054,0.000349,udp,147.32.84.138,40181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:49.442033,0.000367,udp,147.32.84.170,58222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:01:49.485479,0.000311,udp,147.32.84.19,60001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:52.692364,1.021812,tcp,147.32.86.88,63047.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:01:56.063362,0.000197,udp,147.32.84.242,47076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:56.543492,0.000337,udp,147.32.84.138,59389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:57.448214,0.000238,udp,147.32.84.242,54722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:01:57.773546,0.003892,tcp,147.32.84.242,43162.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:02:00.454591,0.249917,tcp,147.32.84.59,7771.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,27,18693,2413,16280,692.3333333333334,0.12908575402557107,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:02:03.252503,1.263037,tcp,147.32.86.20,3020.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,93940,1646,92294,988.8421052631579,0.017521822439855228,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:02:09.851468,0.000249,udp,147.32.86.5,55362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:11.137408,0.060409,tcp,147.32.84.59,7796.0,->,79.110.90.39,80.0,SRPA_FSPA,0.0,0.0,11,2902,1902,1000,263.8181818181818,0.6554100620261888,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:02:15.209224,0.000301,udp,147.32.84.138,46200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:19.442128,0.000312,udp,147.32.84.170,37214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:02:20.773323,0.000286,udp,147.32.84.242,50980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:20.871341,0.000355,udp,147.32.84.242,33987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:20.898940,0.00404,tcp,147.32.84.242,43391.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:02:20.904739,0.003959,tcp,147.32.84.242,43395.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:02:20.918179,0.008236,tcp,147.32.84.242,36975.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:02:20.963039,0.000337,udp,147.32.84.242,58893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:22.745069,2989.522949,udp,41.72.209.130,53534.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,763,577,186,127.16666666666667,0.7562254259501966,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:02:29.007330,0.000334,udp,147.32.84.138,40826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:29.442200,0.000334,udp,147.32.84.170,51691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:02:30.717603,0.000311,udp,147.32.84.138,57589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:30.903712,0.000301,udp,147.32.84.138,36642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:32.088545,0.000516,udp,69.254.65.2,56915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,81,474,277.5,0.14594594594594595,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:02:33.746981,61.271828,tcp,147.32.84.165,1424.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:02:39.442109,0.000506,udp,147.32.84.170,54890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:02:40.089541,0.000329,udp,147.32.84.170,45820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:02:47.127884,0.000228,udp,147.32.86.20,60793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:54.406616,0.000397,udp,161.247.0.1,56702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:02:55.356485,0.000221,udp,147.32.85.89,46993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:02:57.022486,3599.984863,tcp,147.32.84.242,52421.0,->,147.251.3.130,1713.0,SPA_SPA,0.0,0.0,51,7947,4087,3860,155.8235294117647,0.514282119038631,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:02:59.443511,0.000321,udp,147.32.84.170,58298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:02:59.444519,0.018024,tcp,147.32.84.170,50204.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:04.345964,0.000435,udp,147.32.84.59,49112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:11.090530,0.000337,udp,147.32.84.170,58715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:13.701335,0.547774,tcp,147.32.84.170,54713.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:14.784140,0.000428,udp,80.243.27.181,59612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:03:18.030432,0.000291,udp,147.32.84.138,56177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:19.444088,0.018757,tcp,147.32.84.170,50211.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:20.292837,0.000243,udp,147.32.84.138,43876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:22.900273,0.000348,udp,147.32.84.138,40961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:25.368900,0.000255,udp,147.32.84.138,36447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:27.367270,0.00052,udp,82.113.99.135,1319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:03:28.992675,922.24585,udp,78.61.4.250,52549.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,605,346,259,151.25,0.571900826446281,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:03:29.025763,0.000333,udp,147.32.84.138,56883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:29.444113,0.018059,tcp,147.32.84.170,53000.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:34.595818,64.335518,tcp,147.32.84.165,1425.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:03:39.442210,0.000429,udp,147.32.84.170,52861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:03:57.574628,0.000165,udp,147.32.85.34,51849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:03:57.792798,0.02035,udp,147.32.84.184,52522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:04:01.005056,0.00041,udp,147.32.85.25,51211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:04:06.141052,0.000397,udp,109.226.67.100,41563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:09.444281,0.017839,tcp,147.32.84.170,44487.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:13.876186,0.000595,udp,92.205.82.233,44184.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,76,467,271.5,0.13996316758747698,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:18.361909,3574.103027,tcp,147.32.84.170,43527.0,->,74.125.39.125,5222.0,PA_PA,0.0,0.0,180,14178,7347,6831,78.76666666666667,0.5181972069403301,23,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:19.443095,0.000356,udp,147.32.84.170,32992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:23.158659,0.000294,udp,147.32.84.171,43679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,80,211,145.5,0.27491408934707906,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:04:25.358770,0.035193,udp,147.32.84.171,43844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,72,132,102.0,0.35294117647058826,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:04:26.553940,33.379135,udp,151.76.136.118,12050.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,462,338,124,115.5,0.7316017316017316,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:28.558766,0.000533,udp,68.5.41.145,56848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,77,487,282.0,0.13652482269503546,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:29.444198,0.0179,tcp,147.32.84.170,59163.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:30.032662,0.000423,udp,50.133.214.24,3394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:34.042838,5.989914,udp,147.32.84.229,13363.0,->,188.194.32.121,41249.0,INT,0.0,,3,222,222,0,74.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:04:38.508224,61.254883,tcp,147.32.84.165,1426.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:04:42.815798,1293.458252,udp,190.37.215.8,10030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,665,365,300,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:04:43.225837,10.628579,tcp,77.118.252.73,37449.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,14,1083,534,549,77.35714285714286,0.4930747922437673,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:04:44.090416,0.000293,udp,147.32.84.170,44445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:44.092712,0.241199,tcp,147.32.84.170,38897.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:49.444074,0.000534,udp,147.32.84.170,47999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:59.442421,0.000377,udp,147.32.84.170,59020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:04:59.443305,0.000405,udp,147.32.84.170,35787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:06.819413,8.999423,tcp,147.32.84.171,43479.0,->,85.17.234.14,7498.0,S_,0.0,,3,222,222,0,74.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:05:06.972246,0.000174,udp,147.32.84.138,53930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:09.442367,0.000326,udp,147.32.84.170,60151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:09.443256,0.000363,udp,147.32.84.170,49719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:31.258279,0.000403,udp,147.32.86.20,50988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:34.895912,4.240052,udp,41.137.23.71,29356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1032,912,120,258.0,0.8837209302325582,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:05:39.345362,70.581329,tcp,147.32.84.165,1427.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:05:39.453790,0.018094,tcp,147.32.84.170,59173.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:40.453409,0.000183,udp,147.32.84.138,56208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:43.282249,0.000231,udp,147.32.84.138,60721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:43.821530,0.001751,udp,98.244.210.12,25695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:05:46.090411,0.000271,udp,147.32.84.170,55337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:46.234139,0.000266,udp,147.32.84.138,37326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:47.853036,0.000538,udp,189.231.253.95,35303.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,583,74,509,291.5,0.1269296740994854,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:05:47.985048,2537.21875,udp,147.32.84.229,13363.0,->,82.228.78.94,55775.0,INT,0.0,,6,426,426,0,71.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:05:48.648981,0.000511,udp,188.168.138.183,19409.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:05:49.444247,0.017936,tcp,147.32.84.170,36904.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:05:53.322138,0.000231,udp,147.32.85.25,39519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:57.629128,0.000322,udp,147.32.84.138,53959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:05:58.074486,0.308751,tcp,147.32.86.20,3227.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:05:58.333694,6.513119,tcp,66.249.72.134,59519.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,18000,1883,16117,580.6451612903226,0.10461111111111111,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:05:59.444075,0.017696,tcp,147.32.84.170,59176.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:03.977960,0.000205,udp,147.32.85.34,50368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,85,222,153.5,0.2768729641693811,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:06:03.984862,0.000204,udp,147.32.85.34,59557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,85,222,153.5,0.2768729641693811,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:06:09.442366,0.000423,udp,147.32.84.170,52793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:19.443233,0.000276,udp,147.32.84.170,35002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:31.955236,0.000437,udp,72.190.91.2,3192.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:06:33.729862,0.000443,udp,200.112.188.85,61281.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:06:39.038590,0.000339,udp,147.32.85.25,35513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:06:40.192464,64.141106,tcp,147.32.84.165,1428.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:06:46.554582,2353.651123,rtp,147.32.84.229,13363.0,<->,195.1.36.58,41182.0,CON,0.0,0.0,10,3760,266,3494,376.0,0.07074468085106383,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:06:48.089525,0.000263,udp,147.32.84.170,51559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:48.090367,0.000295,udp,147.32.84.170,32821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:48.091600,0.272023,tcp,147.32.84.170,39334.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:49.444070,0.00032,udp,147.32.84.170,44663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:49.445997,0.019831,tcp,147.32.84.170,39617.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:06:50.865086,0.000282,udp,147.32.84.138,58340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:06:52.830258,0.001374,icmp,147.32.86.96,,<-,147.32.87.51,58737.0,RED,,0.0,2,196,0,196,98.0,0.0,23,0,flow=Background,Background,-1 2011-08-16 23:06:59.443370,0.00035,udp,147.32.84.170,51497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:07:02.780252,0.000467,tcp,147.32.87.41,80.0,->,147.32.86.96,60468.0,SA_,0.0,,2,148,148,0,74.0,1.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:07:08.672019,0.000583,udp,89.204.225.95,21238.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:07:14.523497,0.00023,udp,147.32.84.138,46597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:19.443361,0.000295,udp,147.32.84.170,56808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:07:25.852411,0.000176,udp,147.32.84.138,59583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:29.443454,0.000324,udp,147.32.84.170,53781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:07:31.462818,20.414019,tcp,122.61.222.115,55220.0,->,147.32.85.100,3126.0,S_,0.0,,9,670,670,0,74.44444444444444,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:07:33.050024,0.429653,udp,147.32.87.48,3039.0,->,147.32.87.116,161.0,INT,0.0,,22,2882,2882,0,131.0,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:07:34.719964,0.00021,udp,147.32.84.59,54798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,86,228,157.0,0.27388535031847133,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:36.932676,0.000306,udp,147.32.84.138,44658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:40.823660,0.00053,udp,147.32.85.25,49132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:42.925319,0.000269,udp,147.32.84.138,45759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:43.915097,64.137367,tcp,147.32.84.165,1429.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:07:46.279137,0.000257,udp,147.32.85.25,59343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:50.089240,0.095844,udp,147.32.84.170,38925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:07:50.185654,0.025664,udp,147.32.84.170,42997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:07:56.571424,0.000309,udp,147.32.84.138,47498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:07:57.988225,0.549343,tcp,38.101.148.126,34727.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,11,1267,614,653,115.18181818181819,0.4846093133385951,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:07:58.117018,63.816212,udp,147.32.84.229,13363.0,<->,93.116.224.92,42258.0,CON,0.0,0.0,4,414,294,120,103.5,0.7101449275362319,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:07:58.764739,0.030428,udp,147.32.84.229,13363.0,<->,148.88.182.35,48781.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:00.700137,0.000513,udp,123.187.88.89,4642.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:01.265469,0.000531,udp,189.102.62.142,37951.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,75,510,292.5,0.1282051282051282,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:09.442504,0.000558,udp,147.32.84.170,34636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:09.444532,0.01797,tcp,147.32.84.170,51898.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:11.720546,9.000134,tcp,67.195.115.93,57941.0,->,147.32.85.43,80.0,S_,0.0,,3,222,222,0,74.0,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:08:11.886174,6.350846,udp,147.32.85.84,13716.0,->,118.167.0.43,65240.0,INT,0.0,,3,222,222,0,74.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:08:12.588325,0.004298,udp,86.3.95.198,13915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3021,60,2961,755.25,0.019860973187686197,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:14.237655,0.286181,tcp,147.32.84.170,51794.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:16.737484,2575.942627,udp,173.24.38.29,34179.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2987,496,2491,186.6875,0.16605289588215602,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:18.722505,10.063496,udp,147.32.84.164,57501.0,->,81.171.115.6,27017.0,INT,0.0,,2,156,156,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.772120,32.278545,udp,147.32.84.164,57501.0,->,68.142.83.181,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.772181,32.363319,udp,147.32.84.164,57501.0,->,208.111.158.53,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.822140,32.277924,udp,147.32.84.164,57501.0,->,68.142.83.182,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.822148,32.23777,udp,147.32.84.164,57501.0,->,81.171.115.5,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.871891,32.40855,udp,147.32.84.164,57501.0,->,72.165.61.187,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.921527,32.27895,udp,147.32.84.164,57501.0,->,69.28.156.250,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:18.971870,32.349518,udp,147.32.84.164,57501.0,->,69.28.145.170,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:19.022909,32.271862,udp,147.32.84.164,57501.0,->,68.142.91.34,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:19.022922,32.266518,udp,147.32.84.164,57501.0,->,68.142.91.36,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:19.073118,32.325886,udp,147.32.84.164,57501.0,->,68.142.83.180,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:19.123584,32.411083,udp,147.32.84.164,57501.0,->,72.165.61.176,27017.0,INT,0.0,,4,312,312,0,78.0,1.0,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:08:19.442804,0.000399,udp,147.32.84.170,40236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:19.443732,0.000281,udp,147.32.84.170,58332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:21.089925,0.222271,tcp,147.32.84.170,52822.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:25.353267,692.455933,udp,151.41.74.76,36974.0,->,147.32.86.165,12114.0,INT,0.0,,2,153,153,0,76.5,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:08:25.842211,0.000274,udp,147.32.84.138,59232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:08:25.846851,0.000258,udp,147.32.84.138,39405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:08:29.444568,0.066005,udp,147.32.84.229,13363.0,<->,88.217.26.233,5174.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:35.887783,0.501608,udp,188.62.74.75,60766.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,762,139,623,190.5,0.18241469816272965,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:39.444527,0.018413,tcp,147.32.84.170,38343.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:44.763154,61.271053,tcp,147.32.84.165,1430.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:08:45.656483,2435.718506,udp,88.36.234.161,37324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1303,993,310,130.3,0.7620874904067536,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:08:49.443491,0.000292,udp,147.32.84.170,60424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:08:57.774990,0.000219,udp,147.32.84.138,34144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:08:59.442514,0.000453,udp,147.32.84.170,53468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:02.359358,0.000327,udp,147.32.84.138,54253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:05.389820,0.000544,udp,86.67.91.118,28690.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:09.442610,0.000428,udp,147.32.84.170,51047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:10.792735,0.000358,udp,147.32.84.138,44290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:13.290527,0.0,tcp,113.105.171.60,80.0,->,147.32.84.96,29305.0,SA_,0.0,,1,66,66,0,66.0,1.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:09:19.443536,0.000337,udp,147.32.84.170,43143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:19.444552,0.018435,tcp,147.32.84.170,51913.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:22.906099,0.168409,udp,147.32.87.36,48204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,399,86,313,199.5,0.21553884711779447,23,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 23:09:29.442572,0.000299,udp,147.32.84.170,46068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:29.443429,0.000287,udp,147.32.84.170,33972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:31.937402,0.000575,udp,92.230.76.159,62246.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:35.635358,9.506096,tcp,81.38.219.84,17070.0,->,147.32.86.78,58949.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:09:37.252133,1219.732056,udp,147.32.84.229,13363.0,<->,62.107.40.206,22790.0,CON,0.0,0.0,8,870,255,615,108.75,0.29310344827586204,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:37.571356,2290.399902,udp,190.190.62.208,36150.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:38.076933,0.000252,udp,147.32.84.138,52870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:39.442603,0.000392,udp,147.32.84.170,36922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:39.444772,0.018526,tcp,147.32.84.170,51916.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:41.668613,0.000482,udp,121.98.205.41,64957.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:43.650646,0.000124,udp,147.32.85.25,42270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:43.778717,1714.090332,udp,178.252.78.78,51283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,784,598,186,130.66666666666666,0.7627551020408163,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:44.961052,120.008911,tcp,147.32.84.59,8033.0,->,74.125.232.216,443.0,FSPA_FSPA,0.0,0.0,15,3651,2784,867,243.4,0.76253081347576,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:09:45.488868,691.059692,tcp,151.48.174.155,49168.0,->,147.32.84.229,13363.0,FSPA_SRPA,0.0,0.0,81,8319,4293,4026,102.70370370370371,0.5160476018752254,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:09:45.610452,64.10479,tcp,147.32.84.165,1431.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:09:49.443667,0.000376,udp,147.32.84.170,50036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:09:50.456990,0.000247,udp,147.32.86.20,63349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:50.777919,629.465698,tcp,49.184.123.77,43813.0,->,147.32.84.229,443.0,FSRPA_FSA,0.0,0.0,8,531,273,258,66.375,0.5141242937853108,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:09:51.973573,0.142106,tcp,147.32.84.164,42463.0,->,208.111.158.53,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:09:52.809893,0.00021,udp,147.32.84.138,50927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:09:54.675453,0.000357,udp,24.97.123.170,51217.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:56.364344,0.000464,udp,86.41.252.140,65360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:57.741656,2183.365723,udp,147.32.84.229,13363.0,<->,89.215.188.34,24549.0,CON,0.0,0.0,4,680,150,530,170.0,0.22058823529411764,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:09:59.443322,0.000321,udp,147.32.84.170,50572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:04.485880,0.0,tcp,24.132.91.111,6000.0,->,147.32.85.220,4899.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:10:04.540173,0.000683,tcp,24.132.91.111,6000.0,->,147.32.87.33,4899.0,S_RA,0.0,0.0,2,120,60,60,60.0,0.5,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:10:04.540176,0.0,tcp,24.132.91.111,6000.0,->,147.32.87.29,4899.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:10:07.987493,6.03427,udp,94.37.36.106,53456.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1608,1428,180,268.0,0.8880597014925373,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:10:13.546139,6.91952,tcp,116.64.250.224,3293.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1207,683,524,67.05555555555556,0.5658657829328915,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:10:13.934142,0.000563,udp,147.32.84.138,43789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:10:15.631280,0.121938,tcp,66.249.66.204,38926.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,2045,642,1403,204.5,0.3139364303178484,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:10:16.447792,2329.736572,udp,149.5.45.9,43056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,397,147,250,99.25,0.3702770780856423,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:10:18.858430,3087.278809,udp,203.100.241.125,11103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1494,1122,372,124.5,0.751004016064257,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:10:19.377198,0.000341,udp,147.32.85.25,51520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:10:19.444429,0.018453,tcp,147.32.84.170,60484.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:19.708868,0.135332,tcp,147.32.86.20,3458.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:10:30.976560,0.000185,udp,147.32.84.138,56235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:10:31.540808,0.258894,tcp,147.32.84.164,35906.0,->,4.71.126.2,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:10:31.964410,0.027931,udp,147.32.84.229,13363.0,<->,62.45.190.12,32728.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:10:39.442681,0.107432,udp,147.32.84.170,39641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:39.550671,0.000416,udp,147.32.84.170,55630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:41.374406,0.376542,tcp,67.195.112.25,33885.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,4846,789,4057,403.8333333333333,0.1628146925299216,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:10:47.577435,0.000445,udp,109.45.171.222,53010.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:10:47.982324,0.000412,icmp,147.32.87.249,,<-,147.32.87.38,2.0,RED,,0.0,2,148,0,148,74.0,0.0,23,1,flow=Background,Background,-1 2011-08-16 23:10:49.291994,64.420998,tcp,147.32.84.165,1432.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:10:55.554320,0.000157,udp,147.32.85.25,42528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:10:56.087086,0.000253,udp,147.32.84.170,36267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:56.087766,0.000261,udp,147.32.84.170,34305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:10:59.444289,0.01802,tcp,147.32.84.170,60845.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:17.089391,22.102831,udp,195.113.36.95,1025.0,->,224.0.1.22,427.0,INT,0.0,,32,4800,4800,0,150.0,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:11:18.391300,0.025744,tcp,147.32.85.74,41037.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:11:19.442737,0.000295,udp,147.32.84.170,41153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:19.444652,0.018143,tcp,147.32.84.170,60492.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:19.504329,1626.069946,udp,111.249.216.42,52993.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3552,3432,120,592.0,0.9662162162162162,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:11:22.249004,0.018058,udp,147.32.84.229,13363.0,<->,84.112.115.181,15330.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:11:27.090584,0.000266,udp,147.32.84.170,47741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:28.620543,0.000273,udp,147.32.84.138,48772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:11:38.217522,6.019211,udp,147.32.84.229,13363.0,->,81.82.106.111,38037.0,INT,0.0,,3,207,207,0,69.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:11:39.442760,0.000356,udp,147.32.84.170,59615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:45.878483,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.13,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,23,1,flow=Background,Background,-1 2011-08-16 23:11:53.295104,61.272518,tcp,147.32.84.165,1433.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:11:53.513329,3075.631348,udp,24.0.130.169,58295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:11:55.929043,0.000414,udp,98.168.249.6,2255.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:11:58.089056,0.000314,udp,147.32.84.170,56162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:59.442793,0.000393,udp,147.32.84.170,40339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:59.443697,0.000329,udp,147.32.84.170,33432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:11:59.444769,0.018319,tcp,147.32.84.170,57292.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:03.471446,0.000263,udp,147.32.85.34,58631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:03.499001,0.000316,udp,147.32.85.34,64970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:06.960785,0.000338,udp,147.32.86.20,65029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:12.903974,2693.160645,udp,109.121.132.62,1503.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:12:14.448748,0.000414,udp,147.32.84.138,55464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:19.444145,0.00032,udp,147.32.84.170,57606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:19.445042,0.000356,udp,147.32.84.170,56787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:20.355192,0.000234,udp,147.32.84.138,38617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:29.444783,0.01856,tcp,147.32.84.170,49872.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:39.443854,0.000253,udp,147.32.84.170,34452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:39.444833,0.018103,tcp,147.32.84.170,49596.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:12:46.642647,163.169189,udp,147.32.84.229,13363.0,<->,89.146.142.247,38051.0,CON,0.0,0.0,6,399,216,183,66.5,0.5413533834586466,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:12:47.594376,0.116005,udp,147.32.87.135,3116.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,23,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 23:12:47.923277,0.000238,udp,147.32.85.25,44832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:50.622735,0.000235,udp,147.32.84.59,49963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:51.784101,0.000363,udp,147.32.84.166,56939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:12:54.143834,67.052528,tcp,147.32.84.165,1434.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1198,559,639,99.83333333333333,0.4666110183639399,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:13:00.090403,0.000277,udp,147.32.84.170,42990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:07.046912,3005.510254,tcp,147.32.84.170,36006.0,->,64.12.73.165,443.0,SPA_SRPA,0.0,0.0,199,14216,6606,7610,71.43718592964824,0.46468767585818793,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:07.839947,0.000281,udp,147.32.84.138,53534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:13:13.716074,0.635041,tcp,147.32.84.170,53345.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:16.036581,2831.676514,udp,147.32.84.229,13363.0,<->,86.52.120.219,8503.0,CON,0.0,0.0,10,681,360,321,68.1,0.5286343612334802,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:13:16.583264,1.95776,udp,78.13.166.125,51977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,572,382,190,143.0,0.6678321678321678,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:13:19.443914,0.000318,udp,147.32.84.170,46288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:30.448148,0.000368,udp,147.32.85.89,57009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:13:31.082177,0.255864,tcp,147.32.84.170,41343.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:35.914003,0.000254,udp,147.32.84.59,35561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:13:39.443988,0.00045,udp,147.32.84.170,58587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:39.446100,0.018239,tcp,147.32.84.170,49888.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:13:49.229073,1014.683044,udp,174.24.248.74,1263.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2094,150,1944,523.5,0.07163323782234957,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:13:50.926977,7.8e-05,udp,147.32.84.59,53329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:13:57.745576,64.153442,tcp,147.32.84.165,1435.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:13:59.444661,0.000205,udp,147.32.84.170,38037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:02.087043,0.000305,udp,147.32.84.170,54205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:02.267211,0.000287,udp,147.32.84.138,43539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:14:03.297785,0.000351,udp,147.32.85.34,61949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:14:06.804303,0.000459,udp,77.77.36.53,4216.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:14:08.259663,0.001231,icmp,147.32.84.19,,<-,147.32.87.5,22862.0,RED,,0.0,2,196,0,196,98.0,0.0,23,0,flow=Background,Background,-1 2011-08-16 23:14:19.444716,0.000301,udp,147.32.84.170,45129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:19.667492,0.000305,udp,147.32.84.138,35596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:14:33.090846,0.000452,udp,147.32.84.170,46458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:33.091787,0.000332,udp,147.32.84.170,52570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:39.443856,0.000351,udp,147.32.84.170,36889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:39.445684,0.018154,tcp,147.32.84.170,57320.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:49.445004,0.000426,udp,147.32.84.170,48300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:14:51.082221,0.000259,udp,147.32.85.25,45855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:14:54.343539,0.000338,udp,147.32.86.20,59982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:14:55.218840,0.133629,udp,147.32.84.229,13363.0,<->,151.42.37.165,54477.0,CON,0.0,0.0,4,2990,60,2930,747.5,0.020066889632107024,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:14:58.583079,61.270229,tcp,147.32.84.165,1436.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:14:59.445067,0.000345,udp,147.32.84.170,43832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:00.501321,0.000312,udp,147.32.84.21,51867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:01.233600,0.000211,udp,147.32.85.25,48641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:01.371031,3370.204102,udp,188.160.128.41,27939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,27,4588,3741,847,169.92592592592592,0.815387968613775,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:01.848894,0.000401,udp,79.232.172.195,41128.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:02.156284,0.000204,udp,147.32.84.138,35906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:04.093681,0.255401,tcp,147.32.84.170,41355.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:06.760676,0.0,tcp,60.173.10.170,4935.0,->,147.32.85.122,3389.0,S_,0.0,,1,66,66,0,66.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:15:12.862189,0.000484,udp,76.172.159.46,65471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:16.580438,0.013022,tcp,147.32.84.215,60172.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:15:19.446137,0.018155,tcp,147.32.84.170,49901.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:20.463943,0.000296,udp,147.32.85.89,43260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:21.545665,0.000155,udp,147.32.85.25,55456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:26.033828,0.207378,tcp,147.32.86.20,3727.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:15:28.662731,3038.576904,udp,147.32.84.229,13363.0,<->,67.55.202.173,49280.0,CON,0.0,0.0,10,3836,286,3550,383.6,0.07455683003128259,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:29.444242,0.000549,udp,147.32.84.170,41278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:29.445322,0.000313,udp,147.32.84.170,35654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:29.446408,0.018021,tcp,147.32.84.170,51144.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:29.760793,0.000276,udp,147.32.84.186,34277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:31.438313,0.000361,udp,96.10.241.166,60681.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:37.174457,0.000202,udp,147.32.85.25,59700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:43.688909,0.000429,udp,41.105.102.138,36373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:48.786915,0.205185,tcp,147.32.86.20,3746.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:15:49.445248,0.00032,udp,147.32.84.170,59460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:15:52.144867,0.000141,udp,147.32.84.138,42338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:15:53.132866,0.00049,udp,80.5.78.239,14248.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,81,491,286.0,0.14160839160839161,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:58.323231,3390.645264,udp,84.114.222.3,5271.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1427,1055,372,118.91666666666667,0.7393132445690259,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:15:59.431079,61.256359,tcp,147.32.84.165,1437.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:15:59.445188,0.000307,udp,147.32.84.170,34501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:06.090686,0.000288,udp,147.32.84.170,37667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:15.246286,3020.727539,udp,147.32.84.229,13363.0,<->,208.88.186.8,34019.0,CON,0.0,0.0,11,6009,361,5648,546.2727272727273,0.0600765518389083,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:16:19.446227,0.018805,tcp,147.32.84.170,42654.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:19.721533,0.112561,tcp,66.249.66.204,61431.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,2077,674,1403,207.7,0.32450649975926815,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:16:21.091118,0.000234,udp,147.32.84.138,54887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:16:23.572069,0.000213,udp,147.32.84.138,32973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:16:29.444410,0.000316,udp,147.32.84.170,47110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:30.555758,3019.665527,udp,31.16.58.162,38916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:16:33.663913,24.03723,udp,78.85.169.217,23657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:16:39.446627,0.018252,tcp,147.32.84.170,55934.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:48.910280,0.000269,udp,147.32.84.138,50674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:16:49.444159,0.000634,udp,147.32.84.170,32966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:54.379187,0.000209,udp,147.32.84.138,50996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:16:57.879474,0.000272,udp,147.32.84.138,41359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:16:58.663817,0.207361,tcp,147.32.86.20,3810.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:16:59.445264,0.000419,udp,147.32.84.170,59724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:16:59.446777,0.018295,tcp,147.32.84.170,55936.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:17:00.269672,64.224785,tcp,147.32.84.165,1438.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:17:02.150743,0.000365,udp,186.45.135.97,44720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:17:08.096616,0.000277,udp,147.32.84.170,56322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:17:16.053522,1.120002,tcp,166.205.140.77,32326.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,13,1087,638,449,83.61538461538461,0.5869365225390984,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:17:20.398167,0.00021,udp,147.32.84.138,40324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:17:21.759607,0.000638,tcp,147.32.3.51,2506.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:17:25.530964,3061.489502,udp,79.223.94.240,65482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:17:39.445437,0.000324,udp,147.32.84.170,43264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:17:43.916537,0.697123,udp,213.151.218.133,46247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,610,421,189,101.66666666666667,0.6901639344262295,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:17:46.935221,0.000238,udp,147.32.84.138,56215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:17:49.383849,0.000305,udp,147.32.84.138,42003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:17:49.444373,0.000414,udp,147.32.84.170,59996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:17:49.446369,0.018122,tcp,147.32.84.170,51977.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:03.307366,0.000283,udp,147.32.85.34,64707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:18:04.071191,64.076195,tcp,147.32.84.165,1439.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:18:04.765120,0.338144,tcp,90.183.39.17,40414.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,11,1776,860,916,161.45454545454547,0.48423423423423423,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:18:06.316300,8.611572,tcp,66.249.72.176,55040.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,56,33499,2842,30657,598.1964285714286,0.08483835338368309,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:18:07.589726,3043.689209,udp,217.217.36.189,12370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:09.093155,0.000252,udp,147.32.84.170,46879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:12.507959,0.000558,udp,147.32.84.3,43270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:18:19.446326,0.000361,udp,147.32.84.170,44606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:19.447426,0.018728,tcp,147.32.84.170,44408.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:24.213057,0.030531,udp,116.94.156.188,40754.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,588,76,512,294.0,0.1292517006802721,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:29.445645,0.000381,udp,147.32.84.170,55478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:36.825535,811.122437,udp,184.246.65.205,38508.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1138,1018,120,284.5,0.8945518453427065,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:37.427137,61.971073,udp,91.125.185.115,36935.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:39.327886,1.198364,tcp,147.32.84.164,42443.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,2182,2677061,28351,2648710,1226.8840513290559,0.010590345158365835,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:18:39.941734,0.003535,udp,88.156.242.167,34213.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3016,60,2956,754.0,0.01989389920424403,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:46.539788,0.147292,udp,147.32.84.229,13363.0,<->,74.67.70.236,34112.0,CON,0.0,0.0,2,1000,79,921,500.0,0.079,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:49.444789,0.000303,udp,147.32.84.170,38732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:49.692541,6.011098,udp,147.32.84.229,13363.0,->,95.220.213.223,12623.0,INT,0.0,,3,231,231,0,77.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:18:52.626601,0.001446,udp,174.58.21.71,18301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:18:52.862822,0.035124,tcp,147.32.86.96,57270.0,->,147.32.87.52,12489.0,_FSPA,,0.0,8,556,0,556,69.5,0.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:18:57.617125,0.000202,udp,147.32.84.138,40234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:18:57.622366,0.000317,udp,147.32.85.25,54851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:18:59.446734,0.000259,udp,147.32.84.170,50704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:18:59.447751,0.01814,tcp,147.32.84.170,44413.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:05.054417,6.589563,tcp,66.249.72.176,46800.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,42,24085,2032,22053,573.452380952381,0.0843678638156529,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:19:07.724156,64.194794,tcp,147.32.84.165,1440.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:19:09.447693,0.017965,tcp,147.32.84.170,51993.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:09.461958,0.000268,udp,147.32.84.138,45740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:09.483723,0.000376,udp,147.32.84.138,43919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:10.141946,0.000546,udp,108.56.50.84,50505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:11.092374,0.000387,udp,147.32.84.170,34870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:11.494686,3.093106,tcp,208.98.15.14,80.0,->,147.32.85.15,46102.0,SA_,0.0,,2,124,124,0,62.0,1.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:19:11.803800,0.000222,udp,147.32.84.138,44368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:18.695125,0.000126,udp,147.32.85.25,50461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:29.209679,0.155417,udp,147.32.84.229,13363.0,<->,76.188.173.30,52856.0,CON,0.0,0.0,4,2962,60,2902,740.5,0.02025658338960162,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:29.445810,0.000449,udp,147.32.84.170,47779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:29.446756,0.000278,udp,147.32.84.170,46591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:33.819898,0.000439,udp,196.44.230.51,10396.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:36.560415,0.000249,udp,147.32.84.138,58750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:39.863820,0.000566,udp,87.148.162.48,45715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,76,492,284.0,0.13380281690140844,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:42.092681,0.00033,udp,147.32.84.170,46035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:42.093912,0.202415,tcp,147.32.84.170,34650.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:19:43.210513,2859.492676,udp,147.32.84.229,13363.0,<->,46.237.121.148,46276.0,CON,0.0,0.0,6,3531,134,3397,588.5,0.03794958935145851,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:44.208806,0.995575,udp,78.128.184.210,3079.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:19:44.969780,0.000215,udp,147.32.84.138,42061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:47.110165,0.000283,udp,147.32.85.34,60561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:48.093309,0.00023,udp,147.32.84.138,60013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:48.138591,3572.220459,udp,147.32.86.96,46316.0,<->,82.208.56.89,123.0,CON,0.0,0.0,224,20160,10080,10080,90.0,0.5,23,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 23:19:48.706249,0.000656,udp,24.70.10.211,33043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,615,78,537,307.5,0.12682926829268293,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:54.252495,9.1e-05,udp,147.32.85.25,50881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:54.941387,0.000428,udp,186.210.68.105,24798.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:19:55.012564,0.000123,udp,147.32.84.138,43978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:19:57.486979,0.000421,udp,204.111.80.234,4936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:20:01.580914,0.000393,udp,147.32.84.222,49809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:02.533545,0.00516,tcp,147.32.86.92,38698.0,->,147.32.87.40,4949.0,_SPA,,0.0,4,350,0,350,87.5,0.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:20:04.193835,0.000272,udp,147.32.85.34,52016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:06.380506,0.000306,udp,147.32.84.59,41871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:07.170734,0.000425,udp,147.32.86.20,51835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:09.447633,0.01801,tcp,147.32.84.170,55714.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:10.196615,2.190874,tcp,190.127.41.48,57102.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,11,945,557,388,85.9090909090909,0.5894179894179894,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:20:11.495755,61.256798,tcp,147.32.84.165,1441.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:20:15.158812,0.000371,udp,147.32.84.138,53808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:24.545278,0.000304,udp,147.32.85.25,51608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:24.818349,0.000171,udp,147.32.85.25,39487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:25.016830,2199.820557,udp,64.13.156.137,58941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1236,156,1080,309.0,0.1262135922330097,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:20:29.447890,0.017736,tcp,147.32.84.170,55717.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:30.159475,5.832612,tcp,147.32.86.89,4701.0,->,77.75.72.72,80.0,FSPA_FSPA,0.0,0.0,11,2677,1797,880,243.36363636363637,0.6712738139708629,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:20:39.445839,0.010256,udp,147.32.84.170,34522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:39.456673,0.000206,udp,147.32.84.170,33948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:39.457639,0.018225,tcp,147.32.84.170,41750.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:40.076811,0.000222,udp,147.32.84.138,56688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:20:41.615433,3599.948242,udp,75.139.130.133,51350.0,->,147.32.86.239,161.0,REQ,0.0,,235,28900,28900,0,122.97872340425532,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:20:49.446939,0.000434,udp,147.32.84.170,42407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:49.448048,0.017943,tcp,147.32.84.170,41752.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:20:54.467656,0.000502,udp,188.72.108.40,11412.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:00.846875,0.000483,udp,82.73.40.32,3348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,611,78,533,305.5,0.1276595744680851,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:09.445902,0.000492,udp,147.32.84.170,51112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:10.640387,0.000226,udp,147.32.85.25,32996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:21:12.334535,61.257385,tcp,147.32.84.165,1442.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:21:13.798416,0.000399,udp,109.160.102.236,52189.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:14.512831,0.0,tcp,147.32.84.165,1443.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.513041,0.0,tcp,147.32.84.165,1444.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.524389,0.0,tcp,147.32.84.165,1446.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.697040,0.0,tcp,147.32.84.165,1447.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.697364,0.0,tcp,147.32.84.165,1448.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.707219,0.0,tcp,147.32.84.165,1450.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.896931,0.0,tcp,147.32.84.165,1451.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:14.897134,0.0,tcp,147.32.84.165,1452.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:15.449153,0.0,tcp,147.32.84.165,1456.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:15.647983,0.0,tcp,147.32.84.165,1455.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:16.570841,0.000185,udp,147.32.84.59,34806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:21:19.447158,0.00043,udp,147.32.84.170,40196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:19.448338,0.017934,tcp,147.32.84.170,55724.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:21.492658,2039.838013,udp,193.91.143.206,51239.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,6006,120,5886,750.75,0.01998001998001998,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:22.012828,0.000378,udp,84.226.141.27,42914.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:27.061100,5.314065,tcp,147.32.86.89,4790.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,2073,1027,1046,188.45454545454547,0.4954172696575012,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:21:28.165941,0.0,tcp,147.32.84.165,1679.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.166056,0.0,tcp,147.32.84.165,1682.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.166063,0.0,tcp,147.32.84.165,1680.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.166113,0.0,tcp,147.32.84.165,1683.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.767369,0.0,tcp,147.32.84.165,1694.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.767462,0.0,tcp,147.32.84.165,1692.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:28.767516,0.0,tcp,147.32.84.165,1691.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:29.046538,1821.655518,udp,85.160.233.69,57048.0,<->,147.32.85.115,1194.0,CON,0.0,0.0,438,43138,20128,23010,98.48858447488584,0.4665955769854884,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:29.080789,3458.077881,udp,71.193.232.174,19011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:29.446807,0.000377,udp,147.32.84.170,56447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:33.602645,0.000464,udp,82.113.99.56,9816.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:35.190786,0.000249,udp,147.32.84.138,54292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:21:37.107724,0.000246,udp,147.32.84.138,55021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:21:40.183929,0.0,tcp,147.32.84.165,1922.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.183950,0.0,tcp,147.32.84.165,1920.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.183954,0.0,tcp,147.32.84.165,1919.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.184006,0.0,tcp,147.32.84.165,1926.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.184116,0.0,tcp,147.32.84.165,1924.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.386250,0.000322,udp,91.210.228.112,38324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,157,95,62,78.5,0.6050955414012739,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:40.785440,0.0,tcp,147.32.84.165,1931.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.785643,0.0,tcp,147.32.84.165,1934.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:40.785657,0.0,tcp,147.32.84.165,1932.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:42.844330,0.000433,udp,207.244.183.224,2682.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:44.675716,0.206192,tcp,147.32.86.20,4068.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:21:44.768171,0.00049,udp,81.29.18.162,61215.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,592,72,520,296.0,0.12162162162162163,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:49.449228,0.000323,udp,147.32.84.170,54147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:49.450340,0.01853,tcp,147.32.84.170,51977.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:21:52.203109,0.0,tcp,147.32.84.165,2160.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.203242,0.0,tcp,147.32.84.165,2163.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.203249,0.0,tcp,147.32.84.165,2161.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.203291,0.0,tcp,147.32.84.165,2164.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.204098,0.0,tcp,147.32.84.165,2167.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.803848,0.0,tcp,147.32.84.165,2173.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.803926,0.0,tcp,147.32.84.165,2172.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:52.804015,0.0,tcp,147.32.84.165,2175.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:21:54.455681,0.000246,udp,147.32.84.138,49014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:21:55.454924,2.383083,udp,147.32.87.48,3185.0,->,147.32.87.101,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:21:56.961100,0.00037,udp,194.44.137.237,63346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:21:59.450669,0.018321,tcp,147.32.84.170,56427.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:02.554727,0.000373,udp,147.32.86.20,60688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:22:04.220012,0.0,tcp,147.32.84.165,2401.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.220026,0.0,tcp,147.32.84.165,2400.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.220206,0.0,tcp,147.32.84.165,2403.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.220219,0.0,tcp,147.32.84.165,2405.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.220225,0.0,tcp,147.32.84.165,2404.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.820930,0.0,tcp,147.32.84.165,2415.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.820944,0.0,tcp,147.32.84.165,2413.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:04.820949,0.0,tcp,147.32.84.165,2412.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:07.741552,3187.265137,udp,80.66.47.12,33391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3690,1261,2429,153.75,0.3417344173441734,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:22:09.447991,0.000469,udp,147.32.84.170,54010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:16.094318,0.000256,udp,147.32.84.170,39932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:16.096371,0.229798,tcp,147.32.84.170,35698.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:16.237780,0.0,tcp,147.32.84.165,2598.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:16.237795,0.0,tcp,147.32.84.165,2596.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:16.237894,61.256077,tcp,147.32.84.165,2577.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:22:16.237898,0.0,tcp,147.32.84.165,2601.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:16.655627,0.0,tcp,147.32.84.165,2602.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:16.838517,0.0,tcp,147.32.84.165,2607.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:16.838526,0.0,tcp,147.32.84.165,2605.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:19.448238,0.000379,udp,147.32.84.170,56087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:28.254679,0.0,tcp,147.32.84.165,2778.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.254796,0.0,tcp,147.32.84.165,2776.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.254807,0.0,tcp,147.32.84.165,2781.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.254829,0.0,tcp,147.32.84.165,2779.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.855916,0.0,tcp,147.32.84.165,2787.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.855930,0.0,tcp,147.32.84.165,2785.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:28.856030,0.0,tcp,147.32.84.165,2790.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:29.407224,0.000241,udp,147.32.84.138,47644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:22:29.450383,0.018074,tcp,147.32.84.170,56431.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:39.890776,0.000246,udp,147.32.84.138,42429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:22:40.272321,0.0,tcp,147.32.84.165,2956.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.272336,0.0,tcp,147.32.84.165,2958.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.272393,0.0,tcp,147.32.84.165,2959.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.272479,0.0,tcp,147.32.84.165,2961.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.873122,0.0,tcp,147.32.84.165,2965.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.873257,0.0,tcp,147.32.84.165,2967.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:40.873264,0.0,tcp,147.32.84.165,2968.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:42.338518,0.000307,udp,147.32.84.170,34432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:42.339762,240.058304,tcp,147.32.84.170,52544.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,23,4560,2994,1566,198.2608695652174,0.656578947368421,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:42.377221,250.038422,tcp,147.32.84.170,53477.0,->,209.85.149.113,80.0,FSPA_FSPA,0.0,0.0,32,9767,6670,3097,305.21875,0.6829118460120815,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:22:52.289861,0.0,tcp,147.32.84.165,3138.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:52.289875,0.0,tcp,147.32.84.165,3136.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:52.289880,0.0,tcp,147.32.84.165,3141.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:52.289884,0.0,tcp,147.32.84.165,3139.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:52.890377,0.0,tcp,147.32.84.165,3147.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:52.890404,0.0,tcp,147.32.84.165,3145.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:22:53.157350,3474.316406,udp,61.116.127.149,25770.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1054,934,120,263.5,0.8861480075901328,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:00.746040,0.000268,udp,147.32.84.138,59864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:02.083278,492.191711,udp,81.219.110.112,22789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,662,542,120,165.5,0.8187311178247734,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:04.306877,0.0,tcp,147.32.84.165,3286.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:04.306891,0.0,tcp,147.32.84.165,3288.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:04.307054,0.0,tcp,147.32.84.165,3290.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:04.315078,0.0,tcp,147.32.84.165,3292.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:04.908266,0.0,tcp,147.32.84.165,3294.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:04.908281,0.0,tcp,147.32.84.165,3296.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:09.450461,0.018228,tcp,147.32.84.170,51706.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:13.703683,0.265559,tcp,147.32.84.170,43486.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:16.051153,0.48137,tcp,147.32.84.170,56927.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:16.324850,0.0,tcp,147.32.84.165,3407.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:16.324864,0.0,tcp,147.32.84.165,3409.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:16.925280,0.0,tcp,147.32.84.165,3413.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:16.925294,0.0,tcp,147.32.84.165,3415.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:16.925507,0.0,tcp,147.32.84.165,3417.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:17.095122,0.000277,udp,147.32.84.170,37175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:17.411902,0.000137,udp,147.32.84.138,53215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:17.420470,0.000262,udp,147.32.84.138,54056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:18.450878,0.000286,udp,147.32.85.25,56532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:19.407708,0.000473,udp,63.245.31.195,20661.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:23.189132,0.097491,udp,147.32.84.229,13363.0,<->,91.187.25.246,20028.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:28.341903,0.0,tcp,147.32.84.165,3528.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:28.342003,61.256634,tcp,147.32.84.165,3432.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:23:28.342113,0.0,tcp,147.32.84.165,3530.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:28.759888,0.0,tcp,147.32.84.165,3532.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:28.943010,0.0,tcp,147.32.84.165,3534.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:28.943024,0.0,tcp,147.32.84.165,3536.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:29.448441,0.000332,udp,147.32.84.170,46576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:29.449301,0.000409,udp,147.32.84.170,40701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:29.450514,0.018474,tcp,147.32.84.170,35604.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:33.624128,0.000279,udp,147.32.84.138,36151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:33.889539,0.000562,udp,141.70.81.136,5279.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,72,480,276.0,0.13043478260869565,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:34.469699,3.63987,udp,147.32.84.229,13363.0,<->,76.85.182.141,46334.0,CON,0.0,0.0,4,698,577,121,174.5,0.826647564469914,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:35.171864,0.000387,udp,41.190.88.246,14291.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:37.164281,2.927313,udp,69.245.177.76,7214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,675,555,120,168.75,0.8222222222222222,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:23:39.449253,0.000506,udp,147.32.84.170,59641.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:39.450542,0.018058,tcp,147.32.84.170,39931.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:40.359068,0.0,tcp,147.32.84.165,3648.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:40.359083,0.0,tcp,147.32.84.165,3650.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:40.359121,0.0,tcp,147.32.84.165,3652.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:40.960110,0.0,tcp,147.32.84.165,3654.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:40.960128,0.0,tcp,147.32.84.165,3656.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:48.092490,0.00019,udp,147.32.84.170,55960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:48.094631,0.227672,tcp,147.32.84.170,35718.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:23:48.475867,0.00024,udp,147.32.84.138,48335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:23:52.376720,0.0,tcp,147.32.84.165,3768.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:52.376819,0.0,tcp,147.32.84.165,3770.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:52.376886,0.0,tcp,147.32.84.165,3772.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:52.977003,0.0,tcp,147.32.84.165,3774.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:52.977077,0.0,tcp,147.32.84.165,3776.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:23:54.417294,2.013182,tcp,147.32.84.59,8265.0,->,82.208.47.218,80.0,SRPA_FSPA,0.0,0.0,10,2786,1409,1377,278.6,0.505743000717875,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:23:56.250174,0.0,icmp,147.32.84.59,8.0,->,192.168.1.101,256.0,ECO,0.0,,1,106,106,0,106.0,1.0,23,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-16 23:24:02.616619,0.0003,udp,147.32.85.34,55337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,84,193,138.5,0.30324909747292417,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:24:04.394177,0.0,tcp,147.32.84.165,3888.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.394241,0.0,tcp,147.32.84.165,3887.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.394247,0.0,tcp,147.32.84.165,3890.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.394292,0.0,tcp,147.32.84.165,3889.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.394345,0.0,tcp,147.32.84.165,3892.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.994480,0.0,tcp,147.32.84.165,3893.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.994546,0.0,tcp,147.32.84.165,3894.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.994550,0.0,tcp,147.32.84.165,3895.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.994610,0.0,tcp,147.32.84.165,3896.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:04.994621,0.0,tcp,147.32.84.165,3897.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:09.450408,0.019244,tcp,147.32.84.170,56452.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:24:10.170000,0.000235,udp,147.32.85.25,37163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:24:15.305661,3082.702148,udp,98.251.127.246,34876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:16.410835,0.0,tcp,147.32.84.165,4007.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:16.410911,0.0,tcp,147.32.84.165,4009.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:16.410971,0.0,tcp,147.32.84.165,4011.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:17.012094,0.0,tcp,147.32.84.165,4013.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:17.012158,0.0,tcp,147.32.84.165,4015.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:18.066610,0.000653,udp,186.113.20.99,38861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:18.521541,1482.221191,udp,69.251.190.201,16806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1064,944,120,266.0,0.8872180451127819,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:22.112401,0.000173,udp,147.32.84.138,58344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:24:22.737783,0.000488,udp,213.192.3.171,15818.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,75,475,275.0,0.13636363636363635,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:23.707613,0.000241,udp,147.32.84.171,56164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:24:28.428280,0.0,tcp,147.32.84.165,4127.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:28.428381,0.0,tcp,147.32.84.165,4129.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:28.428504,0.0,tcp,147.32.84.165,4131.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:29.029296,0.0,tcp,147.32.84.165,4133.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:29.029369,0.0,tcp,147.32.84.165,4135.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:39.448634,0.000382,udp,147.32.84.170,33463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:24:40.445807,0.0,tcp,147.32.84.165,4248.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:40.445822,70.209595,tcp,147.32.84.165,4153.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:24:40.445827,0.0,tcp,147.32.84.165,4249.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:40.445882,0.0,tcp,147.32.84.165,4250.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:40.445887,0.0,tcp,147.32.84.165,4251.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:40.863330,0.0,tcp,147.32.84.165,4252.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:41.047117,0.0,tcp,147.32.84.165,4255.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:41.047229,0.0,tcp,147.32.84.165,4254.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:41.047240,0.0,tcp,147.32.84.165,4257.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:41.047274,0.0,tcp,147.32.84.165,4256.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:41.047423,0.0,tcp,147.32.84.165,4259.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:42.151067,9.3e-05,udp,147.32.84.138,37353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:24:52.462966,0.0,tcp,147.32.84.165,4368.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:52.462982,0.0,tcp,147.32.84.165,4369.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:52.463198,0.0,tcp,147.32.84.165,4370.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:52.463212,0.0,tcp,147.32.84.165,4371.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:52.463217,0.0,tcp,147.32.84.165,4372.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:53.063819,0.0,tcp,147.32.84.165,4375.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:53.063833,0.0,tcp,147.32.84.165,4374.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:53.063868,0.0,tcp,147.32.84.165,4377.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:53.063932,0.0,tcp,147.32.84.165,4376.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:53.063939,0.0,tcp,147.32.84.165,4379.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:24:56.768149,0.000454,udp,71.33.182.24,28335.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:57.203444,0.292521,udp,147.32.84.229,13363.0,<->,190.188.67.182,43681.0,CON,0.0,0.0,4,3008,60,2948,752.0,0.0199468085106383,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:24:59.449577,0.000292,udp,147.32.84.170,38690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:02.018125,0.000288,udp,147.32.86.92,41675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,75,213,144.0,0.2604166666666667,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:25:02.256959,2118.592285,udp,173.74.211.180,57589.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2214,1914,300,221.4,0.8644986449864499,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:04.480740,0.0,tcp,147.32.84.165,4488.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:04.480821,0.0,tcp,147.32.84.165,4489.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:04.480826,0.0,tcp,147.32.84.165,4490.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:04.480870,0.0,tcp,147.32.84.165,4491.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:04.480938,0.0,tcp,147.32.84.165,4492.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.081764,0.0,tcp,147.32.84.165,4495.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.081840,0.0,tcp,147.32.84.165,4494.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.081890,0.0,tcp,147.32.84.165,4497.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.081939,0.0,tcp,147.32.84.165,4496.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.081943,0.0,tcp,147.32.84.165,4499.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:05.322438,0.000223,udp,147.32.84.138,40449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:25:13.024387,0.00044,udp,95.21.61.176,7570.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:16.498302,0.0,tcp,147.32.84.165,4608.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:16.498370,0.0,tcp,147.32.84.165,4609.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:16.498378,0.0,tcp,147.32.84.165,4610.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:16.498429,0.0,tcp,147.32.84.165,4611.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:16.498436,0.0,tcp,147.32.84.165,4612.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:17.098945,0.0,tcp,147.32.84.165,4615.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:17.098953,0.0,tcp,147.32.84.165,4614.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:17.098957,0.0,tcp,147.32.84.165,4617.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:17.099020,0.0,tcp,147.32.84.165,4616.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:17.099028,0.0,tcp,147.32.84.165,4619.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:20.262103,1275.629272,icmp,195.138.67.130,3.0,->,147.32.84.229,48243.0,URN,0.0,,6,1311,1311,0,218.5,1.0,23,0,flow=Background,Background,-1 2011-08-16 23:25:20.824113,0.311049,udp,147.32.84.229,13363.0,<->,189.18.146.106,28662.0,CON,0.0,0.0,2,1063,77,986,531.5,0.07243650047036689,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:21.096960,0.226692,tcp,147.32.84.170,35731.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:21.819812,0.000437,udp,68.104.46.136,14876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:25.144618,0.000589,udp,72.5.115.169,38814.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,79,482,280.5,0.1408199643493761,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:28.155564,3024.623047,udp,94.45.169.208,2541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:28.515172,0.0,tcp,147.32.84.165,4729.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:28.515186,0.0,tcp,147.32.84.165,4730.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:28.515329,0.0,tcp,147.32.84.165,4731.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:28.515344,0.0,tcp,147.32.84.165,4732.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:28.515350,0.0,tcp,147.32.84.165,4733.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.116171,0.0,tcp,147.32.84.165,4736.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.116187,0.0,tcp,147.32.84.165,4735.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.116250,0.0,tcp,147.32.84.165,4738.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.116256,0.0,tcp,147.32.84.165,4737.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.116433,0.0,tcp,147.32.84.165,4740.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-16 23:25:29.450024,0.000413,udp,147.32.84.170,43374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:29.451766,0.018,tcp,147.32.84.170,52014.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:40.488172,0.00052,udp,92.21.150.64,19583.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,659,75,584,329.5,0.11380880121396054,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:25:49.448790,0.000347,udp,147.32.84.170,54277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:49.449698,0.000365,udp,147.32.84.170,41857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:50.237491,64.248772,tcp,147.32.84.165,4751.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:25:52.090606,0.000274,udp,147.32.84.170,58568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:52.091819,0.222361,tcp,147.32.84.170,35735.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:25:53.043770,0.000192,udp,147.32.84.138,53029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:02.275948,0.000308,udp,147.32.84.138,36375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:03.652631,0.000176,udp,147.32.85.34,53960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:09.449878,0.000278,udp,147.32.84.170,55097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:09.450891,0.018707,tcp,147.32.84.170,60837.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:17.251166,0.000685,udp,68.65.164.81,14500.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,574,76,498,287.0,0.13240418118466898,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:26:18.014136,0.362935,tcp,67.195.111.228,43189.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,5934,870,5064,423.85714285714283,0.14661274014155712,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:26:22.096906,0.225033,tcp,147.32.84.170,35739.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:23.159999,0.000287,udp,147.32.84.59,46570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:34.811206,0.000411,udp,217.129.233.131,58415.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:26:39.449995,0.000195,udp,147.32.84.170,43101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:40.439626,0.000417,udp,147.32.86.20,49847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:43.299168,2240.269287,udp,147.32.84.229,13363.0,<->,85.11.236.186,63430.0,CON,0.0,0.0,4,664,132,532,166.0,0.19879518072289157,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:26:46.766579,3148.810791,udp,78.141.181.225,34036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,3376,1842,1534,153.45454545454547,0.5456161137440758,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:26:47.956736,0.000234,udp,147.32.84.138,42931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:48.812674,0.000213,udp,147.32.85.25,39974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:49.448943,0.000374,udp,147.32.84.170,58703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:49.450892,0.018274,tcp,147.32.84.170,46826.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:51.075369,63.713871,tcp,147.32.84.165,4752.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:26:53.096572,0.000287,udp,147.32.84.170,56614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:26:55.224992,0.000229,udp,147.32.84.138,58160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:26:58.930936,0.300437,tcp,80.30.205.120,26264.0,->,147.32.84.229,80.0,SRA_SA,0.0,0.0,4,244,182,62,61.0,0.7459016393442623,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:26:59.450255,0.000279,udp,147.32.84.170,49470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:06.154514,0.000411,udp,95.134.177.236,20040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:11.311739,3067.26123,icmp,147.32.87.1,261.0,->,147.32.87.4,37664.0,RED,0.0,,5,350,350,0,70.0,1.0,23,0,flow=Background,Background,-1 2011-08-16 23:27:15.219178,3574.796143,udp,147.32.84.229,13363.0,<->,78.131.85.11,42917.0,CON,0.0,0.0,10,6107,3051,3056,610.7,0.4995906336990339,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:19.449075,0.000427,udp,147.32.84.170,35565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:19.450057,0.000402,udp,147.32.84.170,59715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:22.863229,2663.172607,udp,147.32.84.229,13363.0,<->,96.49.100.185,47155.0,CON,0.0,0.0,4,845,272,573,211.25,0.32189349112426036,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:23.508262,0.000413,udp,2.88.100.22,65109.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,68,60,64.0,0.53125,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:24.095964,0.000321,udp,147.32.84.170,52345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:24.160864,0.000499,udp,94.156.25.83,21629.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:26.004150,1397.357178,udp,24.27.68.134,34701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,6055,3038,3017,605.5,0.5017341040462427,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:29.451180,0.018298,tcp,147.32.84.170,46832.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:32.819431,41.388874,udp,187.67.57.181,7544.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3151,134,3017,525.1666666666666,0.04252618216439226,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:34.836420,0.00025,udp,147.32.87.33,47218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:27:39.451217,0.01806,tcp,147.32.84.170,60621.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:27:39.713666,0.000168,udp,147.32.84.138,44497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:27:51.455131,0.010043,udp,147.32.85.5,56598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:27:51.958629,3289.312012,udp,147.32.84.229,13363.0,<->,118.169.184.154,30454.0,CON,0.0,0.0,4,305,142,163,76.25,0.46557377049180326,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:54.366301,61.256401,tcp,147.32.84.165,4753.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:27:55.011007,2437.713135,udp,68.174.40.47,1904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1253,943,310,125.3,0.7525937749401437,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:59.117704,0.135066,udp,147.32.84.229,13363.0,<->,76.180.105.60,5842.0,CON,0.0,0.0,2,566,94,472,283.0,0.16607773851590105,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:27:59.449238,0.000323,udp,147.32.84.170,42909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:02.611798,0.000292,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,23,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 23:28:03.317813,0.000289,udp,147.32.86.20,59920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:03.503098,0.000324,udp,147.32.85.34,63286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:03.504128,0.000304,udp,147.32.85.34,57689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:04.602478,0.000271,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,23,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 23:28:06.605673,0.000221,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,23,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 23:28:10.330321,0.000237,udp,147.32.84.138,40545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:11.505279,0.000291,udp,147.32.85.25,49612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:13.686941,0.275406,tcp,147.32.84.170,45789.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:13.760575,0.505674,tcp,147.32.84.170,49692.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:14.166740,542.780884,tcp,147.32.84.170,45791.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,108,41244,30774,10470,381.8888888888889,0.746144893802735,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:14.166829,240.04776,tcp,147.32.84.170,45792.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:14.166973,240.04744,tcp,147.32.84.170,45795.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:14.258775,0.376078,tcp,147.32.84.170,49699.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:14.432903,2195.184326,udp,121.73.161.30,53720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1350,1108,242,168.75,0.8207407407407408,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:28:15.450731,0.0002,udp,147.32.84.138,48125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:19.451227,0.018006,tcp,147.32.84.170,52157.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:20.586392,0.000511,udp,74.128.48.122,63906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,73,463,268.0,0.13619402985074627,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:28:23.219680,0.32261,udp,147.32.84.229,13363.0,<->,123.205.99.97,23288.0,CON,0.0,0.0,4,2981,60,2921,745.25,0.020127474002012747,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:28:26.098881,0.000277,udp,147.32.84.170,39936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:26.952329,3546.376465,udp,67.176.215.95,8129.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,139,21855,11238,10617,157.23021582733813,0.5142072752230611,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:28:29.450040,0.000388,udp,147.32.84.170,36691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:41.871673,0.000296,udp,147.32.84.138,35651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:28:49.450115,0.000356,udp,147.32.84.170,48316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:51.798188,0.000508,udp,81.64.12.175,4813.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:28:52.816585,9.036414,tcp,188.55.71.172,56518.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,248,62,186,62.0,0.25,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:28:55.204807,61.255684,tcp,147.32.84.165,4800.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:28:57.099487,0.000322,udp,147.32.84.170,43956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:59.449286,0.000427,udp,147.32.84.170,42940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:28:59.450242,0.000476,udp,147.32.84.170,36102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:00.686348,540.032593,udp,174.109.34.113,25241.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,1059,713,346,117.66666666666667,0.6732766761095373,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:04.894704,3185.569824,udp,78.92.172.74,49448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,717,531,186,119.5,0.7405857740585774,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:07.507104,0.000264,udp,147.32.86.20,63523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:29:07.775785,0.000217,udp,147.32.84.188,52991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,92,142,117.0,0.39316239316239315,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:29:09.449402,0.000436,udp,147.32.84.170,53666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:19.451165,0.000409,udp,147.32.84.170,58116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:21.913417,9.027307,tcp,94.162.176.85,52536.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,600,234,366,75.0,0.39,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:29:22.458626,0.000404,udp,97.122.102.227,17656.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:28.096791,0.000175,udp,147.32.84.170,42569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:28.097885,0.217081,tcp,147.32.84.170,33073.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:32.013218,0.000264,udp,147.32.84.138,41356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:29:38.495700,0.004106,udp,67.184.41.154,28240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3013,60,2953,753.25,0.019913707268503153,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:39.449333,0.000256,udp,147.32.84.170,57597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:39.450088,0.000286,udp,147.32.84.170,60068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:40.592140,247.99939,tcp,147.32.84.59,48280.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:29:46.573454,3150.630371,udp,69.254.14.221,28880.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3149,120,3029,524.8333333333334,0.03810733566211496,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:47.886637,0.000418,udp,74.105.205.133,2516.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:29:56.043172,61.254368,tcp,147.32.84.165,4801.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:29:58.089705,0.000228,udp,147.32.84.170,51415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:29:59.449373,0.000304,udp,147.32.84.170,41161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:01.865787,3599.492432,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,3,180,0,180,60.0,0.0,23,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 23:30:02.512954,3505.816406,udp,147.32.84.229,13363.0,<->,109.121.161.64,4488.0,CON,0.0,0.0,8,1406,707,699,175.75,0.5028449502133713,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:30:04.009125,0.000305,udp,147.32.85.34,50720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:30:06.856080,0.205275,tcp,147.32.86.20,4511.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:30:09.450254,0.000427,udp,147.32.84.170,40742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:09.793880,0.000418,udp,89.117.31.173,23322.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:30:11.104699,0.000243,udp,147.32.87.36,37382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,23,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 23:30:19.449447,0.000338,udp,147.32.84.170,60524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:19.609550,6.019164,udp,84.208.223.2,16305.0,->,147.32.84.162,39512.0,INT,0.0,,3,438,438,0,146.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:30:22.754515,0.000187,udp,147.32.84.138,51830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:30:27.707121,3581.107666,udp,169.234.123.105,47945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,137,21475,11037,10438,156.75182481751824,0.5139464493597206,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:30:28.099325,0.215601,tcp,147.32.84.170,33081.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:29.449560,0.000417,udp,147.32.84.170,32803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:29.450539,0.000323,udp,147.32.84.170,60707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:31.554658,0.04602,tcp,147.32.84.164,41666.0,->,212.162.17.202,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:30:41.698814,0.114805,udp,80.78.68.246,27120.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,398,213,185,66.33333333333333,0.535175879396985,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:30:56.204305,11.921641,tcp,27.159.236.179,2766.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,15,9210,1176,8034,614.0,0.1276872964169381,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:30:56.880409,64.234833,tcp,147.32.84.165,4802.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:30:58.091662,0.000324,udp,147.32.84.170,60173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:58.092875,0.220571,tcp,147.32.84.170,33085.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:59.449448,0.000359,udp,147.32.84.170,36920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:30:59.451508,0.018366,tcp,147.32.84.170,58522.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:09.449403,0.00055,udp,147.32.84.170,32940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:14.852655,0.000541,udp,77.78.11.189,64988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,189,129,60,94.5,0.6825396825396826,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:19.449471,0.000554,udp,147.32.84.170,42247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:28.097106,0.00029,udp,147.32.84.170,56741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:29.281701,0.004072,udp,67.169.183.177,23835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3016,60,2956,754.0,0.01989389920424403,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:29.450550,0.00036,udp,147.32.84.170,37821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:29.451620,0.018057,tcp,147.32.84.170,46876.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:31:31.168271,3051.449219,udp,173.230.171.112,40207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1188,1068,120,297.0,0.898989898989899,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:32.007104,0.000633,udp,82.113.99.153,32040.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:34.859831,3491.688965,udp,220.254.76.199,19958.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,682,561,121,170.5,0.8225806451612904,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:35.117759,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,23,,flow=Background,Background,-1 2011-08-16 23:31:39.774424,65.376701,tcp,147.32.84.162,54112.0,->,147.32.80.13,80.0,SRPA_SPA,0.0,0.0,8,1420,948,472,177.5,0.6676056338028169,23,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 23:31:48.814484,0.000447,udp,85.167.97.180,5815.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:52.027857,0.000592,udp,92.252.182.234,65268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,319,66,253,159.5,0.20689655172413793,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:31:59.094615,0.000228,udp,147.32.84.170,41486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:00.692576,64.295456,tcp,147.32.84.165,4803.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:32:02.613153,877.557861,udp,147.32.84.229,13363.0,<->,140.113.20.121,5636.0,CON,0.0,0.0,10,655,355,300,65.5,0.5419847328244275,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:03.327055,0.000386,udp,201.103.77.203,14166.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:03.812690,0.000218,udp,147.32.85.34,61219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:32:05.140823,1207.012939,udp,46.237.210.74,13122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:08.393664,8.721388,tcp,174.78.130.86,49638.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,25,1989,1006,983,79.56,0.5057817998994469,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:32:09.449827,0.000448,udp,147.32.84.170,39156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:11.015101,2403.344238,icmp,147.32.87.1,261.0,->,147.32.87.54,37664.0,RED,0.0,,10,700,700,0,70.0,1.0,23,0,flow=Background,Background,-1 2011-08-16 23:32:16.124283,0.0,icmp,193.1.193.136,8.0,->,147.32.86.122,50147.0,ECO,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background,Background,-1 2011-08-16 23:32:17.838268,3025.10791,udp,78.141.181.223,34041.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1142,894,248,142.75,0.7828371278458844,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:19.449811,0.00038,udp,147.32.84.170,34000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:19.450722,0.000315,udp,147.32.84.170,52629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:19.451781,0.018051,tcp,147.32.84.170,36137.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:27.329387,0.00137,udp,79.226.197.21,55451.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:29.449790,0.000478,udp,147.32.84.170,41611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:34.406336,0.065323,udp,147.32.84.229,13363.0,<->,213.216.254.104,18600.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:39.449975,0.000389,udp,147.32.84.170,53575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:39.451876,0.01817,tcp,147.32.84.170,46829.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:41.497023,0.00026,udp,147.32.84.138,34626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:32:41.938856,0.000533,udp,109.224.21.218,57379.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:48.246837,0.00023,udp,147.32.85.25,45863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:32:49.449986,0.000292,udp,147.32.84.170,47787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:32:51.707963,0.000439,udp,115.184.88.57,23725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:32:59.791185,0.004137,udp,78.90.116.68,30610.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,3015,60,2955,753.75,0.01990049751243781,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:33:00.184953,9.072439,tcp,80.248.76.21,18432.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,4,264,66,198,66.0,0.25,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:33:03.701474,0.000312,udp,68.202.90.195,9428.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:33:04.564862,61.256653,tcp,147.32.84.165,4804.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:33:08.619254,2.642544,tcp,66.249.66.211,62660.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1192,731,461,119.2,0.613255033557047,23,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-16 23:33:09.450063,0.000348,udp,147.32.84.170,44571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:09.452071,0.018273,tcp,147.32.84.170,36144.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:09.534443,1901.767822,udp,217.112.24.194,61514.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:33:09.936110,0.00036,udp,147.32.84.166,38695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:33:13.133895,0.260199,tcp,147.32.84.170,43395.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:13.438653,0.41863,tcp,147.32.84.170,34536.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:13.849290,0.243362,tcp,147.32.84.170,34538.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:19.359861,3525.655273,udp,190.245.134.24,54894.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:33:21.952876,0.000414,udp,74.70.200.197,52001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,77,466,271.5,0.141804788213628,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:33:23.914473,16.972504,tcp,88.208.100.33,55535.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,22,12015,1215,10800,546.1363636363636,0.10112359550561797,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:33:25.675513,0.000235,udp,147.32.85.89,59824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:33:27.201591,6.043698,udp,147.32.84.229,13363.0,->,109.185.72.63,59212.0,INT,0.0,,3,207,207,0,69.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:33:27.549390,0.000379,udp,147.32.86.20,50758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:33:31.098789,0.227851,tcp,147.32.84.170,38379.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:33:43.799997,0.000255,udp,147.32.86.20,64091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:33:44.750680,3.008046,tcp,147.32.84.21,55161.0,->,74.125.39.108,,S_,0.0,,2,148,148,0,74.0,1.0,23,,flow=Background-google-pop,Background,-1 2011-08-16 23:33:59.450075,0.000368,udp,147.32.84.170,43634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:34:05.335758,0.000431,udp,147.32.85.25,48878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:05.403401,61.254803,tcp,147.32.84.165,4805.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:34:05.893013,2652.750244,udp,90.230.203.136,9716.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:06.810979,3.244233,udp,195.29.77.5,29948.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,496,372,124,124.0,0.75,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:09.255224,3560.183105,udp,138.199.70.144,20390.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,809,449,360,67.41666666666667,0.5550061804697157,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:09.450063,0.00036,udp,147.32.84.170,42162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:34:13.626110,0.000396,udp,147.32.84.59,52099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:17.818579,5.138698,udp,173.25.1.251,5611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:19.452103,0.018117,tcp,147.32.84.170,46848.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:34:20.431256,706.324768,udp,68.20.4.39,10810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,404,224,180,67.33333333333333,0.5544554455445545,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:20.502353,0.00028,udp,147.32.84.138,57468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:29.450167,0.000357,udp,147.32.84.170,39213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:34:29.893513,0.00042,udp,61.20.162.13,32857.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:32.417212,0.000311,udp,147.32.84.138,44912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:32.421903,0.000192,udp,147.32.84.138,53044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:34.991522,0.000356,udp,147.32.86.20,55557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:40.517329,0.000354,udp,147.32.84.138,47382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:42.753436,0.000302,udp,147.32.84.138,47284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:47.765478,2002.189453,udp,147.32.84.229,13363.0,<->,88.187.36.192,20617.0,CON,0.0,0.0,190,12840,7200,5640,67.57894736842105,0.5607476635514018,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:48.862856,0.000184,udp,147.32.84.138,58058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:34:49.452272,0.020221,tcp,147.32.84.170,54492.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:34:51.375229,3149.258301,udp,147.32.84.229,13363.0,<->,187.93.81.181,49470.0,CON,0.0,0.0,6,743,557,186,123.83333333333333,0.7496635262449529,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:34:58.743254,0.000352,udp,147.32.84.59,49908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:35:06.240263,67.099365,tcp,147.32.84.165,4806.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:35:11.498504,3070.000732,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,23,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 23:35:16.296241,0.001459,udp,69.91.23.161,35265.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:26.907997,0.000248,udp,147.32.84.138,55175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:35:28.552149,0.000425,udp,66.60.115.30,42912.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:29.451215,0.000266,udp,147.32.84.170,34077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:35:30.067982,0.000651,udp,193.28.178.182,3112.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,73,495,284.0,0.12852112676056338,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:32.794809,0.000226,udp,147.32.85.25,47627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:35:33.491072,0.000465,udp,78.84.137.106,30657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:34.923233,0.000235,udp,147.32.84.138,36114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:35:35.087874,0.000239,udp,147.32.84.170,33520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:35:39.451274,0.019883,udp,147.32.84.170,33567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:35:39.471661,0.000464,udp,147.32.84.170,32843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:35:40.357668,0.0006,udp,84.177.49.116,55415.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,74,479,276.5,0.13381555153707053,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:41.205729,3159.141357,udp,147.32.84.229,13363.0,->,115.241.93.15,26136.0,INT,0.0,,9,1641,1641,0,182.33333333333334,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:35:48.531205,606.731262,udp,94.155.237.105,32955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,458,334,124,114.5,0.7292576419213974,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:49.451163,0.000478,udp,147.32.84.170,45045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:35:51.829768,0.000473,udp,195.80.166.34,57044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:52.624727,0.037944,udp,147.32.86.96,44569.0,<->,80.250.21.93,161.0,CON,0.0,0.0,4,360,163,197,90.0,0.4527777777777778,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:35:59.450439,0.000238,udp,147.32.84.170,44093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:03.345283,0.000195,udp,147.32.85.25,55019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:04.096492,0.000391,udp,147.32.85.34,51131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:05.104720,0.227109,tcp,147.32.84.170,38399.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:09.450563,0.000373,udp,147.32.84.170,60160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:12.702422,3300.01123,arp,147.32.87.11,,who,147.32.87.1,,CON,,,10,600,300,300,60.0,0.5,23,,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-16 23:36:12.916589,61.255775,tcp,147.32.84.165,4807.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:36:15.282973,3040.554199,udp,91.134.48.141,65221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:18.459712,0.000325,udp,147.32.85.25,40038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:19.451258,0.000402,udp,147.32.84.170,41964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:19.669056,1887.693359,udp,218.212.106.165,65225.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,769,312,457,96.125,0.4057217165149545,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:23.269578,284.608032,udp,81.81.19.122,41485.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,258,138,120,64.5,0.5348837209302325,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:25.683741,0.00027,udp,147.32.84.138,35960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:27.527804,0.000533,udp,88.196.110.103,57577.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:28.689837,0.000167,udp,147.32.85.25,56050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:29.182631,0.174936,tcp,147.32.84.164,60337.0,->,68.142.116.179,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:36:29.438089,0.020064,udp,147.32.84.184,50128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:29.450381,0.000309,udp,147.32.84.170,53328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:29.452262,0.018304,tcp,147.32.84.170,36176.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:29.458363,0.000244,udp,147.32.84.184,46902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:29.749461,2.2e-05,icmp,147.32.87.249,,<-,147.32.87.2,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,23,1,flow=Background,Background,-1 2011-08-16 23:36:30.860155,0.000379,udp,75.162.224.108,57620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:35.716162,0.000319,udp,147.32.84.138,55897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:36:36.097583,0.000353,udp,147.32.84.170,59429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:39.450299,0.000446,udp,147.32.84.170,50285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:39.451213,0.000308,udp,147.32.84.170,52884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:45.036976,91.039368,tcp,46.132.147.240,4156.0,->,147.32.84.171,6881.0,FSPA_FSPA,0.0,0.0,16,1605,914,691,100.3125,0.5694704049844237,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:36:49.450266,0.000519,udp,147.32.84.170,58321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:49.451313,0.00026,udp,147.32.84.170,59287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:36:51.644678,0.00076,udp,190.101.120.92,50566.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,965,75,890,482.5,0.07772020725388601,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:59.209690,0.064357,udp,147.32.84.229,13363.0,<->,188.242.59.137,47672.0,CON,0.0,0.0,4,2961,60,2901,740.25,0.020263424518743668,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:36:59.452573,0.018146,tcp,147.32.84.170,40329.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:00.043389,1572.629639,tcp,147.32.84.170,41393.0,->,205.188.11.14,443.0,PA_RPA,0.0,0.0,124,10920,3720,7200,88.06451612903226,0.34065934065934067,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:07.404917,0.104308,tcp,147.32.84.164,35508.0,->,69.28.156.250,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:37:09.427974,0.000256,udp,147.32.84.138,54964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:37:09.452438,0.017786,tcp,147.32.84.170,40331.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:10.170533,0.000248,udp,147.32.85.25,59355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:37:13.361083,1854.265625,udp,80.86.82.129,48546.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,497,373,124,124.25,0.7505030181086519,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:37:13.754676,61.256573,tcp,147.32.84.165,4808.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:37:19.452000,0.000417,udp,147.32.84.170,37631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:19.452961,0.000293,udp,147.32.84.170,49529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:22.098850,0.000236,udp,147.32.84.138,54565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:37:22.856359,0.000511,udp,98.245.137.172,9434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:37:26.188071,9.014841,tcp,206.51.226.107,53180.0,->,147.32.85.100,3126.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:37:29.452427,0.018185,tcp,147.32.84.170,40333.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:30.625106,0.000257,udp,147.32.85.25,41519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:37:34.307842,13.258218,udp,74.89.162.1,9374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1458,635,823,243.0,0.4355281207133059,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:37:38.096271,0.000206,udp,147.32.84.170,34357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:38.096991,0.00035,udp,147.32.84.170,51982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:38.671132,0.000362,udp,147.32.86.20,59220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:37:38.680508,0.196273,tcp,147.32.84.164,47464.0,->,72.165.61.175,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:37:39.450733,0.000274,udp,147.32.84.170,33457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:42.120218,0.000381,udp,72.152.21.239,52635.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:37:48.609467,2251.950928,tcp,109.165.63.139,4611.0,->,147.32.87.232,80.0,S_,0.0,,6,372,372,0,62.0,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:37:49.451475,0.000394,udp,147.32.84.170,58201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:49.452587,0.018238,tcp,147.32.84.170,52435.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:37:58.895080,0.044913,tcp,147.32.86.96,58290.0,->,147.32.87.38,12489.0,_FSPA,,0.0,8,584,0,584,73.0,0.0,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:38:02.013360,1764.81665,udp,111.250.63.126,41614.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,757,635,122,189.25,0.8388375165125496,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:05.114547,0.000504,udp,193.232.248.10,60202.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:06.310831,0.000446,udp,173.65.128.175,15686.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:08.090824,0.000238,udp,147.32.84.170,42831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:08.091487,0.000339,udp,147.32.84.170,33328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:08.092536,0.218723,tcp,147.32.84.170,40965.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:09.452610,0.000291,udp,147.32.84.170,51442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:09.453593,0.018208,tcp,147.32.84.170,52438.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:09.933645,3083.969971,udp,84.29.200.82,26838.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1512,1140,372,126.0,0.753968253968254,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:10.970629,0.000481,udp,69.221.162.222,49712.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,78,479,278.5,0.1400359066427289,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:12.646778,1.960757,udp,213.43.55.16,61778.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,298,176,122,74.5,0.5906040268456376,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:13.372923,0.283421,tcp,147.32.84.170,37503.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:14.168378,240.049591,tcp,147.32.84.170,56041.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:14.593490,61.270184,tcp,147.32.84.165,4809.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:38:19.450758,0.000349,udp,147.32.84.170,37220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:19.842388,70.578194,tcp,147.32.84.162,54126.0,->,147.32.80.13,80.0,SRPA_SPA,0.0,0.0,13,4707,1645,3062,362.0769230769231,0.34947949861907796,23,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-16 23:38:21.730638,0.395615,udp,147.32.84.229,13363.0,<->,219.81.225.209,19572.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:29.450827,0.000495,udp,147.32.84.170,53995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:29.451836,0.000354,udp,147.32.84.170,45470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:32.617517,0.000276,udp,84.111.143.20,56573.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:35.066199,6.005343,udp,147.32.84.229,13363.0,->,95.182.115.17,13590.0,INT,0.0,,3,402,402,0,134.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:38:37.893709,0.287731,tcp,2.90.108.212,55914.0,->,147.32.84.229,13363.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:38:39.450840,0.000339,udp,147.32.84.170,54940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:45.623695,5.997084,udp,147.32.84.229,13363.0,->,87.121.144.209,33961.0,INT,0.0,,3,402,402,0,134.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:38:49.450838,0.000353,udp,147.32.84.170,48600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:38:52.020806,0.000405,udp,95.49.20.132,62102.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:38:59.450870,0.000264,udp,147.32.84.170,56282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:01.724216,0.000366,udp,147.32.84.171,58417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:39:07.087693,0.000234,udp,147.32.84.138,57604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:39:08.095637,0.000288,udp,147.32.84.170,32768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:09.452857,0.017723,tcp,147.32.84.170,45651.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:12.923255,0.000546,udp,147.32.86.20,63647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:39:13.736044,1.005443,tcp,147.32.86.20,5000.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,92794,1706,91088,976.7789473684211,0.01838480936267431,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:39:15.440520,61.27063,tcp,147.32.84.165,4810.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:39:19.452717,0.01787,tcp,147.32.84.170,47126.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:28.034892,0.000338,udp,147.32.84.184,38868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:39:29.451597,0.000357,udp,147.32.84.170,47841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:29.452810,0.018128,tcp,147.32.84.170,48571.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:37.300712,0.206106,tcp,147.32.86.20,1046.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:39:39.097632,0.215344,tcp,147.32.84.170,40989.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:43.283039,0.000327,udp,83.114.120.143,5633.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:39:47.506644,603.273743,udp,201.1.161.85,43797.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,473,349,124,118.25,0.7378435517970402,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:39:49.261758,0.012759,tcp,147.32.85.74,44383.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:39:55.436647,3547.656006,udp,147.32.84.155,39479.0,<->,212.96.160.147,123.0,CON,0.0,0.0,36,3240,1620,1620,90.0,0.5,23,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 23:39:55.780311,0.000557,udp,83.228.3.142,2097.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,621,76,545,310.5,0.12238325281803543,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:39:59.451899,0.000302,udp,147.32.84.170,45687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:59.452888,0.017806,tcp,147.32.84.170,48575.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:39:59.983904,3409.911377,arp,147.32.87.29,,who,147.32.87.1,,CON,,,24,1440,720,720,60.0,0.5,23,,flow=Background,Background,-1 2011-08-16 23:40:01.121344,0.000325,udp,147.32.84.138,42581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:40:03.780181,0.000264,udp,147.32.85.34,58111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:40:03.806339,0.000242,udp,147.32.85.34,61588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,86,242,164.0,0.2621951219512195,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:40:05.238808,0.161955,udp,147.32.84.229,13363.0,<->,64.189.57.103,34245.0,CON,0.0,0.0,4,2997,60,2937,749.25,0.02002002002002002,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:40:09.099498,0.000225,udp,147.32.84.170,42050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:09.450948,0.000321,udp,147.32.84.170,39361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:09.452885,0.018271,tcp,147.32.84.170,45659.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:14.905711,0.002428,udp,88.82.193.4,57350.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:40:16.287819,61.271648,tcp,147.32.84.165,4811.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:40:17.295801,0.000375,udp,88.251.207.161,18677.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:40:19.450766,0.000321,udp,147.32.84.170,47875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:29.451803,0.000366,udp,147.32.84.170,54643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:31.559578,0.941034,tcp,147.32.84.164,54981.0,->,119.167.242.112,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,23,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-16 23:40:40.098773,0.000373,udp,147.32.84.170,60503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:40.100019,0.290516,tcp,147.32.84.170,40999.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:40:46.671946,2539.555176,udp,94.43.198.203,60769.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1225,915,310,122.5,0.746938775510204,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:40:55.960478,0.000216,tcp,147.32.86.92,48047.0,->,147.32.80.7,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:41:05.053654,0.00042,udp,147.32.86.20,57840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:06.297708,3485.151611,tcp,145.53.65.28,52484.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,296,23456,12394,11062,79.24324324324324,0.528393587994543,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:41:06.606841,3096.50293,udp,87.218.216.221,15505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1536,1093,443,128.0,0.7115885416666666,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:41:06.987353,0.000446,udp,109.72.50.11,42692.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:41:09.453195,0.018367,tcp,147.32.84.170,52474.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:11.100358,0.000246,udp,147.32.84.170,40506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:11.385787,0.000193,udp,147.32.84.138,58487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:17.136094,61.292297,tcp,147.32.84.165,4812.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:41:20.707079,0.000409,udp,65.167.208.4,33014.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:41:29.451183,0.000242,udp,147.32.84.170,35597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:29.799880,0.000299,udp,147.32.84.186,57045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:31.672569,605.384338,udp,77.187.161.142,51457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,478,354,124,119.5,0.7405857740585774,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:41:39.451254,0.000413,udp,147.32.84.170,41193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:39.452223,0.000287,udp,147.32.84.170,33187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:43.761858,0.71991,tcp,166.205.11.77,16206.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,11,803,503,300,73.0,0.6264009962640099,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:41:44.355741,0.000322,udp,147.32.84.59,56449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:44.384953,0.000519,udp,147.32.84.25,37589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:49.453209,0.018405,tcp,147.32.84.170,52729.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:41:57.985419,0.000291,udp,147.32.84.138,37962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:41:58.450937,3585.815186,udp,78.84.46.8,13863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1027,302,725,128.375,0.2940603700097371,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:41:59.452898,0.019862,tcp,147.32.84.170,43284.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:04.293732,0.000253,udp,147.32.84.138,49642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:42:08.239213,0.000575,udp,211.7.118.156,41635.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,75,485,280.0,0.13392857142857142,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:42:09.893359,0.000512,udp,98.224.182.227,38481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,321,64,257,160.5,0.19937694704049844,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:42:13.098714,0.000264,udp,147.32.84.170,60417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:18.005315,61.269562,tcp,147.32.84.165,4813.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:42:19.451371,0.000376,udp,147.32.84.170,43942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:19.452257,0.000252,udp,147.32.84.170,60066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:24.551987,123.120049,tcp,147.32.84.59,8432.0,->,2.20.182.41,443.0,FSRPA_FSPA,0.0,0.0,22,6368,1432,4936,289.45454545454544,0.22487437185929648,23,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-16 23:42:29.723752,0.379257,tcp,67.195.111.228,55991.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,4361,847,3514,311.5,0.1942215088282504,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:42:36.672876,0.000256,udp,96.234.164.128,63974.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:42:38.716790,0.000313,udp,147.32.84.138,55472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:42:39.451404,0.000292,udp,147.32.84.170,41978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:43.100051,0.215685,tcp,147.32.84.170,57704.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:49.452266,0.000266,udp,147.32.84.170,51700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:49.453261,0.018356,tcp,147.32.84.170,59793.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:53.999752,0.115609,udp,147.32.87.135,3146.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,23,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 23:42:55.165433,9.003767,tcp,147.32.84.19,60595.0,->,147.32.201.140,13579.0,S_,0.0,,3,222,222,0,74.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:42:57.699964,0.000494,udp,147.32.84.170,40415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:57.784977,0.000256,udp,147.32.84.170,53147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:57.785677,0.000416,udp,147.32.84.170,37859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:42:58.580406,0.000346,udp,147.32.85.25,57047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:42:59.453348,0.018505,tcp,147.32.84.170,52741.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:08.202534,0.004085,udp,131.95.197.147,22608.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2999,60,2939,749.75,0.020006668889629875,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:43:09.451409,0.000367,udp,147.32.84.170,54230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:10.400912,0.000638,udp,98.26.8.64,7537.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,943,73,870,471.5,0.07741251325556733,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:43:13.106388,0.000309,udp,147.32.84.170,36469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:13.428772,0.325988,tcp,147.32.84.170,37733.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:13.667379,0.256264,tcp,147.32.84.170,56261.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:13.746864,0.354424,tcp,147.32.84.170,37735.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:18.851486,61.270832,tcp,147.32.84.165,4814.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:43:20.012847,0.000246,udp,147.32.84.138,52674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:43:27.018539,0.349033,udp,147.32.84.229,13363.0,<->,111.252.120.24,61545.0,CON,0.0,0.0,2,574,76,498,287.0,0.13240418118466898,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:43:34.120388,0.000216,udp,147.32.85.25,56137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:43:34.711207,0.000329,udp,2.36.59.7,10987.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:43:39.453279,0.000266,udp,147.32.84.170,50221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:44.097145,0.237316,tcp,147.32.84.170,57721.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:43:50.439011,0.0,tcp,62.149.194.134,47808.0,->,147.32.87.108,22.0,S_,0.0,,1,62,62,0,62.0,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:43:53.770556,850.391479,tcp,208.43.179.24,80.0,->,147.32.86.92,60782.0,SA_R,0.0,0.0,32,1920,960,960,60.0,0.5,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:44:04.460604,0.000251,udp,147.32.85.25,49353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:44:04.690654,0.000251,udp,147.32.84.138,59609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:44:09.446603,1775.591187,udp,81.217.46.229,21559.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2159,764,1395,215.9,0.3538675312644743,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:09.452589,0.000289,udp,147.32.84.170,36692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:09.453604,0.017659,tcp,147.32.84.170,56335.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:15.098657,0.000241,udp,147.32.84.170,57899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:15.099934,0.222147,tcp,147.32.84.170,57725.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:15.189268,0.135096,tcp,147.32.86.20,1299.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,25654,853,24801,777.3939393939394,0.03325017541124191,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:44:19.455400,0.018015,tcp,147.32.84.170,43312.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:19.699521,61.271313,tcp,147.32.84.165,4815.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:44:24.934042,5.530629,tcp,41.206.153.194,49145.0,->,147.32.84.229,13363.0,SRA_SA,0.0,0.0,4,270,138,132,67.5,0.5111111111111111,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:44:25.454327,0.000288,udp,147.32.84.171,47464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:44:28.384574,0.000404,udp,96.24.135.195,59087.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:35.013678,0.294551,udp,78.105.204.56,52383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,266,180,86,133.0,0.6766917293233082,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:38.388234,3098.155273,udp,89.212.215.71,15183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1611,957,654,100.6875,0.5940409683426443,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:39.195681,0.151983,udp,147.32.84.229,13363.0,<->,208.44.105.215,55300.0,CON,0.0,0.0,4,2966,60,2906,741.5,0.020229265003371546,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:39.451648,0.000474,udp,147.32.84.170,57881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:41.536515,489.486969,udp,77.249.240.8,13431.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,257,137,120,64.25,0.5330739299610895,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:45.385387,0.000446,udp,95.140.210.144,56862.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,642,77,565,321.0,0.11993769470404984,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:44:46.098021,0.000392,udp,147.32.84.170,33076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:49.452625,0.000561,udp,147.32.84.170,46789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:49.453931,0.01827,tcp,147.32.84.170,56341.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:44:51.554104,0.000279,udp,147.32.84.138,51124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:44:54.475319,0.000329,udp,147.32.84.138,52749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:45:00.812741,0.00035,udp,147.32.85.25,53437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:45:03.983124,3423.272461,udp,147.32.84.15,32858.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,23,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-16 23:45:05.971620,2.297156,tcp,66.249.66.121,63547.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,10,1199,673,526,119.9,0.5613010842368641,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:45:09.217992,0.111183,udp,147.32.84.229,13363.0,<->,128.36.233.109,12742.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:45:09.452648,0.000272,udp,147.32.84.170,37831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:45:09.628667,0.170199,tcp,147.32.86.20,1347.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,78,71270,1751,69519,913.7179487179487,0.0245685421636032,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:45:17.093348,0.000335,udp,147.32.84.170,48121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:45:17.707206,0.004043,udp,82.57.144.194,62018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2996,60,2936,749.0,0.020026702269692925,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:45:19.451488,0.000372,udp,147.32.84.170,55201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:45:19.452403,0.000383,udp,147.32.84.170,60932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:45:20.547830,64.25927,tcp,147.32.84.165,4816.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:45:35.628379,2.031913,udp,147.32.84.229,13363.0,->,200.104.8.130,7366.0,INT,0.0,,2,152,152,0,76.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:45:39.491249,0.000232,udp,147.32.84.138,49751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:45:39.558937,3522.213867,udp,147.32.84.138,51133.0,<->,212.96.160.147,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,23,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-16 23:45:40.116151,0.000439,udp,184.214.69.13,4605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:45:43.351503,0.000243,udp,89.122.197.81,8082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:45:48.099235,0.000326,udp,147.32.84.170,32773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:45:48.757272,0.532967,tcp,77.104.235.174,62763.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,55,39992,10566,29426,727.1272727272727,0.2642028405681136,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:45:51.067420,9.01378,tcp,81.132.167.188,59969.0,->,147.32.87.220,443.0,S_,0.0,,3,186,186,0,62.0,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:45:51.583022,1768.661377,udp,147.32.84.229,13363.0,<->,76.11.80.241,14561.0,CON,0.0,0.0,8,4009,3829,180,501.125,0.9551010226989274,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:45:52.650296,0.000262,udp,147.32.85.25,50349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:45:56.500714,6.3126,udp,147.32.84.229,13363.0,->,118.170.213.70,60500.0,INT,0.0,,3,534,534,0,178.0,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:45:58.381469,3.009582,tcp,81.132.167.188,59976.0,->,147.32.87.220,80.0,S_,0.0,,2,132,132,0,66.0,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:45:58.944851,3012.065674,icmp,147.32.87.1,261.0,->,147.32.87.48,37664.0,RED,0.0,,2,140,140,0,70.0,1.0,23,0,flow=Background,Background,-1 2011-08-16 23:45:59.452439,0.000289,udp,147.32.84.170,39912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:02.243916,2593.443604,udp,147.32.84.229,13363.0,<->,211.255.53.68,5119.0,CON,0.0,0.0,8,1711,1470,241,213.875,0.859146697837522,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:46:02.300929,40.69614,udp,147.32.84.229,13363.0,<->,94.210.107.242,2390.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:46:02.348982,0.000269,udp,147.32.84.138,44084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:02.371751,0.000258,udp,147.32.84.138,48563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:03.640110,0.000204,udp,147.32.85.34,56311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:03.663034,0.000287,udp,147.32.85.34,52028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:11.577058,2915.395508,udp,187.158.193.232,40590.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:46:14.629519,0.206216,tcp,147.32.86.20,1406.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:46:19.454765,0.017739,tcp,147.32.84.170,59019.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:21.396683,61.25489,tcp,147.32.84.165,4817.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:46:24.697688,0.000263,udp,147.32.84.138,59180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:27.884384,0.00051,udp,99.239.8.174,29584.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:46:29.451880,0.000382,udp,147.32.84.170,59304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:34.352758,3397.220947,udp,147.32.84.229,13363.0,<->,89.78.214.11,39556.0,CON,0.0,0.0,4,926,784,142,231.5,0.8466522678185745,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:46:42.257039,0.000323,udp,147.32.86.20,55207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:46:49.099812,0.219074,tcp,147.32.84.170,42685.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:49.452017,0.000394,udp,147.32.84.170,46689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:49.454002,0.018751,tcp,147.32.84.170,40948.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:46:56.680704,0.000645,udp,109.231.230.2,28383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:47:09.452936,0.000384,udp,147.32.84.170,52358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:11.658937,1202.482422,udp,98.116.18.182,18565.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1112,156,956,278.0,0.14028776978417265,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:47:19.452882,0.000345,udp,147.32.84.170,45074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:19.453979,0.017749,tcp,147.32.84.170,40951.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:20.101188,0.0003,udp,147.32.84.170,41175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:22.233441,61.271149,tcp,147.32.84.165,4818.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:47:28.101864,0.000448,udp,87.247.74.195,17867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:47:32.580695,0.000473,udp,78.102.188.212,32033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:47:34.200291,20.698959,tcp,147.32.84.171,60997.0,->,86.170.124.128,27756.0,FSPA_FSA,0.0,0.0,16,1216,1010,206,76.0,0.8305921052631579,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:47:34.418559,0.298281,udp,147.32.87.48,3438.0,->,147.32.87.117,161.0,INT,0.0,,16,2096,2096,0,131.0,1.0,23,1,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:47:36.695231,0.170733,tcp,147.32.86.20,1476.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:47:39.452168,0.000406,udp,147.32.84.170,54955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:43.692631,0.000423,udp,209.131.62.115,27050.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:47:51.097515,0.000271,udp,147.32.84.170,52506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:51.098359,0.000347,udp,147.32.84.170,51737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:51.099761,0.315692,tcp,147.32.84.170,42694.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:57.302780,0.000369,udp,147.32.84.138,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:47:59.453085,0.000295,udp,147.32.84.170,47628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:47:59.454044,0.018197,tcp,147.32.84.170,56765.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:05.448617,0.001905,udp,107.3.98.11,14410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:48:07.279659,0.000283,udp,147.32.87.36,41011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,23,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-16 23:48:08.785318,0.000503,udp,88.247.218.218,10085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,78,476,277.0,0.1407942238267148,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:48:09.452599,0.000378,udp,147.32.84.170,51904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:09.453448,0.000287,udp,147.32.84.170,46436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:10.387594,0.000265,udp,147.32.84.19,35881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:13.519826,0.366781,tcp,147.32.84.170,50084.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:13.550663,0.000288,udp,147.32.84.138,41320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:13.860199,0.304466,tcp,147.32.84.170,34437.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:14.170322,240.041199,tcp,147.32.84.170,46339.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:14.170476,250.042358,tcp,147.32.84.170,46342.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:14.170498,250.042511,tcp,147.32.84.170,46344.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:19.452166,0.000337,udp,147.32.84.170,42191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:19.454059,0.017894,tcp,147.32.84.170,40971.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:20.119622,2104.783447,udp,80.53.33.202,1527.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:48:22.100826,0.209879,tcp,147.32.84.170,42710.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:23.081558,61.270702,tcp,147.32.84.165,4819.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:48:29.452198,0.000314,udp,147.32.84.170,41095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:35.156005,0.000228,udp,147.32.84.59,39005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:39.454119,0.018254,tcp,147.32.84.170,52043.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:41.381420,0.000208,udp,147.32.85.25,53370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:49.452271,0.000502,udp,147.32.84.170,47687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:49.453279,0.000293,udp,147.32.84.170,37959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:48:49.495495,0.000226,udp,147.32.84.138,41235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:51.711914,0.000319,udp,147.32.84.138,49292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:48:52.834368,0.020752,tcp,195.176.0.55,61364.0,->,147.32.84.229,13363.0,SRC_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:48:54.129144,1.015346,tcp,147.32.3.51,2633.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:48:56.762715,2.879462,tcp,184.95.34.162,3858.0,->,147.32.85.31,1080.0,S_,0.0,,2,124,124,0,62.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:48:56.891691,0.000305,udp,147.32.85.25,33947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:49:09.453135,0.000322,udp,147.32.84.170,43587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:11.013322,3030.606689,udp,147.32.84.229,13363.0,<->,178.165.114.103,44887.0,CON,0.0,0.0,6,1487,442,1045,247.83333333333334,0.2972427706792199,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:11.234687,2130.47876,udp,147.32.84.229,13363.0,<->,24.185.35.119,33729.0,CON,0.0,0.0,6,3084,120,2964,514.0,0.038910505836575876,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:12.643072,3440.288818,udp,95.59.56.248,64274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1118,801,317,111.8,0.7164579606440071,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:19.452327,0.000302,udp,147.32.84.170,34749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:19.453152,0.000274,udp,147.32.84.170,42253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:19.454230,0.018685,tcp,147.32.84.170,52048.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:20.229599,0.000432,udp,147.32.84.59,37954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:49:22.783273,6.13709,udp,178.76.152.229,7574.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1644,222,1422,274.0,0.13503649635036497,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:23.101551,0.000213,udp,147.32.84.170,58871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:23.102668,0.277545,tcp,147.32.84.170,42718.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:23.612140,27.229536,udp,186.22.160.201,14461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,587,216,371,97.83333333333333,0.3679727427597956,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:23.928965,64.130119,tcp,147.32.84.165,4820.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:49:27.330797,1329.920654,udp,88.173.202.158,33217.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,484,360,124,121.0,0.743801652892562,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:35.136333,0.000548,udp,46.5.238.236,35089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,964,76,888,482.0,0.07883817427385892,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:42.895460,0.000242,udp,147.32.85.25,58141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:49:45.896825,0.000346,udp,147.32.84.59,44372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:49:49.453158,0.000372,udp,147.32.84.170,55863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:51.560458,0.000401,udp,60.248.46.64,63391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:51.882871,0.000326,udp,90.186.84.118,65235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:49:54.102073,0.000194,udp,147.32.84.170,50684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:49:59.452959,0.000365,udp,147.32.84.170,34946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:24.777329,64.204895,tcp,147.32.84.165,4821.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:50:26.638379,0.232995,tcp,207.46.195.225,11603.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,7,1160,506,654,165.71428571428572,0.4362068965517241,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:50:28.522901,3143.984131,udp,94.54.230.96,46410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:50:34.853328,0.000432,udp,208.54.64.156,52423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:50:35.929252,0.000884,udp,94.156.166.18,2788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,980,76,904,490.0,0.07755102040816327,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:50:36.180179,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,23,,flow=Background,Background,-1 2011-08-16 23:50:39.473404,0.000407,udp,147.32.84.170,32910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:39.474491,0.018215,tcp,147.32.84.170,56798.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:43.928143,0.000185,udp,147.32.84.138,50118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:50:49.454431,0.017821,tcp,147.32.84.170,36989.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:50.882888,0.000181,udp,147.32.84.138,58746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:50:53.983126,0.000283,udp,147.32.84.138,57293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:50:56.101728,0.000403,udp,147.32.84.170,59914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:59.150396,0.000378,udp,200.110.171.220,12855.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:50:59.452574,0.000328,udp,147.32.84.170,53955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:59.453405,0.000278,udp,147.32.84.170,59325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:50:59.454491,0.017692,tcp,147.32.84.170,36991.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:51:09.453992,0.000494,udp,147.32.84.170,58003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:51:19.453545,0.000388,udp,147.32.84.170,48736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:51:19.455621,0.018193,tcp,147.32.84.170,57285.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:51:21.859132,0.000486,udp,213.111.238.21,34789.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,75,486,280.5,0.13368983957219252,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:51:25.615695,61.280807,tcp,147.32.84.165,4822.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:51:26.805709,3077.385742,udp,98.111.160.64,46570.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:51:45.830273,0.000395,udp,147.32.85.89,56673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:52:06.507032,0.000341,udp,67.191.39.134,43535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:07.342486,3027.591309,udp,190.105.51.248,63983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:08.275385,0.000245,udp,147.32.84.138,48446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:52:09.454613,0.000286,udp,147.32.84.170,43275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:11.125962,0.000267,udp,147.32.84.138,60286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:52:17.297817,0.000301,udp,147.32.84.138,32903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:52:19.453688,0.000411,udp,147.32.84.170,59711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:19.454633,0.000308,udp,147.32.84.170,47227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:23.493570,0.00055,udp,86.40.97.25,55514.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:26.473782,61.270161,tcp,147.32.84.165,4823.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:52:27.101297,0.00031,udp,147.32.84.170,48606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:27.102606,0.214212,tcp,147.32.84.170,39896.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:27.579212,3050.644775,udp,68.57.37.150,46070.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:28.378011,0.000147,udp,147.32.84.138,33156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:52:46.068456,13.964592,tcp,137.53.241.1,60624.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,10,696,408,288,69.6,0.5862068965517241,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:52:49.454483,0.000392,udp,147.32.84.170,47636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:52:49.924047,11.926423,tcp,199.117.155.20,4733.0,->,147.32.87.51,3389.0,FSPA_SRPA,0.0,0.0,104,12179,4827,7352,117.10576923076923,0.3963379587815092,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:52:51.073760,8.988201,tcp,77.249.240.8,60535.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:52:51.357691,1581.524902,udp,94.156.166.18,5941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,677,556,121,169.25,0.8212703101920237,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:52.089452,0.000566,udp,74.248.166.7,53488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:52:57.093041,0.000216,udp,147.32.84.170,55786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:02.124813,0.53143,tcp,147.32.3.51,2649.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:53:12.182052,0.000195,udp,147.32.85.25,55346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:12.272163,0.000274,udp,147.32.86.20,64955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:13.136093,0.244246,tcp,147.32.84.170,49491.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:13.408216,0.396903,tcp,147.32.84.170,42743.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:15.086213,0.000326,udp,147.32.84.138,45517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:16.613539,0.000485,udp,147.32.84.170,40604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:25.235534,0.000459,udp,178.123.92.105,23454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:53:27.321106,61.25647,tcp,147.32.84.165,4824.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:53:27.408532,0.00038,udp,91.115.167.219,49485.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:53:28.103469,0.261807,tcp,147.32.84.170,39912.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:31.025196,0.00029,udp,147.32.84.59,43460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:32.882553,0.000218,udp,147.32.85.25,58440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:33.042800,0.000296,udp,147.32.85.25,43861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:39.454137,7.1e-05,udp,147.32.84.170,41802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:49.059393,0.000228,udp,147.32.85.25,56923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:56.319351,0.000265,udp,147.32.84.138,39365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:53:59.105750,0.000237,udp,147.32.84.170,37169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:59.106382,0.000208,udp,147.32.84.170,51119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:53:59.107439,0.221034,tcp,147.32.84.170,39916.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:54:02.831680,3.452181,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,529,213,316,132.25,0.40264650283553877,23,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-16 23:54:06.284787,4.266911,tcp,147.32.84.165,4825.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,10,1217,774,443,121.7,0.6359901396877568,23,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-16 23:54:08.338912,0.170838,tcp,147.32.86.20,1822.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,75,71090,1631,69459,947.8666666666667,0.022942748628499085,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:54:10.000397,0.0,tcp,118.126.15.157,6000.0,->,147.32.84.240,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:54:10.029224,0.0,tcp,118.126.15.157,6000.0,->,147.32.85.193,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:54:10.053867,0.0,tcp,118.126.15.157,6000.0,->,147.32.86.30,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:54:10.054256,0.0,tcp,118.126.15.157,6000.0,->,147.32.86.79,1433.0,S_,0.0,,1,60,60,0,60.0,1.0,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:54:11.520499,1945.019287,udp,67.84.83.230,45372.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:54:17.019053,0.00055,udp,89.215.98.220,21999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,77,472,274.5,0.14025500910746813,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:54:25.429889,0.000195,udp,147.32.84.138,50541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:54:25.435139,0.000147,udp,147.32.84.138,33747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:54:26.079540,0.000315,udp,147.32.84.59,54286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:54:28.159915,64.074562,tcp,147.32.84.165,4826.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:54:29.455955,0.01835,tcp,147.32.84.170,37273.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:54:30.099864,0.000241,udp,147.32.84.170,47089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:54:39.964020,0.000235,udp,147.32.85.25,54512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:54:42.879311,8.996166,tcp,147.32.87.38,52970.0,->,95.168.205.38,25.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,23,1,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:54:49.453980,0.000335,udp,147.32.84.170,51702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:54:54.733647,2.512941,tcp,66.249.66.110,57600.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,12,3100,824,2276,258.3333333333333,0.2658064516129032,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:54:57.522004,0.000492,udp,217.75.209.78,63598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,231,169,62,115.5,0.7316017316017316,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:54:59.455953,0.017927,tcp,147.32.84.170,52619.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:55:06.824489,0.000357,udp,98.125.7.217,50101.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,82,60,71.0,0.5774647887323944,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:11.060461,1751.043457,udp,81.200.20.116,28585.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,714,149,565,178.5,0.20868347338935575,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:19.201673,3544.300293,udp,147.32.84.229,13363.0,<->,118.161.43.30,14728.0,CON,0.0,0.0,117,20282,10170,10112,173.35042735042734,0.5014298392663445,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:21.463755,0.000333,udp,147.32.86.20,52582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:55:26.450082,0.000167,udp,147.32.85.25,41939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:55:28.326301,0.000187,udp,147.32.84.138,57813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:55:28.326315,0.000187,udp,147.32.84.138,49900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:55:28.997642,61.270779,tcp,147.32.84.165,4827.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:55:31.418172,0.000349,udp,81.203.49.139,60547.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:34.151067,0.000247,udp,147.32.84.138,50441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:55:38.006501,3572.038818,udp,126.131.44.45,64553.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,273,153,120,68.25,0.5604395604395604,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:39.454203,0.019932,udp,147.32.84.170,34634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:55:39.474631,0.000356,udp,147.32.84.170,55520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:55:50.443308,0.000643,udp,91.139.254.222,8768.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,611,76,535,305.5,0.12438625204582651,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:56.093397,0.000611,udp,121.73.163.251,49790.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:55:56.335233,0.000369,udp,109.167.120.49,23599.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:02.103447,0.242266,tcp,147.32.84.170,39933.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:02.598684,0.000423,udp,95.68.137.175,33983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:04.146266,0.000239,udp,147.32.85.34,50829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:56:14.272032,615.687927,udp,70.26.43.202,44828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,456,332,124,114.0,0.7280701754385965,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:18.876061,0.000453,udp,111.243.49.32,16616.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,23,1,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:21.174922,2350.726074,udp,147.32.84.229,13363.0,<->,111.255.43.71,27514.0,CON,0.0,0.0,6,3490,3370,120,581.6666666666666,0.9656160458452722,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:26.705543,0.001481,udp,190.188.128.110,4986.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,477,60,268.5,0.888268156424581,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:29.454205,0.000354,udp,147.32.84.170,46941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:29.845349,61.270763,tcp,147.32.84.165,4828.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:56:32.455869,0.000311,udp,147.32.85.25,55385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:56:33.102910,0.216365,tcp,147.32.84.170,39937.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:33.948810,116.546127,tcp,188.154.211.158,20467.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,9,572,254,318,63.55555555555556,0.44405594405594406,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:56:38.504973,0.000552,udp,92.224.108.63,39430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:56:43.002936,13.679493,tcp,60.217.32.143,4201.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,14,926,517,409,66.14285714285714,0.5583153347732182,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:56:49.456423,0.017835,tcp,147.32.84.170,40198.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:59.454339,0.000422,udp,147.32.84.170,53531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:59.455241,0.000329,udp,147.32.84.170,33344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:56:59.456269,0.018916,tcp,147.32.84.170,60656.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:01.222815,0.000243,udp,147.32.84.138,37318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:57:03.101336,0.00036,udp,147.32.84.170,57379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:03.102164,0.000223,udp,147.32.84.170,56694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:09.390278,1822.874634,udp,91.150.129.50,53704.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:57:09.454375,0.00043,udp,147.32.84.170,40552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:13.785379,3052.714355,udp,151.37.237.74,6069.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:57:30.692970,64.245743,tcp,147.32.84.165,4829.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:57:33.801669,0.000164,tcp,113.105.171.56,80.0,->,147.32.87.40,57426.0,SA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:57:34.101653,0.000438,udp,147.32.84.170,42018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:34.103150,0.227443,tcp,147.32.84.170,34610.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:35.533154,0.000363,udp,147.32.86.20,59153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:57:36.115557,987.768738,udp,78.2.91.42,40977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,288,156,132,72.0,0.5416666666666666,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:57:38.431121,0.000231,udp,147.32.85.25,50220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:57:38.618843,1.078505,tcp,147.32.3.51,2667.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,23,0,flow=Background-TCP-Attempt,Background,-1 2011-08-16 23:57:39.455363,0.000345,udp,147.32.84.170,42750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:57:41.074418,0.000303,udp,147.32.84.171,37711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:57:42.907087,0.001055,icmp,147.32.86.96,,<-,147.32.87.2,20246.0,RED,,0.0,2,196,0,196,98.0,0.0,23,0,flow=Background,Background,-1 2011-08-16 23:57:44.472944,0.000259,udp,147.32.86.20,53688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:57:59.454271,0.000523,udp,147.32.84.170,36525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:01.535784,0.899096,tcp,147.32.86.20,2026.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,93468,1526,91942,1015.9565217391304,0.01632644327470364,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:58:05.101849,0.000225,udp,147.32.84.170,35269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:05.129649,0.000533,udp,92.40.254.204,17471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:09.455560,0.00041,udp,147.32.84.170,45464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:09.569703,783.156982,udp,147.32.84.229,13363.0,->,81.13.149.167,52802.0,INT,0.0,,9,1614,1614,0,179.33333333333334,1.0,23,0,flow=Background-UDP-Attempt,Background,-1 2011-08-16 23:58:12.144689,2167.174316,rtp,147.32.84.229,13363.0,<->,68.228.159.101,48403.0,CON,0.0,0.0,10,2540,303,2237,254.0,0.11929133858267717,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:13.711323,0.254488,tcp,147.32.84.170,57928.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:14.161998,0.243954,tcp,147.32.84.170,55322.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:14.170991,0.000321,udp,147.32.84.170,36304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:20.295045,3056.142822,udp,115.87.143.111,24499.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:21.036211,0.000246,udp,147.32.86.20,60421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:21.329085,0.000407,udp,147.32.84.59,46431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:21.341157,0.063194,udp,147.32.84.229,13363.0,<->,84.127.60.215,8074.0,CON,0.0,0.0,2,230,168,62,115.0,0.7304347826086957,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:22.199113,8.996379,tcp,81.100.209.137,53018.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,5,372,138,234,74.4,0.3709677419354839,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:58:27.518354,0.000412,udp,87.203.76.209,26587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:31.372071,0.000252,udp,147.32.84.138,43077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:34.515382,63.63414,tcp,147.32.84.165,4830.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:58:36.090459,0.025613,udp,147.32.84.170,47113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:36.116464,0.000324,udp,147.32.84.170,39057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:36.660195,0.000295,udp,147.32.84.138,40347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:39.454488,0.000355,udp,147.32.84.170,44509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:39.455350,0.000282,udp,147.32.84.170,42052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:41.840771,0.000491,udp,75.34.32.13,37281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:42.016069,0.000223,udp,147.32.84.138,59212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:49.456572,0.018557,tcp,147.32.84.170,60683.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:58:49.759529,0.000259,udp,147.32.84.138,43892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:58:59.414031,0.0006,udp,86.122.145.36,15888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,79,473,276.0,0.1431159420289855,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:58:59.454260,0.000328,udp,147.32.84.170,39629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:05.839603,0.000148,udp,147.32.85.25,56840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:59:09.456644,0.018468,tcp,147.32.84.170,60686.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:29.454643,0.000311,udp,147.32.84.170,45796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:29.455406,0.000317,udp,147.32.84.170,33872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:32.216127,107.787285,tcp,98.126.40.201,80.0,->,147.32.84.123,1895.0,SA_R,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,23,0,flow=Background-TCP-Established,Background,-1 2011-08-16 23:59:35.285864,0.030164,udp,147.32.84.229,13363.0,<->,88.80.102.193,62072.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,23,0,flow=Background-UDP-Established,Background,-1 2011-08-16 23:59:37.726560,64.260002,tcp,147.32.84.165,4831.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,23,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-16 23:59:39.339652,0.000197,udp,147.32.84.138,52042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:59:39.455660,0.000239,udp,147.32.84.170,37021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:47.977465,0.207478,tcp,147.32.86.20,2120.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,23,1,flow=Background-TCP-Established,Background,-1 2011-08-16 23:59:49.454561,0.000353,udp,147.32.84.170,54168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,23,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-16 23:59:52.853016,0.000339,udp,147.32.86.20,52709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,23,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-16 23:59:57.212281,161.504791,udp,147.32.84.229,13363.0,<->,68.69.208.196,28837.0,CON,0.0,0.0,6,3490,526,2964,581.6666666666666,0.1507163323782235,23,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:00:01.272751,0.000329,udp,147.32.87.36,43384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,0,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 00:00:01.542214,0.000284,udp,147.32.84.222,36545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:00:03.836017,0.00032,udp,147.32.85.34,63564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:00:09.454707,0.000396,udp,147.32.84.170,54478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:09.455613,0.000306,udp,147.32.84.170,41231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:10.668273,0.141147,tcp,147.32.86.92,51636.0,->,209.85.148.132,80.0,FSPA_FSPA,0.0,0.0,10,1326,779,547,132.6,0.5874811463046757,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:00:13.342966,0.000163,udp,147.32.85.25,32834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:00:14.803142,0.000111,udp,147.32.84.138,44732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:00:20.457370,3.006881,tcp,147.32.84.21,51942.0,->,74.125.39.108,,S_,0.0,,2,148,148,0,74.0,1.0,0,,flow=Background-google-pop,Background,-1 2011-08-17 00:00:20.927884,3397.887695,udp,94.231.145.165,59154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,1386,762,624,69.3,0.5497835497835498,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:00:29.455698,0.000311,udp,147.32.84.170,38993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:29.456756,0.019443,tcp,147.32.84.170,41077.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:31.572423,0.216184,tcp,147.32.84.164,33330.0,->,208.111.133.82,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:00:32.555652,6.036395,udp,147.32.84.229,13363.0,->,114.38.110.95,61083.0,INT,0.0,,3,222,222,0,74.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:00:37.679933,5.220322,tcp,78.250.160.14,4982.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,31,3516,1431,2085,113.41935483870968,0.4069965870307167,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:00:38.563954,64.055046,tcp,147.32.84.165,4832.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:00:39.103247,0.000237,udp,147.32.84.170,45768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:39.104493,0.215725,tcp,147.32.84.170,34647.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:39.466404,0.017969,tcp,147.32.84.170,52423.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:40.045441,3036.30542,udp,71.226.124.242,24683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1464,1092,372,122.0,0.7459016393442623,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:00:49.454750,0.000343,udp,147.32.84.170,41483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:00:51.321550,0.0,tcp,147.32.84.165,4833.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.321770,0.0,tcp,147.32.84.165,4834.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.334250,0.0,tcp,147.32.84.165,4836.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.502854,0.0,tcp,147.32.84.165,4837.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.503151,0.0,tcp,147.32.84.165,4838.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.512757,0.0,tcp,147.32.84.165,4839.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.702984,0.0,tcp,147.32.84.165,4841.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:51.702991,0.0,tcp,147.32.84.165,4842.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:52.484104,0.0,tcp,147.32.84.165,4845.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:53.285292,0.0,tcp,147.32.84.165,4844.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:00:54.606396,0.206124,tcp,147.32.86.20,2178.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:00:59.455782,0.000359,udp,147.32.84.170,57310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:01:00.941574,0.000148,udp,147.32.84.138,51837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:01:02.645713,3034.039551,udp,95.8.129.204,58244.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:05.202366,0.0,tcp,147.32.84.165,1118.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202490,0.0,tcp,147.32.84.165,1116.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202495,0.0,tcp,147.32.84.165,1117.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202499,0.0,tcp,147.32.84.165,1122.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202721,0.0,tcp,147.32.84.165,1120.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202735,0.0,tcp,147.32.84.165,1121.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.202740,0.0,tcp,147.32.84.165,1126.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:05.214511,6.437026,udp,147.32.84.229,13363.0,->,111.243.15.235,49258.0,INT,0.0,,3,180,180,0,60.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:01:11.912825,0.063882,udp,147.32.84.229,13363.0,<->,178.120.50.180,64408.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:17.219254,0.0,tcp,147.32.84.165,1356.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219270,0.0,tcp,147.32.84.165,1357.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219275,0.0,tcp,147.32.84.165,1358.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219443,0.0,tcp,147.32.84.165,1360.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219455,0.0,tcp,147.32.84.165,1361.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219460,0.0,tcp,147.32.84.165,1362.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.219464,0.0,tcp,147.32.84.165,1364.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:17.820347,0.0,tcp,147.32.84.165,1369.0,->,147.33.84.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:19.204449,7.3e-05,udp,147.32.84.138,34592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:01:19.454884,0.000318,udp,147.32.84.170,53699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:01:19.456699,0.018041,tcp,147.32.84.170,52428.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:01:26.503042,2809.690186,udp,174.112.106.185,44117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:29.236925,0.0,tcp,147.32.84.165,1598.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.236938,0.0,tcp,147.32.84.165,1596.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.236943,0.0,tcp,147.32.84.165,1597.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.236947,0.0,tcp,147.32.84.165,1602.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.237120,0.0,tcp,147.32.84.165,1600.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.237134,0.0,tcp,147.32.84.165,1601.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:29.237139,0.0,tcp,147.32.84.165,1606.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:39.129914,0.323612,udp,147.32.84.229,13363.0,<->,110.34.77.216,1154.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:41.254225,0.0,tcp,147.32.84.165,1836.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254240,0.0,tcp,147.32.84.165,1837.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254247,0.0,tcp,147.32.84.165,1838.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254418,0.0,tcp,147.32.84.165,1840.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254432,0.0,tcp,147.32.84.165,1841.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254437,0.0,tcp,147.32.84.165,1842.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.254441,0.0,tcp,147.32.84.165,1844.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:41.479336,0.000514,udp,79.187.4.205,62142.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,219,157,62,109.5,0.7168949771689498,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:41.730194,0.309087,tcp,147.32.86.20,2221.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:01:41.855049,0.0,tcp,147.32.84.165,1849.0,->,147.33.84.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:42.413048,1.4e-05,icmp,222.104.110.206,8.0,<->,147.32.84.159,2.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,0,1,flow=Background,Background,-1 2011-08-17 00:01:46.144590,0.00022,udp,147.32.85.25,54208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:01:47.456180,0.000276,udp,147.32.84.138,57907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:01:51.324124,0.135847,udp,147.32.84.229,13363.0,<->,95.56.154.182,36060.0,CON,0.0,0.0,2,525,465,60,262.5,0.8857142857142857,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:01:53.271522,64.232567,tcp,147.32.84.165,1891.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:01:53.271591,0.0,tcp,147.32.84.165,2032.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.271746,0.0,tcp,147.32.84.165,2031.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.271760,0.0,tcp,147.32.84.165,2035.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.271819,0.0,tcp,147.32.84.165,2034.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.271872,0.0,tcp,147.32.84.165,2039.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.694848,0.0,tcp,147.32.84.165,2038.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:53.871883,0.0,tcp,147.32.84.165,2042.0,->,147.32.80.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:01:56.513844,0.000264,udp,147.32.85.25,47493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:01:59.455013,0.000394,udp,147.32.84.170,51280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:01:59.707302,849.670288,udp,147.32.84.229,13363.0,<->,99.239.95.87,45525.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:02:03.268165,0.000292,udp,113.87.91.217,45184.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,79,485,282.0,0.1400709219858156,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:02:03.728734,0.000229,udp,147.32.85.34,57904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:03.943764,0.000475,udp,118.167.243.118,38096.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:02:04.417596,0.000299,udp,147.32.84.138,40599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:05.289064,0.0,tcp,147.32.84.165,2212.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:05.289079,0.0,tcp,147.32.84.165,2213.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:05.289084,0.0,tcp,147.32.84.165,2215.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:05.289126,0.0,tcp,147.32.84.165,2216.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:05.289354,0.0,tcp,147.32.84.165,2218.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:05.289368,0.0,tcp,147.32.84.165,2219.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:11.102910,0.000327,udp,147.32.84.170,42860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:13.215391,0.000135,udp,147.32.84.138,50918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:16.363260,846.589783,udp,78.1.191.120,10887.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,863,525,338,143.83333333333334,0.608342989571263,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:02:17.307103,0.0,tcp,147.32.84.165,2392.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.307181,0.0,tcp,147.32.84.165,2393.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.307258,0.0,tcp,147.32.84.165,2395.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.307265,0.0,tcp,147.32.84.165,2396.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.307375,0.0,tcp,147.32.84.165,2398.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.307380,0.0,tcp,147.32.84.165,2399.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:17.908220,0.0,tcp,147.32.84.165,2401.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:22.197926,0.000225,udp,147.32.85.25,36816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:27.049610,0.001801,udp,200.123.160.105,28282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,484,60,272.0,0.8897058823529411,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:02:27.243009,0.000334,udp,147.32.85.25,39242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:27.328256,0.00021,udp,147.32.85.25,47921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:29.324426,0.0,tcp,147.32.84.165,2573.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.332233,0.0,tcp,147.32.84.165,2572.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.332240,0.0,tcp,147.32.84.165,2576.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.332343,0.0,tcp,147.32.84.165,2575.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.332388,0.0,tcp,147.32.84.165,2579.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.332466,0.0,tcp,147.32.84.165,2578.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:29.457913,0.017736,tcp,147.32.84.170,39343.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:29.925255,0.0,tcp,147.32.84.165,2582.0,->,147.32.80.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:33.010036,0.000131,udp,147.32.84.138,33500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:33.514455,418.764709,tcp,145.53.217.31,51526.0,,147.32.84.229,13363.0,PA_FPA,0.0,0.0,20,1251,300,951,62.55,0.23980815347721823,0,0,flow=Background,Background,-1 2011-08-17 00:02:39.456048,0.000402,udp,147.32.84.170,37302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:39.457011,0.000234,udp,147.32.84.170,37950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:41.342063,0.0,tcp,147.32.84.165,2720.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:41.342262,0.0,tcp,147.32.84.165,2722.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:41.342392,0.0,tcp,147.32.84.165,2724.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:41.342473,0.0,tcp,147.32.84.165,2726.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:41.342594,0.0,tcp,147.32.84.165,2728.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:42.102597,0.000304,udp,147.32.84.170,56428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:46.734269,0.170979,tcp,147.32.86.20,2279.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:02:49.458040,0.018652,tcp,147.32.84.170,40854.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:02:53.359016,0.0,tcp,147.32.84.165,2840.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:53.359116,0.0,tcp,147.32.84.165,2842.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:53.359172,0.0,tcp,147.32.84.165,2844.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:53.960455,0.0,tcp,147.32.84.165,2846.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:53.960550,0.0,tcp,147.32.84.165,2848.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:02:58.690810,0.000303,udp,147.32.84.138,41168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:02:59.456126,0.000347,udp,147.32.84.170,56031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:05.377083,61.256306,tcp,147.32.84.165,2867.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:03:05.377099,0.0,tcp,147.32.84.165,2961.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:05.377104,0.0,tcp,147.32.84.165,2963.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:05.795279,0.0,tcp,147.32.84.165,2965.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:05.977674,0.0,tcp,147.32.84.165,2967.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:05.977690,0.0,tcp,147.32.84.165,2969.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:09.455910,0.000374,udp,147.32.84.170,59658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:09.457813,0.017963,tcp,147.32.84.170,38247.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:13.445150,0.24025,tcp,147.32.84.170,40059.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:13.677656,0.27931,tcp,147.32.84.170,40060.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:13.948776,0.226095,tcp,147.32.84.170,40062.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:17.393840,0.0,tcp,147.32.84.165,3081.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:17.393908,0.0,tcp,147.32.84.165,3083.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:17.393914,0.0,tcp,147.32.84.165,3085.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:17.994969,0.0,tcp,147.32.84.165,3087.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:17.994983,0.0,tcp,147.32.84.165,3089.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:19.456131,0.000414,udp,147.32.84.170,44114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:23.324834,0.000528,udp,155.41.240.157,6465.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,75,464,269.5,0.1391465677179963,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:03:24.138662,3043.437988,udp,85.152.153.98,63945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1711,1277,434,122.21428571428571,0.7463471654003506,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:03:26.895544,0.000254,udp,147.32.84.59,60706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,87,155,121.0,0.359504132231405,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:03:29.411536,0.0,tcp,147.32.84.165,3201.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:29.411642,0.0,tcp,147.32.84.165,3203.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:29.411714,0.0,tcp,147.32.84.165,3205.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:30.012459,0.0,tcp,147.32.84.165,3207.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:30.012519,0.0,tcp,147.32.84.165,3209.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:39.458316,0.018396,tcp,147.32.84.170,40866.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:41.429077,0.0,tcp,147.32.84.165,3321.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:41.429188,0.0,tcp,147.32.84.165,3320.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:41.429192,0.0,tcp,147.32.84.165,3323.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:41.429197,0.0,tcp,147.32.84.165,3322.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:41.429343,0.0,tcp,147.32.84.165,3325.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:42.029206,0.0,tcp,147.32.84.165,3326.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:42.029220,0.0,tcp,147.32.84.165,3327.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:42.029225,0.0,tcp,147.32.84.165,3328.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:42.029370,0.0,tcp,147.32.84.165,3329.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:42.029384,0.0,tcp,147.32.84.165,3330.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:43.111719,0.000304,udp,147.32.84.170,39799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:46.913718,0.000272,udp,147.32.84.59,40460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,87,155,121.0,0.359504132231405,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:03:49.459296,0.000333,udp,147.32.84.170,36927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:49.460339,0.01778,tcp,147.32.84.170,55033.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:03:53.445735,0.0,tcp,147.32.84.165,3442.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:53.445840,0.0,tcp,147.32.84.165,3444.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:53.445900,0.0,tcp,147.32.84.165,3446.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:54.047031,0.0,tcp,147.32.84.165,3448.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:54.047047,0.0,tcp,147.32.84.165,3450.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:03:59.017328,0.000598,udp,121.74.134.67,31414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,79,480,279.5,0.1413237924865832,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:03:59.472644,0.000441,udp,213.87.135.213,3656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:04:03.541296,0.000215,udp,147.32.85.34,50332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:03.566154,0.000213,udp,147.32.85.34,62438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:05.462971,0.0,tcp,147.32.84.165,3562.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:05.462985,0.0,tcp,147.32.84.165,3564.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:05.463082,0.0,tcp,147.32.84.165,3566.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:05.533877,2.11746,udp,89.204.153.130,60284.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,370,166,204,92.5,0.4486486486486487,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:04:06.064578,0.0,tcp,147.32.84.165,3568.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:06.064594,0.0,tcp,147.32.84.165,3570.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:06.548886,0.000276,udp,147.32.85.34,59656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:09.456234,0.000412,udp,147.32.84.170,52685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:09.458167,0.018245,tcp,147.32.84.170,40870.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:14.106029,0.00027,udp,147.32.84.170,56328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:17.480520,61.256435,tcp,147.32.84.165,3589.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:04:17.480534,0.0,tcp,147.32.84.165,3683.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:17.480541,0.0,tcp,147.32.84.165,3682.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:17.480693,0.0,tcp,147.32.84.165,3685.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:17.480710,0.0,tcp,147.32.84.165,3684.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:17.898660,0.0,tcp,147.32.84.165,3687.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:18.081749,0.0,tcp,147.32.84.165,3688.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:18.081764,0.0,tcp,147.32.84.165,3689.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:18.081769,0.0,tcp,147.32.84.165,3690.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:18.081806,0.0,tcp,147.32.84.165,3691.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:18.081926,0.0,tcp,147.32.84.165,3692.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.456319,0.000421,udp,147.32.84.170,42788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:29.457310,0.000378,udp,147.32.84.170,51799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:29.498271,0.0,tcp,147.32.84.165,3803.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.498292,0.0,tcp,147.32.84.165,3802.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.498297,0.0,tcp,147.32.84.165,3805.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.498301,0.0,tcp,147.32.84.165,3804.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.498384,0.0,tcp,147.32.84.165,3807.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:29.591172,250.047607,tcp,147.32.84.170,51426.0,->,74.125.232.192,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:30.098874,0.0,tcp,147.32.84.165,3808.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:30.098888,0.0,tcp,147.32.84.165,3809.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:30.098893,0.0,tcp,147.32.84.165,3810.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:30.098944,0.0,tcp,147.32.84.165,3811.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:30.099097,0.0,tcp,147.32.84.165,3812.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:32.366461,0.311058,tcp,147.32.86.20,2371.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,26559,918,25641,781.1470588235294,0.03456455438834293,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:04:33.534331,6.019987,udp,147.32.84.229,13363.0,->,92.231.64.96,6099.0,INT,0.0,,3,1383,1383,0,461.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:04:34.767052,0.000367,udp,147.32.85.25,34508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:36.025824,0.000283,udp,147.32.84.19,41712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:39.456848,0.000388,udp,147.32.84.170,58006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:40.193518,2691.314941,udp,147.32.84.229,13363.0,<->,71.49.154.83,33636.0,CON,0.0,0.0,8,544,304,240,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:04:41.515719,0.0,tcp,147.32.84.165,3923.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:41.515734,0.0,tcp,147.32.84.165,3922.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:41.515755,0.0,tcp,147.32.84.165,3925.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:41.515926,0.0,tcp,147.32.84.165,3924.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:41.515943,0.0,tcp,147.32.84.165,3927.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:42.116206,0.0,tcp,147.32.84.165,3928.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:42.116220,0.0,tcp,147.32.84.165,3929.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:42.116225,0.0,tcp,147.32.84.165,3930.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:42.116347,0.0,tcp,147.32.84.165,3931.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:42.116361,0.0,tcp,147.32.84.165,3932.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:44.998612,0.000213,udp,147.32.85.25,43906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:49.456247,0.000373,udp,147.32.84.170,57326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:49.458366,0.018261,tcp,147.32.84.170,38268.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:04:50.215528,0.000165,udp,147.32.84.138,36867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:04:53.532881,0.0,tcp,147.32.84.165,4043.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:53.532895,0.0,tcp,147.32.84.165,4042.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:53.533012,0.0,tcp,147.32.84.165,4045.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:53.533026,0.0,tcp,147.32.84.165,4044.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:53.533031,0.0,tcp,147.32.84.165,4047.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:54.133598,0.0,tcp,147.32.84.165,4048.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:54.133670,0.0,tcp,147.32.84.165,4049.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:54.133676,0.0,tcp,147.32.84.165,4050.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:54.133763,0.0,tcp,147.32.84.165,4051.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:54.133775,0.0,tcp,147.32.84.165,4052.0,->,147.32.88.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:04:59.458018,0.000312,udp,147.32.84.170,55924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:05.549765,0.0,tcp,147.32.84.165,4163.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:05.549772,0.0,tcp,147.32.84.165,4162.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:05.549857,0.0,tcp,147.32.84.165,4165.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:05.549865,0.0,tcp,147.32.84.165,4164.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:05.549905,0.0,tcp,147.32.84.165,4167.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:06.150721,0.0,tcp,147.32.84.165,4168.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:06.150772,0.0,tcp,147.32.84.165,4169.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:06.150865,0.0,tcp,147.32.84.165,4170.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:06.150874,0.0,tcp,147.32.84.165,4171.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:06.151022,0.0,tcp,147.32.84.165,4172.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:05:10.101373,0.0003,udp,147.32.86.92,50595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:05:11.955597,0.000243,udp,147.32.84.138,36042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:05:15.102888,0.000326,udp,147.32.84.170,45383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:18.319094,61.256599,tcp,147.32.84.165,4182.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:05:39.467786,0.018277,tcp,147.32.84.170,43342.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:40.005038,0.000213,udp,147.32.84.138,45411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:05:40.271516,0.0,udp,147.32.84.99,427.0,->,192.168.88.186,50831.0,INT,0.0,,1,377,377,0,377.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:05:41.949326,0.08787,tcp,77.20.40.169,58249.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,11,1612,702,910,146.54545454545453,0.43548387096774194,0,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 00:05:45.104971,0.000477,udp,147.32.84.170,47401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:45.107360,0.247788,tcp,147.32.84.170,52131.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:47.331173,0.000324,udp,201.189.18.214,21736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:05:49.456291,0.000351,udp,147.32.84.170,43292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:05:53.509758,0.0005,udp,75.81.186.190,1715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,162,96,66,81.0,0.5925925925925926,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:05:58.816052,817.157227,udp,147.32.84.229,13363.0,->,93.131.67.113,32007.0,INT,0.0,,6,1059,1059,0,176.5,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:06:01.636503,0.000403,udp,147.32.85.113,41249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:02.183886,0.0003,udp,147.32.84.59,59927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:04.922694,0.000233,udp,147.32.84.138,44487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:08.244029,0.000402,udp,147.32.86.20,56991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:09.100872,0.000826,udp,69.42.10.136,7845.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,1559,74,1485,519.6666666666666,0.04746632456703015,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:09.456458,0.000425,udp,147.32.84.170,52962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:09.785884,0.058066,udp,147.32.84.229,13363.0,<->,95.25.89.70,14995.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:10.070111,0.000355,udp,189.183.64.31,55118.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:16.105375,0.000297,udp,147.32.84.170,33564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:16.640800,0.000615,udp,193.120.212.157,30056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,74,463,268.5,0.1378026070763501,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:19.157633,61.255871,tcp,147.32.84.165,4183.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:06:19.456485,0.000322,udp,147.32.84.170,45309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:19.457418,0.000202,udp,147.32.84.170,45893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:22.243426,0.000246,udp,147.32.84.138,55662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:36.030683,0.023132,tcp,90.183.39.17,44485.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,16,10205,981,9224,637.8125,0.09612934835864773,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:06:36.788331,0.000422,udp,151.66.25.151,50936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:39.456472,0.000389,udp,147.32.84.170,42781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:41.142544,11.416191,tcp,78.146.69.39,17147.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:06:43.158584,0.000246,udp,147.32.84.138,60907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:06:45.132587,0.000356,udp,186.204.79.122,63420.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,0,1,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:47.106826,0.00038,udp,147.32.84.170,56396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:06:54.420342,1414.333008,udp,88.96.209.33,48856.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,520,275,245,65.0,0.5288461538461539,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:06:59.458504,0.018466,tcp,147.32.84.170,43285.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:07:06.662232,1.989351,tcp,220.181.51.158,38621.0,->,147.32.84.130,80.0,SRPA_SPA,0.0,0.0,32,22468,1146,21322,702.125,0.05100587502225387,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:07:08.148352,0.000213,udp,147.32.84.138,56212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:07:09.259826,0.328628,udp,147.32.84.229,13363.0,<->,111.252.202.157,60453.0,CON,0.0,0.0,2,556,78,478,278.0,0.14028776978417265,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:07:09.456600,0.000276,udp,147.32.84.170,43037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:07:15.712006,0.27406,udp,147.32.84.229,13363.0,<->,189.55.240.113,37268.0,CON,0.0,0.0,2,158,90,68,79.0,0.569620253164557,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:07:16.933703,0.000253,udp,147.32.84.138,47527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:07:19.995650,61.282509,tcp,147.32.84.165,4184.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:07:21.370049,0.000417,udp,147.32.86.20,63474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:07:29.459040,0.01796,tcp,147.32.84.170,56264.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:07:43.740856,0.000361,udp,147.32.84.138,47355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:07:53.332012,0.0006,udp,115.163.160.32,24189.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,643,117,526,321.5,0.18195956454121306,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:07:59.459776,0.018604,tcp,147.32.84.170,41463.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:00.697272,0.189921,udp,147.32.84.229,13363.0,<->,24.55.65.132,18407.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:08:06.874646,0.170312,tcp,147.32.86.20,2560.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:08:08.849839,0.00025,udp,147.32.84.59,33698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:09.374092,0.000297,udp,147.32.84.59,46579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:09.456734,0.000393,udp,147.32.84.170,57189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:09.458667,0.018039,tcp,147.32.84.170,45726.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:12.146784,0.70685,tcp,66.249.71.107,38590.0,->,147.32.84.19,443.0,FSPA_FSPA,0.0,0.0,19,5657,2019,3638,297.7368421052632,0.35690295209474987,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:08:13.785784,0.318431,tcp,147.32.84.170,40795.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:14.493745,0.000283,udp,147.32.84.59,46126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:14.589953,0.000274,udp,147.32.84.59,49322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:16.624514,0.000468,udp,147.32.86.20,52797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:18.102642,0.190427,udp,147.32.84.170,47946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:18.320430,0.240512,tcp,147.32.84.170,54526.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:19.457704,0.00031,udp,147.32.84.170,53706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:20.132812,0.000194,udp,147.32.84.138,42100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:20.852847,61.270695,tcp,147.32.84.165,4200.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:08:22.152891,0.000415,udp,77.88.137.97,37727.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:08:29.458740,0.018044,tcp,147.32.84.170,50467.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:33.458990,0.352293,udp,147.32.84.229,13363.0,<->,114.39.138.170,23955.0,CON,0.0,0.0,2,1082,145,937,541.0,0.13401109057301294,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:08:39.458447,0.000363,udp,147.32.84.170,55788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:43.617521,0.180017,udp,147.32.84.229,13363.0,<->,71.226.31.179,22344.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:08:49.102195,0.000293,udp,147.32.84.170,39332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:49.458789,0.018087,tcp,147.32.84.170,45738.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:08:56.281419,0.00026,udp,147.32.85.25,50894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:59.382316,0.000232,udp,147.32.84.138,52522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:08:59.456792,0.000319,udp,147.32.84.170,56811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:00.491260,0.000497,udp,79.154.95.79,10018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,76,481,278.5,0.13644524236983843,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:09:04.307226,0.000274,udp,147.32.84.138,60345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:09.456833,0.000326,udp,147.32.84.170,42389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:09.457599,0.000331,udp,147.32.84.170,60680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:10.567245,0.000345,udp,147.32.84.138,54170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:11.563529,0.000341,udp,147.32.85.25,45191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:13.514651,1261.828491,udp,70.179.90.8,38986.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1116,160,956,279.0,0.14336917562724014,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:09:16.573513,0.000249,udp,147.32.85.25,40691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:19.457954,0.000283,udp,147.32.84.170,48326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:20.112986,0.000205,udp,147.32.84.170,44564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:20.115016,0.256861,tcp,147.32.84.170,54535.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:21.700356,70.308807,tcp,147.32.84.165,4201.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:09:27.142989,0.702015,tcp,67.195.115.177,44120.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,40,30164,1594,28570,754.1,0.05284445033815144,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:09:37.775266,0.000413,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,0,1,flow=Background,Background,-1 2011-08-17 00:09:40.555709,0.000257,udp,147.32.84.138,36493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:41.942931,0.00024,udp,147.32.85.25,55084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:44.197190,0.084381,udp,147.32.84.229,13363.0,<->,88.87.22.155,58797.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:09:44.316106,44.999294,tcp,66.249.67.105,59392.0,->,147.32.86.52,80.0,S_,0.0,,5,370,370,0,74.0,1.0,0,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:09:44.483073,0.000569,udp,130.237.192.121,48971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:09:44.893191,3469.580322,udp,173.24.38.29,34179.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2003,481,1522,166.91666666666666,0.2401397903145282,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:09:47.491839,0.000221,udp,147.32.85.25,50702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:50.877126,0.000456,udp,147.32.86.20,65090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:09:51.104973,0.000328,udp,147.32.84.170,49196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:09:51.106264,0.262961,tcp,147.32.84.170,54539.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:01.298667,0.000254,udp,147.32.84.222,54435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:01.848945,1119.760254,udp,78.72.177.193,30700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,757,460,297,126.16666666666667,0.607661822985469,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:10:05.838052,0.000166,udp,147.32.87.40,47391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:09.458997,0.018701,tcp,147.32.84.170,50480.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:11.456202,0.919804,tcp,96.45.173.3,38753.0,->,147.32.85.101,80.0,FSPA_FSPA,0.0,0.0,24,17000,1101,15899,708.3333333333334,0.06476470588235295,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:10:19.457728,0.000394,udp,147.32.84.170,40221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:22.104141,0.000296,udp,147.32.84.170,57620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:29.458976,0.018527,tcp,147.32.84.170,43319.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:31.577790,0.0,tcp,147.32.84.164,39588.0,->,122.50.3.180,27031.0,S_,0.0,,1,74,74,0,74.0,1.0,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:10:31.591271,61.257111,tcp,147.32.84.165,4202.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:10:33.579170,0.034532,tcp,147.32.84.164,59993.0,->,81.171.115.3,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:10:37.812842,0.000439,udp,147.32.84.138,42447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:37.824895,0.000272,udp,147.32.84.138,36501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:38.631893,9.5e-05,udp,147.32.85.25,50929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:39.478622,0.018108,tcp,147.32.84.170,43320.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:10:44.061967,0.000294,udp,147.32.84.138,37876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:45.323883,0.112623,udp,147.32.84.229,13363.0,<->,66.108.49.190,23839.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:10:53.746676,0.000261,udp,147.32.85.25,56538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:10:54.845838,3469.683594,udp,70.234.29.171,65434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1687,1253,434,120.5,0.7427385892116183,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:10:59.459014,0.01862,tcp,147.32.84.170,56298.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:09.795639,0.000316,udp,147.32.85.25,46853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:11:11.453118,10.940183,tcp,201.19.234.98,27333.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:11:12.577704,0.000387,udp,118.186.202.10,15093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:11:17.007372,0.230121,tcp,147.32.86.20,2732.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:11:21.097504,0.046438,udp,147.32.84.229,13363.0,<->,194.237.111.42,37902.0,CON,0.0,0.0,2,1141,206,935,570.5,0.18054338299737072,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:11:24.105077,0.000249,udp,147.32.84.170,51785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:29.457094,0.000429,udp,147.32.84.170,55913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:29.459203,0.018516,tcp,147.32.84.170,45759.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:32.430490,66.515472,tcp,147.32.84.165,4203.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:11:36.175688,0.000673,udp,213.146.167.57,16910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1202,76,1126,601.0,0.0632279534109817,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:11:40.200647,61.622639,tcp,147.32.84.59,8730.0,->,69.171.228.19,443.0,SRPA_SPA,0.0,0.0,13,1824,1021,803,140.30769230769232,0.5597587719298246,0,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 00:11:55.103411,0.00024,udp,147.32.84.170,36671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:55.104102,0.000271,udp,147.32.84.170,42401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:55.105341,0.259907,tcp,147.32.84.170,60349.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:55.105455,0.000286,udp,147.32.84.138,50079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:11:59.457258,0.000295,udp,147.32.84.170,50177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:11:59.459051,0.017983,tcp,147.32.84.170,46786.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:04.248684,0.000243,udp,147.32.85.34,54518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:14.353181,0.000311,udp,147.32.84.138,44639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:19.457247,0.000447,udp,147.32.84.170,57798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:19.458218,0.000286,udp,147.32.84.170,35908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:26.105808,0.000277,udp,147.32.84.170,38923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:27.533247,2478.696289,udp,129.194.3.9,47618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1331,926,405,133.1,0.695717505634861,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:12:29.458122,0.000346,udp,147.32.84.170,54956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:32.749858,0.000286,icmp,217.117.79.151,8.0,<->,147.32.87.59,2.0,ECO,0.0,0.0,2,148,74,74,74.0,0.5,0,1,flow=Background,Background,-1 2011-08-17 00:12:35.600498,64.315117,tcp,147.32.84.165,4204.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:12:35.822242,1.00901,tcp,147.32.86.20,2807.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,93076,1586,91490,1000.8172043010753,0.01703983841162061,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:12:39.914039,0.061108,udp,147.32.84.229,13363.0,<->,95.220.213.98,15699.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:12:46.380160,33.47784,tcp,201.144.87.46,42022.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,7,488,254,234,69.71428571428571,0.5204918032786885,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:12:47.156451,3239.996094,udp,190.55.114.94,8187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1519,1119,400,126.58333333333333,0.7366688610928243,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:12:49.457257,0.000397,udp,147.32.84.170,59944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:12:51.359679,0.000338,udp,147.32.84.138,40532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:51.420850,0.000305,udp,147.32.84.138,59427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:51.455753,0.000307,udp,147.32.84.138,36167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:51.477893,0.000228,udp,147.32.84.138,40389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:51.527427,1064.346191,udp,147.32.84.138,4444.0,->,147.32.255.255,4464.0,INT,0.0,,87,7047,7047,0,81.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:12:51.528082,1064.346191,udp,147.32.84.138,4444.0,->,147.32.255.255,4517.0,INT,0.0,,87,7047,7047,0,81.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:12:51.528282,1064.346191,udp,147.32.84.138,4444.0,->,147.32.255.255,4536.0,INT,0.0,,87,7047,7047,0,81.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:12:54.183454,0.000192,udp,147.32.84.138,38337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:12:56.668732,0.0002,udp,147.32.84.138,42488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:01.542796,0.000358,udp,147.32.84.138,45200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:05.389946,0.000443,udp,147.32.84.138,46033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:05.438443,0.000318,udp,147.32.84.138,45359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:06.182394,2.94127,tcp,147.32.84.138,40701.0,->,89.167.251.252,80.0,FSPA_FSPA,0.0,0.0,10,1278,680,598,127.8,0.5320813771517997,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:13:12.695087,0.000268,udp,147.32.84.138,46727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:13.465763,0.502665,tcp,147.32.84.170,52977.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:13:13.753202,3424.931396,udp,166.250.64.168,23311.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1222,1102,120,305.5,0.9018003273322422,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:20.022872,0.000236,udp,147.32.84.138,54477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:22.686250,0.000326,udp,147.32.84.138,48075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:25.046830,0.000322,udp,79.45.222.186,29978.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:26.733588,0.000282,udp,147.32.84.138,41947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:26.748427,0.000186,udp,147.32.84.138,56416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:29.460971,0.017991,tcp,147.32.84.170,33426.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:13:33.814880,0.061494,udp,147.32.84.229,13363.0,<->,89.249.173.12,41268.0,CON,0.0,0.0,2,133,72,61,66.5,0.5413533834586466,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:36.750945,1.122574,tcp,90.180.58.10,50377.0,->,147.32.87.54,2222.0,FSPA_FSPA,0.0,0.0,98,6872,3632,3240,70.12244897959184,0.5285215366705471,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:13:37.077911,0.00017,udp,147.32.84.138,45923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:39.223052,0.000294,udp,147.32.84.138,47486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:39.457388,0.000395,udp,147.32.84.170,42930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:13:39.458317,0.000363,udp,147.32.84.170,34963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:13:39.492355,64.506668,tcp,147.32.84.165,4205.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:13:49.458362,0.000364,udp,147.32.84.170,56364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:13:50.574269,0.17015,tcp,147.32.86.20,2873.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:13:50.626692,2479.080566,udp,41.161.56.132,44052.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,2350,1659,691,106.81818181818181,0.7059574468085107,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:51.232674,3325.937256,udp,108.73.93.147,57322.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,584,214,370,97.33333333333333,0.3664383561643836,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:53.665150,0.00031,udp,147.32.84.138,59918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:54.708163,1965.339355,udp,46.70.208.15,26781.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,746,560,186,124.33333333333333,0.7506702412868632,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:13:58.301631,0.000329,udp,147.32.84.138,48325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:58.395366,0.00024,udp,147.32.84.138,43772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:58.429076,0.000258,udp,147.32.84.138,36536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:58.430246,0.000334,udp,147.32.84.138,54434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:58.471739,0.000261,udp,147.32.84.138,55385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:13:59.106407,0.249371,tcp,147.32.84.170,60371.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:14:04.061708,0.000261,udp,147.32.85.34,58254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:07.883355,0.053935,udp,147.32.84.229,13363.0,<->,81.57.187.88,26722.0,CON,0.0,0.0,2,133,72,61,66.5,0.5413533834586466,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:14:09.457500,0.000354,udp,147.32.84.170,37765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:14:10.023159,0.0,tcp,113.105.171.59,80.0,->,147.32.85.17,34935.0,SA_,0.0,,1,66,66,0,66.0,1.0,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:14:13.024188,0.00028,udp,147.32.84.188,58308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:17.006766,0.000193,udp,147.32.84.138,55369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:17.069574,0.000202,udp,147.32.84.138,56362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:18.201789,0.000352,udp,147.32.86.20,64826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:23.890880,0.954326,tcp,147.32.86.20,2902.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,93169,1526,91643,1012.7065217391304,0.01637883845485086,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:14:35.003334,0.00054,udp,147.32.84.138,53593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:37.925341,0.000239,udp,147.32.84.138,55663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:38.006342,0.000264,udp,147.32.84.138,53589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:38.034269,0.000291,udp,147.32.84.138,33711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:38.100507,0.000263,udp,147.32.84.138,33595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:38.105495,0.000217,udp,147.32.84.138,56794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:38.106344,0.000253,udp,147.32.84.138,38753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:41.782728,0.023106,udp,147.32.84.7,56684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,86,208,147.0,0.2925170068027211,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:43.575350,64.206146,tcp,147.32.84.165,4206.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:14:48.448115,0.000134,udp,147.32.84.138,43898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:14:49.458367,0.000314,udp,147.32.84.170,59668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:14:59.459410,0.017831,tcp,147.32.84.170,54357.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:15:12.078979,26.185532,udp,147.32.84.229,13363.0,<->,99.234.64.76,34638.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:15:19.458630,0.000396,udp,147.32.84.170,54287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:15:22.518038,0.000242,udp,147.32.84.138,51025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:27.604483,0.000226,udp,147.32.84.138,54560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:29.459300,0.000271,udp,147.32.84.170,51599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:15:31.619527,2404.676514,udp,88.8.244.171,27029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:15:33.582292,0.04687,tcp,147.32.84.164,48981.0,->,95.140.224.27,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:15:41.349001,1.4e-05,udp,147.32.84.138,33705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:46.250853,0.000165,udp,147.32.85.25,37181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:47.358458,61.254978,tcp,147.32.84.165,4207.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:15:49.458616,0.000385,udp,147.32.84.170,58080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:15:49.460563,0.01797,tcp,147.32.84.170,33444.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:15:51.715910,0.000313,udp,147.32.84.138,44367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:51.720004,0.0004,udp,147.32.84.138,58761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:51.760097,0.000308,udp,147.32.84.138,38815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:51.910470,0.00024,udp,147.32.84.138,45770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:53.339107,0.000261,udp,147.32.84.138,44509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:56.283979,0.000244,udp,147.32.84.138,41419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:15:58.440417,0.032191,udp,112.12.174.190,8090.0,->,147.32.84.114,54220.0,INT,0.0,,3,216,216,0,72.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:16:03.106023,0.000233,udp,147.32.84.170,46360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:11.587994,9.073176,tcp,151.25.225.97,61115.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:16:11.670444,0.000355,udp,147.32.85.25,39530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:19.455159,1514.919678,udp,147.32.84.229,13363.0,<->,213.179.212.123,20345.0,CON,0.0,0.0,10,695,344,351,69.5,0.4949640287769784,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:16:19.457749,0.000336,udp,147.32.84.170,41105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:19.459658,0.018188,tcp,147.32.84.170,54368.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:23.678878,0.000224,udp,147.32.84.138,36900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:23.690830,0.0002,udp,147.32.84.138,45785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:23.730188,0.000206,udp,147.32.84.138,35519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:23.753806,0.000245,udp,147.32.84.138,56681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:23.798054,0.000339,udp,147.32.84.138,53582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:23.825062,0.000242,udp,147.32.84.138,55865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:29.458811,0.000331,udp,147.32.84.170,34210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:29.459885,0.017691,tcp,147.32.84.170,53123.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:39.459724,0.018511,tcp,147.32.84.170,54371.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:43.926326,0.000239,udp,147.32.84.138,49002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:44.973695,0.000311,udp,147.32.84.138,42460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:45.008132,0.000243,udp,147.32.84.138,42901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:45.024321,0.000276,udp,147.32.84.138,54693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:48.195267,61.271416,tcp,147.32.84.165,4208.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:16:48.314309,1793.872192,udp,98.198.5.153,11875.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,437,136,301,109.25,0.3112128146453089,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:16:49.459612,0.018694,tcp,147.32.84.170,46808.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:49.854332,0.000183,udp,147.32.84.138,59870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:16:59.034080,0.012972,tcp,76.164.193.170,80.0,->,147.32.87.102,50246.0,SA_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:16:59.457859,0.000248,udp,147.32.84.170,56121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:16:59.458734,0.000428,udp,147.32.84.170,54929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:04.149021,0.000575,udp,62.85.107.26,34521.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:17:05.107581,0.000181,udp,147.32.84.170,46340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:05.108654,0.2326,tcp,147.32.84.170,36556.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,11,1297,627,670,117.9090909090909,0.48342328450269856,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:07.825105,0.000182,udp,147.32.85.25,39114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:09.457811,0.000395,udp,147.32.84.170,42350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:13.251027,0.000235,udp,147.32.85.25,35720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:18.448825,0.822451,tcp,67.195.112.175,37260.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,23,13963,1216,12747,607.0869565217391,0.0870873021556972,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:17:22.433381,3068.478516,udp,80.110.56.118,13078.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,282,162,120,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:17:37.083500,3547.543457,udp,147.32.84.229,13363.0,<->,79.36.220.185,36548.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:17:48.863977,0.013599,udp,99.110.60.244,58197.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,449,139,310,112.25,0.30957683741648107,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:17:49.042658,61.266319,tcp,147.32.84.165,4209.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:17:49.301498,0.000365,udp,147.32.85.25,46688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:49.457944,0.00056,udp,147.32.84.170,55635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:49.458774,0.000264,udp,147.32.84.170,42039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:49.459722,0.018052,tcp,147.32.84.170,46006.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:17:54.736512,0.000159,udp,147.32.85.25,39589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:58.930480,0.00026,udp,147.32.84.138,50257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:58.942554,0.000304,udp,147.32.84.138,37002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:58.997920,0.000288,udp,147.32.84.138,33720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:59.002953,0.000319,udp,147.32.84.138,54618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:59.008441,0.000254,udp,147.32.84.138,57017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:59.013285,0.000281,udp,147.32.84.138,41382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:59.027538,0.000274,udp,147.32.84.138,51828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:17:59.062963,0.000255,udp,147.32.84.138,53885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:18:01.799827,0.000405,udp,173.35.246.49,21154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:18:04.107668,0.00024,udp,147.32.85.34,58710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:18:05.168422,0.000148,udp,147.32.84.138,38959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:18:05.879170,0.000555,udp,178.3.93.194,39444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:18:07.107363,0.247403,tcp,147.32.84.170,36564.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:13.143973,0.262473,tcp,147.32.84.170,43122.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:13.741854,0.358415,tcp,147.32.84.170,49014.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:14.173478,240.328873,tcp,147.32.84.170,36045.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:19.458019,0.000465,udp,147.32.84.170,44184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:34.292473,0.00034,udp,109.185.113.149,38095.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:18:34.440560,0.000109,udp,147.32.85.56,4193.0,<->,147.32.80.9,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,0,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 00:18:34.824797,1.4e-05,udp,147.32.87.48,3745.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,0,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:18:39.460021,0.01812,tcp,147.32.84.170,46026.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:18:45.271255,0.000368,udp,202.158.25.52,62791.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:18:49.890608,64.188255,tcp,147.32.84.165,4210.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:18:50.397763,0.000183,udp,147.32.86.20,52609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:18:57.892491,10.009509,tcp,222.215.23.19,47585.0,->,147.32.86.73,23.0,SR_,0.0,,2,126,126,0,63.0,1.0,0,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:18:59.336909,0.135786,tcp,147.32.86.20,3146.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:19:02.480489,0.001717,udp,66.68.178.150,54421.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:19:09.101465,0.000295,udp,147.32.84.170,45930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:09.459912,0.018149,tcp,147.32.84.170,46840.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:09.989041,0.000432,udp,190.44.165.69,35073.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:19:20.591603,0.531518,tcp,147.32.3.51,2754.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:19:25.396851,3012.820068,udp,84.237.223.10,54182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,681,145,536,170.25,0.21292217327459617,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:19:29.458991,0.000306,udp,147.32.84.170,47648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:31.457955,0.000263,udp,147.32.84.138,57554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:19:38.717189,0.000268,udp,147.32.84.138,60897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:19:38.734114,0.000198,udp,147.32.85.25,56635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:19:39.357028,0.000467,udp,147.32.84.138,42488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:19:39.459155,0.000393,udp,147.32.84.170,45355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:39.460092,0.000553,udp,147.32.84.170,48647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:40.109689,0.000236,udp,147.32.84.170,55027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:40.634758,2983.472656,udp,147.32.84.229,13363.0,<->,128.91.222.73,7308.0,CON,0.0,0.0,6,3462,3342,120,577.0,0.9653379549393414,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:19:48.396859,0.0,udp,78.128.207.244,52773.0,->,239.255.255.250,1900.0,INT,0.0,,1,406,406,0,406.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:19:49.459100,0.000456,udp,147.32.84.170,35808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:49.461067,0.018421,tcp,147.32.84.170,46035.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:53.655451,61.254368,tcp,147.32.84.165,4211.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:19:59.123073,0.000352,udp,134.151.0.73,2354.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:19:59.460124,0.000325,udp,147.32.84.170,37332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:19:59.461175,0.017886,tcp,147.32.84.170,46846.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:20:01.904349,0.000465,udp,147.32.86.20,50820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:03.891043,0.000303,udp,147.32.85.34,55688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:03.913179,0.000275,udp,147.32.85.34,64420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:03.916483,0.000214,udp,147.32.85.34,49937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:03.929955,0.000236,udp,147.32.85.34,59389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:04.134610,0.000153,udp,147.32.84.138,57882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:04.341528,0.134871,tcp,147.32.86.20,3202.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:20:11.977880,0.000195,udp,147.32.84.138,57112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:12.146878,0.000293,udp,147.32.84.138,55792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:12.192851,0.008342,icmp,147.32.86.92,8.0,<->,209.85.148.106,10307.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,0,0,flow=Background,Background,-1 2011-08-17 00:20:22.180821,0.000293,udp,147.32.84.59,60943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:23.028422,0.000325,udp,147.32.86.20,53830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:23.364030,3038.839355,udp,209.163.183.114,50721.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:20:39.459037,0.009994,udp,147.32.84.170,43009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:20:42.106814,0.00034,udp,147.32.84.170,54570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:20:49.459025,0.000447,udp,147.32.84.170,41323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:20:51.649102,0.000281,udp,147.32.84.138,58077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:20:54.491550,61.256313,tcp,147.32.84.165,4212.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:21:05.477808,0.000233,udp,147.32.84.138,41253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:06.206993,3570.554443,tcp,147.32.84.229,13363.0,,91.142.63.134,1048.0,PA_PA,0.0,0.0,250,24314,9744,14570,97.256,0.4007567656494201,0,0,flow=Background,Background,-1 2011-08-17 00:21:09.460453,0.000312,udp,147.32.84.170,44841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:21:10.968848,0.000373,udp,147.32.86.20,59104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:13.107930,0.249502,tcp,147.32.84.170,36602.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:21:19.907251,0.309615,tcp,147.32.86.20,3267.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:21:21.211681,0.000415,udp,147.32.84.138,34169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.220706,0.000282,udp,147.32.84.138,59345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.229594,0.000309,udp,147.32.84.138,45124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.242891,0.000239,udp,147.32.84.138,60047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.245361,0.00027,udp,147.32.84.138,53229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.285834,0.000231,udp,147.32.84.138,49288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:21.297323,0.000326,udp,147.32.84.138,39970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:23.578284,2908.838379,udp,147.32.84.229,13363.0,<->,62.122.105.248,55857.0,CON,0.0,0.0,6,3484,3364,120,580.6666666666666,0.965556831228473,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:21:24.589797,0.469227,tcp,147.32.3.51,2762.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:21:31.813030,207.843109,udp,178.9.119.110,49456.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2338,374,1964,233.8,0.15996578272027373,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:21:32.268980,0.000186,udp,147.32.84.138,57187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:37.505572,6.056936,udp,147.32.84.229,13363.0,->,109.227.112.45,22604.0,INT,0.0,,3,540,540,0,180.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:21:44.111203,0.000357,udp,147.32.84.170,47785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:21:49.460276,0.000449,udp,147.32.84.170,39590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:21:55.329540,61.273323,tcp,147.32.84.165,4213.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:21:56.956305,3583.002197,udp,147.32.87.53,520.0,->,224.0.0.9,520.0,REQ,0.0,,130,21580,21580,0,166.0,1.0,0,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:21:58.944751,0.00033,udp,147.32.84.186,59020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:21:59.506293,0.027238,udp,147.32.84.229,13363.0,<->,109.107.79.9,16881.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:02.042427,0.00024,udp,147.32.84.138,47942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:22:03.770742,0.000247,udp,147.32.85.34,51465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:22:06.801659,0.077662,udp,147.32.84.229,13363.0,<->,217.67.113.64,38965.0,CON,0.0,0.0,2,1559,212,1347,779.5,0.13598460551635663,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:07.163946,0.000319,udp,80.143.63.202,61195.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,512,452,60,256.0,0.8828125,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:12.294743,2480.766357,udp,77.79.60.100,4963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1324,840,484,132.4,0.6344410876132931,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:24.316345,3046.723145,udp,92.162.158.204,37851.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1440,1068,372,120.0,0.7416666666666667,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:24.666563,0.001631,udp,86.27.32.175,14906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:29.417428,0.000155,udp,147.32.84.138,34079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:22:29.462399,0.000388,udp,147.32.84.170,44043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:22:29.463428,0.018008,tcp,147.32.84.170,59380.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:22:32.224144,0.000313,udp,147.32.86.20,63327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:22:37.967580,549.454102,udp,147.32.84.229,13363.0,->,188.27.71.170,62804.0,INT,0.0,,21,1554,1554,0,74.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:22:40.155790,6.973886,tcp,78.154.205.96,52059.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:22:42.584962,0.000179,udp,147.32.84.138,42260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:22:46.724205,141.024582,udp,149.5.45.4,43061.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,567,443,124,141.75,0.781305114638448,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:54.147662,0.000367,udp,125.197.244.251,52582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:55.157591,0.000319,udp,75.182.48.212,21541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:22:56.178938,61.271336,tcp,147.32.84.165,4214.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:22:59.460601,0.00039,udp,147.32.84.170,36323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:22:59.461855,0.000298,udp,147.32.84.170,57849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:07.983726,0.000367,udp,187.144.50.224,18949.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:23:09.460609,0.000455,udp,147.32.84.170,42856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:13.142537,0.247735,tcp,147.32.84.170,51794.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:13.382797,0.298019,tcp,147.32.84.170,51795.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:13.872177,0.348537,tcp,147.32.84.170,59398.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:14.212872,0.236415,tcp,147.32.84.170,59399.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:16.042793,0.000305,udp,147.32.84.138,52704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:17.108827,0.000441,udp,147.32.84.170,38757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:17.687571,0.000278,udp,147.32.84.138,55031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:17.692563,0.000292,udp,147.32.84.138,47669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:17.706999,0.000223,udp,147.32.84.138,46158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:19.461513,0.000282,udp,147.32.84.170,56426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:23.121451,0.001784,udp,71.75.228.199,11846.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:23:25.275609,9e-05,udp,147.32.84.138,59783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:29.461309,0.000452,udp,147.32.84.170,54876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:34.640514,0.000573,udp,120.28.204.215,10825.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:23:35.505445,8.888666,tcp,186.252.71.146,52214.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,312,78,234,78.0,0.25,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:23:39.461350,0.00044,udp,147.32.84.170,47691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:44.477411,0.000226,udp,147.32.84.138,57925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:49.461589,0.000308,udp,147.32.84.170,57021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:49.462573,0.018734,tcp,147.32.84.170,59397.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:23:51.407521,0.000183,udp,147.32.84.138,49644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:52.292764,2458.900146,udp,149.13.32.101,33033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,6760,6454,306,482.85714285714283,0.9547337278106509,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:23:53.026176,0.000261,udp,147.32.84.138,47991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:53.029748,0.000425,udp,147.32.84.138,51042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:53.046910,0.000303,udp,147.32.84.138,49069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:23:57.027406,74.206772,tcp,147.32.84.165,4215.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,13,1260,621,639,96.92307692307692,0.4928571428571429,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:23:58.804540,0.000418,udp,147.32.84.170,48555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:00.212927,0.004208,udp,74.176.210.83,50225.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:06.573634,0.000264,udp,147.32.84.138,52136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:06.655638,0.000263,udp,147.32.84.138,41792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:06.662183,0.000324,udp,147.32.84.138,41264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:06.681982,0.000255,udp,147.32.84.138,52684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:09.460704,0.000461,udp,147.32.84.170,55618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:19.109127,0.000284,udp,147.32.84.170,59265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:19.145083,3371.745117,udp,147.32.84.229,13363.0,<->,89.11.136.219,49945.0,CON,0.0,0.0,8,1996,310,1686,249.5,0.15531062124248496,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:19.461626,0.000299,udp,147.32.84.170,40186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:20.134707,0.000174,udp,147.32.84.138,47286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:20.229471,0.000209,udp,147.32.84.138,47316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:20.236726,0.00021,udp,147.32.84.138,56585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:20.917270,0.173986,udp,147.32.84.229,13363.0,<->,76.17.47.123,61365.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:23.413560,0.000487,udp,84.112.44.55,61246.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:25.496138,7e-05,udp,147.32.84.138,51497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:30.293482,0.000154,udp,147.32.84.138,41616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:30.301836,0.000189,udp,147.32.84.138,49364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:30.594921,0.000302,udp,147.32.84.138,50542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:30.760880,0.00027,udp,147.32.84.138,52488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:31.753253,0.167885,udp,147.32.84.229,13363.0,<->,70.112.142.142,29728.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:41.345970,2549.691162,udp,77.21.50.53,37645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5919,120,5799,739.875,0.02027369488089204,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:44.977752,0.000336,udp,147.32.84.138,60836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:46.415993,0.350031,udp,147.32.84.229,13363.0,<->,114.40.147.23,34885.0,CON,0.0,0.0,2,540,75,465,270.0,0.1388888888888889,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:24:49.460988,0.000182,udp,147.32.84.170,36850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:50.108659,0.000397,udp,147.32.84.170,49385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:50.110030,0.236511,tcp,147.32.84.170,38655.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:24:53.086769,0.000334,udp,147.32.84.138,49697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:53.097858,0.000317,udp,147.32.84.138,33658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:53.139228,0.000392,udp,147.32.84.138,50053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:53.178545,0.000204,udp,147.32.84.138,57202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:24:59.462801,0.01801,tcp,147.32.84.170,44837.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:06.697048,661.611572,udp,147.32.84.229,13363.0,<->,88.160.50.207,21855.0,CON,0.0,0.0,5,601,459,142,120.2,0.7637271214642263,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:07.678595,61.255692,tcp,147.32.84.165,4216.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:25:08.834832,3092.489014,udp,108.65.76.185,50878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,670,370,300,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:09.462629,0.018227,tcp,147.32.84.170,45642.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:14.365003,0.000227,udp,147.32.84.138,54012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:14.598148,0.000287,udp,147.32.85.25,43821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:14.768364,0.000256,udp,147.32.84.138,49347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:15.861045,0.009938,udp,147.32.84.68,49427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:16.960525,0.00021,udp,147.32.84.138,60307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:18.400850,0.000203,udp,147.32.84.138,37771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:18.450009,0.000392,udp,147.32.84.138,42410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:19.461956,0.000366,udp,147.32.84.170,33894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:19.962191,0.000281,udp,147.32.85.25,48843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:21.036629,0.000585,udp,202.156.92.188,58090.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:21.102156,0.000294,udp,147.32.84.170,34061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:21.103399,0.23955,tcp,147.32.84.170,38659.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:24.265104,0.0004,udp,85.180.165.157,55022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:24.814190,0.000241,udp,202.103.52.143,5060.0,->,147.32.85.125,5060.0,INT,0.0,,1,452,452,0,452.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:25:34.171133,0.000343,udp,75.80.231.22,39124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:41.028490,0.003965,udp,196.217.155.51,64598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2971,60,2911,742.75,0.02019522046449007,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:48.223371,2558.5625,udp,90.180.69.101,31853.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:25:49.460861,0.00039,udp,147.32.84.170,41258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:49.462875,0.018329,tcp,147.32.84.170,59422.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:25:51.089121,0.00017,udp,147.32.85.25,43972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:56.225101,0.000393,udp,147.32.85.25,44643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:25:59.461019,0.000411,udp,147.32.84.170,41705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:26:02.942093,0.090125,tcp,147.32.86.96,34168.0,->,147.32.87.51,12489.0,_FSPA,,0.0,8,584,0,584,73.0,0.0,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:26:03.650689,0.000345,udp,147.32.85.34,49155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:03.716222,0.000275,udp,147.32.85.34,64713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:08.516518,61.271263,tcp,147.32.84.165,4217.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:26:09.460710,0.000324,udp,147.32.84.170,46378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:26:09.461558,0.00032,udp,147.32.84.170,51058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:26:11.158930,0.000188,udp,147.32.84.138,38270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:11.395785,0.000242,udp,147.32.85.25,54460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:14.300773,56.279858,tcp,60.248.150.212,80.0,->,147.32.84.55,61778.0,SA_R,0.0,0.0,6,360,180,180,60.0,0.5,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:26:18.937408,2566.404297,udp,78.60.169.233,47367.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:22.600839,29.213963,tcp,140.247.83.111,34011.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,50,37664,1975,35689,753.28,0.05243734069668649,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:26:23.177396,0.16503,udp,147.32.84.229,13363.0,<->,98.127.193.222,22266.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:25.499970,0.000187,udp,147.32.84.138,42383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:28.001827,0.000305,udp,147.32.84.184,42199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:39.374812,0.000627,udp,93.147.78.110,12743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,297,235,62,148.5,0.7912457912457912,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:44.540489,0.000365,udp,1.66.99.154,49053.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,155,89,66,77.5,0.5741935483870968,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:48.184316,5.965832,tcp,66.249.72.35,51356.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1138,694,444,113.8,0.6098418277680141,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:26:49.461882,0.000433,udp,147.32.84.170,38602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:26:51.235091,0.000461,udp,212.15.180.124,51763.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:54.108769,0.00043,udp,147.32.84.170,57661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:26:56.424540,0.000328,udp,147.32.84.138,53422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:26:56.902323,0.000504,udp,99.250.16.214,17404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,155,89,66,77.5,0.5741935483870968,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:26:59.461052,0.000465,udp,147.32.84.170,49354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:09.364310,61.256203,tcp,147.32.84.165,4218.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:27:09.461137,0.00051,udp,147.32.84.170,35160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:09.462223,0.000489,udp,147.32.84.170,33378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:17.963748,0.000638,udp,24.52.35.185,12309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:18.281880,0.000513,udp,112.135.57.28,1026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:18.585937,0.000224,udp,147.32.84.138,45866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:27:19.461106,0.000444,udp,147.32.84.170,40980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:22.161587,3479.71582,udp,190.190.125.154,34312.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,665,365,300,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:23.983399,2.000015,udp,186.109.82.223,41995.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:25.111270,0.000281,udp,147.32.84.170,53555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:25.113226,0.382272,tcp,147.32.84.170,53080.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:27:25.685982,3042.181396,udp,87.198.219.215,34240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:25.775285,0.000421,udp,147.32.84.138,42375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:27:32.061550,0.000247,udp,147.32.84.138,58413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:27:37.152165,1321.701538,udp,89.249.171.138,58162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1275,1095,180,212.5,0.8588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:38.608666,0.000283,udp,147.32.85.25,35180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:27:39.840258,20.910583,udp,69.149.105.29,37084.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1223,1043,180,203.83333333333334,0.8528209321340965,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:42.985982,0.004584,udp,173.238.24.160,5344.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2976,60,2916,744.0,0.020161290322580645,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:43.874925,0.003265,udp,95.155.56.10,22457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2976,60,2916,744.0,0.020161290322580645,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:27:56.109754,0.238965,tcp,147.32.84.170,53084.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:00.651066,9.826821,tcp,72.14.199.153,43614.0,->,147.32.84.75,80.0,FSPA_FSPA,0.0,0.0,42,26113,1761,24352,621.7380952380952,0.06743767472140313,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:28:02.472400,59.772118,tcp,187.35.85.107,51611.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,25,4278,1950,2328,171.12,0.45582047685834504,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:28:03.029284,0.000355,udp,147.32.84.138,44917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:04.546923,0.00024,udp,147.32.85.34,59719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:05.434789,0.000208,udp,147.32.84.138,46538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:05.466808,0.000284,udp,147.32.84.138,39648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:05.497499,0.000333,udp,147.32.84.138,44873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:05.542246,0.000299,udp,147.32.84.138,59308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:07.506632,0.00025,udp,147.32.84.138,38703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:07.557233,0.000366,udp,147.32.84.138,40638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.408203,0.000195,udp,147.32.84.138,41685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.455913,0.000354,udp,147.32.84.138,44644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.463340,0.018202,tcp,147.32.84.170,42953.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:09.473984,0.000276,udp,147.32.84.138,46588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.479822,0.000333,udp,147.32.84.138,60596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.504080,0.000317,udp,147.32.84.138,57345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:09.528663,0.000327,udp,147.32.84.138,44190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:10.202583,61.270023,tcp,147.32.84.165,4219.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:28:11.629616,0.000414,udp,147.32.84.138,39497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.638767,0.000262,udp,147.32.84.138,46102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.643572,0.00024,udp,147.32.84.138,44797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.678156,0.000214,udp,147.32.84.138,45130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.717727,0.000195,udp,147.32.84.138,50249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.732569,0.000263,udp,147.32.84.138,38289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:11.765244,0.000317,udp,147.32.84.138,48174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:13.668527,0.317671,tcp,147.32.84.170,48089.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:14.127473,0.346039,tcp,147.32.84.170,57726.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:14.175927,0.000228,udp,147.32.84.170,33868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:14.177560,465.493103,tcp,147.32.84.170,52709.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,99,37460,27505,9955,378.3838383838384,0.7342498665242926,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:14.177684,240.048218,tcp,147.32.84.170,52712.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:14.275147,0.000228,udp,147.32.84.138,53718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:14.361071,0.000312,udp,147.32.84.138,47448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:16.912671,0.000224,udp,147.32.84.138,47905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:16.959775,0.000194,udp,147.32.84.138,52630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:16.995122,0.000199,udp,147.32.84.138,47495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:19.463098,0.019115,tcp,147.32.84.170,42966.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:19.481576,0.000322,udp,147.32.84.138,60668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:19.718017,3176.346436,udp,147.32.84.229,13363.0,<->,24.90.31.59,29898.0,CON,0.0,0.0,12,1446,1074,372,120.5,0.7427385892116183,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:28:20.009405,3412.06665,udp,85.176.41.18,25149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2160,1540,620,108.0,0.7129629629629629,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:28:21.928986,0.000156,udp,147.32.84.138,57929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:22.058227,0.000194,udp,147.32.84.138,42175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:22.101315,0.000224,udp,147.32.84.138,43800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:24.694261,0.000277,udp,147.32.84.138,37998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:24.727745,0.000149,udp,147.32.84.138,40938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:27.336727,0.000332,udp,147.32.84.138,36432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:27.370016,0.00039,udp,147.32.84.138,39712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:27.390542,0.00025,udp,147.32.84.138,52721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:29.549036,0.000387,udp,147.32.84.138,41837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:29.747858,0.000306,udp,147.32.84.138,51125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:29.778693,0.00029,udp,147.32.84.138,35302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:31.539700,0.000218,udp,147.32.84.138,56421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:33.432540,0.000207,udp,147.32.84.138,38838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:35.313471,0.000231,udp,147.32.84.138,59637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:35.345529,0.000279,udp,147.32.84.138,54037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:35.347359,0.000199,udp,147.32.84.138,43351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:37.263158,0.000221,udp,147.32.84.138,60670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:37.317400,0.000215,udp,147.32.84.138,57032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:39.196134,0.000292,udp,147.32.84.138,46479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:39.217502,0.000318,udp,147.32.84.138,37007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:39.227808,0.000264,udp,147.32.84.138,58525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:39.478718,0.000223,udp,147.32.85.25,41634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:39.769516,0.00033,udp,147.32.84.59,54628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:42.626966,3021.73584,udp,95.62.6.98,45869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1404,1032,372,117.0,0.7350427350427351,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:28:42.838661,0.000275,udp,147.32.84.138,56497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:42.879614,0.000324,udp,147.32.84.138,43578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:42.889648,0.000326,udp,147.32.84.138,47008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:42.957671,0.000357,udp,147.32.84.138,41081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:43.427042,0.000292,udp,147.32.84.138,45154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:44.665100,0.000212,udp,147.32.84.138,34763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:44.744083,0.000279,udp,147.32.84.138,38034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:45.402031,0.00027,udp,147.32.84.138,43005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:46.669480,0.00032,udp,147.32.84.138,46041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:46.718303,0.000332,udp,147.32.84.138,57141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:47.745860,0.000364,udp,93.174.243.242,36272.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:28:48.677221,0.000193,udp,147.32.84.138,38202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:48.680674,0.000247,udp,147.32.84.138,58766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:48.751913,7.8e-05,udp,147.32.84.138,46920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:48.769203,0.000341,udp,147.32.84.138,48047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:49.207933,0.000305,udp,147.32.84.138,32850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:50.739053,0.000261,udp,147.32.84.138,46998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:50.786172,0.000358,udp,147.32.84.138,41987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:50.804114,0.000121,udp,147.32.84.138,41957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:50.807072,0.000208,udp,147.32.84.138,47933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:52.677877,0.00022,udp,147.32.84.138,41580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:52.682284,0.000444,udp,147.32.84.138,45596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:52.718302,0.000361,udp,147.32.84.138,38099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:52.718993,0.000299,udp,147.32.84.138,56672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:53.699007,9.063617,tcp,2.212.103.165,1594.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,600,234,366,75.0,0.39,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:28:54.746597,0.00043,udp,147.32.84.138,33075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:54.755324,0.000317,udp,147.32.84.138,46671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:54.755986,0.000283,udp,147.32.84.138,33967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:54.822205,0.000198,udp,147.32.84.138,39674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:54.823664,0.000247,udp,147.32.84.138,47637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:54.850645,0.000291,udp,147.32.84.138,55027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:56.884044,0.000279,udp,147.32.84.138,56977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:56.901081,0.00027,udp,147.32.84.138,57108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:56.943783,0.000252,udp,147.32.84.138,38100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:56.972380,0.000313,udp,147.32.84.138,59160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:56.989898,0.000272,udp,147.32.84.138,45854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:58.109522,0.000258,udp,147.32.84.170,49233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:58.111647,0.242244,tcp,147.32.84.170,53104.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:58.752812,0.000222,udp,147.32.84.138,32803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:28:59.461441,0.000333,udp,147.32.84.170,55975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:28:59.462325,0.000229,udp,147.32.84.170,53943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:00.774398,0.000269,udp,147.32.84.138,50720.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:00.822595,0.000331,udp,147.32.84.138,59271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:02.814939,0.000202,udp,147.32.84.138,39496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:02.820729,0.000187,udp,147.32.84.138,35354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:04.915500,0.00028,udp,147.32.84.138,54659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:04.988705,0.000294,udp,147.32.85.25,49472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:05.009920,0.000287,udp,147.32.84.138,55318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:05.611811,0.395526,udp,147.32.84.59,51378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,85,205,145.0,0.29310344827586204,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:06.976046,0.000218,udp,147.32.84.138,58368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:07.008469,0.000351,udp,147.32.84.138,60771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:07.019481,0.000329,udp,147.32.84.138,45495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:09.461138,0.000403,udp,147.32.84.170,39823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:09.462016,0.000391,udp,147.32.84.170,48989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:11.049473,70.509628,tcp,147.32.84.165,4220.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:29:11.154375,0.000344,udp,147.32.84.138,51569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:11.162117,0.000222,udp,147.32.84.138,35804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:11.165904,0.000213,udp,147.32.84.138,55519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:11.231310,0.000247,udp,147.32.84.138,55073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:11.587041,61.870579,tcp,147.32.84.59,8883.0,->,66.220.146.50,443.0,SRPA_SPA,0.0,0.0,16,6288,1220,5068,393.0,0.1940203562340967,0,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 00:29:13.210844,0.000362,udp,147.32.84.138,38198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:13.216345,0.000323,udp,147.32.84.138,38144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:13.273956,0.000187,udp,147.32.84.138,45533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:13.335211,0.000218,udp,147.32.84.138,43891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:14.460021,0.884409,tcp,147.32.86.20,3687.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,94,93447,1646,91801,994.1170212765958,0.01761426263015399,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:29:15.308974,0.000299,udp,147.32.84.138,42573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:15.321292,0.000257,udp,147.32.84.138,49848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:15.355465,0.000328,udp,147.32.84.138,57937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:15.361536,0.000331,udp,147.32.84.138,55664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:17.042791,0.000231,udp,147.32.84.138,41148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:17.334947,0.000482,udp,108.194.46.186,42108.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:29:17.346175,0.000238,udp,147.32.84.138,48310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:17.423586,0.000246,udp,147.32.84.138,60385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:17.438359,0.000212,udp,147.32.84.138,54650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:18.998831,0.000447,udp,147.32.84.138,49802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:19.424520,0.000221,udp,147.32.84.138,57548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:19.461356,0.000321,udp,147.32.84.170,48893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:19.463435,0.017681,tcp,147.32.84.170,42974.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:20.830582,0.0003,udp,147.32.84.138,33501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:21.415896,0.000208,udp,147.32.84.138,59839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:21.421638,0.000218,udp,147.32.84.138,57947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:21.426247,0.000298,udp,147.32.84.138,40838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:21.502467,0.000345,udp,147.32.84.138,36625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:23.431889,0.000222,udp,147.32.84.138,38001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:23.523731,0.000264,udp,147.32.84.138,34124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:23.524729,0.000493,udp,147.32.84.138,41671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:25.344987,0.167298,udp,147.32.84.229,13363.0,<->,173.173.124.170,13034.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:29:25.389408,3349.136963,udp,68.228.136.92,27600.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2175,303,1872,271.875,0.1393103448275862,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:29:25.472107,0.000281,udp,147.32.84.138,43956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:25.554656,0.000301,udp,147.32.84.138,45280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:27.446934,0.000323,udp,147.32.84.138,60569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:27.451168,0.000252,udp,147.32.84.138,49931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:27.501990,0.000263,udp,147.32.84.138,43259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:27.515346,0.000231,udp,147.32.84.138,42462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:29.124870,0.000355,udp,147.32.84.170,39088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:29.334400,0.000297,udp,147.32.84.138,54323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:29.461322,0.000394,udp,147.32.84.170,42538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:29.463110,0.017901,tcp,147.32.84.170,58919.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:31.328078,0.000165,udp,147.32.84.138,41070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:33.583264,0.000201,udp,147.32.84.138,45378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:33.637320,0.000201,udp,147.32.84.138,55910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:33.645534,0.000234,udp,147.32.84.138,53874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:33.648785,0.000229,udp,147.32.84.138,49885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:33.678931,0.000229,udp,147.32.84.138,43997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:35.421257,0.000205,udp,147.32.85.25,33409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:36.118500,0.000404,udp,147.32.84.59,60871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,359,85,274,179.5,0.23676880222841226,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:36.135078,0.000278,udp,147.32.84.138,46671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:36.164012,0.000197,udp,147.32.84.138,38666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:36.303075,0.000254,udp,147.32.84.138,35667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:36.309180,0.000311,udp,147.32.84.138,49783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:38.630123,0.000343,udp,147.32.84.138,56978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:38.683700,0.000327,udp,147.32.84.138,58886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:38.699782,0.000233,udp,147.32.84.138,45488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:39.462044,0.000476,udp,147.32.84.170,57922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:40.490817,0.000286,udp,147.32.85.25,58511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:40.929812,0.000482,udp,183.74.1.236,48528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:29:41.101824,0.000193,udp,147.32.84.138,58394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:41.147604,0.000256,udp,147.32.84.138,33100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:43.652319,0.000301,udp,147.32.84.138,32912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:45.874913,0.000315,udp,147.32.84.138,34634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:45.880966,0.000251,udp,147.32.84.138,54119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:45.933428,0.000214,udp,147.32.84.138,55946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:46.190106,0.000292,udp,147.32.84.138,52896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:48.380152,0.000253,udp,147.32.84.138,43049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:48.418623,0.000406,udp,147.32.84.138,55765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:48.517849,0.00032,udp,147.32.84.138,59962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:49.461866,0.000389,udp,147.32.84.170,41016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:50.718064,0.000236,udp,147.32.84.138,53157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:50.735312,0.000229,udp,147.32.84.138,39594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:50.758303,0.000223,udp,147.32.84.138,58537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:51.199435,0.000212,udp,147.32.84.138,38974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:53.057232,0.000334,udp,68.229.66.227,29698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:29:55.858320,0.000199,udp,147.32.84.138,39955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:58.754746,0.000195,udp,147.32.84.138,50392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:58.760985,0.000325,udp,147.32.84.138,55639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:58.859596,0.000343,udp,147.32.84.138,36758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:58.887500,0.000282,udp,147.32.84.138,39103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:29:59.463274,0.018444,tcp,147.32.84.170,57847.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:29:59.466368,0.000166,udp,147.32.84.138,34391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:00.099387,0.000243,udp,147.32.84.170,34138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:30:00.100525,0.278334,tcp,147.32.84.170,53113.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:30:01.350242,0.000289,udp,147.32.87.36,51167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,0,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 00:30:01.666037,0.000225,udp,147.32.87.36,40620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,0,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 00:30:01.819040,0.000299,udp,147.32.84.138,44365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:02.088912,0.000212,udp,147.32.84.138,46077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:02.130917,0.000306,udp,147.32.84.138,41393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:02.145253,0.000205,udp,147.32.84.138,58830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:02.148898,0.000323,udp,147.32.84.138,60046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:04.364056,0.000291,udp,147.32.85.34,51240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:04.839329,0.0,tcp,162.10.0.154,14398.0,?>,147.32.84.229,13363.0,R_,0.0,,1,60,60,0,60.0,1.0,0,0,flow=Background,Background,-1 2011-08-17 00:30:05.239385,0.000284,udp,147.32.84.138,34832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:05.648959,0.000264,udp,147.32.86.20,56950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:08.423511,0.000239,udp,147.32.84.138,53904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:08.493102,0.000309,udp,147.32.84.138,51015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:08.506565,0.000462,udp,89.223.41.102,26423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:30:08.829134,0.00029,udp,147.32.84.138,56890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:09.463059,0.018047,tcp,147.32.84.170,57849.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:30:10.923206,0.000187,udp,147.32.84.138,59493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:10.959736,0.00028,udp,147.32.84.138,33356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:10.962547,0.000365,udp,147.32.84.138,60076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:11.336279,0.17021,tcp,147.32.86.20,3737.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,71030,1571,69459,959.8648648648649,0.022117415176685907,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:30:12.470303,0.008335,icmp,147.32.86.92,8.0,<->,209.85.148.106,16713.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,0,0,flow=Background,Background,-1 2011-08-17 00:30:13.156494,0.000152,udp,147.32.84.138,34577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:13.287012,0.000356,udp,147.32.84.138,45312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:15.448740,0.000393,udp,147.32.84.138,58363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:15.466632,0.000199,udp,147.32.84.138,44176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:15.532685,0.000222,udp,147.32.84.138,56493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:17.470060,3050.829102,udp,89.29.88.158,47537.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,687,501,186,114.5,0.7292576419213974,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:30:19.899149,0.000264,udp,147.32.84.138,53913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:19.900784,0.00034,udp,147.32.84.138,32785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:20.442580,2664.833008,udp,147.32.84.229,13363.0,->,88.83.74.40,44575.0,INT,0.0,,15,2625,2625,0,175.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:30:21.085144,0.000506,udp,147.32.86.20,51368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:21.140877,61.256432,tcp,147.32.84.165,4221.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:30:21.763605,0.000426,udp,147.32.84.138,56578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:21.810413,0.000322,udp,147.32.84.138,33038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:21.822838,0.000272,udp,147.32.84.138,47301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:21.882792,0.000302,udp,147.32.84.138,56734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:23.663199,0.000296,udp,147.32.84.138,53940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:23.670558,0.000516,udp,147.32.84.138,47198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:23.673700,0.000291,udp,147.32.84.138,37909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:24.984431,0.000271,udp,147.32.84.138,49539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:25.512586,0.000163,udp,147.32.84.138,39355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:25.515430,0.000416,udp,147.32.84.138,45971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:25.536515,0.000261,udp,147.32.84.138,48062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:25.588844,0.00021,udp,147.32.84.138,35064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:26.599267,0.001667,udp,201.209.189.157,18416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:30:28.254570,0.000363,udp,147.32.84.138,60005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:28.269709,0.000228,udp,147.32.84.138,50445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:28.274065,0.000198,udp,147.32.84.138,33899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:28.277726,0.00032,udp,147.32.84.138,45066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:28.278819,0.000306,udp,147.32.84.138,45303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:28.369326,0.000377,udp,147.32.84.138,54074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:29.215360,0.000701,udp,77.20.239.188,46953.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,77,478,277.5,0.13873873873873874,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:30:29.461345,0.000345,udp,147.32.84.170,46768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:30:29.966515,0.000265,udp,147.32.84.138,32906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:30.224041,0.000388,udp,147.32.84.138,33647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:33.577800,0.000465,udp,113.190.139.202,10634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:30:35.781757,0.000215,udp,147.32.84.138,54574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:30:37.988436,0.0,igmp,147.32.87.3,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,0,,flow=Background,Background,-1 2011-08-17 00:30:39.483053,0.000319,udp,147.32.84.170,46951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:30:42.777348,0.000367,udp,147.32.85.25,34246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:01.558627,0.000278,udp,147.32.84.79,57558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:02.124462,0.000343,udp,147.32.84.170,34561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:02.125818,0.292362,tcp,147.32.84.170,53121.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:05.329198,0.000663,udp,147.32.84.171,52353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:09.463521,0.01805,tcp,147.32.84.170,57857.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:09.840112,0.000394,udp,147.32.86.20,63400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:18.773967,0.000315,udp,147.32.86.20,49738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:21.979356,61.257164,tcp,147.32.84.165,4222.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:31:29.169839,0.000258,udp,147.32.85.25,36684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:29.463708,0.018203,tcp,147.32.84.170,42991.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:33.108116,0.000253,udp,147.32.84.170,60112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:33.110448,0.281287,tcp,147.32.84.170,53125.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:35.221967,0.0004,udp,147.32.85.34,60576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:35.963700,0.144933,udp,147.32.84.229,13363.0,<->,97.81.59.131,57829.0,CON,0.0,0.0,2,311,66,245,155.5,0.21221864951768488,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:31:39.462640,0.00034,udp,147.32.84.170,43199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:49.463562,0.018044,tcp,147.32.84.170,59943.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:53.733871,0.000441,udp,97.75.172.122,35818.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:31:57.818820,0.340729,udp,147.32.84.138,56852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,77,190,133.5,0.2883895131086142,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:31:59.461581,0.000269,udp,147.32.84.170,57497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:31:59.462349,0.000288,udp,147.32.84.170,54986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:01.665504,0.000269,udp,147.32.84.138,41796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:04.108824,0.00023,udp,147.32.84.170,51011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:04.174803,0.000175,udp,147.32.85.34,52074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:04.191298,0.000207,udp,147.32.85.34,51678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:04.225288,0.000196,udp,147.32.85.34,61450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:04.229659,0.000208,udp,147.32.85.34,62566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:09.463679,0.017983,tcp,147.32.84.170,59946.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:11.286732,0.000503,udp,108.38.201.203,20261.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:32:17.054547,0.000233,udp,147.32.84.138,54564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:19.463838,0.018181,tcp,147.32.84.170,38963.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:22.817726,61.269592,tcp,147.32.84.165,4223.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:32:23.578841,1.641584,tcp,67.195.115.95,35591.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,172,157930,4687,153243,918.1976744186046,0.029677705312480214,0,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 00:32:27.529285,0.000258,udp,147.32.84.138,41952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:29.461491,0.000543,udp,147.32.84.170,35454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:29.523129,3038.484619,udp,190.213.149.97,22888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1623,228,1395,270.5,0.14048059149722736,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:32:33.658959,0.000215,udp,147.32.84.138,40986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:35.110016,0.000242,udp,147.32.84.170,39781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:35.112127,0.270038,tcp,147.32.84.170,58994.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:32:35.186955,0.069607,udp,147.32.84.229,13363.0,<->,89.100.54.230,25892.0,CON,0.0,0.0,4,2945,60,2885,736.25,0.02037351443123939,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:32:38.766875,0.00038,udp,95.247.81.252,28140.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:32:48.740585,0.000176,udp,147.32.84.138,32791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:53.167706,0.000256,udp,147.32.84.59,39374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:57.247680,0.000249,udp,147.32.85.25,55445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:57.320193,0.000185,udp,147.32.85.25,45606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:32:59.464013,0.017925,tcp,147.32.84.170,38968.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:13.387255,0.261278,tcp,147.32.84.170,41088.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:13.435739,0.252857,tcp,147.32.84.170,44904.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:13.640516,0.272391,tcp,147.32.84.170,41090.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:20.940220,0.001569,udp,111.240.207.232,37810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:33:23.664309,61.25663,tcp,147.32.84.165,4224.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:33:26.870455,0.000139,udp,147.32.84.188,57139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:33:29.461717,0.000304,udp,147.32.84.170,57325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:29.462518,0.000305,udp,147.32.84.170,33476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:39.463930,0.018097,tcp,147.32.84.170,59964.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:33:53.634817,6.020127,udp,147.32.84.229,13363.0,->,178.122.102.23,16887.0,INT,0.0,,3,234,234,0,78.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:33:57.574046,0.000199,udp,147.32.84.138,44776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:33:59.462285,0.000429,udp,147.32.84.170,33997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:01.108885,0.179866,udp,147.32.84.229,13363.0,<->,205.147.32.125,13615.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:02.128321,0.206631,tcp,147.32.86.20,3941.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:34:02.708102,0.000154,udp,147.32.85.34,55763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:34:04.101091,0.000351,udp,147.32.85.34,55251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:34:04.958874,0.00049,udp,71.209.35.57,59801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,75,489,282.0,0.13297872340425532,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:08.111093,0.265705,tcp,147.32.84.170,59012.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:13.562864,0.000339,udp,147.32.85.25,52284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:34:16.088328,0.339681,udp,147.32.84.229,13363.0,<->,111.253.216.99,15335.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:19.463850,0.018249,tcp,147.32.84.170,59969.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:22.182450,6.007148,icmp,62.69.205.162,259.0,->,147.32.84.229,15941.0,URH,0.0,,3,291,291,0,97.0,1.0,0,0,flow=Background,Background,-1 2011-08-17 00:34:24.502984,66.454445,tcp,147.32.84.165,4225.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:34:29.462163,0.000358,udp,147.32.84.170,43588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:29.464185,0.01798,tcp,147.32.84.170,46047.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:36.913311,0.000472,udp,94.225.180.60,24772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:38.816286,3065.675049,udp,74.65.191.149,12283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,282,162,120,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:39.109166,0.000249,udp,147.32.84.170,40937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:39.462164,0.000304,udp,147.32.84.170,52037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:34:40.974931,0.000411,icmp,147.32.86.96,,<-,147.32.87.51,27439.0,RED,,0.0,2,196,0,196,98.0,0.0,0,0,flow=Background,Background,-1 2011-08-17 00:34:51.203001,0.000491,udp,184.36.49.85,59034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,640,80,560,320.0,0.125,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:34:59.463777,0.000349,udp,147.32.84.170,58992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:35:08.083081,21.115402,tcp,90.219.149.74,63423.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,11,1885,1100,785,171.36363636363637,0.583554376657825,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:35:09.465335,0.017902,tcp,147.32.84.170,36828.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:35:14.268705,0.000348,udp,188.4.29.129,49509.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:18.290640,0.188286,udp,147.32.84.229,13363.0,<->,24.70.46.174,46698.0,CON,0.0,0.0,2,538,75,463,269.0,0.13940520446096655,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:21.231036,0.000373,udp,82.55.102.82,9416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:24.247136,0.001935,udp,74.214.191.247,37682.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:24.437400,0.000207,udp,147.32.85.25,44654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:26.690658,61.81234,tcp,147.32.84.59,8913.0,->,69.171.228.19,443.0,SRPA_SPA,0.0,0.0,15,6226,1160,5066,415.06666666666666,0.18631545133311916,0,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 00:35:27.613397,61.256432,tcp,147.32.84.165,4226.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:35:29.832782,0.000246,udp,147.32.85.25,42636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:29.923424,0.000288,udp,147.32.84.138,47799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:33.291129,0.000357,udp,83.228.51.29,52990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:35.900817,0.059999,udp,147.32.84.229,13363.0,<->,109.200.250.93,64153.0,CON,0.0,0.0,2,164,92,72,82.0,0.5609756097560976,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:38.157727,0.000593,udp,83.208.236.181,17685.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:35:41.107935,0.000411,udp,147.32.84.170,41598.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:35:41.109311,0.278095,tcp,147.32.84.170,59025.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:35:43.381905,0.00021,udp,147.32.85.5,37145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:47.121231,0.000154,udp,147.32.84.138,54095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:55.746534,0.000211,udp,147.32.85.63,52070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:35:59.464146,0.017904,tcp,147.32.84.170,59982.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:09.462244,0.000327,udp,147.32.84.170,35884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:09.464158,0.018163,tcp,147.32.84.170,59983.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:12.109349,0.000323,udp,147.32.84.170,33171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:12.110461,0.000122,udp,147.32.84.170,58916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:21.880483,0.000325,udp,147.32.86.20,59085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:36:25.500795,0.000168,udp,147.32.84.138,36428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:36:25.945830,0.000333,udp,147.32.86.20,50751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:36:28.452194,61.254677,tcp,147.32.84.165,4227.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:36:43.110336,0.000212,udp,147.32.84.170,56745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:36:44.003526,0.000267,udp,95.87.243.213,34223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:36:54.213836,0.00049,udp,86.81.132.232,57214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,76,473,274.5,0.1384335154826958,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:36:57.016244,0.000389,udp,147.32.85.25,53746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:36:59.463202,0.000331,udp,147.32.84.170,55801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:01.031172,0.638822,udp,24.11.85.127,60188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1567,981,586,261.1666666666667,0.6260370134014039,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:37:05.987364,0.000512,udp,67.250.7.240,3139.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,72,466,269.0,0.13382899628252787,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:37:09.463389,0.000382,udp,147.32.84.170,43903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:14.111904,0.000321,udp,147.32.84.170,52084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:17.333472,522.372437,tcp,147.32.84.170,44664.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,111,42019,30908,11111,378.54954954954957,0.735572003141436,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:18.759692,0.000323,udp,147.32.86.20,49544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:37:25.867716,0.000585,udp,189.14.224.90,38401.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,76,469,272.5,0.13944954128440368,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:37:29.289058,61.270836,tcp,147.32.84.165,4228.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:37:29.464531,0.017896,tcp,147.32.84.170,55099.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:30.156171,0.000213,udp,147.32.84.138,49456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:37:32.334411,0.000652,udp,98.114.34.32,9274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,79,479,279.0,0.14157706093189965,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:37:39.462427,0.000434,udp,147.32.84.170,49032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:45.110312,0.000237,udp,147.32.84.170,39342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:45.761008,0.000293,udp,147.32.84.138,50054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:37:46.306879,0.003501,udp,84.40.118.53,41990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2971,60,2911,742.75,0.02019522046449007,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:37:48.209036,0.000187,udp,147.32.85.25,35819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:37:59.462460,0.000386,udp,147.32.84.170,50151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:37:59.463423,0.000392,udp,147.32.84.170,38650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:03.896271,0.000221,udp,147.32.85.34,55950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:38:04.086477,0.162542,udp,147.32.84.229,13363.0,<->,68.91.128.28,39024.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:38:09.197053,0.000207,udp,147.32.84.138,42610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:38:09.464316,0.018,tcp,147.32.84.170,53996.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:13.389204,0.2177,tcp,147.32.84.170,53813.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:15.636581,0.134783,tcp,147.32.86.20,4166.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:38:16.097891,0.000372,udp,147.32.84.170,38148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:17.890706,0.000552,udp,58.76.203.116,63963.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,156,89,67,78.0,0.5705128205128205,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:38:18.365648,6.021811,udp,147.32.84.229,13363.0,->,24.36.235.136,57868.0,INT,0.0,,3,1419,1419,0,473.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:38:21.612670,0.000212,udp,147.32.84.138,49423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:38:29.907453,121.051399,udp,147.32.84.229,13363.0,->,188.24.158.111,27833.0,INT,0.0,,9,663,663,0,73.66666666666667,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:38:30.136885,61.271526,tcp,147.32.84.165,4229.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:38:35.341941,1.540325,udp,177.19.40.239,41692.0,->,147.32.86.239,161.0,INT,0.0,,2,170,170,0,85.0,1.0,0,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:38:37.325738,3483.843018,udp,109.173.58.130,45247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,4082,247,3835,408.2,0.06050955414012739,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:38:39.464634,0.018329,tcp,147.32.84.170,41907.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:39.846007,0.00026,udp,147.32.84.138,51589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:38:44.075109,0.308775,tcp,147.32.86.20,4190.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,26499,858,25641,803.0,0.0323785803237858,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:38:47.102888,0.000353,udp,147.32.84.170,42808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:47.104170,0.246174,tcp,147.32.84.170,57272.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:49.462718,0.000427,udp,147.32.84.170,47063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:38:50.920470,0.000173,udp,147.32.84.138,34464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:38:58.971735,3089.229004,udp,70.31.240.252,53097.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1482,1110,372,123.5,0.7489878542510121,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:38:59.462514,0.000345,udp,147.32.84.170,50267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:04.917471,0.000301,udp,147.32.85.25,49174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:39:09.462603,0.000439,udp,147.32.84.170,50431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:09.464642,0.017929,tcp,147.32.84.170,55116.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:18.109051,0.00029,udp,147.32.84.170,39162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:18.111999,0.271213,tcp,147.32.84.170,57276.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:19.463670,0.000328,udp,147.32.84.170,58911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:19.464662,0.018553,tcp,147.32.84.170,41483.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:28.084729,240.260437,tcp,147.32.84.184,37942.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,34,5521,3666,1855,162.38235294117646,0.6640101430900199,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:39:29.462682,0.000413,udp,147.32.84.170,35873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:30.985535,61.255962,tcp,147.32.84.165,4230.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:39:35.083979,1859.743042,udp,147.32.84.229,13363.0,<->,82.12.116.80,42209.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:39:37.678338,3089.359375,udp,68.103.234.243,2579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:39:38.150239,9.040968,tcp,147.32.85.74,35893.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:39:39.462664,0.000432,udp,147.32.84.170,33455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:39.464632,0.018685,tcp,147.32.84.170,35512.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:41.792500,0.000528,udp,70.138.48.239,41371.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:39:49.109425,0.249378,tcp,147.32.84.170,57280.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:49.464319,0.018325,tcp,147.32.84.170,56228.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:39:51.214920,0.000251,udp,147.32.85.25,54721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:39:59.464634,0.018164,tcp,147.32.84.170,41918.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:40:09.464786,0.017747,tcp,147.32.84.170,41489.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:40:12.130223,0.000361,udp,147.32.85.25,57014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:40:20.837622,0.0,tcp,147.32.84.165,4231.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:20.843316,0.0,tcp,147.32.84.165,4232.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:20.855003,0.0,tcp,147.32.84.165,4234.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:21.027390,0.0,tcp,147.32.84.165,4235.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:21.037223,0.0,tcp,147.32.84.165,4236.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:21.037621,0.0,tcp,147.32.84.165,4238.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:21.227023,0.0,tcp,147.32.84.165,4239.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:21.324960,0.000538,udp,92.203.54.44,52002.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,72,466,269.0,0.13382899628252787,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:40:21.828968,0.0,tcp,147.32.84.165,4241.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:22.028271,0.0,tcp,147.32.84.165,4243.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:22.228416,0.0,tcp,147.32.84.165,4242.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:22.545412,2.004675,udp,70.19.165.212,33905.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:40:23.342220,0.0,tcp,113.105.171.60,80.0,->,147.32.85.104,1873.0,SA_,0.0,,1,66,66,0,66.0,1.0,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:40:26.080841,1223.782471,udp,77.238.218.180,20524.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1318,160,1158,329.5,0.12139605462822459,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:40:26.107213,0.012614,tcp,147.32.85.74,35912.0,->,86.49.87.107,6889.0,S_,0.0,,1,74,74,0,74.0,1.0,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:40:27.845484,0.000151,udp,147.32.85.25,56122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:40:29.463509,0.000372,udp,147.32.84.170,52946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:40:29.464599,0.018392,tcp,147.32.84.170,41493.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:40:34.846311,0.0,tcp,147.32.84.165,4472.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:34.846325,64.160294,tcp,147.32.84.165,4451.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:40:34.846331,0.0,tcp,147.32.84.165,4474.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:34.846335,0.0,tcp,147.32.84.165,4473.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:34.846561,0.0,tcp,147.32.84.165,4476.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:34.846580,0.0,tcp,147.32.84.165,4478.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:34.846585,0.0,tcp,147.32.84.165,4477.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:35.447152,0.0,tcp,147.32.84.165,4484.0,->,147.33.84.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:39.474971,0.01767,tcp,147.32.84.170,35521.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:40:45.430809,2418.062256,udp,190.220.140.71,14813.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:40:46.864152,0.0,tcp,147.32.84.165,4714.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:46.864164,0.0,tcp,147.32.84.165,4713.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:46.864216,0.0,tcp,147.32.84.165,4712.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:46.864263,0.0,tcp,147.32.84.165,4718.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:46.864315,0.0,tcp,147.32.84.165,4717.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:46.864362,0.0,tcp,147.32.84.165,4716.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:47.464430,0.0,tcp,147.32.84.165,4726.0,->,147.32.79.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:47.464502,0.0,tcp,147.32.84.165,4725.0,->,192.168.0.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:54.045848,0.000659,udp,79.97.55.142,36940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1198,76,1122,599.0,0.06343906510851419,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:40:55.065946,3.129707,tcp,190.91.195.180,2793.0,->,147.32.84.22,22.0,FSPA_FSPA,0.0,0.0,21,3774,1685,2089,179.71428571428572,0.44647588765235824,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:40:56.923077,1.491739,tcp,60.28.232.52,42435.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,3424,693,2731,342.4,0.2023948598130841,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:40:58.881335,0.0,tcp,147.32.84.165,4991.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:58.881342,0.0,tcp,147.32.84.165,4993.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:58.881393,0.0,tcp,147.32.84.165,4992.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:58.881455,0.0,tcp,147.32.84.165,4995.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:58.881463,0.0,tcp,147.32.84.165,4997.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:58.881512,0.0,tcp,147.32.84.165,4996.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:40:59.482553,0.0,tcp,147.32.84.165,1027.0,->,147.33.84.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:00.463438,0.00174,udp,70.171.94.45,25675.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:01.611160,118.016289,tcp,92.99.254.57,65369.0,->,147.32.85.56,44076.0,SA_FSA,0.0,0.0,9,552,126,426,61.333333333333336,0.22826086956521738,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:41:05.236721,18.394709,udp,94.99.153.248,1973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1232,886,346,123.2,0.7191558441558441,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:07.095380,3.579021,udp,109.55.241.191,58844.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,670,550,120,167.5,0.8208955223880597,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:09.464879,0.018001,tcp,147.32.84.170,54025.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:41:10.898862,0.0,tcp,147.32.84.165,1257.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:10.898876,0.0,tcp,147.32.84.165,1256.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:10.898993,0.0,tcp,147.32.84.165,1255.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:10.899009,0.0,tcp,147.32.84.165,1261.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:10.899014,0.0,tcp,147.32.84.165,1260.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:10.899068,0.0,tcp,147.32.84.165,1259.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:11.499820,0.0,tcp,147.32.84.165,1269.0,->,147.32.79.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:11.499835,0.0,tcp,147.32.84.165,1268.0,->,192.168.0.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:15.729259,0.000196,udp,147.32.84.138,56569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:41:19.463664,0.000438,udp,147.32.84.170,33337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:41:22.916041,0.0,tcp,147.32.84.165,1450.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:22.916053,0.0,tcp,147.32.84.165,1449.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:22.916160,0.0,tcp,147.32.84.165,1453.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:22.916169,0.0,tcp,147.32.84.165,1452.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:22.916284,0.0,tcp,147.32.84.165,1456.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:23.517071,0.0,tcp,147.32.84.165,1458.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:29.463589,0.000449,udp,147.32.84.170,49876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:41:34.706451,0.000322,udp,147.32.86.20,53390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:41:34.933428,0.0,tcp,147.32.84.165,1630.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:34.933442,0.0,tcp,147.32.84.165,1629.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:34.933497,0.0,tcp,147.32.84.165,1633.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:34.933502,0.0,tcp,147.32.84.165,1632.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:34.933639,0.0,tcp,147.32.84.165,1636.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:34.933655,0.0,tcp,147.32.84.165,1635.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:35.397505,0.00042,udp,90.154.131.163,64705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:35.534285,0.0,tcp,147.32.84.165,1639.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:39.462926,0.000402,udp,147.32.84.170,36081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:41:45.066583,0.000498,udp,98.224.98.150,6185.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:46.950991,0.0,tcp,147.32.84.165,1810.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:46.951087,61.27179,tcp,147.32.84.165,1671.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:41:46.951094,0.0,tcp,147.32.84.165,1811.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:46.951159,0.0,tcp,147.32.84.165,1813.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:46.951169,0.0,tcp,147.32.84.165,1814.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:46.951233,0.0,tcp,147.32.84.165,1816.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:47.551823,0.0,tcp,147.32.84.165,1820.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:47.551838,0.0,tcp,147.32.84.165,1819.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:53.111775,0.000283,udp,147.32.84.170,46634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:41:53.369424,0.000507,udp,189.105.10.251,12280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:41:57.862873,0.000165,udp,147.32.84.138,34477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:41:58.967890,0.0,tcp,147.32.84.165,1991.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:58.967929,0.0,tcp,147.32.84.165,1990.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:58.968014,0.0,tcp,147.32.84.165,1994.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:58.968088,0.0,tcp,147.32.84.165,1993.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:58.968175,0.0,tcp,147.32.84.165,1997.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:41:59.568530,0.0,tcp,147.32.84.165,1999.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:04.161755,0.000356,udp,147.32.84.138,35219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:04.731439,0.000263,udp,147.32.85.34,58026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:10.985469,0.0,tcp,147.32.84.165,2139.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:10.985559,0.0,tcp,147.32.84.165,2141.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:10.985641,0.0,tcp,147.32.84.165,2143.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:10.985727,0.0,tcp,147.32.84.165,2145.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:10.987028,0.0,tcp,147.32.84.165,2147.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:11.586141,0.0,tcp,147.32.84.165,2149.0,->,147.32.81.38,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:12.180668,0.000355,udp,89.31.118.251,64910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:42:18.892877,0.000177,udp,147.32.84.138,54427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:23.002776,0.0,tcp,147.32.84.165,2259.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:23.002854,0.0,tcp,147.32.84.165,2261.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:23.017006,0.0,tcp,147.32.84.165,2263.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:23.604032,0.0,tcp,147.32.84.165,2265.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:23.604097,0.0,tcp,147.32.84.165,2267.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:26.273624,0.000328,udp,147.32.85.89,38769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:29.463864,0.000277,udp,147.32.84.170,43576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:42:35.019793,0.0,tcp,147.32.84.165,2379.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:35.019915,0.0,tcp,147.32.84.165,2381.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:35.019987,0.0,tcp,147.32.84.165,2383.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:35.620713,0.0,tcp,147.32.84.165,2385.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:35.620801,0.0,tcp,147.32.84.165,2387.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:39.465207,0.018322,tcp,147.32.84.170,53326.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:42:40.896455,0.000391,udp,199.40.206.187,37846.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:42:47.037418,0.0,tcp,147.32.84.165,2499.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:47.037578,0.0,tcp,147.32.84.165,2501.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:47.037736,0.0,tcp,147.32.84.165,2503.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:47.638098,0.0,tcp,147.32.84.165,2505.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:47.638247,0.0,tcp,147.32.84.165,2507.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:49.465005,0.018125,tcp,147.32.84.170,43323.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:42:50.238029,0.000485,udp,147.32.84.59,55577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:55.674151,2890.25293,arp,147.32.87.11,,who,147.32.87.1,,CON,,,10,600,300,300,60.0,0.5,0,,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-17 00:42:56.774525,0.000389,udp,147.32.86.20,55233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:58.039659,0.024784,udp,147.32.84.184,34838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:42:59.054638,61.266666,tcp,147.32.84.165,2527.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:42:59.054722,0.0,tcp,147.32.84.165,2620.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:59.054825,0.0,tcp,147.32.84.165,2622.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:59.472418,0.0,tcp,147.32.84.165,2624.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:59.655720,0.0,tcp,147.32.84.165,2626.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:42:59.655734,0.0,tcp,147.32.84.165,2628.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:02.478658,0.0,icmp,147.32.87.1,261.0,->,147.32.87.4,37664.0,RED,0.0,,1,70,70,0,70.0,1.0,0,0,flow=Background,Background,-1 2011-08-17 00:43:02.789381,6.451773,tcp,66.249.72.182,38103.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,27,15771,1337,14434,584.1111111111111,0.08477585441633377,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:43:07.701054,0.000229,udp,147.32.85.25,35458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:09.464083,0.00033,udp,147.32.84.170,34581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:09.465091,0.018351,tcp,147.32.84.170,53330.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:11.072371,0.0,tcp,147.32.84.165,2740.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.072467,0.0,tcp,147.32.84.165,2741.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.072546,0.0,tcp,147.32.84.165,2742.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.072553,0.0,tcp,147.32.84.165,2743.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.072632,0.0,tcp,147.32.84.165,2744.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.672711,0.0,tcp,147.32.84.165,2747.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.672726,0.0,tcp,147.32.84.165,2746.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.672744,0.0,tcp,147.32.84.165,2749.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.672809,0.0,tcp,147.32.84.165,2748.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:11.672902,0.0,tcp,147.32.84.165,2751.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:13.499173,0.228784,tcp,147.32.84.170,55687.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:19.453777,0.000479,udp,200.45.215.131,43222.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:19.464269,0.000329,udp,147.32.84.170,34453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:23.089130,0.0,tcp,147.32.84.165,2860.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:23.089264,0.0,tcp,147.32.84.165,2862.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:23.089354,0.0,tcp,147.32.84.165,2864.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:23.690437,0.0,tcp,147.32.84.165,2866.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:23.690524,0.0,tcp,147.32.84.165,2868.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:25.398670,0.000192,udp,147.32.84.59,40782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:26.440732,1869.781982,udp,147.32.84.229,13363.0,<->,130.88.213.39,34470.0,CON,0.0,0.0,6,720,534,186,120.0,0.7416666666666667,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:28.788842,2.662302,tcp,66.249.66.250,64898.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,24,13530,1234,12296,563.75,0.09120473022912047,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:43:29.464234,0.000291,udp,147.32.84.170,49076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:29.847582,0.0218,udp,147.32.85.42,46384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,412,87,325,206.0,0.2111650485436893,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:32.240952,0.000827,udp,217.232.11.184,11778.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,984,79,905,492.0,0.08028455284552846,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:35.107089,0.0,tcp,147.32.84.165,2980.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:35.107166,0.0,tcp,147.32.84.165,2982.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:35.107375,0.0,tcp,147.32.84.165,2984.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:35.429085,0.000294,udp,147.32.84.59,38891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:35.708084,0.0,tcp,147.32.84.165,2986.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:35.708166,0.0,tcp,147.32.84.165,2988.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:37.511914,679.916138,udp,147.32.84.229,13363.0,<->,201.27.173.50,20561.0,CON,0.0,0.0,4,765,630,135,191.25,0.8235294117647058,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:43.941722,39.299995,tcp,193.247.250.13,59949.0,->,147.32.84.229,443.0,SPA_FSRPA,0.0,0.0,22,1892,1007,885,86.0,0.5322410147991543,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:43:47.123841,0.0,tcp,147.32.84.165,3100.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.123931,0.0,tcp,147.32.84.165,3101.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.123935,0.0,tcp,147.32.84.165,3102.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.123984,0.0,tcp,147.32.84.165,3103.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.123991,0.0,tcp,147.32.84.165,3104.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.724825,0.0,tcp,147.32.84.165,3107.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.724910,0.0,tcp,147.32.84.165,3106.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.724914,0.0,tcp,147.32.84.165,3109.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.724970,0.0,tcp,147.32.84.165,3108.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:47.724974,0.0,tcp,147.32.84.165,3111.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:48.844794,0.000266,udp,147.32.85.25,43733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:49.074112,0.000426,udp,81.36.132.142,15268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:50.899665,1030.194336,udp,147.32.84.229,13363.0,<->,82.158.81.178,16902.0,CON,0.0,0.0,4,692,556,136,173.0,0.8034682080924855,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:53.889464,0.000214,udp,147.32.85.25,57785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:55.778140,0.000145,udp,147.32.84.22,34682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,100,172,136.0,0.36764705882352944,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:43:56.775539,0.000383,udp,46.64.74.39,61754.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:43:59.141645,0.0,tcp,147.32.84.165,3220.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.141721,0.0,tcp,147.32.84.165,3221.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.141728,0.0,tcp,147.32.84.165,3222.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.141777,0.0,tcp,147.32.84.165,3223.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.141797,0.0,tcp,147.32.84.165,3224.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.465083,0.000378,udp,147.32.84.170,38024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:59.466220,0.017677,tcp,147.32.84.170,53341.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:43:59.742115,0.0,tcp,147.32.84.165,3227.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.742187,0.0,tcp,147.32.84.165,3226.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.742194,0.0,tcp,147.32.84.165,3229.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.742258,0.0,tcp,147.32.84.165,3228.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:43:59.742265,0.0,tcp,147.32.84.165,3231.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:01.144432,3032.138672,udp,147.32.84.229,13363.0,<->,80.218.95.193,32219.0,CON,0.0,0.0,24,3991,1310,2681,166.29166666666666,0.32823853670759207,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:44:09.195460,0.000216,udp,147.32.85.25,39635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:11.159297,61.271622,tcp,147.32.84.165,3248.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:44:11.159336,0.0,tcp,147.32.84.165,3341.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.159398,0.0,tcp,147.32.84.165,3342.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.159457,0.0,tcp,147.32.84.165,3343.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.159463,0.0,tcp,147.32.84.165,3344.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.582882,0.0,tcp,147.32.84.165,3345.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.759775,0.0,tcp,147.32.84.165,3348.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.759856,0.0,tcp,147.32.84.165,3347.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.759962,0.0,tcp,147.32.84.165,3350.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.759977,0.0,tcp,147.32.84.165,3349.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:11.759982,0.0,tcp,147.32.84.165,3352.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:19.837273,0.00042,udp,88.74.111.116,64484.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:44:21.372555,0.000274,udp,147.32.84.138,37735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:23.176134,0.0,tcp,147.32.84.165,3462.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.176149,0.0,tcp,147.32.84.165,3463.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.176154,0.0,tcp,147.32.84.165,3464.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.176159,0.0,tcp,147.32.84.165,3465.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.176163,0.0,tcp,147.32.84.165,3466.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.777157,0.0,tcp,147.32.84.165,3469.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.777171,0.0,tcp,147.32.84.165,3468.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.777227,0.0,tcp,147.32.84.165,3471.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.777231,0.0,tcp,147.32.84.165,3470.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:23.777285,0.0,tcp,147.32.84.165,3473.0,->,147.32.88.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:27.112114,0.000418,udp,147.32.84.170,50999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:27.113569,0.272053,tcp,147.32.84.170,54427.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:29.463200,0.000339,udp,147.32.84.170,43510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:29.465115,0.018025,tcp,147.32.84.170,34295.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:30.899782,0.00027,udp,147.32.84.138,50565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:31.034263,0.00031,udp,147.32.84.138,51965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:31.194476,2446.280029,udp,99.122.59.12,38641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:44:35.193321,0.0,tcp,147.32.84.165,3582.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.193384,0.0,tcp,147.32.84.165,3583.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.193435,0.0,tcp,147.32.84.165,3584.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.193442,0.0,tcp,147.32.84.165,3585.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.193485,0.0,tcp,147.32.84.165,3586.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.794542,0.0,tcp,147.32.84.165,3589.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.794629,0.0,tcp,147.32.84.165,3588.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.794641,0.0,tcp,147.32.84.165,3591.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.794702,0.0,tcp,147.32.84.165,3590.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:35.794752,0.0,tcp,147.32.84.165,3593.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,0,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 00:44:39.463293,0.00038,udp,147.32.84.170,52521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:39.464199,0.000324,udp,147.32.84.170,40031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:41.214813,0.000392,udp,147.32.84.138,47772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:43.027077,0.000367,udp,147.32.84.184,57130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:50.523662,0.000205,udp,147.32.85.25,58484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:59.164070,0.000342,udp,147.32.84.22,58825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,87,209,148.0,0.2939189189189189,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:44:59.464366,0.000366,udp,147.32.84.170,36687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:44:59.466285,0.017835,tcp,147.32.84.170,39233.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:00.929139,7e-06,icmp,147.32.86.96,,<-,147.32.87.51,21558.0,ECR,,0.0,2,196,0,196,98.0,0.0,0,0,flow=Background,Background,-1 2011-08-17 00:45:02.175076,0.001766,udp,108.103.229.222,4452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:02.624362,0.14764,udp,147.32.84.229,13363.0,<->,76.208.21.82,21929.0,CON,0.0,0.0,2,146,80,66,73.0,0.547945205479452,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:07.231585,0.11508,udp,147.32.87.135,3208.0,<->,129.6.15.28,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,0,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 00:45:09.464105,0.000354,udp,147.32.84.170,53165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:12.007827,73.235657,tcp,147.32.84.165,3602.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,13,1260,621,639,96.92307692307692,0.4928571428571429,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:45:17.196639,267.427277,udp,147.32.84.229,13363.0,<->,203.153.199.144,39192.0,CON,0.0,0.0,16,3815,420,3395,238.4375,0.11009174311926606,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:17.341621,0.000354,udp,147.32.86.20,56512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:45:19.464293,0.000378,udp,147.32.84.170,56587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:29.109763,0.000283,udp,147.32.84.170,60494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:31.323421,3100.436523,rtp,46.7.112.153,15882.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3237,206,3031,404.625,0.06363917207290701,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:35.597789,0.57954,tcp,147.32.84.164,40934.0,->,203.77.185.181,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:45:36.260291,0.000597,udp,86.63.160.111,51026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,717,79,638,358.5,0.1101813110181311,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:38.839703,1.074032,tcp,62.83.213.169,49463.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,24,2030,1145,885,84.58333333333333,0.5640394088669951,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:45:39.575209,0.000321,udp,147.32.84.170,54083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:43.179836,0.049516,udp,147.32.84.229,13363.0,<->,90.225.81.143,34778.0,CON,0.0,0.0,4,2992,60,2932,748.0,0.020053475935828877,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:47.386208,0.000175,udp,147.32.84.138,53090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:45:53.622051,3096.598877,udp,50.108.61.6,47887.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1731,1490,241,216.375,0.8607741190063547,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:45:59.463386,0.000405,udp,147.32.84.170,45776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:45:59.465354,0.018447,tcp,147.32.84.170,43352.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:00.108406,0.000394,udp,147.32.84.170,44438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:00.109361,0.000334,udp,147.32.84.170,59377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:04.164454,0.000225,udp,147.32.85.34,50043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:04.179530,0.000344,udp,147.32.85.34,61699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,85,211,148.0,0.28716216216216217,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:04.196224,0.000316,udp,147.32.85.34,58899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:04.203375,0.000248,udp,147.32.85.34,62807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,86,211,148.5,0.2895622895622896,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:21.797879,64.149178,tcp,147.32.84.165,3603.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:46:29.464493,0.000473,udp,147.32.84.170,39614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:33.329704,0.000506,udp,184.161.94.4,65375.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:46:38.182110,665.091553,udp,81.106.231.229,21974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3091,132,2959,515.1666666666666,0.042704626334519574,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:46:39.464598,0.000233,udp,147.32.84.170,58954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:39.465613,0.018212,tcp,147.32.84.170,53132.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:39.821213,3113.080078,udp,78.120.191.152,27490.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:46:42.953989,0.00033,udp,147.32.84.138,33670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:43.188750,0.000373,udp,147.32.85.25,55960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:46:46.561414,0.000343,udp,82.137.12.111,12093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:46:59.463515,0.00044,udp,147.32.84.170,57185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:46:59.465559,0.018449,tcp,147.32.84.170,48820.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:47:08.939453,0.000421,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,85,218,151.5,0.28052805280528054,0,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 00:47:10.930291,0.000439,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,85,218,151.5,0.28052805280528054,0,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 00:47:15.291211,0.000259,udp,147.32.84.138,50241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:47:22.089941,2428.352295,udp,92.247.121.197,42346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1510,946,564,151.0,0.6264900662251656,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:22.635995,61.256207,tcp,147.32.84.165,3634.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:47:23.161036,3219.310303,udp,81.85.49.66,52163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1806,1129,677,225.75,0.6251384274640088,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:27.175063,3585.138916,udp,147.32.84.229,13363.0,<->,128.253.103.247,11932.0,CON,0.0,0.0,121,20423,10655,9768,168.78512396694214,0.5217157126768839,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:28.800394,0.000197,udp,147.32.84.138,59577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:47:32.164786,0.169235,udp,147.32.84.229,13363.0,<->,98.109.131.163,22081.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:33.112531,0.261457,tcp,147.32.84.170,46183.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:47:39.425950,0.00017,udp,147.32.85.25,38624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:47:39.464489,0.000346,udp,147.32.84.170,52696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:47:39.465598,0.017881,tcp,147.32.84.170,55100.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:47:42.991453,0.000415,icmp,147.32.86.96,,<-,147.32.87.52,46904.0,RED,,0.0,2,196,0,196,98.0,0.0,0,0,flow=Background,Background,-1 2011-08-17 00:47:45.913811,2550.139404,udp,160.36.39.140,33448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5907,120,5787,738.375,0.02031488065007618,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:48.756642,0.000424,udp,77.220.0.171,60807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:54.753209,0.312527,udp,147.32.84.229,13363.0,<->,114.37.249.93,31522.0,CON,0.0,0.0,3,2034,213,1821,678.0,0.10471976401179942,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:47:59.463726,0.000481,udp,147.32.84.170,48755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:03.996973,0.0003,udp,147.32.85.34,61560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:04.043885,0.000306,udp,147.32.85.34,54994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,86,212,149.0,0.28859060402684567,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:04.114272,0.00048,udp,147.32.84.170,51965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:04.376855,0.000237,udp,147.32.84.138,36796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:07.121793,628.100342,udp,147.32.84.229,13363.0,<->,69.120.200.116,12714.0,CON,0.0,0.0,4,483,359,124,120.75,0.7432712215320911,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:48:07.447841,0.006982,tcp,147.32.84.138,38021.0,->,147.32.127.222,60724.0,FSA_FSPA,0.0,0.0,8,571,272,299,71.375,0.4763572679509632,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:07.962463,0.011625,tcp,147.32.84.138,48042.0,->,147.32.127.222,58971.0,FSRA_SPA,0.0,0.0,27,22064,728,21336,817.1851851851852,0.03299492385786802,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:08.448350,0.019077,tcp,147.32.84.138,55289.0,->,147.32.127.222,61273.0,SRA_FSPA,0.0,0.0,117,96999,3818,93181,829.0512820512821,0.03936123052814978,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:09.080329,6.062435,tcp,66.249.72.176,46946.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,38,20759,1888,18871,546.2894736842105,0.09094850426321113,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:10.823321,0.054853,tcp,147.32.84.138,55476.0,->,147.32.127.222,21.0,FSRPA_FSPA,0.0,0.0,62,6132,2231,3901,98.90322580645162,0.3638290932811481,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:11.719294,0.000283,udp,147.32.84.138,43393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:13.520341,0.242537,tcp,147.32.84.170,45411.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:13.758801,0.261499,tcp,147.32.84.170,44791.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:13.994858,0.027419,tcp,147.32.84.138,50768.0,->,147.32.127.222,64596.0,SRA_SPA,0.0,0.0,270,261540,7114,254426,968.6666666666666,0.0272004282327751,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:14.176145,0.000284,udp,147.32.84.170,34584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:14.177713,240.038132,tcp,147.32.84.170,44793.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:14.180460,250.035675,tcp,147.32.84.170,44795.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:15.059759,0.036693,tcp,147.32.84.138,55723.0,->,147.32.127.222,21.0,FSRPA_FSPA,0.0,0.0,61,6057,2175,3882,99.29508196721312,0.35908865775136206,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:15.122028,0.013396,tcp,147.32.84.138,57553.0,->,147.32.127.222,51869.0,SRA_SPA,0.0,0.0,83,69274,2584,66690,834.6265060240963,0.03730115194733955,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:16.025212,0.015322,tcp,147.32.84.138,45106.0,->,147.32.127.222,57778.0,FSRA_SPA,0.0,0.0,42,40442,1004,39438,962.9047619047619,0.02482567627713763,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:16.159668,0.000206,udp,147.32.84.138,39313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:17.615082,1571.241699,udp,147.32.84.186,37738.0,<->,82.208.56.89,123.0,CON,0.0,0.0,11,990,540,450,90.0,0.5454545454545454,0,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 00:48:19.464721,0.000295,udp,147.32.84.170,58397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:21.014830,0.022859,tcp,147.32.84.138,46312.0,->,147.32.127.222,49997.0,SRA_SPA,0.0,0.0,78,61642,2522,59120,790.2820512820513,0.040913662762402256,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:21.193650,0.000455,udp,24.152.182.162,22177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:48:21.713538,0.000313,udp,147.32.84.138,35091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:22.896386,0.062253,tcp,147.32.84.138,56188.0,->,147.32.127.222,21.0,FSRPA_FSPA,0.0,0.0,62,6138,2339,3799,99.0,0.381068752036494,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:23.473612,61.272236,tcp,147.32.84.165,3635.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:48:25.547694,0.046083,tcp,147.32.84.138,56341.0,->,147.32.127.222,21.0,FSPA_FSPA,0.0,0.0,60,6037,2139,3898,100.61666666666666,0.3543150571475899,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:28.674072,92.223732,udp,105.142.56.5,25232.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1171,990,181,195.16666666666666,0.8454312553373186,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:48:35.113972,0.231853,tcp,147.32.84.170,46203.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:39.463646,0.000349,udp,147.32.84.170,60648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:43.700792,0.034371,tcp,147.32.84.138,56517.0,->,147.32.127.222,21.0,FSRPA_FSPA,0.0,0.0,60,5970,2179,3791,99.5,0.36499162479061975,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:48:45.423359,0.0004,udp,147.32.84.138,34159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:45.667400,178.211792,udp,147.32.84.229,13363.0,<->,46.40.85.28,13937.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:48:49.464829,0.000334,udp,147.32.84.170,48474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:48:51.752444,0.00022,udp,147.32.84.138,34781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:48:57.108703,0.001663,udp,188.48.121.108,2240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:48:59.465745,0.017736,tcp,147.32.84.170,34448.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:49:02.688934,0.035569,tcp,147.32.84.138,46834.0,->,147.32.127.222,21.0,FSPA_FSPA,0.0,0.0,56,5718,1935,3783,102.10714285714286,0.33840503672612804,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:49:03.284817,0.000457,udp,147.32.84.138,38924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:49:05.662490,0.000261,udp,147.32.86.20,65398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:49:05.725681,0.151244,udp,147.32.84.229,13363.0,<->,24.144.181.70,63628.0,CON,0.0,0.0,4,3176,363,2813,794.0,0.11429471032745592,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:06.110398,0.000255,udp,147.32.84.170,40593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:49:09.463796,0.000342,udp,147.32.84.170,43128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:49:17.358604,0.000309,udp,147.32.84.138,49228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:49:18.245335,0.021339,tcp,147.32.84.138,35881.0,->,147.32.127.222,57642.0,FSA_FSPA,0.0,0.0,310,333351,6332,327019,1075.3258064516128,0.018994993265356936,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:49:18.318247,0.000378,udp,182.183.141.89,35562.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:21.769376,0.000606,udp,93.97.253.7,10673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1145,72,1073,572.5,0.062882096069869,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:24.135090,0.001766,udp,198.228.224.5,54417.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,483,60,271.5,0.8895027624309392,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:24.322413,61.255058,tcp,147.32.84.165,3636.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:49:29.464497,0.000338,udp,147.32.84.170,39753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:49:30.783850,0.098469,udp,213.151.218.129,35093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,610,421,189,101.66666666666667,0.6901639344262295,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:32.442193,0.00018,udp,147.32.85.25,54494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:49:39.465413,0.018114,tcp,147.32.84.170,56710.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:49:43.090891,0.06531,tcp,147.32.84.138,47403.0,->,147.32.127.222,21.0,FSRPA_FSPA,0.0,0.0,56,5657,1981,3676,101.01785714285714,0.3501856107477462,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:49:45.265623,3044.677246,udp,82.193.91.23,43456.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:49:54.450810,0.000154,udp,147.32.84.138,32941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:49:59.463698,0.000307,udp,147.32.84.170,40710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:03.878470,0.00044,udp,147.32.85.34,60804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,86,213,149.5,0.28762541806020064,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:07.820833,634.927124,udp,62.98.71.54,5563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,490,366,124,122.5,0.746938775510204,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:09.463998,0.000285,udp,147.32.84.170,42528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:09.466040,0.017657,tcp,147.32.84.170,56714.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:11.757659,0.000322,udp,147.32.84.138,50625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:14.274611,0.000476,udp,147.32.84.171,39817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:16.566764,0.03084,tcp,147.32.84.138,47648.0,->,147.32.127.222,21.0,FSPA_FSPA,0.0,0.0,56,5702,1925,3777,101.82142857142857,0.33760084180989125,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:50:16.737474,0.000282,udp,147.32.84.138,45487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,74,246,160.0,0.23125,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:17.364032,0.000293,udp,201.201.187.26,63922.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,0,1,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:19.464702,0.000498,udp,147.32.84.170,43794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:19.668162,153.56691,udp,72.241.242.55,61023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,397,217,180,66.16666666666667,0.5465994962216625,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:22.259239,86.39711,udp,147.32.84.229,13363.0,->,82.13.8.177,25797.0,INT,0.0,,6,456,456,0,76.0,1.0,0,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 00:50:25.159312,64.190025,tcp,147.32.84.165,3637.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:50:27.290486,0.000453,udp,70.81.2.208,20352.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,79,506,292.5,0.13504273504273503,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:28.073088,0.000265,udp,147.32.84.138,48142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:29.465852,0.018315,tcp,147.32.84.170,40584.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:32.232493,921.618103,udp,31.147.68.70,50049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,855,531,324,142.5,0.6210526315789474,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:39.463760,0.009909,udp,147.32.84.170,43078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:49.464709,0.00037,udp,147.32.84.170,46279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:50:54.772114,0.000488,udp,78.58.99.225,44235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:56.351553,0.000271,udp,147.32.84.138,33381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:50:57.351591,1069.112915,udp,109.86.114.119,39032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,742,556,186,123.66666666666667,0.7493261455525606,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:50:59.466248,0.018328,tcp,147.32.84.170,40588.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:05.311710,241.717651,tcp,147.32.84.3,45289.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,38,6361,4149,2212,167.39473684210526,0.6522559346014778,0,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 00:51:10.108961,0.000234,udp,147.32.84.170,49436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:10.109568,0.000285,udp,147.32.84.170,53031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:13.515342,115.185097,udp,147.32.84.229,13363.0,<->,91.37.180.93,40162.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:51:19.464813,0.000279,udp,147.32.84.170,34983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:20.264115,1.570497,tcp,187.69.175.36,50480.0,->,147.32.84.229,80.0,SRA_SA,0.0,0.0,4,244,182,62,61.0,0.7459016393442623,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:51:22.498501,0.0,tcp,123.212.43.140,1723.0,->,147.32.86.26,53602.0,SA_,0.0,,1,62,62,0,62.0,1.0,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:51:28.931388,64.305389,tcp,147.32.84.165,3638.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:51:36.548800,0.000807,udp,147.32.84.138,55967.0,<->,82.208.56.89,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,0,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 00:51:36.584980,0.000487,udp,80.252.208.14,2564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,261,177,84,130.5,0.6781609195402298,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:51:39.464103,0.000356,udp,147.32.84.170,46047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:41.110586,0.000416,udp,147.32.84.170,48572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:49.464347,0.000369,udp,147.32.84.170,54865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:49.465222,0.000403,udp,147.32.84.170,58138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:49.466355,0.018457,tcp,147.32.84.170,53876.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:51:56.271509,61.617706,tcp,147.32.84.59,8990.0,->,69.171.228.19,443.0,SRPA_SPA,0.0,0.0,13,1822,1021,801,140.15384615384616,0.5603732162458837,0,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 00:51:59.466126,0.017812,tcp,147.32.84.170,39464.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:09.467190,0.017964,tcp,147.32.84.170,48872.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:12.114003,0.298777,tcp,147.32.84.170,37887.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:19.465275,0.000279,udp,147.32.84.170,41857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:29.465170,0.000428,udp,147.32.84.170,48231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:29.466263,0.018451,tcp,147.32.84.170,53881.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:30.924324,0.000331,udp,190.225.82.225,38703.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:52:32.813456,64.180748,tcp,147.32.84.165,3639.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:52:38.668803,250.020889,tcp,147.32.84.59,38961.0,->,209.85.148.138,80.0,FSPA_FSPA,0.0,0.0,28,6507,3654,2853,232.39285714285714,0.5615491009681881,0,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 00:52:40.983334,0.135307,tcp,147.32.86.20,4931.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,25654,853,24801,777.3939393939394,0.03325017541124191,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:52:42.308288,0.000359,udp,109.86.147.104,63804.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:52:43.110770,0.000241,udp,147.32.84.170,57164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:43.113034,0.254251,tcp,147.32.84.170,37891.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:43.999752,0.000267,udp,147.32.84.138,34728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:52:49.465117,0.00038,udp,147.32.84.170,58470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:52:52.178241,0.222022,udp,147.32.84.229,13363.0,<->,95.70.118.122,32669.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:52:59.466300,0.017922,tcp,147.32.84.170,55002.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:01.578222,0.000361,udp,188.106.223.174,49217.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:53:03.157525,0.00016,udp,147.32.84.138,41814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:53:06.444895,1627.041138,udp,213.192.3.1,16182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,686,500,186,114.33333333333333,0.7288629737609329,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:53:09.464303,0.000412,udp,147.32.84.170,59531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:09.465237,0.000287,udp,147.32.84.170,48869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:09.466229,0.017869,tcp,147.32.84.170,48880.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:10.935496,250.020966,tcp,147.32.84.170,33981.0,->,209.85.148.113,80.0,FSPA_FSPA,0.0,0.0,45,16758,12590,4168,372.4,0.7512829693280821,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:13.529912,0.278603,tcp,147.32.84.170,46223.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:14.050974,0.3334,tcp,147.32.84.170,35689.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:19.464184,0.000307,udp,147.32.84.170,46644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:20.229212,3573.542236,udp,147.32.84.229,13363.0,<->,174.116.67.37,25995.0,CON,0.0,0.0,4,708,161,547,177.0,0.2274011299435028,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:53:21.110811,0.000114,udp,147.32.84.138,55164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,83,193,138.0,0.3007246376811594,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:53:29.706941,626.986633,udp,147.32.84.229,13363.0,<->,88.192.125.9,38516.0,CON,0.0,0.0,4,1968,200,1768,492.0,0.1016260162601626,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:53:36.576176,64.296242,tcp,147.32.84.165,3640.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:53:39.464349,0.000413,udp,147.32.84.170,51192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:39.465325,0.000275,udp,147.32.84.170,34501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:40.003010,3089.492188,udp,2.120.136.154,45711.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1465,1093,372,122.08333333333333,0.7460750853242321,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:53:41.124674,0.000324,udp,147.32.84.138,39825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:53:41.710455,9.04662,tcp,147.32.85.74,56183.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,0,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 00:53:49.465396,0.000375,udp,147.32.84.170,50066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:53:53.072350,538.362427,tcp,147.32.84.68,52753.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,18,9463,6550,2913,525.7222222222222,0.6921695022720068,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:53:54.061579,0.000249,udp,147.32.84.138,54698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:53:59.465110,0.000402,udp,147.32.84.170,53253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:04.514271,0.000214,udp,147.32.85.34,52846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:04.550861,0.000251,udp,147.32.85.34,61785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,85,214,149.5,0.2842809364548495,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:09.466617,0.000241,udp,147.32.84.170,45850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:12.615809,0.000219,udp,147.32.85.25,37492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:13.221268,0.000365,udp,147.32.84.138,56032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:16.109370,0.246647,tcp,147.32.84.170,37911.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:19.466461,0.000316,udp,147.32.84.170,41102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:19.467576,0.018157,tcp,147.32.84.170,53904.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:19.640759,0.000378,udp,62.65.142.51,14250.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:54:25.676189,0.000135,udp,108.87.13.139,31173.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:54:27.737188,0.000373,udp,147.32.85.25,35652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:39.465432,0.000378,udp,147.32.84.170,33037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:40.449163,61.270802,tcp,147.32.84.165,3641.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:54:42.890833,3006.560547,udp,67.188.87.56,46624.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:54:44.264281,0.000258,udp,147.32.84.138,60411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:54:56.441263,3562.564453,udp,68.42.225.141,63564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1973,427,1546,246.625,0.21642169285352256,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:54:58.192885,3568.845947,tcp,147.32.84.229,13363.0,,2.28.139.37,50092.0,PA_PA,0.0,0.0,322,28308,12381,15927,87.91304347826087,0.4373675286138194,0,0,flow=Background,Background,-1 2011-08-17 00:54:59.315012,0.031582,udp,147.32.84.229,13363.0,<->,95.80.14.248,30193.0,CON,0.0,0.0,2,136,74,62,68.0,0.5441176470588235,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:54:59.465505,0.000508,udp,147.32.84.170,49587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:54:59.467584,0.018274,tcp,147.32.84.170,48903.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:05.823158,0.022103,udp,62.245.66.71,28044.0,<->,147.32.85.9,161.0,CON,0.0,0.0,2,241,119,122,120.5,0.49377593360995853,0,1,flow=Background-UDP-Established,Background,-1 2011-08-17 00:55:08.578175,0.000257,udp,147.32.84.138,46418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:55:09.468344,0.017806,tcp,147.32.84.170,55027.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:18.077305,24.309702,tcp,84.235.75.80,62418.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,19,1673,908,765,88.05263157894737,0.5427375971309025,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:55:18.113600,0.235662,tcp,147.32.84.170,37919.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:18.994965,3021.556396,udp,79.45.157.9,11042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:55:23.391701,0.000471,udp,142.179.24.232,61604.0,<->,147.32.84.229,13363.0,CON,1.0,0.0,2,574,81,493,287.0,0.14111498257839722,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:55:29.465347,0.000581,udp,147.32.84.170,44909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:29.466489,0.000433,udp,147.32.84.170,49958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:31.789150,3082.10498,udp,78.168.152.7,7768.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:55:35.224007,9.015251,tcp,89.126.95.179,48617.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,588,222,366,73.5,0.37755102040816324,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:55:35.602654,0.157092,tcp,147.32.84.164,47970.0,->,193.34.51.3,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,0,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 00:55:41.296977,61.256008,tcp,147.32.84.165,3642.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:55:42.781367,0.000199,udp,147.32.84.138,33137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:55:49.111252,0.000379,udp,147.32.84.170,54964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:49.466513,0.000309,udp,147.32.84.170,40043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:55:59.466640,0.000255,udp,147.32.84.170,53709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:04.381073,3007.960938,udp,147.32.84.229,13363.0,<->,99.95.181.11,53972.0,CON,0.0,0.0,5,656,583,73,131.2,0.8887195121951219,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:56:09.134572,0.000334,udp,147.32.84.138,51971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:09.467719,0.019551,tcp,147.32.84.170,53918.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:15.485032,0.000261,udp,147.32.84.138,56848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:20.113518,0.000295,udp,147.32.84.170,52894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:25.523662,0.000232,udp,147.32.84.138,54889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:29.215422,0.000326,udp,147.32.84.138,50393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:29.467558,0.018259,tcp,147.32.84.170,55038.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:35.583848,0.001651,udp,190.128.105.87,42678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:56:39.718566,0.000248,udp,147.32.84.138,45539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:42.134743,67.255104,tcp,147.32.84.165,3643.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:56:49.465748,0.000511,udp,147.32.84.170,46660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:49.467818,0.018125,tcp,147.32.84.170,53091.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:51.112830,0.00025,udp,147.32.84.170,44880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:56:51.152472,0.000344,udp,147.32.85.25,34111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:54.189699,0.000398,udp,98.226.135.43,58475.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:56:56.933765,0.000371,udp,147.32.86.20,63026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:57.669151,0.000281,udp,147.32.84.138,43430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:56:59.465720,0.000442,udp,147.32.84.170,37770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:09.465747,0.000453,udp,147.32.84.170,44694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:09.467826,0.021919,tcp,147.32.84.170,54695.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:12.036374,0.000567,udp,173.32.194.55,18619.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1122,77,1045,561.0,0.06862745098039216,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:18.019226,0.000195,udp,147.32.84.138,47192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:57:19.466769,0.000466,udp,147.32.84.170,39383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:19.588451,0.000549,udp,134.2.162.128,13498.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,76,496,286.0,0.13286713286713286,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:20.732993,0.518334,udp,123.98.134.11,2175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,261,136,125,65.25,0.5210727969348659,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:23.585641,6.34216,tcp,66.249.72.182,48276.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,27,15781,1338,14443,584.4814814814815,0.08478550155249984,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:57:26.327254,0.14035,udp,147.32.84.229,13363.0,<->,75.109.72.184,38639.0,CON,0.0,0.0,2,544,77,467,272.0,0.14154411764705882,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:31.195043,0.003833,udp,98.251.234.204,12565.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2959,60,2899,739.75,0.02027712064886786,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:37.812349,0.0,igmp,147.32.87.29,,->,239.255.255.250,,INT,0.0,,1,60,60,0,60.0,1.0,0,,flow=Background,Background,-1 2011-08-17 00:57:39.465837,0.000428,udp,147.32.84.170,41770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:39.467846,0.021928,tcp,147.32.84.170,53098.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,8,544,272,272,68.0,0.5,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:57:42.057247,0.137597,udp,147.32.84.171,44066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,187,71,116,93.5,0.37967914438502676,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:57:42.823240,0.000255,udp,147.32.85.25,46621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:57:43.908488,1275.105347,udp,90.216.114.8,25182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2820,2520,300,282.0,0.8936170212765957,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:46.047325,61.271778,tcp,147.32.84.165,3644.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:57:49.482582,0.000377,udp,81.225.198.111,55891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:57:53.812057,0.000277,udp,147.32.86.20,55592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:57:58.500977,0.000366,udp,91.138.31.109,29381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:04.232212,0.000286,udp,147.32.85.34,49164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,85,210,147.5,0.288135593220339,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:58:05.535893,2525.235107,udp,209.6.154.3,1946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1120,152,968,280.0,0.1357142857142857,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:09.465941,0.000349,udp,147.32.84.170,38041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:13.152774,0.339813,tcp,147.32.84.170,33135.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:14.185274,250.035934,tcp,147.32.84.170,39584.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:17.248018,0.000194,udp,147.32.84.138,44099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:58:24.113038,0.000412,udp,147.32.84.170,36349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:24.290772,1.874119,tcp,174.133.5.250,39878.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,127,98573,4608,93965,776.1653543307086,0.046747080843638725,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:58:29.465885,0.000324,udp,147.32.84.170,36714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:29.466773,0.000443,udp,147.32.84.170,38410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:29.467922,0.018221,tcp,147.32.84.170,53117.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:33.374977,0.000265,udp,147.32.84.138,40732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:58:36.566060,0.0002,udp,147.32.84.138,49198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:58:36.647404,33.53056,udp,147.32.84.229,13363.0,<->,71.239.132.119,59399.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:38.552468,0.000499,udp,77.85.167.131,36512.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:38.704180,0.0,igmp,147.32.87.3,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,0,,flow=Background,Background,-1 2011-08-17 00:58:39.468767,0.021241,tcp,147.32.84.170,36513.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:46.895497,61.270168,tcp,147.32.84.165,3645.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:58:49.186032,0.307723,udp,147.32.84.229,13363.0,<->,190.55.112.76,62434.0,CON,0.0,0.0,4,2942,60,2882,735.5,0.020394289598912305,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:49.190238,0.00052,udp,78.90.46.49,50989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:49.244799,0.000303,udp,147.32.84.166,40022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:58:49.466806,0.000442,udp,147.32.84.170,43620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:50.374510,1274.095337,udp,83.204.239.213,41301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,467,343,124,116.75,0.734475374732334,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:58:55.115393,0.000216,udp,147.32.84.170,37033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:58:57.238819,0.0,tcp,212.85.217.35,58633.0,?>,147.32.84.229,13363.0,RA_,0.0,,1,60,60,0,60.0,1.0,0,0,flow=Background,Background,-1 2011-08-17 00:58:59.466863,0.000336,udp,147.32.84.170,43777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:09.466640,0.000323,udp,147.32.84.170,35153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:11.435285,0.000595,udp,173.248.213.139,1027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,74,511,292.5,0.1264957264957265,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:59:13.993019,0.000228,udp,147.32.85.25,55431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:59:15.175359,0.208063,udp,147.32.84.229,13363.0,<->,76.94.166.20,31324.0,CON,0.0,0.0,4,2943,60,2883,735.75,0.020387359836901122,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:59:19.467807,0.018073,tcp,147.32.84.170,54724.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:29.467906,0.017656,tcp,147.32.84.170,53125.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:32.856226,16.059895,tcp,190.91.195.180,2517.0,->,147.32.84.22,22.0,FSPA_FSPA,0.0,0.0,25,5360,2307,3053,214.4,0.430410447761194,0,1,flow=Background-TCP-Established,Background,-1 2011-08-17 00:59:35.961952,0.010563,tcp,147.32.86.96,52624.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,592,0,592,74.0,0.0,0,0,flow=Background-TCP-Established,Background,-1 2011-08-17 00:59:39.564525,0.000194,udp,147.32.85.25,50904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:59:41.760426,0.00098,udp,41.218.195.224,15529.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:59:42.512945,0.59655,udp,218.173.45.162,64843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,783,141,642,195.75,0.18007662835249041,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:59:47.742558,70.103615,tcp,147.32.84.165,3646.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,13,1331,632,699,102.38461538461539,0.47483095416979715,0,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 00:59:51.958437,3402.77832,udp,95.29.79.179,46899.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,702,153,549,175.5,0.21794871794871795,0,0,flow=Background-UDP-Established,Background,-1 2011-08-17 00:59:57.126301,0.000298,udp,147.32.84.170,38429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:57.127268,0.000447,udp,147.32.84.170,33197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 00:59:59.364224,0.000176,udp,147.32.84.138,39496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,0,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 00:59:59.468951,0.017901,tcp,147.32.84.170,36524.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,0,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:01.400432,0.000259,udp,147.32.87.36,37178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,1,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 01:00:01.886972,0.000267,udp,147.32.87.36,47845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,1,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 01:00:07.074678,0.000184,udp,147.32.87.40,41087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:07.881260,0.000434,udp,147.32.86.20,65070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:10.324488,0.000166,udp,147.32.87.36,52674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,1,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 01:00:17.234254,0.000158,udp,147.32.84.138,48686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:23.870810,0.000238,udp,147.32.84.138,34705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:28.114578,0.000294,udp,147.32.84.170,54881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:28.192799,0.000318,udp,147.32.86.20,60366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:29.467146,0.00035,udp,147.32.84.170,60952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:30.735805,0.000592,udp,147.32.85.25,50148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:49.468211,0.000458,udp,147.32.84.170,54351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:51.455587,61.257198,tcp,147.32.84.165,3647.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:00:57.059675,0.000215,udp,147.32.84.22,45506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,113,163,138.0,0.40942028985507245,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:00:59.115240,0.000291,udp,147.32.84.170,35298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:59.116101,0.000287,udp,147.32.84.170,58270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:00:59.117460,0.319858,tcp,147.32.84.170,55242.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:04.929080,2.181778,tcp,174.133.5.250,37422.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,15,5780,881,4899,385.3333333333333,0.15242214532871973,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:01:09.499114,0.000282,udp,99.141.144.153,5584.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:11.279004,0.100121,udp,147.32.84.229,13363.0,<->,94.24.217.15,58287.0,CON,0.0,0.0,2,135,74,61,67.5,0.5481481481481482,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:11.764761,0.000318,udp,147.32.85.25,37326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:01:11.820480,0.000394,udp,97.103.196.67,49882.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:17.013519,0.000401,udp,147.32.84.59,58049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:01:19.308088,0.001627,udp,94.209.31.231,5787.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,504,60,282.0,0.8936170212765957,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:24.877804,0.001582,udp,193.120.212.14,13491.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,487,60,273.5,0.8903107861060329,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:29.468187,0.000283,udp,147.32.84.170,47103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:29.469187,0.018412,tcp,147.32.84.170,46371.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:30.123305,0.000321,udp,147.32.84.170,43258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:30.125193,0.289069,tcp,147.32.84.170,55247.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:31.033571,0.000373,udp,70.77.39.123,2361.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:01:36.853520,0.000246,udp,147.32.84.138,60717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:01:39.468327,0.000314,udp,147.32.84.170,51919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:42.105549,0.00022,udp,147.32.84.138,41610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:01:49.468239,0.000317,udp,147.32.84.170,53325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:01:52.294474,64.379509,tcp,147.32.84.165,3648.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:01:54.817778,0.000488,udp,188.95.214.186,41668.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:02:01.114033,0.000215,udp,147.32.84.170,56957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:04.018347,0.000226,udp,147.32.85.34,60028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:02:09.467318,0.000441,udp,147.32.84.170,46414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:12.175302,2498.955322,udp,195.113.37.24,427.0,->,239.255.255.253,427.0,INT,0.0,,19,2359,2359,0,124.15789473684211,1.0,1,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:02:13.765083,0.000349,udp,188.62.55.43,51467.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:02:18.590272,0.000307,udp,201.88.212.84,12897.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:02:22.171804,0.000351,udp,196.221.195.141,27411.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,87,60,73.5,0.5918367346938775,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:02:29.261540,0.230011,tcp,147.32.86.20,1481.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:02:33.044291,0.000507,udp,92.239.5.244,23389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:02:39.467457,0.000425,udp,147.32.84.170,59095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:39.468395,0.000236,udp,147.32.84.170,34474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:49.467381,0.000388,udp,147.32.84.170,54435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:49.469373,0.018548,tcp,147.32.84.170,42801.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:02:52.597031,4.567207,tcp,66.249.66.250,42610.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,20,8395,1490,6905,419.75,0.17748659916617035,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:02:56.256156,61.270645,tcp,147.32.84.165,3649.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:02:56.560929,0.000506,udp,131.191.52.50,45633.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:03:09.468365,0.000425,udp,147.32.84.170,45115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:09.469483,0.01807,tcp,147.32.84.170,42804.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:09.649683,3167.001465,udp,147.32.87.212,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,1,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 01:03:12.677336,0.364656,tcp,67.195.112.52,47061.0,->,147.32.85.85,80.0,FSPA_FSPA,0.0,0.0,9,1311,531,780,145.66666666666666,0.40503432494279173,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:03:13.486800,0.273364,tcp,147.32.84.170,49417.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:13.544181,0.258573,tcp,147.32.84.170,50380.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:13.752233,0.249392,tcp,147.32.84.170,49419.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:34.114361,0.000313,udp,147.32.84.170,59314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:34.115256,0.000318,udp,147.32.84.170,45587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:35.196722,4e-06,udp,147.32.85.25,40676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:03:36.583163,1.811035,tcp,174.133.5.250,47791.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,23,13369,1142,12227,581.2608695652174,0.08542149749420301,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:03:37.429450,3028.294189,udp,69.245.75.85,17217.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:03:39.186651,0.00024,tcp,67.195.115.95,54752.0,->,147.32.87.36,8085.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 01:03:39.468652,0.000339,udp,147.32.84.170,38867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:41.864247,1276.491333,udp,24.9.131.79,4379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,500,376,124,125.0,0.752,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:03:42.064799,0.000496,udp,75.103.8.2,63907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:03:48.810762,6.40335,tcp,66.249.72.176,44756.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,38,20759,1888,18871,546.2894736842105,0.09094850426321113,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:03:49.467380,0.000502,udp,147.32.84.170,54007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:03:56.101919,0.00047,udp,68.199.89.12,2134.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:03:57.103716,61.256126,tcp,147.32.84.165,3650.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:03:59.467585,0.000365,udp,147.32.84.170,54479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:04:04.820817,0.000308,udp,147.32.85.34,55479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:04:04.850591,0.000298,udp,147.32.85.34,58691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:04:06.269253,0.000395,udp,68.35.239.214,4254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:04:19.469153,0.000248,udp,147.32.84.170,51964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:04:19.471071,0.017932,tcp,147.32.84.170,56930.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:04:23.860934,0.000334,udp,147.32.86.20,63764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:04:35.366914,0.000539,udp,99.112.236.223,62017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,82,60,71.0,0.5774647887323944,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:04:36.114323,0.000237,udp,147.32.84.170,53339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:04:49.467676,0.000323,udp,147.32.84.170,36188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:04:50.623659,0.000275,udp,147.32.84.138,55113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:04:50.839224,0.00052,udp,119.230.32.222,16051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:04:57.941738,64.120239,tcp,147.32.84.165,3651.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:04:58.492807,0.000303,udp,147.32.85.25,49945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:04:59.469535,0.018337,tcp,147.32.84.170,42006.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:07.116009,0.000194,udp,147.32.84.170,41130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:07.116725,0.000264,udp,147.32.84.170,46757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:07.118021,0.228201,tcp,147.32.84.170,35867.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:08.510797,0.000263,udp,147.32.85.25,59751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:05:09.467483,0.000448,udp,147.32.84.170,38511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:09.468441,0.000579,udp,147.32.84.170,54742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:11.003638,0.000374,udp,124.150.97.137,56831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:05:12.418697,1354.154053,udp,89.100.21.140,60777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,717,531,186,119.5,0.7405857740585774,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:05:16.240225,0.00016,udp,147.32.84.138,39418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:05:18.693837,0.000365,udp,147.32.85.25,33028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:05:19.468617,0.000252,udp,147.32.84.170,56412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:26.390081,0.000245,udp,147.32.84.138,40606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:05:29.467843,0.000304,udp,147.32.84.170,39911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:39.488392,0.000323,udp,147.32.84.170,43234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:49.468673,0.000336,udp,147.32.84.170,54401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:59.468769,0.000278,udp,147.32.84.170,41712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:05:59.469760,0.018197,tcp,147.32.84.170,42014.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:01.643817,61.255852,tcp,147.32.84.165,3652.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:06:02.126308,0.000519,udp,92.24.87.234,64895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:02.484713,0.000526,udp,85.220.22.218,65333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:04.680161,0.000284,udp,147.32.85.34,58754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:06:05.911177,0.000333,udp,147.32.84.138,48159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:06:09.467901,0.000287,udp,147.32.84.170,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:09.740463,0.003803,udp,95.67.197.242,24386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2945,60,2885,736.25,0.02037351443123939,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:19.468731,0.000282,udp,147.32.84.170,50306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:22.713688,0.000496,udp,41.35.102.196,12189.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,80,514,297.0,0.13468013468013468,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:29.467879,0.000345,udp,147.32.84.170,54017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:29.667283,0.113365,udp,147.32.84.229,13363.0,<->,174.92.177.148,3385.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:39.470167,0.018417,tcp,147.32.84.170,42837.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:41.481016,0.000273,udp,147.32.84.138,58682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:06:42.043641,0.000345,icmp,147.32.86.96,,<-,147.32.87.5,12357.0,RED,,0.0,2,196,0,196,98.0,0.0,1,0,flow=Background,Background,-1 2011-08-17 01:06:46.433358,0.000412,udp,94.43.51.43,19175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:47.646053,0.000353,udp,147.32.84.138,36554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:06:49.469471,0.000435,udp,147.32.84.170,39358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:56.454340,0.001215,udp,189.55.90.234,13872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,952,79,873,476.0,0.08298319327731092,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:06:59.467776,0.000364,udp,147.32.84.170,35568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:06:59.469870,0.018092,tcp,147.32.84.170,43170.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:02.481828,61.270908,tcp,147.32.84.165,3653.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:07:07.208819,0.134648,tcp,147.32.86.20,1728.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:07:09.468076,0.000502,udp,147.32.84.170,35397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:09.469200,0.000342,udp,147.32.84.170,34977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:11.117406,0.256933,tcp,147.32.84.170,41918.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:12.575292,2.781726,tcp,147.32.86.95,57975.0,->,147.32.87.54,2222.0,_FSPA,,0.0,122,8446,0,8446,69.22950819672131,0.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:07:19.467776,0.000338,udp,147.32.84.170,59428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:24.949622,0.00068,udp,84.126.123.121,64894.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,653,74,579,326.5,0.11332312404287902,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:25.575443,0.00033,udp,109.205.248.9,57529.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:29.470013,0.018442,tcp,147.32.84.170,54514.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:30.216541,1794.76709,udp,109.242.15.93,64198.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,3250,736,2514,147.72727272727272,0.22646153846153846,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:42.114852,0.000328,udp,147.32.84.170,50221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:42.944057,0.000385,udp,72.88.135.132,12130.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:49.468705,0.000331,udp,147.32.84.170,56106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:07:52.467588,0.000283,udp,147.32.84.59,35508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:07:52.947753,0.000287,udp,147.32.84.138,59147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:07:54.085161,3076.974609,udp,59.101.185.21,38434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:54.837203,0.147348,udp,147.32.84.229,13363.0,<->,96.20.140.58,55397.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:07:58.675790,0.000231,udp,147.32.85.25,60502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:08:03.329055,61.257454,tcp,147.32.84.165,3654.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:08:09.469034,0.000287,udp,147.32.84.170,51160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:09.469982,0.018104,tcp,147.32.84.170,55581.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:10.690445,2104.678223,udp,202.88.85.220,21267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:08:13.459688,0.289809,tcp,147.32.84.170,33454.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:13.752117,0.250213,tcp,147.32.84.170,45590.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:19.467916,0.000464,udp,147.32.84.170,34992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:19.468856,0.000386,udp,147.32.84.170,34955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:19.469918,0.01781,tcp,147.32.84.170,54533.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:27.185346,0.366749,udp,147.32.84.229,13363.0,<->,59.113.226.248,25919.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:08:30.000395,8e-06,udp,147.32.87.48,4242.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,1,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:08:34.485116,3160.152588,udp,147.32.84.59,123.0,<->,206.253.172.127,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,1,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 01:08:38.805605,221.033295,udp,147.32.84.229,13363.0,<->,71.61.183.172,18478.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:08:39.469982,0.000275,udp,147.32.84.170,45536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:44.212200,0.025813,udp,147.32.84.170,47550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:44.239055,0.236644,tcp,147.32.84.170,60378.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:44.615560,0.00034,udp,151.37.93.4,30917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:08:45.527743,0.836193,tcp,147.32.86.20,1813.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,93346,1586,91760,1003.7204301075269,0.01699055128232597,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:08:46.243231,0.0,igmp,147.32.87.7,,->,224.0.1.35,,INT,0.0,,1,60,60,0,60.0,1.0,1,,flow=Background,Background,-1 2011-08-17 01:08:50.292222,100.583473,tcp,147.32.84.59,9062.0,->,66.220.158.47,443.0,FSPA_FSPA,0.0,0.0,14,3410,1932,1478,243.57142857142858,0.5665689149560117,1,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 01:08:59.469055,0.00049,udp,147.32.84.170,59969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:08:59.470155,0.000296,udp,147.32.84.170,35640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:01.306051,0.000161,udp,147.32.84.138,42498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:09:01.306125,0.000208,udp,147.32.84.138,56282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:09:04.045685,1.060342,tcp,194.230.155.28,41428.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,17,1755,768,987,103.23529411764706,0.4376068376068376,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:09:04.168299,63.9856,tcp,147.32.84.165,3655.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:09:05.751900,0.037212,tcp,147.32.85.74,43133.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,1343,608,735,149.22222222222223,0.4527177959791511,1,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 01:09:14.398533,0.000239,udp,147.32.84.138,41431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:09:15.126342,0.238394,tcp,147.32.84.170,60382.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:29.470150,0.000266,udp,147.32.84.170,35953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:30.070025,0.000247,udp,147.32.85.25,45135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:09:39.469927,0.000281,udp,147.32.84.170,49505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:46.117288,0.210647,tcp,147.32.84.170,60386.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:49.470175,0.000393,udp,147.32.84.170,42084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:09:56.517097,0.00172,udp,166.182.65.15,27876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:09:59.469056,0.000447,udp,147.32.84.170,54534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:03.131292,0.000318,udp,147.32.84.138,38791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:04.415046,0.00033,udp,147.32.85.34,51504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:05.172111,3508.606201,udp,147.32.84.229,13363.0,<->,77.47.186.245,21390.0,CON,0.0,0.0,114,18843,9840,9003,165.28947368421052,0.52220983919758,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:10:07.730657,61.270634,tcp,147.32.84.165,3656.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:10:08.515091,0.000156,udp,147.32.84.138,47643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:09.470340,0.000317,udp,147.32.84.170,37596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:16.116112,0.00034,udp,147.32.84.170,36342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:16.117042,0.000313,udp,147.32.84.170,48916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:20.126942,0.000243,udp,147.32.84.138,47935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:23.462092,0.000212,udp,147.32.84.138,42455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:24.313079,0.001775,udp,151.95.166.145,55182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:10:28.718946,0.000419,udp,147.32.86.20,51409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:29.469324,0.000381,udp,147.32.84.170,34367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:29.470248,0.000369,udp,147.32.84.170,56586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:34.645252,890.698303,udp,147.32.84.229,13363.0,->,93.145.113.198,41267.0,INT,0.0,,9,1206,1206,0,134.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:10:41.146911,0.000548,udp,174.91.93.232,54840.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:10:41.921464,0.214747,udp,147.32.84.229,13363.0,<->,76.126.158.9,15624.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:10:44.544498,0.0,udp,46.176.198.212,44531.0,->,147.32.86.31,60722.0,INT,0.0,,1,109,109,0,109.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:10:45.715949,0.107283,tcp,147.32.84.164,50883.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:10:46.116063,0.00031,udp,147.32.84.170,41341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:49.469376,0.000375,udp,147.32.84.170,50313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:49.470379,0.00029,udp,147.32.84.170,40103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:49.471310,0.01784,tcp,147.32.84.170,50365.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:10:59.172240,0.000349,udp,147.32.84.138,53179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:10:59.471100,0.018597,tcp,147.32.84.170,54554.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:01.523537,0.04126,udp,147.32.84.171,41590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,79,237,158.0,0.25,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:02.035857,1889.792969,udp,131.220.80.164,35159.0,->,147.32.86.165,12114.0,INT,0.0,,6,1056,1056,0,176.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:11:03.934642,0.000257,udp,147.32.84.171,46346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,94,144,119.0,0.3949579831932773,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:08.577789,61.270546,tcp,147.32.84.165,3657.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:11:09.471611,0.000315,udp,147.32.84.170,34663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:17.118526,0.222706,tcp,147.32.84.170,60398.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:19.469490,0.00034,udp,147.32.84.170,36638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:32.096111,0.000217,udp,147.32.86.20,64739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:33.711628,0.00029,udp,147.32.84.138,40109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:40.782900,65.378204,tcp,147.32.84.162,54337.0,->,147.32.80.13,80.0,SRPA_SPA,0.0,0.0,8,1420,948,472,177.5,0.6676056338028169,1,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 01:11:44.429828,0.0002,udp,147.32.84.59,33859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:48.117216,0.000337,udp,147.32.84.170,52465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:48.974218,0.000416,udp,147.32.85.25,37079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:11:49.471560,0.000437,udp,147.32.84.170,57383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:11:53.584208,0.000268,udp,147.32.84.138,55343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:12:07.007237,0.069668,tcp,147.32.86.88,63523.0,->,147.32.87.3,38129.0,_FSPA,,0.0,8,2808,0,2808,351.0,0.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:12:09.425144,61.256729,tcp,147.32.84.165,3658.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:12:09.472063,0.018488,tcp,147.32.84.170,58257.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:09.675393,2142.695557,udp,91.177.126.193,34821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,4228,154,4074,704.6666666666666,0.03642384105960265,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:12:19.118033,0.000374,udp,147.32.84.170,60312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:19.119410,0.292701,tcp,147.32.84.170,60709.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:29.472112,0.018169,tcp,147.32.84.170,34913.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:36.173338,3178.470215,udp,95.43.120.248,1091.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,513,389,124,128.25,0.7582846003898636,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:12:39.469580,0.000517,udp,147.32.84.170,40329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:39.471683,0.017695,tcp,147.32.84.170,48070.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:39.635081,9.000905,tcp,166.205.138.227,26391.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,26,1766,1148,618,67.92307692307692,0.6500566251415628,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:12:46.037787,0.000299,udp,147.32.86.20,54362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:12:47.130899,0.000254,udp,147.32.84.184,56468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:12:48.722370,0.000606,udp,31.152.52.25,11329.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,77,482,279.5,0.13774597495527727,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:12:49.471606,0.018199,tcp,147.32.84.170,34915.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:12:50.372615,2.078402,tcp,174.133.5.250,45081.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,46,30373,1954,28419,660.2826086956521,0.06433345405458796,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:12:53.475474,0.001739,udp,75.140.5.47,5213.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:12:56.061450,0.00028,udp,147.32.86.34,36379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:12:59.471064,0.000289,udp,147.32.84.170,45099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:13:04.771209,0.041996,udp,147.32.84.229,13363.0,<->,81.165.244.146,20370.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:13:07.577775,407.980347,udp,147.32.84.229,13363.0,<->,111.240.207.47,8816.0,CON,0.0,0.0,8,544,304,240,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:13:08.119688,0.000565,udp,109.161.11.95,54748.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,77,482,279.5,0.13774597495527727,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:13:09.535716,0.000239,udp,147.32.84.138,38516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:10.263869,61.272808,tcp,147.32.84.165,3659.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:13:12.847810,0.000224,udp,147.32.84.138,35776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:18.313521,1701.635254,tcp,147.32.84.242,50451.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:13:18.336813,0.000181,udp,147.32.84.242,54756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:19.014342,3085.853027,udp,95.72.234.51,39240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:13:19.471604,0.000133,udp,147.32.84.170,36140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:13:19.472276,0.000309,udp,147.32.84.170,35212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:13:21.045403,1507.167847,tcp,147.32.84.242,45915.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:13:21.273700,0.002656,tcp,147.32.84.242,48299.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:13:21.345337,0.000305,udp,147.32.84.242,49858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:21.385316,2455.395264,tcp,147.32.84.242,46173.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:13:21.497804,0.008295,tcp,147.32.84.242,50858.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:13:21.638810,0.000157,udp,147.32.84.242,59770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:21.881204,0.000359,udp,147.32.84.242,41439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:25.768342,0.000311,udp,109.165.187.60,24283.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:13:28.729918,0.000329,udp,147.32.84.138,57840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:31.199569,0.000191,udp,147.32.84.138,37124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:31.436744,0.000196,udp,147.32.84.138,44244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:36.988910,0.000208,udp,147.32.85.25,50212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:13:39.845631,9.009743,tcp,147.32.84.179,52667.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,1,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:13:47.484382,0.000954,tcp,147.32.87.249,1349.0,->,147.32.87.54,2222.0,_FSA,,0.0,6,364,0,364,60.666666666666664,0.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:13:49.762783,10.606792,tcp,206.80.197.122,53159.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,47,5790,2522,3268,123.19148936170212,0.43557858376511227,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:13:52.117170,0.000266,udp,147.32.84.170,56998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:13:59.469649,0.000477,udp,147.32.84.170,42090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:02.334663,0.007858,tcp,147.32.86.34,42114.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:02.544544,0.000314,udp,147.32.84.242,36088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:02.767618,0.000177,udp,147.32.84.242,45019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:07.845219,1646.636475,udp,82.12.162.168,39414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1260,154,1106,315.0,0.12222222222222222,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:14:09.470730,0.000432,udp,147.32.84.170,49747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:09.472866,0.018241,tcp,147.32.84.170,58279.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:11.113109,64.240181,tcp,147.32.84.165,3660.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:14:14.048281,0.00025,udp,147.32.84.138,40091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:16.548308,0.000157,udp,147.32.85.89,39907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:18.782635,0.000233,udp,147.32.84.242,45713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:19.180618,0.011338,tcp,147.32.84.242,51205.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:19.470758,0.000411,udp,147.32.84.170,54858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:19.471694,0.000432,udp,147.32.84.170,47025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:21.041419,0.00034,udp,147.32.84.242,43190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:21.085229,0.000135,udp,147.32.84.242,59288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:21.086665,0.008355,tcp,147.32.84.242,51283.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:21.137877,0.000272,udp,147.32.84.242,44764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:21.340066,0.002189,tcp,147.32.84.242,49122.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:21.462195,0.003019,tcp,147.32.84.242,49238.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:21.478220,0.000214,udp,147.32.84.242,38080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:21.501970,2835.993652,tcp,147.32.84.242,47077.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:14:21.546840,0.000318,udp,147.32.84.242,35185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:21.895672,0.009261,tcp,147.32.84.242,51823.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:14:23.116651,0.000261,udp,147.32.84.170,51606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:23.118844,0.221276,tcp,147.32.84.170,60732.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:39.472938,0.017903,tcp,147.32.84.170,42627.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:14:43.376062,0.000348,udp,147.32.85.25,37238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:47.581316,0.000349,udp,147.32.84.138,48494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:49.746149,0.000222,udp,147.32.84.138,60156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:14:59.472831,0.018152,tcp,147.32.84.170,58286.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:15:02.178549,0.00025,udp,147.32.86.34,38849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:11.949976,61.255962,tcp,147.32.84.165,3661.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:15:12.996666,0.000384,udp,77.228.162.177,50585.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:24.836140,0.000445,udp,147.32.86.92,59422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,85,236,160.5,0.26479750778816197,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:27.626083,0.000369,udp,147.32.84.242,52511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:27.740576,0.000246,udp,147.32.84.242,46989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:27.766429,0.000385,udp,147.32.84.242,48547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:27.809287,0.002434,tcp,147.32.84.242,49884.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:15:28.107926,0.010022,tcp,147.32.84.242,52626.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:15:34.753169,0.000374,udp,184.39.4.43,50320.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,227,165,62,113.5,0.7268722466960352,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:37.555441,0.000245,udp,147.32.84.138,38185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:37.800224,0.000302,udp,147.32.84.138,53868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:15:39.482174,0.018034,tcp,147.32.84.170,46779.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:15:47.883779,0.47519,udp,85.62.233.215,39545.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,886,697,189,147.66666666666666,0.7866817155756207,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:48.931259,1.020769,tcp,147.32.86.88,63619.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:15:49.573492,0.000509,udp,201.78.248.171,27864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,73,493,283.0,0.12897526501766785,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:51.870411,0.036549,udp,147.32.84.229,13363.0,<->,77.249.168.236,14431.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:51.929441,0.000382,udp,87.21.48.9,27563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:15:59.472807,0.018778,tcp,147.32.84.170,42638.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:04.001717,0.000224,udp,147.32.85.34,50136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:09.470993,0.000306,udp,147.32.84.170,60082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:10.185094,0.000403,udp,147.32.86.34,50339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:10.265097,0.003935,tcp,147.32.86.34,36414.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:10.698588,0.000318,udp,147.32.84.242,50109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:11.170704,0.002278,udp,69.126.176.45,22984.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:16:12.787865,64.130096,tcp,147.32.84.165,3662.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:16:15.421296,0.000166,udp,147.32.85.25,56065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:19.471854,0.000511,udp,147.32.84.170,60612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:20.701233,0.000328,udp,147.32.84.138,48961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:27.117354,0.000292,udp,147.32.84.170,48647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:27.118119,0.00037,udp,147.32.84.170,35873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:28.010037,393.148926,tcp,147.32.84.242,56148.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:28.081744,0.000537,udp,147.32.84.242,58382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:28.091126,0.003929,tcp,147.32.84.242,32807.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:28.100246,0.000318,udp,147.32.84.242,48084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:28.142724,0.000386,udp,147.32.84.242,39045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:28.156001,646.486145,tcp,147.32.84.242,56310.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:28.160280,0.004035,tcp,147.32.84.242,32886.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:28.378337,0.007843,tcp,147.32.84.242,56557.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:28.405562,0.000386,udp,147.32.84.242,56100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:28.469667,0.004092,tcp,147.32.84.242,33228.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:28.643628,0.000349,udp,147.32.84.242,36776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:28.786623,1822.262695,tcp,147.32.84.242,33491.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:28.922407,340.599487,tcp,147.32.84.242,53004.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:29.022787,2015.580078,tcp,147.32.84.242,56969.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:29.081534,1822.042236,tcp,147.32.84.242,33551.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:16:29.471937,0.000261,udp,147.32.84.170,50546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:30.677660,0.000183,udp,147.32.84.138,36537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:33.675221,0.000504,udp,24.14.27.123,2294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:16:33.808505,0.000404,udp,147.32.84.138,54320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:37.549401,0.001371,udp,75.110.197.251,48867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:16:38.443959,0.000235,udp,147.32.84.138,55178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:38.546835,0.000237,udp,147.32.84.138,55779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:16:39.472071,0.00045,udp,147.32.84.170,44387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:48.526133,5.990665,udp,147.32.84.229,13363.0,->,87.198.113.233,24754.0,INT,0.0,,3,234,234,0,78.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:16:54.049676,0.979011,udp,147.32.87.48,4327.0,->,147.32.87.101,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,1,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:16:56.652582,0.071309,tcp,213.40.79.217,61624.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,10,1072,553,519,107.2,0.5158582089552238,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:16:58.120683,0.192872,tcp,147.32.84.170,60325.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:16:59.195894,0.000485,udp,74.215.104.103,50373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:16:59.471932,0.000278,udp,147.32.84.170,56671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:17:04.886444,0.000382,udp,71.109.175.110,19769.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:17:07.004460,274.993439,udp,147.32.84.229,13363.0,<->,69.247.11.201,51826.0,CON,0.0,0.0,8,544,288,256,68.0,0.5294117647058824,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:17:10.051559,0.000281,udp,147.32.84.242,47427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:10.053749,0.00019,udp,147.32.84.242,40690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:10.231542,0.003881,tcp,147.32.86.34,34951.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:10.305495,1780.956055,tcp,147.32.84.242,33641.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:10.572354,2667.128418,tcp,147.32.84.242,57125.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,40,3880,2204,1676,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:10.583299,0.003879,tcp,147.32.84.242,33695.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:13.188704,0.000294,udp,80.174.29.156,61714.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:17:16.500027,70.589226,tcp,147.32.84.165,3663.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1196,557,639,99.66666666666667,0.4657190635451505,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:17:20.133127,0.000219,udp,147.32.84.138,33987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:21.030217,0.000258,udp,147.32.84.138,57473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:23.947525,0.000419,udp,147.32.84.171,44595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,86,159,122.5,0.3510204081632653,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:28.116605,0.237163,tcp,147.32.84.170,60329.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:17:29.473074,0.018026,tcp,147.32.84.170,42435.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:17:33.675900,0.135271,tcp,147.32.86.20,2280.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,36,29121,913,28208,808.9166666666666,0.03135194533154768,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:34.910948,0.003848,tcp,147.32.84.242,33787.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:34.936448,0.002908,tcp,147.32.84.242,53301.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:34.941527,0.000247,udp,147.32.84.242,49828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.088375,0.003909,tcp,147.32.84.242,33984.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:35.097631,1967.526245,tcp,147.32.84.242,57426.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:35.121134,0.000304,udp,147.32.84.242,32859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.141907,0.000475,udp,147.32.84.242,33623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.163775,0.009184,tcp,147.32.84.242,57498.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:35.210491,0.003954,tcp,147.32.84.242,34117.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:17:35.286060,0.000243,udp,147.32.84.242,51228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.399222,0.000236,udp,147.32.84.242,45285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.411875,0.004134,tcp,147.32.84.242,53831.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:35.441662,0.007811,tcp,147.32.84.242,57811.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:35.488680,0.000463,udp,147.32.84.242,33294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:35.489376,0.002136,tcp,147.32.84.242,53918.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:17:35.701889,0.000226,udp,147.32.84.242,51575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:36.592276,0.00043,udp,147.32.85.89,55157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:45.166020,0.000239,udp,147.32.84.138,47006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:48.029253,0.000259,udp,147.32.85.25,39333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:49.473104,0.000323,udp,147.32.84.170,60232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:17:51.472585,0.019792,udp,147.32.85.5,32970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:17:59.119610,0.000497,udp,147.32.84.170,33930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:04.894991,0.000299,udp,147.32.85.34,58608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:04.907638,0.000275,udp,147.32.85.34,61713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:09.472099,0.000358,udp,147.32.84.170,38361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:10.412874,0.000312,udp,195.3.177.128,17570.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:18:10.536142,0.163032,tcp,84.242.78.234,57434.0,->,147.32.87.4,110.0,FSPA_FSPA,0.0,0.0,23,1574,686,888,68.43478260869566,0.4358322744599746,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:13.152905,0.316888,tcp,147.32.84.170,42498.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:13.738253,0.338071,tcp,147.32.84.170,42501.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:13.799946,0.236113,tcp,147.32.84.170,59716.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:14.185915,0.000254,udp,147.32.84.170,48750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:14.186592,0.000387,udp,147.32.84.170,40806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:14.188168,465.322876,tcp,147.32.84.170,44816.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,101,37659,27543,10116,372.86138613861385,0.7313789532382697,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:16.897843,0.002028,tcp,147.32.86.34,52890.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:16.936056,1150.450195,tcp,147.32.84.242,58063.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:17.348203,64.149582,tcp,147.32.84.165,3664.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:18:19.473197,0.018278,tcp,147.32.84.170,41208.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:20.127358,0.000212,udp,147.32.84.138,40183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:20.428969,0.000314,udp,130.88.91.103,9351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:18:25.205329,0.000352,udp,147.32.84.59,38281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:25.426893,0.000417,udp,147.32.84.21,44841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:26.252251,3116.189941,udp,201.253.131.57,36264.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,702,516,186,117.0,0.7350427350427351,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:18:27.730662,0.346756,udp,147.32.84.229,13363.0,<->,113.255.38.87,19523.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:18:32.192902,384.946014,udp,186.136.134.79,6429.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1356,1114,242,169.5,0.8215339233038348,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:18:35.024009,0.000314,udp,147.32.84.242,59735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:35.066853,0.007953,tcp,147.32.84.242,58230.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:35.262250,0.000314,udp,147.32.84.242,51408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:35.272162,0.000405,udp,147.32.84.242,43293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:35.376518,0.003872,tcp,147.32.84.242,35088.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:18:35.478644,0.002041,tcp,147.32.84.242,54676.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:35.532280,0.000274,udp,147.32.84.242,37934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:35.543892,0.000248,udp,147.32.84.242,42653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:35.621254,0.014692,tcp,147.32.84.242,58765.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:35.973384,0.003812,tcp,147.32.84.242,35428.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:18:36.015719,0.011015,tcp,147.32.84.242,58865.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:36.085192,0.00898,tcp,147.32.84.242,58879.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:36.572796,0.000221,udp,147.32.84.242,45333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:39.473256,0.018165,tcp,147.32.84.170,41211.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:45.312616,0.000293,udp,147.32.84.138,48543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:45.542963,0.000241,udp,147.32.84.138,36068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:49.445092,0.000313,udp,147.32.84.138,33603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:18:55.742012,0.206288,tcp,147.32.86.20,2353.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:18:59.473158,0.01784,tcp,147.32.84.170,41213.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:18:59.964141,3057.914062,udp,180.30.134.61,16408.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:00.115092,0.00031,udp,147.32.84.170,44499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:00.117169,0.235029,tcp,147.32.84.170,60354.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:01.595502,1.081768,tcp,147.32.86.5,2948.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:19:09.471215,0.000496,udp,147.32.84.170,47493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:09.644134,0.000167,udp,147.32.85.25,49203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:15.915490,3534.048096,udp,62.77.113.23,54007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1164,854,310,116.4,0.7336769759450171,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:16.899014,3025.511475,udp,79.193.233.177,45304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,472,348,124,118.0,0.7372881355932204,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:17.134093,0.00391,tcp,147.32.86.34,35071.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:19:17.150591,0.000308,udp,147.32.86.34,52404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:17.668125,0.003975,tcp,147.32.84.242,35740.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:19:19.472049,0.000275,udp,147.32.84.170,49550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:21.079806,61.255657,tcp,147.32.84.165,3665.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:19:22.408022,0.000244,udp,147.32.84.138,56286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:29.471101,0.000298,udp,147.32.84.170,38358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:29.472047,0.000323,udp,147.32.84.170,36814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:35.004114,1762.314209,tcp,147.32.84.242,35746.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:19:35.156758,0.00024,udp,147.32.85.25,33900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:41.391403,0.000598,udp,119.244.221.124,45988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:42.023086,0.000312,udp,147.32.84.242,51520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:42.031234,1125.485229,tcp,147.32.84.242,59335.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:19:42.083684,0.000415,udp,147.32.84.242,51166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:42.257869,0.000246,udp,147.32.84.242,35892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:42.371413,0.000303,udp,147.32.84.242,57656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:42.413346,0.003819,tcp,147.32.84.242,36284.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:19:42.432703,0.000375,udp,147.32.84.138,37729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:42.894238,0.000263,udp,147.32.84.242,50076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:45.231136,0.001707,udp,76.103.182.186,16432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,534,60,297.0,0.898989898989899,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:49.471430,0.00038,udp,147.32.84.170,41521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:49.472279,0.000304,udp,147.32.84.170,42866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:49.473309,0.018487,tcp,147.32.84.170,41220.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:19:50.367802,0.0,tcp,147.32.84.165,3666.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.368392,0.0,tcp,147.32.84.165,3667.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.380406,0.0,tcp,147.32.84.165,3669.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.551707,0.0,tcp,147.32.84.165,3670.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.551888,0.0,tcp,147.32.84.165,3671.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.571739,0.0,tcp,147.32.84.165,3673.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.751783,0.0,tcp,147.32.84.165,3674.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:50.751963,0.0,tcp,147.32.84.165,3675.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:51.197843,95.189194,tcp,41.98.16.233,58525.0,->,147.32.85.84,13716.0,S_SA,0.0,0.0,11,682,186,496,62.0,0.2727272727272727,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:19:51.563494,0.0,tcp,147.32.84.165,3679.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:52.364212,0.0,tcp,147.32.84.165,3677.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:19:56.155732,0.000341,udp,147.32.85.25,44527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:19:57.710600,0.000409,udp,98.114.229.165,23641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:19:58.628639,1798.374146,tcp,147.32.84.242,36538.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:20:01.118972,0.000466,udp,147.32.84.170,53498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:20:01.120712,0.218148,tcp,147.32.84.170,60362.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:20:01.944414,0.000207,udp,147.32.84.138,39176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:03.980735,0.0,tcp,147.32.84.165,3900.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:03.980822,0.0,tcp,147.32.84.165,3901.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:03.980870,0.0,tcp,147.32.84.165,3898.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:03.980876,0.0,tcp,147.32.84.165,3904.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:04.581909,0.0,tcp,147.32.84.165,3913.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:04.581914,0.0,tcp,147.32.84.165,3910.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:04.581964,0.0,tcp,147.32.84.165,3912.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:04.747348,0.000305,udp,147.32.85.34,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:04.754800,0.000319,udp,147.32.85.34,56432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:04.781236,0.00028,udp,147.32.85.34,51570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:06.171353,0.00025,udp,147.32.84.138,52538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:09.009853,0.00028,udp,147.32.84.138,36362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:10.640717,665.9776,udp,123.243.112.246,22759.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,959,711,248,119.875,0.7413972888425443,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:20:11.148203,0.000307,udp,147.32.84.138,55785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:13.421513,0.000367,udp,77.78.4.133,30734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,79,493,286.0,0.1381118881118881,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:20:15.998719,0.0,tcp,147.32.84.165,4141.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:15.998868,0.0,tcp,147.32.84.165,4138.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:15.998882,0.0,tcp,147.32.84.165,4140.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:15.998888,0.0,tcp,147.32.84.165,4145.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:16.599458,0.0,tcp,147.32.84.165,4150.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:16.599538,0.0,tcp,147.32.84.165,4152.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:16.599626,0.0,tcp,147.32.84.165,4153.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:16.599633,0.0,tcp,147.32.84.165,4154.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:19.108423,0.000351,udp,147.32.84.138,35632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:19.473325,0.018066,tcp,147.32.84.170,41224.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:20:22.469785,0.000209,udp,147.32.84.138,54889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:23.162026,0.005245,tcp,147.32.84.242,56100.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:20:23.420738,0.000218,udp,147.32.86.34,52868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:23.445633,0.000347,udp,147.32.84.242,42842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:23.715908,0.00024,udp,147.32.84.242,40602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:26.394835,0.000177,udp,147.32.85.25,55214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:28.015853,0.0,tcp,147.32.84.165,4381.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.016045,64.280579,tcp,147.32.84.165,4298.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:20:28.016052,0.0,tcp,147.32.84.165,4382.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.016128,0.0,tcp,147.32.84.165,4379.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.616189,0.0,tcp,147.32.84.165,4393.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.616343,0.0,tcp,147.32.84.165,4394.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.616357,0.0,tcp,147.32.84.165,4391.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:28.616362,0.0,tcp,147.32.84.165,4397.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:29.471443,0.000416,udp,147.32.84.170,40005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:20:29.472383,0.000255,udp,147.32.84.170,47457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:20:37.618913,0.680784,tcp,147.32.84.164,37852.0,->,61.110.243.211,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:20:37.825121,3081.422607,udp,84.220.45.189,45838.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:20:40.033038,0.0,tcp,147.32.84.165,4623.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.033135,0.0,tcp,147.32.84.165,4620.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.033142,0.0,tcp,147.32.84.165,4622.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.633776,0.0,tcp,147.32.84.165,4635.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.633851,0.0,tcp,147.32.84.165,4632.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.633943,0.0,tcp,147.32.84.165,4634.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:40.634017,0.0,tcp,147.32.84.165,4639.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:41.599782,0.000259,udp,147.32.84.138,57987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:42.182930,0.000276,udp,147.32.84.242,39717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:42.242708,0.003889,tcp,147.32.84.242,36990.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:20:42.397721,0.000249,udp,147.32.84.242,35196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:42.419166,1132.18042,tcp,147.32.84.242,60601.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:20:42.516115,2140.353027,tcp,147.32.84.242,37265.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:20:42.564279,0.000295,udp,147.32.84.242,35434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:42.595508,0.000298,udp,147.32.84.242,43828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:42.670801,0.000375,udp,147.32.84.242,41373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:43.638366,0.0,tcp,147.32.84.165,4691.0,->,192.168.1.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:45.418012,0.000301,udp,147.32.84.59,40529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:50.310277,0.309909,tcp,147.32.86.20,2454.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:20:52.010677,0.000256,udp,147.32.84.138,54497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:20:52.050928,0.0,tcp,147.32.84.165,4818.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:52.050943,0.0,tcp,147.32.84.165,4817.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:52.651418,0.0,tcp,147.32.84.165,4827.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:52.651501,0.0,tcp,147.32.84.165,4826.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:52.651573,0.0,tcp,147.32.84.165,4830.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:52.651580,0.0,tcp,147.32.84.165,4829.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:20:55.376669,0.001946,tcp,147.32.86.5,3052.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:20:59.472166,0.000406,udp,147.32.84.170,45585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:00.056802,0.000333,udp,147.32.86.20,57899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:03.116992,0.000907,udp,147.32.84.170,34453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:03.118508,0.000345,udp,147.32.84.170,58814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:04.067856,0.0,tcp,147.32.84.165,1060.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:04.067863,0.0,tcp,147.32.84.165,1059.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:04.067929,0.0,tcp,147.32.84.165,1063.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:04.668465,0.0,tcp,147.32.84.165,1068.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:04.668565,0.0,tcp,147.32.84.165,1069.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:04.668572,0.0,tcp,147.32.84.165,1071.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:07.672635,0.0,tcp,147.32.84.165,1114.0,->,147.32.80.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:09.189107,0.00032,udp,147.32.84.242,42350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:09.471458,0.000367,udp,147.32.84.170,35701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:09.473467,0.018357,tcp,147.32.84.170,34058.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:16.084989,0.0,tcp,147.32.84.165,1239.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:16.085137,0.0,tcp,147.32.84.165,1240.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:16.085151,0.0,tcp,147.32.84.165,1242.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:16.685881,0.0,tcp,147.32.84.165,1249.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:16.685895,0.0,tcp,147.32.84.165,1248.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:16.685900,0.0,tcp,147.32.84.165,1252.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:19.689879,0.0,tcp,147.32.84.165,1293.0,->,192.168.1.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:20.642540,0.000279,udp,147.32.84.138,36245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:23.110602,0.000312,udp,147.32.86.34,54063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:23.424363,0.000257,udp,147.32.84.242,50897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:23.574920,0.000314,udp,147.32.84.242,38714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:23.594685,0.002018,tcp,147.32.84.242,52201.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:21:28.102135,0.0,tcp,147.32.84.165,1420.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:28.102143,0.0,tcp,147.32.84.165,1419.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:28.703408,0.0,tcp,147.32.84.165,1429.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:28.703495,0.0,tcp,147.32.84.165,1428.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:28.703554,0.0,tcp,147.32.84.165,1432.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:28.703562,0.0,tcp,147.32.84.165,1431.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:29.472452,0.000324,udp,147.32.84.170,45810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:29.473507,0.018306,tcp,147.32.84.170,42478.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:30.410027,0.0,tcp,90.153.210.174,25187.0,?>,147.32.84.229,13363.0,R_,0.0,,1,60,60,0,60.0,1.0,1,0,flow=Background,Background,-1 2011-08-17 01:21:34.117517,0.000394,udp,147.32.84.170,35716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:21:38.054034,3016.803223,udp,174.115.52.28,7131.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:21:40.119476,61.257935,tcp,147.32.84.165,1505.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:21:40.119532,0.0,tcp,147.32.84.165,1570.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:40.119661,0.0,tcp,147.32.84.165,1572.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:40.546118,0.000249,udp,147.32.84.138,39667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:21:40.720457,0.0,tcp,147.32.84.165,1576.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:40.720698,0.0,tcp,147.32.84.165,1578.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:40.720713,0.0,tcp,147.32.84.165,1580.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:42.108726,0.000477,udp,78.141.181.224,34038.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,98,496,297.0,0.16498316498316498,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:21:49.737792,0.000323,udp,201.51.11.8,21837.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:21:52.136741,0.0,tcp,147.32.84.165,1690.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:52.137001,0.0,tcp,147.32.84.165,1692.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:52.738278,0.0,tcp,147.32.84.165,1696.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:52.738361,0.0,tcp,147.32.84.165,1698.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:52.738431,0.0,tcp,147.32.84.165,1700.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:55.742392,0.0,tcp,147.32.84.165,1726.0,->,147.32.81.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:21:59.471576,0.000363,udp,147.32.84.170,42906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:00.786222,2474.636963,udp,121.113.119.158,18943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2040,789,1251,255.0,0.38676470588235295,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:01.119503,1195.972534,tcp,147.32.84.242,43747.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:22:01.157212,0.000188,udp,147.32.84.242,35063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:01.211652,1767.428711,tcp,147.32.84.242,43836.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:22:01.251722,0.001422,udp,69.112.192.234,46939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:01.304957,0.008633,tcp,147.32.84.242,55282.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:01.311489,0.0002,udp,147.32.84.242,39485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:01.391794,0.000236,udp,147.32.84.242,36644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:01.431052,0.000218,udp,147.32.84.242,41854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:01.498041,0.000309,udp,147.32.84.242,59605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:01.574365,0.008054,tcp,147.32.84.242,55551.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:01.607004,1237.494873,tcp,147.32.84.242,44228.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:22:04.154294,0.0,tcp,147.32.84.165,1810.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:04.651823,0.000321,udp,147.32.85.34,54997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:04.755634,0.0,tcp,147.32.84.165,1816.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:04.755738,0.0,tcp,147.32.84.165,1818.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:04.755804,0.0,tcp,147.32.84.165,1820.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:04.985623,0.003084,tcp,90.183.39.17,60286.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1391,916,475,139.1,0.6585190510424155,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:07.151994,9.087086,udp,147.32.84.229,13363.0,->,78.61.131.15,21398.0,INT,0.0,,3,207,207,0,69.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:22:07.759281,0.0,tcp,147.32.84.165,1846.0,->,147.32.81.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:08.074724,0.000518,udp,84.54.178.251,36964.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:09.473660,0.018109,tcp,147.32.84.170,41814.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:10.012213,304.061005,tcp,147.32.84.242,55834.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:11.214187,7.8e-05,udp,147.32.84.138,34102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:11.527170,0.000386,udp,147.32.84.138,47207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:16.172086,0.0,tcp,147.32.84.165,1930.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:16.772864,0.0,tcp,147.32.84.165,1936.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:16.772878,0.0,tcp,147.32.84.165,1938.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:16.773044,0.0,tcp,147.32.84.165,1940.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:19.776805,0.0,tcp,147.32.84.165,1966.0,->,147.32.81.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:20.512180,0.000192,udp,147.32.84.59,51125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:26.543053,0.0,tcp,46.105.183.210,80.0,->,147.32.85.108,46439.0,SA_,0.0,,1,74,74,0,74.0,1.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:28.189319,0.0,tcp,147.32.84.165,2051.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:28.585077,0.000409,udp,190.159.253.37,28747.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:28.790311,0.0,tcp,147.32.84.165,2057.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:28.790325,0.0,tcp,147.32.84.165,2059.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:28.790431,0.0,tcp,147.32.84.165,2061.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:29.471656,0.000413,udp,147.32.84.170,60055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:29.473759,0.017664,tcp,147.32.84.170,50314.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:29.931189,0.000226,udp,147.32.85.25,52764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:31.794336,0.0,tcp,147.32.84.165,2087.0,->,147.32.82.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:35.118784,0.000322,udp,147.32.84.170,38587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:36.003246,0.000253,udp,147.32.84.138,36230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:36.191309,5.713636,tcp,147.32.86.89,2431.0,->,77.75.72.22,80.0,FSPA_FSPA,0.0,0.0,60,50728,2129,48599,845.4666666666667,0.041968932345055984,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:38.471260,0.00034,udp,147.32.84.59,45076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:40.206823,0.0,tcp,147.32.84.165,2170.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.206904,0.0,tcp,147.32.84.165,2171.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.206911,0.0,tcp,147.32.84.165,2172.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.807252,0.0,tcp,147.32.84.165,2177.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.807333,0.0,tcp,147.32.84.165,2176.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.807339,0.0,tcp,147.32.84.165,2179.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.807402,0.0,tcp,147.32.84.165,2178.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:40.807451,0.0,tcp,147.32.84.165,2181.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:41.408383,0.0,tcp,147.32.84.165,2182.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:43.022948,0.000253,udp,147.32.84.242,42870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:43.220626,0.002426,tcp,147.32.86.34,45208.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:43.295056,0.001596,tcp,147.32.86.34,45226.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:43.315541,0.000293,udp,147.32.84.242,56208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:22:43.316060,1196.334229,tcp,147.32.84.242,44577.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:22:43.811455,61.256672,tcp,147.32.84.165,2198.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:22:44.229645,0.0,tcp,147.32.84.165,2214.0,->,147.32.82.98,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:45.373473,0.001196,tcp,147.32.86.88,63682.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:46.083006,0.025274,udp,147.32.84.229,13363.0,<->,78.141.181.220,34002.0,CON,0.0,0.0,2,136,74,62,68.0,0.5441176470588235,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:51.909725,8e-06,icmp,147.32.86.96,,<-,147.32.87.49,46160.0,ECR,,0.0,2,196,0,196,98.0,0.0,1,0,flow=Background,Background,-1 2011-08-17 01:22:52.224225,0.0,tcp,147.32.84.165,2292.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:52.824346,0.0,tcp,147.32.84.165,2298.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:52.824480,0.0,tcp,147.32.84.165,2300.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:52.824575,0.0,tcp,147.32.84.165,2302.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:56.429964,0.0,tcp,147.32.84.165,2334.0,->,147.32.82.158,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:22:56.703456,1.917528,tcp,174.133.5.250,45963.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,29,17259,1382,15877,595.1379310344828,0.08007416420418333,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:22:58.538123,119.441132,udp,147.32.84.229,13363.0,<->,90.146.55.109,29618.0,CON,0.0,0.0,8,1117,1029,88,139.625,0.9212175470008953,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:22:59.472709,0.000355,udp,147.32.84.170,38721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:22:59.473817,0.018223,tcp,147.32.84.170,39603.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:01.051372,0.000243,udp,147.32.84.242,47070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:01.065327,1767.06189,tcp,147.32.84.242,44721.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:23:01.239674,0.000346,udp,147.32.84.242,44172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:01.279379,0.000307,udp,147.32.84.242,56696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:01.333567,0.000281,udp,147.32.84.242,47624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:01.435933,883.65863,tcp,147.32.84.242,45034.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:23:01.482134,0.000253,udp,147.32.84.242,52700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:01.622032,0.000251,udp,147.32.84.242,43309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:02.275729,0.00016,udp,147.32.84.242,41495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:02.382121,0.000313,udp,147.32.84.242,42138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:04.240985,0.0,tcp,147.32.84.165,2412.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:04.842181,0.0,tcp,147.32.84.165,2418.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:04.842304,0.0,tcp,147.32.84.165,2420.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:04.842379,0.0,tcp,147.32.84.165,2422.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:08.447158,0.0,tcp,147.32.84.165,2454.0,->,147.32.82.218,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:09.472588,0.000351,udp,147.32.84.170,41534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:11.519003,0.000211,udp,147.32.84.138,59459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:11.662853,0.000396,udp,190.28.172.7,63547.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:12.450980,3128.376709,udp,187.15.135.253,21575.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:12.701386,0.000209,udp,147.32.84.138,40543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:12.701485,0.000232,udp,147.32.84.138,60077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:13.648618,0.888567,tcp,147.32.84.170,36220.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:16.258209,0.0,tcp,147.32.84.165,2531.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.258279,0.0,tcp,147.32.84.165,2532.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.258286,0.0,tcp,147.32.84.165,2533.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.859533,0.0,tcp,147.32.84.165,2538.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.859587,0.0,tcp,147.32.84.165,2537.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.859724,0.0,tcp,147.32.84.165,2540.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.859738,0.0,tcp,147.32.84.165,2539.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:16.859743,0.0,tcp,147.32.84.165,2542.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:17.460480,0.0,tcp,147.32.84.165,2543.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:20.095892,2.7607,tcp,66.249.66.211,39877.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8581,997,7584,476.72222222222223,0.11618692460086237,1,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 01:23:20.464546,0.0,tcp,147.32.84.165,2574.0,->,147.32.83.24,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:21.413541,3026.998779,udp,82.137.34.148,20849.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:23.919871,0.001607,udp,218.102.112.63,61094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:26.071018,2291.226074,tcp,147.32.84.242,56773.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:23:26.452515,0.000203,udp,147.32.84.242,53279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:26.556788,1597.86792,tcp,147.32.84.242,56833.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,30,2910,1653,1257,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:23:28.276038,0.0,tcp,147.32.84.165,2651.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.276096,0.0,tcp,147.32.84.165,2652.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.276103,0.0,tcp,147.32.84.165,2653.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.876910,0.0,tcp,147.32.84.165,2658.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.876981,0.0,tcp,147.32.84.165,2657.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.876988,0.0,tcp,147.32.84.165,2660.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.877064,0.0,tcp,147.32.84.165,2659.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:28.877070,0.0,tcp,147.32.84.165,2662.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:29.471794,0.00037,udp,147.32.84.170,35581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:29.477292,0.0,tcp,147.32.84.165,2663.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:29.746182,40.983727,udp,108.43.154.210,29514.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1060,940,120,265.0,0.8867924528301887,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:32.482146,0.0,tcp,147.32.84.165,2694.0,->,147.32.83.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:36.033695,0.000274,udp,147.32.84.170,54026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:36.034271,0.000394,udp,147.32.84.170,39261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:36.070742,0.019758,udp,147.32.84.170,33098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:37.126765,0.000233,udp,147.32.84.170,47734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:38.516560,0.000354,udp,147.32.86.20,59442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:39.472749,0.000351,udp,147.32.84.170,41778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:40.293005,0.0,tcp,147.32.84.165,2771.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.293019,0.0,tcp,147.32.84.165,2772.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.293072,0.0,tcp,147.32.84.165,2773.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.893821,0.0,tcp,147.32.84.165,2778.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.893835,0.0,tcp,147.32.84.165,2777.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.893859,0.0,tcp,147.32.84.165,2780.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.893969,0.0,tcp,147.32.84.165,2779.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:40.893983,0.0,tcp,147.32.84.165,2782.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:41.494719,0.0,tcp,147.32.84.165,2783.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:43.113650,0.000228,udp,147.32.86.34,39503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:43.358742,1202.485352,tcp,147.32.84.242,45610.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:23:43.422031,0.000323,udp,147.32.84.242,45501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:43.507675,0.000253,udp,147.32.84.242,60662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:43.647600,0.000259,udp,147.32.84.242,55018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:44.499362,0.0,tcp,147.32.84.165,2814.0,->,147.32.83.144,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:48.016949,2638.546387,udp,41.107.24.253,10817.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,603,417,186,100.5,0.6915422885572139,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:23:49.471838,0.000313,udp,147.32.84.170,35781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:23:52.310852,0.0,tcp,147.32.84.165,2892.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.310934,64.156166,tcp,147.32.84.165,2835.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:23:52.310940,0.0,tcp,147.32.84.165,2893.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.734096,0.0,tcp,147.32.84.165,2898.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.911698,0.0,tcp,147.32.84.165,2899.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.911844,0.0,tcp,147.32.84.165,2900.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.911851,0.0,tcp,147.32.84.165,2901.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.911894,0.0,tcp,147.32.84.165,2902.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:52.911968,0.0,tcp,147.32.84.165,2903.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:53.512476,0.0,tcp,147.32.84.165,2904.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:54.771145,0.000297,udp,147.32.86.20,53675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:23:56.426269,0.0,tcp,147.32.84.165,2935.0,->,147.32.83.204,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:23:57.020517,0.002347,tcp,147.32.84.242,54267.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:23:59.472716,0.000354,udp,147.32.84.170,55733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:01.008842,0.000261,udp,147.32.84.242,44414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:01.069145,0.167924,tcp,147.32.86.89,2552.0,->,194.17.45.179,80.0,FSPA_FSPA,0.0,0.0,9,2054,1007,1047,228.22222222222223,0.4902629016553067,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:24:04.147783,0.0,tcp,147.32.84.165,3010.0,->,147.32.88.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.147942,0.0,tcp,147.32.84.165,3011.0,->,147.32.83.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748679,0.0,tcp,147.32.84.165,3016.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748693,0.0,tcp,147.32.84.165,3017.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748699,0.0,tcp,147.32.84.165,3018.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748829,0.0,tcp,147.32.84.165,3019.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748845,0.0,tcp,147.32.84.165,3020.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:04.748851,0.0,tcp,147.32.84.165,3021.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:05.349134,0.0,tcp,147.32.84.165,3022.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:24:07.395608,0.003891,tcp,147.32.84.242,46009.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:24:07.472882,2273.57959,tcp,147.32.84.242,57428.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,30,2910,1653,1257,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:24:07.568744,0.002346,tcp,147.32.84.242,54739.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:24:07.571218,1809.195312,tcp,147.32.84.242,46160.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:24:07.680625,0.000425,udp,147.32.84.242,47851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:08.147588,0.221788,tcp,147.32.84.170,42834.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:09.471758,0.000351,udp,147.32.84.170,40547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:09.473772,0.017574,tcp,147.32.84.170,41838.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:12.642653,0.000397,udp,147.32.84.242,33566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:12.895296,0.008345,tcp,147.32.84.242,57737.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:24:17.680973,0.000307,udp,147.32.84.138,46147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:18.104445,3056.903809,udp,147.32.84.229,13363.0,->,93.153.63.165,59233.0,INT,0.0,,18,2664,2664,0,148.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:24:20.509487,0.000274,udp,147.32.84.138,54362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:25.457498,0.000399,udp,62.167.136.37,14692.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:24:27.420140,0.000254,udp,147.32.84.242,49435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:27.570372,0.011703,tcp,147.32.84.242,57845.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:24:29.472528,0.000301,udp,147.32.84.170,51322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:33.269500,0.002448,udp,99.231.80.88,39519.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:24:39.120182,0.213752,tcp,147.32.84.170,42838.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:49.278995,0.000214,udp,147.32.84.242,60517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:49.471901,0.000399,udp,147.32.84.170,48784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:53.158950,61.271851,tcp,147.32.84.165,3036.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:24:59.430202,0.000239,udp,147.32.84.138,54293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:24:59.472859,0.000282,udp,147.32.84.170,40283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:24:59.473808,0.01804,tcp,147.32.84.170,41844.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:25:03.356710,0.00537,tcp,147.32.86.88,64008.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:04.066493,0.00036,udp,147.32.84.138,35895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.024748,0.000336,udp,147.32.84.242,54997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.094871,1180.172241,tcp,147.32.84.242,46811.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:25:07.373986,0.008031,tcp,147.32.84.242,58392.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:07.410866,1809.608887,tcp,147.32.84.242,47070.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:25:07.458574,0.000254,udp,147.32.84.242,42855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.536267,0.000348,udp,147.32.84.242,56819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.593372,0.00036,udp,147.32.84.242,39789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.663109,0.00031,udp,147.32.84.242,49232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:07.679727,0.008836,tcp,147.32.84.242,58650.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:09.119218,0.000259,udp,147.32.84.170,36088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:25:09.848596,0.000171,udp,147.32.84.138,36350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:13.771415,0.001421,udp,83.192.66.58,23801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:25:14.197903,0.000418,udp,109.132.109.10,25968.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:25:17.385895,0.000236,udp,147.32.84.138,51814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:19.471730,0.000343,udp,147.32.84.170,40184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:25:31.437095,0.000263,udp,147.32.84.242,50417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:39.484711,0.018149,tcp,147.32.84.170,40827.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:25:40.118923,0.000387,udp,147.32.84.170,44305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:25:40.274573,1822.585815,udp,92.19.193.122,28135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,963,715,248,120.375,0.7424714434060229,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:25:40.373364,1.001432,tcp,147.32.86.88,64110.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:25:47.165320,2040.189697,rtp,147.32.84.229,13363.0,<->,67.53.131.81,29095.0,CON,0.0,0.0,8,5896,120,5776,737.0,0.0203527815468114,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:25:49.087505,0.002185,tcp,147.32.86.34,45392.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:49.618235,0.001815,tcp,147.32.86.88,64196.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,9,834,447,387,92.66666666666667,0.5359712230215827,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:49.674136,0.001914,tcp,147.32.84.242,56256.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:25:50.148309,0.00024,udp,147.32.84.242,38016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:50.244595,0.000401,udp,147.32.84.242,42169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:50.360898,1.177122,tcp,147.32.84.164,50930.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,2308,2686354,36667,2649687,1163.9315424610052,0.013649355222729394,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:25:51.506064,505.922089,udp,79.126.150.28,12024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,637,418,219,106.16666666666667,0.6562009419152276,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:25:51.668902,0.00016,udp,147.32.84.138,50381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:51.685421,0.000431,udp,147.32.84.138,54298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:25:54.006710,64.195496,tcp,147.32.84.165,3037.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:25:59.473883,0.017817,tcp,147.32.84.170,39635.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:02.590902,0.999387,tcp,147.32.86.88,64220.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:26:04.338768,0.000231,udp,147.32.85.34,55260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:05.136912,0.178813,tcp,147.32.80.13,31323.0,->,147.32.85.63,80.0,FSPA_FSPA,0.0,0.0,34,22233,1333,20900,653.9117647058823,0.059955921378131605,1,1,flow=From-Background-CVUT-Proxy,Background,-1 2011-08-17 01:26:09.405169,0.059147,udp,147.32.84.229,13363.0,<->,95.29.94.59,59857.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:26:10.118681,0.000302,udp,147.32.84.170,53179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:12.911223,0.000224,udp,147.32.84.138,42899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:13.669488,1408.949585,tcp,147.32.84.242,36485.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:26:13.739349,0.000289,udp,147.32.84.242,47121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:13.760804,547.55011,tcp,147.32.84.242,54895.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:13.926728,0.000216,udp,147.32.84.242,41019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:13.940666,0.00798,tcp,147.32.84.242,55048.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:14.026695,0.000318,udp,147.32.84.242,53927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:14.103503,0.000166,udp,147.32.84.242,51829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:14.147374,0.000395,udp,147.32.84.242,47225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:14.182432,0.000206,udp,147.32.84.242,37100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:14.198449,1573.862305,tcp,147.32.84.242,42402.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:15.503546,0.000218,udp,147.32.85.25,46276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:17.782906,0.00048,udp,68.143.86.50,31022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,77,475,276.0,0.13949275362318841,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:26:22.351225,5.89639,tcp,147.32.86.89,2738.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,22,12166,7980,4186,553.0,0.6559263521288837,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:22.777692,0.044692,tcp,147.32.86.89,2752.0,->,91.103.160.52,80.0,FSPA_FSPA,0.0,0.0,25,15656,993,14663,626.24,0.06342616249361267,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:27.748719,1.021021,tcp,147.32.86.88,64319.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:26:28.181956,22.986097,tcp,147.32.84.184,51841.0,->,199.59.149.200,443.0,FSPA_FSPA,0.0,0.0,23,9386,2250,7136,408.0869565217391,0.23971873002343916,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:29.866434,0.526308,tcp,173.167.8.1,34237.0,->,147.32.84.70,80.0,SRPA_FSPA,0.0,0.0,9,2196,614,1582,244.0,0.2795992714025501,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:31.202953,0.000269,udp,147.32.85.25,60203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:32.115159,0.880829,tcp,173.167.8.1,34352.0,->,147.32.86.220,80.0,SRPA_FSPA,0.0,0.0,10,1942,651,1291,194.2,0.335221421215242,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:32.312501,0.013811,tcp,147.32.84.242,55359.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:32.594292,1555.768433,tcp,147.32.84.242,42528.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:32.764177,0.00038,udp,147.32.84.242,53311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:38.465616,0.000246,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,1,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 01:26:39.472090,0.000454,udp,147.32.84.170,40809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:40.117692,0.000301,udp,147.32.84.170,56963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:40.118551,0.000448,udp,147.32.84.170,43921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:49.474174,0.019238,tcp,147.32.84.170,41859.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:26:51.571455,0.000475,udp,24.98.122.64,10075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,77,474,275.5,0.1397459165154265,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:26:54.855186,61.255665,tcp,147.32.84.165,3053.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:26:55.443501,1389.752441,tcp,147.32.84.242,37156.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:26:55.588801,0.000228,udp,147.32.84.242,57901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:26:55.686564,0.0016,tcp,147.32.86.34,45509.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:56.209213,0.007423,tcp,147.32.84.242,42843.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:57.542468,0.070093,tcp,147.32.86.89,2816.0,->,91.103.160.52,80.0,FSPA_FSPA,0.0,0.0,11,1728,916,812,157.0909090909091,0.5300925925925926,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:26:59.473024,0.000419,udp,147.32.84.170,42561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:05.497862,0.000195,udp,147.32.84.138,56729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:05.730015,0.000404,udp,147.32.86.20,53562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:07.195834,0.557809,udp,147.32.84.229,13363.0,<->,114.45.99.242,30150.0,CON,0.0,0.0,2,144,84,60,72.0,0.5833333333333334,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:27:09.472227,0.000337,udp,147.32.84.170,40033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:11.122878,0.00042,udp,147.32.84.170,44779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:11.123848,0.000233,udp,147.32.84.170,36642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:11.448131,0.000503,udp,125.198.136.210,36956.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:27:13.770459,1.021395,tcp,147.32.86.88,64453.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:27:14.074254,0.000209,udp,147.32.84.242,45436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:14.098910,0.002099,tcp,147.32.84.242,42996.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:14.135439,1303.398071,tcp,147.32.84.242,55892.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:14.162634,0.00042,udp,147.32.84.242,56726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:14.254561,0.001929,tcp,147.32.84.242,43125.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:14.346374,0.003808,tcp,147.32.84.242,37739.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:27:14.352609,0.000184,udp,147.32.84.242,40140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:14.655810,1807.780518,tcp,147.32.84.242,37999.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:27:19.472113,0.000391,udp,147.32.84.170,43617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:24.637198,0.001965,udp,190.24.215.126,61023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,604,75,529,302.0,0.12417218543046357,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:27:29.472027,0.000434,udp,147.32.84.170,60742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:29.472897,0.000455,udp,147.32.84.170,45372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:31.581486,6.535798,tcp,147.32.86.89,2876.0,->,91.103.160.56,80.0,FSPA_FSPA,0.0,0.0,15,5563,797,4766,370.8666666666667,0.14326802085205825,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:33.017186,0.003991,tcp,147.32.84.242,38029.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:27:39.472162,0.000405,udp,147.32.84.170,36100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:49.472032,0.000396,udp,147.32.84.170,41627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:27:50.221872,0.005249,tcp,147.32.86.88,64536.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:52.857204,1.103261,tcp,147.32.86.20,2835.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,93719,1466,92253,1018.6847826086956,0.015642505788580757,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:55.223803,0.000371,udp,147.32.86.34,34271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:55.692393,64.53521,tcp,147.32.84.165,3054.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:27:55.981483,2846.458984,udp,174.103.172.140,38433.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1107,155,952,276.75,0.14001806684733514,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:27:56.343777,0.000331,udp,147.32.84.242,44682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:57.919050,0.098294,tcp,147.32.86.96,45274.0,->,147.32.87.38,12489.0,_FSPA,,0.0,8,556,0,556,69.5,0.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:27:58.402991,0.0002,udp,147.32.85.25,54411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:27:59.472181,0.000332,udp,147.32.84.170,46272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:00.214142,3575.891113,udp,147.32.84.229,13363.0,<->,91.145.64.230,38320.0,CON,0.0,0.0,123,21380,10915,10465,173.8211382113821,0.5105238540692236,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:28:01.903942,0.897151,tcp,147.32.86.89,2917.0,->,77.75.72.3,80.0,FSPA_FSPA,0.0,0.0,42,33688,2030,31658,802.0952380952381,0.06025884587983852,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:02.969643,0.000189,udp,147.32.84.138,41490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:03.146202,6.84158,tcp,147.32.86.89,2919.0,->,77.75.72.3,80.0,FSPA_FSPA,0.0,0.0,119,93466,9475,83991,785.4285714285714,0.10137376158175165,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:06.679079,0.000195,udp,147.32.84.138,37932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:07.087798,0.000226,udp,147.32.84.138,40596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:12.118727,0.000226,udp,147.32.84.170,57320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:14.189496,465.405334,tcp,147.32.84.170,57057.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,99,39110,28994,10116,395.050505050505,0.7413449245717207,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:14.793288,0.000305,udp,147.32.86.20,57111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:16.928961,0.000208,udp,147.32.84.138,56919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.281040,0.000202,udp,147.32.84.242,44747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.313037,0.003884,tcp,147.32.84.242,38524.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:28:19.423788,1136.390381,tcp,147.32.84.242,44095.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:19.426870,0.003859,tcp,147.32.84.242,38632.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:28:19.472240,0.000403,udp,147.32.84.170,40322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:19.490103,0.000269,udp,147.32.84.242,55443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.523040,0.000337,udp,147.32.84.242,46534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.523721,481.731812,tcp,147.32.84.242,57042.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:19.524793,1998.073242,tcp,147.32.84.242,57043.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,40,3880,2204,1676,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:19.658869,0.000303,udp,147.32.84.242,50077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.663573,0.000199,udp,147.32.84.242,52685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,75,189,132.0,0.2840909090909091,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.674312,0.000425,udp,147.32.84.242,53225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.687737,0.000382,udp,147.32.84.242,51976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.766880,0.000343,udp,147.32.84.242,52304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:19.996685,0.059896,udp,147.32.84.229,13363.0,<->,82.243.23.89,40775.0,CON,0.0,0.0,2,136,74,62,68.0,0.5441176470588235,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:28:21.563073,0.02544,udp,147.32.84.229,13363.0,<->,78.141.181.224,34054.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:28:25.025489,0.000436,icmp,147.32.84.19,,<-,147.32.87.5,20047.0,RED,,0.0,2,196,0,196,98.0,0.0,1,0,flow=Background,Background,-1 2011-08-17 01:28:29.472274,0.000374,udp,147.32.84.170,47859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:29.870645,0.000334,udp,147.32.84.138,37938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:38.475418,1304.202759,tcp,147.32.84.242,57449.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:28:38.914546,0.000238,udp,147.32.84.242,60099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:39.472985,0.000302,udp,147.32.84.170,47430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:43.120516,16.494755,tcp,147.32.84.170,35796.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,12,1358,689,669,113.16666666666667,0.5073637702503682,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:56.489421,0.000276,udp,147.32.84.59,34740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:56.507753,0.000277,udp,147.32.84.59,34664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:56.605201,0.000314,udp,147.32.84.59,34036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:56.625794,0.000287,udp,147.32.84.59,46154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:58.852012,0.000138,udp,147.32.84.138,46924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:28:59.472167,0.000353,udp,147.32.84.170,39580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:28:59.564961,18.534645,tcp,147.32.84.165,3055.0,->,222.189.228.111,3389.0,SPA_SRA,0.0,0.0,9,769,587,182,85.44444444444444,0.7633289986996099,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:29:15.142571,0.000228,udp,147.32.84.188,52333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,92,142,117.0,0.39316239316239315,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:29:19.599048,3590.869385,tcp,90.177.96.51,10008.0,->,147.32.86.190,3306.0,PA_PA,0.0,0.0,2228,548724,247304,301420,246.2854578096948,0.45068923538974054,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:29:29.123583,0.000346,udp,147.32.84.138,36770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:29:29.472425,0.000346,udp,147.32.84.170,51008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:29:31.293451,0.001486,udp,24.62.214.225,44348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:29:35.136556,8.932923,tcp,108.70.98.68,1402.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,4,248,62,186,62.0,0.25,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:29:40.982607,0.000365,udp,147.32.84.242,51455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:29:49.472507,0.000347,udp,147.32.84.170,42712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:29:57.519801,0.000275,udp,147.32.84.138,55717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:01.090345,1.966085,udp,190.62.84.226,24315.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:30:01.929181,9.241777,tcp,147.32.84.242,39285.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,282,222,60,70.5,0.7872340425531915,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:30:04.923456,0.000234,udp,147.32.85.34,55046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:04.940490,0.000309,udp,147.32.85.34,59813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:04.956362,0.000308,udp,147.32.85.34,49519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:05.336587,5.898149,tcp,66.249.66.211,43756.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8108,959,7149,450.44444444444446,0.11827824370991613,1,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 01:30:09.378367,6.943213,tcp,173.167.8.1,40225.0,->,147.32.84.60,80.0,SRA_SA,0.0,0.0,5,328,268,60,65.6,0.8170731707317073,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:30:10.365942,0.000289,udp,147.32.87.36,47820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,1,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 01:30:11.630516,0.000253,udp,147.32.84.138,38708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:12.722714,0.000286,udp,147.32.84.59,58510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:18.098186,64.896133,tcp,147.32.84.165,3056.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:30:18.682251,3342.118896,udp,70.48.244.21,27878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1470,1098,372,122.5,0.746938775510204,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:30:19.473302,0.000302,udp,147.32.84.170,50649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:19.474310,11.654815,tcp,147.32.84.170,58470.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:29.472290,0.000505,udp,147.32.84.170,60632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:29.474240,1.245073,tcp,147.32.84.170,44292.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:31.803004,0.000392,udp,109.231.137.74,14917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,319,64,255,159.5,0.2006269592476489,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:30:37.624831,21.273212,tcp,147.32.84.164,51782.0,->,212.3.238.62,27031.0,S_R,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:30:38.994713,0.000229,udp,147.32.84.138,49226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:39.626239,81.874313,tcp,147.32.84.164,33655.0,->,208.64.202.253,27031.0,FSA_SA,0.0,0.0,10,676,602,74,67.6,0.8905325443786982,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:30:39.720854,11.610486,tcp,147.32.84.170,44293.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,9,622,404,218,69.11111111111111,0.6495176848874598,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:48.793577,0.000396,udp,147.32.85.25,37349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:49.472363,0.000408,udp,147.32.84.170,45353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:49.473368,0.000316,udp,147.32.84.170,60404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:30:50.559036,3146.911133,udp,93.153.244.52,26867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:30:54.601234,0.000267,udp,147.32.84.242,38302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:58.828439,0.686556,udp,147.32.84.171,60323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,70,159,114.5,0.3056768558951965,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:30:59.474325,5.03706,tcp,147.32.84.170,44296.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,486,346,140,69.42857142857143,0.7119341563786008,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:05.573378,0.000253,udp,147.32.84.138,60914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:05.573392,0.000251,udp,147.32.84.138,52696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:11.256678,0.001356,udp,149.5.45.252,43007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,992,90,902,496.0,0.0907258064516129,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:31:18.323898,0.000304,udp,147.32.84.138,51912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:19.120288,0.000417,udp,147.32.84.170,45640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:19.472420,0.000317,udp,147.32.84.170,39463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:22.332115,154.74353,tcp,147.32.84.165,3057.0,->,222.189.228.111,3389.0,FSPA_SRPA,0.0,0.0,13,1406,827,579,108.15384615384616,0.5881934566145093,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:31:29.474513,1.424686,tcp,147.32.84.170,40215.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,8,556,338,218,69.5,0.6079136690647482,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:39.474335,42.041817,tcp,147.32.84.170,47511.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,9,622,404,218,69.11111111111111,0.6495176848874598,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:43.128734,7.5e-05,udp,147.32.84.138,46620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:55.200772,0.000172,udp,147.32.84.138,50443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:55.710568,0.000183,udp,147.32.84.59,59744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:31:59.473446,0.000343,udp,147.32.84.170,48008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:31:59.474550,5.726755,tcp,147.32.84.170,35926.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:01.120587,18.973728,tcp,147.32.84.170,49122.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,615,604,121.9,0.5045118949958983,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:04.753863,0.000334,udp,147.32.85.34,61713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:04.783251,0.000302,udp,147.32.85.34,60973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:04.796097,0.000209,udp,147.32.85.34,52508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:04.820475,0.000305,udp,147.32.85.34,63458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:10.252265,0.000103,udp,147.32.85.25,48608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:10.907814,0.000315,udp,147.32.84.59,45791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:11.023014,0.000236,udp,147.32.84.59,57517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:11.669548,0.000363,udp,67.186.27.34,33641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:12.585510,77.64151,udp,189.123.240.143,5006.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:14.794217,0.000285,udp,147.32.84.138,52476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:18.258929,0.000417,udp,111.185.87.8,49595.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:19.474660,42.016521,tcp,147.32.84.170,52923.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,338,140,68.28571428571429,0.7071129707112971,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:20.750404,0.000252,udp,147.32.85.25,50412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:28.566229,0.000368,udp,147.32.84.242,46236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:29.473487,0.000365,udp,147.32.84.170,47292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:31.135040,0.000284,udp,147.32.84.59,42119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:32.111667,0.000257,udp,147.32.84.170,46887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:32.112236,0.000253,udp,147.32.84.170,34001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:32.542541,92.33551,tcp,147.32.84.165,3058.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:32:33.363339,0.00025,udp,147.32.84.242,32810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:39.474594,0.850959,tcp,147.32.84.170,39486.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:40.361640,3071.843018,udp,190.136.217.13,43479.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:41.218224,0.000281,udp,147.32.84.59,50340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:47.099525,0.000638,udp,58.69.194.233,47736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,77,491,284.0,0.13556338028169015,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:51.147534,0.490162,udp,147.32.84.229,13363.0,<->,201.83.144.220,13672.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:51.281662,3045.623535,udp,213.146.167.152,19333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:52.375649,987.818054,udp,159.93.153.110,2318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,693,345,348,69.3,0.49783549783549785,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:32:56.855209,0.000244,udp,147.32.85.25,54757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:32:57.891064,10.233823,tcp,147.32.86.5,3127.0,->,147.228.52.22,1712.0,SRPA_SA,0.0,0.0,7,847,785,62,121.0,0.9268004722550177,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:32:59.472537,0.00035,udp,147.32.84.170,59417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:32:59.981881,0.000561,udp,201.205.99.30,1835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1019,79,940,509.5,0.0775269872423945,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:33:11.722697,0.000375,udp,147.32.84.242,60715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:33:16.511263,0.000422,udp,147.32.84.138,49089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:33:19.472881,0.000397,udp,147.32.84.170,37943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:19.473864,0.000334,udp,147.32.84.170,44222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:19.474966,1.538201,tcp,147.32.84.170,49571.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:22.205705,0.000247,udp,147.32.85.25,49358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:33:23.513494,1280.134888,udp,95.22.121.101,10609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,715,529,186,119.16666666666667,0.7398601398601399,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:33:25.844092,9.815158,tcp,147.32.84.59,9415.0,->,66.220.151.92,443.0,FSRPA_FSPA,0.0,0.0,10,2969,531,2438,296.9,0.1788480970023577,1,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 01:33:31.892576,22.196898,tcp,147.32.84.170,35725.0,->,209.85.148.106,443.0,FSPA_FSRPA,0.0,0.0,13,1840,1424,416,141.53846153846155,0.7739130434782608,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:39.473719,0.000307,udp,147.32.84.170,56522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:40.200655,0.002741,udp,149.5.45.5,43004.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,2842,60,2782,947.3333333333334,0.0211118930330753,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:33:44.331647,0.000308,udp,147.32.84.138,46532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:33:46.478702,67.692657,tcp,147.32.84.165,3059.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:33:47.600771,23.14263,tcp,147.32.84.242,54045.0,->,147.228.52.22,1712.0,SR_SA,0.0,0.0,5,356,282,74,71.2,0.7921348314606742,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:33:49.476931,0.000343,udp,147.32.84.170,52410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:49.478030,3.538273,tcp,147.32.84.170,39499.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:33:53.785513,0.000492,udp,147.32.85.115,55092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:33:53.843667,9.064455,tcp,147.32.84.170,35729.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,112,89492,4752,84740,799.0357142857143,0.05309971841058419,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:01.400105,0.299817,tcp,147.32.84.171,50767.0,->,46.47.77.209,12283.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:34:02.894146,0.000275,udp,147.32.84.242,38558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:03.219799,0.000219,udp,147.32.84.242,59518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:03.467137,0.000343,udp,147.32.84.242,49781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:03.789803,792.355103,tcp,147.32.84.242,54305.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:34:04.787603,5.01503,tcp,147.32.86.89,3024.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,32,22080,1153,20927,690.0,0.052219202898550726,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:34:05.679648,0.008008,tcp,147.32.84.242,54359.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:34:05.885372,0.000277,udp,147.32.84.242,38713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:06.563778,0.000309,udp,147.32.84.242,45777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:06.704717,1017.937317,tcp,147.32.84.242,43378.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:34:06.764265,0.000299,udp,147.32.84.242,50306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:07.110960,0.000416,icmp,147.32.87.249,,<-,147.32.87.54,2.0,RED,,0.0,2,148,0,148,74.0,0.0,1,1,flow=Background,Background,-1 2011-08-17 01:34:07.224215,0.000484,udp,81.23.116.186,41867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,74,469,271.5,0.13627992633517497,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:34:08.464481,0.000507,udp,147.32.84.242,38743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:08.593594,0.000252,udp,147.32.84.242,59201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:09.475062,0.017942,tcp,147.32.84.170,35948.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:13.069002,0.001483,tcp,147.32.86.88,64801.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:34:17.052187,0.084796,tcp,217.212.224.181,43569.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,12,1986,740,1246,165.5,0.3726082578046324,1,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 01:34:19.094416,0.000343,udp,147.32.84.138,45166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:19.099004,0.000243,udp,147.32.84.138,50696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:19.474036,0.000342,udp,147.32.84.170,51966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:26.430101,628.352661,udp,88.213.201.25,25719.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2136,158,1978,534.0,0.07397003745318352,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:34:26.553175,0.000227,udp,147.32.84.59,48503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:29.472956,0.000422,udp,147.32.84.170,60108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:29.473905,0.00038,udp,147.32.84.170,48092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:30.901093,8.8e-05,udp,147.32.85.25,47926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:39.472962,0.000614,udp,147.32.84.170,58224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:40.980620,3077.689697,udp,77.57.208.18,29679.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,470,346,124,117.5,0.7361702127659574,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:34:41.339037,1.006326,tcp,147.32.86.88,64841.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:34:42.854002,0.000422,udp,218.212.50.40,3773.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,300,238,62,150.0,0.7933333333333333,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:34:45.721092,0.000193,udp,147.32.85.34,56785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:48.605310,0.000262,udp,147.32.84.138,37600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:53.746166,61.282166,tcp,147.32.84.165,3060.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:34:57.120685,0.0003,udp,147.32.84.170,37294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:34:59.215759,0.000259,udp,147.32.84.138,41241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:34:59.473034,0.00037,udp,147.32.84.170,49470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:02.190540,0.000278,udp,147.32.84.59,58555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:08.600620,115.963951,tcp,147.32.84.3,54423.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,21,9857,6573,3284,469.3809523809524,0.6668357512427716,1,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 01:35:09.472888,0.000412,udp,147.32.84.170,39024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:12.136590,0.000373,udp,147.32.84.138,43870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:16.022550,949.5979,tcp,147.32.84.242,43557.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:35:18.146799,0.408589,tcp,147.32.84.171,51191.0,->,86.170.124.128,27756.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:35:21.250834,0.000271,udp,147.32.84.242,57615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.321821,0.00027,udp,147.32.84.242,41554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.365276,0.000281,udp,147.32.84.242,40891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.546130,0.000226,udp,147.32.84.242,59802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.596642,0.002087,tcp,147.32.84.242,59007.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:35:21.732122,0.000335,udp,147.32.84.242,53014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.836505,0.000237,udp,147.32.84.242,54422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:21.967265,0.000299,udp,147.32.84.242,41422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:22.633933,0.000279,udp,147.32.84.242,41746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:23.052347,0.002282,tcp,147.32.84.242,59266.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:35:28.119887,0.000283,udp,147.32.84.170,39330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:28.120660,0.000335,udp,147.32.84.170,53896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:28.121977,0.216485,tcp,147.32.84.170,49153.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:29.475878,0.000569,udp,147.32.84.170,42286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:29.478076,0.018266,tcp,147.32.84.170,49592.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:31.473237,0.000196,udp,147.32.84.138,53276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:31.706724,0.000277,udp,147.32.84.138,37625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:32.811829,0.000203,udp,147.32.84.138,32790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:33.585207,0.000308,udp,147.32.84.138,42802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:35.048179,500.068878,tcp,147.32.84.184,57489.0,->,195.113.232.90,80.0,SPA_FSPA,0.0,0.0,18,8617,665,7952,478.72222222222223,0.07717303005686434,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:35:41.037309,0.007496,tcp,147.32.86.88,65023.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,9,834,447,387,92.66666666666667,0.5359712230215827,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:35:47.555679,0.000553,udp,188.76.192.49,13422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,75,465,270.0,0.1388888888888889,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:35:49.473267,0.000325,udp,147.32.84.170,46124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:49.475179,0.017769,tcp,147.32.84.170,48375.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:54.604655,61.270317,tcp,147.32.84.165,3061.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:35:54.702847,1.597315,tcp,174.133.5.250,33165.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,26,15631,1283,14348,601.1923076923077,0.08208048109525942,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:35:55.264644,0.000365,udp,84.101.44.234,9330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:35:58.119702,0.000304,udp,147.32.84.170,49943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:58.120974,0.208799,tcp,147.32.84.170,49157.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:58.137567,0.000225,udp,147.32.84.138,47164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:35:59.476537,0.000106,udp,147.32.84.170,59740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:59.477141,0.000285,udp,147.32.84.170,46365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:59.478173,0.018569,tcp,147.32.84.170,52957.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:35:59.740257,0.000527,udp,178.45.68.20,2782.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,74,493,283.5,0.13051146384479717,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:02.616543,0.000367,udp,147.32.85.25,36503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:04.479753,0.000279,udp,147.32.85.34,59423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:04.497366,0.000278,udp,147.32.85.34,63135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:07.143162,2438.097412,udp,157.200.172.181,7634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1190,880,310,119.0,0.7394957983193278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:12.743666,0.000234,udp,147.32.84.59,52079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:12.746797,0.00028,udp,147.32.84.59,37339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:18.235115,1400.430054,udp,89.163.36.192,15026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1186,161,1025,296.5,0.1357504215851602,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:18.674939,0.000328,udp,68.61.27.160,55018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:19.474143,0.000279,udp,147.32.84.170,46130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:21.566106,0.000309,udp,147.32.84.242,51692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:28.120006,0.000278,udp,147.32.84.170,56387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:28.120840,0.000412,udp,147.32.84.170,50724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:30.637230,3468.969971,udp,41.107.5.23,22874.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1122,148,974,280.5,0.1319073083778966,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:31.282767,0.000303,udp,147.32.86.20,54335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:37.453468,0.000211,udp,147.32.84.138,49451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:37.466970,0.0002,udp,147.32.84.138,54106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:39.079028,0.000217,udp,147.32.85.25,58478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:39.474168,0.000249,udp,147.32.84.170,59749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:39.475126,0.018927,tcp,147.32.84.170,39522.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:40.828904,0.000221,udp,147.32.84.138,58602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:45.050252,0.99286,tcp,147.32.86.88,65199.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:36:45.287254,0.000277,udp,147.32.84.242,59894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:45.531778,0.000279,udp,147.32.84.242,49491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:46.299597,0.000322,udp,114.198.183.219,18165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,158,88,70,79.0,0.5569620253164557,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:46.924663,1.00613,tcp,147.32.86.88,65211.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:36:49.364111,0.001375,udp,190.17.104.85,21283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:49.477806,0.018265,tcp,147.32.84.170,49602.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:51.754285,0.000195,udp,147.32.85.89,42800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:55.451574,61.256256,tcp,147.32.84.165,3062.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:36:55.595475,0.000174,udp,147.32.84.138,55642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:36:57.642504,155.626694,udp,89.249.175.187,45629.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:36:59.124447,0.212338,tcp,147.32.84.170,40323.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:36:59.474510,0.000383,udp,147.32.84.170,51770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:00.123063,1.006021,tcp,147.32.86.88,65300.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:37:01.355321,1.021779,tcp,147.32.86.88,65309.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:37:09.475373,0.018385,tcp,147.32.84.170,59785.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:13.952049,0.001765,udp,72.66.120.114,1025.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:37:19.475001,0.000322,udp,147.32.84.170,40558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:24.912117,1.003916,tcp,147.32.86.20,3030.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,93549,1706,91843,984.7263157894737,0.01823643224406461,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:27.442250,0.000304,udp,147.32.86.34,35448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:27.515594,0.002577,tcp,147.32.84.242,33691.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:27.533173,0.000425,udp,147.32.86.34,39209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:27.545574,0.004008,tcp,147.32.86.34,50245.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:37:27.567102,0.000304,udp,147.32.84.242,48283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:28.364715,942.643616,tcp,147.32.84.242,44989.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:37:29.106469,0.00023,udp,114.24.190.190,27138.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:37:29.142564,0.00031,udp,147.32.84.170,45225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:29.474288,0.000241,udp,147.32.84.170,54082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:33.433168,2143.836182,udp,31.181.106.27,61157.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,594,470,124,148.5,0.7912457912457912,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:37:37.206465,0.000712,udp,202.62.123.237,38693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,74,481,277.5,0.13333333333333333,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:37:37.455986,0.000209,udp,147.32.84.138,53814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:37.912451,0.535563,tcp,147.32.86.20,3042.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:39.475228,0.018266,tcp,147.32.84.170,48378.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:45.185219,234.546722,tcp,147.32.84.242,34154.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:45.346857,1328.592896,tcp,147.32.84.242,34223.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,30,2910,1653,1257,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:45.359688,0.000237,udp,147.32.84.242,44319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:45.420352,0.000318,udp,147.32.84.242,56226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:45.610463,1371.312134,tcp,147.32.84.242,34333.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:37:47.529631,0.003871,tcp,147.32.84.242,45345.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:37:48.020474,0.000317,udp,147.32.84.242,50032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:49.476930,0.000348,udp,147.32.84.170,43594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:50.798270,5.2e-05,udp,147.32.85.25,37970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:55.454448,0.00031,udp,147.32.84.138,53350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:37:56.289632,61.256447,tcp,147.32.84.165,3063.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:37:59.476267,0.000451,udp,147.32.84.170,33930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:37:59.477268,0.000361,udp,147.32.84.170,37748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:03.941752,0.00029,udp,147.32.84.138,51682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:04.360118,0.000256,udp,147.32.85.34,56072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:04.412878,0.00021,udp,147.32.85.34,59319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:08.058861,2811.858643,udp,89.253.103.132,14302.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,3635,442,3193,259.64285714285717,0.12159559834938102,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:38:09.474910,0.000418,udp,147.32.84.170,52517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:13.332175,0.000288,udp,147.32.84.59,56862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:13.454489,0.461614,tcp,147.32.84.170,54087.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.188147,0.000267,udp,147.32.84.170,42710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.188840,0.000458,udp,147.32.84.170,53477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.190055,465.41156,tcp,147.32.84.170,54092.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,109,41797,30855,10942,383.45871559633025,0.7382108763786874,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.198853,240.595642,tcp,147.32.84.170,54097.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.308224,0.103781,udp,147.32.84.170,34890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:14.560660,10.329805,tcp,147.32.84.170,39952.0,->,199.7.54.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:19.475682,0.000452,udp,147.32.84.170,34792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:19.476694,0.000447,udp,147.32.84.170,54235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:27.146861,0.001983,tcp,147.32.86.34,32985.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:38:27.213305,0.000274,udp,147.32.84.242,53235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:28.009406,0.000264,udp,147.32.84.242,49216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:28.132260,251.052536,tcp,147.32.84.242,34981.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:38:35.108552,0.001383,udp,108.56.171.2,60091.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,508,60,284.0,0.8943661971830986,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:38:37.366773,0.000236,udp,147.32.84.138,36864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:37.455349,0.000259,udp,147.32.84.138,56712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:39.475581,0.018065,tcp,147.32.84.170,38216.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:49.475564,0.017881,tcp,147.32.84.170,43015.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:38:51.478254,0.003904,tcp,147.32.84.242,46079.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:38:51.648343,0.003853,tcp,147.32.84.242,46151.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:38:51.789391,0.002162,tcp,147.32.84.242,35287.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:38:51.894047,0.00019,udp,147.32.84.242,46900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:38:54.393579,0.0,udp,195.113.45.28,3044.0,->,239.255.255.253,11427.0,INT,0.0,,1,195,195,0,195.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:38:57.127693,66.939568,tcp,147.32.84.165,3064.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1198,559,639,99.83333333333333,0.4666110183639399,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:38:58.928678,779.414001,udp,72.209.9.145,7859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,660,539,121,165.0,0.8166666666666667,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:38:59.474301,0.0004,udp,147.32.84.170,55453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:04.643224,0.000188,udp,147.32.84.138,49334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:06.699537,0.975328,tcp,147.32.86.5,3218.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:39:06.784252,36.853428,tcp,93.150.228.159,12181.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,21,2119,737,1382,100.9047619047619,0.3478055686644644,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:08.484088,0.000234,udp,212.29.35.250,64122.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:10.140027,0.017948,tcp,147.32.84.242,60012.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:19.473545,0.000403,udp,147.32.84.170,37531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:22.932068,0.000195,udp,147.32.85.25,39563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:23.218074,1732.039917,udp,99.238.110.23,55708.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:26.728564,0.000461,udp,83.35.136.106,27847.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:29.474378,0.000358,udp,147.32.84.170,60100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:29.475432,0.018856,tcp,147.32.84.170,43020.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:32.075911,0.000283,udp,147.32.84.138,53326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:33.120019,0.000246,udp,147.32.84.170,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:33.122047,0.218035,tcp,147.32.84.170,40358.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:33.647562,0.000286,udp,147.32.84.242,46908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:33.766798,0.007809,tcp,147.32.84.242,60140.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:33.778494,0.009011,tcp,147.32.84.242,60148.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:33.797563,0.003825,tcp,147.32.84.242,46604.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:39:33.815145,0.00783,tcp,147.32.86.34,37128.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:33.827559,0.000307,udp,147.32.86.34,40901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:34.004338,0.002124,tcp,147.32.84.242,35838.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:34.067081,0.000216,udp,147.32.84.242,45791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:34.079657,0.000174,udp,147.32.84.242,45976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:34.114140,0.008517,tcp,147.32.84.242,60406.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:34.153503,0.000287,udp,147.32.84.242,59748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:34.269237,0.007854,tcp,147.32.84.242,60524.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:34.418946,0.008649,tcp,147.32.84.242,60580.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:34.530214,0.000382,udp,147.32.84.242,35488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:34.531273,0.003009,tcp,147.32.84.242,36113.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:36.419325,0.000374,udp,90.154.183.50,15475.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:43.914042,0.000351,udp,147.32.84.138,36771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:47.527103,0.005097,tcp,147.32.86.88,49276.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:48.618255,2795.942383,udp,92.252.176.170,44240.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1619,1016,603,269.8333333333333,0.6275478690549722,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:48.915956,0.001662,tcp,147.32.86.5,3283.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:39:49.475569,0.018101,tcp,147.32.84.170,52761.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:39:51.871028,0.975709,tcp,147.32.86.5,3293.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:39:52.164184,0.000382,udp,111.240.16.108,8864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,323,64,259,161.5,0.19814241486068113,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:39:52.291918,0.000388,udp,147.32.84.242,48611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:52.319964,0.000294,udp,147.32.84.242,40176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:52.414499,0.000299,udp,147.32.84.242,40516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:53.876657,0.000223,udp,147.32.84.138,52761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:39:55.540784,250.051208,tcp,147.32.84.59,44036.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,23,3294,1532,1762,143.2173913043478,0.4650880388585307,1,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 01:39:59.474483,0.00037,udp,147.32.84.170,55324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:00.620654,64.209686,tcp,147.32.84.165,3065.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:40:00.701990,0.000126,udp,147.32.84.138,44468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:04.121463,0.000219,udp,147.32.84.170,53887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:04.220381,0.000344,udp,147.32.85.34,63843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:05.916597,9.022645,tcp,85.75.197.255,29275.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,588,222,366,73.5,0.37755102040816324,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:09.474240,0.000377,udp,147.32.84.170,46612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:12.088957,0.000468,udp,89.190.106.165,20116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,74,477,275.5,0.13430127041742287,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:40:19.473651,0.000387,udp,147.32.84.170,46477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:21.198569,0.000329,udp,99.148.31.9,12104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:40:25.829124,3598.442627,udp,147.32.86.96,53189.0,<->,82.208.56.89,123.0,CON,0.0,0.0,236,21240,10620,10620,90.0,0.5,1,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 01:40:28.302931,3071.96875,udp,120.108.112.252,39155.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:40:33.192474,0.000183,udp,147.32.86.34,37066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:33.266349,0.007544,tcp,147.32.86.34,37228.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:33.278166,0.007779,tcp,147.32.86.34,37231.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:34.015594,0.000277,udp,147.32.84.242,56260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:34.147922,883.501282,tcp,147.32.84.242,47640.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:40:34.253531,883.689209,tcp,147.32.84.242,47730.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:40:34.496953,0.000346,udp,147.32.84.242,35827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:34.505800,0.007699,tcp,147.32.84.242,33251.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:34.610275,0.000286,udp,147.32.84.242,33286.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:39.585565,0.000403,udp,147.32.84.170,33966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:39.586606,0.017899,tcp,147.32.84.170,48417.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:42.950694,0.574952,tcp,65.122.168.1,36451.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,3,216,138,78,72.0,0.6388888888888888,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:44.206767,0.000282,udp,147.32.84.138,54778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:44.612600,0.000189,udp,147.32.84.138,50576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:49.394300,7.806409,tcp,147.32.86.5,3300.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:40:49.475585,0.017978,tcp,147.32.84.170,48418.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:40:57.705411,0.000295,udp,147.32.84.242,58678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:40:58.125613,0.0003,udp,188.76.191.176,39566.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:40:59.473624,0.000401,udp,147.32.84.170,40020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:41:04.401422,61.275818,tcp,147.32.84.165,3066.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:41:05.699811,9.001181,tcp,147.32.84.179,52735.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,1,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:41:06.120492,0.000654,udp,147.32.84.170,60334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:41:07.516303,0.000397,udp,147.32.84.138,50362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:09.475552,0.017862,tcp,147.32.84.170,43035.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:41:11.069638,992.724609,udp,222.153.167.102,31598.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1631,1024,607,271.8333333333333,0.627835683629675,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:41:16.032048,0.009277,tcp,147.32.84.242,49796.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:16.284214,0.000359,udp,147.32.84.242,58481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:16.539662,0.000316,udp,147.32.84.242,36914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:19.473813,0.000263,udp,147.32.84.170,49402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:41:29.473654,0.000446,udp,147.32.84.170,48666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:41:33.209192,13.890415,tcp,165.132.130.217,58226.0,->,147.32.86.28,3389.0,FSPA_SRPA,0.0,0.0,103,11592,4954,6638,112.54368932038835,0.42736369910282956,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:35.606608,0.000377,udp,95.68.80.113,64456.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:41:39.472669,1071.584473,tcp,147.32.84.242,33957.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:39.587938,0.004011,tcp,147.32.86.34,50534.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:41:39.592974,0.008003,tcp,147.32.84.242,50181.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:39.597506,0.000338,udp,147.32.84.242,39433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:39.761529,0.000316,udp,147.32.84.242,33269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:45.188297,3.792674,tcp,124.115.5.11,41832.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,8,1393,486,907,174.125,0.3488872936109117,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:49.602177,0.00034,udp,147.32.84.138,59752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:49.685357,0.000372,udp,147.32.84.138,46779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:50.601006,0.005126,tcp,147.32.86.88,49573.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:50.608565,1.005657,tcp,147.32.86.88,49575.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:41:52.921034,3076.751465,udp,86.85.177.51,3128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3201,243,2958,533.5,0.07591377694470477,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:41:56.550576,0.001308,tcp,147.32.86.88,49607.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:57.313704,0.003872,tcp,147.32.84.242,43841.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:41:57.490047,0.000233,udp,147.32.84.242,49264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:57.515239,0.000303,udp,147.32.84.242,37066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:57.636891,0.00025,udp,147.32.84.242,43460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:41:58.573192,0.00507,tcp,147.32.86.88,49618.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:41:59.473891,0.000642,udp,147.32.84.170,45303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:42:05.258987,61.266075,tcp,147.32.84.165,3067.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:42:14.655668,5.66837,tcp,174.133.5.250,55322.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,31,17281,1449,15832,557.4516129032259,0.08384931427579423,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:19.473833,0.000371,udp,147.32.84.170,50376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:42:19.475727,0.017872,tcp,147.32.84.170,40564.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:42:24.747075,0.005105,tcp,147.32.86.88,49650.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:29.849491,0.000236,udp,147.32.84.138,45361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:31.800866,0.000123,udp,147.32.85.89,34234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:31.974198,0.005291,tcp,147.32.86.88,49671.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:32.975508,0.003322,tcp,90.183.39.17,50369.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1390,915,475,139.0,0.658273381294964,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:39.101278,0.000311,udp,147.32.84.242,35692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:39.116401,0.000305,udp,147.32.86.34,59208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:39.223934,0.001993,tcp,147.32.84.242,35006.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:39.240596,0.000429,udp,147.32.84.242,42137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:39.278810,0.002678,tcp,147.32.84.242,35039.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:42:39.362820,0.000329,udp,147.32.84.242,38895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:39.474715,0.0005,udp,147.32.84.170,45942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:42:39.475928,0.017891,tcp,147.32.84.170,40567.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:42:39.517484,0.00024,udp,147.32.84.242,36882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:39.568331,0.000348,udp,147.32.84.242,52131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:40.009021,0.003284,udp,31.131.70.85,3034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2956,60,2896,739.0,0.02029769959404601,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:42:40.165328,0.003858,tcp,147.32.84.242,44621.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:42:42.870407,0.000171,udp,147.32.84.138,36551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:46.602966,0.000236,udp,147.32.84.138,46472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:49.384549,0.000307,udp,147.32.84.138,32811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:49.592720,0.000313,udp,147.32.84.138,53721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:49.694017,0.000311,udp,147.32.84.138,39845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:51.515120,0.000118,udp,147.32.84.138,54180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:55.136052,0.000169,udp,147.32.84.138,36948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:42:57.566061,0.823719,udp,74.65.229.122,36547.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,646,526,120,161.5,0.8142414860681114,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:43:03.536037,564.743896,tcp,147.32.84.242,44786.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:43:04.091567,0.007943,tcp,147.32.84.242,51850.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:43:04.097565,0.000275,udp,147.32.84.242,39029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:06.097048,61.288815,tcp,147.32.84.165,3068.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:43:09.213652,7.9e-05,udp,147.32.85.25,46054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:10.121590,0.000279,udp,147.32.84.170,43920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:10.122827,0.228213,tcp,147.32.84.170,59382.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:13.156610,0.327,tcp,147.32.84.170,50523.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:13.476015,0.284659,tcp,147.32.84.170,50524.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:13.533965,0.247728,tcp,147.32.84.170,46437.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:19.474521,0.000339,udp,147.32.84.170,36285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:24.015489,13.945923,tcp,165.132.130.217,58781.0,->,147.32.86.28,3389.0,FSPA_SRPA,0.0,0.0,99,11314,4742,6572,114.28282828282828,0.4191267456248895,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:43:29.475667,0.000286,udp,147.32.84.170,54759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:29.476672,0.017824,tcp,147.32.84.170,36544.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:29.495179,0.000178,udp,147.32.85.25,38687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:29.691452,0.00035,udp,190.11.112.39,3553.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:43:41.024130,0.000416,udp,188.106.223.174,49208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:43:45.361794,0.00034,udp,147.32.84.242,33552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:45.367249,0.000243,udp,147.32.84.242,43698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:45.516246,0.002646,tcp,147.32.84.242,36048.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:43:45.638144,0.007706,tcp,147.32.84.242,52275.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:43:45.665567,0.000299,udp,147.32.84.242,49003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:45.724421,0.000347,udp,147.32.84.242,42207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:45.734290,0.000183,udp,147.32.84.242,46216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:45.940790,0.000366,udp,147.32.84.242,56191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:46.404319,0.000338,udp,147.32.84.242,44583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:49.476696,0.017639,tcp,147.32.84.170,55700.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:43:52.435852,0.000438,udp,86.60.175.126,33138.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:43:52.466828,1.005632,tcp,147.32.86.88,49866.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:43:55.400775,0.00017,udp,147.32.84.138,33654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:56.524321,0.000458,udp,147.32.84.21,58753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:43:59.476669,0.017623,tcp,147.32.84.170,49129.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:44:00.080741,0.000392,udp,147.32.84.59,41642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:03.637040,1.021067,tcp,147.32.86.88,49932.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:44:04.184925,0.008741,tcp,147.32.84.242,52688.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:44:04.232787,0.000294,udp,147.32.84.242,40889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:04.596080,0.000195,udp,147.32.84.242,58176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:04.943614,0.0002,udp,147.32.85.34,56837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:06.957671,61.304752,tcp,147.32.84.165,3069.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:44:08.048733,0.000408,udp,147.32.86.86,39784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:09.475822,0.00034,udp,147.32.84.170,54175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:44:16.224726,0.000358,udp,147.32.84.186,42401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:19.479731,0.000339,udp,147.32.84.170,55470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:44:22.392439,0.020517,udp,147.32.84.171,35236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:32.906831,1.5e-05,icmp,147.32.86.96,,<-,147.32.87.54,21855.0,ECR,,0.0,2,196,0,196,98.0,0.0,1,0,flow=Background,Background,-1 2011-08-17 01:44:41.836036,2.425201,tcp,174.133.5.250,54103.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,18,10108,1016,9092,561.5555555555555,0.10051444400474871,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:44:45.204189,0.000399,udp,147.32.84.242,59204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:45.530547,0.000224,udp,147.32.84.242,60936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:47.053227,124.163521,tcp,147.32.84.242,53615.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:44:49.475072,0.000435,udp,147.32.84.170,57105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:44:52.484694,0.000216,udp,147.32.85.25,48911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:44:54.781202,0.547495,tcp,67.195.115.43,45615.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,2255,765,1490,225.5,0.3392461197339246,1,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 01:45:06.449080,3039.816162,udp,173.35.180.173,30666.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,284,164,120,71.0,0.5774647887323944,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:45:07.833867,61.301918,tcp,147.32.84.165,3070.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:45:09.477599,0.000378,udp,147.32.84.170,33852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:09.585022,0.000308,udp,147.32.84.242,53539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:10.473080,0.000294,udp,147.32.86.92,50709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,87,273,180.0,0.24166666666666667,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:14.123074,0.000247,udp,147.32.84.170,57893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:17.969709,0.00023,udp,147.32.85.25,50917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:20.531230,0.004186,tcp,147.32.86.88,50099.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:28.198028,0.000249,udp,147.32.84.242,51356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:31.741558,52.555214,tcp,81.184.184.152,48626.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,41,12446,4016,8430,303.5609756097561,0.32267395147035194,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:35.512709,3016.904785,udp,75.68.27.153,46435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2397,1220,1177,199.75,0.5089695452649144,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:45:39.477532,0.010059,udp,147.32.84.170,46192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:44.012530,0.000358,udp,203.167.72.114,50179.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:45:45.110420,0.000456,udp,147.32.84.170,55491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:49.476130,0.000501,udp,147.32.84.170,43926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:51.103015,0.247293,udp,147.32.84.170,55349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:51.171162,0.004103,tcp,147.32.84.242,37983.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:51.174783,0.000338,udp,147.32.84.242,54517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.284556,84.648682,tcp,147.32.84.242,54212.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:51.345042,0.000196,udp,147.32.84.242,38010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.349132,0.000304,udp,147.32.84.242,50752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.426976,0.007809,tcp,147.32.84.242,54325.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:51.487886,0.000324,udp,147.32.84.242,54141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.583865,0.000291,udp,147.32.84.242,37047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.721465,0.010295,tcp,147.32.84.242,54558.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:45:51.727653,0.00025,udp,147.32.84.242,41240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.779365,0.000268,udp,147.32.84.242,47206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:51.853460,0.000357,udp,147.32.84.242,45196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:45:52.094211,1904.989136,tcp,147.32.84.170,41674.0,->,74.125.232.203,443.0,FSPA_FSPA,0.0,0.0,220,48627,36734,11893,221.03181818181818,0.7554239414317149,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:45:59.262554,0.000283,udp,147.32.84.59,43919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:02.035142,0.000215,udp,147.32.84.138,34194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:04.854175,0.00022,udp,147.32.85.34,62670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:04.860298,0.000214,udp,147.32.85.34,55018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:08.009175,0.000448,udp,173.30.129.246,58733.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:46:08.702134,61.301125,tcp,147.32.84.165,3071.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:46:09.347779,0.002387,tcp,147.32.84.242,43109.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:09.476101,0.0005,udp,147.32.84.170,38940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:09.559928,0.007676,tcp,147.32.84.242,53264.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:11.204598,0.000376,udp,147.32.84.138,58354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:14.874390,0.00025,udp,147.32.85.25,49629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:15.122951,0.000274,udp,147.32.84.170,52790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:15.125050,0.215953,tcp,147.32.84.170,59414.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:15.776095,0.000675,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,1,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-17 01:46:19.475228,0.000313,udp,147.32.84.170,58987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:19.476103,0.000412,udp,147.32.84.170,54608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:19.477248,0.018359,tcp,147.32.84.170,34954.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:19.496152,0.000269,udp,147.32.84.138,46026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:22.083499,0.000415,udp,186.206.138.142,22807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,571,80,491,285.5,0.14010507880910683,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:46:23.173006,0.108293,udp,147.32.84.229,13363.0,<->,68.174.85.233,19235.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:46:29.476958,0.01864,tcp,147.32.84.170,40605.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:31.439445,0.211391,tcp,94.113.74.43,48098.0,->,147.32.85.34,995.0,SRPA_FSRPA,0.0,0.0,25,4116,1674,2442,164.64,0.4067055393586006,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:33.182264,9.228622,udp,220.188.254.184,55676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1119,562,557,279.75,0.5022341376228776,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:46:33.862313,0.003862,tcp,147.32.84.242,33415.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:46:39.139200,0.000241,udp,147.32.84.59,62498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:39.185477,0.001201,tcp,147.32.86.88,50402.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:39.476209,0.000328,udp,147.32.84.170,39131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:39.477342,0.017903,tcp,147.32.84.170,55723.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:45.480060,0.000199,udp,147.32.85.25,36424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:46.122920,0.00034,udp,147.32.84.170,52196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:46.125157,0.267043,tcp,147.32.84.170,59418.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:46:47.292315,0.005191,tcp,147.32.86.88,50455.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:47.315155,0.265774,udp,189.38.220.35,55058.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,267,147,120,66.75,0.550561797752809,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:46:51.049170,0.00034,udp,147.32.84.21,36399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:51.165678,0.007959,tcp,147.32.84.242,53587.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:51.347272,0.0077,tcp,147.32.84.242,53702.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:46:51.587128,0.000329,udp,147.32.84.242,33451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:52.597515,0.000261,udp,147.32.84.242,52118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:46:57.615088,8.997431,tcp,147.32.84.171,60975.0,->,85.220.8.185,64923.0,S_,0.0,,3,222,222,0,74.0,1.0,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:47:00.413739,0.001648,udp,76.23.183.26,44423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:01.278580,0.000195,udp,147.32.84.138,59403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:01.543400,0.000255,udp,147.32.84.138,48142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:04.613208,0.0004,udp,201.53.108.167,23080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,74,486,280.0,0.13214285714285715,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:09.479356,0.017983,tcp,147.32.84.170,43424.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:47:09.576952,63.800316,tcp,147.32.84.165,3072.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:47:10.825994,0.00021,udp,147.32.85.25,46446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:11.177065,0.000291,udp,147.32.84.138,58025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:11.426703,0.000397,udp,98.204.99.250,42064.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,78,466,272.0,0.14338235294117646,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:11.452181,8.999804,tcp,147.32.84.179,52750.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,1,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:47:14.981255,9.033917,tcp,118.233.89.220,2795.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,6,370,124,246,61.666666666666664,0.33513513513513515,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:47:15.679606,0.000227,udp,147.32.84.242,43111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:16.204367,0.000329,udp,147.32.84.242,53016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:17.124827,0.211919,tcp,147.32.84.170,45231.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:47:19.477233,0.000454,udp,147.32.84.170,43546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:47:20.433013,0.00043,udp,98.16.137.4,61348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:20.604770,3056.751465,udp,174.138.196.214,7116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:25.710421,0.000233,udp,147.32.84.138,43795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:25.827249,0.000228,udp,147.32.84.138,40600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:25.956246,0.000227,udp,147.32.84.138,44808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:26.590264,0.000299,udp,147.32.84.21,56800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,73,274,173.5,0.21037463976945245,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:29.476290,0.000335,udp,147.32.84.170,49514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:47:34.074609,0.000248,udp,147.32.84.242,35834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:39.234484,0.000256,udp,147.32.84.138,38632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:47.011534,0.000394,udp,72.67.38.172,42108.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:49.476276,0.00032,udp,147.32.84.170,55021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:47:52.517282,423.541138,tcp,212.253.130.185,49682.0,->,147.32.84.229,443.0,SPA_SRPA,0.0,0.0,79,10305,4909,5396,130.44303797468353,0.4763706938379427,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:47:53.175747,2550.098145,udp,147.32.84.229,13363.0,<->,188.233.24.176,14949.0,CON,0.0,0.0,8,5903,120,5783,737.875,0.020328646450957142,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:47:54.625389,0.205486,tcp,147.32.86.20,3584.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:47:57.305995,1.004,tcp,147.32.86.88,50588.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:47:57.347292,0.000292,udp,147.32.84.242,37192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:57.672019,0.002386,tcp,147.32.84.242,44744.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:47:57.942850,0.000244,udp,147.32.84.242,59052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:59.191363,0.000267,udp,147.32.84.138,59017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:47:59.475406,0.000344,udp,147.32.84.170,49649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:00.121247,0.000299,udp,213.130.90.27,40089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:48:04.590583,2808.078125,udp,147.32.85.60,123.0,<->,195.113.144.201,123.0,CON,0.0,0.0,18,1620,810,810,90.0,0.5,1,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 01:48:05.022728,0.00023,udp,147.32.85.34,58992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:05.039233,0.000198,udp,147.32.85.34,62695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:12.941667,61.300804,tcp,147.32.84.165,3073.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:48:13.451895,0.269354,tcp,147.32.84.170,46239.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:14.217467,240.048096,tcp,147.32.84.170,45324.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1397,1162,94.77777777777777,0.545916373583431,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:14.217613,250.048904,tcp,147.32.84.170,45328.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:16.241376,0.001658,tcp,147.32.84.242,45136.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:48:16.336860,0.008307,tcp,147.32.84.242,55246.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:48:16.410161,0.000477,udp,147.32.84.242,53229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:16.726875,1.021652,tcp,147.32.86.88,50675.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:48:18.123164,0.000292,udp,147.32.84.170,42411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:18.124435,0.211494,tcp,147.32.84.170,45251.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:19.476386,0.00028,udp,147.32.84.170,54061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:25.089440,0.003405,udp,82.147.183.171,34613.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2946,60,2886,736.5,0.020366598778004074,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:48:34.529663,0.000105,udp,147.32.84.59,37004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:37.286091,3368.592773,udp,41.182.12.37,64579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1164,854,310,116.4,0.7336769759450171,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:48:39.479584,0.000428,udp,147.32.84.170,60002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:40.026917,3046.045898,udp,160.44.239.12,48893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,774,588,186,129.0,0.7596899224806202,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:48:41.284235,0.002234,tcp,147.32.84.242,45356.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:48:41.362598,0.000322,udp,147.32.84.242,43416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:41.757865,0.000315,udp,147.32.84.242,39796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:46.870516,0.000221,udp,147.32.84.138,56183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:48.121999,0.000355,udp,147.32.84.170,53039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:49.477489,0.017691,tcp,147.32.84.170,43952.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:48:56.519605,18.823595,udp,202.41.210.166,1430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,453,141,312,113.25,0.31125827814569534,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:48:57.050438,0.000215,udp,147.32.86.34,53992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:57.084432,0.000225,udp,147.32.84.242,49591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:57.100776,0.000282,udp,147.32.84.242,33346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:57.229561,0.00196,tcp,147.32.84.242,45631.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:48:57.436076,0.003886,tcp,147.32.84.242,35828.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:48:57.566802,0.00017,udp,147.32.84.242,47234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:58.362295,0.000257,udp,147.32.84.242,57252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:58.533852,0.000285,udp,147.32.84.242,56642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:48:59.477534,0.017777,tcp,147.32.84.170,42844.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:03.105994,0.000244,udp,147.32.84.138,44069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:08.186750,0.00026,udp,147.32.84.138,45006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:13.808955,61.300446,tcp,147.32.84.165,3074.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:49:18.401344,0.0,tcp,76.164.193.170,80.0,->,147.32.86.31,20335.0,SA_,0.0,,1,62,62,0,62.0,1.0,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:49:19.112495,0.214023,tcp,147.32.84.170,45259.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:19.475610,0.000385,udp,147.32.84.170,49572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:22.255949,0.000349,udp,147.32.84.242,53268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:22.358322,0.000261,udp,147.32.84.242,60334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:23.103685,0.000223,udp,147.32.84.138,59190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:25.659520,3077.739014,udp,108.193.132.248,48974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1102,154,948,275.5,0.1397459165154265,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:49:29.477600,0.00034,udp,147.32.84.170,55755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:30.438608,0.038637,tcp,90.183.39.17,39742.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,6546,939,5607,467.57142857142856,0.14344637946837763,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:49:30.762109,0.000168,udp,147.32.84.138,35630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:34.995924,1.005821,tcp,147.32.86.88,50862.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:49:40.253347,0.00015,udp,147.32.85.25,43300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:42.105654,0.000308,udp,147.32.84.242,53843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:43.747377,3070.013428,udp,147.32.84.79,123.0,<->,89.31.8.3,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,1,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 01:49:44.522582,0.000237,udp,147.32.84.172,36814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:48.086430,0.000211,udp,147.32.84.138,60621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:49.123980,0.000255,udp,147.32.84.170,60239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:49.475704,0.000365,udp,147.32.84.170,56883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:50.394934,0.000214,udp,147.32.85.25,41052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:55.462036,0.000216,udp,147.32.85.25,34120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:49:59.475727,0.000409,udp,147.32.84.170,43761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:49:59.477857,0.018422,tcp,147.32.84.170,37013.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:03.128735,0.000343,udp,68.68.151.30,50988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:50:04.121536,0.004008,tcp,147.32.86.34,44863.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:50:04.271747,0.000451,udp,147.32.86.34,44727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:04.589441,0.000204,udp,147.32.84.242,55806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:04.657163,692.431763,tcp,147.32.84.242,46949.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:50:04.674011,692.427917,tcp,147.32.84.242,46961.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:50:04.722812,0.000262,udp,147.32.84.242,60245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:04.723953,0.000342,udp,147.32.84.242,54493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:04.872392,0.000235,udp,147.32.84.242,37597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:04.947059,0.000476,udp,178.45.141.232,41567.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,73,474,273.5,0.13345521023765997,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:50:07.206830,0.005578,tcp,147.32.86.5,3421.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,706,383,323,100.85714285714286,0.5424929178470255,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:50:09.477897,0.018543,tcp,147.32.84.170,43962.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:11.128999,0.20573,tcp,147.32.86.20,3704.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:50:11.648143,0.000418,udp,147.32.86.92,51983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,87,273,180.0,0.24166666666666667,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:14.676259,64.412788,tcp,147.32.84.165,3075.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:50:19.819293,0.002401,icmp,147.32.87.249,,<-,147.32.87.48,2.0,RED,,0.0,2,148,0,148,74.0,0.0,1,1,flow=Background,Background,-1 2011-08-17 01:50:20.124740,0.221551,tcp,147.32.84.170,45268.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:21.219794,5.113957,udp,94.112.43.138,4810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1186,1005,181,197.66666666666666,0.8473861720067454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:50:21.361203,1.005753,tcp,147.32.86.88,50985.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:50:22.377371,0.002129,tcp,147.32.84.242,47258.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:50:22.638854,0.000276,udp,147.32.84.242,36069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:31.021181,0.000329,udp,147.32.85.25,48066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:50:39.475814,0.01002,udp,147.32.84.170,35759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:39.634982,0.256527,tcp,147.32.84.164,39886.0,->,208.111.156.52,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,1,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 01:50:49.476706,0.00031,udp,147.32.84.170,37581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:50.636941,1.084669,tcp,147.32.86.5,3467.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:50:51.121537,0.000232,udp,147.32.84.170,56864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:50:53.920093,2430.882812,udp,133.87.145.122,25171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,661,540,121,165.25,0.8169440242057489,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:51:03.914527,0.056299,udp,147.32.84.171,57243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,588,75,513,294.0,0.12755102040816327,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.002374,0.003888,tcp,147.32.86.34,44927.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:51:04.007261,0.000316,udp,147.32.84.242,41203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.049011,0.000338,udp,147.32.84.242,48340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.064503,0.000569,udp,147.32.84.242,52574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.108036,0.008317,tcp,147.32.84.242,42023.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:51:04.203452,0.000293,udp,147.32.84.242,54308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.317669,0.000453,udp,147.32.84.242,39413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.451799,0.000579,udp,147.32.84.242,38853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.583707,0.003958,tcp,147.32.84.242,43335.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:51:04.655124,0.000273,udp,147.32.84.242,58129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:04.703670,0.000336,udp,147.32.84.242,40344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:05.904958,0.00286,tcp,147.32.84.242,41299.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:51:06.968125,0.000361,udp,147.32.85.25,55957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,84,141,112.5,0.37333333333333335,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:09.475816,0.000509,udp,147.32.84.170,58179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:09.476934,0.000233,udp,147.32.84.170,33780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:11.988379,0.000306,udp,147.32.85.25,55671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:15.084276,0.000275,udp,147.32.84.138,36331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:17.004425,0.000234,udp,147.32.84.138,34785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:18.658855,64.421333,tcp,147.32.84.165,3076.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:51:19.479581,0.017824,tcp,147.32.84.170,43469.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:20.431035,0.000326,udp,147.32.84.59,38849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:22.122361,0.000273,udp,147.32.84.170,50377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:25.353514,0.000209,udp,147.32.84.59,51065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:27.431738,0.000221,udp,147.32.85.25,36977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:28.275203,0.000303,udp,147.32.84.242,35664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:28.552201,0.000353,udp,147.32.84.242,36154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:28.736742,0.006113,tcp,147.32.84.242,41584.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:51:29.476871,0.000623,udp,147.32.84.170,36510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:29.477978,0.000305,udp,147.32.84.170,34297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:41.499203,3073.000488,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,1,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 01:51:46.765992,0.001441,udp,76.90.64.2,23890.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:51:48.157511,0.000155,udp,147.32.85.25,52768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:49.476841,0.000435,udp,147.32.84.170,35627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:49.478035,0.018627,tcp,147.32.84.170,33579.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:52.125444,0.215322,tcp,147.32.84.170,45280.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:51:53.220776,0.000269,udp,147.32.85.25,33369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:51:59.478001,0.01783,tcp,147.32.84.170,44746.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:01.722197,0.000457,udp,174.64.173.178,49477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,78,475,276.5,0.1410488245931284,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:52:09.476017,0.000348,udp,147.32.84.170,37871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:09.478045,0.018005,tcp,147.32.84.170,44140.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:10.405118,0.000412,udp,147.32.84.242,32775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:10.432119,0.000236,udp,147.32.84.242,43260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:10.850457,0.000259,udp,147.32.84.242,35858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:11.083041,0.009384,tcp,147.32.84.242,43607.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:19.981109,2.46354,tcp,66.249.66.14,46491.0,->,147.32.87.27,443.0,FSRPA_FSPA,0.0,0.0,23,7939,1591,6348,345.17391304347825,0.20040307343494143,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:20.427271,0.000248,udp,147.32.84.138,56717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:20.614750,0.000154,udp,147.32.84.138,54835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:20.868622,0.000275,udp,147.32.84.138,36026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:22.121386,0.000534,udp,147.32.84.170,50046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:22.651885,61.300663,tcp,147.32.84.165,3077.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:52:23.449361,10.139007,tcp,147.32.86.89,3121.0,->,77.75.76.6,80.0,FSPA_FSPA,0.0,0.0,13,3662,2511,1151,281.6923076923077,0.6856908793009284,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:23.569874,0.005128,tcp,147.32.86.88,51277.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:28.077933,0.001829,tcp,147.32.84.242,42409.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:28.136275,0.000321,udp,147.32.84.242,57184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:29.475963,0.000439,udp,147.32.84.170,51115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:29.476905,0.000332,udp,147.32.84.170,35556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:31.003181,0.000213,udp,147.32.84.138,44760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:39.477853,0.018209,tcp,147.32.84.170,49668.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:39.842939,670.809814,udp,74.64.73.180,61532.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,540,300,240,67.5,0.5555555555555556,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:52:41.427658,0.000282,udp,201.230.26.50,10051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:52:48.760262,0.000257,udp,147.32.84.138,34835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:49.476931,0.000377,udp,147.32.84.170,57962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:52:51.460005,0.001322,tcp,147.32.86.88,51310.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:51.785458,3008.514404,udp,76.202.13.59,59653.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:52:54.712893,2.381696,tcp,188.138.106.141,62722.0,->,147.32.84.56,80.0,FSPA_FSPA,0.0,0.0,11,886,565,321,80.54545454545455,0.6376975169300225,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:56.636982,0.000317,udp,147.32.84.59,42469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:56.887962,0.000244,udp,147.32.85.89,38223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:52:58.864090,12.225512,tcp,188.138.106.141,62823.0,->,147.32.87.4,80.0,FSPA_FSPA,0.0,0.0,14,2523,624,1899,180.21428571428572,0.2473246135552913,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:52:59.476896,0.000214,udp,147.32.84.170,50737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:05.207186,0.000187,tcp,120.50.2.10,36983.0,->,147.32.84.59,38367.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 01:53:06.106036,0.000269,udp,147.32.84.138,34004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:06.120516,0.000175,udp,147.32.84.138,53917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:07.456948,0.000261,udp,147.32.84.59,37906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:07.584347,0.000506,udp,147.32.84.59,39329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:09.476089,0.000473,udp,147.32.84.170,32885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:09.477034,0.000309,udp,147.32.84.170,37416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:09.478031,0.018404,tcp,147.32.84.170,36858.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:10.007786,0.007905,tcp,147.32.84.242,43992.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:11.027700,0.002717,tcp,147.32.84.242,42715.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:11.091480,0.00031,udp,147.32.84.242,39666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.223355,0.000287,udp,147.32.84.242,57264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.265231,0.000236,udp,147.32.84.242,56681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.338795,0.000283,udp,147.32.84.242,40313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.414269,0.000229,udp,147.32.84.242,34609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.646885,0.003597,tcp,147.32.84.242,43284.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:11.666796,0.003875,tcp,147.32.84.242,45591.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:53:11.891337,0.000295,udp,147.32.84.242,51167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:11.971734,0.008378,tcp,147.32.84.242,44700.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:12.012513,0.003967,tcp,147.32.84.242,45683.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:53:12.145423,0.008996,tcp,147.32.84.242,44733.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:13.826014,0.463788,tcp,147.32.84.170,35298.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:19.476862,0.000295,udp,147.32.84.170,53306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:19.477884,0.017839,tcp,147.32.84.170,49677.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:21.324683,0.000187,udp,147.32.84.138,32889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:23.519120,64.299591,tcp,147.32.84.165,3078.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:53:24.123507,0.000332,udp,147.32.84.170,33279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:24.312585,602.577515,udp,85.181.6.108,63128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,480,356,124,120.0,0.7416666666666667,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:53:28.072685,0.000304,udp,147.32.84.59,42985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:28.074138,0.000308,udp,147.32.84.59,50871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:29.475922,0.000308,udp,147.32.84.170,35718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:34.607830,0.00043,udp,147.32.84.242,51426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:34.771928,0.002161,tcp,147.32.84.242,43609.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:53:34.916308,0.000262,udp,147.32.84.242,58855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:36.491952,0.000205,udp,147.32.84.138,46028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:37.635622,2630.400146,udp,217.226.226.142,23564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1180,870,310,118.0,0.7372881355932204,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:53:39.477122,0.000371,udp,147.32.84.170,58762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:53:44.594198,8.998713,tcp,147.32.84.171,45382.0,->,81.154.49.146,16881.0,S_,0.0,,3,222,222,0,74.0,1.0,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:53:44.782736,0.000209,udp,147.32.84.138,49856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:45.283382,0.000241,udp,147.32.85.25,57952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:53:59.477890,0.01899,tcp,147.32.84.170,44766.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:54:03.173919,0.000202,udp,147.32.84.138,39723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:03.288976,2644.395996,udp,147.32.84.229,13363.0,->,83.215.102.17,12006.0,INT,0.0,,9,2106,2106,0,234.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:54:04.611099,0.000276,udp,147.32.85.34,54417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:04.619873,0.000277,udp,147.32.85.34,62094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:16.139438,0.000304,udp,75.149.75.109,34944.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:54:16.715715,0.007951,tcp,147.32.84.242,45146.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:16.762387,0.007577,tcp,147.32.86.34,50519.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:16.797573,0.000335,udp,147.32.86.34,55427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:16.816958,0.000329,udp,147.32.86.34,43434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:16.841312,0.000256,udp,147.32.84.242,46323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:16.877995,0.002632,tcp,147.32.84.242,43968.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:17.011967,0.000197,udp,147.32.84.242,35067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:17.015737,0.000236,udp,147.32.84.242,44674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:17.140417,0.000381,udp,147.32.84.242,41501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:17.318203,185.166931,tcp,147.32.84.242,45677.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:17.575036,185.010513,tcp,147.32.84.242,45742.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,20,1940,1102,838,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:19.476160,0.000441,udp,147.32.84.170,59731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:54:22.718367,0.001215,tcp,147.32.86.88,51563.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:54:24.376818,66.715424,tcp,147.32.84.165,3079.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:54:26.870798,0.000204,udp,147.32.84.138,47011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:27.470098,3045.644531,udp,68.12.129.38,13543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:54:34.198020,0.000353,udp,147.32.84.242,51327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:35.327499,0.000354,udp,108.67.20.201,18393.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,1,1,flow=Background-UDP-Established,Background,-1 2011-08-17 01:54:39.476260,0.00035,udp,147.32.84.170,52242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:54:39.478225,0.017638,tcp,147.32.84.170,36876.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:54:44.405870,0.000214,udp,147.32.84.138,53542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:54:54.126011,0.243889,tcp,147.32.84.170,44816.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:00.365348,0.000623,udp,71.203.103.20,9764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,1568,81,1487,522.6666666666666,0.051658163265306124,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:55:00.652124,1206.001099,udp,161.53.16.185,5983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,580,350,230,145.0,0.603448275862069,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:55:01.174374,0.000429,udp,77.232.19.9,37464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,74,474,274.0,0.13503649635036497,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:55:02.344855,0.001488,tcp,147.32.86.88,51642.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:09.479304,0.017791,tcp,147.32.84.170,49694.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:16.145224,0.007596,tcp,147.32.86.34,50589.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:17.058641,0.000318,udp,147.32.84.242,52041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.068774,0.000246,udp,147.32.84.242,55729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.100768,0.003939,tcp,147.32.84.242,47147.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:55:17.140966,0.000297,udp,147.32.84.242,48756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.216554,0.000274,udp,147.32.84.242,54878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.237359,0.000352,udp,147.32.84.242,40174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.240805,0.003861,tcp,147.32.84.242,47268.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:55:17.282138,0.002255,tcp,147.32.84.242,45011.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:17.324527,0.000447,udp,147.32.84.242,48864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.333180,0.007907,tcp,147.32.84.242,46383.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:17.472620,0.007704,tcp,147.32.84.242,46512.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:17.480330,0.003911,tcp,147.32.84.242,45196.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:17.621689,0.000305,udp,147.32.84.242,59371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:17.638543,0.000276,udp,147.32.84.242,35766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:19.477357,0.000437,udp,147.32.84.170,51573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:25.126210,0.000304,udp,147.32.84.170,34762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:29.480366,0.000312,udp,147.32.84.170,58603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:30.555950,0.000257,udp,147.32.85.34,49391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:30.663754,61.28619,tcp,147.32.84.165,3080.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:55:39.503065,0.017691,tcp,147.32.84.170,36884.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:41.209650,0.007948,tcp,147.32.84.242,46910.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:41.526937,0.000342,udp,147.32.84.242,45289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:55:41.668216,0.001818,tcp,147.32.84.242,45768.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:55:43.098281,1214.795288,udp,190.189.188.4,40765.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:55:43.985323,1.005537,tcp,147.32.86.88,51761.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:55:48.452931,0.276378,udp,183.88.33.221,26110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,703,157,546,175.75,0.2233285917496444,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:55:49.477420,0.000435,udp,147.32.84.170,51357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:56.127661,0.000259,udp,147.32.84.170,43718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:55:56.946718,8.893095,tcp,94.197.127.227,42640.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,4,308,74,234,77.0,0.24025974025974026,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:56:00.010695,0.000169,udp,147.32.85.25,41295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:04.506355,0.000267,udp,147.32.85.34,52248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:09.480127,0.018387,tcp,147.32.84.170,49286.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:56:10.885249,1241.598877,udp,190.195.36.228,4377.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,699,513,186,116.5,0.7339055793991416,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:56:11.675722,0.000217,udp,147.32.84.138,45202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:20.946294,0.000473,udp,75.45.29.181,15938.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:56:22.294960,0.007746,tcp,147.32.84.242,44394.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:56:22.301264,0.000187,udp,147.32.84.242,54162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:22.319131,0.000382,udp,147.32.84.242,55802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:22.409584,0.003858,tcp,147.32.84.242,36868.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:56:22.562427,0.004152,tcp,147.32.84.242,36994.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:56:22.697769,0.000206,udp,147.32.84.242,39863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:22.813306,0.000177,udp,147.32.84.242,56152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:23.295951,0.000424,udp,147.32.84.242,58627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:23.471209,0.000431,udp,147.32.84.242,50646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:31.281246,0.058732,udp,147.32.84.229,13363.0,<->,88.167.2.242,44119.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:56:31.522281,61.286713,tcp,147.32.84.165,3081.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:56:34.354516,0.000406,udp,147.32.84.138,39787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:39.562894,0.007611,tcp,147.32.86.88,52050.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,9,834,447,387,92.66666666666667,0.5359712230215827,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:56:41.106852,3027.504883,udp,98.216.98.92,10147.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:56:41.345412,0.000253,udp,147.32.84.242,43675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:41.449844,0.000252,udp,147.32.84.242,42797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:41.608724,0.000143,udp,147.32.84.242,49521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:46.194715,0.00024,udp,147.32.84.138,50584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:46.264820,0.000218,udp,147.32.85.25,50104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:49.478646,0.000334,udp,147.32.84.170,55773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:56:51.228162,8.970656,tcp,83.84.119.174,47393.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,10,642,264,378,64.2,0.411214953271028,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:56:53.077474,0.000428,udp,92.233.116.39,52495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,217,155,62,108.5,0.7142857142857143,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:56:56.921914,0.000229,udp,147.32.85.89,58872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:56:57.124566,0.000234,udp,147.32.84.170,41324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:04.548111,3574.267822,udp,64.150.196.134,42528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1449,1077,372,120.75,0.7432712215320911,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:57:09.479542,0.017628,tcp,147.32.84.170,59977.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:19.478365,0.000409,udp,147.32.84.170,34686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:22.237040,0.00394,tcp,147.32.86.34,32942.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:57:22.282317,0.000316,udp,147.32.86.34,52625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:22.284616,0.003873,tcp,147.32.86.34,32951.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:57:22.694458,0.001873,tcp,147.32.84.242,59845.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:57:23.293334,0.012999,tcp,147.32.84.242,59961.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:57:23.538669,0.000311,udp,147.32.84.242,41429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:23.889302,0.003827,tcp,147.32.84.242,38418.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:57:23.923746,0.000266,udp,147.32.84.242,43486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:23.977369,0.005155,tcp,147.32.84.242,60110.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:57:26.861055,0.000184,udp,147.32.85.25,41606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:28.124661,0.210488,tcp,147.32.84.170,53153.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:29.480828,0.000349,udp,147.32.84.170,37140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:32.262073,0.000196,udp,147.32.84.138,60061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:32.379734,61.303219,tcp,147.32.84.165,3082.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:57:33.669484,0.000144,udp,147.32.84.138,47177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:33.840670,0.000538,tcp,147.32.86.96,43276.0,->,147.32.87.5,524.0,_FSPA,,0.0,4,252,0,252,63.0,0.0,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:57:39.478704,0.000299,udp,147.32.84.170,44922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:47.187569,0.000375,udp,147.32.84.242,34302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:47.201045,0.000402,udp,147.32.84.242,49263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:47.323262,0.000407,udp,147.32.84.242,49544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:47.327362,0.000238,udp,147.32.84.242,46693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:47.457779,0.000249,udp,147.32.84.242,57808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:57:47.696895,0.001834,tcp,147.32.84.242,60425.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:57:49.479578,0.000425,udp,147.32.84.170,37360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:57:55.025277,0.184703,udp,147.32.84.138,56292.0,<->,169.229.70.95,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,1,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 01:57:58.837851,0.118648,udp,147.32.84.229,13363.0,<->,208.88.186.6,34026.0,CON,0.0,0.0,2,148,85,63,74.0,0.5743243243243243,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:02.380605,1.009291,tcp,147.32.86.88,52274.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:58:07.891841,0.000249,udp,147.32.85.25,54567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:12.999863,0.000118,udp,147.32.85.25,43829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:13.160238,0.268382,tcp,147.32.84.170,60772.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,20,4118,1112,3006,205.9,0.27003399708596404,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:13.929139,0.001611,udp,208.88.186.9,34037.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,503,60,281.5,0.8934280639431617,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:14.047876,0.248877,tcp,147.32.84.170,41183.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:14.199282,0.019331,udp,147.32.84.170,43437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:14.220365,250.044647,tcp,147.32.84.170,44481.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:14.334147,0.283842,udp,147.32.84.229,13363.0,<->,189.111.114.119,31919.0,CON,0.0,0.0,2,161,93,68,80.5,0.577639751552795,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:14.636522,3028.551758,udp,200.158.99.151,27996.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:19.478572,0.000384,udp,147.32.84.170,54941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:19.480507,0.01779,tcp,147.32.84.170,37544.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:27.779473,3045.240479,udp,186.156.1.127,38512.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,429,249,180,71.5,0.5804195804195804,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:29.075099,0.000449,udp,147.32.84.242,50952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.121337,0.000206,udp,147.32.84.242,53045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.240973,0.000236,udp,147.32.86.34,40688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.271401,0.000353,udp,147.32.84.242,53990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.312789,0.002416,tcp,147.32.86.34,44007.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:29.525435,0.000301,udp,147.32.84.242,50205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.630788,0.003091,tcp,147.32.84.242,32798.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:29.673358,0.003867,tcp,147.32.84.242,39395.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:58:29.697198,0.000377,udp,147.32.84.242,41169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:29.697906,0.024212,tcp,147.32.84.242,32857.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:29.853980,0.018085,tcp,147.32.84.242,32920.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:29.906949,0.000294,udp,147.32.84.242,50237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:32.092045,0.005073,tcp,147.32.86.88,52322.0,->,147.228.52.22,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:33.248513,70.012863,tcp,147.32.84.165,3083.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:58:33.277279,0.205869,tcp,147.32.86.20,4158.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,1,1,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:37.167832,0.001195,tcp,147.32.86.88,52338.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:39.478790,0.000427,udp,147.32.84.170,57144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:39.479623,0.0003,udp,147.32.84.170,37128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:39.480657,0.017692,tcp,147.32.84.170,37547.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:39.570509,0.000244,udp,147.32.84.138,41192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:41.989038,3298.903809,udp,70.174.19.147,4569.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,3920,573,3347,217.77777777777777,0.1461734693877551,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:42.487387,0.001188,tcp,147.32.86.88,52360.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:42.488961,1.006481,tcp,147.32.86.88,52361.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,6,374,194,180,62.333333333333336,0.5187165775401069,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:58:45.056059,0.000298,udp,173.184.161.95,61528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:47.032554,0.00023,udp,147.32.84.242,41218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:47.064072,0.000226,udp,147.32.84.242,42404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:47.079393,0.008008,tcp,147.32.84.242,47221.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:47.484912,0.000344,udp,147.32.84.242,36543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:47.651373,0.000276,udp,147.32.84.242,60619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:47.671186,0.001907,tcp,147.32.84.242,33268.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:58:49.478758,0.000359,udp,147.32.84.170,34137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:54.748357,0.000337,udp,46.176.236.17,15700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:58:57.572950,0.000206,udp,147.32.84.138,36216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:58:59.150524,0.000309,udp,147.32.84.170,42785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:58:59.151793,0.246117,tcp,147.32.84.170,53177.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:59:04.003332,0.000284,udp,147.32.84.59,48025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:04.272514,0.000282,udp,147.32.84.138,34987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:07.183327,349.829956,udp,147.32.84.229,13363.0,<->,89.13.189.123,15805.0,CON,0.0,0.0,6,3065,120,2945,510.8333333333333,0.03915171288743882,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:59:07.988895,0.000336,udp,116.28.140.107,49579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:59:08.830353,1945.468384,udp,60.191.221.129,19297.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:59:09.478883,0.000463,udp,147.32.84.170,48782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:59:13.684551,0.0,icmp,147.32.85.120,3331.0,->,27.44.12.208,,URFIL,0.0,,1,70,70,0,70.0,1.0,1,,flow=Background,Background,-1 2011-08-17 01:59:19.480747,0.018025,tcp,147.32.84.170,55964.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:59:19.902635,0.0,tcp,147.32.84.165,3084.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:19.902873,0.0,tcp,147.32.84.165,3085.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:19.914711,0.0,tcp,147.32.84.165,3087.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.086121,0.0,tcp,147.32.84.165,3088.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.086348,0.0,tcp,147.32.84.165,3089.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.096224,0.0,tcp,147.32.84.165,3091.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.286058,0.0,tcp,147.32.84.165,3092.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.286249,0.0,tcp,147.32.84.165,3093.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:20.917932,0.0,tcp,147.32.84.165,3096.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:21.017331,0.0,tcp,147.32.84.165,3095.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:25.072259,0.000237,udp,147.32.84.138,41108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.039661,0.000225,udp,147.32.84.242,54799.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.074248,0.000414,udp,147.32.84.242,59266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.099395,0.007796,tcp,147.32.84.242,47556.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:59:29.106471,0.000312,udp,147.32.84.242,45875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.166548,0.000227,udp,147.32.86.34,40525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.203148,0.003872,tcp,147.32.86.34,33077.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:59:29.221165,0.000218,udp,147.32.84.242,35388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.291237,0.000207,udp,147.32.84.242,35936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.374711,0.007756,tcp,147.32.84.242,47736.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:59:29.459381,0.000242,udp,147.32.84.242,33820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:29.478589,0.000299,udp,147.32.84.170,44994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:59:29.479455,0.000321,udp,147.32.84.170,58195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,1,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 01:59:29.522913,0.000301,udp,147.32.84.242,57100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:30.382461,0.008844,tcp,147.32.84.242,48019.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,1,0,flow=Background-TCP-Established,Background,-1 2011-08-17 01:59:30.542904,0.000161,udp,147.32.84.242,33320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:31.218869,0.000251,udp,147.32.84.242,44325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:31.400469,0.000329,udp,147.32.84.21,47004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:33.534738,0.0,tcp,147.32.84.165,3323.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:33.534745,0.0,tcp,147.32.84.165,3321.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:33.534797,0.0,tcp,147.32.84.165,3320.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:33.534887,0.0,tcp,147.32.84.165,3327.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:34.135610,61.304928,tcp,147.32.84.165,3368.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,1,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 01:59:34.135681,0.0,tcp,147.32.84.165,3333.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:34.135688,0.0,tcp,147.32.84.165,3332.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:34.135782,0.0,tcp,147.32.84.165,3335.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:42.362414,0.344254,udp,147.32.84.229,13363.0,<->,118.165.66.180,22966.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,1,0,flow=Background-UDP-Established,Background,-1 2011-08-17 01:59:45.552136,0.0,tcp,147.32.84.165,3559.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:45.552150,0.0,tcp,147.32.84.165,3558.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:45.552205,0.0,tcp,147.32.84.165,3561.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:45.552257,0.0,tcp,147.32.84.165,3563.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:45.552370,0.0,tcp,147.32.84.165,3562.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:46.153251,0.0,tcp,147.32.84.165,3573.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:46.153265,0.0,tcp,147.32.84.165,3571.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:46.153270,0.0,tcp,147.32.84.165,3570.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:48.040226,6.947815,tcp,66.215.133.58,54291.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:59:51.874680,2007.344116,udp,147.32.84.229,13363.0,->,82.55.188.201,50309.0,INT,0.0,,6,396,396,0,66.0,1.0,1,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 01:59:53.750773,0.000222,udp,147.32.84.242,42852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,1,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 01:59:53.795979,0.003852,tcp,147.32.84.242,40720.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,1,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 01:59:57.570141,0.0,tcp,147.32.84.165,3801.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:57.570154,0.0,tcp,147.32.84.165,3799.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:57.570158,0.0,tcp,147.32.84.165,3798.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:57.570162,0.0,tcp,147.32.84.165,3805.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:58.170265,0.0,tcp,147.32.84.165,3811.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:58.170280,0.0,tcp,147.32.84.165,3810.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 01:59:58.170285,0.0,tcp,147.32.84.165,3813.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,1,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:01.126154,0.000296,udp,147.32.84.170,39403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:01.128332,0.229891,tcp,147.32.84.170,53186.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:01.257161,0.000408,udp,147.32.87.36,37220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,86,208,147.0,0.2925170068027211,2,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:00:01.258724,0.000409,udp,147.32.87.36,59925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,96,184,140.0,0.34285714285714286,2,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:00:01.586853,3599.561279,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,3,180,0,180,60.0,0.0,2,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:00:04.072926,0.000144,udp,147.32.84.138,53805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:09.478734,0.000385,udp,147.32.84.170,55162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:09.479635,0.000326,udp,147.32.84.170,37439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:09.586878,0.0,tcp,147.32.84.165,4039.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:09.586949,0.0,tcp,147.32.84.165,4038.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:09.587042,0.0,tcp,147.32.84.165,4041.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:09.587049,0.0,tcp,147.32.84.165,4043.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:09.587103,0.0,tcp,147.32.84.165,4042.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:10.187756,0.0,tcp,147.32.84.165,4053.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:10.187763,0.0,tcp,147.32.84.165,4051.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:10.187807,0.0,tcp,147.32.84.165,4050.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:10.728868,0.000209,udp,147.32.87.36,40495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,2,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:00:15.032601,0.000452,udp,98.119.118.48,10394.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:00:15.732604,0.000479,udp,95.26.84.238,55957.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,317,66,251,158.5,0.2082018927444795,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:00:17.632849,21.124437,tcp,134.134.139.76,55546.0,->,147.32.84.229,443.0,FSPA_FSRPA,0.0,0.0,12,883,508,375,73.58333333333333,0.5753114382785957,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:19.480868,0.017815,tcp,147.32.84.170,59788.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:21.604322,0.0,tcp,147.32.84.165,4236.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:21.604332,0.0,tcp,147.32.84.165,4234.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:21.604477,0.0,tcp,147.32.84.165,4239.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:21.604491,0.0,tcp,147.32.84.165,4237.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:22.205144,0.0,tcp,147.32.84.165,4245.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:22.205158,0.0,tcp,147.32.84.165,4243.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:22.934626,3045.506592,udp,98.164.210.214,49229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:00:33.622770,0.0,tcp,147.32.84.165,4417.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:33.622786,0.0,tcp,147.32.84.165,4415.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:33.622838,0.0,tcp,147.32.84.165,4420.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:33.622849,0.0,tcp,147.32.84.165,4418.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:34.223703,0.0,tcp,147.32.84.165,4426.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:34.223717,0.0,tcp,147.32.84.165,4424.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:34.223772,0.0,tcp,147.32.84.165,4429.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:36.066356,0.000239,udp,147.32.84.138,37303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:36.260243,0.000446,udp,217.111.199.184,17988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:00:36.909996,0.003876,tcp,147.32.84.242,40881.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:00:37.019296,0.007896,tcp,147.32.84.242,48644.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:37.080920,0.01074,tcp,147.32.84.242,48702.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:37.190724,0.000252,udp,147.32.84.242,44883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:37.375682,0.001769,tcp,147.32.84.242,34762.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:37.402338,0.000313,udp,147.32.84.242,35137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:37.470578,0.007683,tcp,147.32.84.242,49061.0,->,147.228.52.22,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:37.528986,0.000343,udp,147.32.84.242,32967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:37.747171,0.003917,tcp,147.32.84.242,41550.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:00:39.500023,0.000421,udp,147.32.84.170,36750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:39.501161,0.018029,tcp,147.32.84.170,36225.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:39.642815,0.232882,tcp,147.32.84.164,44765.0,->,209.197.20.34,27031.0,FSA_SRA,0.0,0.0,6,380,194,186,63.333333333333336,0.5105263157894737,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:00:41.373827,0.00023,udp,147.32.85.25,52610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:45.639998,61.313293,tcp,147.32.84.165,4466.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:00:45.640012,0.0,tcp,147.32.84.165,4596.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:45.640071,0.0,tcp,147.32.84.165,4598.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:45.640075,0.0,tcp,147.32.84.165,4599.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:46.074905,0.0,tcp,147.32.84.165,4607.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:46.240879,0.0,tcp,147.32.84.165,4605.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:46.240894,0.0,tcp,147.32.84.165,4610.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:46.240949,0.0,tcp,147.32.84.165,4608.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:46.441022,0.000273,udp,147.32.85.25,57085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:47.541657,0.000336,udp,147.32.84.138,50990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:49.481505,0.000355,udp,147.32.84.170,47366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:00:51.482828,0.000239,udp,147.32.85.25,52752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:54.191953,0.000284,udp,147.32.84.242,34013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:54.504791,0.003883,tcp,147.32.84.242,41819.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:00:54.560173,0.003845,tcp,147.32.84.242,41843.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:00:54.679392,0.000223,udp,147.32.84.242,59549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:00:56.264793,0.001274,tcp,147.32.86.88,52709.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:00:57.657657,0.0,tcp,147.32.84.165,4778.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:57.657671,0.0,tcp,147.32.84.165,4776.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:57.657676,0.0,tcp,147.32.84.165,4781.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:58.258618,0.0,tcp,147.32.84.165,4785.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:58.258853,0.0,tcp,147.32.84.165,4787.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:58.258867,0.0,tcp,147.32.84.165,4788.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:00:59.484067,0.017889,tcp,147.32.84.170,59793.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:03.128873,0.000425,udp,147.32.84.170,52292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:03.941563,0.385842,tcp,67.195.111.228,41448.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,4603,820,3783,383.5833333333333,0.17814468824679558,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:04.194107,0.018392,udp,96.238.99.18,55922.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:01:04.555727,0.000981,udp,147.32.84.138,36631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:07.737394,0.001462,tcp,147.32.86.88,52719.0,->,195.113.0.43,1712.0,SRPA_SPA,0.0,0.0,7,714,387,327,102.0,0.542016806722689,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:09.674554,0.0,tcp,147.32.84.165,4927.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:09.674569,0.0,tcp,147.32.84.165,4929.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:09.674712,0.0,tcp,147.32.84.165,4931.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:10.275808,0.0,tcp,147.32.84.165,4933.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:10.275829,0.0,tcp,147.32.84.165,4935.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:19.162348,0.000251,udp,147.32.84.59,58160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:21.691734,0.0,tcp,147.32.84.165,1098.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:21.691749,0.0,tcp,147.32.84.165,1100.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:21.691848,0.0,tcp,147.32.84.165,1102.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:22.292945,0.0,tcp,147.32.84.165,1104.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:22.293029,0.0,tcp,147.32.84.165,1106.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:22.307740,0.0,tcp,147.32.84.165,1108.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:22.749568,0.000258,udp,147.32.84.138,51046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:29.482110,0.01796,tcp,147.32.84.170,60826.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:29.765281,8.902033,tcp,41.105.18.26,15965.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,312,78,234,78.0,0.25,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:32.723997,0.000203,udp,147.32.85.25,51013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:33.709547,0.0,tcp,147.32.84.165,1218.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:33.709561,0.0,tcp,147.32.84.165,1220.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:34.131443,0.216014,tcp,147.32.84.170,53198.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:34.310130,0.0,tcp,147.32.84.165,1224.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:34.310311,0.0,tcp,147.32.84.165,1226.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:34.310384,0.0,tcp,147.32.84.165,1228.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:37.064311,0.000328,udp,147.32.84.242,56223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,78,161,119.5,0.3263598326359833,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:37.137446,0.002589,tcp,147.32.84.242,47003.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:37.197478,0.001767,tcp,147.32.86.34,44206.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:37.218214,0.000264,udp,147.32.84.242,47932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:37.407921,0.001984,tcp,147.32.84.242,47242.0,->,195.113.0.43,1712.0,FSPA_FSPA,0.0,0.0,10,970,551,419,97.0,0.568041237113402,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:01:38.044777,0.000245,udp,147.32.84.242,48443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:38.098585,0.000356,udp,147.32.84.242,36621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,69,223,146.0,0.2363013698630137,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:39.481992,0.018026,tcp,147.32.84.170,59799.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:45.726571,0.0,tcp,147.32.84.165,1338.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:45.726584,0.0,tcp,147.32.84.165,1340.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:46.327831,0.0,tcp,147.32.84.165,1344.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:46.327845,0.0,tcp,147.32.84.165,1346.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:46.328060,0.0,tcp,147.32.84.165,1348.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:47.345201,0.00024,udp,147.32.84.138,33110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:47.635235,1.8e-05,udp,147.32.84.138,33266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:48.459093,0.000219,udp,147.32.85.25,59907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:48.503626,0.003273,udp,114.41.52.245,39997.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2949,60,2889,737.25,0.02034587995930824,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:01:53.553069,0.000214,udp,147.32.85.25,44419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:01:57.744247,61.313007,tcp,147.32.84.165,1365.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:01:57.744348,0.0,tcp,147.32.84.165,1459.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:57.744408,0.0,tcp,147.32.84.165,1461.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:58.344898,0.0,tcp,147.32.84.165,1465.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:58.344997,0.0,tcp,147.32.84.165,1467.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:58.345054,0.0,tcp,147.32.84.165,1469.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:01:59.480117,0.000377,udp,147.32.84.170,51998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:01:59.482247,0.017661,tcp,147.32.84.170,47682.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:02:00.704719,0.004081,tcp,147.32.84.242,47398.0,->,147.251.3.130,1712.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:02:01.081289,0.000286,udp,147.32.84.242,38978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,75,205,140.0,0.26785714285714285,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:03.744474,4.525282,tcp,90.162.12.1,46200.0,->,147.32.84.229,13363.0,FSA_FSA,0.0,0.0,10,680,338,342,68.0,0.4970588235294118,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:02:04.080086,0.000157,udp,147.32.85.25,57183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:05.128755,0.000224,udp,147.32.84.170,43020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:02:08.304706,0.819799,tcp,147.32.84.164,52570.0,->,72.165.61.190,27035.0,FSPA_FSPA,0.0,0.0,11,1089,413,676,99.0,0.379247015610652,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:02:09.761101,0.0,tcp,147.32.84.165,1578.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:09.761176,0.0,tcp,147.32.84.165,1579.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:09.761183,0.0,tcp,147.32.84.165,1580.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:09.761237,0.0,tcp,147.32.84.165,1581.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:09.967662,0.4846,tcp,147.32.3.51,3174.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:02:10.362187,0.0,tcp,147.32.84.165,1584.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:10.362203,0.0,tcp,147.32.84.165,1585.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:10.362208,0.0,tcp,147.32.84.165,1586.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:10.362212,0.0,tcp,147.32.84.165,1587.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:10.362256,0.0,tcp,147.32.84.165,1588.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:10.362407,0.0,tcp,147.32.84.165,1589.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:19.480026,0.000323,udp,147.32.84.170,52959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:02:19.480946,0.000304,udp,147.32.84.170,42698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:02:19.663603,0.000228,udp,147.32.85.25,48389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:21.778678,0.0,tcp,147.32.84.165,1699.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:21.778692,0.0,tcp,147.32.84.165,1701.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:22.379378,0.0,tcp,147.32.84.165,1705.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:22.379395,0.0,tcp,147.32.84.165,1707.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:22.379541,0.0,tcp,147.32.84.165,1709.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:26.478072,0.204834,tcp,147.32.86.20,4361.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:02:29.480278,0.000409,udp,147.32.84.170,43700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:02:30.926717,0.00037,udp,213.146.167.48,13981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:02:33.795823,0.0,tcp,147.32.84.165,1819.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:33.795890,0.0,tcp,147.32.84.165,1821.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:34.397279,0.0,tcp,147.32.84.165,1825.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:34.397345,0.0,tcp,147.32.84.165,1827.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:34.397412,0.0,tcp,147.32.84.165,1829.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:36.550130,0.000255,udp,147.32.84.138,37731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:39.312509,0.000305,udp,147.32.84.59,46457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:39.468381,5.944935,tcp,66.249.72.35,48977.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1180,733,447,118.0,0.6211864406779661,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:02:45.813448,0.0,tcp,147.32.84.165,1938.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:45.813485,0.0,tcp,147.32.84.165,1939.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:45.813515,0.0,tcp,147.32.84.165,1940.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:45.813594,0.0,tcp,147.32.84.165,1941.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.384702,0.0,icmp,147.32.85.120,3331.0,->,120.5.218.29,,URFIL,0.0,,1,70,70,0,70.0,1.0,2,,flow=Background,Background,-1 2011-08-17 02:02:46.414428,0.0,tcp,147.32.84.165,1944.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.414443,0.0,tcp,147.32.84.165,1945.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.414448,0.0,tcp,147.32.84.165,1946.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.414453,0.0,tcp,147.32.84.165,1947.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.414506,0.0,tcp,147.32.84.165,1948.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:46.414511,0.0,tcp,147.32.84.165,1949.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:51.325286,0.000142,udp,147.32.84.138,60948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:02:57.830643,0.0,tcp,147.32.84.165,2059.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:57.830718,0.0,tcp,147.32.84.165,2060.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:57.830723,0.0,tcp,147.32.84.165,2061.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:57.830778,0.0,tcp,147.32.84.165,2062.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431446,0.0,tcp,147.32.84.165,2065.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431461,0.0,tcp,147.32.84.165,2066.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431468,0.0,tcp,147.32.84.165,2067.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431605,0.0,tcp,147.32.84.165,2068.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431619,0.0,tcp,147.32.84.165,2069.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:02:58.431624,0.0,tcp,147.32.84.165,2070.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:07.129042,0.208342,tcp,147.32.84.170,34887.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:09.847807,61.306339,tcp,147.32.84.165,2087.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:03:09.848125,0.0,tcp,147.32.84.165,2180.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:09.848132,0.0,tcp,147.32.84.165,2181.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:09.848136,0.0,tcp,147.32.84.165,2182.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.282904,0.0,tcp,147.32.84.165,2187.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449073,0.0,tcp,147.32.84.165,2186.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449159,0.0,tcp,147.32.84.165,2189.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449166,0.0,tcp,147.32.84.165,2188.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449209,0.0,tcp,147.32.84.165,2191.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449278,0.0,tcp,147.32.84.165,2190.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:10.449285,0.0,tcp,147.32.84.165,2193.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:13.713609,0.280669,tcp,147.32.84.170,46479.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:19.481141,0.000238,udp,147.32.84.170,53377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:19.481983,0.000346,udp,147.32.84.170,60797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:21.867539,0.0,tcp,147.32.84.165,2300.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:21.867553,0.0,tcp,147.32.84.165,2301.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:21.867718,0.0,tcp,147.32.84.165,2302.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468200,0.0,tcp,147.32.84.165,2307.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468214,0.0,tcp,147.32.84.165,2306.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468277,0.0,tcp,147.32.84.165,2309.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468283,0.0,tcp,147.32.84.165,2308.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468427,0.0,tcp,147.32.84.165,2311.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:22.468442,0.0,tcp,147.32.84.165,2310.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:23.069558,0.0,tcp,147.32.84.165,2313.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:27.469309,0.00046,udp,58.8.120.39,4276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,74,474,274.0,0.13503649635036497,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:03:29.482088,0.000438,udp,147.32.84.170,42259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:33.885109,0.0,tcp,147.32.84.165,2420.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:33.885186,0.0,tcp,147.32.84.165,2421.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:33.885191,0.0,tcp,147.32.84.165,2422.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486157,0.0,tcp,147.32.84.165,2427.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486170,0.0,tcp,147.32.84.165,2426.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486248,0.0,tcp,147.32.84.165,2429.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486257,0.0,tcp,147.32.84.165,2428.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486261,0.0,tcp,147.32.84.165,2431.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:34.486407,0.0,tcp,147.32.84.165,2430.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:35.086485,0.0,tcp,147.32.84.165,2433.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:03:37.128843,0.000334,udp,147.32.84.170,43307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:37.129728,0.000299,udp,147.32.84.170,35963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:39.180367,0.001086,udp,147.32.87.48,4789.0,->,147.32.86.240,161.0,INT,0.0,,2,262,262,0,131.0,1.0,2,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:03:39.362911,0.000279,udp,147.32.84.138,55265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:03:55.065863,0.000402,udp,186.205.228.12,11889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,74,475,274.5,0.13479052823315119,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:03:58.531184,0.000184,udp,147.32.84.138,39096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:03:59.482227,0.000345,udp,147.32.84.170,43741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:03:59.483028,0.000369,udp,147.32.84.170,38102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:01.896534,0.941603,tcp,219.159.69.222,55746.0,->,147.32.86.92,52544.0,FSA_FSPA,0.0,0.0,8,741,272,469,92.625,0.36707152496626183,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:04:04.859011,0.000225,udp,147.32.85.34,59628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:04:08.141974,0.242586,tcp,147.32.84.170,34901.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:09.136971,1803.911987,udp,147.32.84.229,13363.0,<->,195.234.84.137,21621.0,CON,0.0,0.0,6,3096,137,2959,516.0,0.04425064599483204,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:04:10.718876,61.287746,tcp,147.32.84.165,2444.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:04:12.977434,0.000264,udp,147.32.84.138,37594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:04:14.521122,0.000307,udp,84.11.11.3,13856.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:04:17.331917,2.232514,tcp,83.39.175.99,15985.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1469,800,669,81.61111111111111,0.5445881552076243,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:04:19.482478,0.00035,udp,147.32.84.170,57161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:23.298235,0.0,icmp,147.32.85.120,3331.0,->,123.128.45.121,,URFIL,0.0,,1,70,70,0,70.0,1.0,2,,flow=Background,Background,-1 2011-08-17 02:04:25.624710,0.000305,udp,147.32.85.34,65247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,79,144,111.5,0.3542600896860987,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:04:29.482462,0.000374,udp,147.32.84.170,33951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:29.483369,0.00029,udp,147.32.84.170,56725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:35.467270,0.000238,udp,147.32.84.138,38410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:04:39.129041,0.000321,udp,147.32.84.170,53864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:39.129846,0.000341,udp,147.32.84.170,55776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:40.005874,0.000552,udp,87.239.27.44,2801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,960,75,885,480.0,0.078125,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:04:40.679024,0.001454,udp,83.196.40.54,52741.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:04:49.484668,0.017579,tcp,147.32.84.170,39919.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:50.201311,3020.401123,udp,12.54.9.67,10666.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:04:52.709001,10.008907,tcp,122.183.20.86,38430.0,->,147.32.87.186,23.0,SR_,0.0,,3,192,192,0,64.0,1.0,2,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:04:53.082536,0.000112,udp,147.32.85.25,48052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:04:59.482581,0.000638,udp,147.32.84.170,53129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:04:59.866253,2384.774902,udp,190.51.82.74,12343.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:05:05.745015,0.000534,udp,88.148.79.39,3912.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:05:10.129851,0.000277,udp,147.32.84.170,36650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:05:11.577200,61.296413,tcp,147.32.84.165,2445.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:05:12.002173,3570.581543,tcp,147.32.84.170,43527.0,->,74.125.39.125,5222.0,PA_PA,0.0,0.0,180,14178,7347,6831,78.76666666666667,0.5181972069403301,2,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:05:16.298558,0.000356,udp,147.32.86.20,56398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:05:24.186847,0.000224,udp,147.32.85.25,60356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:05:27.379875,0.000338,udp,147.32.84.138,53182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:05:27.389947,0.000263,udp,147.32.84.138,46068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:05:29.221970,6.310714,tcp,66.249.72.65,57141.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,24,12914,1136,11778,538.0833333333334,0.08796654793247638,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:05:39.493203,0.000354,udp,147.32.84.170,35747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:05:39.646794,0.3589,tcp,147.32.84.164,34796.0,->,4.28.151.210,27031.0,FSA_SRA,0.0,0.0,5,340,206,134,68.0,0.6058823529411764,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:05:48.781607,0.000445,icmp,147.32.87.249,,<-,147.32.87.48,2.0,RED,,0.0,2,148,0,148,74.0,0.0,2,1,flow=Background,Background,-1 2011-08-17 02:05:49.483404,0.000303,udp,147.32.84.170,40734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:05:50.204832,0.000241,udp,71.114.82.135,50273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:05:56.110853,0.309392,tcp,147.32.86.20,4547.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:06:04.758172,0.000261,udp,147.32.85.34,52829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:09.738009,0.000266,udp,147.32.85.25,56516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:11.216896,0.000252,udp,61.125.115.182,56629.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:06:12.444454,61.301804,tcp,147.32.84.165,2461.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:06:13.359510,0.000356,udp,147.32.84.138,53301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:15.294571,0.000255,udp,147.32.85.25,48648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:20.370712,0.000219,udp,147.32.85.25,52944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:23.577876,0.000658,icmp,147.32.87.249,,<-,147.32.87.5,2.0,RED,,0.0,2,148,0,148,74.0,0.0,2,1,flow=Background,Background,-1 2011-08-17 02:06:29.483813,0.000275,udp,147.32.84.170,44690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:06:31.407168,0.000292,udp,112.140.9.92,30097.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:06:35.982792,0.000272,udp,147.32.85.25,48122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:36.500288,0.000267,udp,147.32.84.138,50310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:37.352119,1192.443115,tcp,84.27.13.177,52162.0,,147.32.84.229,13363.0,RPA_PA,0.0,0.0,156,15614,7756,7858,100.08974358974359,0.49673370052516974,2,0,flow=Background,Background,-1 2011-08-17 02:06:39.484627,0.017976,tcp,147.32.84.170,36048.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:06:43.130084,0.000237,udp,147.32.84.170,43092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:06:43.131298,0.210697,tcp,147.32.84.170,34922.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:06:44.924778,0.000213,udp,147.32.84.59,57323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:49.484687,0.018391,tcp,147.32.84.170,39935.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:06:49.972285,0.000226,udp,147.32.84.59,33266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:50.144629,1221.282593,udp,62.218.25.100,51534.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,714,528,186,119.0,0.7394957983193278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:06:55.002378,0.000234,udp,147.32.84.59,39202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:06:59.482756,0.000403,udp,147.32.84.170,57188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:00.019255,0.000244,udp,147.32.84.59,42171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:07:13.157708,0.000328,udp,147.32.84.170,56642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:13.312204,61.287861,tcp,147.32.84.165,2462.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:07:13.812833,0.000189,udp,222.50.36.106,49613.0,->,147.32.85.120,30247.0,INT,0.0,,1,72,72,0,72.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:07:18.981765,0.000156,udp,147.32.84.138,41614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:07:19.482683,0.000332,udp,147.32.84.170,47361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:19.483572,0.000408,udp,147.32.84.170,42411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:25.436108,0.000422,udp,174.26.110.58,51190.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:07:42.238645,5.739555,udp,174.141.213.9,41359.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,2913,2485,428,208.07142857142858,0.8530724339169241,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:07:49.483800,0.000238,udp,147.32.84.170,57832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:49.484714,0.017642,tcp,147.32.84.170,34595.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:49.508870,0.000621,tcp,147.32.3.51,3196.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:07:57.185949,0.064679,udp,147.32.84.229,13363.0,<->,93.155.220.28,27241.0,CON,0.0,0.0,4,2915,60,2855,728.75,0.02058319039451115,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:07:59.482783,0.000336,udp,147.32.84.170,49750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:07:59.483632,0.000358,udp,147.32.84.170,45918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:00.427968,0.206112,tcp,147.32.86.20,4656.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:08:00.989964,0.000274,udp,96.243.210.8,51822.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:04.571851,0.000309,udp,147.32.85.34,61090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:08:04.575496,0.000292,udp,147.32.85.34,50458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:08:13.438742,0.262331,tcp,147.32.84.170,39376.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:13.824475,0.274868,tcp,147.32.84.170,55173.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:14.131541,0.000329,udp,147.32.84.170,56654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:14.170742,61.298279,tcp,147.32.84.165,2463.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:08:14.221325,250.03923,tcp,147.32.84.170,60466.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:14.221344,250.039963,tcp,147.32.84.170,60468.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:19.337358,0.000103,udp,78.101.208.1,50454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,76,479,277.5,0.13693693693693693,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:19.483594,0.000258,udp,147.32.84.170,52170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:19.484604,0.018164,tcp,147.32.84.170,46384.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:30.477729,0.000307,udp,213.174.254.8,42127.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:34.957652,145.279144,udp,94.98.159.246,11618.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:45.255009,0.220053,tcp,147.32.84.170,36485.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:08:49.143799,0.000455,udp,114.26.68.73,19065.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,581,74,507,290.5,0.12736660929432014,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:50.339842,0.000345,udp,147.32.84.59,48083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:08:52.024932,0.000256,udp,147.32.85.89,43985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:08:53.843764,0.248145,udp,93.136.102.61,52944.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,263,155,108,131.5,0.5893536121673004,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:08:55.594907,0.000197,udp,147.32.84.59,35862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:09:00.559116,0.169768,tcp,147.32.86.20,4709.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:09:05.362680,0.000229,udp,147.32.84.138,37774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:09:14.452721,696.992981,udp,189.83.44.200,12308.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,862,141,721,215.5,0.16357308584686775,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:15.039788,64.4645,tcp,147.32.84.165,2464.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:09:19.240103,0.000172,udp,147.32.85.25,45043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:09:19.483966,0.000399,udp,147.32.84.170,41096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:19.485809,0.01768,tcp,147.32.84.170,52008.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:23.157098,0.133974,udp,147.32.84.229,13363.0,<->,24.46.250.9,23627.0,CON,0.0,0.0,4,2948,60,2888,737.0,0.0203527815468114,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:26.870156,0.0003,udp,186.57.151.67,12944.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:27.114576,0.003002,udp,189.110.11.53,9730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2946,60,2886,736.5,0.020366598778004074,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:29.483952,0.000436,udp,147.32.84.170,38725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:29.484969,0.000476,udp,147.32.84.170,33415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:29.486226,0.018159,tcp,147.32.84.170,55723.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:29.660535,0.000104,arp,147.32.87.1,,who,147.32.87.250,,CON,,,2,120,60,60,60.0,0.5,2,,flow=Background,Background,-1 2011-08-17 02:09:33.995921,802.321472,udp,87.154.85.163,1136.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,475,351,124,118.75,0.7389473684210527,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:39.483979,0.00032,udp,147.32.84.170,39191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:39.484730,0.000377,udp,147.32.84.170,60136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:39.485857,0.017954,tcp,147.32.84.170,46394.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:44.098367,0.000531,udp,99.31.179.230,61510.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:47.132430,0.000288,udp,147.32.84.170,56100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:49.484795,0.000292,udp,147.32.84.170,60057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:09:51.916020,0.000308,udp,186.18.170.98,46436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:52.700335,3043.875732,udp,88.156.89.49,1500.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:54.029241,0.000299,udp,76.71.88.136,41432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:09:55.393204,0.00021,udp,147.32.85.25,37466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:09:59.799691,0.000295,udp,114.32.48.117,38859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:10:09.267258,0.0,icmp,147.32.86.19,771.0,->,200.149.119.136,39810.0,URP,0.0,,1,86,86,0,86.0,1.0,2,0,flow=Background,Background,-1 2011-08-17 02:10:09.484929,0.000433,udp,147.32.84.170,50730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:15.906406,61.287769,tcp,147.32.84.165,2465.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:10:16.779561,0.000296,udp,190.195.42.198,47235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:10:19.483999,0.000513,udp,147.32.84.170,44368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:19.485069,0.000441,udp,147.32.84.170,33834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:20.765641,2.4e-05,icmp,147.32.86.96,,<-,147.32.87.54,33648.0,ECR,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:10:23.744534,0.00036,icmp,147.32.86.96,,<-,147.32.87.52,32880.0,RED,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:10:29.484059,0.000459,udp,147.32.84.170,46411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:29.485059,0.00032,udp,147.32.84.170,42190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:36.166414,0.363437,tcp,131.107.65.247,5515.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1102,558,544,110.2,0.5063520871143375,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:10:39.591998,0.00049,udp,147.32.84.170,41281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:10:39.649812,0.189827,tcp,147.32.84.164,36445.0,->,213.8.254.150,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:10:41.210299,0.352667,tcp,131.107.65.247,12191.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1112,569,543,111.2,0.5116906474820144,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:10:42.197080,9.000682,tcp,147.32.84.179,52809.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,2,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:10:47.266673,3.004804,tcp,147.32.84.21,50049.0,->,74.125.39.109,,S_,0.0,,2,148,148,0,74.0,1.0,2,,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:10:48.848469,0.000328,udp,147.32.84.138,48650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:10:56.881470,0.000267,udp,147.32.84.138,51055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:10:59.484119,0.000416,udp,147.32.84.170,33574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:04.266072,0.000352,udp,147.32.84.171,33188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:09.978251,0.035339,udp,147.32.85.75,35365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,73,153,113.0,0.3230088495575221,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:16.764345,64.202003,tcp,147.32.84.165,2466.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:11:17.304401,0.000185,udp,147.32.85.25,55694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:17.875198,0.000523,udp,147.32.86.20,60126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:20.130768,0.000412,udp,147.32.84.170,36676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:20.132896,0.214528,tcp,147.32.84.170,36506.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:27.786480,104.930832,udp,207.244.182.151,47961.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1090,953,137,272.5,0.8743119266055046,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:11:29.485179,0.00034,udp,147.32.84.170,36339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:30.824920,9e-06,icmp,147.32.87.249,,<-,147.32.87.2,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,2,1,flow=Background,Background,-1 2011-08-17 02:11:32.854654,0.000344,udp,147.32.85.25,33180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:32.859398,0.000262,udp,147.32.85.25,32850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:39.485986,0.018369,tcp,147.32.84.170,55740.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:40.951408,0.000388,udp,114.38.19.68,16571.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,88,60,74.0,0.5945945945945946,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:11:41.709976,0.000486,udp,147.32.84.138,41031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:11:49.486061,0.017807,tcp,147.32.84.170,52626.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:11:58.416085,0.016713,tcp,147.32.84.59,47166.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 02:11:59.486127,0.018159,tcp,147.32.84.170,55161.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:04.123062,0.000205,udp,147.32.85.25,43666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:12:04.306437,0.000239,udp,147.32.85.34,59490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:12:09.875489,0.000473,udp,147.32.86.20,59837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:12:14.806461,3.007138,tcp,147.32.84.21,50920.0,->,77.75.72.46,,S_,0.0,,2,148,148,0,74.0,1.0,2,,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:12:20.536622,61.318836,tcp,147.32.84.165,2467.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:12:21.121795,0.000242,udp,147.32.84.170,52195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:21.122455,0.00044,udp,147.32.84.170,40054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:36.333001,52.446243,udp,212.186.96.241,4092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,690,390,300,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:12:39.484319,0.000393,udp,147.32.84.170,60462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:41.852977,0.000471,udp,65.182.21.16,62318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:12:46.986351,2.159968,udp,186.215.99.214,2280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:12:49.484115,0.000531,udp,147.32.84.170,57646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:49.486292,0.017702,tcp,147.32.84.170,58203.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:50.824921,2466.264893,udp,72.225.50.165,60604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:12:51.132751,0.00026,udp,147.32.84.170,38633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:12:51.138502,0.00023,udp,147.32.84.59,49431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:12:51.489497,0.00029,udp,147.32.84.138,44751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:12:58.029584,0.001401,udp,72.220.60.241,15315.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:12:59.483965,0.000644,udp,147.32.84.170,43396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:00.424191,1127.51355,udp,147.32.84.229,13363.0,<->,77.124.190.46,11036.0,CON,0.0,0.0,10,1403,1091,312,140.3,0.7776193870277975,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:13:09.484220,0.000484,udp,147.32.84.170,39387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:09.486306,0.018536,tcp,147.32.84.170,53136.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:09.783603,0.000243,udp,147.32.84.138,50002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:13:10.258497,7.99535,udp,147.32.87.48,4882.0,->,147.32.86.231,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,2,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:13:13.172041,0.306816,tcp,147.32.84.170,44506.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:13.471071,0.284827,tcp,147.32.84.170,44507.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:13.748314,0.244725,tcp,147.32.84.170,44509.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:19.296668,0.105362,tcp,147.32.84.164,36341.0,->,68.142.91.34,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:13:19.484982,0.000641,udp,147.32.84.170,45338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:19.486435,0.017993,tcp,147.32.84.170,55177.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:21.414874,61.311321,tcp,147.32.84.165,2468.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:13:21.599672,0.048571,udp,147.32.84.229,13363.0,<->,95.175.158.139,46745.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:13:22.133988,0.208421,tcp,147.32.84.170,37778.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:24.963618,10.009595,tcp,122.183.20.86,41807.0,->,147.32.87.244,23.0,SR_,0.0,,3,192,192,0,64.0,1.0,2,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:13:27.878425,0.000376,udp,147.32.86.20,63626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:13:29.485072,0.000287,udp,147.32.84.170,56294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:41.674085,0.179355,tcp,147.32.84.164,57887.0,->,69.28.145.171,27017.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:13:49.298424,110.022064,tcp,198.228.199.231,34461.0,->,147.32.84.229,80.0,FSA_FSA,0.0,0.0,10,684,210,474,68.4,0.30701754385964913,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:13:49.375818,0.000215,udp,147.32.84.138,35872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:13:49.484274,0.00068,udp,147.32.84.170,48746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:49.485523,0.0003,udp,147.32.84.170,52934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:13:52.131560,0.00085,udp,147.32.84.170,34136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:00.579640,0.000327,udp,147.32.84.138,52096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:01.248245,0.000373,udp,147.32.84.59,37651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:02.317699,0.000288,udp,147.32.85.25,42444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:02.393571,0.000225,udp,147.32.85.25,38781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:05.115158,0.000274,udp,147.32.85.34,56625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:05.161423,0.000213,udp,147.32.85.34,59298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:05.168631,0.000286,udp,147.32.85.34,58525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:05.169360,0.000288,udp,147.32.85.34,53583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:07.973290,0.363658,tcp,147.32.84.164,50843.0,->,68.142.64.165,27017.0,SA_SRA,0.0,0.0,4,278,140,138,69.5,0.5035971223021583,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:14:09.484394,0.000602,udp,147.32.84.170,59371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:09.485436,0.00034,udp,147.32.84.170,57915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:19.486860,0.000455,udp,147.32.84.170,52745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:22.292212,61.303864,tcp,147.32.84.165,2469.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:14:29.484685,0.000582,udp,147.32.84.170,54237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:31.825942,0.000327,icmp,147.32.86.96,,<-,147.32.87.49,46963.0,RED,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:14:34.142848,2425.741211,udp,190.245.42.243,63926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:14:37.107709,0.00033,udp,147.32.84.138,37103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:49.394743,0.000488,udp,147.32.84.138,46717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:49.486663,0.000375,udp,147.32.84.170,45537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:49.487774,0.017994,tcp,147.32.84.170,55189.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:52.132987,0.000322,udp,147.32.84.170,40292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:14:58.034229,0.000358,udp,147.32.84.138,44854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:14:58.052981,0.000381,udp,147.32.84.138,46488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:15:09.485459,0.000524,udp,147.32.84.170,40545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:15:19.488694,0.018059,tcp,147.32.84.170,50800.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:15:23.160865,61.287205,tcp,147.32.84.165,2470.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:15:29.487344,0.01806,tcp,147.32.84.170,56360.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:15:29.873345,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.54,4468.0,ECR,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:15:39.507273,0.017837,tcp,147.32.84.170,53162.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:15:40.069709,1.767844,tcp,147.32.84.164,46441.0,->,68.142.83.180,27017.0,FSPA_FSPA,0.0,0.0,18,2000,1270,730,111.11111111111111,0.635,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:15:41.155709,0.15466,udp,147.32.84.229,13363.0,<->,173.2.115.167,65355.0,CON,0.0,0.0,4,2945,60,2885,736.25,0.02037351443123939,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:15:44.259035,0.000514,udp,147.32.84.166,48527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:15:44.385912,0.13516,tcp,147.32.86.20,1087.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:15:46.308406,61.213547,udp,121.6.148.207,27409.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:15:47.637432,0.000476,udp,147.32.86.20,63013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:15:50.073471,0.000385,udp,147.32.86.20,50491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:15:53.750072,0.000455,udp,69.171.160.114,42273.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,74,479,276.5,0.13381555153707053,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:15:54.134886,0.205405,tcp,147.32.84.170,37798.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:15:58.303213,0.000345,udp,147.32.84.138,38365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:16:01.650422,38.437374,tcp,147.32.86.89,3224.0,->,77.75.76.3,80.0,FSPA_FSPA,0.0,0.0,46,28523,7581,20942,620.0652173913044,0.2657855064334046,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:16:02.095533,0.000409,udp,147.32.85.89,34316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:16:05.058838,0.000218,udp,147.32.85.34,63194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:16:19.486428,0.000435,udp,147.32.84.170,60784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:16:23.025695,0.000445,udp,147.32.84.59,36928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:16:24.019143,61.288013,tcp,147.32.84.165,2471.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:16:29.488066,0.01797,tcp,147.32.84.170,55203.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:16:30.904743,0.00019,udp,147.32.84.138,41787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:16:32.713548,2018.953613,udp,213.46.138.34,50840.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3093,144,2949,515.5,0.04655674102812803,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:16:36.413720,0.000436,udp,41.233.190.56,19490.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:16:39.057958,0.589664,tcp,147.32.86.28,2334.0,->,147.32.87.54,2222.0,_FSPA,,0.0,126,8686,0,8686,68.93650793650794,0.0,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:16:49.487749,0.018214,tcp,147.32.84.170,39894.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:16:59.488307,0.01826,tcp,147.32.84.170,42344.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:04.911460,6.024489,udp,147.32.84.229,13363.0,->,188.231.221.21,11564.0,INT,0.0,,3,1410,1410,0,470.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:17:06.425223,0.000281,udp,188.51.75.169,60806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:17:14.515034,0.210363,udp,147.32.84.59,45081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:17.167191,3106.307373,udp,188.25.31.168,37743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1422,1050,372,118.5,0.7383966244725738,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:17:19.486233,0.000509,udp,147.32.84.170,43829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:24.526789,0.000468,udp,147.32.84.138,41488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:24.877837,61.297642,tcp,147.32.84.165,2472.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:17:25.193944,2033.596558,udp,91.177.124.51,34821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,4228,154,4074,704.6666666666666,0.03642384105960265,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:17:26.136705,0.203014,tcp,147.32.84.170,45653.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:26.935598,0.000312,udp,147.32.85.25,48562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:27.550880,0.000368,udp,147.32.84.138,44697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:29.487210,0.000633,udp,147.32.84.170,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:38.142715,0.000511,udp,147.32.86.20,59162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:41.514399,0.030503,udp,147.32.84.171,58436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,70,226,148.0,0.23648648648648649,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:48.702260,0.000497,udp,147.32.86.20,60678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:49.488808,0.000353,udp,147.32.84.170,36380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:49.489897,0.018139,tcp,147.32.84.170,50422.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:17:49.654203,0.000403,udp,147.32.84.59,45759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:17:56.047185,0.000391,udp,81.228.197.53,41128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:17:59.486738,0.000335,udp,147.32.84.170,35148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:00.859012,3459.109131,udp,94.189.132.44,49722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,952,704,248,119.0,0.7394957983193278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:18:07.296950,0.000359,udp,147.32.87.36,60199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,2,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:18:07.399008,32.083809,udp,98.230.72.95,39441.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1186,1005,181,197.66666666666666,0.8473861720067454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:18:09.486794,0.000334,udp,147.32.84.170,57949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:10.476489,1892.268677,udp,147.32.84.229,13363.0,->,217.174.48.183,36536.0,INT,0.0,,6,450,450,0,75.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:18:13.080264,0.000406,udp,147.32.86.20,56312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:18:13.080945,0.206428,tcp,147.32.86.20,1224.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:18:14.220885,0.336493,tcp,147.32.84.170,48095.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:14.222776,0.000431,udp,147.32.84.170,34737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:19.488014,0.017615,tcp,147.32.84.170,42366.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:25.744797,70.209816,tcp,147.32.84.165,2473.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:18:27.133122,0.000273,udp,147.32.84.170,50150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:27.134350,0.319835,tcp,147.32.84.170,45673.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:29.312781,0.00046,udp,195.204.137.218,21017.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:18:35.071118,0.019284,tcp,147.32.86.89,3412.0,->,88.86.103.77,80.0,FSPA_FSPA,0.0,0.0,18,10726,848,9878,595.8888888888889,0.07906022748461682,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:18:39.485723,0.000581,udp,147.32.84.170,59385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:49.486788,0.00041,udp,147.32.84.170,39722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:18:49.487971,0.017776,tcp,147.32.84.170,50442.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:09.453310,0.000543,udp,74.15.182.18,42195.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:10.131683,0.000124,udp,147.32.84.138,55926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:16.459281,0.000447,udp,147.32.86.20,54107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:16.764181,3.261116,tcp,196.2.104.20,3609.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1575,889,686,78.75,0.5644444444444444,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:19:17.130741,0.00042,udp,147.32.85.89,46213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:17.443731,0.000494,udp,147.32.84.138,33431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:19.488315,0.000337,udp,147.32.84.170,49892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:19.489335,0.018152,tcp,147.32.84.170,35528.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:23.033518,0.13629,udp,147.32.84.229,13363.0,<->,99.248.174.70,56160.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:24.776552,8.996829,tcp,147.32.84.171,52021.0,->,81.214.189.108,28999.0,S_,0.0,,3,222,222,0,74.0,1.0,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:19:29.742584,0.000278,udp,147.32.85.25,48494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:34.871070,0.000406,udp,147.32.85.25,48318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:19:35.525237,64.141464,tcp,147.32.84.165,2474.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:19:36.781339,0.000369,udp,86.22.173.29,21021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,78,478,278.0,0.14028776978417265,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:38.350925,0.000712,udp,77.0.20.145,33267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:39.487737,0.01798,tcp,147.32.84.170,35531.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:47.619535,0.000488,udp,87.126.53.47,27843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,658,80,578,329.0,0.12158054711246201,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:48.085831,0.000362,udp,41.206.159.132,54772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:49.489782,0.000339,udp,147.32.84.170,37432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:49.604391,1563.123291,udp,147.32.84.229,13363.0,->,118.171.253.57,2162.0,INT,0.0,,6,468,468,0,78.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:19:50.585060,2.615375,tcp,147.32.86.20,1313.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29203,1133,28070,768.5,0.038797383830428384,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:19:52.759956,0.00152,udp,189.46.252.194,1670.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:19:59.488474,0.0005,udp,147.32.84.170,34703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:59.489576,0.00036,udp,147.32.84.170,44211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:19:59.490661,0.017945,tcp,147.32.84.170,38265.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:04.503436,0.000311,udp,147.32.85.34,56515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:06.835071,0.000307,udp,147.32.86.20,52592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:10.166617,0.000329,udp,147.32.84.138,34857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:12.787714,0.000522,udp,187.133.14.95,20121.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,79,488,283.5,0.13932980599647266,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:20:14.512781,0.000363,udp,147.32.84.138,57901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:19.489242,0.017684,tcp,147.32.84.170,50454.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:21.186888,0.000211,udp,147.32.85.25,50135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:28.279898,0.024767,udp,147.32.84.184,48125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,75,147,111.0,0.33783783783783783,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:29.486843,0.000505,udp,147.32.84.170,56742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:29.489146,0.01783,tcp,147.32.84.170,42384.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:36.384154,64.313843,tcp,147.32.84.165,2475.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:20:39.507517,0.000371,udp,147.32.84.170,60365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:47.090766,8.29781,tcp,66.249.71.21,61609.0,->,147.32.87.33,443.0,FSRPA_FSPA,0.0,0.0,51,28570,2773,25797,560.1960784313726,0.09705985299264963,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:20:49.486843,0.000496,udp,147.32.84.170,38936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:49.487792,0.000429,udp,147.32.84.170,57705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:49.488955,0.018421,tcp,147.32.84.170,38271.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:52.598958,0.000307,udp,147.32.84.19,46515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:20:53.697611,0.247868,udp,147.32.84.170,49072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:54.194299,0.247742,udp,147.32.84.170,40134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:54.443657,369.972168,tcp,147.32.84.170,41382.0,->,74.125.232.201,443.0,FSPA_FSPA,0.0,0.0,69,17715,10965,6750,256.7391304347826,0.6189669771380186,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:20:59.489466,0.018211,tcp,147.32.84.170,56089.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:04.637129,3308.526855,udp,178.208.195.175,26411.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,48,5736,4248,1488,119.5,0.7405857740585774,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:21:06.257709,0.000203,udp,147.32.84.186,44414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:21:29.489225,0.018219,tcp,147.32.84.170,50464.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:30.133596,0.000227,udp,147.32.84.170,60874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:31.341148,0.207021,tcp,147.32.86.20,1400.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:21:37.252502,61.28672,tcp,147.32.84.165,2476.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:21:39.489239,0.017896,tcp,147.32.84.170,50466.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:40.656343,0.000347,udp,67.172.19.50,53406.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:21:49.486953,0.000429,udp,147.32.84.170,60632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:57.740265,0.000427,udp,216.121.223.211,49111.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,74,484,279.0,0.13261648745519714,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:21:59.488010,0.000418,udp,147.32.84.170,37102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:21:59.489197,0.017734,tcp,147.32.84.170,50468.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:22:03.722503,1351.591309,udp,69.14.200.8,50413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,686,361,325,68.6,0.5262390670553936,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:22:05.331143,0.000667,udp,147.32.85.34,60461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:22:05.355902,0.000306,udp,147.32.85.34,62327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,86,242,164.0,0.2621951219512195,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:22:14.403644,0.205747,tcp,147.32.86.20,1440.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:22:19.487661,0.000551,udp,147.32.84.170,54199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:22:24.516468,0.000341,udp,147.32.84.138,39125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:22:35.166906,0.147993,udp,147.32.84.229,13363.0,<->,68.197.175.130,48164.0,CON,0.0,0.0,4,2932,60,2872,733.0,0.020463847203274217,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:22:36.153455,0.000307,udp,94.167.13.185,19007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:22:38.110259,61.302387,tcp,147.32.84.165,2477.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:22:38.453181,0.000455,udp,147.32.84.138,35706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:22:41.353428,0.000349,udp,147.32.85.34,49447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:22:49.489150,0.018684,tcp,147.32.84.170,60662.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:22:56.284308,16.734133,tcp,82.131.2.82,58027.0,->,147.32.84.229,443.0,FSPA_FSA,0.0,0.0,13,899,529,370,69.15384615384616,0.5884315906562848,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:22:59.488204,0.000212,udp,147.32.84.170,46691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:01.709435,0.0013,udp,61.99.111.21,1378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:23:02.138215,0.216365,tcp,147.32.84.170,37034.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:13.862309,0.222856,tcp,147.32.84.170,39317.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:14.077437,1.584189,tcp,147.32.84.170,39318.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:19.398025,250.022827,tcp,147.32.84.170,46305.0,->,209.85.148.102,80.0,FSPA_FSPA,0.0,0.0,37,13480,8642,4838,364.3243243243243,0.6410979228486647,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:19.489265,0.018373,tcp,147.32.84.170,33168.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:23.653497,0.000384,udp,70.179.90.47,19322.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:23:29.488050,0.000304,udp,147.32.84.170,40999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:33.134873,0.000374,udp,147.32.84.170,40445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:33.136256,0.221891,tcp,147.32.84.170,37046.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:38.978083,64.321609,tcp,147.32.84.165,2478.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:23:39.488208,0.000285,udp,147.32.84.170,39367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:42.803513,0.000397,udp,74.198.150.228,44870.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,153,86,67,76.5,0.5620915032679739,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:23:49.487387,0.000508,udp,147.32.84.170,56501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:49.488531,0.000586,udp,147.32.84.170,36174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:49.489806,0.017812,tcp,147.32.84.170,58864.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:23:59.678047,0.000463,udp,78.141.181.222,34022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,85,60,72.5,0.5862068965517241,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:24:01.592563,0.001742,udp,147.32.85.25,41604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:04.131774,0.000427,udp,147.32.84.170,55376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:04.132790,0.000309,udp,147.32.84.170,43563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:05.209149,0.000258,udp,147.32.85.34,59445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:05.235224,0.00042,udp,147.32.85.34,53372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:09.488024,0.000468,udp,147.32.84.170,59401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:14.142642,0.000374,udp,147.32.84.138,36385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:27.266231,0.20907,tcp,86.180.216.74,55488.0,->,147.32.85.84,13716.0,SRA_SA,0.0,0.0,4,244,182,62,61.0,0.7459016393442623,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:24:29.488616,0.000395,udp,147.32.84.170,49748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:29.489748,0.01844,tcp,147.32.84.170,58869.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:35.134575,0.000238,udp,147.32.84.170,56428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:35.135697,0.221688,tcp,147.32.84.170,37054.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:35.296925,0.000414,udp,147.32.84.138,38494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:35.301310,0.000335,udp,147.32.84.138,40594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:40.627808,0.000358,udp,147.32.84.138,40902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:42.870097,64.202065,tcp,147.32.84.165,2479.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:24:49.492199,0.000396,udp,147.32.84.170,60685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:24:49.970126,0.000411,udp,147.32.84.21,38733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:24:59.489409,0.017831,tcp,147.32.84.170,60687.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:06.136865,0.233774,tcp,147.32.84.170,37058.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:09.488420,0.000286,udp,147.32.84.170,52197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:19.488375,0.0003,udp,147.32.84.170,43157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:37.138098,0.000323,udp,147.32.84.170,48631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:37.139394,0.228354,tcp,147.32.84.170,37062.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:39.487308,0.010608,udp,147.32.84.170,57216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:39.499678,0.017786,tcp,147.32.84.170,58847.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:39.659213,0.675138,tcp,147.32.84.164,44432.0,->,202.80.110.129,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:25:44.198890,0.000372,udp,147.32.85.25,44006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:25:46.642770,64.200745,tcp,147.32.84.165,2480.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:25:59.487460,0.000629,udp,147.32.84.170,40603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:59.489724,0.018177,tcp,147.32.84.170,58881.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:25:59.995593,1563.83252,udp,2.10.226.111,17416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1241,215,1026,206.83333333333334,0.17324738114423852,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:26:08.136861,0.000373,udp,147.32.84.170,45327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:09.489607,0.018323,tcp,147.32.84.170,60697.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:19.490998,0.000494,udp,147.32.84.170,47874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:29.489749,0.000362,udp,147.32.84.170,48318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:29.491710,0.018278,tcp,147.32.84.170,58853.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:35.503326,0.196118,udp,147.32.84.229,13363.0,<->,24.205.4.152,42327.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:26:37.757938,0.000305,udp,147.32.84.171,57226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,86,182,134.0,0.3208955223880597,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:26:38.135337,0.000331,udp,147.32.84.170,50002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:38.136639,0.227691,tcp,147.32.84.170,37070.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:38.391224,0.302164,udp,147.32.84.229,13363.0,<->,110.0.135.100,35693.0,CON,0.0,0.0,2,146,79,67,73.0,0.541095890410959,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:26:39.488352,0.000455,udp,147.32.84.170,43074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:41.462955,3004.227539,udp,72.200.152.14,61973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:26:45.521674,0.00043,udp,147.32.84.138,37005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:26:48.143961,0.000292,udp,147.32.84.138,48549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:26:49.489840,0.018209,tcp,147.32.84.170,38644.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:26:50.409527,61.291801,tcp,147.32.84.165,2481.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:26:58.516019,0.000393,udp,173.58.230.144,2282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:05.715906,0.000312,udp,147.32.84.59,44360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:06.462635,0.000377,udp,186.136.163.187,27714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:18.180268,9.010165,tcp,96.225.183.149,52424.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:27:18.271553,0.000368,udp,118.22.225.221,63881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:20.670907,0.000364,udp,147.32.84.138,57848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:20.692082,0.000319,udp,147.32.84.138,60401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:26.242186,0.000335,udp,147.32.84.59,43805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:29.238003,0.000175,udp,147.32.84.59,40966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:31.657089,0.000407,udp,147.32.84.59,57114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:34.666162,601.408081,udp,95.221.195.138,43505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:36.366844,0.000412,udp,147.32.84.186,60839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:38.720165,0.000501,udp,207.237.84.142,31161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,73,472,272.5,0.13394495412844037,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:39.487571,0.000404,udp,147.32.84.170,39150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:27:40.134967,0.000443,udp,147.32.84.170,35189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:27:41.780982,0.000201,udp,147.32.84.59,56592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:44.975395,3036.07251,udp,71.208.105.238,37765.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,298,164,134,74.5,0.5503355704697986,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:49.487699,0.000379,udp,147.32.84.170,47653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:27:49.489764,0.01828,tcp,147.32.84.170,43117.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:27:51.272199,61.308998,tcp,147.32.84.165,2482.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:27:52.221278,0.000403,udp,147.32.85.89,55911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:54.251592,1259.956177,udp,78.130.188.3,7664.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,494,370,124,123.5,0.7489878542510121,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:55.674887,0.000542,udp,147.32.84.138,42506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:55.682108,0.000352,udp,147.32.84.138,39958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:27:56.564243,3110.791504,udp,189.167.146.246,64971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:27:59.487640,0.000537,udp,147.32.84.170,35782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:03.063431,2421.652344,udp,187.126.240.180,52023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:28:09.487596,0.000503,udp,147.32.84.170,33931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:09.488633,0.000361,udp,147.32.84.170,40904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:11.131241,0.000321,udp,147.32.84.170,52302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:13.415779,0.294184,tcp,147.32.84.170,60612.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:13.724337,0.364575,tcp,147.32.84.170,49259.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:14.081085,0.286625,tcp,147.32.84.170,49260.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:14.227935,240.047974,tcp,147.32.84.170,37638.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:14.228058,240.047562,tcp,147.32.84.170,37639.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:19.487654,0.000535,udp,147.32.84.170,52488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:22.353449,0.000244,udp,147.32.85.25,56210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:28:28.930954,1260.304688,udp,77.78.52.10,21237.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1726,298,1428,215.75,0.17265353418308227,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:28:39.062259,0.000277,tcp,76.164.193.170,80.0,->,147.32.84.118,15986.0,SA_R,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:28:42.134363,0.000298,udp,147.32.84.170,60251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:42.624986,0.000387,udp,147.32.85.25,58191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:28:49.489905,0.01905,tcp,147.32.84.170,35744.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:28:49.506151,0.000315,udp,147.32.84.138,36535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:28:52.151855,61.324715,tcp,147.32.84.165,2483.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:29:00.751895,2801.197021,udp,71.85.12.224,64638.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:29:09.487507,0.000513,udp,147.32.84.170,59695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:09.488527,0.00033,udp,147.32.84.170,59218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:11.102110,0.000319,udp,147.32.84.138,42757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:29:12.381396,0.000322,udp,147.32.84.59,34154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:29:17.541463,0.295967,udp,97.96.37.46,53612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,78,483,280.5,0.13903743315508021,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:29:19.172336,0.000409,udp,72.2.8.57,10509.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,77,487,282.0,0.13652482269503546,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:29:20.110487,8.822689,tcp,90.177.113.3,1233.0,->,147.32.84.168,3389.0,SRPA_SPA,0.0,0.0,201,153809,6621,147188,765.2189054726368,0.04304689582534182,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:29:24.182285,0.001564,udp,24.242.203.206,35015.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:29:39.488880,0.000316,udp,147.32.84.170,48987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:41.305614,6.683826,tcp,90.177.113.3,2198.0,->,147.32.84.162,3389.0,SRPA_SPA,0.0,0.0,189,145853,6285,139568,771.7089947089947,0.04309133168327014,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:29:43.135139,0.00035,udp,147.32.84.170,55575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:43.733406,0.170349,tcp,147.32.86.20,1835.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,78,71270,1751,69519,913.7179487179487,0.0245685421636032,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:29:49.487864,0.000504,udp,147.32.84.170,57197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:49.488923,0.000314,udp,147.32.84.170,33670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:49.489969,0.01775,tcp,147.32.84.170,35752.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:29:53.028497,64.236198,tcp,147.32.84.165,2484.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:29:56.196785,0.000263,udp,147.32.84.138,35734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:29:59.492560,0.01789,tcp,147.32.84.170,41554.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:01.491025,0.000437,udp,147.32.87.36,51364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,86,176,131.0,0.3282442748091603,2,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 02:30:01.505716,0.000521,udp,147.32.86.92,52615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:30:01.874281,357.993958,udp,98.216.207.24,14721.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2871,346,2525,287.1,0.12051549982584465,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:02.040521,0.003383,udp,197.128.51.62,49613.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:02.314422,1359.634155,udp,99.26.145.198,31621.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:08.094781,0.288466,udp,206.210.113.168,61720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,76,464,270.0,0.14074074074074075,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:09.487847,0.000496,udp,147.32.84.170,39679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:12.576977,103.3685,udp,187.39.230.18,50302.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,3174,2814,360,264.5,0.8865784499054821,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:13.135982,0.000249,udp,147.32.84.170,50784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:17.446133,0.011135,tcp,90.183.39.17,39982.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1386,914,472,138.6,0.6594516594516594,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:30:19.488635,0.000311,udp,147.32.84.170,47643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:25.735726,3035.530518,udp,76.176.118.67,40385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:26.448050,2040.087402,udp,84.111.222.20,18887.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5892,120,5772,736.5,0.020366598778004074,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:27.526023,3059.147949,udp,75.191.253.92,18321.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:32.215726,0.00027,udp,147.32.84.138,54324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:30:34.363836,3029.526611,udp,187.105.70.66,56858.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:38.371737,0.000365,udp,85.99.107.185,63246.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:43.293420,0.000249,udp,147.32.84.138,60794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:30:44.131651,0.000338,udp,147.32.84.170,45824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:44.263076,0.000379,udp,221.133.33.86,35977.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:30:49.487933,0.00049,udp,147.32.84.170,46615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:49.490029,0.017461,tcp,147.32.84.170,37051.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:55.607994,0.247448,udp,147.32.84.170,47030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:55.857002,3592.009277,tcp,147.32.84.170,43984.0,->,74.125.232.198,443.0,SPA_SPA,0.0,0.0,371,82190,62516,19674,221.53638814016173,0.7606278136026281,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:30:56.830108,63.971153,tcp,147.32.84.165,2485.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:31:00.475616,0.016468,tcp,147.32.84.59,41884.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 02:31:01.737374,0.000384,udp,62.176.77.206,19049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:02.884075,0.00213,icmp,147.32.86.96,,<-,147.32.87.52,51582.0,RED,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:31:05.209057,0.00029,udp,147.32.84.138,59305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:11.653269,0.000498,udp,147.32.84.138,36608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:14.133967,0.000396,udp,147.32.84.170,54312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:14.134905,0.00036,udp,147.32.84.170,56260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:14.136187,0.214252,tcp,147.32.84.170,54658.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:14.427618,0.000557,udp,147.32.84.138,34866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:15.052973,1.996474,udp,95.134.164.45,11281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1204,152,1052,301.0,0.12624584717607973,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:18.768156,10.358101,udp,68.47.109.65,61561.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,651,531,120,162.75,0.815668202764977,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:26.115244,0.231267,tcp,147.32.86.20,1923.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:31:29.338043,2430.061768,udp,71.59.228.170,45526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,956,708,248,119.5,0.7405857740585774,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:29.487923,0.000535,udp,147.32.84.170,56464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:32.468245,0.000282,udp,147.32.84.138,37947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:36.325252,0.000334,udp,80.187.97.20,34045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,80,67,73.5,0.54421768707483,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:36.748604,0.000326,udp,38.19.142.70,52043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:37.641724,0.000343,udp,147.32.84.59,44879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:38.856100,5.813927,udp,92.40.253.17,25609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,658,537,121,164.5,0.8161094224924013,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:39.487863,0.000451,udp,147.32.84.170,45211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:41.023872,0.000402,udp,109.106.134.82,21422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,323,64,259,161.5,0.19814241486068113,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:44.134068,0.24487,tcp,147.32.84.170,54662.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:47.838407,0.000561,udp,147.32.84.59,45213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:48.147288,0.000461,udp,147.32.84.166,44911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:31:49.487990,0.000371,udp,147.32.84.170,50655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:31:52.739064,0.000295,udp,213.91.148.141,52261.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,667,80,587,333.5,0.1199400299850075,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:57.239518,0.000465,udp,190.93.114.107,11969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,77,465,271.0,0.14206642066420663,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:31:58.615894,0.000406,udp,147.32.86.20,60379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:32:00.371400,61.319263,tcp,147.32.84.165,2486.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:32:04.665326,0.000248,udp,147.32.85.34,61476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:32:05.927292,0.308691,tcp,147.32.86.20,1960.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:32:09.489171,0.000304,udp,147.32.84.170,33219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:09.490148,0.017897,tcp,147.32.84.170,37062.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:14.055889,0.002339,udp,76.222.77.50,57926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:32:15.135360,0.000336,udp,147.32.84.170,36222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:15.137663,0.226542,tcp,147.32.84.170,42466.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:19.488025,0.000521,udp,147.32.84.170,39940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:19.490388,0.018545,tcp,147.32.84.170,37064.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:29.488974,0.000384,udp,147.32.84.170,42923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:31.098900,0.001731,udp,147.32.84.19,42480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:32:33.726433,2.874234,udp,86.87.89.88,54588.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,564,374,190,141.0,0.6631205673758865,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:32:35.258099,9.002888,tcp,147.32.84.19,53150.0,->,147.32.201.140,13579.0,S_,0.0,,3,222,222,0,74.0,1.0,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:32:39.489153,0.000504,udp,147.32.84.170,41111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:46.138629,0.218682,tcp,147.32.84.170,42470.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:49.487965,0.000514,udp,147.32.84.170,57033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:49.489046,0.000278,udp,147.32.84.170,38056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:49.490090,0.017963,tcp,147.32.84.170,53834.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:32:50.182389,0.000266,udp,147.32.84.138,56502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:32:53.132550,3573.197021,udp,147.32.84.229,13363.0,<->,24.23.156.66,25658.0,CON,0.0,0.0,119,20781,10082,10699,174.63025210084032,0.4851547086280737,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:32:53.896630,0.194137,udp,94.188.34.138,20545.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:32:54.320941,0.0,udp,147.32.84.54,427.0,->,192.168.88.186,52108.0,INT,0.0,,1,351,351,0,351.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:32:56.481564,12.526499,tcp,90.177.113.3,3572.0,->,147.32.86.33,3389.0,SRPA_SPA,0.0,0.0,229,192977,6862,186115,842.6943231441048,0.03555864170341543,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:33:01.261625,61.299515,tcp,147.32.84.165,2487.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:33:09.490140,0.018244,tcp,147.32.84.170,51109.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:10.283340,0.51569,tcp,85.246.201.9,50233.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,15,1191,605,586,79.4,0.5079764903442485,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:33:14.161177,0.274546,tcp,147.32.84.170,59687.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:15.029946,3371.093506,udp,190.190.197.110,22530.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,532,292,240,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:15.415158,3001.743652,udp,147.32.84.229,13363.0,<->,128.46.123.27,28916.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:17.206178,0.000318,udp,98.19.136.179,49837.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:19.488128,0.000526,udp,147.32.84.170,41268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:19.490570,0.017608,tcp,147.32.84.170,45644.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:19.705612,0.000456,udp,147.32.85.25,49178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:33:29.489113,0.000482,udp,147.32.84.170,45996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:29.620008,0.169771,tcp,147.32.86.20,2036.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:33:31.688480,0.000293,udp,187.65.234.252,41573.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:34.262145,0.000321,udp,147.32.84.138,57345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:33:39.488907,0.000368,udp,147.32.84.170,56456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:40.054668,0.000513,udp,122.17.160.231,28477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,603,73,530,301.5,0.12106135986733002,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:40.385019,10.058813,tcp,147.32.84.170,37552.0,->,199.16.83.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:46.203750,0.000452,udp,75.68.169.20,55080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:33:59.488937,0.000419,udp,147.32.84.170,41589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:33:59.490063,0.017544,tcp,147.32.84.170,45652.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:00.082306,7.639804,tcp,90.177.113.3,2715.0,->,147.32.86.88,3389.0,SRPA_SPA,0.0,0.0,221,177756,7125,170631,804.3257918552036,0.04008303517180855,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:34:02.127342,64.297073,tcp,147.32.84.165,2488.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:34:03.804378,3.334892,tcp,90.177.113.3,2881.0,->,147.32.87.183,3389.0,FSPA_SRPA,0.0,0.0,81,31986,3427,28559,394.8888888888889,0.10714062402301007,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:34:04.512277,0.000381,udp,147.32.85.34,63414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:34:05.484752,0.000694,udp,88.27.28.118,11560.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:34:15.714632,0.000462,udp,209.6.50.165,7000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:34:17.418762,0.000284,udp,64.141.118.118,53187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:34:19.142216,0.000364,udp,147.32.84.170,46451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:19.144599,0.230152,tcp,147.32.84.170,42491.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:19.488221,0.000439,udp,147.32.84.170,45925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:19.489158,0.001005,udp,147.32.84.170,34896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:24.801933,3.406294,tcp,174.253.242.166,33469.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,26,2094,1187,907,80.53846153846153,0.566857688634193,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:34:28.480650,0.000358,udp,147.32.84.184,59764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:34:35.868328,0.000473,udp,184.39.4.43,50339.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,227,165,62,113.5,0.7268722466960352,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:34:39.490266,0.017768,tcp,147.32.84.170,53857.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:48.176298,0.000276,udp,147.32.84.138,59475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:34:50.135319,0.000441,udp,147.32.84.170,60258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:50.137586,0.245076,tcp,147.32.84.170,42496.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:34:54.708126,2.170168,udp,210.242.49.218,54238.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,682,561,121,170.5,0.8225806451612904,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:34:59.489260,0.000276,udp,147.32.84.170,46310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:35:00.544355,3029.469482,udp,142.161.113.7,29647.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:35:04.282779,0.004187,udp,187.40.142.53,47996.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,593,80,513,296.5,0.13490725126475547,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:35:05.989524,61.312733,tcp,147.32.84.165,2489.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:35:06.545381,0.000438,udp,189.104.176.45,64538.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,86,61,73.5,0.5850340136054422,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:35:07.913895,0.000368,udp,147.32.84.138,48151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:35:18.674857,0.000147,udp,147.32.84.138,44112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:35:26.897411,1.906768,tcp,90.177.113.3,2832.0,->,147.32.87.185,3389.0,FSPA_SRPA,0.0,0.0,65,24848,2813,22035,382.2769230769231,0.11320830650354154,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:35:29.493510,0.018453,tcp,147.32.84.170,37098.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:35:32.252584,0.000611,udp,122.133.95.46,32092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,757,76,681,378.5,0.10039630118890357,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:35:33.771956,0.0,icmp,178.73.75.53,259.0,->,147.32.84.229,45641.0,URH,0.0,,1,94,94,0,94.0,1.0,2,0,flow=Background,Background,-1 2011-08-17 02:35:39.662730,0.070754,tcp,147.32.84.164,42685.0,->,79.141.167.5,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,2,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 02:35:44.979175,0.000399,udp,109.228.79.6,14558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:35:49.489457,0.000363,udp,147.32.84.170,56309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:35:59.489101,0.000302,udp,147.32.84.170,44858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:00.598298,3018.121826,udp,90.213.134.143,23852.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:36:06.867627,61.312294,tcp,147.32.84.165,2490.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:36:09.488395,0.000569,udp,147.32.84.170,50406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:13.558154,0.000204,udp,147.32.85.25,46578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:36:17.541122,0.000509,udp,113.197.177.147,42854.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,74,501,287.5,0.12869565217391304,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:36:19.409596,1.103698,udp,98.144.126.30,22809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1095,549,546,273.75,0.5013698630136987,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:36:19.488147,0.000486,udp,147.32.84.170,50894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:23.135337,0.000408,udp,147.32.84.170,55609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:23.964396,116.94754,udp,147.32.84.229,13363.0,<->,98.215.117.235,34622.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:36:26.544005,1931.761108,udp,147.32.84.229,13363.0,<->,68.9.56.147,58224.0,CON,0.0,0.0,14,3594,3234,360,256.7142857142857,0.8998330550918197,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:36:29.492406,0.000313,udp,147.32.84.170,45344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:29.493462,0.017609,tcp,147.32.84.170,51145.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:39.489515,0.000375,udp,147.32.84.170,46350.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:39.490663,0.019349,tcp,147.32.84.170,53873.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:49.489376,0.000395,udp,147.32.84.170,56378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:49.490529,0.018026,tcp,147.32.84.170,45674.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:59.490654,0.000342,udp,147.32.84.170,53330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:36:59.491580,0.000381,udp,147.32.84.170,57183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:00.202827,0.00034,udp,147.32.84.138,52982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:37:01.645907,60.387142,tcp,147.32.84.162,54541.0,->,147.32.80.13,80.0,SRPA_SPA,0.0,0.0,8,1420,948,472,177.5,0.6676056338028169,2,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 02:37:06.830958,0.000547,udp,201.195.177.10,43972.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,74,475,274.5,0.13479052823315119,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:37:07.745381,61.29784,tcp,147.32.84.165,2491.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:37:09.488372,0.000444,udp,147.32.84.170,53725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:10.923449,0.957405,udp,147.32.87.48,1154.0,->,147.32.87.98,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,2,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:37:12.864375,0.00053,udp,147.32.84.79,33448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:37:19.488204,0.000561,udp,147.32.84.170,52104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:19.489291,0.000384,udp,147.32.84.170,47924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:19.490391,0.01784,tcp,147.32.84.170,41783.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:28.202055,3279.401123,udp,147.32.84.8,38701.0,<->,82.208.56.89,123.0,CON,0.0,0.0,46,4140,2070,2070,90.0,0.5,2,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 02:37:29.490345,0.017827,tcp,147.32.84.170,39015.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:34.793610,3466.261963,udp,147.32.84.15,32861.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,2,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 02:37:38.780194,0.00368,udp,70.225.141.185,17105.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:37:40.463582,0.000322,udp,94.190.193.155,56287.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:37:44.993700,0.000494,udp,147.32.84.171,39922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:37:49.492196,0.000819,udp,147.32.84.170,53645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:37:59.493977,0.017707,tcp,147.32.84.170,42685.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:05.067149,0.000407,udp,147.32.86.20,64290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:38:05.207541,0.0003,udp,147.32.85.34,50378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:38:08.613687,61.296364,tcp,147.32.84.165,2492.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:38:09.490508,0.000306,udp,147.32.84.170,44663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:13.428349,0.277318,tcp,147.32.84.170,47095.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:13.710991,0.348781,tcp,147.32.84.170,40817.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:13.798065,3.50342,tcp,90.177.113.3,2752.0,->,147.32.84.23,3389.0,FSPA_SRPA,0.0,0.0,76,33417,2983,30434,439.69736842105266,0.08926594248436424,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:38:14.052262,0.291521,tcp,147.32.84.170,40818.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:14.228994,250.044998,tcp,147.32.84.170,41837.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:14.229171,250.045105,tcp,147.32.84.170,41841.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:19.491123,0.000505,udp,147.32.84.170,56145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:26.136771,0.000232,udp,147.32.84.170,49407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:26.137974,0.227819,tcp,147.32.84.170,41986.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:39.489596,0.000335,udp,147.32.84.170,47987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:49.599939,0.0,tcp,147.32.84.165,2493.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.611413,0.0,tcp,147.32.84.165,2494.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.612353,0.0,tcp,147.32.84.165,2496.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.782102,0.0,tcp,147.32.84.165,2497.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.782285,0.0,tcp,147.32.84.165,2498.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.792664,0.0,tcp,147.32.84.165,2500.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.982240,0.0,tcp,147.32.84.165,2501.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:49.982658,0.0,tcp,147.32.84.165,2502.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:50.553750,0.0,tcp,147.32.84.165,2506.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:51.755177,0.0,tcp,147.32.84.165,2504.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:38:57.138163,0.000309,udp,147.32.84.170,56713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:38:59.490651,0.018205,tcp,147.32.84.170,42705.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:03.271624,0.0,tcp,147.32.84.165,2729.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.271644,0.0,tcp,147.32.84.165,2731.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.271816,0.0,tcp,147.32.84.165,2732.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.271875,0.0,tcp,147.32.84.165,2733.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.271887,0.0,tcp,147.32.84.165,2736.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.872363,0.0,tcp,147.32.84.165,2744.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.872368,0.0,tcp,147.32.84.165,2741.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:03.872372,0.0,tcp,147.32.84.165,2743.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:09.489743,0.000441,udp,147.32.84.170,56039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:10.259496,6.416367,tcp,66.249.72.35,61530.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1130,685,445,113.0,0.6061946902654868,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:39:15.289075,61.307968,tcp,147.32.84.165,2893.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:39:15.289085,0.0,tcp,147.32.84.165,2973.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.289142,0.0,tcp,147.32.84.165,2970.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.289146,0.0,tcp,147.32.84.165,2972.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.718992,0.0,tcp,147.32.84.165,2980.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.889478,0.0,tcp,147.32.84.165,2982.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.889567,0.0,tcp,147.32.84.165,2984.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:15.889664,0.0,tcp,147.32.84.165,2985.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:19.488663,0.000501,udp,147.32.84.170,47729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:22.528343,0.000485,udp,71.238.24.250,30196.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,77,467,272.0,0.14154411764705882,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:39:27.305596,0.0,tcp,147.32.84.165,3210.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.305663,0.0,tcp,147.32.84.165,3212.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.305807,0.0,tcp,147.32.84.165,3213.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.305821,0.0,tcp,147.32.84.165,3214.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.305826,0.0,tcp,147.32.84.165,3217.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.906949,0.0,tcp,147.32.84.165,3225.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.907020,0.0,tcp,147.32.84.165,3222.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:27.907077,0.0,tcp,147.32.84.165,3224.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:28.064934,3020.501709,udp,123.240.144.75,38458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:39:28.136550,0.000349,udp,147.32.84.170,60539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:28.137475,0.000333,udp,147.32.84.170,41906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:28.755895,0.206584,tcp,147.32.86.20,2351.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:39:39.323555,0.0,tcp,147.32.84.165,3454.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.323564,0.0,tcp,147.32.84.165,3451.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.323627,0.0,tcp,147.32.84.165,3453.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.323706,0.0,tcp,147.32.84.165,3457.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.491383,0.000468,udp,147.32.84.170,55349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:39.492354,0.000457,udp,147.32.84.170,57841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:39.924448,0.0,tcp,147.32.84.165,3463.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.924526,0.0,tcp,147.32.84.165,3465.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:39.924616,0.0,tcp,147.32.84.165,3466.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:46.451497,3595.980225,udp,147.32.84.20,48626.0,<->,89.187.142.41,123.0,CON,0.0,0.0,226,20340,10170,10170,90.0,0.5,2,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 02:39:49.265844,0.000198,udp,147.32.84.138,33822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:39:49.488651,0.000524,udp,147.32.84.170,36554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:51.341027,0.0,tcp,147.32.84.165,3646.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.341041,0.0,tcp,147.32.84.165,3648.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.341141,0.0,tcp,147.32.84.165,3649.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.341155,0.0,tcp,147.32.84.165,3651.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.941182,0.0,tcp,147.32.84.165,3655.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.941249,0.0,tcp,147.32.84.165,3657.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:51.941308,0.0,tcp,147.32.84.165,3658.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:39:52.263650,0.000327,udp,96.227.97.63,10622.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:39:57.427080,3037.180908,udp,24.113.73.226,26965.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:39:58.071352,0.025762,udp,147.32.85.25,37820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:39:58.134837,0.000281,udp,147.32.84.170,58820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:58.135647,0.00039,udp,147.32.84.170,46860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:39:59.490793,0.018212,tcp,147.32.84.170,50064.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:40:03.358118,0.0,tcp,147.32.84.165,3828.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.358229,0.0,tcp,147.32.84.165,3826.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.358238,0.0,tcp,147.32.84.165,3831.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.358241,0.0,tcp,147.32.84.165,3829.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.958806,0.0,tcp,147.32.84.165,3837.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.958890,0.0,tcp,147.32.84.165,3835.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:03.959006,0.0,tcp,147.32.84.165,3840.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:05.043231,0.000321,udp,147.32.86.34,59772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,80,230,155.0,0.25806451612903225,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:05.051376,0.000263,udp,147.32.85.34,64001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:05.070906,0.00022,udp,147.32.85.34,50600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:05.578384,0.00031,udp,147.32.84.36,49310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:13.266384,0.000213,udp,147.32.85.25,33625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:15.375789,0.0,tcp,147.32.84.165,4006.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:15.375803,0.0,tcp,147.32.84.165,4008.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:15.375850,0.0,tcp,147.32.84.165,4009.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:15.375895,7.445446,udp,66.87.92.89,39568.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,538,298,240,67.25,0.5539033457249071,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:40:15.375903,0.0,tcp,147.32.84.165,4011.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:15.976522,0.0,tcp,147.32.84.165,4015.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:15.976536,0.0,tcp,147.32.84.165,4017.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:20.162832,0.071069,udp,147.32.84.229,13363.0,<->,213.60.97.237,16398.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:40:20.747194,0.000238,udp,147.32.84.138,60142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:27.392283,64.247902,tcp,147.32.84.165,4048.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:40:27.392298,0.0,tcp,147.32.84.165,4187.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.392355,0.0,tcp,147.32.84.165,4189.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.392563,0.0,tcp,147.32.84.165,4190.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.392578,0.0,tcp,147.32.84.165,4192.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.993769,0.0,tcp,147.32.84.165,4196.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.993783,0.0,tcp,147.32.84.165,4198.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:27.993917,0.0,tcp,147.32.84.165,4199.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:28.139565,0.238214,tcp,147.32.84.170,42003.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:40:39.409609,0.0,tcp,147.32.84.165,4337.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:39.409706,0.0,tcp,147.32.84.165,4339.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:39.409775,0.0,tcp,147.32.84.165,4341.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:39.410129,0.0,tcp,147.32.84.165,4343.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:39.510914,0.018159,tcp,147.32.84.170,54999.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:40:40.010622,0.0,tcp,147.32.84.165,4345.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:40.010688,0.0,tcp,147.32.84.165,4347.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:47.273691,2452.268799,udp,174.142.207.84,34211.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:40:50.832205,0.000465,icmp,147.32.86.96,,<-,147.32.87.29,34054.0,RED,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:40:51.427656,0.0,tcp,147.32.84.165,4457.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:51.427677,0.0,tcp,147.32.84.165,4459.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:52.028060,0.0,tcp,147.32.84.165,4463.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:52.028135,0.0,tcp,147.32.84.165,4465.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:52.028333,0.0,tcp,147.32.84.165,4468.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:40:52.234705,0.000113,udp,147.32.85.5,40494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:40:52.648781,1.7e-05,icmp,147.32.86.96,,<-,147.32.87.2,1678.0,ECR,,0.0,2,130,0,130,65.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:40:55.311511,2013.463867,udp,147.32.86.96,53189.0,<->,82.208.56.89,123.0,CON,0.0,0.0,125,11250,5670,5580,90.0,0.504,2,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 02:40:55.737160,0.0,tcp,50.23.72.194,5371.0,->,147.32.84.76,4864.0,SA_,0.0,,1,60,60,0,60.0,1.0,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:41:01.475197,0.00048,udp,147.32.85.74,36680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:41:03.444852,0.0,tcp,147.32.84.165,4578.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:03.445117,0.0,tcp,147.32.84.165,4580.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:03.445303,0.0,tcp,147.32.84.165,4582.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:04.045443,0.0,tcp,147.32.84.165,4584.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:04.045457,0.0,tcp,147.32.84.165,4586.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:07.111472,2.048819,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,417,213,204,104.25,0.5107913669064749,2,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 02:41:08.569272,0.000333,udp,77.212.146.149,11924.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:41:09.152092,2040.417969,udp,147.32.84.229,13363.0,<->,122.120.0.224,14903.0,CON,0.0,0.0,8,5924,120,5804,740.5,0.02025658338960162,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:41:15.462213,1.756511,tcp,147.32.84.165,4653.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,2,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-17 02:41:15.462300,0.0,tcp,147.32.84.165,4699.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:15.462363,0.0,tcp,147.32.84.165,4701.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:16.045734,0.0,tcp,147.32.84.165,4705.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:16.062680,0.0,tcp,147.32.84.165,4707.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:16.062694,0.0,tcp,147.32.84.165,4709.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:19.488786,0.000453,udp,147.32.84.170,42474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:41:22.098278,0.00165,udp,109.93.214.202,17804.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:41:27.479290,0.0,tcp,147.32.84.165,4819.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:27.479404,0.0,tcp,147.32.84.165,4821.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:28.079777,0.0,tcp,147.32.84.165,4825.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:28.079913,0.0,tcp,147.32.84.165,4827.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:28.080005,0.0,tcp,147.32.84.165,4829.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:39.496603,64.163383,tcp,147.32.84.165,4874.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:41:39.496617,0.0,tcp,147.32.84.165,4940.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:39.496673,0.0,tcp,147.32.84.165,4939.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:39.496737,0.0,tcp,147.32.84.165,4942.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:39.931391,0.0,tcp,147.32.84.165,4943.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097657,0.0,tcp,147.32.84.165,4946.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097761,0.0,tcp,147.32.84.165,4945.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097768,0.0,tcp,147.32.84.165,4948.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097824,0.0,tcp,147.32.84.165,4947.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097828,0.0,tcp,147.32.84.165,4950.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:40.097939,0.0,tcp,147.32.84.165,4949.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:48.208755,10.414419,tcp,173.220.169.170,3420.0,->,147.32.87.51,3389.0,FSPA_SRPA,1.0,0.0,106,12431,4940,7491,117.27358490566037,0.3973936127423377,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:41:51.513999,0.0,tcp,147.32.84.165,1102.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:51.514068,0.0,tcp,147.32.84.165,1104.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:52.114699,0.0,tcp,147.32.84.165,1108.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:52.114713,0.0,tcp,147.32.84.165,1110.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:52.114797,0.0,tcp,147.32.84.165,1112.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:41:53.945392,0.000315,udp,147.32.84.59,44328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:41:56.158837,0.000257,udp,147.32.85.25,52335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:41:59.488817,0.000494,udp,147.32.84.170,49097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:01.133647,0.020328,udp,147.32.84.170,46287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:01.154541,0.000293,udp,147.32.84.170,39100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:03.531673,0.0,tcp,147.32.84.165,1222.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:03.531688,0.0,tcp,147.32.84.165,1224.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:04.132596,0.0,tcp,147.32.84.165,1228.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:04.132665,0.0,tcp,147.32.84.165,1230.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:04.132830,0.0,tcp,147.32.84.165,1232.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:04.927824,0.000335,udp,147.32.85.34,62404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:42:05.226144,22.401596,udp,27.186.163.167,10049.0,->,147.32.87.110,58628.0,INT,0.0,,4,288,288,0,72.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:42:05.812744,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.52,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,2,1,flow=Background,Background,-1 2011-08-17 02:42:07.120627,0.360045,udp,147.32.84.229,13363.0,<->,114.40.23.136,59342.0,CON,0.0,0.0,6,3070,120,2950,511.6666666666667,0.03908794788273615,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:42:08.721814,2114.446045,udp,68.228.57.226,8021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:42:15.548403,0.0,tcp,147.32.84.165,1342.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:15.548484,0.0,tcp,147.32.84.165,1341.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:15.548492,0.0,tcp,147.32.84.165,1344.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:15.548583,0.0,tcp,147.32.84.165,1343.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149842,0.0,tcp,147.32.84.165,1348.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149857,0.0,tcp,147.32.84.165,1347.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149861,0.0,tcp,147.32.84.165,1350.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149918,0.0,tcp,147.32.84.165,1349.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149971,0.0,tcp,147.32.84.165,1352.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:16.149978,0.0,tcp,147.32.84.165,1351.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:19.266148,0.000255,udp,147.32.84.59,59187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:42:19.492455,0.018193,tcp,147.32.84.170,34897.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:27.565807,0.0,tcp,147.32.84.165,1462.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:27.565822,0.0,tcp,147.32.84.165,1461.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:27.565826,0.0,tcp,147.32.84.165,1464.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:27.565927,0.0,tcp,147.32.84.165,1463.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166723,0.0,tcp,147.32.84.165,1468.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166738,0.0,tcp,147.32.84.165,1467.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166745,0.0,tcp,147.32.84.165,1470.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166833,0.0,tcp,147.32.84.165,1469.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166847,0.0,tcp,147.32.84.165,1472.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:28.166852,0.0,tcp,147.32.84.165,1471.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:32.130808,0.000305,udp,147.32.84.170,38932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:32.797453,0.000184,udp,147.32.85.25,42422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:42:39.489881,0.000301,udp,147.32.84.170,51960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:39.582999,0.0,tcp,147.32.84.165,1582.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:39.583295,0.0,tcp,147.32.84.165,1581.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:39.583304,0.0,tcp,147.32.84.165,1584.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:39.583363,0.0,tcp,147.32.84.165,1583.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184598,0.0,tcp,147.32.84.165,1588.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184612,0.0,tcp,147.32.84.165,1587.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184668,0.0,tcp,147.32.84.165,1590.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184832,0.0,tcp,147.32.84.165,1589.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184846,0.0,tcp,147.32.84.165,1592.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:40.184851,0.0,tcp,147.32.84.165,1591.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:41.548753,3130.687988,udp,76.100.52.87,49729.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1393,1021,372,116.08333333333333,0.7329504666188084,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:42:42.668224,0.000493,udp,80.126.83.10,11406.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:42:49.491382,0.018137,tcp,147.32.84.170,34901.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:50.348988,0.0,tcp,76.164.193.170,80.0,->,147.32.84.107,8486.0,SA_,0.0,,1,62,62,0,62.0,1.0,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:42:51.600602,64.527969,tcp,147.32.84.165,1609.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:42:51.600621,0.0,tcp,147.32.84.165,1703.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:51.600626,0.0,tcp,147.32.84.165,1702.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:51.600630,0.0,tcp,147.32.84.165,1705.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.150083,0.000222,udp,74.36.122.97,23701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:42:52.201161,0.0,tcp,147.32.84.165,1708.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.201252,0.0,tcp,147.32.84.165,1709.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.201337,0.0,tcp,147.32.84.165,1710.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.201344,0.0,tcp,147.32.84.165,1711.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.201388,0.0,tcp,147.32.84.165,1712.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:52.201452,0.0,tcp,147.32.84.165,1713.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:55.252838,0.0,tcp,147.32.84.165,1738.0,->,147.32.88.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:42:59.489758,0.0003,udp,147.32.84.170,52693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:42:59.490787,0.01801,tcp,147.32.84.170,56760.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:01.154433,0.000446,udp,68.4.110.109,39343.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,87,488,287.5,0.15130434782608695,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:02.145327,1.027954,tcp,79.56.88.100,64284.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1330,720,610,73.88888888888889,0.5413533834586466,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:43:03.617873,0.0,tcp,147.32.84.165,1823.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:03.617888,0.0,tcp,147.32.84.165,1822.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:03.617893,0.0,tcp,147.32.84.165,1825.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219281,0.0,tcp,147.32.84.165,1828.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219295,0.0,tcp,147.32.84.165,1829.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219300,0.0,tcp,147.32.84.165,1830.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219349,0.0,tcp,147.32.84.165,1831.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219353,0.0,tcp,147.32.84.165,1832.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:04.219500,0.0,tcp,147.32.84.165,1833.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,2,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 02:43:08.370094,3015.416748,udp,140.105.5.169,2662.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:09.490814,0.017841,tcp,147.32.84.170,50798.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:12.228314,0.000519,udp,124.185.145.53,63879.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:13.405637,0.241963,tcp,147.32.84.170,43150.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:15.128966,0.000437,udp,114.43.11.73,37437.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,77,473,275.0,0.14,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:15.648441,0.290864,tcp,147.32.84.170,37795.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:19.490936,0.017789,tcp,147.32.84.170,39550.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:25.762836,0.001388,udp,115.160.177.115,34186.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:28.609404,0.000391,udp,121.72.80.31,61782.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:33.127104,0.000236,udp,147.32.84.170,48413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:39.489987,0.000243,udp,147.32.84.170,40067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:41.473419,0.205013,tcp,147.32.86.20,2573.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:43:44.964086,0.000404,udp,194.186.172.220,30823.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:43:49.490655,0.018772,tcp,147.32.84.170,39554.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:55.693764,61.322327,tcp,147.32.84.165,1844.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:43:56.095180,0.205771,tcp,147.32.86.20,2588.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:43:59.490993,0.000513,udp,147.32.84.170,47413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:43:59.492059,0.000382,udp,147.32.84.170,51178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:44:01.524093,0.000317,udp,147.32.84.138,37465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:44:09.490036,0.000509,udp,147.32.84.170,56862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:44:13.970543,0.001659,udp,68.5.119.220,23674.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:44:29.488887,0.000666,udp,147.32.84.170,51482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:44:31.916215,1.031578,tcp,147.32.3.51,3342.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:44:39.491411,0.000289,udp,147.32.84.170,46813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:44:39.492367,0.018053,tcp,147.32.84.170,56780.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:44:40.371838,0.000405,udp,99.72.29.226,54043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:44:41.682319,0.000185,udp,147.32.85.34,52649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,75,178,126.5,0.2964426877470356,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:44:44.546325,0.000369,udp,147.32.84.59,43411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,85,226,155.5,0.2733118971061093,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:44:56.581362,64.063675,tcp,147.32.84.165,1845.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:45:06.135083,0.000209,udp,147.32.84.170,41597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:06.137116,0.216855,tcp,147.32.84.170,51553.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:13.543570,1.201846,tcp,208.54.86.183,3166.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,17,1541,822,719,90.6470588235294,0.5334198572355613,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:45:16.529663,0.830394,tcp,88.101.31.227,24004.0,->,147.32.84.4,80.0,SRPA_SPA,0.0,0.0,46,35590,4607,30983,773.695652173913,0.12944647372857546,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:45:18.604278,0.000542,udp,147.32.84.25,56827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:45:19.491424,0.000355,udp,147.32.84.170,47210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:28.725168,0.000407,udp,147.32.86.20,51410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:45:34.611612,0.000793,udp,147.32.84.138,60305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:45:36.135692,0.000275,udp,147.32.84.170,53628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:37.695614,0.000382,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,2,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 02:45:39.695539,0.000299,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,2,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 02:45:40.835825,0.001436,udp,79.180.193.56,21125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:45:43.109788,3536.195312,udp,147.32.84.13,44731.0,<->,82.208.56.89,123.0,CON,0.0,0.0,62,5580,2790,2790,90.0,0.5,2,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 02:45:45.474649,600.100464,udp,190.154.91.217,45749.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3526,135,3391,587.6666666666666,0.03828701077708452,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:45:49.489911,0.000405,udp,147.32.84.170,41347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:49.491048,0.018389,tcp,147.32.84.170,42556.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:45:55.852185,20.03669,tcp,90.177.113.3,4907.0,->,147.32.86.88,3389.0,SRPA_SPA,0.0,0.0,225,175709,7465,168244,780.9288888888889,0.04248501784200012,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:45:57.459071,61.288174,tcp,147.32.84.165,1876.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:45:59.489982,0.000288,udp,147.32.84.170,33475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:00.745344,0.001987,udp,71.114.82.135,50452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:46:00.847558,0.00122,udp,147.32.84.138,39431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:01.849217,0.000319,udp,147.32.84.186,57415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:04.692687,0.000299,udp,147.32.85.34,56444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:04.699677,0.000304,udp,147.32.85.34,53265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:05.372652,0.00047,udp,147.32.84.2,55890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:09.489795,0.000479,udp,147.32.84.170,38776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:14.623250,0.000368,udp,147.32.84.138,60314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:19.489049,0.000422,udp,147.32.84.170,53606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:28.050147,0.000368,udp,147.32.84.138,45646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:31.729654,0.000278,udp,147.32.84.138,54542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:34.324968,205.010284,udp,70.180.80.55,1158.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,703,142,561,175.75,0.2019914651493599,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:46:36.700790,0.12054,udp,147.32.84.229,13363.0,<->,208.88.186.8,34037.0,CON,0.0,0.0,2,248,185,63,124.0,0.7459677419354839,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:46:38.139720,0.214843,tcp,147.32.84.170,51565.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:39.488888,0.000384,udp,147.32.84.170,34112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:39.489795,0.000449,udp,147.32.84.170,44298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:46:48.271510,0.000293,udp,147.32.85.25,38046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:46:49.282814,0.000365,udp,173.141.14.48,47536.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:46:58.318080,64.281044,tcp,147.32.84.165,1877.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:46:59.491822,0.000413,udp,147.32.84.170,47704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:00.321747,1262.217041,udp,201.78.45.136,23184.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,502,378,124,125.5,0.7529880478087649,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:47:08.137937,0.000572,udp,147.32.84.170,47523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:09.489115,0.000517,udp,147.32.84.170,50599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:13.101584,0.000439,udp,201.235.192.166,45777.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:47:13.789509,0.000177,udp,147.32.85.25,41208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:47:15.346183,3342.046387,udp,87.62.249.250,38310.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1452,1080,372,121.0,0.743801652892562,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:47:17.747161,0.157239,udp,147.32.84.229,13363.0,<->,70.36.14.44,45995.0,CON,0.0,0.0,2,142,80,62,71.0,0.5633802816901409,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:47:29.489048,0.000337,udp,147.32.84.170,36254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:33.028964,10.442784,tcp,173.220.169.170,1069.0,->,147.32.87.51,3389.0,FSPA_SRPA,1.0,0.0,105,12313,4862,7451,117.26666666666667,0.39486721351417203,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:47:46.041385,0.134862,tcp,147.32.86.20,2800.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,25654,853,24801,777.3939393939394,0.03325017541124191,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:47:49.489383,0.000532,udp,147.32.84.170,55985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:59.185128,61.323627,tcp,147.32.84.165,1878.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:47:59.489102,0.00055,udp,147.32.84.170,51838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:47:59.490200,0.000393,udp,147.32.84.170,46114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:01.339495,0.000347,udp,147.32.84.138,47673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:04.536983,0.000274,udp,147.32.85.34,58711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:04.566034,0.000206,udp,147.32.85.34,62001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:09.134394,0.000444,udp,147.32.84.170,49642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:09.490091,0.000355,udp,147.32.84.170,54775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:10.680482,0.000442,udp,147.32.84.189,33066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:13.429555,0.264918,tcp,147.32.84.170,59233.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:13.686979,2.595281,tcp,147.32.84.170,59235.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:15.292531,0.000321,udp,147.32.86.20,56973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:18.859301,21.068871,tcp,147.32.85.74,39714.0,->,86.49.87.107,6889.0,S_,0.0,,5,370,370,0,74.0,1.0,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:48:19.490132,0.000292,udp,147.32.84.170,56491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:25.855756,0.000355,udp,147.32.86.20,64839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:48:29.489118,0.000482,udp,147.32.84.170,33257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:31.114335,0.003252,udp,46.146.21.79,55700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2935,60,2875,733.75,0.020442930153321975,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:48:39.491247,0.018463,tcp,147.32.84.170,60745.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:45.168438,2.001884,udp,217.75.209.78,15628.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,462,338,124,115.5,0.7316017316017316,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:48:49.489143,0.000437,udp,147.32.84.170,35672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:48:49.491120,0.018194,tcp,147.32.84.170,42036.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:49:00.073796,61.312748,tcp,147.32.84.165,1879.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:49:00.960622,1e-05,udp,147.32.87.48,1271.0,->,147.32.86.245,161.0,INT,0.0,,2,262,262,0,131.0,1.0,2,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:49:09.491201,0.018691,tcp,147.32.84.170,59520.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:49:11.450072,0.000309,udp,147.32.84.138,40344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:49:29.490270,0.000492,udp,147.32.84.170,43504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:49:29.846453,1852.313354,udp,147.32.84.229,13363.0,->,93.182.147.44,17470.0,INT,0.0,,6,1476,1476,0,246.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:49:41.288868,0.000428,udp,147.32.84.138,38865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:49:43.711246,0.001646,udp,149.5.45.251,43039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,577,517,60,288.5,0.8960138648180243,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:49:49.490213,0.000438,udp,147.32.84.170,58902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:49:53.338367,0.0,tcp,81.214.189.108,17100.0,?>,147.32.84.171,58278.0,RA_,0.0,,1,60,60,0,60.0,1.0,2,0,flow=Background,Background,-1 2011-08-17 02:49:53.571474,0.000338,udp,147.32.85.25,60159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:00.258222,6e-06,icmp,147.32.86.96,,<-,147.32.87.38,1037.0,ECR,,0.0,2,196,0,196,98.0,0.0,2,0,flow=Background,Background,-1 2011-08-17 02:50:00.952102,64.086113,tcp,147.32.84.165,1880.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:50:05.359942,0.000592,udp,147.32.85.34,50818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:09.492511,0.01821,tcp,147.32.84.170,34179.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:50:12.164373,0.221575,tcp,147.32.84.170,34016.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:50:14.134536,0.000333,udp,147.32.85.25,45049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:21.006181,0.000574,udp,123.220.178.67,38367.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,664,77,587,332.0,0.11596385542168675,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:29.353489,0.000251,udp,147.32.85.25,48782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:34.291698,0.000276,udp,147.32.84.138,57606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:35.837350,0.00061,udp,187.149.29.95,14960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,68,60,64.0,0.53125,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:39.490310,0.020581,udp,147.32.84.170,34845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:50:39.511456,0.000356,udp,147.32.84.170,37226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:50:43.139638,0.000348,udp,147.32.84.170,44926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:50:45.541091,0.00028,udp,147.32.84.138,33255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:45.625126,0.000304,udp,113.34.176.155,62740.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:49.148138,0.02229,udp,147.32.84.229,13363.0,<->,134.130.182.185,43429.0,CON,0.0,0.0,4,2920,60,2860,730.0,0.02054794520547945,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:49.610684,0.000257,udp,147.32.85.25,49907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:50:50.375325,0.0,udp,120.199.75.53,44456.0,->,147.32.87.218,62862.0,INT,0.0,,1,72,72,0,72.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:50:51.411113,0.003277,udp,149.5.45.7,43007.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2940,60,2880,735.0,0.02040816326530612,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:55.638901,0.000351,udp,1.72.1.112,49518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,150,83,67,75.0,0.5533333333333333,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:50:57.671299,4.831608,udp,188.187.129.22,4622.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,7,1320,982,338,188.57142857142858,0.7439393939393939,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:01.810553,61.321938,tcp,147.32.84.165,1881.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:51:06.520372,0.000331,udp,147.32.84.138,37734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:51:07.608696,0.00034,udp,118.97.41.163,1998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:14.139430,0.0003,udp,147.32.84.170,44875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:19.492478,0.017711,tcp,147.32.84.170,42056.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:21.841982,1338.040894,udp,64.253.18.102,63365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1076,545,531,76.85714285714286,0.5065055762081785,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:25.596625,0.000453,udp,147.32.84.138,54501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:51:33.178362,2102.306885,udp,114.43.109.58,22541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3077,2957,120,512.8333333333334,0.9610009749756256,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:37.377358,0.000464,udp,89.244.83.98,30280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:39.490131,0.000549,udp,147.32.84.170,47717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:44.138484,0.000358,udp,147.32.84.170,45606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:49.492007,0.000283,udp,147.32.84.170,60986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:49.492992,0.018027,tcp,147.32.84.170,60771.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:51:51.484020,0.000391,udp,96.33.69.66,2661.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:52.058805,0.000509,udp,98.239.4.144,60362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,968,76,892,484.0,0.07851239669421488,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:51:57.132187,0.0,udp,147.32.84.229,13363.0,->,147.102.134.221,1051.0,INT,0.0,,1,118,118,0,118.0,1.0,2,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 02:52:02.697341,61.312729,tcp,147.32.84.165,1882.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:52:05.198460,0.000416,udp,147.32.85.34,54550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:52:05.256870,0.000411,udp,147.32.85.34,61150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:52:07.745064,0.000442,udp,4.71.47.38,62366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,82,503,292.5,0.14017094017094017,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:52:14.125578,3577.058838,udp,147.32.84.229,13363.0,<->,188.118.158.19,12381.0,CON,0.0,0.0,127,21268,9893,11375,167.46456692913387,0.46515892420537897,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:52:14.406784,0.515945,tcp,147.32.3.51,3373.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,2,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 02:52:19.491313,0.000331,udp,147.32.84.170,36591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:52:19.492373,0.017782,tcp,147.32.84.170,53788.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:52:31.558429,0.000379,udp,147.32.84.138,33750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:52:31.614603,0.000775,udp,147.32.84.59,48203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:52:32.040888,0.000374,udp,147.32.84.138,49190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:52:35.282731,0.001372,udp,141.149.182.78,50177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:52:45.138972,0.211733,tcp,147.32.84.170,40765.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:52:48.187988,0.537676,tcp,67.195.115.43,42484.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,16,6618,976,5642,413.625,0.14747657902689634,2,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 02:52:59.492282,0.017685,tcp,147.32.84.170,48628.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:00.663237,0.000442,icmp,147.32.87.249,,<-,147.32.87.3,2.0,RED,,0.0,2,148,0,148,74.0,0.0,2,1,flow=Background,Background,-1 2011-08-17 02:53:02.285462,0.000323,udp,147.32.85.25,40235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:03.575041,61.312191,tcp,147.32.84.165,1883.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:53:04.473025,0.00033,udp,147.32.84.170,40638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:04.512147,0.000833,udp,147.32.84.170,46359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:06.839754,0.000209,udp,147.32.84.138,39988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:09.490973,0.000431,udp,147.32.84.170,42436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:12.340766,0.000298,udp,147.32.85.25,46882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:13.561355,0.23504,tcp,147.32.84.170,55288.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:14.054764,0.221451,tcp,147.32.84.170,55291.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:25.115051,0.000467,udp,147.32.85.34,59420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:39.490207,0.000539,udp,147.32.84.170,34552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:41.152649,0.000531,udp,147.32.86.20,58216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:49.494539,0.000648,udp,147.32.84.170,59805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:53:51.032965,2422.280029,udp,207.216.70.123,54524.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,5259,3316,1943,262.95,0.6305381251188439,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:53:52.548653,0.000202,udp,147.32.85.34,61903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:53:59.491518,0.000807,udp,147.32.84.170,32921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:04.452815,61.287968,tcp,147.32.84.165,1884.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:54:05.047838,0.000286,udp,147.32.85.34,62586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:09.496158,0.017534,tcp,147.32.84.170,47788.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:15.069416,0.000323,udp,147.32.84.138,49630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:16.137038,0.000317,udp,147.32.84.170,58170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:16.139411,0.214703,tcp,147.32.84.170,40785.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:17.161040,0.000226,udp,147.32.84.59,34553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:17.534261,0.000409,udp,147.32.85.89,47651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:19.490601,0.000455,udp,147.32.84.170,33458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:29.491485,0.000339,udp,147.32.84.170,54575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:29.492623,0.01778,tcp,147.32.84.170,47791.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:36.248863,0.000289,udp,110.55.161.176,52552.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:54:39.490607,0.000593,udp,147.32.84.170,43832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:39.491758,0.000398,udp,147.32.84.170,36221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:39.492914,0.01873,tcp,147.32.84.170,47792.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:43.199330,0.0,igmp,147.32.87.24,,->,239.255.255.250,,INT,0.0,,1,60,60,0,60.0,1.0,2,,flow=Background,Background,-1 2011-08-17 02:54:46.138086,0.002371,udp,147.32.84.170,54093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:47.287433,0.000325,udp,147.32.84.59,43416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:49.492519,0.017571,tcp,147.32.84.170,53816.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:54:53.233952,1201.563721,udp,90.233.206.224,56748.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,504,356,148,126.0,0.7063492063492064,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:54:58.378315,0.020548,udp,147.32.84.184,49079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:54:59.492742,0.01832,tcp,147.32.84.170,37493.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:02.308998,0.000276,udp,147.32.84.59,44004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:55:04.171946,0.000323,udp,190.104.6.231,34127.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:05.311466,61.312481,tcp,147.32.84.165,1885.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:55:09.491599,0.000393,udp,147.32.84.170,35919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:14.401035,0.000451,udp,109.58.10.102,50462.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:16.136383,0.000426,udp,147.32.84.170,58182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:16.137368,0.000334,udp,147.32.84.170,35652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:17.546409,0.00017,udp,147.32.85.89,36375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:55:23.734700,0.000209,udp,147.32.84.138,34430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:55:25.004560,3.72958,udp,89.204.153.121,37742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1042,922,120,260.5,0.8848368522072937,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:25.087035,0.15693,udp,147.32.84.229,13363.0,<->,71.60.195.207,17941.0,CON,0.0,0.0,2,224,83,141,112.0,0.3705357142857143,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:26.307064,0.000429,udp,188.80.43.44,5344.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,73,464,268.5,0.13594040968342644,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:28.578071,0.000293,udp,75.40.18.233,39086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,280,63,217,140.0,0.225,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:44.422565,0.000422,udp,193.227.184.1,33214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,77,467,272.0,0.14154411764705882,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:49.495156,0.000435,udp,147.32.84.170,42409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:49.497385,0.018149,tcp,147.32.84.170,53824.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:53.393806,0.079955,udp,147.32.84.229,13363.0,<->,87.6.24.214,18916.0,CON,0.0,0.0,2,565,78,487,282.5,0.13805309734513274,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:55:59.495211,0.000315,udp,147.32.84.170,39335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:55:59.496057,0.000299,udp,147.32.84.170,55713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:04.871454,0.000391,udp,147.32.85.34,55944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:56:05.846349,0.000407,udp,147.32.84.138,34163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:56:06.189290,64.056808,tcp,147.32.84.165,1886.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:56:06.433742,0.000311,udp,81.206.38.65,64184.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:56:18.133147,0.282846,tcp,147.32.84.170,40801.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:37.798939,0.00039,udp,147.32.84.138,40298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:56:39.492548,0.000635,udp,147.32.84.170,33538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:39.494922,0.017556,tcp,147.32.84.170,53830.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:42.466220,0.000239,udp,147.32.85.25,54584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:56:49.134991,0.00034,udp,147.32.84.170,50458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:49.492918,0.000437,udp,147.32.84.170,50510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:56:59.494199,0.000548,udp,147.32.84.170,41769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:57:06.779255,1853.25,udp,107.53.84.8,4957.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1196,1015,181,199.33333333333334,0.8486622073578596,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:57:07.048496,70.137276,tcp,147.32.84.165,1887.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:57:09.496374,0.000447,udp,147.32.84.170,58109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:57:12.683556,0.000402,udp,147.32.84.138,54502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:57:20.141349,0.215712,tcp,147.32.84.170,49544.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:57:30.545535,0.00016,tcp,46.105.183.210,80.0,->,147.32.87.16,3781.0,SA_R,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,2,0,flow=Background-TCP-Established,Background,-1 2011-08-17 02:57:37.011472,0.622345,udp,128.123.127.113,32487.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:57:39.493684,0.000343,udp,147.32.84.170,43292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:57:41.796495,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,2,,flow=Background,Background,-1 2011-08-17 02:57:44.157490,0.000373,udp,123.27.254.81,56221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,628,72,556,314.0,0.11464968152866242,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:57:50.140392,0.00032,udp,147.32.84.170,55605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:57:53.303241,0.000212,udp,147.32.84.138,42738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:57:54.665000,0.000239,udp,147.32.86.20,65080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:57:57.533647,0.001803,udp,69.204.154.107,54188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:57:57.803621,1892.722778,udp,116.82.208.115,33885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:57:57.911981,0.000359,udp,147.32.86.20,50989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:01.019208,3594.369385,udp,147.32.84.229,13363.0,<->,70.45.90.15,10191.0,CON,0.0,0.0,8,945,701,244,118.125,0.7417989417989418,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:04.770705,0.000208,udp,147.32.85.34,63174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:04.772147,0.000234,udp,147.32.85.34,61171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:07.786573,0.000271,udp,147.32.84.138,55150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:07.917386,61.314659,tcp,147.32.84.165,1888.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:58:09.495563,0.000328,udp,147.32.84.170,58005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:09.496632,0.01791,tcp,147.32.84.170,47831.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:12.388907,0.000312,udp,203.170.251.102,59252.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:13.481346,0.213112,tcp,147.32.84.170,35230.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:14.215762,0.000363,udp,147.32.84.170,40223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:14.216458,0.000315,udp,147.32.84.170,50881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:14.221161,240.400818,tcp,147.32.84.170,60823.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:14.221561,240.400635,tcp,147.32.84.170,60824.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:14.436183,0.103969,udp,147.32.84.170,44070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:19.496741,0.017854,tcp,147.32.84.170,47845.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:20.142296,0.000381,udp,147.32.84.170,50108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:58:24.332881,0.000232,udp,147.32.85.25,51775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:38.536153,0.000325,udp,46.233.12.150,20873.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:39.733112,3009.984375,udp,78.186.196.119,15410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:40.124797,3260.856201,udp,123.198.172.52,5588.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:41.689916,0.291268,udp,84.191.77.164,58290.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,688,567,121,172.0,0.8241279069767442,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:47.549675,2352.295654,udp,218.32.83.226,33650.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2334,1966,368,194.5,0.8423307626392459,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:58:47.850001,0.000182,udp,147.32.84.138,46572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:58:52.206813,0.000248,udp,97.65.244.253,35652.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,2,1,flow=Background-UDP-Established,Background,-1 2011-08-17 02:59:02.661756,3023.881104,udp,69.168.245.100,11940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:59:08.797139,64.161148,tcp,147.32.84.165,1889.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,2,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 02:59:09.495741,0.000295,udp,147.32.84.170,34492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:59:28.204065,240.25174,tcp,147.32.84.184,43273.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,34,5518,3665,1853,162.2941176470588,0.6641899238854657,2,1,flow=Background-TCP-Established,Background,-1 2011-08-17 02:59:29.498362,0.000322,udp,147.32.84.170,49697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:59:32.152240,0.000167,udp,147.32.85.25,38408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:59:37.517111,533.710938,udp,130.225.236.217,49142.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1091,544,547,272.75,0.4986251145737855,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:59:39.498809,0.018058,tcp,147.32.84.170,35727.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:59:44.127875,89.603333,udp,190.194.216.227,7827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:59:49.496605,0.017604,tcp,147.32.84.170,58910.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:59:50.485206,0.001363,udp,201.244.192.183,17011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,2,0,flow=Background-UDP-Established,Background,-1 2011-08-17 02:59:56.002510,0.000258,udp,147.32.84.138,41771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,2,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 02:59:59.494808,0.000382,udp,147.32.84.170,53130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 02:59:59.495704,0.000328,udp,147.32.84.170,38774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,2,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:01.693204,0.000297,udp,147.32.87.36,41918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,86,208,147.0,0.2925170068027211,3,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:00:02.099113,1806.088501,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,16,1440,720,720,90.0,0.5,3,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:00:07.751233,0.00018,udp,147.32.85.25,36031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:00:08.327278,2.376365,udp,189.21.254.170,31221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:00:09.494857,0.00049,udp,147.32.84.170,37846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:12.528410,61.311916,tcp,147.32.84.165,1890.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:00:19.494608,0.000495,udp,147.32.84.170,55133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:19.495559,0.000291,udp,147.32.84.170,35252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:22.141305,0.000225,udp,147.32.84.170,40151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:25.070291,0.008382,udp,147.32.85.84,47955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:00:25.070305,0.008639,udp,147.32.85.84,47955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:00:29.497344,0.00044,udp,147.32.84.170,57041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:34.150475,0.000269,udp,147.32.84.183,43382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:00:37.683274,0.00033,udp,168.234.217.2,1982.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:00:42.598360,630.859985,udp,147.32.84.229,13363.0,<->,71.63.220.224,3401.0,CON,0.0,0.0,12,2774,2019,755,231.16666666666666,0.727829848594088,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:00:45.588133,0.000261,udp,147.32.84.138,42690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:00:49.496290,0.000289,udp,147.32.84.170,60349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:49.497292,0.018064,tcp,147.32.84.170,44080.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:00:51.717958,248.639374,udp,87.96.229.229,2205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,807,447,360,67.25,0.5539033457249071,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:00:53.660106,2.925517,tcp,147.32.84.171,49217.0,->,41.188.119.83,13032.0,FSPA_FSPA,0.0,0.0,12,1564,596,968,130.33333333333334,0.38107416879795397,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:01:03.081925,0.000421,udp,147.32.84.59,40288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:01:09.104463,0.000359,udp,147.32.85.25,49151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,84,141,112.5,0.37333333333333335,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:01:09.455873,0.000325,udp,77.28.7.76,38569.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:09.495959,0.000315,udp,147.32.84.170,57767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:13.405793,61.312599,tcp,147.32.84.165,1891.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:01:15.118364,3359.33667,udp,175.143.13.72,8807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1292,1044,248,161.5,0.8080495356037152,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:19.424201,0.135802,tcp,147.32.86.20,3517.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:01:19.493098,3020.370605,udp,220.130.155.22,7658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:19.494873,0.000458,udp,147.32.84.170,57914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:24.138030,0.000343,udp,147.32.84.170,44826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:28.205173,0.000511,udp,140.109.112.154,20607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:29.497091,0.018377,tcp,147.32.84.170,44086.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:29.537053,0.000393,udp,147.32.85.25,47703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:01:35.313839,0.000257,udp,114.234.81.46,1801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:36.894217,2269.525391,udp,82.239.76.9,22219.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,796,602,194,132.66666666666666,0.7562814070351759,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:39.494924,0.000415,udp,147.32.84.170,44619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:39.495848,0.000417,udp,147.32.84.170,51006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:39.497018,0.017719,tcp,147.32.84.170,47872.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:01:45.229857,0.000301,udp,147.32.85.25,52014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:01:48.958530,0.001493,udp,83.222.184.202,57890.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,222,160,62,111.0,0.7207207207207207,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:53.769373,0.000304,udp,147.32.84.138,35926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:01:55.161693,0.1579,udp,147.32.84.229,13363.0,<->,69.120.77.59,21383.0,CON,0.0,0.0,3,2830,60,2770,943.3333333333334,0.02120141342756184,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:01:59.918325,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.54,44821.0,ECR,,0.0,2,196,0,196,98.0,0.0,3,0,flow=Background,Background,-1 2011-08-17 03:02:00.700525,0.000394,udp,186.42.216.114,24117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:02:03.075137,0.000296,udp,147.32.85.34,61143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:03.225060,0.000395,udp,147.32.84.59,38983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:03.639655,102.99968,tcp,147.32.86.89,3705.0,->,94.124.104.198,80.0,SRPA_SPA,0.0,0.0,9478,9495092,201822,9293270,1001.8033340367166,0.021255402264664734,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:02:05.849683,2681.693115,udp,74.195.231.98,35460.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:02:09.033009,0.000299,udp,147.32.84.138,59987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:09.495090,0.000532,udp,147.32.84.170,53828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:12.515600,0.00037,udp,147.32.84.138,52075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:14.284000,61.31234,tcp,147.32.84.165,1892.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:02:15.433365,0.000408,udp,147.32.84.138,52423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:19.494981,0.000553,udp,147.32.84.170,57734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:29.497096,0.017676,tcp,147.32.84.170,47610.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:29.898618,0.000307,udp,41.212.127.234,39902.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:02:30.445546,0.000737,udp,147.32.84.138,38270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:39.494810,0.000484,udp,147.32.84.170,49750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:39.495862,0.000399,udp,147.32.84.170,46450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:49.496186,0.000591,udp,147.32.84.170,51365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:50.659853,0.000417,udp,147.32.84.21,51821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:02:51.053192,0.000316,udp,78.55.55.190,55888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,72,69,70.5,0.5106382978723404,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:02:55.141847,0.00043,udp,147.32.84.170,59798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:55.144089,0.239057,tcp,147.32.84.170,42201.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:02:57.433816,0.000464,udp,98.142.248.21,52362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,317,64,253,158.5,0.20189274447949526,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:03:08.349976,302.561127,udp,147.32.84.229,13363.0,<->,220.136.107.89,26924.0,CON,0.0,0.0,4,660,540,120,165.0,0.8181818181818182,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:03:09.496092,0.000442,udp,147.32.84.170,45910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:12.890014,0.000382,udp,147.32.85.25,54197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:03:13.180340,0.030426,tcp,147.32.84.170,37318.0,->,209.85.148.106,443.0,FSRPA_FSPA,0.0,0.0,14,1237,656,581,88.35714285714286,0.5303152789005658,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:13.737769,0.235705,tcp,147.32.84.170,46605.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:15.161987,61.312378,tcp,147.32.84.165,1893.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:03:17.680139,41.152046,tcp,85.245.103.166,52547.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,22,1598,609,989,72.63636363636364,0.3811013767209011,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:03:17.720129,0.000355,udp,173.21.16.235,51082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:03:19.499719,0.000548,udp,147.32.84.170,48793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:24.278765,0.00028,udp,178.123.92.105,10997.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:03:26.141809,0.000442,udp,147.32.84.170,59996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:26.144109,0.212618,tcp,147.32.84.170,42209.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:29.495072,0.00044,udp,147.32.84.170,56528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:29.495991,0.000528,udp,147.32.84.170,42690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:39.757399,0.000299,udp,70.94.224.137,36444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:03:46.762669,0.00019,udp,147.32.84.138,46160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:03:49.498477,0.000329,udp,147.32.84.170,52606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:03:51.365600,0.000398,udp,147.32.86.20,56460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:03:59.497023,0.018046,tcp,147.32.84.170,47626.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:00.420311,0.000403,udp,96.42.34.51,48864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:04:05.537561,0.000262,udp,147.32.85.34,59614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:04:06.693102,3329.81665,udp,147.32.84.229,13363.0,->,186.84.134.171,35128.0,INT,0.0,,33,2376,2376,0,72.0,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:04:13.306613,0.205646,tcp,147.32.86.20,3667.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:04:13.363595,0.00045,udp,147.32.84.59,54534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:04:16.039749,64.160866,tcp,147.32.84.165,1894.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:04:17.657302,0.000317,udp,94.108.201.172,31507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:04:19.496413,0.000375,udp,147.32.84.170,39494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:20.983752,0.051577,udp,147.32.84.171,33154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,588,75,513,294.0,0.12755102040816327,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:04:26.142898,0.000442,udp,147.32.84.170,58905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:29.557702,5.999865,udp,195.112.95.126,29288.0,->,147.32.84.111,48922.0,INT,0.0,,3,432,432,0,144.0,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:04:32.064171,0.228953,tcp,85.71.127.40,28587.0,->,147.32.84.36,80.0,FSRPA_FSRPA,0.0,0.0,12,1493,921,572,124.41666666666667,0.6168787675820495,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:04:39.495775,0.000392,udp,147.32.84.170,53950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:40.982569,0.656035,udp,122.116.205.8,42943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,398,213,185,66.33333333333333,0.535175879396985,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:04:49.496075,0.000327,udp,147.32.84.170,41788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:49.497100,0.017915,tcp,147.32.84.170,52332.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:04:51.523418,0.000225,udp,147.32.84.138,52411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:04:54.270757,0.000198,udp,147.32.84.138,35933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:04:54.275156,0.000336,udp,147.32.84.138,46119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:05:02.881670,3156.50708,udp,147.32.84.229,13363.0,<->,69.122.122.96,23229.0,CON,0.0,0.0,6,3074,2954,120,512.3333333333334,0.9609629147690306,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:05:09.495209,0.00046,udp,147.32.84.170,53326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:05:10.311552,0.000218,udp,147.32.85.25,60925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:05:19.498274,0.000357,udp,147.32.84.170,38360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:05:19.771468,64.354698,tcp,147.32.84.165,1895.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:05:23.047154,0.000342,udp,109.53.147.16,21837.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:05:27.052614,0.000267,udp,147.32.84.138,45314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:05:27.142786,0.000294,udp,147.32.84.170,36481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:05:27.143963,0.215096,tcp,147.32.84.170,42225.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:05:33.454624,1938.213013,udp,113.160.133.111,7872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1367,165,1202,341.75,0.12070226773957571,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:05:49.592920,0.0,udp,147.32.84.59,61985.0,->,192.168.1.101,427.0,INT,0.0,,1,86,86,0,86.0,1.0,3,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 03:05:59.495160,0.00036,udp,147.32.84.170,46409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:05:59.600549,3469.079102,udp,83.99.135.165,17625.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1454,1082,372,121.16666666666667,0.7441540577716643,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:06:05.034771,1934.37854,udp,84.112.13.219,30722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,478,354,124,119.5,0.7405857740585774,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:06:05.062955,0.000279,udp,147.32.85.34,52372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:06:05.084795,0.000315,udp,147.32.85.34,53476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:06:16.618551,1.3e-05,icmp,147.32.87.249,,<-,147.32.87.11,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,3,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-17 03:06:17.679073,3032.732178,udp,83.238.7.22,33149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:06:20.638992,64.259377,tcp,147.32.84.165,1896.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:06:28.139510,0.000227,udp,147.32.84.170,51449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:06:29.495230,0.000316,udp,147.32.84.170,43264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:06:29.496116,0.000381,udp,147.32.84.170,54126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:06:29.497225,0.017856,tcp,147.32.84.170,49269.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:06:33.737526,1431.366211,udp,71.166.33.114,41729.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:06:38.526682,0.000336,udp,98.203.178.58,36086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:06:39.498292,0.018449,tcp,147.32.84.170,49679.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:06:49.498287,0.018359,tcp,147.32.84.170,49271.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:07:02.799539,3244.593262,udp,174.23.26.185,39779.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:07:14.895703,0.000202,udp,147.32.84.138,58784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:07:23.614453,0.000328,udp,147.32.84.59,54749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:07:24.463788,61.295723,tcp,147.32.84.165,1897.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:07:25.029514,0.008486,udp,147.32.84.138,54209.0,<->,89.31.8.3,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,3,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 03:07:29.185961,0.000214,udp,147.32.84.170,52573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:07:29.496354,0.000393,udp,147.32.84.170,44294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:07:44.923053,9.000033,tcp,147.32.84.179,52950.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,3,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:07:49.497274,0.000393,udp,147.32.84.170,42123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:07:53.662835,0.000198,udp,147.32.84.138,60944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:07:57.428238,245.378891,udp,70.167.159.70,27941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1316,222,1094,219.33333333333334,0.16869300911854104,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:08:06.184225,0.000269,udp,147.32.84.138,48645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:08:09.497263,0.000337,udp,147.32.84.170,38810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:13.736383,3300.318359,tcp,147.32.84.170,37447.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,32,5298,2284,3014,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:13.965100,0.00038,udp,147.32.84.138,59900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:08:14.144454,0.227368,tcp,147.32.84.170,54959.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:14.221029,250.046158,tcp,147.32.84.170,37452.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:14.224238,250.043213,tcp,147.32.84.170,37453.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:19.497315,0.00029,udp,147.32.84.170,57220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:19.498364,0.017701,tcp,147.32.84.170,48651.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:23.979697,6.038671,udp,147.32.84.229,13363.0,->,78.143.76.71,24747.0,INT,0.0,,3,219,219,0,73.0,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:08:25.329982,61.287594,tcp,147.32.84.165,1898.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:08:29.496291,0.000489,udp,147.32.84.170,48200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:29.497332,0.000288,udp,147.32.84.170,40472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:29.498346,0.018167,tcp,147.32.84.170,54346.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:31.143035,0.000275,udp,147.32.84.170,48513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:35.920523,0.000388,udp,178.212.67.181,46784.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:08:37.864786,45.295689,tcp,87.235.2.93,56487.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,27,2243,1010,1233,83.07407407407408,0.4502897904592064,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:08:39.497240,0.000314,udp,147.32.84.170,42325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:41.039616,0.000345,udp,147.32.85.25,34571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:08:49.297149,0.000225,udp,147.32.84.59,45052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:08:49.496416,0.000363,udp,147.32.84.170,40803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:08:49.497380,0.000332,udp,147.32.84.170,42995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:09:07.998748,0.012847,tcp,147.32.85.74,40184.0,->,86.49.87.107,6889.0,S_,0.0,,1,74,74,0,74.0,1.0,3,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:09:17.677274,0.000201,udp,147.32.85.89,39459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:09:19.028666,0.003307,udp,81.166.92.142,39581.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2934,60,2874,733.5,0.02044989775051125,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:09:19.932011,0.000327,udp,149.5.45.9,43012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,288,226,62,144.0,0.7847222222222222,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:09:25.467654,0.000197,udp,147.32.84.138,59616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:09:26.187699,61.287643,tcp,147.32.84.165,1899.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:09:32.150028,0.197831,tcp,147.32.84.170,54044.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:09:39.496389,0.00046,udp,147.32.84.170,50085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:09:40.527869,2942.394043,udp,188.115.103.37,8435.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,2757,1526,1231,114.875,0.553500181356547,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:09:41.613539,0.000402,udp,91.7.143.90,64540.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,76,486,281.0,0.13523131672597866,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:09:43.747816,0.000432,icmp,147.32.86.96,,<-,147.32.87.51,35610.0,RED,,0.0,2,196,0,196,98.0,0.0,3,0,flow=Background,Background,-1 2011-08-17 03:09:59.496198,0.000401,udp,147.32.84.170,39737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:09:59.497197,0.000313,udp,147.32.84.170,53461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:02.144866,0.231338,tcp,147.32.84.170,54048.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:04.836542,0.000273,udp,147.32.85.34,57043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:10:04.844934,0.170164,udp,147.32.84.36,49663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,86,143,114.5,0.37554585152838427,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:10:08.290698,0.00031,udp,60.251.157.148,62668.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:10:09.499344,0.01812,tcp,147.32.84.170,46875.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:21.188744,3215.944824,udp,184.91.99.214,23696.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3414,416,2998,426.75,0.12185120093731693,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:10:27.045911,61.287464,tcp,147.32.84.165,1900.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:10:29.498464,0.017977,tcp,147.32.84.170,40587.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:34.979488,0.691048,udp,126.121.254.168,32396.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1732,655,1077,288.6666666666667,0.378175519630485,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:10:39.506962,0.000369,udp,147.32.84.170,42394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:39.508051,0.018313,tcp,147.32.84.170,40589.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:39.912088,0.000279,udp,166.147.114.88,62704.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:10:41.640288,0.000328,udp,147.32.84.138,37035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:10:43.123721,0.001586,udp,184.65.5.110,31177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:10:43.145165,9.037486,tcp,12.172.11.35,1614.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:10:44.948550,0.206444,tcp,147.32.86.20,4021.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:10:49.499550,0.017782,tcp,147.32.84.170,40590.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:10:52.092170,0.000245,udp,147.32.84.138,37868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:10:53.070629,0.00034,udp,147.32.86.20,64469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:10:59.524259,29.771334,udp,49.132.102.84,53532.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2140,1900,240,267.5,0.8878504672897196,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:11:03.144258,0.220396,tcp,147.32.84.170,54056.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:06.033904,0.000352,udp,147.32.84.138,51715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:11:09.497597,0.000304,udp,147.32.84.170,56880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:11.762206,0.206201,tcp,147.32.86.20,4044.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:11:13.051601,2489.870117,udp,74.216.106.176,48864.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1062,942,120,265.5,0.8870056497175142,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:11:19.496539,0.000437,udp,147.32.84.170,53204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:20.730007,0.230897,tcp,147.32.86.20,4052.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:11:27.903780,61.312492,tcp,147.32.84.165,1901.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:11:29.496872,0.000528,udp,147.32.84.170,37920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:29.497953,0.000253,udp,147.32.84.170,35988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:34.959788,0.000278,udp,147.32.84.59,44189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:11:34.981990,0.00032,udp,147.32.84.59,48634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:11:35.036279,0.000268,udp,147.32.84.59,47918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:11:50.439724,2667.383301,udp,67.180.80.208,16927.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1888,1392,496,118.0,0.7372881355932204,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:11:59.496457,0.000505,udp,147.32.84.170,36477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:11:59.649165,0.000335,udp,147.32.84.138,44115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:04.143944,0.000326,udp,147.32.84.170,52733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:04.723536,0.00028,udp,147.32.85.34,53212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:04.733855,2705.130615,udp,212.233.249.89,48426.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3089,126,2963,514.8333333333334,0.040789899643897704,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:04.734903,0.000286,udp,147.32.85.34,56400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:13.735444,0.0,tcp,130.237.188.216,6667.0,->,147.32.84.53,544.0,SA_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:14.754077,0.00021,udp,147.32.84.138,36471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:19.496654,0.000425,udp,147.32.84.170,57868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:19.498732,0.018187,tcp,147.32.84.170,44788.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:19.590480,0.000297,udp,96.40.179.127,1435.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:25.604978,0.001566,udp,174.254.250.189,64764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:28.781189,64.26722,tcp,147.32.84.165,1902.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:12:29.498405,0.017772,tcp,147.32.84.170,44141.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:29.529763,3299.443115,icmp,147.32.87.1,261.0,->,147.32.87.48,37664.0,RED,0.0,,12,840,840,0,70.0,1.0,3,0,flow=Background,Background,-1 2011-08-17 03:12:29.986756,1481.256714,udp,208.88.186.4,34010.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,9,8118,5183,2935,902.0,0.6384577482138458,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:31.571952,0.000278,udp,147.32.85.25,40209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:32.232806,0.230895,tcp,147.32.86.20,4114.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,46,37913,1151,36762,824.195652173913,0.030358979769472213,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:32.389961,1839.862793,udp,147.32.85.84,13716.0,<->,137.248.41.149,9218.0,CON,0.0,0.0,4,473,349,124,118.25,0.7378435517970402,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:34.334645,3316.171631,udp,147.32.84.229,13363.0,<->,208.88.186.5,34010.0,CON,0.0,0.0,8,639,390,249,79.875,0.6103286384976526,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:35.092402,0.000196,udp,147.32.84.138,40454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:35.145710,0.28675,tcp,147.32.84.170,43574.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:36.578862,0.000263,udp,147.32.85.25,36790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:36.634939,0.000122,udp,147.32.85.25,49469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:39.498783,0.017879,tcp,147.32.84.170,35925.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:46.412934,2.432066,tcp,66.249.66.197,54425.0,->,147.32.84.222,80.0,FSPA_FSPA,0.0,0.0,10,1170,723,447,117.0,0.617948717948718,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:48.355927,0.00153,udp,99.147.67.34,52054.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,496,60,278.0,0.8920863309352518,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:12:49.497394,0.000358,udp,147.32.84.170,59253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:12:50.108164,0.206017,tcp,147.32.86.20,4130.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,30574,969,29605,804.578947368421,0.0316935958657683,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:50.626475,56.295029,tcp,60.248.150.212,80.0,->,147.32.85.98,36408.0,SA_R,0.0,0.0,4,240,120,120,60.0,0.5,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:51.318480,0.000461,udp,147.32.84.59,47370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:51.411321,0.000309,udp,147.32.84.59,36202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:51.422283,0.000273,udp,147.32.84.59,55306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:12:59.046403,0.20557,tcp,147.32.86.20,4138.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:12:59.498405,0.018571,tcp,147.32.84.170,60066.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:13:00.605309,38.946304,udp,76.108.91.193,49640.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1602,1422,180,267.0,0.8876404494382022,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:13:09.871707,2964.458008,udp,201.29.213.97,43724.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:13:19.498523,0.017743,tcp,147.32.84.170,44802.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:13:32.613487,61.313114,tcp,147.32.84.165,1903.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:13:36.879393,0.000398,icmp,147.32.87.249,,<-,147.32.87.38,2.0,RED,,0.0,2,148,0,148,74.0,0.0,3,1,flow=Background,Background,-1 2011-08-17 03:13:42.050582,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,3,,flow=Background,Background,-1 2011-08-17 03:13:49.498724,0.017974,tcp,147.32.84.170,55862.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:13:49.843125,0.000231,udp,147.32.84.138,50732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:13:57.655645,0.0004,udp,217.200.200.236,5726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:13:59.085216,0.000296,udp,147.32.84.59,35991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:13:59.500833,0.018047,tcp,147.32.84.170,35941.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:14:05.645889,0.000301,udp,147.32.85.34,52456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:14:06.139786,0.000399,udp,147.32.84.170,40508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:14:09.500020,0.000439,udp,147.32.84.170,43858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:14:10.066070,2508.628418,udp,86.32.112.5,37825.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1580,1400,180,263.3333333333333,0.8860759493670886,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:14:16.178277,0.000275,udp,147.32.84.138,59558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:14:19.770415,0.000193,udp,147.32.84.138,59918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:14:26.384396,0.000324,udp,125.192.34.69,26050.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:14:33.491632,61.314781,tcp,147.32.84.165,1904.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:14:36.149353,0.000311,udp,147.32.84.170,43824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:14:39.496806,0.000513,udp,147.32.84.170,52870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:14:49.910217,0.04593,udp,147.32.84.229,13363.0,<->,89.156.97.38,47172.0,CON,0.0,0.0,2,545,485,60,272.5,0.8899082568807339,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:14:55.394394,3.273476,tcp,174.139.65.11,80.0,->,147.32.85.63,62537.0,SA_,0.0,,2,124,124,0,62.0,1.0,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:14:57.917349,0.000373,udp,67.232.29.15,28477.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:15:00.928320,0.000286,udp,147.32.86.20,63445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:15:09.499027,0.017862,tcp,147.32.84.170,60090.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:23.536244,0.000245,udp,149.5.45.70,43052.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,174,114,60,87.0,0.6551724137931034,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:15:24.196835,0.000714,udp,147.32.84.138,40172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:15:24.453946,0.433829,udp,115.173.113.210,1060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,258,133,125,64.5,0.5155038759689923,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:15:26.508959,0.000382,udp,147.32.85.84,41467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,74,184,129.0,0.2868217054263566,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:15:29.497843,0.000315,udp,147.32.84.170,47279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:29.498948,0.018538,tcp,147.32.84.170,58822.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:34.369722,64.291534,tcp,147.32.84.165,1905.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:15:49.234420,0.000224,udp,147.32.84.138,38450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:15:49.497515,0.000353,udp,147.32.84.170,55110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:49.498429,0.000358,udp,147.32.84.170,38181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:59.497833,0.000395,udp,147.32.84.170,57983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:59.498652,0.000364,udp,147.32.84.170,52181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:15:59.499834,0.017845,tcp,147.32.84.170,35957.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:05.607138,0.000255,udp,147.32.85.34,63232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:05.615992,0.000273,udp,147.32.85.34,56326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:05.622735,0.000329,udp,147.32.85.34,53086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:09.148254,0.217371,tcp,147.32.84.170,43608.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:09.498986,0.017844,tcp,147.32.84.170,44825.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:19.500388,0.000394,udp,147.32.84.170,34665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:20.982765,3074.143799,udp,188.155.41.91,10167.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:16:26.369160,2810.387451,udp,189.67.122.222,49359.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:16:27.875164,0.000232,udp,147.32.85.25,42809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:28.758985,0.000313,udp,58.8.173.47,18735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:16:30.198662,3060.064209,udp,89.249.167.151,14609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5897,120,5777,737.125,0.020349330167881974,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:16:36.805849,0.169858,tcp,147.32.86.20,4334.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:16:38.231456,61.312622,tcp,147.32.84.165,1906.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:16:38.399669,0.994576,udp,147.32.87.48,1546.0,->,147.32.87.100,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,3,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:16:39.497820,0.000269,udp,147.32.84.170,37355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:40.143977,0.000246,udp,147.32.84.170,34199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:16:49.759358,0.000198,udp,147.32.84.59,55404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:58.854207,0.00018,udp,147.32.85.25,44493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:16:59.017953,6.682164,tcp,66.249.72.182,53652.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,27,15787,1331,14456,584.7037037037037,0.0843098752137835,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:17:01.345128,8.4e-05,udp,147.32.84.138,59429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:17:02.829253,9.024102,tcp,147.32.84.215,53861.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,3,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:17:09.500382,0.00029,udp,147.32.84.170,60132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:17:19.496740,0.000402,udp,147.32.84.170,50635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:17:19.498822,0.017838,tcp,147.32.84.170,43788.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:17:19.860587,0.000243,udp,109.83.67.219,19159.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:17:26.559317,0.000312,udp,147.32.84.138,56419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:17:28.805710,0.00051,udp,147.32.86.20,60053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:17:29.497802,0.000288,udp,147.32.84.170,36017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:17:39.108951,63.904247,tcp,147.32.84.165,1907.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:17:39.497818,0.000311,udp,147.32.84.170,38441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:17:39.764070,0.000237,udp,147.32.84.138,54001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:17:39.767302,0.000173,udp,147.32.85.25,59606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:17:54.867594,507.495941,udp,97.94.241.101,62071.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,461,337,124,115.25,0.7310195227765727,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:17:58.790741,0.000461,udp,94.38.86.125,54380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,651,75,576,325.5,0.1152073732718894,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:17:59.335168,0.000419,udp,24.141.95.18,30742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,75,474,274.5,0.1366120218579235,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:18:02.118925,0.000412,udp,147.32.86.20,58550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:03.474914,0.000251,udp,147.32.84.138,38303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:05.413584,0.000245,udp,147.32.85.34,62230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:05.476625,0.000295,udp,147.32.85.34,64262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:09.496947,0.00036,udp,147.32.84.170,35410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:09.497812,0.0003,udp,147.32.84.170,50288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:11.145403,0.000314,udp,147.32.84.170,50280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:13.798559,0.294051,tcp,147.32.84.170,47198.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:19.122611,0.132118,udp,147.32.84.229,13363.0,<->,165.124.35.103,50935.0,CON,0.0,0.0,4,2944,60,2884,736.0,0.020380434782608696,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:18:19.139298,0.0,tcp,147.32.84.165,1908.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.139534,0.0,tcp,147.32.84.165,1909.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.145763,0.0,tcp,147.32.84.165,1911.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.316592,0.0,tcp,147.32.84.165,1912.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.316773,0.0,tcp,147.32.84.165,1913.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.336564,0.0,tcp,147.32.84.165,1915.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.497026,0.000333,udp,147.32.84.170,58196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:19.517065,0.0,tcp,147.32.84.165,1916.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:19.517319,0.0,tcp,147.32.84.165,1917.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:20.298014,0.0,tcp,147.32.84.165,1919.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:21.099135,0.0,tcp,147.32.84.165,1922.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:25.117281,0.000329,udp,147.32.84.189,53045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:26.088020,0.000232,udp,147.32.84.138,45462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:29.801712,0.000238,udp,147.32.84.138,46456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:18:31.063701,2748.928955,udp,99.238.8.131,58697.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:18:33.016185,0.0,tcp,147.32.84.165,2149.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016372,0.0,tcp,147.32.84.165,2152.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016388,0.0,tcp,147.32.84.165,2151.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016397,0.0,tcp,147.32.84.165,2153.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016576,0.0,tcp,147.32.84.165,2156.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016589,0.0,tcp,147.32.84.165,2155.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:33.016593,0.0,tcp,147.32.84.165,2157.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:37.869539,11.605901,tcp,78.102.120.211,61910.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,12,839,468,371,69.91666666666667,0.5578069129916567,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:18:39.498027,0.000318,udp,147.32.84.170,55808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:41.147197,0.21161,tcp,147.32.84.170,39116.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:45.033981,0.0,tcp,147.32.84.165,2393.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.034000,61.313999,tcp,147.32.84.165,2381.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:18:45.034004,0.0,tcp,147.32.84.165,2392.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.034008,0.0,tcp,147.32.84.165,2390.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.034191,0.0,tcp,147.32.84.165,2397.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.034205,0.0,tcp,147.32.84.165,2396.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.034210,0.0,tcp,147.32.84.165,2394.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.469026,0.0,tcp,147.32.84.165,2401.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:45.635080,0.0,tcp,147.32.84.165,2404.0,->,147.32.79.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:49.497022,0.000388,udp,147.32.84.170,60484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:49.497963,0.000289,udp,147.32.84.170,39129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:18:57.051044,0.0,tcp,147.32.84.165,2630.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051194,0.0,tcp,147.32.84.165,2633.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051202,0.0,tcp,147.32.84.165,2632.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051258,0.0,tcp,147.32.84.165,2634.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051371,0.0,tcp,147.32.84.165,2637.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051378,0.0,tcp,147.32.84.165,2636.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:18:57.051444,0.0,tcp,147.32.84.165,2638.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:00.141259,6.9e-05,tcp,66.249.68.207,64244.0,->,147.32.85.115,80.0,S_,0.0,,1,74,74,0,74.0,1.0,3,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:19:00.276763,3286.413818,udp,147.32.84.229,13363.0,->,68.59.55.53,61173.0,INT,0.0,,12,2169,2169,0,180.75,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:19:05.094318,3061.513916,udp,95.190.244.80,56680.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:19:09.068083,0.0,tcp,147.32.84.165,2873.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068154,0.0,tcp,147.32.84.165,2872.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068165,0.0,tcp,147.32.84.165,2870.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068261,0.0,tcp,147.32.84.165,2877.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068268,0.0,tcp,147.32.84.165,2876.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068321,0.0,tcp,147.32.84.165,2874.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.068460,0.0,tcp,147.32.84.165,2881.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:09.669547,0.0,tcp,147.32.84.165,2884.0,->,147.32.79.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:11.144170,0.000227,udp,147.32.84.170,46514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:19:11.145004,0.000338,udp,147.32.84.170,59708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:19:13.367873,0.000185,udp,147.32.84.138,33225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:19:19.497116,0.000401,udp,147.32.84.170,53728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:19:19.498096,0.00021,udp,147.32.84.170,49184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:19:21.085818,0.0,tcp,147.32.84.165,3064.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.086138,0.0,tcp,147.32.84.165,3066.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.086676,0.0,tcp,147.32.84.165,3067.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.086810,0.0,tcp,147.32.84.165,3069.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.086820,0.0,tcp,147.32.84.165,3070.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.086948,0.0,tcp,147.32.84.165,3072.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:21.686272,0.0,tcp,147.32.84.165,3073.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:29.117083,3.049408,tcp,66.249.66.187,47649.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,2986,3005687,68420,2937267,1006.5931011386471,0.022763514630764946,3,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 03:19:33.103171,0.0,tcp,147.32.84.165,3246.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.103185,0.0,tcp,147.32.84.165,3244.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.103190,0.0,tcp,147.32.84.165,3249.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.103241,0.0,tcp,147.32.84.165,3247.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.103459,0.0,tcp,147.32.84.165,3252.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.103479,0.0,tcp,147.32.84.165,3250.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:33.603029,0.000533,udp,147.32.85.25,35907.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:19:45.120592,0.0,tcp,147.32.84.165,3427.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.120674,0.0,tcp,147.32.84.165,3425.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.120755,0.0,tcp,147.32.84.165,3430.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.120761,0.0,tcp,147.32.84.165,3428.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.120867,0.0,tcp,147.32.84.165,3433.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.120994,0.0,tcp,147.32.84.165,3431.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:45.721545,0.0,tcp,147.32.84.165,3436.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:46.378493,0.000421,udp,208.88.187.110,33033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,320,69,251,160.0,0.215625,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:19:47.923476,21.694794,tcp,219.84.1.89,49303.0,->,147.32.85.84,13716.0,FSPA_FSPA,0.0,0.0,18,1351,682,669,75.05555555555556,0.5048112509252406,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:19:49.497153,0.000485,udp,147.32.84.170,54429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:19:54.908308,0.601747,udp,174.252.96.181,11005.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1054,934,120,263.5,0.8861480075901328,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:19:55.110495,0.022412,udp,147.32.84.229,13363.0,<->,94.113.3.54,35915.0,CON,0.0,0.0,4,2942,60,2882,735.5,0.020394289598912305,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:19:57.138168,0.0,tcp,147.32.84.165,3606.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.138242,61.297771,tcp,147.32.84.165,3467.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:19:57.138248,0.0,tcp,147.32.84.165,3608.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.138330,0.0,tcp,147.32.84.165,3609.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.138389,0.0,tcp,147.32.84.165,3611.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.138395,0.0,tcp,147.32.84.165,3612.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.568088,0.0,tcp,147.32.84.165,3614.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:57.738899,0.0,tcp,147.32.84.165,3615.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:19:59.499363,0.01804,tcp,147.32.84.170,44673.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:01.571290,0.000383,udp,147.32.84.186,42063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:05.311922,0.000285,udp,147.32.85.34,63004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:09.155056,0.0,tcp,147.32.84.165,3755.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:09.155131,0.0,tcp,147.32.84.165,3757.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:09.155206,0.0,tcp,147.32.84.165,3759.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:09.155215,0.0,tcp,147.32.84.165,3761.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:09.157125,0.0,tcp,147.32.84.165,3763.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:09.498152,0.000279,udp,147.32.84.170,35843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:09.499223,0.018262,tcp,147.32.84.170,41282.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:21.172819,0.0,tcp,147.32.84.165,3875.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:21.172834,0.0,tcp,147.32.84.165,3877.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:21.172880,0.0,tcp,147.32.84.165,3879.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:21.324329,0.000302,udp,147.32.84.138,41373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:21.773251,0.0,tcp,147.32.84.165,3881.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:21.773267,0.0,tcp,147.32.84.165,3883.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:22.421052,0.000303,udp,147.32.84.138,34307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:27.115546,59.964268,tcp,82.177.126.2,33069.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,23,3117,1339,1778,135.52173913043478,0.42957972409367984,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:20:27.317740,0.000364,udp,186.45.186.57,49802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:20:29.497224,0.000359,udp,147.32.84.170,39951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:33.055256,0.000397,udp,24.125.18.22,48009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:20:33.189662,0.0,tcp,147.32.84.165,3995.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:33.189776,0.0,tcp,147.32.84.165,3997.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:33.189790,0.0,tcp,147.32.84.165,3999.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:33.243418,0.000219,udp,147.32.84.138,51451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:33.790897,0.0,tcp,147.32.84.165,4001.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:33.790913,0.0,tcp,147.32.84.165,4003.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:39.496981,0.013349,udp,147.32.84.170,35509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:43.143845,0.000256,udp,147.32.84.170,36523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:43.144563,0.000328,udp,147.32.84.170,37135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:45.207263,0.0,tcp,147.32.84.165,4115.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:45.207363,0.0,tcp,147.32.84.165,4117.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:45.207423,0.0,tcp,147.32.84.165,4119.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:45.451007,0.000463,udp,147.32.85.23,45944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:45.807806,0.0,tcp,147.32.84.165,4121.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:45.807821,0.0,tcp,147.32.84.165,4123.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:49.499197,0.018349,tcp,147.32.84.170,51185.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:20:51.941878,0.000295,udp,147.32.86.20,56316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:20:57.224587,0.0,tcp,147.32.84.165,4235.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:57.224644,0.0,tcp,147.32.84.165,4237.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:57.224790,0.0,tcp,147.32.84.165,4239.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:57.825635,0.0,tcp,147.32.84.165,4241.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:57.825652,0.0,tcp,147.32.84.165,4243.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:57.825657,0.0,tcp,147.32.84.165,4244.0,->,147.32.87.24,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:20:58.226856,0.000416,udp,203.125.81.194,19370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,75,494,284.5,0.13181019332161686,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:20:59.499047,0.017891,tcp,147.32.84.170,34996.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:21:03.451455,0.000447,udp,147.32.84.138,51135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:09.242231,61.32333,tcp,147.32.84.165,4262.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:21:09.242320,0.0,tcp,147.32.84.165,4356.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.242372,0.0,tcp,147.32.84.165,4355.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.242383,0.0,tcp,147.32.84.165,4358.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.242422,0.0,tcp,147.32.84.165,4357.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.498610,0.000634,udp,147.32.84.170,46900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:21:09.677207,0.0,tcp,147.32.84.165,4360.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.842839,0.0,tcp,147.32.84.165,4361.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.842853,0.0,tcp,147.32.84.165,4362.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.842860,0.0,tcp,147.32.84.165,4363.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.842911,0.0,tcp,147.32.84.165,4364.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.842920,0.0,tcp,147.32.84.165,4365.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:09.931580,508.440765,udp,190.213.82.46,20233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:21:19.339675,3064.262695,udp,2.29.93.115,43724.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:21:19.497194,0.00044,udp,147.32.84.170,48754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:21:19.499256,0.018607,tcp,147.32.84.170,51189.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:21:19.645708,0.000291,udp,128.122.182.39,37310.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:21:21.062583,0.000233,udp,147.32.84.138,48913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:21.258925,0.0,tcp,147.32.84.165,4476.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:21.258940,0.0,tcp,147.32.84.165,4478.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:21.259087,0.0,tcp,147.32.84.165,4480.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:21.860174,0.0,tcp,147.32.84.165,4482.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:21.860243,0.0,tcp,147.32.84.165,4484.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:28.097138,0.000231,udp,147.32.84.138,34805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:32.724121,0.000303,udp,147.32.84.138,38694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:33.276755,0.0,tcp,147.32.84.165,4596.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:33.276815,0.0,tcp,147.32.84.165,4598.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:33.276961,0.0,tcp,147.32.84.165,4600.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:33.877361,0.0,tcp,147.32.84.165,4602.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:33.877380,0.0,tcp,147.32.84.165,4604.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:36.519532,9.8e-05,udp,147.32.84.138,46638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:39.251053,1.683132,tcp,202.69.33.143,54105.0,->,147.32.84.229,13363.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:21:40.145567,0.00031,udp,147.32.84.138,38883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:45.293665,0.0,tcp,147.32.84.165,4716.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.293681,0.0,tcp,147.32.84.165,4715.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.293686,0.0,tcp,147.32.84.165,4718.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.293690,0.0,tcp,147.32.84.165,4717.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.293734,0.0,tcp,147.32.84.165,4720.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.895155,0.0,tcp,147.32.84.165,4721.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.895171,0.0,tcp,147.32.84.165,4722.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.895176,0.0,tcp,147.32.84.165,4723.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.895304,0.0,tcp,147.32.84.165,4724.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:45.895318,0.0,tcp,147.32.84.165,4725.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:51.416980,16.069086,tcp,93.91.80.9,1278.0,->,147.32.84.229,80.0,SA_FSA,0.0,0.0,5,302,182,120,60.4,0.6026490066225165,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:21:53.348364,0.000286,udp,206.29.182.130,5255.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,167,100,67,83.5,0.5988023952095808,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:21:56.530129,0.000365,udp,178.219.44.16,34103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:21:56.618452,0.000174,udp,147.32.85.25,57203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:21:57.310830,0.0,tcp,147.32.84.165,4836.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.310901,0.0,tcp,147.32.84.165,4835.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.310908,0.0,tcp,147.32.84.165,4838.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.310963,0.0,tcp,147.32.84.165,4837.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.310970,0.0,tcp,147.32.84.165,4840.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.912343,0.0,tcp,147.32.84.165,4841.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.912430,0.0,tcp,147.32.84.165,4842.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.912436,0.0,tcp,147.32.84.165,4843.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.912497,0.0,tcp,147.32.84.165,4844.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:57.912508,0.0,tcp,147.32.84.165,4845.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:21:59.497218,0.000377,udp,147.32.84.170,55107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:21:59.499269,0.017872,tcp,147.32.84.170,43831.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:05.108265,0.000266,udp,147.32.85.34,53335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:05.147506,0.000252,udp,147.32.85.34,52646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:05.647832,0.000391,udp,147.32.84.170,48605.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:09.328926,0.0,tcp,147.32.84.165,4957.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.328942,0.0,tcp,147.32.84.165,4956.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.328947,0.0,tcp,147.32.84.165,4959.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.328951,0.0,tcp,147.32.84.165,4958.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.328996,0.0,tcp,147.32.84.165,4961.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.498173,0.000388,udp,147.32.84.170,47037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:09.499244,0.017904,tcp,147.32.84.170,36912.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:09.929607,0.0,tcp,147.32.84.165,4962.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.929621,0.0,tcp,147.32.84.165,4963.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.929626,0.0,tcp,147.32.84.165,4964.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.929631,0.0,tcp,147.32.84.165,4983.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:09.929678,0.0,tcp,147.32.84.165,4984.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:14.146031,0.000228,udp,147.32.84.170,33669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:14.147166,0.207963,tcp,147.32.84.170,43300.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:16.873174,3196.655518,udp,95.27.189.32,10347.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2440,1632,808,244.0,0.6688524590163935,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:16.928660,0.000426,udp,70.236.87.254,27366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,76,464,270.0,0.14074074074074075,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:17.244471,0.000222,udp,147.32.85.25,54703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:19.498882,0.017986,tcp,147.32.84.170,36914.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:21.346004,8.912664,tcp,147.32.84.165,1026.0,->,222.189.228.111,3389.0,S_,0.0,,3,186,186,0,62.0,1.0,3,0,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.346018,0.0,tcp,147.32.84.165,1120.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.346073,0.0,tcp,147.32.84.165,1119.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.346087,0.0,tcp,147.32.84.165,1122.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.346166,0.0,tcp,147.32.84.165,1121.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.947006,0.0,tcp,147.32.84.165,1126.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.947020,0.0,tcp,147.32.84.165,1125.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.947025,0.0,tcp,147.32.84.165,1128.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.947073,0.0,tcp,147.32.84.165,1127.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:21.947165,0.0,tcp,147.32.84.165,1130.0,->,147.32.83.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:22.266906,0.000307,udp,147.32.85.25,51228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:24.174555,0.006963,udp,79.239.56.128,14569.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,501,60,280.5,0.893048128342246,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:25.155958,1799.049316,udp,95.85.236.5,42163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,408,286,122,102.0,0.7009803921568627,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:29.499241,0.018286,tcp,147.32.84.170,39687.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:31.474787,0.000287,udp,147.32.84.138,48308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:33.363246,0.0,tcp,147.32.84.165,1239.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.363262,0.0,tcp,147.32.84.165,1240.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.363270,0.0,tcp,147.32.84.165,1241.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.363309,0.0,tcp,147.32.84.165,1242.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.964007,0.0,tcp,147.32.84.165,1245.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.964102,0.0,tcp,147.32.84.165,1246.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.964167,0.0,tcp,147.32.84.165,1247.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.964172,0.0,tcp,147.32.84.165,1248.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:33.964304,0.0,tcp,147.32.84.165,1249.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:22:39.498055,0.000378,udp,147.32.84.170,48215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:39.710912,0.000284,udp,147.32.84.138,42676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:41.333067,0.000289,udp,38.108.77.74,61207.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:43.035095,0.000196,udp,147.32.84.138,41020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:22:44.146563,0.000252,udp,147.32.84.170,60287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:44.148611,0.231734,tcp,147.32.84.170,43304.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:45.140930,2412.303955,udp,186.45.66.203,22911.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,990,742,248,123.75,0.7494949494949495,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:49.497079,0.000345,udp,147.32.84.170,43960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:49.499179,0.018048,tcp,147.32.84.170,56013.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:22:54.279006,3080.999023,udp,147.32.84.232,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,3,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 03:22:57.327335,0.093322,udp,147.32.84.229,13363.0,<->,2.94.227.80,44722.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:57.471359,0.000329,udp,118.161.232.174,53901.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,154,87,67,77.0,0.564935064935065,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:22:58.496905,3175.973145,udp,220.130.66.165,44634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:09.497423,0.000409,udp,147.32.84.170,58408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:09.499443,0.01829,tcp,147.32.84.170,36920.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:14.068669,0.398739,tcp,147.32.84.170,58287.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:14.459951,0.238443,tcp,147.32.84.170,58288.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:15.143663,0.000388,udp,147.32.84.170,47056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:20.711977,4.581736,tcp,75.245.65.17,57894.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,18,1433,818,615,79.61111111111111,0.5708304256803908,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:23:22.476447,2966.064941,udp,66.211.83.108,31330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3520,142,3378,586.6666666666666,0.040340909090909094,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:33.417393,0.000111,udp,147.32.85.25,41169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:23:35.575822,0.698154,udp,174.141.189.127,41974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,692,155,537,173.0,0.2239884393063584,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:37.159511,0.003383,udp,62.216.226.57,51580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2935,60,2875,733.75,0.020442930153321975,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:39.499836,0.00029,udp,147.32.84.170,59465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:39.500652,0.000308,udp,147.32.84.170,58474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:39.608669,0.000626,udp,210.228.196.253,7909.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1437,75,1362,718.5,0.05219206680584551,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:42.283419,0.426773,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,71,126,98.5,0.3604060913705584,3,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 03:23:42.327164,0.000406,udp,197.128.83.82,40386.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,77,486,281.5,0.13676731793960922,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:42.710855,61.290947,tcp,147.32.84.165,1259.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:23:42.813119,3445.275635,udp,147.32.84.229,13363.0,<->,142.58.186.200,9736.0,CON,0.0,0.0,8,3188,256,2932,398.5,0.08030112923462986,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:23:46.141460,0.207886,tcp,147.32.84.170,43318.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:49.497162,0.000452,udp,147.32.84.170,38464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:49.499140,0.017629,tcp,147.32.84.170,39704.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:23:49.606096,0.000363,udp,147.32.84.138,48050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:23:58.825363,0.000289,udp,147.32.85.25,53783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:24:04.980306,0.000282,udp,147.32.85.34,49996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:24:05.017754,0.000319,udp,147.32.85.34,62207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:24:09.498482,0.000274,udp,147.32.84.170,53961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:11.440439,0.000238,udp,147.32.84.59,44682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:24:12.737131,0.000433,udp,71.65.236.91,54268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,568,75,493,284.0,0.13204225352112675,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:24:15.204070,0.000317,udp,147.32.85.25,58352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:24:16.147790,0.255847,tcp,147.32.84.170,43322.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:19.498416,0.00032,udp,147.32.84.170,36297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:19.499532,0.017827,tcp,147.32.84.170,36936.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:23.954628,3008.919678,udp,60.41.208.199,4281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:24:29.497420,0.000439,udp,147.32.84.170,52839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:29.499532,0.018106,tcp,147.32.84.170,56032.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:36.505825,0.075084,udp,147.32.84.229,13363.0,<->,92.247.202.168,7473.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:24:39.498302,0.00031,udp,147.32.84.170,37154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:43.572242,61.29657,tcp,147.32.84.165,1260.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:24:47.146826,0.212154,tcp,147.32.84.170,43326.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:24:54.441024,0.000378,udp,72.152.37.178,53448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:25:09.499613,0.018073,tcp,147.32.84.170,49228.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:17.139487,0.216232,tcp,147.32.84.170,43330.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:19.497509,0.000446,udp,147.32.84.170,43317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:19.499624,0.017977,tcp,147.32.84.170,39716.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:21.856253,0.000295,udp,147.32.84.59,36442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:25:23.103501,0.000466,udp,218.24.172.128,2586.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,76,470,273.0,0.1391941391941392,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:25:23.495108,0.0004,udp,138.38.223.198,4008.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:25:25.063881,3417.763184,udp,147.32.84.229,13363.0,<->,111.240.232.94,57143.0,CON,0.0,0.0,7,4921,3049,1872,703.0,0.6195895143263564,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:25:26.967966,0.000351,udp,147.32.84.59,57713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:25:29.497523,0.000522,udp,147.32.84.170,35297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:36.291477,0.000368,udp,50.0.103.34,56515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,76,488,282.0,0.1347517730496454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:25:39.507675,0.000334,udp,147.32.84.170,58836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:40.390653,0.30798,tcp,147.32.86.20,4811.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:25:44.439330,61.287254,tcp,147.32.84.165,1276.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:25:49.499454,0.018456,tcp,147.32.84.170,56043.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:25:52.648073,0.000287,udp,147.32.84.59,34646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:25:59.498627,0.000308,udp,147.32.84.170,44675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:26:03.612526,3.027675,udp,68.111.173.100,4914.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,649,529,120,162.25,0.8151001540832049,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:26:09.497551,0.000443,udp,147.32.84.170,43072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:26:17.742770,0.000214,udp,147.32.84.138,43484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:26:19.497564,0.000522,udp,147.32.84.170,46593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:26:19.703138,0.000394,udp,190.139.215.168,8876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:26:20.643787,0.000187,udp,147.32.84.138,34041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:26:23.597990,0.000551,udp,117.4.143.127,10160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1057,83,974,528.5,0.07852412488174078,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:26:25.889483,0.136022,tcp,147.32.86.20,4850.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,38,29241,1033,28208,769.5,0.035327109195991926,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:26:28.589616,0.000375,udp,147.32.85.25,53555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:26:40.827612,0.000267,udp,147.32.84.138,47276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:26:45.297484,61.286751,tcp,147.32.84.165,1277.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:26:46.076723,0.000466,udp,147.32.84.68,64374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:26:49.497525,0.000456,udp,147.32.84.170,48648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:26:49.498521,0.000275,udp,147.32.84.170,38652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:26:59.449021,0.83252,tcp,147.32.84.68,53427.0,->,63.245.209.92,443.0,SRPA_FSPA,0.0,0.0,14,5274,1753,3521,376.7142857142857,0.332385286310201,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:26:59.497679,0.000409,udp,147.32.84.170,46498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:27:09.498480,0.000323,udp,147.32.84.170,59871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:27:09.545081,0.000229,udp,147.32.85.25,50457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:27:19.499769,0.017949,tcp,147.32.84.170,44277.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:27:23.901404,1.202513,tcp,199.87.232.73,12730.0,->,147.32.85.100,8080.0,S_RA,0.0,0.0,6,378,198,180,63.0,0.5238095238095238,3,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:27:26.015863,0.000317,udp,147.32.86.20,53161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:27:31.916441,0.000195,udp,147.32.84.138,59246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:27:34.523642,153.9272,udp,113.169.255.129,41121.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1048,928,120,262.0,0.8854961832061069,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:27:46.154975,61.288006,tcp,147.32.84.165,1278.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:27:47.139429,0.000328,udp,147.32.84.170,42599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:27:49.497682,0.000415,udp,147.32.84.170,54174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:27:49.672985,0.000293,udp,61.221.70.165,13878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:27:55.907257,0.00347,udp,91.122.183.133,13993.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2934,60,2874,733.5,0.02044989775051125,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:27:59.499678,0.018042,tcp,147.32.84.170,44282.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:03.449735,0.000398,udp,174.127.62.251,37543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:28:05.231899,0.000433,udp,222.252.24.159,45696.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,79,477,278.0,0.1420863309352518,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:28:09.497734,0.000331,udp,147.32.84.170,39044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:13.206707,0.251328,tcp,147.32.84.170,51208.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:13.709399,0.34798,tcp,147.32.84.170,51211.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:14.353946,0.293523,tcp,147.32.84.170,59691.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:19.497643,0.000425,udp,147.32.84.170,58880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:19.499776,0.018037,tcp,147.32.84.170,43880.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:21.629839,0.00022,udp,147.32.85.25,57213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:28:33.457732,0.206291,tcp,147.32.86.20,4963.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:28:39.498582,0.000374,udp,147.32.84.170,53949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:42.904711,0.033206,udp,147.32.84.229,13363.0,<->,84.73.159.154,28417.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:28:47.013816,63.856667,tcp,147.32.84.165,1279.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:28:47.146524,0.000278,udp,147.32.84.170,53386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:47.148652,0.224791,tcp,147.32.84.170,50116.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:48.730486,4.717161,udp,166.250.64.74,4694.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:28:49.501328,0.018107,tcp,147.32.84.170,44301.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:28:51.254356,7.99566,udp,147.32.87.48,1666.0,->,147.32.86.244,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,3,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:28:54.204300,0.000233,udp,147.32.84.138,57387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:28:59.497856,0.000386,udp,147.32.84.170,37062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:01.038988,0.000217,udp,147.32.84.138,43374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:29:06.230365,3169.454102,udp,67.80.167.125,40946.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:29:09.497799,0.000377,udp,147.32.84.170,41122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:09.499683,0.01866,tcp,147.32.84.170,50685.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:18.146009,0.00041,udp,147.32.84.170,47161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:19.497536,0.000427,udp,147.32.84.170,51818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:19.498485,0.000311,udp,147.32.84.170,57381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:27.844223,0.000109,udp,147.32.85.89,40551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:29:27.952160,0.000472,udp,76.124.27.52,61587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:29:28.214742,0.000244,udp,147.32.84.184,55246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:29:28.306663,0.000293,udp,147.32.84.59,47820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:29:29.499767,0.017873,tcp,147.32.84.170,50688.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:29.575606,0.000507,udp,98.226.129.247,33086.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,76,484,280.0,0.1357142857142857,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:29:39.500251,0.000444,udp,147.32.84.170,44016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:48.476306,0.000407,udp,147.32.84.59,49288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:29:49.146811,0.000388,udp,147.32.84.170,34888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:49.500956,0.017876,tcp,147.32.84.170,46925.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:29:50.435708,64.357758,tcp,147.32.84.165,1280.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:30:01.347024,1800.050659,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,2,120,0,120,60.0,0.0,3,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:30:01.912471,0.000239,udp,147.32.87.36,41573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,86,176,131.0,0.3282442748091603,3,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:30:01.913407,0.000277,udp,147.32.87.36,50564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,3,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:30:05.541937,0.000248,udp,147.32.85.34,62274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:30:05.558121,0.000331,udp,147.32.85.34,63926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:30:05.573260,0.000281,udp,147.32.85.34,60422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:30:09.498590,0.000399,udp,147.32.84.170,40481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:09.499528,0.000269,udp,147.32.84.170,60058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:12.174614,0.00047,udp,208.54.39.204,21547.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:30:19.500456,0.018079,tcp,147.32.84.170,43895.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:29.498687,0.000334,udp,147.32.84.170,49385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:29.500593,0.018373,tcp,147.32.84.170,46930.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:32.940484,0.000327,udp,201.216.165.154,48081.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:30:37.854718,8.5e-05,udp,147.32.85.89,44380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:30:39.498858,0.11158,udp,147.32.84.170,60186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:39.612114,0.018344,tcp,147.32.84.170,46931.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:39.693523,0.408947,tcp,147.32.84.164,41013.0,->,208.64.202.252,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,3,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 03:30:50.145909,0.000156,udp,147.32.84.170,46897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:50.146616,0.000262,udp,147.32.84.170,45328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:30:51.313003,64.184174,tcp,147.32.84.165,1281.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:30:51.600460,0.00043,udp,59.18.90.39,19985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:30:55.919979,0.000448,udp,70.126.29.112,27916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,600,75,525,300.0,0.125,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:30:59.498792,0.000339,udp,147.32.84.170,57841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:03.996134,0.000332,udp,147.32.84.171,54208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,92,142,117.0,0.39316239316239315,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:31:06.215204,0.000546,udp,147.32.86.20,63072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:31:09.500897,0.017523,tcp,147.32.84.170,46935.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:14.495295,1830.901367,udp,79.97.154.50,55006.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:31:19.499690,0.000314,udp,147.32.84.170,37705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:21.148028,0.231176,tcp,147.32.84.170,50137.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:29.499036,0.0004,udp,147.32.84.170,58751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:29.499957,0.000366,udp,147.32.84.170,37716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:29.501020,0.018083,tcp,147.32.84.170,46938.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:29.631973,0.000113,icmp,147.32.87.249,,<-,147.32.87.2,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,3,1,flow=Background,Background,-1 2011-08-17 03:31:33.428926,0.003469,udp,84.229.149.241,1867.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2935,60,2875,733.75,0.020442930153321975,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:31:39.379400,0.004383,udp,203.123.36.119,2798.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2934,60,2874,733.5,0.02044989775051125,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:31:45.513031,0.000174,udp,147.32.84.138,53546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:31:49.498906,0.000468,udp,147.32.84.170,58571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:51.850622,0.000153,udp,147.32.84.138,39624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:31:52.145907,0.000304,udp,147.32.84.170,46269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:52.147188,0.210867,tcp,147.32.84.170,50141.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:31:52.181315,64.297554,tcp,147.32.84.165,1282.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:31:53.667579,129.196213,tcp,147.32.84.25,44045.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,10,2775,1597,1178,277.5,0.5754954954954955,3,1,flow=Background-google-analytics13,Background,-1 2011-08-17 03:31:59.499625,0.00039,udp,147.32.84.170,56647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:32:02.163745,0.000237,udp,147.32.85.25,57802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:32:04.331752,0.000306,udp,147.32.84.59,34693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:32:06.137743,0.016721,tcp,147.32.84.59,51896.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 03:32:07.555007,3082.618896,udp,180.1.57.170,60520.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:32:09.499885,0.000288,udp,147.32.84.170,59385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:32:19.286675,0.137442,udp,147.32.84.229,13363.0,<->,173.33.155.60,15263.0,CON,0.0,0.0,2,295,200,95,147.5,0.6779661016949152,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:32:29.498759,0.000249,udp,147.32.84.170,46614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:32:30.233190,0.000295,udp,147.32.84.59,46574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:32:56.044131,64.141747,tcp,147.32.84.165,1283.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:32:56.193260,0.000291,udp,147.32.84.59,53171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:32:59.394734,0.000301,udp,207.168.234.151,52488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:32:59.498887,0.000381,udp,147.32.84.170,32803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:01.402473,0.000335,udp,147.32.84.59,46503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:33:06.718600,0.000223,udp,147.32.84.138,50619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:33:09.499763,0.00033,udp,147.32.84.170,34136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:12.137636,0.000273,udp,147.32.84.138,56791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:33:13.488095,0.269014,tcp,147.32.84.170,34901.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:13.749388,0.260766,tcp,147.32.84.170,34903.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:14.010614,0.271483,tcp,147.32.84.170,53759.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:19.504584,0.017946,tcp,147.32.84.170,40894.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:23.148429,0.00026,udp,147.32.84.170,38437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:24.234037,7.406293,udp,76.31.208.54,46341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,667,546,121,166.75,0.8185907046476761,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:33:37.348869,0.135011,tcp,147.32.86.20,1260.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:33:39.498693,0.000398,udp,147.32.84.170,38033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:39.499433,0.000446,udp,147.32.84.170,40406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:39.500296,0.017963,tcp,147.32.84.170,52434.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:49.749751,0.047731,udp,166.248.40.48,4003.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:33:54.147589,0.214943,tcp,147.32.84.170,60125.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:33:56.911176,63.485546,tcp,147.32.84.165,1284.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:33:57.246046,0.000165,udp,147.32.84.138,55771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:33:59.499827,0.000417,udp,147.32.84.170,40868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:03.692407,0.000313,udp,220.130.237.28,46951.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:34:05.186078,0.000331,udp,147.32.85.34,50041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:05.236481,0.00029,udp,147.32.85.34,58882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:05.242485,0.000243,udp,147.32.85.34,50105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:09.500904,0.017716,tcp,147.32.84.170,48545.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:13.225979,0.0,tcp,76.164.193.170,80.0,->,147.32.86.24,36962.0,SA_,0.0,,1,62,62,0,62.0,1.0,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:34:19.868439,0.000209,udp,147.32.84.138,53079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:24.148160,0.229646,tcp,147.32.84.170,60129.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:24.274532,9.12758,udp,112.206.175.87,8351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1100,554,546,275.0,0.5036363636363637,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:34:26.217969,6.016264,tcp,66.249.72.89,44954.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,5198,799,4399,371.2857142857143,0.15371296652558677,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:34:27.041584,0.000156,udp,147.32.84.138,52734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:39.498701,0.000335,udp,147.32.84.170,45187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:39.499634,0.000355,udp,147.32.84.170,46962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:49.500890,0.018203,tcp,147.32.84.170,48550.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:52.890995,0.000197,udp,147.32.85.89,49676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:34:53.628016,0.000396,udp,190.146.252.198,64786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,603,74,529,301.5,0.12271973466003316,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:34:59.504260,0.017676,tcp,147.32.84.170,59629.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:34:59.961885,61.297401,tcp,147.32.84.165,1285.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:35:00.812329,3446.144531,udp,147.32.87.37,42164.0,->,147.32.86.96,514.0,INT,0.0,,384,60766,60766,0,158.24479166666666,1.0,3,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:35:04.414038,1.459267,tcp,147.32.86.92,59533.0,->,147.32.87.30,4949.0,_SPA,,0.0,60,16228,0,16228,270.46666666666664,0.0,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:35:09.499895,0.000309,udp,147.32.84.170,58165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:35:16.707243,0.000405,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,3,1,flow=Background,Background,-1 2011-08-17 03:35:23.008750,0.000485,udp,110.45.81.207,42888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:35:26.147675,0.242471,tcp,147.32.84.170,60137.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:35:26.240728,0.00039,udp,147.32.86.20,60667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:35:31.936647,0.000239,udp,147.32.85.25,44646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:35:35.009889,0.000403,udp,96.10.4.152,63206.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:35:35.114172,0.150083,udp,147.32.84.229,13363.0,<->,77.39.31.160,20641.0,CON,0.0,0.0,4,2951,60,2891,737.75,0.020332090816672314,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:35:42.083610,0.000327,udp,147.32.85.25,58597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:35:49.499740,0.000271,udp,147.32.84.170,35233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:35:49.500714,0.018068,tcp,147.32.84.170,48558.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:35:57.148959,0.000197,udp,147.32.84.170,52805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:35:59.201270,0.00016,udp,147.32.84.138,56453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:35:59.500024,0.000277,udp,147.32.84.170,45929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:00.829713,61.313892,tcp,147.32.84.165,1286.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:36:05.068735,0.000239,udp,147.32.85.34,63823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:05.094583,0.00024,udp,147.32.85.34,59873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:05.150783,0.000288,udp,186.225.76.16,63861.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:36:07.039295,0.000454,udp,188.17.66.64,63098.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:36:09.501230,0.018016,tcp,147.32.84.170,59638.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:15.077092,0.000156,udp,147.32.84.138,40436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:19.501088,0.01808,tcp,147.32.84.170,50662.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:22.830654,0.000406,udp,147.32.84.59,37815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:22.916132,0.000443,udp,147.32.85.25,54559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:22.916717,0.000572,udp,147.32.85.25,56822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:27.915274,0.000296,udp,147.32.84.79,53357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:29.500094,0.000298,udp,147.32.84.170,46004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:31.092478,0.000323,udp,147.32.84.138,33425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:38.887411,2958.806396,udp,147.32.84.229,13363.0,<->,128.122.140.176,5748.0,CON,0.0,0.0,6,408,194,214,68.0,0.47549019607843135,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:36:39.498853,0.00036,udp,147.32.84.170,53143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:39.499756,0.000244,udp,147.32.84.170,54021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:41.325210,0.000294,udp,147.32.84.138,57002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:36:45.941909,0.001171,udp,190.191.222.129,55068.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:36:49.499671,0.000337,udp,147.32.84.170,59058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:49.500746,0.017947,tcp,147.32.84.170,59643.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:59.145947,0.000466,udp,147.32.84.170,38262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:36:59.146944,0.000335,udp,147.32.84.170,34470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:37:01.708894,64.195854,tcp,147.32.84.165,1287.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:37:09.500944,0.017754,tcp,147.32.84.170,50669.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:37:13.510976,1.017497,tcp,147.32.86.20,1456.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,93907,1646,92261,988.4947368421052,0.017527979809811835,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:37:13.982297,3075.263184,udp,216.164.52.111,43076.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:37:19.499943,0.000286,udp,147.32.84.170,51901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:37:20.568972,0.000277,udp,200.2.153.155,47183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:37:28.137926,0.1353,tcp,147.32.86.20,1469.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:37:30.234205,0.000315,udp,46.53.161.25,15613.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:37:49.502265,0.000382,udp,147.32.84.170,47456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:00.137921,0.285728,tcp,147.32.84.170,54909.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:03.510904,0.000332,udp,147.32.84.138,47960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:03.605152,9.056676,tcp,186.34.141.126,43712.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,23,2021,1011,1010,87.8695652173913,0.500247402276101,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:38:05.469325,61.29723,tcp,147.32.84.165,1288.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:38:07.863588,1122.182129,udp,174.102.158.71,13990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1106,563,543,276.5,0.5090415913200723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:38:09.498914,0.000353,udp,147.32.84.170,43833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:12.806855,0.000672,icmp,147.32.86.96,,<-,147.32.87.52,47150.0,RED,,0.0,2,196,0,196,98.0,0.0,3,0,flow=Background,Background,-1 2011-08-17 03:38:13.492098,0.251574,tcp,147.32.84.170,59755.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:13.550010,0.446423,tcp,147.32.84.170,35661.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:14.225774,465.55246,tcp,147.32.84.170,38151.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,102,38154,27480,10674,374.05882352941177,0.7202390312942286,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:14.226197,250.04631,tcp,147.32.84.170,38152.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:14.226603,240.045349,tcp,147.32.84.170,38153.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:14.997578,0.000455,udp,147.32.84.138,52144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:19.502864,0.000319,udp,147.32.84.170,50307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:19.503932,0.017985,tcp,147.32.84.170,45883.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:21.283755,0.000242,udp,147.32.84.59,48633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:22.136621,0.000372,udp,147.32.85.89,52936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:22.193992,0.000188,udp,147.32.85.34,62561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:31.302757,0.000273,udp,147.32.84.138,42142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:39.499194,0.000442,udp,147.32.84.170,41330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:42.610478,0.000251,udp,147.32.84.59,45514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:38:49.499070,0.00034,udp,147.32.84.170,46148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:38:55.921961,0.206804,tcp,147.32.86.20,1548.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:39:03.408013,0.000521,udp,70.102.121.43,54698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,72,471,271.5,0.13259668508287292,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:39:04.381117,0.000386,udp,109.45.0.21,17051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:39:06.337164,61.313187,tcp,147.32.84.165,1289.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:39:09.499194,0.000348,udp,147.32.84.170,59206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:39:09.501337,0.018338,tcp,147.32.84.170,45890.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:39:09.771410,0.000313,udp,147.32.86.20,49454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:39:11.700707,0.000281,udp,147.32.85.25,53247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:39:14.336345,0.000299,udp,147.32.84.138,43441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:39:19.499095,0.000527,udp,147.32.84.170,46715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:39:19.565498,0.000366,udp,98.65.208.79,7645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:39:21.906018,0.000213,udp,147.32.85.25,40732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:39:23.595106,6.560703,tcp,66.249.72.176,53627.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,34,17718,1700,16018,521.1176470588235,0.09594762388531437,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:39:29.501151,0.018247,tcp,147.32.84.170,53454.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:39:33.146869,0.000327,udp,147.32.84.170,57660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:39:37.887512,0.00025,udp,123.50.68.2,56357.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:39:41.007961,2827.135254,arp,147.32.87.52,,who,147.32.87.49,,RSP,,,8,480,0,480,60.0,0.0,3,,flow=Background,Background,-1 2011-08-17 03:39:49.500097,0.000355,udp,147.32.84.170,55113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:04.157295,0.000264,udp,147.32.84.170,56577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:05.802061,0.000177,udp,147.32.85.34,58623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:07.215356,61.313057,tcp,147.32.84.165,1290.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:40:10.951333,0.000432,udp,147.32.84.170,54341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:12.880920,0.000241,udp,147.32.85.25,44866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:13.519117,951.457825,udp,178.208.208.73,43919.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,731,545,186,121.83333333333333,0.7455540355677155,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:20.443661,0.0,tcp,76.164.193.170,80.0,->,147.32.85.69,47178.0,SA_,0.0,,1,62,62,0,62.0,1.0,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:40:21.386845,0.000349,udp,147.32.84.79,34975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:23.326951,0.000102,udp,147.32.85.25,33067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:24.307622,0.000435,udp,41.214.18.224,37274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:29.499995,0.000328,udp,147.32.84.170,56953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:29.501138,0.017921,tcp,147.32.84.170,53463.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:34.629735,0.051603,udp,147.32.84.229,13363.0,<->,79.125.238.130,58996.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:35.150338,0.217177,tcp,147.32.84.170,54942.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:36.187409,0.000295,udp,112.200.148.164,1027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:36.613078,0.000219,udp,147.32.84.138,59215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:39.498995,0.019991,udp,147.32.84.170,44371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:39.520612,0.017912,tcp,147.32.84.170,53465.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:43.861705,0.000241,udp,147.32.84.138,33686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:46.156975,0.000315,udp,147.32.84.21,56532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:40:49.499273,0.000416,udp,147.32.84.170,33808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:40:52.146224,0.308392,tcp,147.32.86.20,1650.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:40:53.080943,3021.044678,udp,184.163.180.69,10898.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:57.203057,0.173579,udp,147.32.84.229,13363.0,<->,70.126.185.33,60110.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:40:57.215623,0.000243,udp,114.144.31.124,5558.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:06.146618,0.000308,udp,147.32.84.170,35586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:41:07.382186,0.000413,udp,220.244.241.114,12533.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:08.093688,61.297581,tcp,147.32.84.165,1291.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:41:08.151056,0.045339,udp,147.32.84.229,13363.0,<->,149.5.45.5,43042.0,CON,0.0,0.0,2,235,172,63,117.5,0.7319148936170212,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:08.151061,0.11907,udp,147.32.84.229,13363.0,<->,208.88.186.10,34016.0,CON,0.0,0.0,2,235,172,63,117.5,0.7319148936170212,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:17.095284,0.408907,udp,147.32.84.229,13363.0,<->,189.24.67.233,56603.0,CON,0.0,0.0,3,2850,60,2790,950.0,0.021052631578947368,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:19.501365,0.017922,tcp,147.32.84.170,45425.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:41:21.861547,0.000566,udp,87.172.103.246,3960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,75,509,292.0,0.1284246575342466,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:22.731869,0.000509,udp,92.230.54.96,36398.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,77,496,286.5,0.1343804537521815,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:29.395782,0.000488,udp,113.161.196.235,64282.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,74,481,277.5,0.13333333333333333,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:29.652463,0.000211,udp,147.32.85.25,56461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:31.301733,3061.831543,udp,67.187.253.241,1402.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:32.945051,0.000203,udp,147.32.85.89,32946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:35.025582,0.00017,udp,147.32.85.25,38284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:39.500244,0.000433,udp,147.32.84.170,36629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:41:42.522561,0.000326,udp,147.32.86.20,50154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:43.890387,3027.680664,udp,119.203.112.2,20254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:49.499197,0.000421,udp,147.32.84.170,33772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:41:49.500154,0.000289,udp,147.32.84.170,52563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:41:54.844410,0.000378,udp,189.117.254.37,26885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:41:55.273575,0.000157,udp,147.32.84.138,40164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:55.303139,0.000218,udp,147.32.84.138,58864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:41:59.500089,0.000385,udp,147.32.84.170,55281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:05.636833,0.000255,udp,147.32.85.34,50648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:08.960562,61.314171,tcp,147.32.84.165,1292.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:42:09.500954,0.018619,tcp,147.32.84.170,52562.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:14.262347,0.000204,udp,147.32.84.138,35622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:17.655979,0.0,icmp,113.76.27.246,8.0,->,147.32.87.210,4.0,ECO,0.0,,1,60,60,0,60.0,1.0,3,1,flow=Background,Background,-1 2011-08-17 03:42:19.499875,0.000297,udp,147.32.84.170,48653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:25.586403,0.000314,udp,147.32.86.20,64235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:28.852270,3597.382324,udp,147.32.84.25,43670.0,<->,82.208.56.89,123.0,CON,0.0,0.0,52,4680,2340,2340,90.0,0.5,3,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 03:42:29.309956,0.000278,udp,147.32.84.79,41365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:29.499109,0.000321,udp,147.32.84.170,36536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:32.995294,2930.258789,udp,133.23.180.81,64690.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,675,554,121,168.75,0.8207407407407408,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:42:39.147592,0.000312,udp,147.32.84.170,39920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:39.500944,0.01795,tcp,147.32.84.170,54280.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:42:45.335989,0.000351,udp,147.32.84.59,52797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,359,85,274,179.5,0.23676880222841226,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:48.705173,0.000441,udp,81.204.214.173,63695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:42:55.642543,0.000233,udp,147.32.84.138,41401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:42:59.501282,0.018121,tcp,147.32.84.170,39297.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:02.961657,0.000354,udp,147.32.86.20,63109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:43:03.025804,20.605452,tcp,147.32.86.89,4264.0,->,88.86.103.83,80.0,SRPA_SPA,0.0,0.0,3394,3371934,74320,3297614,993.4985268120212,0.022040763549938995,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:43:04.040877,0.000169,udp,147.32.84.138,33830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:43:04.815655,0.000311,udp,98.245.133.54,8350.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:43:05.411086,0.00023,udp,147.32.86.119,5712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:43:07.022207,0.000356,udp,70.67.10.252,63788.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:43:08.569384,1717.101196,udp,98.234.185.116,54701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1078,148,930,269.5,0.137291280148423,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:43:09.499338,0.000269,udp,147.32.84.170,48241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:09.839208,61.345371,tcp,147.32.84.165,1293.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:43:14.058067,0.296598,tcp,147.32.84.170,40713.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:14.349643,0.552218,tcp,147.32.84.170,54978.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:19.500087,0.000337,udp,147.32.84.170,46894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:19.501081,0.018104,tcp,147.32.84.170,46664.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:29.499346,0.000439,udp,147.32.84.170,37516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:29.815361,0.000212,udp,147.32.84.138,37804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:43:29.815371,0.000211,udp,147.32.84.138,55153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:43:47.078138,9.015504,tcp,166.137.142.154,6318.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,588,222,366,73.5,0.37755102040816324,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:43:49.499242,0.000486,udp,147.32.84.170,60645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:49.500294,0.000343,udp,147.32.84.170,45620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:49.501388,0.018056,tcp,147.32.84.170,51038.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:59.501379,0.01763,tcp,147.32.84.170,46669.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:43:59.778587,0.000411,icmp,147.32.87.249,,<-,147.32.87.48,2.0,RED,,0.0,2,148,0,148,74.0,0.0,3,1,flow=Background,Background,-1 2011-08-17 03:44:03.873247,0.000301,udp,62.245.108.69,46593.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,154,94,60,77.0,0.6103896103896104,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:44:09.500323,0.000209,udp,147.32.84.170,43608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:09.501277,0.017777,tcp,147.32.84.170,48694.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:10.706775,61.507118,tcp,147.32.84.165,1294.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:44:15.675620,0.000332,udp,115.170.133.141,64501.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:44:16.091256,0.961435,tcp,147.32.86.20,1831.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,94,93695,1646,92049,996.7553191489362,0.01756763968194674,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:44:19.499310,0.000395,udp,147.32.84.170,51874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:29.904075,0.205459,tcp,147.32.86.20,1844.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:44:31.413606,11.434632,tcp,186.114.239.190,53351.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,18,6025,801,5224,334.72222222222223,0.13294605809128632,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:44:39.499481,0.000369,udp,147.32.84.170,52194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:39.500381,0.000413,udp,147.32.84.170,34478.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:41.146284,0.000341,udp,147.32.84.170,56603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:41.575434,2237.720215,udp,147.32.84.145,52295.0,<->,82.100.63.250,123.0,CON,0.0,0.0,33,2970,1530,1440,90.0,0.5151515151515151,3,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 03:44:47.860325,0.000431,udp,196.212.27.12,36802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,76,472,274.0,0.1386861313868613,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:44:49.364500,0.000298,udp,74.236.148.174,50705.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:44:49.499409,0.000336,udp,147.32.84.170,32867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:44:58.994704,3031.241699,udp,115.66.100.250,7976.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:45:09.503836,0.018168,tcp,147.32.84.170,48702.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:45:11.684827,64.572006,tcp,147.32.84.165,1295.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:45:12.148789,0.215409,tcp,147.32.84.170,41754.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:45:15.897510,0.000107,udp,147.32.84.138,56871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:45:19.500381,0.000232,udp,147.32.84.170,39632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:45:20.934515,0.0,icmp,147.32.86.96,771.0,->,219.146.8.78,50195.0,URP,0.0,,1,479,479,0,479.0,1.0,3,0,flow=Background,Background,-1 2011-08-17 03:45:21.782201,1193.529663,udp,68.202.55.135,2653.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3162,3040,122,527.0,0.9614168247944339,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:45:25.919286,0.0018,udp,112.198.78.107,44872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,607,547,60,303.5,0.9011532125205931,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:45:34.241358,0.000242,udp,147.32.84.138,38041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:45:35.368299,0.000103,udp,147.32.85.25,37710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:45:56.033081,0.20681,tcp,147.32.86.20,1918.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:45:58.671917,0.000449,udp,74.87.18.97,55897.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:46:05.645635,0.000295,udp,147.32.85.34,52982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:46:09.499467,0.000529,udp,147.32.84.170,52534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:10.823731,0.000304,udp,147.32.84.138,43506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:46:12.752843,61.595299,tcp,147.32.84.165,1296.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:46:19.501902,0.000497,udp,147.32.84.170,60285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:19.502866,0.000255,udp,147.32.84.170,48727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:29.163856,8.7e-05,udp,147.32.84.138,50770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:46:29.500395,0.000264,udp,147.32.84.170,48314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:33.022352,0.000332,udp,174.50.219.248,44894.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:46:35.133618,0.000444,udp,183.7.65.145,60225.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,75,498,286.5,0.13089005235602094,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:46:39.502896,0.01768,tcp,147.32.84.170,51060.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:42.700775,21.069033,tcp,147.32.85.74,41671.0,->,86.49.87.107,6889.0,S_,0.0,,5,370,370,0,74.0,1.0,3,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:46:44.148344,0.000313,udp,147.32.84.170,36823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:49.500149,0.000385,udp,147.32.84.170,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:46:52.299698,6.392348,tcp,66.249.72.176,43916.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,28,12382,1527,10855,442.2142857142857,0.12332418026167016,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:46:56.872074,5.982495,tcp,66.249.72.65,50369.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,24,12956,1137,11819,539.8333333333334,0.08775856745909232,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:47:06.934234,0.00016,udp,147.32.84.59,43137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:47:09.500400,0.00043,udp,147.32.84.170,38394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:47:13.832142,61.541691,tcp,147.32.84.165,1297.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:47:15.137572,0.235471,tcp,147.32.84.170,60892.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:47:25.868904,0.000163,udp,147.32.84.138,53045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:47:28.632873,2055.170898,udp,147.53.131.113,64196.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2156,1197,959,179.66666666666666,0.5551948051948052,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:47:33.629287,0.000255,udp,147.32.85.25,33333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:47:35.190897,0.169593,tcp,147.32.86.20,2005.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,75,71090,1631,69459,947.8666666666667,0.022942748628499085,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:47:36.300063,0.00025,udp,147.32.84.138,36538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:47:38.949679,0.0002,udp,147.32.85.25,39723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:47:39.504476,0.018182,tcp,147.32.84.170,55119.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:47:46.147303,0.000404,udp,147.32.84.170,52732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:47:49.501233,0.000237,udp,147.32.84.170,51154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:05.463327,0.000381,udp,147.32.85.34,62554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:05.654931,0.000257,udp,147.32.84.138,40782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:07.299954,0.000266,udp,147.32.87.36,59261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,3,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 03:48:09.502496,0.000298,udp,147.32.84.170,45769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:12.073357,0.021114,tcp,46.234.102.59,49418.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,14,6074,618,5456,433.85714285714283,0.10174514323345407,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:48:14.225746,0.000282,udp,147.32.84.170,40916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:14.859510,61.535625,tcp,147.32.84.165,1298.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:48:15.516624,0.00031,udp,147.32.84.138,50490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:16.149749,0.000369,udp,147.32.84.170,40319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:18.231332,0.000231,udp,147.32.84.138,57552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:23.527535,0.000377,udp,87.10.191.183,17467.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:48:24.894862,2525.13501,udp,202.81.18.30,24234.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:48:28.007681,0.966234,tcp,147.32.86.20,2050.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,93589,1526,92063,1017.2717391304348,0.01630533502868927,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:48:29.500589,0.000366,udp,147.32.84.170,33862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:29.501435,0.000321,udp,147.32.84.170,36494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:30.280116,269.657135,udp,202.0.159.46,2412.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2176,312,1864,272.0,0.14338235294117646,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:48:35.541062,0.000295,udp,147.32.85.25,52575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:35.894644,0.000195,udp,147.32.85.25,40862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:41.118603,0.000164,udp,147.32.84.138,34591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:48:42.960711,5.012695,udp,71.96.113.79,50082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1257,1076,181,209.5,0.8560063643595863,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:48:46.148495,0.000344,udp,147.32.84.170,36142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:48:49.501383,0.000416,udp,147.32.84.170,40061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:01.339046,0.000202,udp,147.32.85.25,52331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:49:09.501436,0.000298,udp,147.32.84.170,60212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:09.502510,0.018476,tcp,147.32.84.170,48297.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:15.908009,64.393456,tcp,147.32.84.165,1299.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:49:16.136615,0.000267,udp,147.32.84.170,55219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:16.137805,0.205949,tcp,147.32.84.170,60918.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:16.541340,0.934543,tcp,123.125.67.181,57691.0,->,147.32.84.2,80.0,SRPA_FSPA,0.0,0.0,9,954,470,484,106.0,0.49266247379454925,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:49:19.501480,0.000295,udp,147.32.84.170,37646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:19.502520,0.017768,tcp,147.32.84.170,40596.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:39.501630,0.000313,udp,147.32.84.170,52266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:39.510057,0.206408,tcp,147.32.86.20,2113.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:49:46.148231,0.000221,udp,147.32.84.170,58554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:49.502325,0.017812,tcp,147.32.84.170,38037.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:49:50.883313,0.00044,udp,147.32.86.20,60858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:49:57.877638,0.000159,udp,147.32.85.25,40464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:50:02.940114,0.000408,udp,194.177.202.3,43559.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,78,469,273.5,0.1425959780621572,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:05.293535,0.000196,udp,147.32.85.34,54499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:50:08.119634,0.0,icmp,147.32.87.53,771.0,->,180.34.220.10,28952.0,URP,0.0,,1,70,70,0,70.0,1.0,3,0,flow=Background,Background,-1 2011-08-17 03:50:16.147921,0.000315,udp,147.32.84.170,56726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:50:16.148801,0.000328,udp,147.32.84.170,41226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:50:16.876036,61.435013,tcp,147.32.84.165,1300.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:50:17.595375,2961.295898,udp,219.39.3.11,52542.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:19.500626,0.000364,udp,147.32.84.170,60275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:50:26.324224,0.00052,udp,212.232.48.161,48579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,77,466,271.5,0.141804788213628,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:31.725146,0.000429,udp,96.61.163.166,12283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,78,483,280.5,0.13903743315508021,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:39.511890,0.017776,tcp,147.32.84.170,55153.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:50:48.462941,5.483975,tcp,92.97.7.21,1102.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,22,3111,1430,1681,141.4090909090909,0.45965927354548375,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:50:50.467079,0.001695,udp,189.29.154.167,35875.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,585,525,60,292.5,0.8974358974358975,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:58.293937,0.000375,udp,74.88.5.137,1620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,160,93,67,80.0,0.58125,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:50:59.501407,0.000389,udp,147.32.84.170,56360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:02.972835,0.000394,udp,147.32.84.171,32961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:09.501516,0.00038,udp,147.32.84.170,35035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:09.502639,0.017853,tcp,147.32.84.170,40610.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:16.147602,0.000418,udp,147.32.84.170,54569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:17.843366,61.415051,tcp,147.32.84.165,1301.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:51:19.500550,0.000387,udp,147.32.84.170,47524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:20.120075,0.000208,udp,147.32.85.25,49439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:21.739423,0.000358,udp,147.32.84.170,60695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:21.777526,0.000188,udp,147.32.84.170,57455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:22.366321,758.341858,udp,50.83.59.168,26025.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2893,453,2440,241.08333333333334,0.15658486000691324,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:51:27.242821,0.000181,udp,147.32.84.59,60700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:29.991088,0.000263,udp,124.78.33.239,62562.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:51:34.075501,0.000401,udp,147.32.86.20,63165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:35.401099,0.000203,udp,147.32.85.25,55981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:36.599952,0.000348,udp,189.72.142.223,7839.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,77,507,292.0,0.13184931506849315,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:51:37.115659,3.692064,udp,147.32.84.229,13363.0,<->,122.117.119.141,58843.0,CON,0.0,0.0,5,2977,120,2857,595.4,0.040309035942223716,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:51:39.764609,0.00035,udp,147.32.86.20,63524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:40.584041,0.000267,udp,147.32.85.5,44615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:51:42.685400,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,3,,flow=Background,Background,-1 2011-08-17 03:51:43.106052,0.067352,udp,147.32.84.229,13363.0,<->,95.26.56.2,30361.0,CON,0.0,0.0,4,2937,60,2877,734.25,0.020429009193054137,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:51:47.148722,0.000332,udp,147.32.84.170,57833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:51:49.513656,0.213509,tcp,147.32.86.20,2226.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:51:54.478347,0.000197,udp,147.32.84.138,42987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:05.123820,0.000277,udp,147.32.85.34,58338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:05.132437,0.000304,udp,147.32.85.34,58803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:09.501272,0.000348,udp,147.32.84.170,45026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:11.184396,0.056258,udp,147.32.84.229,13363.0,<->,94.251.158.60,58876.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:52:15.167855,0.00028,udp,147.32.84.138,57395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:18.148401,0.2097,tcp,147.32.84.170,35155.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:18.781538,61.395412,tcp,147.32.84.165,1302.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:52:19.500464,0.000435,udp,147.32.84.170,41553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:19.501396,0.000405,udp,147.32.84.170,52033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:22.014534,0.308868,tcp,147.32.86.20,2257.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:52:29.500389,0.000455,udp,147.32.84.170,56632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:36.559338,0.0,udp,78.128.207.222,3969.0,->,239.255.255.253,11427.0,INT,0.0,,1,197,197,0,197.0,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:52:48.000181,0.000275,udp,147.32.84.59,58696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:48.010861,0.000208,udp,147.32.84.59,41553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:48.038988,0.000313,udp,147.32.84.59,58143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:48.149474,0.209338,tcp,147.32.84.170,35159.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:49.503569,0.000335,udp,147.32.84.170,40378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:51.523186,0.000381,udp,98.111.222.229,48869.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:52:56.753126,0.00021,udp,147.32.85.25,45725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:52:59.502564,0.000302,udp,147.32.84.170,48654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:52:59.503593,0.017883,tcp,147.32.84.170,43608.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:07.068647,0.0,tcp,125.141.229.197,3389.0,->,147.32.86.83,32578.0,SA_,0.0,,1,62,62,0,62.0,1.0,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:53:09.502582,0.000292,udp,147.32.84.170,59844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:13.198481,0.52501,tcp,147.32.84.170,43185.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:13.210318,0.00024,udp,147.32.84.59,39055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:13.575545,0.000416,udp,147.32.84.59,49848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:14.024158,0.243945,tcp,147.32.84.170,37574.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:18.137759,0.000202,udp,147.32.84.170,54355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:19.740880,70.457756,tcp,147.32.84.165,1303.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:53:25.942221,0.000147,udp,147.32.84.138,54537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:29.503587,0.018024,tcp,147.32.84.170,58864.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:32.279731,0.000364,udp,147.32.85.25,57580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:34.045979,0.00038,udp,174.30.11.74,54045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:53:35.956259,0.000265,udp,147.32.86.20,63181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:36.773109,0.000112,udp,147.32.84.138,35291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:37.407656,0.000148,udp,147.32.85.25,35228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:39.117444,1372.785522,udp,147.32.84.229,13363.0,<->,62.140.233.105,64161.0,CON,0.0,0.0,6,3500,120,3380,583.3333333333334,0.03428571428571429,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:53:41.761251,24.204151,tcp,38.101.148.126,41240.0,->,147.32.85.63,80.0,FSPA_FSPA,0.0,0.0,15,2173,763,1410,144.86666666666667,0.35112747353888635,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:53:42.634077,2454.02124,udp,119.160.159.221,17924.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:53:47.422246,3000.815918,udp,147.32.85.84,13716.0,<->,188.138.115.146,6331.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:53:48.148330,0.000337,udp,147.32.84.170,46559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:48.149220,0.000236,udp,147.32.84.170,34762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:48.769688,0.000234,udp,147.32.84.59,59025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:49.502678,0.000301,udp,147.32.84.170,48343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:49.503658,0.018017,tcp,147.32.84.170,55534.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:53:52.208937,30.391018,tcp,147.32.86.20,2339.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,79,71330,1811,69519,902.9113924050633,0.02538903687088182,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:53:53.839854,0.000297,udp,147.32.84.59,41176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:53.904356,0.000363,udp,147.32.84.59,34769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:53:54.031820,9.000797,tcp,147.32.84.179,53064.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,3,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:54:01.555466,0.000251,udp,147.32.85.34,52446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:04.014064,0.000215,udp,147.32.85.34,65018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:04.978894,0.000328,udp,147.32.85.34,55615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:07.895454,0.000259,udp,109.248.50.152,34366.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,3,1,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:09.502726,0.000247,udp,147.32.84.170,38697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:54:15.273670,0.230797,udp,147.32.84.229,13363.0,<->,190.60.203.171,7644.0,CON,0.0,0.0,2,691,631,60,345.5,0.9131693198263386,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:18.172143,0.000359,udp,147.32.84.138,55871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:18.536462,210.735504,udp,147.32.84.229,13363.0,<->,149.5.45.7,43060.0,CON,0.0,0.0,4,779,236,543,194.75,0.3029525032092426,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:18.798491,0.18898,udp,147.32.84.229,13363.0,<->,64.250.207.25,48292.0,CON,0.0,0.0,2,250,188,62,125.0,0.752,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:19.434695,0.00029,udp,147.32.84.59,46088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:19.450258,0.000277,udp,147.32.84.59,57196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:19.491675,0.000276,udp,147.32.84.59,58255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,86,249,167.5,0.25671641791044775,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:19.502549,0.000344,udp,147.32.84.170,44930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:54:19.503689,0.017636,tcp,147.32.84.170,57907.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:54:19.541269,0.000276,udp,147.32.84.59,53767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,86,249,167.5,0.25671641791044775,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:19.682395,0.000311,udp,147.32.84.59,56775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:20.796651,1.521506,tcp,65.52.110.24,61214.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,173,190488,3146,187342,1101.086705202312,0.01651547604048549,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:54:23.613663,0.000386,udp,70.112.200.222,55051.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:24.717479,0.000304,udp,147.32.84.59,46148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:27.421978,14.071238,tcp,122.54.76.82,2710.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,658,617059,17483,599576,937.7796352583587,0.028332785033521917,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:54:27.954586,23.319279,tcp,147.32.84.184,35784.0,->,199.59.148.87,443.0,FSPA_FSPA,0.0,0.0,18,4195,1941,2254,233.05555555555554,0.46269368295589985,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:54:29.751132,61.346439,tcp,147.32.84.165,1304.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:54:31.289621,2688.035889,udp,75.67.110.42,26318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:39.502495,0.000255,udp,147.32.84.170,53774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:54:42.765735,0.000441,udp,98.234.64.29,35701.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:54:44.054160,0.000228,udp,147.32.85.25,47545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:54:49.501828,0.000372,udp,147.32.84.170,52515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:54:50.172200,0.0,icmp,147.32.84.172,2563.0,->,175.43.7.162,,URHPRO,0.0,,1,94,94,0,94.0,1.0,3,,flow=Background,Background,-1 2011-08-17 03:54:59.506276,0.000367,udp,147.32.84.170,39332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:05.488433,0.000342,udp,41.240.14.233,1882.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:55:09.507269,0.017785,tcp,147.32.84.170,58877.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:19.503917,0.018116,tcp,147.32.84.170,42593.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:24.730250,0.000276,udp,147.32.85.25,49820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:55:30.658981,64.337997,tcp,147.32.84.165,1305.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:55:31.633588,0.000273,udp,147.32.84.138,52117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:55:39.512067,0.000446,udp,147.32.84.170,44104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:39.513225,0.017968,tcp,147.32.84.170,43635.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:39.705899,0.62734,tcp,147.32.84.164,41583.0,->,61.110.243.238,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,3,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 03:55:42.718042,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,3,,flow=Background,Background,-1 2011-08-17 03:55:43.024767,0.000466,tcp,76.193.233.222,4935.0,->,147.32.85.124,3389.0,S_RA,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,3,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 03:55:43.564961,0.000143,udp,147.32.84.138,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:55:47.586006,0.00033,udp,147.32.86.20,64903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:55:49.502883,0.000371,udp,147.32.84.170,52974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:55:54.313304,5.289692,tcp,86.99.79.91,4745.0,->,147.32.85.56,443.0,FSPA_FSPA,0.0,0.0,19,1507,697,810,79.3157894736842,0.46250829462508297,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:55:59.501928,0.000466,udp,147.32.84.170,33223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:05.661840,0.000243,udp,147.32.85.34,63930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:05.681327,0.000231,udp,147.32.85.34,54201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:05.698751,0.000425,udp,147.32.85.34,49426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:06.541471,0.000241,udp,147.32.85.25,48041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:09.501878,0.000545,udp,147.32.84.170,58010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:20.149237,0.000199,udp,147.32.84.170,41731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:20.150044,0.000271,udp,147.32.84.170,59869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:20.151471,0.213005,tcp,147.32.84.170,35194.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:24.602864,637.32489,udp,159.148.217.200,53909.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,488,364,124,122.0,0.7459016393442623,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:56:27.466291,0.000524,udp,201.3.236.252,35490.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,628,74,554,314.0,0.1178343949044586,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:56:29.501912,0.000524,udp,147.32.84.170,36336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:29.503991,0.018119,tcp,147.32.84.170,58888.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:34.541097,64.566414,tcp,147.32.84.165,1306.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:56:35.540742,0.000404,udp,147.32.86.20,63253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:38.097985,0.000331,udp,147.32.84.138,57818.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:56:39.501919,0.00043,udp,147.32.84.170,51480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:39.502916,0.000449,udp,147.32.84.170,38327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:46.545187,0.000512,udp,75.105.126.198,24400.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:56:49.502757,0.000445,udp,147.32.84.170,53486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:50.149975,0.000428,udp,147.32.84.170,40719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:50.152234,0.231762,tcp,147.32.84.170,35198.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:56:56.444179,3060.545898,udp,188.134.33.76,1398.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,959,711,248,119.875,0.7413972888425443,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:56:59.343673,0.000357,udp,70.73.112.239,20820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:56:59.993961,0.001618,udp,88.173.187.41,16123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:57:07.591761,1421.511475,udp,147.32.85.84,13716.0,<->,132.204.38.106,35838.0,CON,0.0,0.0,5,790,728,62,158.0,0.9215189873417722,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:57:09.502966,0.000369,udp,147.32.84.170,40841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:09.503999,0.017779,tcp,147.32.84.170,43647.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:12.704526,8.5e-05,udp,147.32.85.25,43093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:57:19.502899,0.000395,udp,147.32.84.170,47018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:21.149156,0.000229,udp,147.32.84.170,59268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:21.369215,0.363458,tcp,67.195.111.228,40213.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,14,6986,873,6113,499.0,0.12496421414257086,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:57:25.190163,1851.721191,tcp,147.32.85.125,53375.0,->,195.113.232.90,80.0,FSPA_FSRPA,0.0,0.0,36,9947,1333,8614,276.30555555555554,0.13401025434804464,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:57:38.364359,0.000165,udp,147.32.85.25,42833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:57:38.634569,64.45919,tcp,147.32.84.165,1307.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1211,572,639,110.0909090909091,0.47233691164327,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:57:39.501905,0.000421,udp,147.32.84.170,52747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:47.533305,1.231448,tcp,197.0.5.202,49175.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1381,754,627,76.72222222222223,0.5459811730629979,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:57:48.664461,0.0,tcp,147.32.84.165,1308.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:48.675834,0.0,tcp,147.32.84.165,1310.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:48.676083,0.0,tcp,147.32.84.165,1311.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:48.848668,0.0,tcp,147.32.84.165,1312.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:48.857899,0.0,tcp,147.32.84.165,1314.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:48.858045,0.0,tcp,147.32.84.165,1315.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:49.048449,0.0,tcp,147.32.84.165,1316.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:49.501974,0.000384,udp,147.32.84.170,37948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:49.502916,0.000292,udp,147.32.84.170,54526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:57:49.640596,0.0,tcp,147.32.84.165,1319.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:49.839795,0.0,tcp,147.32.84.165,1321.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:50.040190,0.0,tcp,147.32.84.165,1318.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:57:59.502844,0.000274,udp,147.32.84.170,41610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:02.157148,0.0,tcp,147.32.84.165,1541.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.157162,0.0,tcp,147.32.84.165,1542.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.757947,0.0,tcp,147.32.84.165,1555.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.758039,0.0,tcp,147.32.84.165,1553.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.758045,0.0,tcp,147.32.84.165,1554.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.758089,0.0,tcp,147.32.84.165,1559.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:02.758210,0.0,tcp,147.32.84.165,1557.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:03.847380,688.779846,udp,69.123.143.157,35446.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:58:05.532471,0.000207,udp,147.32.85.34,51285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:58:05.533499,0.000175,udp,147.32.85.34,65180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:58:05.571111,0.000298,udp,147.32.85.34,60612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:58:09.503792,0.017947,tcp,147.32.84.170,52396.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:13.536639,0.280409,tcp,147.32.84.170,37829.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:13.594233,0.342928,tcp,147.32.84.170,46088.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:14.174361,0.0,tcp,147.32.84.165,1782.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.174431,0.0,tcp,147.32.84.165,1783.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.229510,465.399902,tcp,147.32.84.170,46091.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,98,37404,27572,9832,381.6734693877551,0.7371404127900759,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:14.775616,0.0,tcp,147.32.84.165,1793.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.775695,0.0,tcp,147.32.84.165,1794.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.775699,0.0,tcp,147.32.84.165,1795.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.775796,0.0,tcp,147.32.84.165,1797.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.775802,0.0,tcp,147.32.84.165,1798.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:14.775855,0.0,tcp,147.32.84.165,1799.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:19.503828,0.01777,tcp,147.32.84.170,33364.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:22.149566,0.000398,udp,147.32.84.170,45844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:26.191634,0.0,tcp,147.32.84.165,2021.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.191638,0.0,tcp,147.32.84.165,2022.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.792415,0.0,tcp,147.32.84.165,2035.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.792499,0.0,tcp,147.32.84.165,2033.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.792505,0.0,tcp,147.32.84.165,2034.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.792610,0.0,tcp,147.32.84.165,2040.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:26.792672,0.0,tcp,147.32.84.165,2038.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:28.201506,1.3e-05,udp,147.32.87.48,1960.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,3,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:58:31.104251,0.119789,udp,147.32.84.229,13363.0,<->,129.22.67.129,23898.0,CON,0.0,0.0,4,2938,60,2878,734.5,0.02042205582028591,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:58:33.277605,1848.535156,udp,147.32.84.229,13363.0,<->,180.218.159.68,37017.0,CON,0.0,0.0,9,5061,2070,2991,562.3333333333334,0.4090100770598696,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:58:35.221379,0.000232,udp,147.32.84.138,34064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:58:38.210217,0.0,tcp,147.32.84.165,2263.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.210289,0.0,tcp,147.32.84.165,2264.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.810983,0.0,tcp,147.32.84.165,2274.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.811063,0.0,tcp,147.32.84.165,2275.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.811070,0.0,tcp,147.32.84.165,2276.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.811191,0.0,tcp,147.32.84.165,2278.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.811198,0.0,tcp,147.32.84.165,2279.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:38.811260,0.0,tcp,147.32.84.165,2280.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:39.503837,0.000352,udp,147.32.84.170,37140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:45.548921,0.908443,tcp,147.32.86.20,2597.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,94239,1646,92593,991.9894736842106,0.017466229480363755,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:58:45.775134,0.000548,udp,108.70.143.66,60718.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,64,246,155.0,0.2064516129032258,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:58:48.716101,6.300913,udp,66.212.172.6,3449.0,->,147.32.86.165,12114.0,INT,0.0,,3,558,558,0,186.0,1.0,3,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 03:58:50.227607,61.403606,tcp,147.32.84.165,2373.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:58:50.227621,0.0,tcp,147.32.84.165,2459.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:50.421834,0.308126,tcp,147.32.86.20,2601.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:58:50.697839,0.0,tcp,147.32.84.165,2466.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:50.828395,0.0,tcp,147.32.84.165,2468.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:50.828410,0.0,tcp,147.32.84.165,2469.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:50.828415,0.0,tcp,147.32.84.165,2471.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:50.828419,0.0,tcp,147.32.84.165,2472.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:58:53.150467,0.000301,udp,147.32.84.170,47733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:58:59.503923,0.000331,udp,147.32.84.170,52571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:00.642521,0.000283,udp,147.32.84.59,59267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:59:02.244605,0.0,tcp,147.32.84.165,2639.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.244619,0.0,tcp,147.32.84.165,2640.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.845438,0.0,tcp,147.32.84.165,2648.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.845452,0.0,tcp,147.32.84.165,2649.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.845507,0.0,tcp,147.32.84.165,2651.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.845559,0.0,tcp,147.32.84.165,2652.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:02.845720,0.0,tcp,147.32.84.165,2654.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:05.863154,0.170386,tcp,147.32.86.20,2615.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,71030,1571,69459,959.8648648648649,0.022117415176685907,3,1,flow=Background-TCP-Established,Background,-1 2011-08-17 03:59:09.504976,0.017776,tcp,147.32.84.170,51368.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:14.262454,0.0,tcp,147.32.84.165,2820.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.262534,0.0,tcp,147.32.84.165,2819.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.863011,0.0,tcp,147.32.84.165,2829.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.863026,0.0,tcp,147.32.84.165,2828.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.863081,0.0,tcp,147.32.84.165,2832.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.863130,0.0,tcp,147.32.84.165,2831.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:14.863137,0.0,tcp,147.32.84.165,2835.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:16.147921,0.000365,udp,147.32.85.74,40243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,82,132,107.0,0.38317757009345793,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:59:19.504140,0.000323,udp,147.32.84.170,50702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:24.398714,0.001363,udp,59.120.54.188,29541.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:59:25.457561,123.06636,udp,200.136.9.183,12170.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,393,213,180,65.5,0.5419847328244275,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:59:26.279869,0.0,tcp,147.32.84.165,2999.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:26.279882,0.0,tcp,147.32.84.165,3000.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:26.880701,0.0,tcp,147.32.84.165,3008.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:26.880715,0.0,tcp,147.32.84.165,3009.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:26.880720,0.0,tcp,147.32.84.165,3011.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:26.880773,0.0,tcp,147.32.84.165,3012.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:31.315789,3028.851318,udp,111.252.192.106,59762.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:59:32.317153,1.6e-05,tcp,59.53.48.226,80.0,->,147.32.87.4,10273.0,SA_R,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,3,0,flow=Background-TCP-Established,Background,-1 2011-08-17 03:59:32.726920,0.003095,udp,50.7.254.32,51538.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2939,60,2879,734.75,0.02041510717931269,3,0,flow=Background-UDP-Established,Background,-1 2011-08-17 03:59:37.831681,1.6e-05,icmp,147.32.87.249,,<-,147.32.87.49,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,3,1,flow=Background,Background,-1 2011-08-17 03:59:38.296722,0.0,tcp,147.32.84.165,3149.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:38.296933,0.0,tcp,147.32.84.165,3151.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:38.897665,0.0,tcp,147.32.84.165,3155.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:38.897789,0.0,tcp,147.32.84.165,3157.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:38.897923,0.0,tcp,147.32.84.165,3159.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:39.504022,0.00037,udp,147.32.84.170,49235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:50.314449,0.0,tcp,147.32.84.165,3269.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:50.314463,0.0,tcp,147.32.84.165,3271.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:50.915481,0.0,tcp,147.32.84.165,3275.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:50.915495,0.0,tcp,147.32.84.165,3277.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:50.915500,0.0,tcp,147.32.84.165,3279.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:51.082447,0.000174,udp,147.32.84.138,45510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 03:59:51.515846,61.412632,tcp,147.32.84.165,3296.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,3,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 03:59:51.515862,0.0,tcp,147.32.84.165,3281.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,3,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 03:59:55.144593,0.000425,udp,147.32.84.170,51233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:55.145691,1.4e-05,udp,147.32.84.170,52002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:55.146736,0.234375,tcp,147.32.84.170,51441.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,3,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 03:59:56.113834,0.499715,udp,147.32.84.68,57769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,403,71,332,201.5,0.1761786600496278,3,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:00.141519,3064.17334,udp,186.78.29.3,20842.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1210,900,310,121.0,0.743801652892562,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:00:01.107983,0.000249,udp,147.32.87.36,59902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,86,176,131.0,0.3282442748091603,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:00:01.392290,0.000475,udp,147.32.87.36,56463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:00:01.878829,0.000221,udp,147.32.84.138,49423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:02.331277,0.0,tcp,147.32.84.165,3391.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:02.932130,0.0,tcp,147.32.84.165,3397.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:02.932229,0.0,tcp,147.32.84.165,3399.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:02.932288,0.0,tcp,147.32.84.165,3401.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:03.533468,0.0,tcp,147.32.84.165,3403.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:05.404229,0.000338,udp,147.32.85.34,51997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:14.349044,0.0,tcp,147.32.84.165,3511.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:14.949829,0.0,tcp,147.32.84.165,3517.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:14.949843,0.0,tcp,147.32.84.165,3519.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:14.949900,0.0,tcp,147.32.84.165,3521.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:15.550403,0.0,tcp,147.32.84.165,3523.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:16.568969,0.00043,udp,222.127.15.162,49063.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,76,472,274.0,0.1386861313868613,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:00:19.503938,0.000343,udp,147.32.84.170,35908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:26.150733,0.000304,udp,147.32.84.170,47980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:26.366583,0.0,tcp,147.32.84.165,3631.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:26.966829,0.0,tcp,147.32.84.165,3637.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:26.966928,0.0,tcp,147.32.84.165,3639.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:26.967035,0.0,tcp,147.32.84.165,3641.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:27.568006,0.0,tcp,147.32.84.165,3643.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.383260,0.0,tcp,147.32.84.165,3750.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.383274,0.0,tcp,147.32.84.165,3751.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.383297,0.0,tcp,147.32.84.165,3752.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.786511,0.000281,udp,147.32.84.183,35357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:38.984120,0.0,tcp,147.32.84.165,3757.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.984135,0.0,tcp,147.32.84.165,3756.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.984158,0.0,tcp,147.32.84.165,3759.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.984271,0.0,tcp,147.32.84.165,3758.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:38.984285,0.0,tcp,147.32.84.165,3761.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:39.503107,0.020192,udp,147.32.84.170,47886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:39.524874,0.017905,tcp,147.32.84.170,41141.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:39.584959,0.0,tcp,147.32.84.165,3762.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:39.585051,0.0,tcp,147.32.84.165,3763.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:39.708752,0.048806,tcp,147.32.84.164,58292.0,->,77.67.60.130,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,4,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 04:00:41.314754,0.000211,udp,147.32.84.183,49186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,85,223,154.0,0.275974025974026,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:42.171960,0.000176,udp,147.32.85.25,58227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:43.867181,0.000273,udp,147.32.84.183,49136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:00:46.631681,0.000509,udp,95.208.136.229,55023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:00:50.400719,0.0,tcp,147.32.84.165,3871.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:51.001624,0.0,tcp,147.32.84.165,3877.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:51.001859,0.0,tcp,147.32.84.165,3879.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:51.001931,0.0,tcp,147.32.84.165,3881.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:51.602630,0.0,tcp,147.32.84.165,3883.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:00:57.149287,0.0003,udp,147.32.84.170,33922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:57.150136,0.000324,udp,147.32.84.170,47860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:00:57.177053,0.217894,tcp,147.32.86.20,2711.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:01:00.622071,0.000255,udp,147.32.84.183,46207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:01.184966,0.000279,udp,147.32.84.183,38990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:02.418581,67.160217,tcp,147.32.84.165,3910.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:01:02.418597,0.0,tcp,147.32.84.165,3992.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:03.019308,0.0,tcp,147.32.84.165,3998.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:03.019322,0.0,tcp,147.32.84.165,4000.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:03.436405,0.000475,udp,147.32.84.183,57276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:03.619907,0.0,tcp,147.32.84.165,4004.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:05.620174,0.0,tcp,147.32.84.165,4024.0,->,147.32.82.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:07.921317,0.000254,udp,147.32.84.242,48524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:11.161427,0.000314,udp,147.32.84.59,51034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:13.276852,93.179176,tcp,147.32.85.74,34467.0,->,86.49.87.107,6889.0,S_,0.0,,7,518,518,0,74.0,1.0,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:01:13.811428,0.000314,udp,147.32.84.183,43389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:14.435947,0.0,tcp,147.32.84.165,4111.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:14.436043,0.0,tcp,147.32.84.165,4112.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.036210,0.0,tcp,147.32.84.165,4117.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.036342,0.0,tcp,147.32.84.165,4118.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.036400,0.0,tcp,147.32.84.165,4119.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.036455,0.0,tcp,147.32.84.165,4120.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.036562,0.0,tcp,147.32.84.165,4121.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.637200,0.0,tcp,147.32.84.165,4124.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:15.637269,0.0,tcp,147.32.84.165,4123.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:17.439651,0.0,tcp,147.32.84.165,4142.0,->,147.32.83.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:18.057382,0.000278,udp,147.32.84.183,52274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:26.452781,0.0,tcp,147.32.84.165,4231.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:26.452854,0.0,tcp,147.32.84.165,4232.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:26.524010,0.000234,udp,147.32.84.59,49871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:26.960546,0.000298,udp,147.32.84.59,44238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:27.054152,0.0,tcp,147.32.84.165,4237.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.054166,0.0,tcp,147.32.84.165,4238.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.054229,0.0,tcp,147.32.84.165,4239.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.054234,0.0,tcp,147.32.84.165,4240.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.054270,0.0,tcp,147.32.84.165,4241.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.654724,0.0,tcp,147.32.84.165,4244.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:27.654739,0.0,tcp,147.32.84.165,4243.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:29.456957,0.0,tcp,147.32.84.165,4263.0,->,147.32.83.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:29.502856,0.000422,udp,147.32.84.170,52033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:01:29.504974,0.017682,tcp,147.32.84.170,50509.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:01:32.222972,0.000364,udp,147.32.84.138,45625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:33.206683,0.000288,udp,147.32.84.183,60400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,86,247,166.5,0.25825825825825827,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:34.803194,0.000228,udp,147.32.84.138,40927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:38.470199,0.0,tcp,147.32.84.165,4353.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:38.470309,0.0,tcp,147.32.84.165,4352.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.070711,0.0,tcp,147.32.84.165,4359.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.070888,0.0,tcp,147.32.84.165,4358.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.070902,0.0,tcp,147.32.84.165,4361.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.070907,0.0,tcp,147.32.84.165,4360.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.071038,0.0,tcp,147.32.84.165,4363.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.502930,0.000418,udp,147.32.84.170,51144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:01:39.672085,0.0,tcp,147.32.84.165,4364.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:39.672169,0.0,tcp,147.32.84.165,4365.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:41.435581,0.000203,udp,147.32.84.138,35661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:41.474363,0.0,tcp,147.32.84.165,4382.0,->,147.32.83.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:42.112213,254.292816,udp,67.193.174.89,3366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,30,3552,2158,1394,118.4,0.607545045045045,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:01:43.360683,0.000213,udp,147.32.84.138,38203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:46.942152,0.000274,udp,147.32.84.183,41447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,85,223,154.0,0.275974025974026,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:49.503003,0.000364,udp,147.32.84.170,46307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:01:50.487935,0.0,tcp,147.32.84.165,4473.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:50.487949,0.0,tcp,147.32.84.165,4472.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.088388,0.0,tcp,147.32.84.165,4479.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.088405,0.0,tcp,147.32.84.165,4478.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.088410,0.0,tcp,147.32.84.165,4481.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.088467,0.0,tcp,147.32.84.165,4480.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.088478,0.0,tcp,147.32.84.165,4483.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.689307,0.0,tcp,147.32.84.165,4484.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:51.689321,0.0,tcp,147.32.84.165,4485.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:52.518863,0.00022,udp,147.32.84.59,57204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:52.624753,0.000275,udp,147.32.84.59,39380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,86,182,134.0,0.3208955223880597,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:53.387636,0.000239,udp,147.32.84.138,34938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:01:53.491800,0.0,tcp,147.32.84.165,4502.0,->,147.32.83.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:01:58.147362,0.000247,udp,147.32.84.170,42771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:02.505174,0.0,tcp,147.32.84.165,4593.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:02.505189,0.0,tcp,147.32.84.165,4592.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.105804,0.0,tcp,147.32.84.165,4599.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.105827,0.0,tcp,147.32.84.165,4598.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.105832,0.0,tcp,147.32.84.165,4601.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.105836,0.0,tcp,147.32.84.165,4600.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.105841,0.0,tcp,147.32.84.165,4603.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.706600,0.0,tcp,147.32.84.165,4604.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:03.706672,0.0,tcp,147.32.84.165,4605.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:02:09.125688,61.373291,tcp,147.32.84.165,4616.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:02:15.230306,0.000234,udp,147.32.84.138,60420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:15.234838,0.000242,udp,147.32.84.138,47382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:17.662497,0.00017,udp,147.32.84.59,34460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:19.404076,0.000256,udp,147.32.84.138,34356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:19.504177,0.000269,udp,147.32.84.170,33881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:27.681693,0.000323,udp,147.32.84.59,45874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:29.151365,0.000206,udp,147.32.84.170,48129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:29.505114,0.018158,tcp,147.32.84.170,58156.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:31.535680,0.000371,udp,200.85.24.10,15019.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:02:39.508409,0.000287,udp,147.32.84.170,53544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:41.091297,306.372498,udp,147.32.84.229,13363.0,<->,218.102.155.147,31301.0,CON,0.0,0.0,4,330,210,120,82.5,0.6363636363636364,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:02:49.504093,0.000325,udp,147.32.84.170,40128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:54.837321,0.000258,udp,147.32.85.25,44939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:57.788973,0.000246,udp,147.32.84.138,59579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:02:59.504016,0.000372,udp,147.32.84.170,49980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:02:59.900899,0.00025,udp,147.32.85.25,57708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:00.153385,0.000301,udp,147.32.84.170,54274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:00.154592,0.233079,tcp,147.32.84.170,54836.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:02.892732,0.00023,udp,147.32.84.59,38261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:08.465818,0.729051,tcp,67.195.115.43,48874.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,46,31206,1833,29373,678.3913043478261,0.05873870409536627,4,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 04:03:08.665480,0.000415,udp,58.67.148.95,2814.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,78,486,282.0,0.13829787234042554,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:03:10.042832,64.25074,tcp,147.32.84.165,4617.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:03:19.212241,0.000204,udp,147.32.84.59,39499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:19.508941,0.018074,tcp,147.32.84.170,58474.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:29.504095,0.000395,udp,147.32.84.170,42138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:29.934353,0.000327,udp,147.32.86.20,51619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:31.147510,0.215253,tcp,147.32.84.170,54846.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:33.132763,0.141575,udp,147.32.84.229,13363.0,<->,188.28.117.178,49695.0,CON,0.0,0.0,4,2963,60,2903,740.75,0.020249746878164023,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:03:34.268145,0.000281,udp,147.32.84.138,50292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:39.503147,0.00044,udp,147.32.84.170,33869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:41.682500,0.000195,udp,147.32.84.138,55805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:03:49.504733,0.000323,udp,147.32.84.170,35976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:49.505768,0.01759,tcp,147.32.84.170,58478.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:03:58.197220,0.001634,udp,190.128.105.87,42678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:03:59.503295,0.000329,udp,147.32.84.170,45463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:01.150701,0.000265,udp,147.32.84.170,50399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:02.919513,2.546047,tcp,222.122.186.14,1723.0,->,147.32.86.84,50486.0,SA_,0.0,,2,124,124,0,62.0,1.0,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:04:05.060245,0.000202,udp,147.32.85.34,58749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:04:09.507690,0.000342,udp,147.32.84.170,50604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:09.827113,3091.954102,udp,174.109.35.221,37172.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:04:10.961985,61.380203,tcp,147.32.84.165,4618.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:04:13.375438,0.041493,tcp,147.32.86.89,4581.0,->,91.103.160.52,80.0,FSPA_FSPA,0.0,0.0,12,1569,786,783,130.75,0.5009560229445507,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:04:17.586512,0.000298,udp,147.32.85.25,52097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:04:19.437493,0.000159,udp,147.32.84.59,43174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:04:22.384153,0.00039,udp,147.32.84.171,55923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,79,214,146.5,0.2696245733788396,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:04:22.503437,0.0,udp,42.49.116.89,58756.0,->,147.32.86.120,38416.0,INT,0.0,,1,72,72,0,72.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:04:29.505108,0.000348,udp,147.32.84.170,56402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:29.506203,0.017847,tcp,147.32.84.170,58483.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:30.045857,0.791069,udp,222.254.179.244,33549.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,404,219,185,67.33333333333333,0.5420792079207921,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:04:32.150271,0.000231,udp,147.32.84.170,37184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:36.681123,0.000305,udp,147.32.84.138,33499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:04:39.504221,0.000389,udp,147.32.84.170,42168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:39.506064,0.018145,tcp,147.32.84.170,42187.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:42.909686,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,4,,flow=Background,Background,-1 2011-08-17 04:04:49.504534,2.6e-05,udp,147.32.84.170,57010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:49.504984,0.00028,udp,147.32.84.170,40277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:04:56.217399,109.351913,tcp,82.137.250.163,62429.0,->,147.32.84.229,13363.0,SA_FSA,0.0,0.0,9,618,144,474,68.66666666666667,0.23300970873786409,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:05:03.155500,0.000203,udp,147.32.84.170,41223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:09.506094,0.018278,tcp,147.32.84.170,58489.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:11.879593,63.822685,tcp,147.32.84.165,4634.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:05:13.490153,0.000231,udp,147.32.84.138,36099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:05:17.085994,0.105488,udp,147.32.84.229,13363.0,<->,78.84.187.183,39016.0,CON,0.0,0.0,3,2844,60,2784,948.0,0.02109704641350211,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:05:18.667815,0.000204,udp,147.32.85.25,50872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:05:21.689422,7e-06,tcp,199.59.164.114,80.0,?>,147.32.84.69,40828.0,A_,0.0,,2,120,120,0,60.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:05:21.704488,7.3e-05,tcp,199.59.164.114,80.0,?>,147.32.85.220,41235.0,A_,0.0,,2,120,120,0,60.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:05:21.712912,0.000121,tcp,199.59.164.114,80.0,,147.32.87.30,41557.0,A_R,0.0,0.0,4,240,120,120,60.0,0.5,4,0,flow=Background,Background,-1 2011-08-17 04:05:21.718462,7e-06,tcp,199.59.164.114,80.0,?>,147.32.86.249,41520.0,A_,0.0,,2,120,120,0,60.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:05:21.718473,3e-06,tcp,199.59.164.114,80.0,?>,147.32.84.77,40836.0,A_,0.0,,2,120,120,0,60.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:05:22.160687,0.000533,udp,2.91.4.109,53365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,73,478,275.5,0.132486388384755,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:05:29.507784,0.000417,udp,147.32.84.170,35899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:29.509678,0.018267,tcp,147.32.84.170,42193.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:34.152173,0.000386,udp,147.32.84.170,53491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:34.725966,169.945953,udp,147.32.84.229,13363.0,<->,87.198.20.160,4768.0,CON,0.0,0.0,4,838,602,236,209.5,0.7183770883054893,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:05:39.504357,0.009883,udp,147.32.84.170,41650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:05:54.327781,0.000256,udp,147.32.84.138,44171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:05:57.590911,0.000236,udp,147.32.84.138,35529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:05:59.504452,0.000374,udp,147.32.84.170,51109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:06:03.552805,11.031982,tcp,188.49.66.80,61155.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:06:05.843419,0.000202,udp,147.32.85.34,62570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:05.853657,0.000203,udp,147.32.85.34,53497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:05.900660,3306.667725,arp,147.32.87.11,,who,147.32.87.1,,CON,,,10,600,300,300,60.0,0.5,4,,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-17 04:06:09.504422,0.000406,udp,147.32.84.170,52716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:06:09.506451,0.017943,tcp,147.32.84.170,58497.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:06:10.043953,0.000269,udp,147.32.85.25,41847.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:13.087586,0.000451,udp,190.194.242.246,34146.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,297,66,231,148.5,0.2222222222222222,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:06:15.251841,61.374454,tcp,147.32.84.165,4635.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:06:16.629477,0.000213,udp,147.32.86.15,57414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:17.991218,0.000407,udp,86.139.16.241,58188.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:06:18.078671,0.00023,udp,147.32.84.138,56426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:18.655426,2900.08667,udp,84.13.39.12,10774.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:06:19.504983,0.000338,udp,147.32.84.170,51423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:06:24.582292,0.000443,udp,147.32.84.138,42867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:30.372323,1.09122,tcp,218.247.201.71,51367.0,->,147.32.84.229,13363.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:06:36.482847,0.000481,udp,111.240.111.198,19620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:06:49.013477,0.000458,udp,147.32.84.184,38628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:06:49.504442,0.000316,udp,147.32.84.170,59399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:06:49.506286,0.017772,tcp,147.32.84.170,38778.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:07:00.380692,0.00039,udp,147.32.86.20,60975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:07:02.294039,0.000188,udp,147.32.84.138,33582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:07:07.562659,154.716644,udp,147.32.84.229,13363.0,<->,79.109.168.167,33019.0,CON,0.0,0.0,8,556,316,240,69.5,0.5683453237410072,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:15.822634,2606.334717,udp,147.32.84.229,13363.0,<->,208.88.187.90,33033.0,CON,0.0,0.0,4,308,134,174,77.0,0.43506493506493504,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:16.158759,61.414841,tcp,147.32.84.165,4636.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:07:19.504438,0.000335,udp,147.32.84.170,35033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:07:19.505354,0.00024,udp,147.32.84.170,39249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:07:25.131666,0.018536,udp,147.32.84.229,13363.0,<->,132.199.216.126,50572.0,CON,0.0,0.0,4,2973,60,2913,743.25,0.020181634712411706,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:27.139628,1062.573486,udp,68.118.28.37,52577.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1072,937,135,268.0,0.8740671641791045,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:28.098561,6.983668,tcp,190.242.6.72,57714.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:07:35.084674,2040.030884,udp,147.32.84.229,13363.0,<->,212.233.223.130,24095.0,CON,0.0,0.0,8,5840,120,5720,730.0,0.02054794520547945,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:37.153421,0.205458,tcp,147.32.84.170,58131.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:07:39.504450,0.000474,udp,147.32.84.170,56177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:07:47.416101,0.000401,udp,151.64.119.242,23127.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:48.318880,0.000323,udp,178.243.220.224,24431.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:07:52.773925,0.000221,udp,147.32.85.25,47163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:07:57.466137,2583.645508,udp,96.2.78.193,21527.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1275,900,375,127.5,0.7058823529411765,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:03.392038,13.790583,tcp,76.105.89.114,4933.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,10,624,366,258,62.4,0.5865384615384616,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:08:05.718246,0.000233,udp,147.32.85.34,53016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:08:07.154765,0.000275,udp,147.32.84.170,55216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:09.505186,0.000325,udp,147.32.84.170,55783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:09.506266,0.017725,tcp,147.32.84.170,50732.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:13.189116,0.311246,tcp,147.32.84.170,42037.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:14.047093,0.000385,udp,118.69.68.186,63793.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:14.239483,240.046494,tcp,147.32.84.170,41670.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:14.239831,250.047119,tcp,147.32.84.170,41671.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:17.076624,64.672432,tcp,147.32.84.165,4637.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:08:19.504194,0.000316,udp,147.32.84.170,36428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:23.387373,1.750265,udp,200.49.162.245,46587.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1044,924,120,261.0,0.8850574712643678,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:29.507970,0.018093,tcp,147.32.84.170,37879.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:30.560584,1.109898,tcp,166.205.15.245,26054.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,14,1092,648,444,78.0,0.5934065934065934,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:08:33.175874,0.000224,udp,147.32.85.89,36384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:08:37.005358,13.857938,tcp,188.115.115.235,1065.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,16,1252,672,580,78.25,0.536741214057508,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:08:38.152351,0.000242,udp,147.32.84.170,38114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:39.504355,0.000283,udp,147.32.84.170,36635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:45.103793,0.001659,udp,213.87.74.70,27208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:47.477409,0.000444,udp,65.102.231.78,56876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,80,481,280.5,0.14260249554367202,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:48.356129,0.000322,udp,121.13.137.53,63029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:49.504535,0.000389,udp,147.32.84.170,41318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:49.505367,0.000332,udp,147.32.84.170,46325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:08:49.546384,3319.949707,udp,109.205.114.101,49557.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1420,619,801,236.66666666666666,0.43591549295774645,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:08:49.921546,0.000165,udp,147.32.87.61,55621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,95,145,120.0,0.3958333333333333,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:08:50.827483,0.000213,udp,147.32.84.138,55309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:08:59.505319,0.000306,udp,147.32.84.170,48027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:01.553681,0.000315,udp,147.32.85.74,33518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,72,139,105.5,0.3412322274881517,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:07.137291,0.000427,udp,147.32.86.20,57567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:08.870563,0.000317,udp,201.191.198.127,51305.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:09:09.551151,0.025552,udp,147.32.84.170,34406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:15.135438,6.731626,udp,66.212.172.6,7675.0,->,147.32.86.165,12114.0,INT,0.0,,3,558,558,0,186.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:09:18.075041,61.554626,tcp,147.32.84.165,4638.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:09:19.506538,0.018648,tcp,147.32.84.170,37886.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:20.116223,0.02606,udp,147.32.84.229,13363.0,<->,213.222.154.150,4621.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:09:26.794272,0.00023,udp,147.32.84.138,45895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:32.330996,0.373816,tcp,67.195.111.228,59482.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2306,713,1593,230.6,0.30919340849956634,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:09:34.809137,0.000242,udp,147.32.84.59,42037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:39.532641,0.000449,udp,147.32.85.25,33391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:40.152949,0.000222,udp,147.32.84.170,57391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:40.154273,0.21773,tcp,147.32.84.170,58160.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:45.863944,0.000254,udp,124.25.176.2,17488.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:09:49.278628,0.000472,udp,213.155.151.233,1436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,590,77,513,295.0,0.13050847457627118,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:09:49.505356,0.000429,udp,147.32.84.170,39660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:49.506486,0.018561,tcp,147.32.84.170,51963.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:09:50.135073,0.000296,udp,147.32.85.25,38729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:56.963335,0.000258,udp,147.32.84.59,37781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:09:59.504543,0.000376,udp,147.32.84.170,38421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:05.536145,0.00024,udp,147.32.85.34,53682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:10:05.558274,0.000288,udp,147.32.85.34,62465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:10:05.580062,0.000288,udp,147.32.85.34,53658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:10:08.241079,0.000316,udp,62.243.98.234,58657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:10:14.131024,0.000261,udp,147.32.84.138,44528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:10:19.103250,64.425018,tcp,147.32.84.165,4639.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:10:19.449065,0.000244,udp,147.32.86.20,56338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:10:19.505424,0.00034,udp,147.32.84.170,41804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:29.506698,0.018157,tcp,147.32.84.170,37895.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:36.134731,0.000355,udp,114.34.93.135,18253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:10:39.233814,3592.783936,udp,89.102.159.12,4848.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3054,136,2918,509.0,0.04453176162409954,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:10:39.514891,0.000378,udp,147.32.84.170,58525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:39.515970,0.017876,tcp,147.32.84.170,50763.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:42.153460,0.213954,tcp,147.32.84.170,58168.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:44.672112,0.000151,tcp,65.19.133.90,41381.0,->,147.32.87.44,3127.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:10:44.741965,0.00034,udp,114.75.171.19,37508.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:10:49.505443,0.000295,udp,147.32.84.170,46663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:49.506477,0.018268,tcp,147.32.84.170,50398.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:10:54.050679,73.969444,tcp,190.41.205.37,48381.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,28,6406,1302,5104,228.78571428571428,0.2032469559787699,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:11:03.780012,0.03388,udp,147.32.84.171,47954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,79,237,158.0,0.25,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:11:09.504683,0.000336,udp,147.32.84.170,44704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:09.506508,0.017932,tcp,147.32.84.170,39942.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:17.792168,0.000233,udp,147.32.85.25,48359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:11:22.554579,0.000119,udp,147.32.84.138,36053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:11:22.985014,64.702766,tcp,147.32.84.165,4640.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:11:31.129312,0.156219,udp,147.32.84.229,13363.0,<->,41.201.106.192,61184.0,CON,0.0,0.0,3,2837,60,2777,945.6666666666666,0.021149101163200564,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:11:31.619964,0.000341,udp,61.64.85.160,43660.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,86,61,73.5,0.5850340136054422,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:11:32.399103,0.0,udp,147.32.84.54,427.0,->,192.168.88.186,63666.0,INT,0.0,,1,351,351,0,351.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:11:42.152192,0.000473,udp,147.32.84.170,54925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:43.198761,0.000235,udp,147.32.85.25,42082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:11:49.504431,0.000406,udp,147.32.84.170,56809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:49.505344,0.000356,udp,147.32.84.170,38022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:51.053323,16.417997,tcp,68.2.154.152,62864.0,->,147.32.84.229,13363.0,SA_FSA,0.0,0.0,5,304,182,122,60.8,0.5986842105263158,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:11:51.078970,0.0,icmp,116.228.141.62,8.0,->,147.32.84.229,60344.0,ECO,0.0,,1,74,74,0,74.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:11:53.346344,0.000263,udp,147.32.85.25,48532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:11:59.505751,0.000301,udp,147.32.84.170,41619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:11:59.506832,0.018369,tcp,147.32.84.170,51980.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:05.384979,0.000306,udp,147.32.85.34,64741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:12:06.339949,2445.260986,udp,196.205.25.218,20531.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,470,346,124,117.5,0.7361702127659574,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:09.507279,0.000347,udp,147.32.84.170,53521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:12.153675,0.218494,tcp,147.32.84.170,58180.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:12.301080,0.121399,udp,147.32.84.229,13363.0,<->,67.86.77.149,54961.0,CON,0.0,0.0,2,255,180,75,127.5,0.7058823529411765,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:17.268433,0.000454,udp,147.32.86.20,51451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:12:17.459197,0.00038,udp,188.104.165.87,61824.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:19.510170,0.000312,udp,147.32.84.170,34292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:24.072998,61.681389,tcp,147.32.84.165,4641.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:12:27.509365,1857.866455,udp,98.180.201.77,49300.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:38.988819,0.000258,udp,147.32.84.138,46853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:12:39.504748,0.000441,udp,147.32.84.170,54883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:39.505686,0.00044,udp,147.32.84.170,40271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:45.949273,0.001393,udp,218.72.92.127,53183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:49.504714,0.000502,udp,147.32.84.170,35462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:52.828359,0.000314,udp,219.175.199.57,62056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:12:59.504559,0.00055,udp,147.32.84.170,42873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:12:59.506586,0.018279,tcp,147.32.84.170,32803.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:13.191388,0.472518,tcp,147.32.84.170,51706.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:13.713895,0.402002,tcp,147.32.84.170,40694.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:17.558064,0.000248,udp,147.32.84.138,60926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:13:17.581313,0.0002,udp,147.32.84.138,54337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:13:18.207410,0.000381,udp,147.32.86.20,50646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:13:25.181433,61.675728,tcp,147.32.84.165,4642.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:13:29.505664,0.000329,udp,147.32.84.170,46337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:29.506688,0.018277,tcp,147.32.84.170,58766.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:33.669873,0.000425,udp,151.24.163.180,20324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,168,83,125.5,0.6693227091633466,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:13:46.320196,0.000265,udp,147.32.85.25,42845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:13:49.507907,0.000314,udp,147.32.84.170,52687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:49.509864,0.018006,tcp,147.32.84.170,53667.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:13:50.989943,0.366795,udp,114.34.100.249,10412.0,<->,147.32.84.229,443.0,CON,0.0,0.0,4,261,120,141,65.25,0.45977011494252873,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:13:51.272538,0.000233,udp,147.32.84.138,52858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:13:54.762235,0.000445,udp,162.40.25.44,60214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:14:05.202147,0.000268,udp,147.32.85.34,51380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:05.858806,0.00015,udp,147.32.84.138,50033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:15.151481,0.000268,udp,147.32.84.170,43768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:19.504820,0.000315,udp,147.32.84.170,44606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:22.204261,0.000215,udp,147.32.85.25,51105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:26.320281,61.581333,tcp,147.32.84.165,4643.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:14:29.504785,0.000366,udp,147.32.84.170,32772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:29.506823,0.018211,tcp,147.32.84.170,54517.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:30.331832,1152.060913,udp,147.32.84.229,13363.0,<->,78.141.179.11,34037.0,CON,0.0,0.0,4,608,482,126,152.0,0.7927631578947368,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:14:32.228213,0.000224,udp,147.32.84.138,43808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:37.818704,0.000261,udp,147.32.85.25,49319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:39.504784,0.000354,udp,147.32.84.170,40811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:42.709344,0.000333,udp,147.32.86.20,63344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:14:43.345370,0.0,udp,147.32.84.54,427.0,->,192.168.88.186,54222.0,INT,0.0,,1,351,351,0,351.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:14:49.505647,0.000296,udp,147.32.84.170,36792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:55.878893,3081.898193,udp,213.94.219.177,36173.0,->,147.32.85.5,21857.0,INT,0.0,,18,2538,2538,0,141.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:14:59.504807,0.000331,udp,147.32.84.170,38663.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:59.505675,0.000432,udp,147.32.84.170,51055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:14:59.506842,0.017955,tcp,147.32.84.170,32825.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:01.750647,0.003245,udp,147.32.85.74,44788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,75,141,108.0,0.3472222222222222,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:03.221967,0.000213,udp,147.32.84.138,34556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:04.220885,2398.577148,arp,147.32.87.30,,who,147.32.87.53,,INT,,,5,300,300,0,60.0,1.0,4,,flow=Background,Background,-1 2011-08-17 04:15:06.748126,2456.824707,udp,97.89.115.14,19776.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3191,3011,180,398.875,0.94359135067377,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:15:09.506917,0.017753,tcp,147.32.84.170,39781.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:15.140950,0.000336,udp,147.32.84.170,34279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:18.944649,0.00013,udp,147.32.85.25,57715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:19.506918,0.018768,tcp,147.32.84.170,32828.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:24.023428,0.000272,udp,147.32.85.25,53768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:27.397905,64.50267,tcp,147.32.84.165,4644.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:15:29.506872,0.017812,tcp,147.32.84.170,39784.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:33.010982,0.000201,udp,147.32.84.138,37495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:39.266576,0.000302,udp,210.245.12.45,3266.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:15:39.516389,0.017847,tcp,147.32.84.170,32830.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:40.247179,0.000286,udp,147.32.84.59,50229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:41.211718,0.000364,udp,147.32.86.20,51187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:46.178671,0.22772,tcp,147.32.84.170,54538.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:50.151560,0.205808,tcp,147.32.86.20,3512.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:15:51.057337,0.188492,udp,147.32.85.84,13716.0,<->,50.33.0.129,9361.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:15:52.071038,9.008752,tcp,180.168.3.130,58479.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,4,248,62,186,62.0,0.25,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:15:55.121814,0.000231,udp,147.32.85.25,38372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:15:59.504897,0.0004,udp,147.32.84.170,32840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:15:59.662688,0.759579,tcp,202.69.167.36,49020.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,6,543,335,208,90.5,0.6169429097605893,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:16:05.235280,0.000277,udp,147.32.85.34,62435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:16:09.507940,0.018453,tcp,147.32.84.170,32834.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:10.626395,3.818024,udp,147.32.84.229,13363.0,<->,122.17.159.128,51255.0,CON,0.0,0.0,4,655,535,120,163.75,0.816793893129771,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:16:12.124046,0.000216,udp,147.32.84.138,49862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:16:12.485228,1.830151,udp,147.32.84.229,13363.0,<->,76.181.219.62,30490.0,CON,0.0,0.0,4,1065,535,530,266.25,0.5023474178403756,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:16:15.206269,0.000229,udp,147.32.84.138,38332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:16:17.155701,0.000293,udp,147.32.84.170,42266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:19.508871,0.018292,tcp,147.32.84.170,39791.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:31.440025,64.418022,tcp,147.32.84.165,4645.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:16:35.563853,0.000343,udp,68.35.213.75,17026.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:16:36.313676,0.000251,udp,147.32.85.25,43161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:16:39.505913,0.000354,udp,147.32.84.170,36094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:44.114260,2977.047119,udp,210.216.23.20,57756.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:16:48.149401,0.21849,tcp,147.32.84.170,54546.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:49.504969,0.000349,udp,147.32.84.170,37101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:49.505785,0.000327,udp,147.32.84.170,54932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:16:49.990728,0.000351,udp,75.149.75.109,51089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:16:59.505553,0.000364,udp,147.32.84.170,33434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:09.504974,0.000316,udp,147.32.84.170,50090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:19.506995,0.017565,tcp,147.32.84.170,36895.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:19.530657,0.206202,tcp,147.32.86.20,3592.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:17:26.232051,0.00048,udp,83.149.9.22,56658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,277,194,83,138.5,0.7003610108303249,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:17:29.507005,0.018106,tcp,147.32.84.170,34417.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:35.422439,64.209679,tcp,147.32.84.165,4646.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:17:36.296266,6.174629,tcp,66.249.72.182,57658.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,25,14620,1228,13392,584.8,0.08399452804377565,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:17:39.507663,0.000351,udp,147.32.84.170,39080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:39.509711,0.0181,tcp,147.32.84.170,38872.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:42.031947,0.00026,udp,62.152.105.4,52356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:17:49.151856,0.000327,udp,147.32.84.170,34519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:49.507123,0.000318,udp,147.32.84.170,52997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:49.507943,0.000311,udp,147.32.84.170,53608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:17:51.190763,3031.648438,udp,128.180.54.143,34164.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,747,561,186,124.5,0.751004016064257,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:17:56.974676,0.000318,udp,115.189.189.117,3043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:18:04.794776,0.000452,udp,140.203.154.12,6517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:18:05.929873,2.802272,tcp,66.249.66.211,45018.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,20,9095,1049,8046,454.75,0.11533809785596481,4,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 04:18:13.909591,0.267086,tcp,147.32.84.170,52906.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:14.231450,0.000515,udp,147.32.84.170,54141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:14.234758,465.455536,tcp,147.32.84.170,52550.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,108,41344,31090,10254,382.81481481481484,0.751983359133127,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:14.237839,244.403854,tcp,147.32.84.170,52555.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,34,3094,1805,1289,91.0,0.5833872010342599,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:14.496907,0.016831,udp,147.32.84.170,47187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:14.515054,10.541888,tcp,147.32.84.170,39943.0,->,199.7.57.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:18.228280,0.000196,udp,147.32.85.25,35176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:18:22.096234,0.169867,tcp,147.32.86.20,3646.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,75,71090,1571,69519,947.8666666666667,0.022098748065832043,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:18:29.507544,0.000293,udp,147.32.84.170,38713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:36.412612,0.000311,udp,147.32.84.59,54793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:18:39.195390,82.444717,tcp,147.32.84.165,4647.0,->,222.189.228.111,3389.0,FSPA_SPA,0.0,0.0,12,1271,632,639,105.91666666666667,0.4972462627852085,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:18:43.805578,0.000257,udp,147.32.85.25,40903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:18:47.879783,0.000403,udp,175.103.236.167,48226.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,76,500,288.0,0.13194444444444445,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:18:49.153020,0.000229,udp,147.32.84.170,49798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:18:49.486279,1.924932,tcp,24.242.105.53,56438.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,18,1399,815,584,77.72222222222223,0.5825589706933524,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:18:56.181433,0.000905,udp,111.250.2.164,60488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,1623,205,1418,541.0,0.12630930375847196,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:18:56.222526,1.063232,tcp,147.32.86.20,3678.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,88,92199,1286,90913,1047.715909090909,0.01394809054328138,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:18:59.505692,0.000267,udp,147.32.84.170,34023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:01.720218,0.000453,udp,120.32.148.70,54315.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:19:09.506813,0.000385,udp,147.32.84.170,51301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:12.773075,0.001769,udp,50.29.194.179,19585.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:19:12.961161,0.000339,udp,199.255.209.73,2194.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:19:14.231663,0.000261,udp,147.32.84.138,38662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:19:20.153794,0.20923,tcp,147.32.84.170,45809.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:21.839076,99.152977,udp,68.58.118.84,51906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:19:25.251505,0.000234,udp,147.32.84.138,46003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:19:30.710717,3063.093018,udp,88.164.116.24,54001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:19:39.507188,0.494775,tcp,147.32.84.170,35895.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:43.066537,67.40007,tcp,147.32.84.165,4648.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:19:49.506177,0.000381,udp,147.32.84.170,46291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:49.622130,0.00033,udp,147.32.84.138,47096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:19:50.154283,0.000326,udp,147.32.84.170,36646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:19:58.341472,0.000304,udp,147.32.84.138,38294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:20:09.505706,0.000298,udp,147.32.84.170,48156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:09.507689,2.597794,tcp,147.32.84.170,39528.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,8,544,404,140,68.0,0.7426470588235294,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:14.111746,0.000491,udp,122.127.64.166,29077.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:20:17.581906,0.000797,icmp,147.32.87.249,,<-,147.32.87.49,2.0,RED,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:20:19.505097,0.000414,udp,147.32.84.170,50000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:23.152536,0.000328,udp,147.32.84.170,52545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:23.154701,0.899406,tcp,147.32.84.170,45817.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,9,1153,549,604,128.11111111111111,0.4761491760624458,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:24.007572,0.00045,udp,147.32.84.138,35310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:20:29.505117,0.000416,udp,147.32.84.170,46255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:29.506006,0.000383,udp,147.32.84.170,50059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:29.507105,0.252528,tcp,147.32.84.170,39531.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:37.467766,0.00017,udp,147.32.84.138,40924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:20:37.640030,0.00056,udp,58.211.101.146,60329.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,584,77,507,292.0,0.13184931506849315,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:20:39.505545,0.312091,udp,147.32.84.170,52164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:39.818200,0.000388,udp,147.32.84.170,55777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:45.719235,1.282,tcp,147.32.84.164,39144.0,->,119.167.242.109,27031.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,4,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 04:20:49.504956,0.000401,udp,147.32.84.170,58283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:49.792841,71.81015,tcp,147.32.84.165,4649.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:20:54.153533,0.000367,udp,147.32.84.170,49757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:54.154934,14.011669,tcp,147.32.84.170,45821.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,11,1293,623,670,117.54545454545455,0.48182521268368134,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:20:57.124064,7.585324,udp,147.32.84.229,13363.0,<->,71.22.186.126,64877.0,CON,0.0,0.0,6,3035,180,2855,505.8333333333333,0.05930807248764415,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:21:09.243981,2015.141479,udp,194.14.56.188,36032.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,204,204,68.0,0.5,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:21:09.504892,0.001044,udp,147.32.84.170,60672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:21:13.538525,0.201732,tcp,147.32.86.20,3709.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:21:19.505976,0.000283,udp,147.32.84.170,41718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:21:21.123922,0.35085,udp,147.32.84.229,13363.0,<->,114.36.177.174,4265.0,CON,0.0,0.0,4,2945,60,2885,736.25,0.02037351443123939,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:21:22.474720,0.000576,udp,147.32.86.20,63807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:21:22.835709,0.00031,udp,147.32.85.25,55443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:21:39.505981,0.000336,udp,147.32.84.170,46581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:21:42.069677,0.000337,udp,84.43.182.105,16837.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:21:45.603151,0.000762,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:21:49.507144,3.09945,tcp,147.32.84.170,57093.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:21:51.021383,79.657761,tcp,147.32.84.165,4650.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:21:51.620364,0.000264,udp,147.32.84.59,44923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:21:55.780400,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.33,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:22:02.286950,0.000552,udp,184.15.180.37,40204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,639,108,531,319.5,0.16901408450704225,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:22:05.691046,0.000373,udp,147.32.85.34,61433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:09.150532,0.000361,udp,147.32.84.170,60095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:22:13.980992,2.149126,tcp,87.222.90.75,55388.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,11,743,399,344,67.54545454545455,0.5370121130551817,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:22:15.147234,0.000134,udp,147.32.85.25,45682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:15.741805,0.000265,udp,147.32.84.138,41288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:15.741818,0.000266,udp,147.32.84.138,38825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:18.465517,0.000227,udp,147.32.84.138,39106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:18.500085,0.003499,udp,82.236.7.95,63108.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2936,60,2876,734.0,0.020435967302452316,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:22:19.507222,1.588105,tcp,147.32.84.170,38349.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:22:21.786215,0.000388,udp,203.82.92.5,6458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,486,60,273.0,0.8901098901098901,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:22:35.076287,0.000284,udp,147.32.84.138,34119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:22:39.505318,0.000474,udp,147.32.84.170,60660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:22:47.737840,0.00039,udp,125.113.213.176,27491.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,673,72,601,336.5,0.10698365527488855,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:22:49.505065,0.000443,udp,147.32.84.170,50198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:22:49.507018,0.493393,tcp,147.32.84.170,56927.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:22:57.577840,119.331749,udp,98.70.122.82,13342.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:22:58.341730,3560.786377,tcp,174.252.28.98,15041.0,->,147.32.84.229,13363.0,PA_PA,0.0,0.0,1162,119063,54343,64720,102.46385542168674,0.456422230247852,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:22:59.504987,0.000357,udp,147.32.84.170,40989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:05.955189,35.202019,udp,76.109.33.182,3522.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1191,1010,181,198.5,0.8480268681780017,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:23:09.505310,0.000373,udp,147.32.84.170,40985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:10.246414,64.284096,tcp,147.32.84.165,4651.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:23:12.496420,0.0,udp,201.252.178.87,24217.0,->,147.32.84.217,28340.0,INT,0.0,,1,130,130,0,130.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:23:13.801330,0.238654,tcp,147.32.84.170,53301.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:13.856113,0.333338,tcp,147.32.84.170,39252.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:14.468675,0.247892,tcp,147.32.84.170,39255.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:18.005056,0.000337,udp,147.32.84.170,36013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:19.505364,0.000504,udp,147.32.84.170,55264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:19.507475,0.017588,tcp,147.32.84.170,45242.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:24.146257,0.00022,udp,68.13.248.56,44242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:23:29.505286,0.000542,udp,147.32.84.170,60825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:29.506381,0.000288,udp,147.32.84.170,41696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:31.971589,3575.51709,icmp,147.32.87.1,261.0,->,147.32.87.4,37664.0,RED,0.0,,15,1050,1050,0,70.0,1.0,4,0,flow=Background,Background,-1 2011-08-17 04:23:37.424586,0.000405,udp,216.97.223.195,39303.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:23:42.120955,0.000251,udp,147.32.84.138,33359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:23:43.141405,115.290863,tcp,190.90.34.177,40862.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,31,6792,1877,4915,219.09677419354838,0.2763545347467609,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:23:44.555006,0.002999,udp,91.183.34.178,57163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:23:48.153110,0.000283,udp,147.32.84.170,33227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:23:49.507291,0.018406,tcp,147.32.84.170,38369.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:24:13.046207,0.000515,udp,190.24.75.251,17312.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:24:14.097719,61.312305,tcp,147.32.84.165,4652.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:24:17.581051,0.00018,udp,147.32.85.25,51213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:24:18.151779,0.000286,udp,147.32.84.170,60374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:24:19.507123,0.017619,tcp,147.32.84.170,56947.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:24:22.165284,0.000268,udp,147.32.84.171,38181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:24:23.968986,0.000471,udp,64.13.161.57,57028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,77,469,273.0,0.14102564102564102,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:24:28.986074,0.003197,udp,31.63.173.222,37495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2939,60,2879,734.75,0.02041510717931269,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:24:29.545640,0.000303,udp,71.115.112.253,50523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:24:32.019769,0.000248,udp,147.32.84.138,57631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:24:37.075343,0.161112,udp,147.32.84.229,13363.0,<->,50.81.46.214,5541.0,CON,0.0,0.0,4,2956,60,2896,739.0,0.02029769959404601,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:24:46.851101,0.000207,udp,147.32.84.138,55034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:24:49.154009,0.233557,tcp,147.32.84.170,58404.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:24:49.507043,0.017792,tcp,147.32.84.170,56951.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:24:52.174478,0.000382,udp,147.32.84.59,52897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:24:59.506338,0.000379,udp,147.32.84.170,34613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:02.454708,0.00033,udp,147.32.84.138,52710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:25:02.729394,60.387058,tcp,147.32.84.162,54797.0,->,147.32.80.13,80.0,SRPA_SPA,0.0,0.0,8,1420,948,472,177.5,0.6676056338028169,4,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 04:25:05.352031,0.000326,udp,84.228.136.9,21348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:25:09.506157,0.000378,udp,147.32.84.170,55439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:09.507224,0.018365,tcp,147.32.84.170,49935.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:10.469310,525.546326,udp,147.32.84.229,13363.0,<->,201.82.62.10,19691.0,CON,0.0,0.0,20,5023,765,4258,251.15,0.1522994226557834,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:25:14.965353,61.352825,tcp,147.32.84.165,4653.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:25:19.505396,0.000344,udp,147.32.84.170,58758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:20.162033,0.269407,tcp,147.32.84.170,58409.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:27.049772,0.00032,udp,147.32.86.20,58146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:25:29.505184,0.000408,udp,147.32.84.170,35928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:29.506146,0.00034,udp,147.32.84.170,48288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:33.232229,1838.044189,udp,124.120.202.192,14641.0,->,147.32.86.31,60722.0,INT,0.0,,14,1118,1118,0,79.85714285714286,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:25:35.712527,3156.209717,udp,84.201.199.80,21276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:25:39.614329,0.000424,udp,147.32.84.170,43809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:39.615510,0.017958,tcp,147.32.84.170,54572.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:42.239562,0.000317,udp,147.32.84.59,51024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:25:45.721533,0.068034,tcp,147.32.84.164,39093.0,->,212.162.11.102,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,4,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 04:25:48.574987,0.000397,udp,82.227.127.75,49136.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:25:49.505406,0.000435,udp,147.32.84.170,34723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:25:58.357263,0.000377,udp,66.30.99.142,60982.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:26:01.648043,0.000434,udp,75.152.170.240,63895.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:26:05.594722,0.000271,udp,147.32.85.34,60015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,86,241,163.5,0.26299694189602446,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:26:09.505558,0.000438,udp,147.32.84.170,42606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:15.345741,0.000448,udp,147.32.85.25,59208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:26:15.853846,61.419399,tcp,147.32.84.165,4654.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:26:19.506498,0.000373,udp,147.32.84.170,54572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:19.507528,0.017704,tcp,147.32.84.170,45265.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:21.152480,0.000241,udp,147.32.84.170,47722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:21.154454,0.209587,tcp,147.32.84.170,58417.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:26.668360,1.493564,tcp,207.119.52.89,49798.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,24,1904,1087,817,79.33333333333333,0.5709033613445378,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:26:29.495696,6.391336,tcp,66.249.72.182,55309.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,25,14620,1228,13392,584.8,0.08399452804377565,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:26:29.507753,0.017816,tcp,147.32.84.170,56964.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:26:37.736994,0.000364,udp,147.32.86.20,59570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:26:42.682671,0.000207,udp,147.32.84.59,51376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:26:59.506379,0.000313,udp,147.32.84.170,54345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:07.260044,0.000102,udp,147.32.85.25,38328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:27:09.169376,1502.583496,udp,147.32.84.229,13363.0,<->,165.230.172.175,10516.0,CON,0.0,0.0,4,269,149,120,67.25,0.5539033457249071,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:27:10.991416,355.249451,udp,71.75.236.46,33414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,696,154,542,174.0,0.22126436781609196,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:27:16.782250,70.48262,tcp,147.32.84.165,4655.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:27:19.505629,0.00038,udp,147.32.84.170,38937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:25.692053,3071.663086,udp,24.231.53.180,8454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1418,156,1262,354.5,0.11001410437235543,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:27:29.506524,0.000286,udp,147.32.84.170,45225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:36.581728,0.000303,udp,173.176.235.251,61187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:27:39.506611,0.00029,udp,147.32.84.170,33406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:39.507609,0.017818,tcp,147.32.84.170,49235.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:49.506461,0.000301,udp,147.32.84.170,34518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:49.507467,0.018819,tcp,147.32.84.170,49236.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:27:59.505658,0.000359,udp,147.32.84.170,60977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:07.799994,0.001386,udp,217.211.65.95,52697.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:28:09.508570,0.018644,tcp,147.32.84.170,38542.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:14.233532,0.000478,udp,147.32.84.170,45458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:14.235900,465.400787,tcp,147.32.84.170,54124.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,98,37406,27504,9902,381.6938775510204,0.7352831096615516,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:14.239898,250.034286,tcp,147.32.84.170,54127.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:14.472386,0.000116,udp,147.32.85.25,39434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:28:19.508592,0.018043,tcp,147.32.84.170,49252.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:19.582738,0.000208,udp,147.32.85.25,58101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:28:21.605130,0.000451,udp,61.195.240.215,34075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,76,479,277.5,0.13693693693693693,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:28:23.156235,0.00025,udp,147.32.84.170,54150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:23.157033,0.000279,udp,147.32.84.170,37892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:26.280353,21.268614,udp,71.203.56.14,45383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,820,639,181,136.66666666666666,0.7792682926829269,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:28:26.763296,61.48959,tcp,147.32.84.165,4656.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:28:29.510591,0.01805,tcp,147.32.84.170,38813.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:33.578050,0.000339,udp,208.54.37.175,40328.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:28:39.506671,0.000344,udp,147.32.84.170,40540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:41.533657,3477.526855,udp,119.240.236.47,42512.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,808,627,181,134.66666666666666,0.775990099009901,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:28:49.508602,0.000384,udp,147.32.84.170,41394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:52.620308,0.000302,udp,147.32.86.20,56435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:28:54.154900,0.000396,udp,147.32.84.170,59486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:59.508591,0.000445,udp,147.32.84.170,35995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:28:59.509568,0.000279,udp,147.32.84.170,39278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:02.302227,0.000202,udp,173.231.41.210,35172.0,->,147.32.84.130,33483.0,INT,0.0,,1,82,82,0,82.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:29:09.506693,0.000474,udp,147.32.84.170,55898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:09.508835,0.018062,tcp,147.32.84.170,38818.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:11.081139,0.000258,udp,147.32.85.34,61242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,85,174,129.5,0.3281853281853282,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:29:19.507568,0.00046,udp,147.32.84.170,44908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:19.508769,0.018029,tcp,147.32.84.170,38563.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:25.153938,0.000302,udp,147.32.84.170,59897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:27.761194,70.731659,tcp,147.32.84.165,4657.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:29:29.506799,0.000323,udp,147.32.84.170,44397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:29.507633,0.000307,udp,147.32.84.170,37438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:31.071216,0.000327,udp,67.167.114.148,22019.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:29:31.985922,0.122754,tcp,66.249.66.204,58902.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,2044,641,1403,204.4,0.313600782778865,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:29:46.070132,9.5e-05,udp,147.32.85.25,43733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:29:46.607762,2563.650635,udp,110.168.17.80,52454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:29:49.506813,0.000452,udp,147.32.84.170,34052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:55.635829,1894.049316,udp,195.0.228.129,53068.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,723,537,186,120.5,0.7427385892116183,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:29:56.154122,0.000314,udp,147.32.84.170,36996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:56.155395,0.211504,tcp,147.32.84.170,59995.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:29:59.508522,0.017942,tcp,147.32.84.170,38825.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:30:01.471986,0.000249,udp,147.32.87.36,53205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:30:01.472145,0.000271,udp,147.32.87.36,53205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:30:02.714313,0.00162,udp,82.4.0.51,4568.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,646,586,60,323.0,0.9071207430340558,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:30:10.433775,0.000319,udp,147.32.87.36,59642.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:30:11.665938,0.00033,udp,147.32.84.138,56422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:30:14.006363,3581.398193,udp,147.32.86.96,33214.0,<->,82.208.56.89,123.0,CON,0.0,0.0,236,21240,10620,10620,90.0,0.5,4,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 04:30:26.156845,0.000311,udp,147.32.84.170,43940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:30:27.231299,0.000164,udp,147.32.84.138,39585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:30:28.759801,61.574871,tcp,147.32.84.165,4658.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:30:31.858751,3046.307617,udp,36.39.52.136,46385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:30:39.528214,0.01755,tcp,147.32.84.170,49271.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:30:44.676883,3590.272217,udp,147.32.84.13,52766.0,<->,82.208.56.89,123.0,CON,0.0,0.0,60,5400,2700,2700,90.0,0.5,4,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 04:30:56.153981,0.000367,udp,147.32.84.170,51558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:30:56.154892,0.000381,udp,147.32.84.170,53039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:30:57.600418,0.060741,udp,147.32.84.229,13363.0,<->,81.190.224.174,41995.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:30:57.748427,0.000324,udp,147.32.86.20,57872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:30:59.506617,0.000498,udp,147.32.84.170,44876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:02.288912,0.000287,udp,147.32.84.171,58171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,80,211,145.5,0.27491408934707906,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:31:02.690128,0.002066,udp,147.32.85.25,44856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:31:08.235940,3000.015625,udp,67.60.206.58,5023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:31:09.507796,0.000456,udp,147.32.84.170,41071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:21.481307,0.000326,udp,110.158.75.3,26903.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:31:25.651442,0.000452,udp,76.101.92.55,50609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:31:26.146161,0.213744,tcp,147.32.84.170,60007.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:29.808589,61.565224,tcp,147.32.84.165,4659.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:31:39.388295,0.001796,tcp,147.32.84.2,36208.0,->,147.32.87.27,3306.0,_FSPA,,0.0,16,4956,0,4956,309.75,0.0,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:31:39.508127,0.000451,udp,147.32.84.170,57214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:49.508872,0.017752,tcp,147.32.84.170,49280.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:50.691215,0.0004,udp,216.197.140.36,32417.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:31:56.157206,0.223396,tcp,147.32.84.170,60011.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:31:59.507932,0.000328,udp,147.32.84.170,43505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:32:05.953330,0.583041,udp,147.32.87.48,2295.0,->,147.32.87.99,161.0,INT,0.0,,24,3144,3144,0,131.0,1.0,4,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:32:06.124145,0.000239,udp,147.32.85.34,56525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,85,199,142.0,0.2992957746478873,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:32:08.490202,0.000265,udp,147.32.84.59,40719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:32:09.506971,0.000299,udp,147.32.84.170,41817.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:32:11.543654,2.855441,tcp,66.249.66.250,35539.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,18,7703,1041,6662,427.94444444444446,0.13514215240815267,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:32:19.507889,0.000324,udp,147.32.84.170,33226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:32:30.865235,70.603226,tcp,147.32.84.165,4660.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1200,561,639,100.0,0.4675,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:32:40.956534,0.000306,udp,147.32.86.20,65235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:32:43.504270,3057.927246,udp,186.89.209.87,46735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:32:49.507054,0.000356,udp,147.32.84.170,46104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:32:54.046285,0.000236,udp,147.32.84.138,37770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:32:58.243941,3108.37207,udp,147.32.84.229,13363.0,->,178.40.209.168,13500.0,INT,0.0,,9,1350,1350,0,150.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:33:00.230419,7.004791,tcp,77.31.158.139,58883.0,->,147.32.85.100,3126.0,S_,0.0,,7,482,482,0,68.85714285714286,1.0,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:33:03.494722,0.000393,icmp,147.32.87.249,,<-,147.32.87.3,2.0,RED,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:33:05.361157,0.000134,udp,147.32.85.25,55672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:33:05.512757,0.000385,udp,85.127.117.160,63616.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,77,466,271.5,0.141804788213628,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:33:09.507720,0.000343,udp,147.32.84.170,58996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:33:09.508850,0.017727,tcp,147.32.84.170,51787.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:33:19.598537,1851.803711,tcp,147.32.85.125,57167.0,->,195.113.232.75,80.0,FSPA_FSRPA,0.0,0.0,36,9924,1333,8591,275.6666666666667,0.13432083837162434,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:33:28.158043,0.209341,tcp,147.32.84.170,50927.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:33:29.975709,6.577463,tcp,66.249.72.182,52539.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,20,10029,1059,8970,501.45,0.10559377804367334,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:33:37.360679,4.933729,tcp,66.249.66.250,45426.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,24,10424,1539,8885,434.3333333333333,0.14764006139677666,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:33:40.946262,64.735008,tcp,147.32.84.165,4661.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:33:43.723660,0.000182,udp,147.32.84.138,36924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:33:47.549958,0.000227,udp,147.32.84.138,58189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:33:47.574626,0.000255,udp,147.32.84.138,38915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:33:48.628141,0.161949,udp,147.32.84.229,13363.0,<->,98.64.13.206,65126.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:33:49.508025,0.000399,udp,147.32.84.170,55994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:33:49.509192,0.017523,tcp,147.32.84.170,50179.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:33:58.155694,0.224069,tcp,147.32.84.170,50931.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:01.616777,0.221524,udp,147.32.84.229,13363.0,<->,201.29.248.131,39768.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:02.548135,1576.174805,udp,208.88.186.8,34028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,701,517,184,116.83333333333333,0.7375178316690443,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:04.223138,0.000289,udp,147.32.84.138,34742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:34:06.008439,0.00039,udp,147.32.85.34,50921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:34:09.507785,0.000321,udp,147.32.84.170,38404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:11.391755,0.000449,udp,24.56.196.83,12617.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:12.746283,3160.344971,udp,93.146.149.157,25755.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,496,372,124,124.0,0.75,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:15.982795,0.000185,udp,147.32.84.138,47868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:34:21.911620,2477.994385,udp,18.34.7.128,61892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:29.155654,0.000286,udp,147.32.84.170,56102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:29.156428,0.000325,udp,147.32.84.170,42870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:29.157716,0.217505,tcp,147.32.84.170,50935.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:29.507729,0.000407,udp,147.32.84.170,48995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:29.508997,0.018126,tcp,147.32.84.170,58891.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:29.837560,0.30761,tcp,147.32.86.20,4334.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:34:39.508750,0.000389,udp,147.32.84.170,34884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:41.994748,61.504719,tcp,147.32.84.165,4662.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:34:42.987677,0.000444,udp,186.141.222.160,45821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:49.509123,0.018225,tcp,147.32.84.170,50187.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:34:53.737977,0.000357,udp,188.108.120.70,28839.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:55.086357,3550.146484,udp,147.32.84.229,13363.0,<->,174.88.207.214,24696.0,CON,0.0,0.0,121,21088,9850,11238,174.28099173553719,0.46709028831562976,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:34:58.658909,0.00058,udp,147.32.84.59,56124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:35:00.157343,0.215292,tcp,147.32.84.170,50940.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:35:01.335176,0.001588,udp,124.101.148.83,9999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:35:09.507153,0.000422,udp,147.32.84.170,49074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:35:29.292979,2e-05,udp,147.32.84.138,38420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:35:29.510625,0.000365,udp,147.32.84.170,60682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:35:30.153786,0.000252,udp,147.32.84.170,52816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:35:42.973164,61.568531,tcp,147.32.84.165,4663.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:35:48.003895,0.00157,udp,77.76.173.56,60527.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,506,60,283.0,0.8939929328621908,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:35:49.507216,0.000335,udp,147.32.84.170,42657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:35:59.006092,0.0,tcp,90.176.216.196,20043.0,?>,147.32.84.231,80.0,R_,0.0,,1,60,60,0,60.0,1.0,4,1,flow=Background,Background,-1 2011-08-17 04:35:59.507285,0.000381,udp,147.32.84.170,60209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:36:09.508273,0.000307,udp,147.32.84.170,48547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:36:09.509345,0.018024,tcp,147.32.84.170,50198.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:36:10.596054,0.00052,udp,149.5.45.8,43057.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,680,93,587,340.0,0.13676470588235295,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:36:15.506861,0.000181,udp,147.32.84.138,38972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:36:16.276859,0.00029,udp,147.32.86.20,64262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:36:18.592704,0.000301,udp,147.32.84.138,40946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:36:33.593495,1.339971,tcp,147.32.84.184,60614.0,->,199.59.148.87,443.0,FSPA_FSPA,0.0,0.0,26,7779,1756,6023,299.1923076923077,0.22573595577837768,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:36:36.724134,1235.586548,udp,50.133.19.9,61606.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1092,154,938,273.0,0.14102564102564102,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:36:39.508388,0.000219,udp,147.32.84.170,49864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:36:39.593199,0.000436,udp,147.32.84.222,33423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:36:44.050666,64.616028,tcp,147.32.84.165,4664.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:36:56.892904,2598.449463,udp,24.29.213.55,62970.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,701,156,545,175.25,0.2225392296718973,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:36:59.507275,0.000425,udp,147.32.84.170,50741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:01.154676,0.000348,udp,147.32.84.170,46025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:18.223391,0.0,tcp,147.32.84.165,4665.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.223544,0.0,tcp,147.32.84.165,4666.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.235411,0.0,tcp,147.32.84.165,4668.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.410316,0.0,tcp,147.32.84.165,4669.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.410380,0.0,tcp,147.32.84.165,4670.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.421125,0.0,tcp,147.32.84.165,4672.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.610846,0.0,tcp,147.32.84.165,4673.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:18.610985,0.0,tcp,147.32.84.165,4674.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:19.081830,0.0,tcp,147.32.84.165,4677.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:19.381430,0.0,tcp,147.32.84.165,4678.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:19.509011,0.017987,tcp,147.32.84.170,56350.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:21.841504,0.000205,udp,147.32.85.25,56004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:37:31.799021,0.0,tcp,147.32.84.165,4899.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:31.799042,0.0,tcp,147.32.84.165,4897.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:32.400093,0.0,tcp,147.32.84.165,4912.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:32.400109,0.0,tcp,147.32.84.165,4911.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:32.400270,0.0,tcp,147.32.84.165,4909.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:32.400284,0.0,tcp,147.32.84.165,4914.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:32.400289,0.0,tcp,147.32.84.165,4916.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:37.566272,6.220648,udp,98.164.155.232,25683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1632,1030,602,272.0,0.6311274509803921,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:37:39.507391,0.000476,udp,147.32.84.170,40551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:39.509543,0.01834,tcp,147.32.84.170,52695.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:43.816793,0.0,tcp,147.32.84.165,1180.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:43.816809,0.0,tcp,147.32.84.165,1183.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:43.816814,0.0,tcp,147.32.84.165,1182.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:44.417761,0.0,tcp,147.32.84.165,1192.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:44.417775,0.0,tcp,147.32.84.165,1195.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:44.417780,0.0,tcp,147.32.84.165,1194.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:44.417784,0.0,tcp,147.32.84.165,1196.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:44.417861,0.0,tcp,147.32.84.165,1197.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:48.835938,0.000368,udp,147.32.84.59,57812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:37:49.359141,139.640854,udp,74.84.93.130,59962.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1215,675,540,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:37:49.508431,0.000226,udp,147.32.84.170,47512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:37:55.834211,0.0,tcp,147.32.84.165,1423.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:55.834232,0.0,tcp,147.32.84.165,1421.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:56.434535,61.574177,tcp,147.32.84.165,1244.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:37:56.434549,0.0,tcp,147.32.84.165,1436.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:56.434577,0.0,tcp,147.32.84.165,1435.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:56.434712,0.0,tcp,147.32.84.165,1433.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:56.434721,0.0,tcp,147.32.84.165,1438.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:56.434848,0.0,tcp,147.32.84.165,1440.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:37:57.288060,0.000261,udp,147.32.84.138,39679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:37:59.004093,0.000327,udp,68.185.202.203,34528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:04.313798,0.000151,udp,147.32.84.138,57496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:04.321684,0.000203,udp,147.32.84.138,55494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:05.284970,0.000301,udp,147.32.85.34,55107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:05.288457,0.000341,udp,147.32.85.34,54643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:06.083278,601.746826,udp,77.48.80.21,62233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,338,138,119.0,0.7100840336134454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:07.851320,0.0,tcp,147.32.84.165,1661.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:07.851334,0.0,tcp,147.32.84.165,1664.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:07.851361,0.0,tcp,147.32.84.165,1663.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:08.452135,0.0,tcp,147.32.84.165,1673.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:08.452143,0.0,tcp,147.32.84.165,1676.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:08.452209,0.0,tcp,147.32.84.165,1675.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:08.452392,0.0,tcp,147.32.84.165,1677.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:09.053251,0.0,tcp,147.32.84.165,1688.0,->,192.168.0.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:09.701924,0.00358,udp,128.172.250.24,23909.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2932,60,2872,733.0,0.020463847203274217,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:13.188369,0.275017,tcp,147.32.84.170,52543.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:13.245828,33.345085,tcp,115.75.55.167,55310.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,598,562987,15122,547865,941.4498327759197,0.02686030050427452,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:38:14.242555,0.000205,udp,147.32.84.170,57526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:14.243189,0.000405,udp,147.32.84.170,53081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:14.244294,240.046265,tcp,147.32.84.170,60539.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:14.244315,465.556274,tcp,147.32.84.170,60541.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,102,38172,27570,10602,374.2352941176471,0.7222571518390444,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:14.244352,240.046722,tcp,147.32.84.170,60542.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:14.244396,250.046692,tcp,147.32.84.170,60543.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:15.318576,0.000227,udp,147.32.84.138,57106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:18.922976,0.154881,tcp,147.32.86.96,39686.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,598,0,598,74.75,0.0,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:38:19.509519,0.018099,tcp,147.32.84.170,46888.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:19.868609,0.0,tcp,147.32.84.165,1857.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:19.868623,0.0,tcp,147.32.84.165,1859.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:20.469456,0.0,tcp,147.32.84.165,1866.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:20.469470,0.0,tcp,147.32.84.165,1868.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:20.469518,0.0,tcp,147.32.84.165,1869.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:20.469525,0.0,tcp,147.32.84.165,1870.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:29.509232,0.017906,tcp,147.32.84.170,56368.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:30.769992,0.000218,udp,147.32.84.138,34814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:38:31.885834,0.0,tcp,147.32.84.165,2038.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:31.885849,0.0,tcp,147.32.84.165,2040.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:32.486548,0.0,tcp,147.32.84.165,2047.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:32.486620,0.0,tcp,147.32.84.165,2049.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:32.486679,0.0,tcp,147.32.84.165,2050.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:32.486686,0.0,tcp,147.32.84.165,2051.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:33.087912,0.0,tcp,147.32.84.165,2056.0,->,147.32.80.111,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:39.508398,0.000495,udp,147.32.84.170,40557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:43.903142,0.0,tcp,147.32.84.165,2220.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:43.903239,0.0,tcp,147.32.84.165,2218.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:44.503942,0.0,tcp,147.32.84.165,2229.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:44.504045,0.0,tcp,147.32.84.165,2227.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:44.504052,0.0,tcp,147.32.84.165,2231.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:44.504133,0.0,tcp,147.32.84.165,2230.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:45.104859,0.0,tcp,147.32.84.165,2238.0,->,192.168.1.171,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:55.920572,0.0,tcp,147.32.84.165,2398.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:55.920585,0.0,tcp,147.32.84.165,2400.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:56.491018,0.000342,udp,71.31.68.119,43673.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:56.521765,0.0,tcp,147.32.84.165,2407.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:56.521832,0.0,tcp,147.32.84.165,2409.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:56.521976,0.0,tcp,147.32.84.165,2410.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:56.522044,0.0,tcp,147.32.84.165,2411.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:38:57.900314,0.000383,udp,113.161.160.29,4955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:58.793177,3581.04126,udp,147.32.84.229,13363.0,<->,93.172.131.55,14098.0,CON,0.0,0.0,8,961,717,244,120.125,0.7460978147762747,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:38:59.507434,0.000454,udp,147.32.84.170,34072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:38:59.508400,0.000448,udp,147.32.84.170,41395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:02.050191,0.000334,udp,114.51.26.179,35517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:39:03.156049,0.000243,udp,147.32.84.170,53412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:07.938090,0.0,tcp,147.32.84.165,2549.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:07.938162,61.742207,tcp,147.32.84.165,2452.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:39:08.509464,0.0,tcp,147.32.84.165,2555.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:08.539241,0.0,tcp,147.32.84.165,2557.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:08.539321,0.0,tcp,147.32.84.165,2559.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:08.539433,0.0,tcp,147.32.84.165,2561.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:09.507523,0.000381,udp,147.32.84.170,39590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:09.509469,0.018226,tcp,147.32.84.170,56374.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:14.521609,0.000223,udp,147.32.85.25,46709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:39:19.508412,0.000321,udp,147.32.84.170,33378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:19.954858,0.0,tcp,147.32.84.165,2669.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:20.556250,0.0,tcp,147.32.84.165,2675.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:20.556430,0.0,tcp,147.32.84.165,2677.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:20.556447,0.0,tcp,147.32.84.165,2679.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:20.557919,0.0,tcp,147.32.84.165,2681.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:21.156950,0.0,tcp,147.32.84.165,2683.0,->,147.32.81.98,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:25.629694,0.000302,udp,147.32.86.20,49465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:39:29.508469,0.000415,udp,147.32.84.170,48807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:30.037475,0.000382,udp,147.32.84.138,34414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:39:31.761026,0.0,icmp,146.185.18.252,2563.0,->,147.32.87.113,,URHPRO,0.0,,1,90,90,0,90.0,1.0,4,,flow=Background,Background,-1 2011-08-17 04:39:31.972644,0.0,tcp,147.32.84.165,2789.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:32.573759,0.0,tcp,147.32.84.165,2795.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:32.573773,0.0,tcp,147.32.84.165,2797.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:33.174072,0.0,tcp,147.32.84.165,2801.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:33.174087,0.0,tcp,147.32.84.165,2803.0,->,147.32.81.158,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:34.154319,0.000331,udp,147.32.84.170,51866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:39.507391,0.00038,udp,147.32.84.170,58295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:41.002042,1.380591,tcp,202.107.230.18,1733.0,->,147.32.84.2,80.0,SRA_SA,0.0,0.0,4,252,186,66,63.0,0.7380952380952381,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:39:42.369458,0.000208,udp,147.32.84.138,46809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:39:43.990254,0.0,tcp,147.32.84.165,2909.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:44.590627,0.0,tcp,147.32.84.165,2915.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:44.590643,0.0,tcp,147.32.84.165,2917.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:45.191895,0.0,tcp,147.32.84.165,2921.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:45.191909,0.0,tcp,147.32.84.165,2923.0,->,147.32.81.218,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:48.260858,1.158241,tcp,220.181.51.156,59380.0,->,147.32.84.2,80.0,SRPA_FSPA,0.0,0.0,9,946,462,484,105.11111111111111,0.4883720930232558,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:39:49.507980,0.000477,udp,147.32.84.170,59115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:49.509980,0.017895,tcp,147.32.84.170,46900.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:39:56.007767,0.0,tcp,147.32.84.165,3029.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:56.607866,0.0,tcp,147.32.84.165,3035.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:56.607933,0.0,tcp,147.32.84.165,3037.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:57.209388,0.0,tcp,147.32.84.165,3041.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:57.209497,0.0,tcp,147.32.84.165,3043.0,->,147.32.82.24,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:39:57.319024,0.134758,tcp,147.32.86.20,4618.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:39:58.944190,0.000383,udp,147.32.86.20,58010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:40:05.156023,0.000307,udp,147.32.84.170,47360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:06.136417,0.000286,udp,147.32.85.34,59449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:40:08.024912,0.0,tcp,147.32.84.165,3150.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.024981,0.0,tcp,147.32.84.165,3149.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.625443,0.0,tcp,147.32.84.165,3156.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.625457,0.0,tcp,147.32.84.165,3155.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.625512,0.0,tcp,147.32.84.165,3158.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.625678,0.0,tcp,147.32.84.165,3157.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.625693,0.0,tcp,147.32.84.165,3160.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:08.692276,1.039958,tcp,147.32.86.20,4628.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,90,93754,1346,92408,1041.7111111111112,0.01435672077991339,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:40:09.226092,0.0,tcp,147.32.84.165,3161.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:09.226157,61.687969,tcp,147.32.84.165,3181.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:40:09.226218,0.0,tcp,147.32.84.165,3162.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:09.226282,0.0,tcp,147.32.84.165,3163.0,->,147.32.82.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:09.507516,0.000367,udp,147.32.84.170,46383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:09.508393,0.000283,udp,147.32.84.170,57984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:09.766063,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.54,32344.0,ECR,,0.0,2,196,0,196,98.0,0.0,4,0,flow=Background,Background,-1 2011-08-17 04:40:20.042150,0.0,tcp,147.32.84.165,3270.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:20.642684,0.0,tcp,147.32.84.165,3276.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:20.642840,0.0,tcp,147.32.84.165,3278.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:21.243373,0.0,tcp,147.32.84.165,3282.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:21.243389,0.0,tcp,147.32.84.165,3284.0,->,147.32.82.144,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:26.344912,0.000328,udp,123.211.105.72,63073.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:40:26.567656,0.000304,udp,147.32.86.20,54977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:40:29.507947,0.000482,udp,147.32.84.170,40344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:32.059631,0.0,tcp,147.32.84.165,3391.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:32.660221,0.0,tcp,147.32.84.165,3397.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:32.660352,0.0,tcp,147.32.84.165,3399.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:33.261231,0.0,tcp,147.32.84.165,3403.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:33.261337,0.0,tcp,147.32.84.165,3405.0,->,147.32.82.204,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:36.152979,0.000253,udp,147.32.84.170,40143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:36.320526,3599.423584,udp,112.200.148.164,1027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,681,156,525,170.25,0.2290748898678414,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:40:39.519579,0.017595,tcp,147.32.84.170,56387.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:44.076755,0.0,tcp,147.32.84.165,3512.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.076769,0.0,tcp,147.32.84.165,3511.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.677410,0.0,tcp,147.32.84.165,3518.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.677424,0.0,tcp,147.32.84.165,3517.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.677429,0.0,tcp,147.32.84.165,3520.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.677479,0.0,tcp,147.32.84.165,3519.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:44.677667,0.0,tcp,147.32.84.165,3522.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:45.278377,0.0,tcp,147.32.84.165,3523.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:45.278392,0.0,tcp,147.32.84.165,3524.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:45.278398,0.0,tcp,147.32.84.165,3525.0,->,147.32.83.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:45.679225,0.001844,udp,162.39.240.81,43036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,475,60,267.5,0.8878504672897196,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:40:49.507609,0.000365,udp,147.32.84.170,49046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:49.508497,0.000328,udp,147.32.84.170,51414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:54.451383,6.03801,udp,147.32.84.229,13363.0,->,140.115.120.132,22384.0,INT,0.0,,3,249,249,0,83.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:40:56.093982,0.0,tcp,147.32.84.165,3632.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.094172,0.0,tcp,147.32.84.165,3631.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.694844,0.0,tcp,147.32.84.165,3638.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.694926,0.0,tcp,147.32.84.165,3637.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.694933,0.0,tcp,147.32.84.165,3640.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.694981,0.0,tcp,147.32.84.165,3639.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:56.694988,0.0,tcp,147.32.84.165,3642.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:57.295937,0.0,tcp,147.32.84.165,3643.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:57.296020,0.0,tcp,147.32.84.165,3644.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:57.296027,0.0,tcp,147.32.84.165,3645.0,->,147.32.83.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:40:59.155940,0.000198,udp,147.32.84.59,53098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:40:59.507543,0.000374,udp,147.32.84.170,56039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:59.508434,0.000307,udp,147.32.84.170,47259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:40:59.509476,0.017719,tcp,147.32.84.170,51405.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:05.299590,0.000179,udp,147.32.84.138,59105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:05.299895,0.000249,udp,147.32.84.138,44283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:07.157593,0.000306,udp,147.32.84.170,39754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:07.159661,0.223731,tcp,147.32.84.170,41800.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:08.111774,0.0,tcp,147.32.84.165,3752.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.111792,0.0,tcp,147.32.84.165,3751.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.712627,0.0,tcp,147.32.84.165,3758.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.712643,0.0,tcp,147.32.84.165,3757.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.712648,0.0,tcp,147.32.84.165,3760.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.712652,0.0,tcp,147.32.84.165,3759.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:08.712825,0.0,tcp,147.32.84.165,3762.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:09.312885,0.0,tcp,147.32.84.165,3763.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:09.312950,0.0,tcp,147.32.84.165,3764.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:09.312959,0.0,tcp,147.32.84.165,3765.0,->,147.32.83.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:13.786422,7.079248,tcp,31.203.52.179,49946.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:41:14.929569,0.000475,udp,121.214.238.245,8723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:41:19.507386,0.000364,udp,147.32.84.170,43330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:19.508351,0.000341,udp,147.32.84.170,37143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:20.128645,61.576187,tcp,147.32.84.165,3795.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:41:20.128730,0.0,tcp,147.32.84.165,3873.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.656330,0.0,tcp,147.32.84.165,3878.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.729725,0.0,tcp,147.32.84.165,3879.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.729741,0.0,tcp,147.32.84.165,3880.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.729746,0.0,tcp,147.32.84.165,3881.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.729750,0.0,tcp,147.32.84.165,3882.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:20.729795,0.0,tcp,147.32.84.165,3883.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:21.082488,0.407367,udp,147.32.84.229,13363.0,<->,61.224.133.213,38937.0,CON,0.0,0.0,3,2833,60,2773,944.3333333333334,0.02117896223085069,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:41:21.330437,0.0,tcp,147.32.84.165,3884.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:21.330502,0.0,tcp,147.32.84.165,3885.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:21.330509,0.0,tcp,147.32.84.165,3886.0,->,147.32.83.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:21.836138,0.000343,udp,147.32.86.20,54696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:29.508476,0.000377,udp,147.32.84.170,52567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:29.509601,0.018,tcp,147.32.84.170,56393.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:31.831644,0.00026,udp,147.32.84.138,41826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:31.854271,0.000303,udp,147.32.84.138,54360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:32.145919,0.0,tcp,147.32.84.165,3993.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746575,0.0,tcp,147.32.84.165,3998.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746589,0.0,tcp,147.32.84.165,3999.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746645,0.0,tcp,147.32.84.165,4000.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746697,0.0,tcp,147.32.84.165,4001.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746708,0.0,tcp,147.32.84.165,4002.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:32.746748,0.0,tcp,147.32.84.165,4003.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:33.347365,0.0,tcp,147.32.84.165,4004.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:33.347453,0.0,tcp,147.32.84.165,4005.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:33.347459,0.0,tcp,147.32.84.165,4006.0,->,147.32.83.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,4,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 04:41:38.148445,0.00024,udp,147.32.84.170,34033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:38.217583,0.065207,tcp,147.32.80.7,14489.0,->,147.32.85.34,25.0,FSPA_FSPA,0.0,0.0,31,11659,10100,1559,376.0967741935484,0.8662835577665323,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:41:39.508404,0.000434,udp,147.32.84.170,44715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:39.509573,0.018202,tcp,147.32.84.170,46916.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:49.508544,0.000386,udp,147.32.84.170,60902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:41:59.136906,0.000334,udp,147.32.84.138,56618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:41:59.509738,0.017618,tcp,147.32.84.170,51413.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:06.017849,0.000255,udp,147.32.85.34,55942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:42:08.159133,0.202932,tcp,147.32.84.170,41808.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:19.508753,0.000353,udp,147.32.84.170,40650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:21.197767,61.57106,tcp,147.32.84.165,4016.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:42:26.087380,0.00022,udp,147.32.84.138,59019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:42:28.755307,0.00034,udp,99.255.219.240,56591.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:42:29.509583,0.018007,tcp,147.32.84.170,41251.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:33.415522,0.001623,udp,69.132.79.112,12284.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:42:35.798482,0.000378,udp,98.204.193.72,41461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:42:38.147679,0.000476,udp,147.32.84.170,60206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:38.148742,0.000304,udp,147.32.84.170,33519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:39.508691,0.000491,udp,147.32.84.170,37625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:42:45.654513,0.000245,udp,147.32.84.138,59450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:42:56.283744,3329.391113,udp,147.32.84.25,43670.0,<->,82.208.56.89,123.0,CON,0.0,0.0,102,9180,4590,4590,90.0,0.5,4,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 04:43:08.156749,0.000284,udp,147.32.84.170,37439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:08.158066,0.21014,tcp,147.32.84.170,51636.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:11.247822,0.000335,udp,109.203.239.115,31131.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,75,464,269.5,0.1391465677179963,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:43:13.429893,0.263653,tcp,147.32.84.170,57616.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:13.488386,0.287651,tcp,147.32.84.170,57806.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:14.087974,0.2685,tcp,147.32.84.170,57809.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:19.510229,0.017862,tcp,147.32.84.170,49681.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:20.426496,0.000387,udp,147.32.84.59,52319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:43:20.452781,0.000208,udp,147.32.84.59,43884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:43:22.225184,64.56913,tcp,147.32.84.165,4017.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:43:28.105274,0.000158,udp,147.32.84.138,57094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:43:29.508647,0.000362,udp,147.32.84.170,57853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:32.450001,0.000316,udp,173.28.113.108,23938.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:43:39.507618,0.000352,udp,147.32.84.170,44965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:39.508487,0.000238,udp,147.32.84.170,40303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:46.808705,3452.260254,udp,147.32.84.15,32861.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,4,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 04:43:49.509453,0.017995,tcp,147.32.84.170,35018.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:50.530053,0.206538,tcp,147.32.86.20,4824.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:43:59.507567,0.000433,udp,147.32.84.170,59647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:43:59.509702,0.017433,tcp,147.32.84.170,35019.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:05.741106,0.000352,udp,147.32.84.138,52979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:44:05.935206,0.000372,udp,147.32.85.34,53694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:44:06.332836,0.000326,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,4,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 04:44:08.796820,0.000416,udp,213.146.167.19,27680.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,78,489,283.5,0.13756613756613756,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:09.155536,0.219441,tcp,147.32.84.170,51650.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:13.314854,0.000286,udp,126.244.166.150,51339.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:15.249777,0.000417,udp,77.35.166.157,13057.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,619,75,544,309.5,0.12116316639741519,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:19.509537,0.017579,tcp,147.32.84.170,49689.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:23.099963,0.039008,udp,147.32.84.229,13363.0,<->,91.149.157.23,26428.0,CON,0.0,0.0,4,2953,60,2893,738.25,0.02031832035218422,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:23.304622,64.510345,tcp,147.32.84.165,4033.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:44:26.993685,0.000386,udp,210.230.179.238,32235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,86,61,73.5,0.5850340136054422,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:29.507689,0.000317,udp,147.32.84.170,43731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:29.509454,0.017916,tcp,147.32.84.170,54799.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:39.507690,0.000456,udp,147.32.84.170,38063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:39.509714,0.018147,tcp,147.32.84.170,33032.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:44:45.133177,0.000348,udp,24.26.75.105,32532.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:44:46.595900,0.206545,tcp,147.32.86.20,4873.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:44:55.590328,0.000311,udp,147.32.84.59,58763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:44:59.507865,0.000361,udp,147.32.84.170,47740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:03.071480,1997.001221,udp,147.32.84.229,13363.0,<->,118.170.204.69,18471.0,CON,0.0,0.0,5,3409,120,3289,681.8,0.03520093869169844,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:03.135334,0.051335,udp,147.32.84.229,13363.0,<->,92.244.242.64,38929.0,CON,0.0,0.0,2,1141,200,941,570.5,0.175284837861525,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:04.762630,0.000254,udp,147.32.84.138,40746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:06.777863,0.000283,udp,59.161.147.155,36005.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:09.692331,0.000278,udp,147.32.85.25,56446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:10.155825,0.000218,udp,147.32.84.170,36620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:19.509994,0.018625,tcp,147.32.84.170,49697.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:20.952825,0.00031,udp,113.161.17.91,53048.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:21.031524,0.000357,udp,147.32.84.138,36273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:23.922112,0.000314,udp,109.255.89.23,13685.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:25.227809,2581.715576,udp,24.220.92.200,8380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1219,1038,181,203.16666666666666,0.8515176374077112,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:45:27.346675,61.43866,tcp,147.32.84.165,4034.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:45:29.508016,0.000351,udp,147.32.84.170,57236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:30.094786,0.000335,udp,147.32.85.25,55580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:39.519307,0.018142,tcp,147.32.84.170,54808.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:40.002300,0.000201,udp,147.32.84.138,50732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:41.156163,0.235925,tcp,147.32.84.170,51663.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:45.732501,7.785409,tcp,147.32.84.164,41787.0,->,114.80.71.110,27031.0,FSA_SRA,0.0,0.0,7,476,338,138,68.0,0.7100840336134454,4,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 04:45:49.507966,0.000403,udp,147.32.84.170,49173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:49.508887,0.000332,udp,147.32.84.170,56972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:49.509958,0.017785,tcp,147.32.84.170,49701.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:55.595903,0.000204,udp,147.32.85.25,54303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:45:59.507751,0.000432,udp,147.32.84.170,48140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:59.508764,0.000431,udp,147.32.84.170,35820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:45:59.509953,0.018017,tcp,147.32.84.170,33043.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:46:05.825677,0.000204,udp,147.32.85.34,58980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:05.831580,0.000171,udp,147.32.85.34,64858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:05.843005,0.00025,udp,147.32.85.34,59312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:07.034973,0.000258,udp,147.32.86.20,58814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:10.768845,0.000299,udp,147.32.84.59,46769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,86,245,165.5,0.2598187311178248,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:12.147022,0.000454,udp,147.32.84.170,55490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:46:16.162024,1.472509,tcp,209.85.161.131,35104.0,->,147.32.85.34,110.0,FSPA_FSPA,0.0,0.0,29,2552,1121,1431,88.0,0.43926332288401254,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:46:22.341376,3279.495605,udp,115.124.220.66,3650.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1204,158,1046,301.0,0.13122923588039867,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:46:28.303660,64.430588,tcp,147.32.84.165,4035.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,497,579,107.6,0.46189591078066916,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:46:28.303846,0.000404,udp,89.204.137.75,21576.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:46:28.677175,0.000263,udp,147.32.84.138,59036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:46:29.508095,0.00046,udp,147.32.84.170,60375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:46:33.685217,3222.823975,udp,109.229.148.122,51089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:46:37.269100,3.244137,tcp,66.249.66.187,60584.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,2553,2587155,58057,2529098,1013.3783783783783,0.02244047998670354,4,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 04:46:42.155647,0.000316,udp,147.32.84.170,38339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:46:48.532674,0.189791,udp,147.32.84.229,13363.0,<->,65.189.240.148,47064.0,CON,0.0,0.0,2,611,73,538,305.5,0.11947626841243862,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:46:49.510463,0.018145,tcp,147.32.84.170,35042.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:46:59.509172,0.000264,udp,147.32.84.170,54235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:02.604919,1785.032837,udp,61.231.72.178,35807.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1028,908,120,257.0,0.8832684824902723,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:47:09.510352,0.017928,tcp,147.32.84.170,38964.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:12.889905,2589.725342,udp,61.225.144.126,50523.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:47:16.022066,0.000215,udp,147.32.84.59,38857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:47:19.827082,0.000428,udp,147.32.84.170,55652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:19.828347,250.05368,tcp,147.32.84.170,60790.0,->,74.125.232.206,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:19.908967,0.000267,udp,147.32.84.170,35441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:19.911533,250.086151,tcp,147.32.84.170,33292.0,->,74.125.232.205,80.0,FSPA_FSRPA,0.0,0.0,21,2809,1460,1349,133.76190476190476,0.5197579209683161,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:20.033214,249.965469,tcp,147.32.84.170,57419.0,->,209.85.148.82,80.0,FSPA_FSPA,0.0,0.0,21,2460,1136,1324,117.14285714285714,0.46178861788617886,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:20.721558,2846.186035,udp,122.135.36.233,51936.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,3500,363,3137,291.6666666666667,0.10371428571428572,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:47:21.079760,0.000253,udp,147.32.84.59,37279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:47:27.334664,0.000164,udp,147.32.85.25,40683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:47:27.478493,0.206094,tcp,147.32.86.20,1044.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:47:29.272121,64.010223,tcp,147.32.84.165,4036.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:47:34.788102,0.000472,udp,147.32.87.33,57152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:47:36.123459,0.000271,udp,147.32.84.59,34594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:47:39.509594,0.000405,udp,147.32.84.170,53282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:44.158157,0.000242,udp,147.32.84.170,43804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:44.159110,0.000361,udp,147.32.84.170,47634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:49.511953,0.018375,tcp,147.32.84.170,50882.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:47:59.511844,0.017918,tcp,147.32.84.170,56990.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:00.006451,0.001551,udp,12.28.163.40,8309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:48:03.522882,0.000215,udp,147.32.84.138,51436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:03.531006,0.000168,udp,147.32.84.138,48268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:05.632157,0.000308,udp,147.32.85.34,62320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:05.664091,0.000281,udp,147.32.85.34,62210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:06.826553,3467.264648,udp,147.32.84.15,32862.0,<->,147.251.48.140,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,4,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 04:48:07.298875,0.000276,udp,147.32.87.36,33929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,4,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 04:48:08.649665,22.613468,tcp,175.142.187.30,51788.0,->,147.32.84.229,80.0,SR_SA,0.0,0.0,26,1784,1088,696,68.61538461538461,0.6098654708520179,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:48:09.510146,0.000464,udp,147.32.84.170,36972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:11.873670,22.051439,tcp,175.142.187.30,51796.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,28,1904,1208,696,68.0,0.634453781512605,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:48:13.440690,0.282609,tcp,147.32.84.170,35717.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:14.244548,245.642227,tcp,147.32.84.170,38863.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:14.981131,0.000219,udp,147.32.84.138,47695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:15.156778,0.000206,udp,147.32.84.170,45443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:18.248095,1.3e-05,icmp,147.32.86.15,,<-,147.32.87.4,2.0,ECR,,0.0,2,196,0,196,98.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:48:19.514060,0.018098,tcp,147.32.84.170,57005.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:24.651045,1989.677612,udp,68.82.47.39,2843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3454,527,2927,575.6666666666666,0.1525767226404169,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:48:25.092511,0.000673,udp,147.32.84.138,42777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:29.043772,126.669594,tcp,147.32.84.3,43403.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,18,4704,3682,1022,261.3333333333333,0.7827380952380952,4,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 04:48:32.847169,64.41597,tcp,147.32.84.165,4037.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1138,499,639,103.45454545454545,0.4384885764499121,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:48:39.511814,0.00042,udp,147.32.84.170,58848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:39.512789,0.000367,udp,147.32.84.170,43880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:43.042423,0.000346,udp,147.32.86.20,54575.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:46.156470,0.000252,udp,147.32.84.170,43881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:46.158670,0.234416,tcp,147.32.84.170,37450.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:49.512127,0.018195,tcp,147.32.84.170,51928.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:48:51.274634,0.000233,udp,147.32.84.59,39537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,86,249,167.5,0.25671641791044775,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:48:55.188366,3.11912,tcp,109.183.230.8,44042.0,->,147.32.84.19,995.0,FSPA_FSRPA,0.0,0.0,74,35509,3151,32358,479.85135135135135,0.08873806640569996,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:48:59.512138,0.018293,tcp,147.32.84.170,51929.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:49:06.471701,1218.600098,udp,178.93.1.178,37560.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1110,150,960,277.5,0.13513513513513514,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:49:06.905361,0.00042,udp,147.32.84.138,40597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:49:15.629937,0.000541,udp,193.239.72.162,65268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1004,76,928,502.0,0.07569721115537849,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:49:17.157449,0.000266,udp,147.32.84.170,39404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:49:17.159464,0.264817,tcp,147.32.84.170,37454.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:49:19.512827,0.018202,tcp,147.32.84.170,50906.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:49:26.411024,0.590061,tcp,65.122.168.1,27589.0,->,147.32.84.229,13363.0,SR_SA,0.0,0.0,3,216,138,78,72.0,0.6388888888888888,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:49:29.962100,0.000319,udp,147.32.85.25,49561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:49:34.025326,9e-06,icmp,147.32.86.96,,<-,147.32.87.49,3423.0,ECR,,0.0,2,196,0,196,98.0,0.0,4,0,flow=Background,Background,-1 2011-08-17 04:49:36.827846,61.298813,tcp,147.32.84.165,4038.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,9,1016,437,579,112.88888888888889,0.4301181102362205,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:49:38.590878,3075.915283,udp,65.36.90.157,50304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:49:43.364561,0.000754,udp,24.140.27.40,15256.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,994,77,917,497.0,0.07746478873239436,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:49:48.146512,0.000226,udp,147.32.84.170,46492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:49:50.649423,0.000237,udp,147.32.85.25,52507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:05.507338,0.000293,udp,147.32.85.34,49914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:05.536405,0.00021,udp,147.32.85.34,58609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:09.511229,0.00041,udp,147.32.84.170,34506.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:09.512113,0.000279,udp,147.32.84.170,36050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:09.513087,0.018248,tcp,147.32.84.170,57019.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:13.487816,0.000176,udp,147.32.85.34,57261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:19.099743,3060.931885,udp,87.244.141.190,57449.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1184,874,310,118.4,0.7381756756756757,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:50:19.234664,0.000257,udp,113.161.73.27,28356.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,4,1,flow=Background-UDP-Established,Background,-1 2011-08-17 04:50:19.510404,0.000312,udp,147.32.84.170,38156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:20.175023,0.000457,udp,108.128.193.195,33564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,64,246,155.0,0.2064516129032258,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:50:26.225470,0.000223,udp,147.32.85.25,47092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:29.510324,0.000362,udp,147.32.84.170,48652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:29.952237,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:50:36.006252,0.000514,udp,84.240.211.105,55441.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,583,81,502,291.5,0.13893653516295026,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:50:37.696722,61.297401,tcp,147.32.84.165,4039.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:50:39.511835,0.009865,udp,147.32.84.170,48004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:49.511243,0.000409,udp,147.32.84.170,34822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:50:50.716290,0.000199,udp,147.32.84.138,49808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:50.716481,0.000256,udp,147.32.84.138,54916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:50:57.335470,2.4e-05,udp,81.184.70.226,4285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:50:59.513406,0.017705,tcp,147.32.84.170,57026.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:01.582496,0.000241,udp,147.32.84.138,55279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:03.377288,0.000217,udp,147.32.84.171,59226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,94,144,119.0,0.3949579831932773,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:09.511391,0.000319,udp,147.32.84.170,44980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:09.512321,0.000366,udp,147.32.84.170,55095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:10.431556,3.165824,udp,66.31.58.162,21601.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,4384,120,4264,730.6666666666666,0.02737226277372263,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:51:19.159083,0.000243,udp,147.32.84.170,44714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:19.159834,0.000317,udp,147.32.84.170,47008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:19.511520,0.000461,udp,147.32.84.170,37274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:20.135466,0.000304,udp,67.174.214.221,43278.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:51:29.512155,0.000298,udp,147.32.84.170,56788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:38.564778,70.326904,tcp,147.32.84.165,4040.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,12,1271,572,699,105.91666666666667,0.4500393391030684,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:51:39.512402,0.000271,udp,147.32.84.170,53753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:44.137911,0.000248,udp,147.32.85.25,50040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:44.178024,0.000284,udp,147.32.85.25,54619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:49.219403,0.000163,udp,147.32.85.25,50639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:50.158038,0.000264,udp,147.32.84.170,44075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:50.158878,0.000459,udp,147.32.84.170,48310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:50.160366,0.234281,tcp,147.32.84.170,37475.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:51:55.166675,2303.797852,udp,68.58.161.153,63693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1114,153,961,278.5,0.13734290843806105,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:51:56.321909,0.000202,udp,147.32.84.138,57794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:51:56.801796,0.00024,udp,122.155.37.48,54651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:51:59.511460,0.000374,udp,147.32.84.170,53891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:52:02.979681,0.000357,udp,117.6.132.150,17983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:52:14.591039,0.000189,udp,147.32.84.138,49458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:52:14.775705,0.001575,udp,99.246.234.182,58203.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,496,60,278.0,0.8920863309352518,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:52:19.513511,0.017725,tcp,147.32.84.170,51957.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:52:20.278245,3516.354248,tcp,184.151.127.134,51312.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,358,43074,28734,14340,120.31843575418995,0.6670845521660398,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:52:33.023499,0.20564,tcp,147.32.86.20,1324.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:52:37.756538,0.515967,tcp,147.32.3.51,3862.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:52:39.514499,0.01811,tcp,147.32.84.170,47591.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:52:48.456581,63.650352,tcp,147.32.84.165,4041.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:52:50.086152,0.000504,udp,147.32.86.20,63054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,394,85,309,197.0,0.21573604060913706,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:52:59.514370,0.01779,tcp,147.32.84.170,45966.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:00.647792,0.134645,tcp,147.32.86.20,1350.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:53:02.946414,0.000503,udp,79.183.226.217,15373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:53:03.089390,1.636118,tcp,147.32.84.171,56897.0,->,41.188.119.83,13032.0,FSPA_FSPA,0.0,0.0,13,1630,662,968,125.38461538461539,0.40613496932515336,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:53:04.623222,369.820648,udp,147.32.84.229,13363.0,<->,95.180.51.82,40425.0,CON,0.0,0.0,6,806,610,196,134.33333333333334,0.7568238213399504,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:53:13.636470,0.266718,tcp,147.32.84.170,38080.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:15.383740,513.676758,udp,157.157.117.212,44646.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,823,549,274,102.875,0.6670716889428918,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:53:19.511466,0.000322,udp,147.32.84.170,58176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:19.512291,0.000266,udp,147.32.84.170,57059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:24.973089,0.000385,udp,147.32.84.138,58392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:53:29.511317,0.000378,udp,147.32.84.170,47179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:39.511413,0.000376,udp,147.32.84.170,52664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:39.512324,0.000318,udp,147.32.84.170,38070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:44.924171,0.000441,udp,113.106.81.193,16000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,78,497,287.5,0.1356521739130435,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:53:46.149207,0.205621,tcp,147.32.86.20,1388.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:53:49.511361,0.000345,udp,147.32.84.170,51993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:49.583390,0.000243,udp,147.32.84.138,45623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:53:51.677013,61.298042,tcp,147.32.84.165,4042.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:53:52.146846,0.000265,udp,147.32.84.170,52450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:53:56.601160,0.000271,udp,147.32.84.138,33656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:08.254570,0.906582,tcp,147.32.3.51,3867.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,4,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 04:54:09.513182,5e-06,udp,147.32.84.170,42444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:09.513576,0.017774,tcp,147.32.84.170,49200.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:11.893581,0.000202,udp,147.32.85.25,49657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:18.921938,0.000347,udp,68.196.183.216,1426.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:54:22.153431,0.000205,udp,147.32.84.170,38936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:29.511460,0.000365,udp,147.32.84.170,33051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:29.512298,0.00031,udp,147.32.84.170,55215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:33.391110,0.00034,udp,147.32.84.138,52148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:33.416502,0.000301,udp,147.32.84.138,54896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:33.802583,2549.974365,udp,66.75.73.160,17467.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5857,120,5737,732.125,0.020488304592794947,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:54:36.542347,0.000405,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:54:39.905382,8e-06,icmp,147.32.86.96,,<-,147.32.87.49,40034.0,ECR,,0.0,2,196,0,196,98.0,0.0,4,0,flow=Background,Background,-1 2011-08-17 04:54:41.006997,0.000534,udp,2.28.157.56,17941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,872,77,795,436.0,0.08830275229357798,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:54:44.837276,0.000323,udp,85.18.36.49,57074.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:54:45.796507,0.000571,udp,62.105.31.72,11432.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,587,82,505,293.5,0.13969335604770017,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:54:49.513590,0.017746,tcp,147.32.84.170,47612.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:52.157768,0.00041,udp,147.32.84.170,40216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:52.158748,0.000367,udp,147.32.84.170,54505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:52.160093,0.215125,tcp,147.32.84.170,47168.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:52.516198,0.000215,udp,147.32.85.25,53023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:52.545012,61.31229,tcp,147.32.84.165,4043.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:54:55.408385,63.18771,tcp,117.102.101.219,35737.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,31,7170,1872,5298,231.29032258064515,0.2610878661087866,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:54:57.619642,0.000279,udp,147.32.85.25,54664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:54:59.512772,0.000329,udp,147.32.84.170,39191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:54:59.513818,0.018117,tcp,147.32.84.170,47614.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:00.965801,0.000246,udp,147.32.84.138,60053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:55:02.973214,2.28741,tcp,41.201.39.32,10423.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,16,1185,656,529,74.0625,0.5535864978902953,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:55:07.848778,0.00069,udp,147.32.84.138,43095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:55:08.020505,536.783203,udp,147.32.84.229,13363.0,<->,98.144.33.90,25554.0,CON,0.0,0.0,6,3077,2950,127,512.8333333333334,0.9587260318492038,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:55:09.511810,0.000528,udp,147.32.84.170,40472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:10.869193,0.000642,udp,218.56.90.82,16378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1269,77,1192,634.5,0.06067769897557131,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:55:22.164189,0.209543,tcp,147.32.84.170,47172.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:24.889291,3083.757568,udp,58.98.231.75,36662.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:55:27.487519,0.00044,tcp,147.32.87.249,3450.0,->,147.32.87.54,8530.0,_SRA,,0.0,6,364,0,364,60.666666666666664,0.0,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:55:29.514514,0.017904,tcp,147.32.84.170,49211.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:32.770087,1.3e-05,icmp,147.32.84.23,,<-,147.32.87.2,2.0,ECR,,0.0,2,196,0,196,98.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:55:34.199666,0.003438,udp,114.46.108.105,20373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2923,60,2863,730.75,0.020526855969893943,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:55:39.523310,0.017635,tcp,147.32.84.170,45991.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:43.967436,0.000279,udp,147.32.86.20,49482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:55:45.739889,0.302851,tcp,147.32.84.164,36832.0,->,4.28.20.42,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,4,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 04:55:46.798806,0.000591,udp,2.90.148.38,60885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,579,78,501,289.5,0.13471502590673576,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:55:48.872685,0.000221,udp,147.32.85.25,58379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:55:49.511839,0.000399,udp,147.32.84.170,44208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:52.159701,0.000317,udp,147.32.84.170,41690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:55:53.422509,61.298561,tcp,147.32.84.165,4044.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:55:57.781103,0.206968,tcp,147.32.86.20,1507.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:56:02.068576,2067.500732,udp,58.164.41.134,20312.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1152,578,574,288.0,0.5017361111111112,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:56:03.589363,0.00018,udp,147.32.85.89,52006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:56:04.236931,0.000555,udp,75.23.169.76,33905.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:56:06.016759,0.000291,udp,147.32.85.34,63293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:56:07.830106,0.0,udp,95.167.53.98,16465.0,->,147.32.84.131,51413.0,INT,0.0,,1,107,107,0,107.0,1.0,4,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 04:56:09.082503,0.000362,udp,68.52.79.233,5698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,78,475,276.5,0.1410488245931284,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:56:15.620210,0.684804,tcp,210.94.41.89,63836.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1494,1019,475,149.4,0.6820615796519411,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:56:23.159381,0.000344,udp,147.32.84.170,44538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:56:28.683332,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.49,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,4,1,flow=Background,Background,-1 2011-08-17 04:56:29.512501,0.00022,udp,147.32.84.170,46878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:56:39.515275,0.018435,tcp,147.32.84.170,49220.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,8,544,272,272,68.0,0.5,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:56:40.742326,2424.594727,udp,109.108.39.67,63230.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:56:48.850711,0.000212,udp,147.32.84.138,51998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:56:49.514197,0.018125,tcp,147.32.84.170,41561.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:56:49.784731,1.058403,tcp,147.32.86.20,1552.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,93542,1526,92016,1016.7608695652174,0.01631352761326463,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:56:53.163396,0.000457,udp,147.32.84.170,52864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:56:54.291392,61.311169,tcp,147.32.84.165,4045.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:56:59.511823,0.000507,udp,147.32.84.170,35615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:00.654823,0.000416,udp,147.32.85.25,37957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:07.343092,0.000234,udp,147.32.84.138,51607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:09.514465,0.000281,udp,147.32.84.170,37479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:12.798111,0.060418,udp,208.54.35.136,45358.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,685,564,121,171.25,0.8233576642335766,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:57:19.627582,0.000213,udp,147.32.84.138,55731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:21.220706,0.001334,udp,125.231.191.231,2169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,513,60,286.5,0.8952879581151832,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:57:23.162129,0.000298,udp,147.32.84.170,40797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:23.164370,0.212355,tcp,147.32.84.170,47188.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:29.512900,0.000385,udp,147.32.84.170,56737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:30.015738,60.272251,tcp,180.246.178.5,54827.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,23,2382,1490,892,103.56521739130434,0.6255247691015953,4,0,flow=Background-TCP-Established,Background,-1 2011-08-17 04:57:37.564884,0.000259,udp,147.32.84.59,33127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:37.572617,0.000269,udp,147.32.84.59,50242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:37.937957,0.000202,udp,147.32.84.59,47448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:37.943631,0.000236,udp,147.32.84.59,33794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:39.512694,0.000303,udp,147.32.84.170,59454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:42.434218,0.000288,udp,147.32.84.138,38167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:57:49.513727,0.018238,tcp,147.32.84.170,41105.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:57:55.168097,70.191307,tcp,147.32.84.165,4046.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,13,1406,707,699,108.15384615384616,0.5028449502133713,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:57:59.512919,0.000338,udp,147.32.84.170,41524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:00.873585,0.678626,tcp,210.94.41.89,59825.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1495,1021,474,149.5,0.682943143812709,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:58:02.219503,6.157939,tcp,66.249.72.134,58087.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,28,14218,1767,12451,507.7857142857143,0.1242790828527219,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:58:07.190999,0.000291,udp,147.32.84.138,36650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:58:09.512539,0.00049,udp,147.32.84.170,49003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:14.249275,250.037521,tcp,147.32.84.170,59761.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:14.249501,240.037018,tcp,147.32.84.170,59764.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:14.249625,250.037354,tcp,147.32.84.170,59765.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:14.249632,250.03688,tcp,147.32.84.170,59766.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:16.408647,0.000169,udp,147.32.84.138,41168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:58:19.921005,3131.295654,udp,84.242.66.13,22707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2205,1647,558,122.5,0.746938775510204,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:58:24.161554,0.000272,udp,147.32.84.170,47929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:24.162405,0.24702,tcp,147.32.84.170,57800.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:39.513972,0.000285,udp,147.32.84.170,52485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:45.344902,2655.533447,udp,195.116.41.14,52998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:58:47.964523,0.000178,udp,147.32.84.138,44101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:58:49.514264,0.017821,tcp,147.32.84.170,41123.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:51.018547,0.00036,udp,147.32.84.138,59542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:58:55.076773,3.186486,udp,147.32.84.229,13363.0,<->,87.198.16.216,29186.0,CON,0.0,0.0,4,2899,120,2779,724.75,0.041393583994480856,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:58:55.158706,0.025632,udp,147.32.84.170,47779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:58:59.187862,1831.570312,udp,92.232.213.57,59654.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,727,541,186,121.16666666666667,0.7441540577716643,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:58:59.512874,0.00033,udp,147.32.84.170,48258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:02.903044,0.000249,udp,147.32.84.188,33161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:59:04.929642,61.312782,tcp,147.32.84.165,4047.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,4,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 04:59:12.395325,1.386583,tcp,210.94.41.89,62543.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,24,15187,1482,13705,632.7916666666666,0.09758345953776255,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:59:14.779405,0.000346,udp,67.189.152.243,53584.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,254,192,62,127.0,0.7559055118110236,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:59:21.093032,0.363422,udp,147.32.84.229,13363.0,<->,118.169.133.73,62751.0,CON,0.0,0.0,4,2948,60,2888,737.0,0.0203527815468114,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:59:26.163887,0.000345,udp,147.32.84.170,55058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:27.448944,3220.287354,udp,147.32.84.229,13363.0,<->,95.79.91.94,20050.0,CON,0.0,0.0,8,963,715,248,120.375,0.7424714434060229,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:59:29.515079,0.017749,tcp,147.32.84.170,60106.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:37.432461,0.003196,udp,67.162.115.75,1268.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2927,60,2867,731.75,0.020498804236419543,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:59:39.513652,0.000312,udp,147.32.84.170,54859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:42.056281,0.000342,udp,147.32.84.138,57388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,4,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 04:59:49.514923,0.018387,tcp,147.32.84.170,49802.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:55.072009,0.206253,tcp,147.32.86.20,1717.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,4,1,flow=Background-TCP-Established,Background,-1 2011-08-17 04:59:56.671509,0.003191,udp,76.206.11.65,56288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2925,60,2865,731.25,0.020512820512820513,4,0,flow=Background-UDP-Established,Background,-1 2011-08-17 04:59:59.512905,0.000512,udp,147.32.84.170,50255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 04:59:59.514967,0.017607,tcp,147.32.84.170,59492.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,4,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:00.639523,0.001803,udp,75.149.162.37,18957.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,487,60,273.5,0.8903107861060329,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:00:01.516151,0.000307,udp,147.32.87.36,57593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,86,176,131.0,0.3282442748091603,5,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 05:00:01.581098,0.000404,udp,147.32.87.36,48266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,5,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 05:00:02.575204,1806.088501,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,16,1440,720,720,90.0,0.5,5,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 05:00:05.784489,0.000261,udp,147.32.85.34,52588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:00:05.807916,61.313824,tcp,147.32.84.165,4048.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:00:09.512949,0.000466,udp,147.32.84.170,46061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:10.614879,0.000284,udp,147.32.87.36,33007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,5,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 05:00:18.634846,0.870888,tcp,147.32.86.20,1738.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,94,93189,1646,91543,991.3723404255319,0.017663028898260526,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:00:19.512969,0.000375,udp,147.32.84.170,35802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:19.513962,0.000199,udp,147.32.84.170,32772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:19.514863,0.018192,tcp,147.32.84.170,59494.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:33.670480,0.00014,udp,147.32.84.138,56382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:00:33.685830,0.000289,udp,147.32.84.138,55194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:00:39.533841,0.000371,udp,147.32.84.170,40934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:43.982706,0.000556,udp,113.162.240.219,14009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,76,465,270.5,0.14048059149722736,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:00:49.514350,0.000284,udp,147.32.84.170,45210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:58.159702,0.000263,udp,147.32.84.170,46203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:59.512792,0.000399,udp,147.32.84.170,33579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:00:59.514845,0.017645,tcp,147.32.84.170,49540.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:03.685853,0.001527,udp,72.196.1.189,61499.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:05.728325,0.000315,udp,194.255.31.1,53365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:06.686605,64.118401,tcp,147.32.84.165,4049.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:01:09.517011,0.017978,tcp,147.32.84.170,49813.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:14.821604,0.000237,udp,147.32.84.59,42652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,85,203,144.0,0.2951388888888889,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:01:19.513041,0.001,udp,147.32.84.170,58439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:19.903938,0.000256,udp,147.32.84.59,32798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,85,203,144.0,0.2951388888888889,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:01:20.728816,0.000348,udp,147.32.84.138,51656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:01:21.760423,2494.60083,udp,202.225.232.212,8429.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:22.574976,0.001576,udp,109.121.226.71,31444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,496,60,278.0,0.8920863309352518,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:25.482658,0.0,icmp,71.75.233.12,771.0,->,147.32.84.229,38784.0,URP,0.0,,1,70,70,0,70.0,1.0,5,0,flow=Background,Background,-1 2011-08-17 05:01:29.515135,0.01843,tcp,147.32.84.170,49816.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:42.201240,0.194133,udp,147.32.84.229,13363.0,<->,72.242.234.134,21541.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:44.368125,0.001532,udp,70.245.110.128,3658.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,477,60,268.5,0.888268156424581,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:44.929183,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,5,,flow=Background,Background,-1 2011-08-17 05:01:49.516035,0.01803,tcp,147.32.84.170,60124.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:49.841888,0.001575,udp,208.54.35.136,6223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,480,60,270.0,0.8888888888888888,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:50.084254,0.000232,udp,147.32.84.138,46453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:01:55.829770,0.000269,udp,97.103.179.186,47781.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:01:58.159103,0.000262,udp,147.32.84.170,52918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:58.159851,0.000324,udp,147.32.84.170,59366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:59.513809,0.000384,udp,147.32.84.170,44476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:01:59.514923,0.018407,tcp,147.32.84.170,41149.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:02:07.563124,61.296803,tcp,147.32.84.165,4050.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:02:07.703622,0.000299,udp,147.32.85.25,33044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:02:09.513961,0.000317,udp,147.32.84.170,51205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:02:14.358034,0.0004,udp,71.161.93.137,51000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:15.425774,2230.866211,udp,188.123.57.85,7089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1336,932,404,167.0,0.6976047904191617,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:19.515141,0.017701,tcp,147.32.84.170,41151.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:02:24.193676,0.000318,udp,74.196.235.188,13430.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:33.473249,0.000155,udp,147.32.85.25,48408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:02:36.779388,0.0,udp,78.128.207.222,3976.0,->,239.255.255.253,11427.0,INT,0.0,,1,197,197,0,197.0,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:02:39.515070,0.017994,tcp,147.32.84.170,60423.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:02:41.617494,3554.016846,udp,24.196.126.83,40521.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1218,617,601,203.0,0.506568144499179,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:44.461206,2102.753174,udp,98.24.118.250,5833.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,11,4503,3635,868,409.3636363636364,0.8072396180324228,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:52.833245,1.239599,udp,211.234.222.141,51247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1056,936,120,264.0,0.8863636363636364,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:54.308914,3485.646973,udp,147.32.84.229,13363.0,<->,24.122.230.29,48585.0,CON,0.0,0.0,42,4500,3198,1302,107.14285714285714,0.7106666666666667,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:56.082120,0.021397,udp,99.254.210.106,53816.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,95,478,286.5,0.16579406631762653,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:02:59.182942,0.000293,udp,147.32.84.170,46603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:08.430613,70.343964,tcp,147.32.84.165,4051.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,11,1136,497,639,103.27272727272727,0.4375,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:03:09.513901,0.000457,udp,147.32.84.170,58624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:13.195249,0.293504,tcp,147.32.84.170,50961.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:14.836060,0.000434,udp,78.106.181.190,31526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:03:19.513094,0.000317,udp,147.32.84.170,47171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:25.763766,0.000461,udp,219.78.241.31,35121.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,579,82,497,289.5,0.14162348877374784,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:03:29.187821,126.814102,tcp,147.32.84.3,37904.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,18,4704,3682,1022,261.3333333333333,0.7827380952380952,5,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 05:03:29.515701,0.018072,tcp,147.32.84.170,52414.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:30.160401,0.000278,udp,147.32.84.170,54681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:34.009783,2616.447021,udp,121.80.45.28,39727.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:03:39.512898,0.000333,udp,147.32.84.170,40369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:45.852851,2555.833008,udp,147.32.84.229,13363.0,<->,46.165.49.40,27669.0,CON,0.0,0.0,14,1637,1106,531,116.92857142857143,0.6756261453879047,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:03:49.720064,8.000329,udp,147.32.87.48,2609.0,->,147.32.86.244,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:03:59.515018,0.018021,tcp,147.32.84.170,35994.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:03:59.675673,0.000286,udp,147.32.86.20,57649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:00.161209,0.000321,udp,147.32.84.170,39840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:04:09.308899,61.200203,tcp,147.32.84.165,4052.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:04:09.427017,0.000256,udp,147.32.86.20,52696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:12.875838,0.000269,udp,147.32.84.59,51715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:19.513264,0.000356,udp,147.32.84.170,54756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:04:21.116055,0.142314,udp,147.32.84.229,13363.0,<->,195.134.105.34,22537.0,CON,0.0,0.0,2,1181,215,966,590.5,0.18204911092294665,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:04:22.436485,0.000267,udp,147.32.84.138,34152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:23.635800,6.235644,tcp,168.216.253.93,24038.0,->,147.32.87.24,3389.0,FSPA_SRPA,0.0,0.0,85,9357,3903,5454,110.08235294117647,0.4171208720743828,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:04:29.513775,0.000364,udp,147.32.84.170,55311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:04:35.202625,2498.720947,udp,93.89.199.168,33381.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:04:35.941668,0.000363,udp,147.32.84.138,59837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:42.095156,0.000407,udp,147.32.84.64,64106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:42.744751,0.000558,udp,202.151.164.19,59656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,983,80,903,491.5,0.08138351983723296,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:04:47.436546,0.000347,udp,76.253.133.16,14616.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:04:47.660553,0.000288,udp,89.24.183.217,14366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:04:52.080003,2.378909,tcp,193.252.149.14,48938.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,13,5613,872,4741,431.7692307692308,0.1553536433279886,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:04:57.477978,0.00016,udp,147.32.84.138,59815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:04:59.515206,0.000276,udp,147.32.84.170,36655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:00.988577,0.095235,tcp,66.249.66.204,60956.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,2040,641,1399,204.0,0.3142156862745098,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:05:01.091543,0.000226,udp,147.32.84.138,57945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:01.095303,0.000215,udp,147.32.84.138,55390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:01.158727,0.000318,udp,147.32.84.170,38999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:02.011524,0.000168,udp,147.32.84.222,56761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:04.085723,0.000264,udp,147.32.84.138,55820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:10.189044,60.966297,tcp,147.32.84.165,4053.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:05:13.516814,0.000465,udp,125.4.137.6,47645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,76,479,277.5,0.13693693693693693,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:05:19.514937,0.000225,udp,147.32.84.170,37892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:26.095329,0.000208,udp,147.32.84.138,59015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:27.866837,0.000159,udp,147.32.84.59,49471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:32.165407,0.000369,udp,147.32.84.170,33123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:32.166736,0.227839,tcp,147.32.84.170,35427.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:33.093598,0.063425,udp,147.32.84.229,13363.0,<->,82.47.41.202,63199.0,CON,0.0,0.0,4,2967,60,2907,741.75,0.020222446916076844,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:05:34.329739,3011.589111,udp,76.203.192.232,30389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:05:37.330522,0.000291,udp,147.32.84.138,49851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:05:39.514324,0.02029,udp,147.32.84.170,54200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:39.536278,0.017993,tcp,147.32.84.170,57891.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:40.756890,0.105966,udp,147.32.84.229,13363.0,<->,85.90.106.68,8841.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:05:41.882778,0.001714,udp,188.24.63.74,10123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:05:49.515233,0.0003,udp,147.32.84.170,41404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:05:53.313961,3564.018311,tcp,147.32.84.170,43527.0,->,74.125.39.125,5222.0,PA_PA,0.0,0.0,180,14178,7347,6831,78.76666666666667,0.5181972069403301,5,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:04.899399,1.969017,udp,61.192.98.41,6304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1166,586,580,291.5,0.5025728987993139,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:06:06.304882,0.00029,udp,147.32.85.34,49498.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:06:06.308999,0.000284,udp,147.32.85.34,53489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:06:09.514305,0.000364,udp,147.32.84.170,41178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:10.835488,60.952106,tcp,147.32.84.165,4054.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:06:23.871868,0.00027,udp,147.32.84.138,48072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:06:28.368669,0.000373,udp,147.32.86.20,64805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:06:28.564210,0.991077,udp,147.32.87.48,2637.0,->,147.32.87.102,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:06:29.514227,0.000414,udp,147.32.84.170,46676.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:29.516183,0.018054,tcp,147.32.84.170,60459.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:39.515147,0.000357,udp,147.32.84.170,58187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:49.514227,0.000265,udp,147.32.84.170,47040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:57.944858,0.000274,udp,147.32.84.59,47078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:06:59.516474,0.017954,tcp,147.32.84.170,36018.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:06:59.786589,0.000264,udp,147.32.84.138,49535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:07:04.160817,0.000296,udp,147.32.84.170,36068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:07.491712,14.380622,udp,166.191.208.35,30341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,2046,1020,1026,341.0,0.49853372434017595,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:07:09.514390,0.000582,udp,147.32.84.170,47939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:09.515231,0.000318,udp,147.32.84.170,35718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:09.516039,0.01807,tcp,147.32.84.170,52444.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:11.472797,60.951698,tcp,147.32.84.165,4055.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:07:29.515287,0.000349,udp,147.32.84.170,43984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:29.516366,0.018227,tcp,147.32.84.170,58112.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:36.834395,6.078076,udp,84.242.66.51,54140.0,->,147.32.85.5,21857.0,INT,0.0,,3,441,441,0,147.0,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:07:39.515247,0.000391,udp,147.32.84.170,59635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:39.516365,0.018004,tcp,147.32.84.170,38556.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:40.242105,0.000448,udp,194.72.166.82,11457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,75,476,275.5,0.13611615245009073,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:07:42.772641,3302.58252,icmp,147.32.87.1,261.0,->,147.32.87.48,37664.0,RED,0.0,,23,1610,1610,0,70.0,1.0,5,0,flow=Background,Background,-1 2011-08-17 05:07:45.958679,0.000225,udp,147.32.85.25,52543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:07:49.516080,0.017907,tcp,147.32.84.170,50973.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:54.751967,0.000364,udp,24.131.16.90,53615.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,76,465,270.5,0.14048059149722736,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:07:57.673416,0.000435,udp,93.152.188.28,10482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,76,464,270.0,0.14074074074074075,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:07:59.514627,0.000375,udp,147.32.84.170,42859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:07:59.516619,0.018277,tcp,147.32.84.170,33408.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:02.040638,80.006081,udp,147.32.84.229,13363.0,<->,76.11.42.202,54500.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:08:04.597743,0.002945,icmp,147.32.87.249,,<-,147.32.87.3,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:08:05.216833,0.000543,udp,71.90.94.177,9483.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,942,73,869,471.0,0.07749469214437367,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:08:06.110383,0.000299,udp,147.32.84.138,43318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:09.516260,0.017702,tcp,147.32.84.170,56595.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:12.110237,60.988029,tcp,147.32.84.165,4056.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:08:13.539486,0.425887,tcp,147.32.84.170,42479.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:13.735034,0.280972,tcp,147.32.84.170,41647.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:14.243859,0.000366,udp,147.32.84.170,50675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:14.246425,465.4758,tcp,147.32.84.170,44092.0,->,209.85.148.104,443.0,FSRPA_FSPA,0.0,0.0,104,38256,27486,10770,367.84615384615387,0.7184755332496863,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:14.250975,240.041199,tcp,147.32.84.170,44096.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:14.658683,0.000316,udp,147.32.84.59,40979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:15.039632,0.000301,udp,124.43.82.215,4194.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:08:16.168954,0.000357,udp,147.32.84.138,57226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:21.932157,0.000269,udp,147.32.84.138,60571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:25.507711,0.000165,udp,147.32.84.59,45827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:29.516333,0.017714,tcp,147.32.84.170,38574.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:35.557806,0.003158,udp,74.210.159.157,16913.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2924,60,2864,731.0,0.02051983584131327,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:08:39.514421,0.000349,udp,147.32.84.170,54250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:40.862057,0.000277,udp,147.32.84.59,49213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:52.448072,0.000309,udp,147.32.84.138,43328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:08:54.251435,0.000459,udp,98.163.194.121,19033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,321,64,257,160.5,0.19937694704049844,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:08:59.516265,0.000441,udp,147.32.84.170,52589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:08:59.517127,0.000344,udp,147.32.84.170,41932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:09:00.381023,3126.981689,udp,75.32.7.183,49489.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1623,615,1008,270.5,0.3789279112754159,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:09:05.162761,0.000285,udp,147.32.84.170,58307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:09:12.778164,60.941425,tcp,147.32.84.165,4057.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:09:19.516383,0.018076,tcp,147.32.84.170,33431.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:09:24.228247,0.00028,udp,99.244.194.86,32917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:09:27.055217,0.000341,udp,147.32.84.59,49682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:09:34.373869,1204.42981,udp,95.167.164.146,2121.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,747,561,186,124.5,0.751004016064257,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:09:36.319424,0.230925,tcp,147.32.84.170,39650.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:09:39.514488,0.000497,udp,147.32.84.170,41109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:09:45.501443,5.160688,tcp,188.52.91.218,21428.0,->,147.32.84.229,80.0,FSPA_FSA,0.0,0.0,9,611,303,308,67.88888888888889,0.4959083469721768,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:09:49.514529,0.000378,udp,147.32.84.170,54705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:03.521702,0.000203,udp,147.32.84.138,48544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:10:04.182398,0.00044,udp,119.36.38.189,14104.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:10:07.163813,0.221212,tcp,147.32.84.170,39654.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:07.250187,0.000399,udp,174.126.103.20,6196.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:10:11.194013,3034.051025,udp,118.167.170.244,26427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:10:13.405223,60.96896,tcp,147.32.84.165,4058.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:10:19.516459,0.01762,tcp,147.32.84.170,56624.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:34.376831,242.534119,tcp,147.32.84.3,58768.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,36,6207,4086,2121,172.41666666666666,0.6582890285161914,5,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 05:10:38.162261,0.000197,udp,147.32.84.170,58930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:39.535124,0.000313,udp,147.32.84.170,33800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:39.536214,0.018371,tcp,147.32.84.170,56627.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:41.336191,0.000235,udp,147.32.84.138,40692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:10:47.788943,0.000314,udp,147.32.84.171,60509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,84,294,189.0,0.2222222222222222,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:10:49.040127,0.000286,udp,147.32.84.59,51524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:10:55.021482,0.000281,udp,147.32.84.138,57679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:10:59.514405,0.000328,udp,147.32.84.170,38214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:10:59.515207,0.000264,udp,147.32.84.170,41025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:11:05.181083,0.000282,udp,147.32.84.171,42290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,78,148,113.0,0.34513274336283184,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:11:09.515296,0.000336,udp,147.32.84.170,39354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:11:14.052279,60.967766,tcp,147.32.84.165,4059.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:11:17.323229,0.000547,udp,190.20.38.0,64657.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1151,75,1076,575.5,0.06516072980017376,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:11:37.049702,2.367146,tcp,182.50.154.185,47399.0,->,147.32.84.229,13363.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:11:40.165743,0.214215,tcp,147.32.84.170,39667.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:11:46.416704,0.000246,udp,147.32.85.25,44145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:11:47.610771,0.000513,icmp,147.32.87.249,,<-,147.32.87.48,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:11:48.722233,0.000274,udp,147.32.85.89,34523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:11:56.431987,0.000238,udp,147.32.84.138,44118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:12:05.854428,0.000242,udp,147.32.85.34,57299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:12:09.514698,0.000412,udp,147.32.84.170,55383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:09.516758,0.018369,tcp,147.32.84.170,58161.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:14.040402,3485.365967,tcp,65.49.11.19,80.0,->,147.32.85.96,592.0,SA_,0.0,,4,240,240,0,60.0,1.0,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:12:14.700525,60.963535,tcp,147.32.84.165,4060.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:12:16.030165,0.000205,udp,147.32.84.138,34213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:12:16.830308,0.003182,udp,78.141.181.225,34031.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2926,60,2866,731.5,0.02050580997949419,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:12:18.471064,0.000433,udp,24.68.20.246,49715.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:12:18.523566,0.000555,udp,210.249.27.92,64279.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:12:19.515402,0.000285,udp,147.32.84.170,53850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:19.516357,0.01822,tcp,147.32.84.170,58163.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:25.138158,2148.520508,udp,147.32.84.229,13363.0,<->,213.109.236.198,42619.0,CON,0.0,0.0,4,483,242,241,120.75,0.5010351966873706,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:12:29.515329,0.000272,udp,147.32.84.170,33137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:31.573422,0.206306,tcp,147.32.86.20,2377.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:12:33.292342,60.516441,tcp,201.93.182.107,40557.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,27,5700,2031,3669,211.11111111111111,0.3563157894736842,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:12:41.156350,0.218648,tcp,147.32.84.170,51969.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:12:48.888949,0.025383,tcp,147.32.86.96,55839.0,->,147.32.87.49,12489.0,_FSPA,,0.0,8,556,0,556,69.5,0.0,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:12:59.516635,0.018078,tcp,147.32.84.170,56732.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:09.514764,0.000395,udp,147.32.84.170,55660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:13.625373,0.215473,tcp,147.32.84.170,57186.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:13.833067,0.347729,tcp,147.32.84.170,57187.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:13.857076,0.297378,tcp,147.32.84.170,42224.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:14.173099,0.653095,tcp,147.32.84.170,57189.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:14.928326,3040.937744,udp,92.152.246.187,5937.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:13:15.338413,60.971031,tcp,147.32.84.165,4061.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:13:28.736771,0.000216,udp,147.32.85.89,53464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:13:29.515638,0.00036,udp,147.32.84.170,34141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:33.002547,0.00035,udp,85.118.193.177,26464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:13:33.805211,0.00031,udp,147.32.84.138,57051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:13:37.627225,0.000484,udp,190.55.123.226,57020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:13:40.826360,0.000193,udp,147.32.84.138,34194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:13:49.514472,0.000402,udp,147.32.84.170,51320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:13:49.904798,0.054568,udp,147.32.84.229,13363.0,<->,87.97.233.178,63304.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:13:55.061884,0.000308,udp,147.32.84.59,33080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:14:02.809485,0.000397,udp,95.86.49.26,11808.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:14:09.075702,0.000298,udp,147.32.86.20,64347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:14:13.161046,0.00023,udp,147.32.84.170,50419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:15.995014,60.969013,tcp,147.32.84.165,4062.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:14:19.515660,0.000385,udp,147.32.84.170,45771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:22.941133,0.000411,udp,187.66.170.107,18402.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:14:30.234449,0.000185,udp,147.32.84.138,55800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:14:35.782470,0.000344,udp,60.46.117.164,48606.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:14:37.418773,0.0,icmp,147.32.84.59,8.0,->,192.168.1.101,256.0,ECO,0.0,,1,106,106,0,106.0,1.0,5,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 05:14:39.514572,0.000379,udp,147.32.84.170,54834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:39.515466,0.000346,udp,147.32.84.170,57647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:39.516538,0.017948,tcp,147.32.84.170,56751.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:48.104175,0.000304,udp,81.165.141.18,36385.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,151,84,67,75.5,0.5562913907284768,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:14:49.514770,0.000375,udp,147.32.84.170,56317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:14:49.516810,0.018343,tcp,147.32.84.170,40879.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:03.069955,0.614436,tcp,147.32.86.92,37075.0,->,147.32.87.34,4949.0,_SPA,,0.0,42,9910,0,9910,235.95238095238096,0.0,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:15:09.516837,0.018006,tcp,147.32.84.170,52293.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:11.940876,0.000261,udp,147.32.85.125,49507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:15:14.162045,0.000333,udp,147.32.84.170,56735.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:14.162933,0.000201,udp,147.32.84.170,57995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:16.642969,60.966927,tcp,147.32.84.165,4063.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:15:19.516350,0.000322,udp,147.32.84.170,60097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:43.146119,0.000444,udp,201.197.157.26,64723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,583,75,508,291.5,0.12864493996569468,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:15:45.750927,0.069817,tcp,147.32.84.164,37457.0,->,212.187.201.122,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,5,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 05:15:49.516729,0.018075,tcp,147.32.84.170,48722.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:15:52.455880,0.052174,udp,147.32.85.84,13716.0,<->,109.111.151.146,12277.0,CON,0.0,0.0,2,536,73,463,268.0,0.13619402985074627,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:15:59.516905,0.01838,tcp,147.32.84.170,56762.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:16:00.043656,0.000271,udp,147.32.84.138,53264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:03.619329,0.000327,udp,147.32.84.138,34993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:05.608464,0.000194,udp,147.32.85.34,52986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:05.633499,0.000267,udp,147.32.85.34,53853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:05.657969,0.000286,udp,147.32.85.34,65210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,86,241,163.5,0.26299694189602446,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:09.516805,0.018012,tcp,147.32.84.170,50536.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:16:15.161793,0.000338,udp,147.32.84.170,41512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:16:15.163798,0.205531,tcp,147.32.84.170,52003.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:16:17.290007,60.953068,tcp,147.32.84.165,4064.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:16:23.884940,0.000308,udp,147.32.85.25,41170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:29.163883,0.48597,udp,208.54.90.144,36640.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,665,544,121,166.25,0.8180451127819549,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:16:34.499141,3070.000488,udp,147.32.84.137,123.0,<->,82.208.56.89,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,5,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 05:16:37.489547,0.000251,udp,74.57.15.57,13036.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:16:39.419008,0.000228,udp,147.32.85.25,44806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:47.791780,0.0,tcp,147.32.84.165,4065.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:47.792013,0.0,tcp,147.32.84.165,4066.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:47.798041,0.0,tcp,147.32.84.165,4068.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:47.974415,0.0,tcp,147.32.84.165,4069.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:47.974607,0.0,tcp,147.32.84.165,4070.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:47.984339,0.0,tcp,147.32.84.165,4072.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:48.174771,0.0,tcp,147.32.84.165,4073.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:48.174990,0.0,tcp,147.32.84.165,4074.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:48.660714,0.000233,udp,147.32.84.138,60273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:16:48.726248,0.0,tcp,147.32.84.165,4077.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:49.518699,0.000415,udp,147.32.84.170,51859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:16:49.926979,0.0,tcp,147.32.84.165,4076.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:16:57.036478,0.000505,udp,68.229.133.39,50697.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:01.543338,0.0,tcp,147.32.84.165,4302.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:01.543408,0.0,tcp,147.32.84.165,4301.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:01.543573,0.0,tcp,147.32.84.165,4304.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:01.543587,0.0,tcp,147.32.84.165,4306.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:01.543591,0.0,tcp,147.32.84.165,4305.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:02.144109,0.0,tcp,147.32.84.165,4316.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:02.144123,0.0,tcp,147.32.84.165,4314.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:02.144129,0.0,tcp,147.32.84.165,4313.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:12.516156,0.000309,udp,147.32.84.242,35100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:17:13.560664,0.0,tcp,147.32.84.165,4544.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:13.560678,0.0,tcp,147.32.84.165,4542.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:13.560683,0.0,tcp,147.32.84.165,4541.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:13.560860,0.0,tcp,147.32.84.165,4548.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:14.161669,0.0,tcp,147.32.84.165,4554.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:14.161800,0.0,tcp,147.32.84.165,4553.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:14.161872,0.0,tcp,147.32.84.165,4556.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:15.162436,0.000334,udp,147.32.84.170,53421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:17:15.163681,0.2273,tcp,147.32.84.170,52011.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:17:24.776428,0.000354,udp,203.210.203.209,26488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:25.085826,8.904274,tcp,208.54.86.244,14555.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,6,448,148,300,74.66666666666667,0.33035714285714285,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:17:25.578204,0.0,tcp,147.32.84.165,4784.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:25.578218,60.967762,tcp,147.32.84.165,4670.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:17:25.578223,0.0,tcp,147.32.84.165,4783.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:25.578380,0.0,tcp,147.32.84.165,4786.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:25.578390,0.0,tcp,147.32.84.165,4788.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:25.898248,0.0,tcp,147.32.84.165,4791.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:26.178832,0.0,tcp,147.32.84.165,4798.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:26.178847,0.0,tcp,147.32.84.165,4796.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:26.178852,0.0,tcp,147.32.84.165,4795.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:27.099717,0.183338,udp,147.32.84.229,13363.0,<->,70.188.26.196,62951.0,CON,0.0,0.0,3,2828,60,2768,942.6666666666666,0.021216407355021217,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:29.505929,3584.931885,tcp,147.32.84.164,46014.0,->,68.142.83.180,27017.0,PA_PA,0.0,0.0,305,29050,17834,11216,95.24590163934427,0.6139070567986231,5,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 05:17:29.517007,0.018157,tcp,147.32.84.170,40568.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:17:30.804797,0.000319,udp,147.32.84.138,37578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:17:37.071469,2152.031982,udp,147.32.84.229,13363.0,<->,81.198.184.12,30126.0,CON,0.0,0.0,10,3346,285,3061,334.6,0.08517632994620443,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:37.595627,0.0,tcp,147.32.84.165,1087.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:37.595641,0.0,tcp,147.32.84.165,1085.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:37.595646,0.0,tcp,147.32.84.165,1084.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:37.595776,0.0,tcp,147.32.84.165,1091.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:38.196017,0.0,tcp,147.32.84.165,1097.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:38.196031,0.0,tcp,147.32.84.165,1096.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:38.196205,0.0,tcp,147.32.84.165,1099.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:39.458055,0.000237,udp,116.25.223.232,61981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:46.162269,0.000243,udp,147.32.84.170,53854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:17:47.010647,0.003434,udp,87.17.44.150,30465.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2929,60,2869,732.25,0.020484807101399796,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:49.613038,0.0,tcp,147.32.84.165,1280.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:49.613105,0.0,tcp,147.32.84.165,1279.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:49.613201,0.0,tcp,147.32.84.165,1283.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:49.613207,0.0,tcp,147.32.84.165,1282.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:50.213439,0.0,tcp,147.32.84.165,1289.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:50.213592,0.0,tcp,147.32.84.165,1288.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:50.213600,0.0,tcp,147.32.84.165,1292.0,->,147.32.80.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:17:56.152309,0.001401,udp,201.132.80.222,27856.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:17:59.516025,0.000352,udp,147.32.84.170,33578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:17:59.517077,0.018152,tcp,147.32.84.170,48228.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:01.630447,0.0,tcp,147.32.84.165,1459.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:01.630461,0.0,tcp,147.32.84.165,1460.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:01.630513,0.0,tcp,147.32.84.165,1462.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:01.630676,0.0,tcp,147.32.84.165,1463.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:02.230664,0.0,tcp,147.32.84.165,1468.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:02.230678,0.0,tcp,147.32.84.165,1469.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:02.230733,0.0,tcp,147.32.84.165,1471.0,->,192.168.1.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:02.916498,0.000441,udp,188.75.128.2,14242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:18:06.201237,0.00018,udp,147.32.85.25,38137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:06.231483,0.000232,udp,147.32.85.25,40784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:09.517042,0.000368,udp,147.32.84.170,47982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:09.689816,0.000404,udp,74.14.29.167,61547.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:18:13.657300,0.0,tcp,147.32.84.165,1640.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:13.657314,0.0,tcp,147.32.84.165,1639.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:13.657319,0.0,tcp,147.32.84.165,1643.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:13.657367,0.0,tcp,147.32.84.165,1642.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:14.248071,1065.481689,tcp,147.32.84.170,56081.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,205,77518,58028,19490,378.13658536585365,0.7485745246265384,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:14.258463,0.0,tcp,147.32.84.165,1649.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:14.258476,0.0,tcp,147.32.84.165,1648.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:16.163200,0.00023,udp,147.32.84.170,46834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:25.674894,0.0,tcp,147.32.84.165,1820.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:25.674908,0.0,tcp,147.32.84.165,1819.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:25.674965,0.0,tcp,147.32.84.165,1823.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:25.674970,0.0,tcp,147.32.84.165,1822.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:26.275970,0.0,tcp,147.32.84.165,1829.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:26.275985,60.941776,tcp,147.32.84.165,1858.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:18:26.275991,0.0,tcp,147.32.84.165,1828.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:26.276056,0.0,tcp,147.32.84.165,1832.0,->,147.32.80.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:26.861522,0.000206,udp,147.32.84.138,46905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:29.516945,0.01781,tcp,147.32.84.170,48244.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:31.507344,0.000335,udp,147.32.84.59,52329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:31.523401,0.00022,udp,147.32.86.20,52722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:37.692203,0.0,tcp,147.32.84.165,1969.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:37.692218,0.0,tcp,147.32.84.165,1971.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:37.692286,0.0,tcp,147.32.84.165,1973.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:38.292966,0.0,tcp,147.32.84.165,1975.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:38.292986,0.0,tcp,147.32.84.165,1977.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:39.517460,0.021183,tcp,147.32.84.170,40589.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:43.159283,0.000297,udp,147.32.84.59,43171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:46.163416,0.00023,udp,147.32.84.170,52789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:18:48.555414,0.215173,udp,147.32.84.229,13363.0,<->,70.249.60.10,39091.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:18:48.754035,0.000384,udp,147.32.84.162,63889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,73,289,181.0,0.20165745856353592,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:18:49.709544,0.0,tcp,147.32.84.165,2090.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:49.709563,0.0,tcp,147.32.84.165,2092.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:49.709567,0.0,tcp,147.32.84.165,2094.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:50.310790,0.0,tcp,147.32.84.165,2096.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:50.310805,0.0,tcp,147.32.84.165,2098.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:18:50.312239,0.0,tcp,147.32.84.165,2100.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:01.727208,0.0,tcp,147.32.84.165,2210.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:01.727223,0.0,tcp,147.32.84.165,2212.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:02.327508,0.0,tcp,147.32.84.165,2216.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:02.327609,0.0,tcp,147.32.84.165,2218.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:02.327670,0.0,tcp,147.32.84.165,2220.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:13.744905,0.0,tcp,147.32.84.165,2330.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:13.745012,0.0,tcp,147.32.84.165,2332.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:14.345214,0.0,tcp,147.32.84.165,2336.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:14.345228,0.0,tcp,147.32.84.165,2338.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:14.345283,0.0,tcp,147.32.84.165,2340.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:15.398250,0.000347,udp,147.32.86.20,63265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:19.515994,0.000351,udp,147.32.84.170,42164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:19.517075,0.017727,tcp,147.32.84.170,41392.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:20.484947,0.000179,udp,147.32.84.138,35231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:22.444142,0.000265,udp,147.32.84.59,53670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:22.621939,0.000241,udp,147.32.84.59,35721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:25.761951,0.0,tcp,147.32.84.165,2450.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:25.761965,0.0,tcp,147.32.84.165,2452.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:26.362730,0.0,tcp,147.32.84.165,2456.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:26.362745,0.0,tcp,147.32.84.165,2458.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:26.362967,0.0,tcp,147.32.84.165,2460.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:29.515002,0.000379,udp,147.32.84.170,58752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:29.515934,0.000327,udp,147.32.84.170,51961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:37.778674,60.943241,tcp,147.32.84.165,2482.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:19:37.778689,0.0,tcp,147.32.84.165,2572.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:37.778744,0.0,tcp,147.32.84.165,2571.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:37.778900,0.0,tcp,147.32.84.165,2574.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:37.778916,0.0,tcp,147.32.84.165,2573.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.093346,0.0,tcp,147.32.84.165,2576.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.379835,0.0,tcp,147.32.84.165,2577.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.379849,0.0,tcp,147.32.84.165,2578.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.379854,0.0,tcp,147.32.84.165,2579.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.379910,0.0,tcp,147.32.84.165,2580.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:38.379921,0.0,tcp,147.32.84.165,2581.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:39.515096,0.000455,udp,147.32.84.170,41018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:43.714030,0.000263,udp,147.32.85.25,58410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:45.972551,0.0,igmp,147.32.87.16,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,5,,flow=Background,Background,-1 2011-08-17 05:19:48.164064,0.220276,tcp,147.32.84.170,60034.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:49.507818,0.000219,udp,147.32.84.138,34339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:19:49.515910,0.000353,udp,147.32.84.170,42171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:19:49.796402,0.0,tcp,147.32.84.165,2691.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:49.796418,0.0,tcp,147.32.84.165,2693.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:50.396859,0.0,tcp,147.32.84.165,2697.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:50.396958,0.0,tcp,147.32.84.165,2699.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:50.397038,0.0,tcp,147.32.84.165,2701.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:19:57.737223,3136.573975,udp,213.100.155.103,40717.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:19:59.515356,0.000499,udp,147.32.84.170,57764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:01.301524,3022.84668,udp,125.125.103.184,34158.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:20:01.813303,0.0,tcp,147.32.84.165,2811.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:01.813378,0.0,tcp,147.32.84.165,2813.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:02.414454,0.0,tcp,147.32.84.165,2817.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:02.414553,0.0,tcp,147.32.84.165,2819.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:02.414610,0.0,tcp,147.32.84.165,2821.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:03.790796,0.000273,udp,147.32.85.89,52838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:20:04.254410,0.000261,udp,147.32.84.138,47005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:20:09.516931,0.019166,tcp,147.32.84.170,43045.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:11.085648,0.345299,udp,147.32.84.229,13363.0,<->,114.24.5.56,54929.0,CON,0.0,0.0,4,2917,60,2857,729.25,0.02056907781967775,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:20:13.831135,0.0,tcp,147.32.84.165,2932.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:13.831202,0.0,tcp,147.32.84.165,2931.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:13.831209,0.0,tcp,147.32.84.165,2934.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:13.831260,0.0,tcp,147.32.84.165,2933.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:13.831267,0.0,tcp,147.32.84.165,2936.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:14.424376,0.000226,udp,147.32.84.170,58284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:14.432019,0.0,tcp,147.32.84.165,2937.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:14.432083,0.0,tcp,147.32.84.165,2938.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:14.432090,0.0,tcp,147.32.84.165,2939.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:14.432139,0.0,tcp,147.32.84.165,2940.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:14.432146,0.0,tcp,147.32.84.165,2941.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:19.156787,0.000428,udp,147.32.84.170,56587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:19.159416,0.250605,tcp,147.32.84.170,60040.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:23.580575,5.582612,tcp,66.249.72.35,34206.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1117,671,446,111.7,0.6007162041181737,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:20:25.847895,0.0,tcp,147.32.84.165,3052.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:25.847909,0.0,tcp,147.32.84.165,3051.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:25.847964,0.0,tcp,147.32.84.165,3054.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:25.847969,0.0,tcp,147.32.84.165,3053.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:25.848023,0.0,tcp,147.32.84.165,3056.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:26.449027,0.0,tcp,147.32.84.165,3057.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:26.449041,0.0,tcp,147.32.84.165,3058.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:26.449046,0.0,tcp,147.32.84.165,3059.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:26.449050,0.0,tcp,147.32.84.165,3060.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:26.449096,0.0,tcp,147.32.84.165,3061.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:29.516936,0.017813,tcp,147.32.84.170,48262.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:37.865828,0.0,tcp,147.32.84.165,3172.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:37.865901,0.0,tcp,147.32.84.165,3171.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:37.866016,0.0,tcp,147.32.84.165,3174.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:37.866031,0.0,tcp,147.32.84.165,3173.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:37.866083,0.0,tcp,147.32.84.165,3176.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:38.466366,0.0,tcp,147.32.84.165,3177.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:38.466453,60.944004,tcp,147.32.84.165,3197.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:20:38.466459,0.0,tcp,147.32.84.165,3178.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:38.466503,0.0,tcp,147.32.84.165,3179.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:38.466571,0.0,tcp,147.32.84.165,3180.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:38.466578,0.0,tcp,147.32.84.165,3181.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:39.446362,0.001695,udp,128.8.140.15,49619.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:20:49.514904,0.000364,udp,147.32.84.170,59043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:49.882832,0.0,tcp,147.32.84.165,3293.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:49.882962,0.0,tcp,147.32.84.165,3292.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:49.883019,0.0,tcp,147.32.84.165,3295.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:49.883073,0.0,tcp,147.32.84.165,3294.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:49.883132,0.0,tcp,147.32.84.165,3297.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:50.172015,0.000257,udp,147.32.84.170,40395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:20:50.483941,0.0,tcp,147.32.84.165,3298.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:50.484065,0.0,tcp,147.32.84.165,3299.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:50.484071,0.0,tcp,147.32.84.165,3300.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:50.484285,0.0,tcp,147.32.84.165,3301.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:20:50.484303,0.0,tcp,147.32.84.165,3302.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:01.900126,0.0,tcp,147.32.84.165,3414.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:01.900223,0.0,tcp,147.32.84.165,3413.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:01.900293,0.0,tcp,147.32.84.165,3416.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:01.900298,0.0,tcp,147.32.84.165,3415.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:01.900413,0.0,tcp,147.32.84.165,3418.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:02.500855,0.0,tcp,147.32.84.165,3419.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:02.500924,0.0,tcp,147.32.84.165,3420.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:02.501010,0.0,tcp,147.32.84.165,3421.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:02.501029,0.0,tcp,147.32.84.165,3422.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:02.501076,0.0,tcp,147.32.84.165,3423.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:21:08.979285,0.000307,udp,24.12.150.166,38160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:21:09.514942,0.000323,udp,147.32.84.170,43734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:21:21.799589,0.000538,udp,60.251.143.189,50510.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,79,484,281.5,0.14031971580817051,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:21:29.751868,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.52,57204.0,ECR,,0.0,2,196,0,196,98.0,0.0,5,0,flow=Background,Background,-1 2011-08-17 05:21:31.093891,0.231397,tcp,147.32.86.20,2863.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,37973,1211,36762,807.936170212766,0.031891080504569035,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:21:31.132563,238.614029,udp,147.32.84.229,13363.0,->,213.169.166.247,33269.0,INT,0.0,,6,1089,1089,0,181.5,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:21:38.566931,806.92688,tcp,194.121.90.163,24302.0,->,147.32.85.34,80.0,FSPA_FSRPA,0.0,0.0,18,9758,774,8984,542.1111111111111,0.07931953269112522,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:21:39.096114,60.966133,tcp,147.32.84.165,3435.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:21:39.515131,0.00037,udp,147.32.84.170,57158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:21:40.661216,0.000239,udp,147.32.85.25,58719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:21:44.500091,0.000341,udp,147.32.84.25,33009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:21:58.216125,0.00036,udp,184.97.149.3,26835.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:21:59.515466,0.000326,udp,147.32.84.170,52496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:22:07.032554,0.000254,udp,147.32.85.34,55888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:22:07.657453,0.206294,tcp,147.32.86.20,2899.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:22:08.300010,2446.195557,udp,87.198.219.215,42091.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:22:12.528913,0.000402,udp,96.246.12.165,50582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:22:13.267888,0.000551,udp,99.1.42.10,22022.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,77,481,279.0,0.13799283154121864,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:22:13.802912,0.000425,udp,147.32.84.138,46284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:22:19.515264,0.000314,udp,147.32.84.170,37776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:22:19.758935,1.8e-05,icmp,147.32.87.249,,<-,147.32.87.52,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:22:27.838305,0.000407,udp,128.100.101.43,38708.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:22:32.228888,0.0002,udp,147.32.85.25,42945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:22:38.003314,3000.005127,tcp,147.32.84.242,49684.0,,147.251.3.130,1713.0,PA_PA,0.0,0.0,18,2952,1674,1278,164.0,0.5670731707317073,5,0,flow=Background,Background,-1 2011-08-17 05:22:38.006053,3599.996826,tcp,147.32.84.242,49685.0,,147.251.3.130,1713.0,PA_PA,0.0,0.0,19,3165,1887,1278,166.57894736842104,0.5962085308056873,5,0,flow=Background,Background,-1 2011-08-17 05:22:39.517243,0.018972,tcp,147.32.84.170,52213.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:22:39.742526,60.951771,tcp,147.32.84.165,3436.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:22:46.476332,1.915778,tcp,67.195.111.228,60985.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,269,224238,7000,217238,833.5985130111524,0.03121683211587688,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:22:52.162849,0.000456,udp,147.32.84.170,52429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:22:53.839767,6.006872,udp,147.32.84.229,13363.0,->,96.233.250.13,33086.0,INT,0.0,,3,1476,1476,0,492.0,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:22:58.520014,0.025045,udp,147.32.84.229,13363.0,<->,78.141.179.9,34030.0,CON,0.0,0.0,3,2071,201,1870,690.3333333333334,0.09705456301303718,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:22:59.515263,0.000324,udp,147.32.84.170,33824.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:22:59.516145,0.000232,udp,147.32.84.170,47407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:02.817178,0.038193,tcp,147.32.86.92,57182.0,->,147.32.87.2,636.0,_SPA,,0.0,12,5850,0,5850,487.5,0.0,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:23:09.516144,0.000275,udp,147.32.84.170,36131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:13.729705,0.280008,tcp,147.32.84.170,51185.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:19.515193,0.000354,udp,147.32.84.170,44556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:22.157891,0.00027,udp,147.32.84.170,35480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:28.098594,0.000382,udp,147.32.86.20,65269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:23:29.516224,0.000263,udp,147.32.84.170,35592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:32.385129,18.35998,tcp,67.20.220.95,49923.0,->,147.32.85.109,80.0,FSPA_FSPA,0.0,0.0,11,1725,602,1123,156.8181818181818,0.34898550724637684,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:23:35.856369,0.003295,udp,111.249.50.216,60012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2929,60,2869,732.25,0.020484807101399796,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:23:35.886248,0.000488,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,5,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 05:23:36.439681,3515.958252,tcp,147.32.84.229,3967.0,->,213.146.189.202,12350.0,PA_PA,0.0,0.0,114,6840,4560,2280,60.0,0.6666666666666666,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:23:39.515329,0.00054,udp,147.32.84.170,35189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:39.517437,0.017599,tcp,147.32.84.170,34210.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:23:40.379906,60.952778,tcp,147.32.84.165,3467.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:23:41.724726,33.629456,udp,99.135.155.122,20162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1590,1410,180,265.0,0.8867924528301887,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:23:59.785223,0.206942,tcp,147.32.86.20,2997.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:24:01.024007,0.008579,udp,147.32.84.138,36582.0,<->,89.31.8.3,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,5,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 05:24:01.233656,0.000188,udp,147.32.84.138,44755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:24:05.164379,0.000274,udp,147.32.84.138,57269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:24:06.784778,0.000498,udp,99.8.185.27,31152.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:24:09.517130,0.018203,tcp,147.32.84.170,44829.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:09.578946,0.000213,udp,147.32.85.25,60604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:24:13.586864,0.000181,udp,147.32.84.138,48950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:24:17.560020,0.0003,udp,217.118.66.48,30777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:24:29.515166,0.000511,udp,147.32.84.170,33125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:31.437437,0.000426,udp,71.227.64.133,16094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:24:39.515965,0.000277,udp,147.32.84.170,53935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:41.016730,60.953827,tcp,147.32.84.165,3468.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:24:43.368204,8.883572,tcp,83.149.3.25,37142.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:24:45.054927,0.0003,udp,147.32.84.138,33077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:24:49.516370,0.000343,udp,147.32.84.170,35469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:53.162477,0.000227,udp,147.32.84.170,52116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:53.163272,0.000325,udp,147.32.84.170,50272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:53.164593,0.224804,tcp,147.32.84.170,56438.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:59.517332,0.018132,tcp,147.32.84.170,34221.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:24:59.886478,0.280188,udp,147.32.84.229,13363.0,<->,190.160.35.33,26127.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:03.032295,58.703327,udp,147.32.84.229,13363.0,->,77.239.30.137,51866.0,INT,0.0,,15,1125,1125,0,75.0,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:25:03.050148,0.169458,udp,147.32.84.229,13363.0,<->,174.59.114.112,32623.0,CON,0.0,0.0,4,2959,60,2899,739.75,0.02027712064886786,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:04.253596,0.000236,udp,147.32.84.138,38145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:25:04.273927,0.000182,udp,147.32.84.138,35770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:25:05.447744,0.000196,udp,147.32.85.25,46695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:25:08.038981,11.42005,tcp,147.32.86.20,3057.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:25:09.245745,0.000317,udp,147.32.84.171,46957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:25:19.516381,0.0004,udp,147.32.84.170,53248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:24.162537,0.00029,udp,147.32.84.170,36034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:25.950607,2813.9375,tcp,65.49.11.19,80.0,->,147.32.86.118,15464.0,SA_,0.0,,8,480,480,0,60.0,1.0,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:25:26.173022,0.000278,udp,147.32.85.25,54333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:25:27.706461,47.528442,udp,70.81.32.209,43857.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5878,2946,2932,734.75,0.5011908812521265,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:35.264400,3342.905762,udp,123.20.145.137,50095.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:39.516789,0.009985,udp,147.32.84.170,50233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:39.528434,0.018523,tcp,147.32.84.170,52243.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:41.656190,60.96587,tcp,147.32.84.165,3469.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:25:42.032912,0.000782,icmp,147.32.86.96,,<-,147.32.87.49,23671.0,RED,,0.0,2,196,0,196,98.0,0.0,5,0,flow=Background,Background,-1 2011-08-17 05:25:49.154584,3015.386475,udp,66.65.61.123,52783.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:49.515474,0.000343,udp,147.32.84.170,35315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:49.516363,0.000241,udp,147.32.84.170,53632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:49.517398,0.017604,tcp,147.32.84.170,55938.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:52.396115,3543.400146,udp,92.126.17.111,23451.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,695,550,145,173.75,0.7913669064748201,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:25:55.165706,0.216562,tcp,147.32.84.170,56446.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:25:59.515500,0.000345,udp,147.32.84.170,55021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:00.467355,0.002398,udp,212.142.98.23,6144.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:26:02.810019,0.0,icmp,173.244.210.228,2563.0,->,147.32.86.121,,URHPRO,0.0,,1,90,90,0,90.0,1.0,5,,flow=Background,Background,-1 2011-08-17 05:26:05.714945,0.00029,udp,147.32.85.34,61667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:07.151243,0.000741,udp,147.32.84.229,13363.0,<->,147.32.162.206,33325.0,CON,0.0,0.0,2,172,106,66,86.0,0.6162790697674418,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:26:11.988071,0.000208,udp,147.32.85.25,50148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:16.656652,0.000217,udp,147.32.84.138,36357.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:19.516370,0.000376,udp,147.32.84.170,58051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:25.971147,1.562774,tcp,123.125.71.17,57529.0,->,147.32.87.37,80.0,SRPA_SPA,0.0,0.0,21,14549,797,13752,692.8095238095239,0.054780397278163445,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:26:26.162518,0.00023,udp,147.32.84.170,60717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:26.163294,0.000321,udp,147.32.84.170,55177.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:27.327152,0.000326,udp,147.32.85.25,48283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:29.516325,0.000307,udp,147.32.84.170,53403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:34.742581,0.000264,udp,147.32.84.19,33601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,71,216,143.5,0.24738675958188153,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:38.959829,0.000285,udp,71.228.236.44,1157.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:26:39.043003,0.169981,tcp,147.32.86.20,3130.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:26:39.515510,0.000438,udp,147.32.84.170,60465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:26:41.968569,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.54,39288.0,ECR,,0.0,2,196,0,196,98.0,0.0,5,0,flow=Background,Background,-1 2011-08-17 05:26:42.302339,60.966866,tcp,147.32.84.165,3470.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:26:44.979722,0.000317,udp,147.32.84.138,38184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:26:48.342033,7.499212,tcp,125.68.124.51,57699.0,->,147.32.84.2,80.0,SRPA_SA,0.0,0.0,33,24196,1480,22716,733.2121212121212,0.061167135063646884,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:26:49.516465,0.000431,udp,147.32.84.170,47147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:27:03.946753,0.000483,udp,89.204.137.104,28353.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,68,60,64.0,0.53125,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:09.106809,0.912595,tcp,147.32.86.20,3156.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,90,93424,1406,92018,1038.0444444444445,0.015049666038705257,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:27:10.327422,0.002803,udp,72.27.175.113,16116.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,534,474,60,267.0,0.8876404494382022,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:12.190047,3007.726562,udp,58.178.100.84,34842.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:23.207095,0.704433,udp,147.32.87.48,2841.0,->,147.32.87.115,161.0,INT,0.0,,28,3668,3668,0,131.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:27:25.932438,0.000281,udp,147.32.84.138,48003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:27:28.162153,0.00024,udp,147.32.84.170,47319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:27:37.094479,0.189508,udp,147.32.84.229,13363.0,<->,24.58.230.220,43907.0,CON,0.0,0.0,4,2927,60,2867,731.75,0.020498804236419543,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:42.949596,60.967163,tcp,147.32.84.165,3471.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:27:46.514173,3181.22168,udp,183.17.209.215,50699.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:58.811949,0.003215,udp,193.90.78.78,2114.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2933,60,2873,733.25,0.020456870098874872,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:27:59.517405,0.0184,tcp,147.32.84.170,41473.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:06.539943,0.000211,udp,147.32.85.34,61801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:28:13.494717,0.276489,tcp,147.32.84.170,33981.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:13.541721,0.418044,tcp,147.32.84.170,58726.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,20,4170,1164,3006,208.5,0.27913669064748203,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:17.331117,117.464622,tcp,41.193.23.108,1557.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,15,1224,298,926,81.6,0.2434640522875817,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:28:19.151696,0.0,udp,192.168.88.240,4458.0,->,192.168.255.255,138.0,INT,0.0,,1,243,243,0,243.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:28:19.516154,0.000532,udp,147.32.84.170,53221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:29.515416,0.00037,udp,147.32.84.170,59443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:29.516160,0.000472,udp,147.32.84.170,44692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:41.237826,3530.001953,icmp,147.32.87.1,261.0,->,147.32.87.5,37664.0,RED,0.0,,6,420,420,0,70.0,1.0,5,0,flow=Background,Background,-1 2011-08-17 05:28:43.597210,60.952412,tcp,147.32.84.165,3472.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:28:43.752079,0.000235,udp,147.32.84.138,46330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:28:44.173352,0.000266,udp,147.32.86.20,60028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:28:46.984206,0.000472,udp,108.69.61.196,24092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,316,64,252,158.0,0.20253164556962025,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:28:49.516067,0.00037,udp,147.32.84.170,54347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:49.516873,0.000305,udp,147.32.84.170,34319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:49.517892,0.018622,tcp,147.32.84.170,33166.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:57.265989,4.394934,udp,99.50.38.253,57810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1093,548,545,273.25,0.5013723696248856,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:28:58.163677,0.000352,udp,147.32.84.170,60896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:28:58.164614,0.000304,udp,147.32.84.170,44731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:04.484667,0.000274,udp,147.32.86.20,52456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:09.515585,0.000586,udp,147.32.84.170,44695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:09.516670,0.000301,udp,147.32.84.170,39806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:11.098249,0.000245,udp,147.32.85.25,52877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:19.515752,0.000435,udp,147.32.84.170,48523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:19.516689,0.000369,udp,147.32.84.170,59625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:19.517763,0.018009,tcp,147.32.84.170,41489.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:21.228461,0.000288,udp,147.32.85.25,48463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:23.867181,0.000235,udp,147.32.85.89,46468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:25.850740,2955.634277,udp,80.178.242.212,42641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,678,144,534,169.5,0.21238938053097345,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:29:28.165174,0.229753,tcp,147.32.84.170,45633.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:29.516780,0.000333,udp,147.32.84.170,43004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:29.517897,0.017655,tcp,147.32.84.170,33172.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:33.046322,2040.061768,udp,147.32.84.229,13363.0,<->,91.90.16.217,28076.0,CON,0.0,0.0,12,6574,240,6334,547.8333333333334,0.03650745360511105,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:29:35.221692,2455.698975,udp,221.187.206.20,3404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:29:39.515762,0.000403,udp,147.32.84.170,60184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:39.516718,0.00029,udp,147.32.84.170,55643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:44.235322,60.967117,tcp,147.32.84.165,3473.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:29:45.054759,0.000225,udp,147.32.84.138,52547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:48.862117,0.000206,udp,147.32.84.59,40666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:29:49.516401,0.000269,udp,147.32.84.170,36255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:54.380390,3009.85791,udp,120.114.122.36,56850.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:29:59.164668,0.000231,udp,147.32.84.170,35345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:59.165487,0.000323,udp,147.32.84.170,35077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:29:59.166827,0.20763,tcp,147.32.84.170,45637.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:02.586549,0.0,icmp,68.168.119.10,771.0,->,147.32.84.120,28928.0,URP,0.0,,1,590,590,0,590.0,1.0,5,0,flow=Background,Background,-1 2011-08-17 05:30:06.445381,0.000365,udp,147.32.85.34,65397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:19.519047,0.01816,tcp,147.32.84.170,41497.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:23.896546,0.000364,udp,147.32.84.59,33037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:27.932325,0.000224,udp,147.32.85.25,51412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:29.179825,0.000406,udp,147.32.84.170,38923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:29.196648,0.000183,udp,147.32.84.59,57611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:29.399803,0.363765,tcp,67.195.111.228,51195.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1319,846,473,131.9,0.6413949962092494,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:30:29.516561,0.000312,udp,147.32.84.170,46518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:29.517600,0.017681,tcp,147.32.84.170,42447.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:33.910195,0.000275,udp,147.32.84.59,49347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:36.605110,2455.302246,udp,75.38.58.16,15991.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:30:39.536350,0.000413,udp,147.32.84.170,57857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:30:41.716485,0.10227,udp,147.32.84.229,13363.0,<->,151.80.116.205,36737.0,CON,0.0,0.0,2,134,73,61,67.0,0.5447761194029851,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:30:44.882736,60.951733,tcp,147.32.84.165,3474.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:30:48.920982,0.000268,udp,147.32.84.59,50074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,86,249,167.5,0.25671641791044775,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:59.184963,0.05342,udp,147.32.84.171,47982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,80,188,134.0,0.29850746268656714,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:30:59.518179,0.000449,udp,147.32.84.170,33419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:02.467235,3561.905273,tcp,147.32.84.170,43984.0,->,74.125.232.198,443.0,PA_PA,0.0,0.0,343,80374,61815,18559,234.3265306122449,0.7690919949237316,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:04.712983,0.005577,tcp,76.164.193.170,80.0,->,147.32.87.101,51514.0,SA_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:31:09.516675,0.000431,udp,147.32.84.170,58458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:09.557180,0.000452,udp,91.227.172.203,59215.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:31:18.552380,0.000463,udp,147.32.86.20,53168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:31:23.735817,249.785995,tcp,147.32.85.5,41107.0,->,74.125.232.216,443.0,FSPA_FSPA,0.0,0.0,38,5714,3506,2208,150.3684210526316,0.6135806790339517,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:31:27.491659,0.207498,tcp,147.32.86.20,3386.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,35909,1151,34758,816.1136363636364,0.0320532457044195,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:31:27.704784,9.184478,tcp,178.187.164.30,44871.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,7,508,208,300,72.57142857142857,0.4094488188976378,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:31:29.516800,0.000325,udp,147.32.84.170,43457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:30.164435,0.23848,tcp,147.32.84.170,45650.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:45.520144,60.966774,tcp,147.32.84.165,3475.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:31:49.030771,0.000293,udp,147.32.84.138,39945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:31:49.516422,0.000301,udp,147.32.84.170,53875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:31:59.516840,0.000413,udp,147.32.84.170,39982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:01.157470,0.000297,udp,147.32.84.170,47300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:09.516719,0.000266,udp,147.32.84.170,39224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:29.515589,0.00038,udp,147.32.84.170,43265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:29.516466,0.000425,udp,147.32.84.170,48775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:29.517600,0.018113,tcp,147.32.84.170,41514.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:32:36.230670,0.000214,udp,147.32.85.25,46117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:32:40.518081,0.00064,udp,222.100.73.91,54136.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,73,480,276.5,0.13200723327305605,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:32:46.167187,60.968399,tcp,147.32.84.165,3476.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:33:09.517718,0.017992,tcp,147.32.84.170,53095.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:11.440944,0.000424,udp,213.146.167.54,17356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,596,81,515,298.0,0.13590604026845637,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:33:11.665343,622.845154,udp,84.112.61.224,47543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,694,158,536,173.5,0.2276657060518732,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:33:13.208616,0.244712,tcp,147.32.84.170,60384.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:13.499072,0.235872,tcp,147.32.84.170,34431.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,20,4170,1164,3006,208.5,0.27913669064748203,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:13.682397,0.275933,tcp,147.32.84.170,60387.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:13.727270,0.227148,tcp,147.32.84.170,34433.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:16.740175,0.000402,udp,147.32.84.19,45488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:33:19.517855,0.018039,tcp,147.32.84.170,42909.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:26.091847,0.467138,udp,147.32.84.229,13363.0,<->,216.221.61.247,17420.0,CON,0.0,0.0,4,675,554,121,168.75,0.8207407407407408,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:33:26.608921,769.660278,udp,147.32.84.229,13363.0,<->,78.98.31.226,41642.0,CON,0.0,0.0,6,3463,3343,120,577.1666666666666,0.9653479641928964,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:33:27.715188,0.000287,udp,147.32.84.138,54501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:33:28.682495,9.014614,tcp,189.41.151.122,51100.0,->,147.32.85.18,4899.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,5,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 05:33:32.168528,0.000298,udp,147.32.84.170,48196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:46.816056,60.950741,tcp,147.32.84.165,3477.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:33:49.517812,0.018536,tcp,147.32.84.170,36780.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:33:53.264259,0.000298,udp,199.7.136.254,59989.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:33:59.517840,0.018044,tcp,147.32.84.170,36781.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:34:00.557271,0.000362,udp,147.32.84.59,58398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:02.481728,0.00093,udp,121.98.140.35,2398.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,551,76,475,275.5,0.13793103448275862,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:06.121907,0.000174,udp,147.32.85.34,64169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:14.853776,0.001905,udp,147.32.85.112,22252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:17.474524,0.0,udp,147.32.84.99,427.0,->,192.168.88.186,49438.0,INT,0.0,,1,377,377,0,377.0,1.0,5,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:34:19.515782,0.000342,udp,147.32.84.170,51957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:34:19.516682,0.000265,udp,147.32.84.170,44558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:34:25.529894,0.000322,udp,220.247.215.100,41260.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:29.516241,0.879684,tcp,147.32.86.20,3546.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,91,93560,1406,92154,1028.131868131868,0.015027789653698161,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:34:30.221619,0.001412,udp,114.145.154.235,29745.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:33.507584,0.000352,udp,147.32.85.25,60768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:35.599569,0.000303,udp,99.254.178.158,25346.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:35.771401,2832.168701,udp,60.248.34.244,55134.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:47.452338,60.966614,tcp,147.32.84.165,3478.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:34:48.733762,0.000284,udp,147.32.84.21,42234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:48.769175,0.000222,udp,147.32.85.25,40063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:34:49.875015,0.000452,udp,200.131.224.3,7943.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,597,76,521,298.5,0.1273031825795645,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:34:59.700739,0.500224,tcp,147.32.3.51,4031.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,5,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 05:35:08.151959,0.00015,udp,147.32.84.138,57255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:35:19.516791,0.000377,udp,147.32.84.170,40427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:30.062200,0.000397,udp,72.224.137.27,23011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:35:30.814214,0.003159,udp,111.249.216.39,43665.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:35:34.163138,0.000324,udp,147.32.84.170,53074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:34.164441,0.224291,tcp,147.32.84.170,57370.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:37.722391,685.859314,udp,193.120.212.10,23667.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,440,316,124,110.0,0.7181818181818181,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:35:39.516002,0.010234,udp,147.32.84.170,39532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:48.099562,60.952713,tcp,147.32.84.165,3479.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:35:49.516014,0.000504,udp,147.32.84.170,35285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:49.517970,0.017676,tcp,147.32.84.170,60803.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:35:52.682882,3591.724121,udp,114.41.170.23,2090.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,144,21784,11550,10234,151.27777777777777,0.5302056555269923,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:35:57.550358,0.000627,udp,151.81.87.133,44330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,3,379,128,251,126.33333333333333,0.33773087071240104,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:36:02.952890,0.000341,udp,147.32.86.20,60586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:36:05.164983,0.218126,tcp,147.32.84.170,57374.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:36:09.517027,0.000381,udp,147.32.84.170,57595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:36:11.019093,0.000233,udp,147.32.84.59,52281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:36:15.774984,0.000112,udp,147.32.85.25,32935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:36:17.936589,3436.663818,udp,147.32.84.186,46002.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,5,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 05:36:19.517167,0.000281,udp,147.32.84.170,33347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:36:36.164042,0.00039,udp,147.32.84.170,59864.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:36:39.517244,0.000338,udp,147.32.84.170,56872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:36:41.333971,3036.91626,udp,190.192.179.179,7027.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,729,543,186,121.5,0.7448559670781894,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:36:48.737995,60.952412,tcp,147.32.84.165,3480.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:36:57.235702,0.0003,udp,147.32.84.59,47918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:36:59.518281,0.018221,tcp,147.32.84.170,53131.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:04.234100,0.001632,udp,186.178.33.145,11830.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:37:06.164406,0.212455,tcp,147.32.84.170,57382.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:09.516715,0.000222,udp,147.32.84.170,36960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:09.537906,0.000275,udp,147.32.84.138,39926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:12.915371,0.000202,udp,147.32.84.59,50024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:13.267440,0.000315,udp,147.32.84.138,58872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:19.517040,0.000419,udp,147.32.84.170,56208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:22.952936,0.000157,udp,147.32.84.138,38061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:23.405859,0.000382,udp,147.32.84.59,35402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:28.232693,0.000393,udp,147.32.85.25,35878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:47.045032,0.057406,udp,147.32.84.229,13363.0,<->,95.28.124.206,31653.0,CON,0.0,0.0,4,2949,60,2889,737.25,0.02034587995930824,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:37:48.404936,0.000468,udp,99.251.57.89,60841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,600,116,484,300.0,0.19333333333333333,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:37:48.590411,0.000143,udp,147.32.85.25,52885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:37:49.375922,60.950775,tcp,147.32.84.165,3481.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:37:49.516274,0.000415,udp,147.32.84.170,41496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:49.517223,0.000293,udp,147.32.84.170,38224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:49.518237,0.017902,tcp,147.32.84.170,58350.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:37:54.230035,219.86438,udp,184.153.23.118,17094.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,1632,912,720,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:37:59.516244,0.000336,udp,147.32.84.170,43284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:03.518147,23.622314,tcp,94.109.198.112,2995.0,->,147.32.84.229,80.0,FSPA_FSPA,0.0,0.0,11,732,395,337,66.54545454545455,0.5396174863387978,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:38:06.162929,0.24574,tcp,147.32.84.170,36971.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:09.518905,0.000284,udp,147.32.84.170,60425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:09.935060,0.000267,udp,147.32.84.59,54248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:38:13.197808,0.252188,tcp,147.32.84.170,58570.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:13.785512,0.27928,tcp,147.32.84.170,59559.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:14.252199,0.000272,udp,147.32.84.170,42841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:14.253211,240.231766,tcp,147.32.84.170,38018.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:14.253427,240.231888,tcp,147.32.84.170,38022.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:19.517174,0.000525,udp,147.32.84.170,46281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:21.293965,3492.453369,udp,111.255.148.165,50314.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,2021,555,1466,112.27777777777777,0.27461652647204354,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:38:29.516302,0.000382,udp,147.32.84.170,46751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:29.518363,0.017984,tcp,147.32.84.170,37322.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:39.516266,0.000494,udp,147.32.84.170,38608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:39.518448,0.017503,tcp,147.32.84.170,58370.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:42.346645,10.560914,tcp,123.200.208.221,2939.0,->,147.32.84.229,443.0,S_SA,0.0,0.0,8,600,234,366,75.0,0.39,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:38:45.102731,0.000292,udp,147.32.84.59,42643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:38:45.459759,0.000343,udp,147.32.86.20,63422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:38:49.517704,0.000366,udp,147.32.84.170,54331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:38:50.012230,60.968376,tcp,147.32.84.165,3482.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:38:51.348856,0.000248,udp,147.32.84.138,56401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:38:59.518248,0.017633,tcp,147.32.84.170,53829.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:08.162270,0.000235,udp,147.32.84.170,56237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:09.518334,0.018315,tcp,147.32.84.170,41645.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:10.797810,1.741572,udp,174.141.212.113,50014.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,792,422,370,66.0,0.5328282828282829,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:39:12.179618,0.059391,udp,147.32.84.229,13363.0,<->,78.251.34.224,56213.0,CON,0.0,0.0,2,138,77,61,69.0,0.5579710144927537,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:39:19.516361,0.000388,udp,147.32.84.170,55632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:19.517292,0.000308,udp,147.32.84.170,55945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:24.907337,0.000425,udp,76.94.168.108,4258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:39:25.344030,0.158253,udp,147.32.84.229,13363.0,<->,24.201.84.147,3218.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:39:29.517294,0.000331,udp,147.32.84.170,38806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:39.518344,0.000391,udp,147.32.84.170,35270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:40.433656,0.001924,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:39:50.661078,60.95327,tcp,147.32.84.165,3483.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:39:50.780074,0.000365,udp,99.187.186.2,51579.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,263,180,83,131.5,0.6844106463878327,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:39:59.517398,0.000373,udp,147.32.84.170,35668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:39:59.519474,0.017854,tcp,147.32.84.170,36227.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:02.694073,0.000318,udp,147.32.86.92,56601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,75,213,144.0,0.2604166666666667,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:40:06.671287,0.000251,udp,147.32.85.34,63149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:40:06.678251,0.000558,udp,218.171.131.53,54408.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,72,481,276.5,0.1301989150090416,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:08.163796,0.000227,udp,147.32.84.170,39423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:08.164574,0.000317,udp,147.32.84.170,49923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:10.970145,0.000254,udp,147.32.84.170,44190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:10.971446,0.000349,udp,147.32.84.170,53184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:14.530316,2717.051758,udp,190.213.202.226,53414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:14.612769,0.000353,udp,122.30.31.116,50916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:19.517419,0.000351,udp,147.32.84.170,42758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:29.518147,0.000265,udp,147.32.84.170,42394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:37.056958,0.121956,udp,147.32.84.229,13363.0,<->,74.66.7.128,53479.0,CON,0.0,0.0,4,2922,60,2862,730.5,0.02053388090349076,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:39.519079,0.010011,udp,147.32.84.170,50282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:44.458069,0.00027,udp,114.92.69.111,59212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:48.564410,0.036394,udp,81.17.170.170,1645.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,259,174,85,129.5,0.6718146718146718,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:49.518417,0.000432,udp,147.32.84.170,52232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:40:51.298168,60.961918,tcp,147.32.84.165,3484.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:40:52.390095,0.000492,udp,111.240.227.5,8843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:40:57.904835,0.205082,tcp,147.32.86.20,3888.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:41:00.506212,0.00018,udp,147.32.84.138,40369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:41:09.165210,0.000269,udp,147.32.84.170,32833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:19.519544,0.017852,tcp,147.32.84.170,41663.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:24.720281,0.205336,tcp,147.32.86.20,3910.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:41:29.518475,0.000287,udp,147.32.84.170,58389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:31.390952,0.000371,udp,203.117.212.166,59404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:41:33.022101,0.00026,udp,147.32.85.25,56691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:41:36.309212,0.364633,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,71,140,105.5,0.33649289099526064,5,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 05:41:36.674696,1.740979,tcp,147.32.84.165,3485.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,9,951,508,443,105.66666666666667,0.5341745531019979,5,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-17 05:41:39.518460,0.000264,udp,147.32.84.170,49809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:39.519404,0.018195,tcp,147.32.84.170,53851.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:49.519473,0.017682,tcp,147.32.84.170,37350.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:41:51.945633,60.967716,tcp,147.32.84.165,3486.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:42:06.331866,0.114447,udp,147.32.84.229,13363.0,<->,128.82.200.101,58762.0,CON,0.0,0.0,2,140,78,62,70.0,0.5571428571428572,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:42:08.549769,0.001398,udp,69.114.240.94,1024.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:42:09.519440,0.018138,tcp,147.32.84.170,37352.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:11.166696,0.000266,udp,147.32.84.170,35024.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:11.167901,0.217356,tcp,147.32.84.170,37018.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:14.295911,0.000371,udp,147.32.85.25,43923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:42:24.894853,0.000215,udp,147.32.85.25,55781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:42:29.517506,0.000412,udp,147.32.84.170,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:29.518456,0.000274,udp,147.32.84.170,39390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:31.501677,7.510159,udp,173.54.180.166,64843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1051,289,762,131.375,0.27497621313035203,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:42:32.286969,0.000247,udp,147.32.84.138,49874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:42:38.469225,8.99947,tcp,147.32.84.215,40439.0,->,86.49.87.107,6889.0,S_,0.0,,3,222,222,0,74.0,1.0,5,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 05:42:48.588010,0.000404,icmp,147.32.87.249,,<-,147.32.87.48,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:42:49.519309,0.000298,udp,147.32.84.170,59379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:42:51.657567,0.000342,udp,147.32.86.20,56667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:42:52.593657,60.951626,tcp,147.32.84.165,3487.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:42:59.517613,0.000489,udp,147.32.84.170,32978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:08.396749,0.000216,udp,147.32.86.119,5716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:43:12.166535,0.214479,tcp,147.32.84.170,34031.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:13.428356,0.000385,udp,211.18.145.98,20741.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:43:13.442742,0.264772,tcp,147.32.84.170,37850.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:13.989008,0.278748,tcp,147.32.84.170,40957.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:18.126511,0.000225,udp,147.32.84.138,46411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:43:28.681541,0.000229,udp,147.32.84.138,51266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:43:29.520258,0.01731,tcp,147.32.84.170,56553.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:33.995176,3035.434814,udp,85.28.196.41,1448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,952,532,420,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:43:42.156402,0.000247,udp,147.32.84.170,60662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:43:44.733826,3554.388428,udp,147.32.84.25,43670.0,<->,82.208.56.89,123.0,CON,0.0,0.0,90,8100,4050,4050,90.0,0.5,5,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 05:43:53.230741,60.952168,tcp,147.32.84.165,3488.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:43:53.989503,0.000223,udp,147.32.85.89,40869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:43:54.476268,0.000238,udp,147.32.84.138,49599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:43:57.564291,153.409195,udp,147.32.84.229,13363.0,<->,71.202.180.245,9107.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:43:58.161766,0.000449,udp,61.220.83.58,16959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,75,519,297.0,0.12626262626262627,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:43:59.207582,0.000359,udp,110.49.250.65,48755.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:43:59.517606,0.000319,udp,147.32.84.170,33928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:01.528406,0.001773,udp,109.167.59.172,53670.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,498,60,279.0,0.8924731182795699,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:02.350719,0.000335,udp,147.32.86.20,63472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:06.385532,0.000183,udp,147.32.85.34,50909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:09.517592,0.000453,udp,147.32.84.170,45258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:09.911067,3.030514,tcp,147.32.85.74,59063.0,->,86.49.87.107,6889.0,S_,0.0,,3,222,222,0,74.0,1.0,5,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 05:44:13.155764,0.000439,udp,147.32.84.170,32896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:13.680646,0.000359,udp,89.204.153.65,47800.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:17.164580,3052.301514,udp,108.85.210.73,24593.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:18.408609,0.035147,udp,147.32.84.229,13363.0,<->,77.96.222.211,3952.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:19.518368,0.000424,udp,147.32.84.170,53262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:19.949278,0.014754,udp,147.32.84.171,56680.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,78,248,163.0,0.2392638036809816,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:22.122520,0.000248,udp,147.32.85.25,46084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:22.237563,0.000426,udp,97.86.18.174,20394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,319,64,255,159.5,0.2006269592476489,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:23.202591,0.039241,udp,147.32.84.171,35342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,70,207,138.5,0.2527075812274368,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:28.063888,0.019558,udp,147.32.84.184,53153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:28.409957,0.000383,udp,147.32.84.138,56199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:32.386647,0.000269,udp,147.32.84.59,43798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:44:39.519453,0.018109,tcp,147.32.84.170,38314.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:43.790147,1437.775391,udp,106.154.151.162,15073.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,712,526,186,118.66666666666667,0.7387640449438202,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:44:44.158449,0.000257,udp,147.32.84.170,32889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:53.868558,60.953949,tcp,147.32.84.165,3489.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:44:59.517648,0.000418,udp,147.32.84.170,34686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:59.518581,0.000322,udp,147.32.84.170,59092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:44:59.838203,3393.580811,udp,208.88.186.8,34009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,874,314,560,218.5,0.35926773455377575,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:01.142907,0.00032,udp,147.32.84.59,44654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:45:09.519752,0.018192,tcp,147.32.84.170,34035.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:12.229530,0.135038,tcp,147.32.86.20,4112.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:45:19.518557,0.000395,udp,147.32.84.170,39462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:23.877199,0.000313,udp,76.24.56.129,59524.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:24.580189,2345.597656,udp,125.4.16.156,14803.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,792,611,181,132.0,0.7714646464646465,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:24.707559,6.460238,udp,97.89.54.119,7443.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1091,548,543,272.75,0.5022914757103575,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:28.156268,2408.880371,udp,83.165.218.131,26133.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,806,625,181,134.33333333333334,0.7754342431761787,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:29.520736,0.000225,udp,147.32.84.170,54981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:29.521720,0.018126,tcp,147.32.84.170,56569.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:33.354163,0.000288,udp,147.32.86.20,63491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:45:36.213614,0.000242,udp,147.32.84.138,35772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:45:39.521253,0.019979,udp,147.32.84.170,52229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:46.182893,0.000455,udp,89.188.123.14,44092.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:45:49.520773,0.000326,udp,147.32.84.170,35774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:49.521877,0.017656,tcp,147.32.84.170,54149.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:45:50.601401,0.00015,udp,147.32.84.138,45402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:45:54.508138,60.97715,tcp,147.32.84.165,3490.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:45:59.523865,0.01818,tcp,147.32.84.170,56573.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:46:06.426594,0.000389,udp,83.248.87.251,21238.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:46:07.059996,0.045622,udp,147.32.84.229,13363.0,<->,149.5.45.184,33033.0,CON,0.0,0.0,5,5124,60,5064,1024.8,0.0117096018735363,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:46:16.335966,0.020001,udp,147.32.85.34,53067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,345,86,259,172.5,0.2492753623188406,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:46:18.397453,0.000416,udp,147.32.84.138,56326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:46:35.285249,0.000333,udp,67.166.140.111,53106.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:46:36.093661,3474.258545,udp,147.32.84.15,32861.0,<->,82.208.56.89,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,5,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 05:46:39.520695,0.000331,udp,147.32.84.170,46514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:46:40.031201,0.000143,udp,147.32.85.25,50659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:46:40.782429,0.000415,udp,75.103.11.28,37630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:46:45.544530,0.000337,udp,147.32.85.25,33186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:46:46.168999,0.228464,tcp,147.32.84.170,34065.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:46:51.305932,0.030217,udp,147.32.84.229,13363.0,<->,149.13.32.115,33033.0,CON,0.0,0.0,2,143,83,60,71.5,0.5804195804195804,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:46:55.165458,60.94154,tcp,147.32.84.165,3491.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:47:09.482821,0.000216,udp,147.32.84.138,44077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:47:09.523672,0.000372,udp,147.32.84.170,41339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:13.487256,1075.922974,udp,220.109.79.252,57423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3079,2959,120,513.1666666666666,0.9610263072426113,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:47:17.166055,0.000245,udp,147.32.84.170,38285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:17.166856,0.000233,udp,147.32.84.170,59242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:21.869738,7.384882,tcp,67.195.115.92,53090.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,990,939051,23758,915293,948.5363636363636,0.025300010329577415,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:47:29.520843,0.000241,udp,147.32.84.170,47197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:31.278251,0.016681,tcp,147.32.84.59,39761.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,5,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 05:47:33.440292,3008.205322,udp,193.84.86.14,29357.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,687,501,186,114.5,0.7292576419213974,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:47:49.520801,0.000297,udp,147.32.84.170,57658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:49.521829,0.017801,tcp,147.32.84.170,48457.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:47:55.792623,60.953472,tcp,147.32.84.165,3492.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:47:57.205040,0.000103,udp,147.32.84.138,33925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:47:57.589197,0.000472,udp,178.205.49.208,17832.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:48:06.189494,0.000275,udp,147.32.85.34,54212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:06.190486,0.000247,udp,147.32.85.34,63801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:08.976218,0.00045,icmp,147.32.87.249,,<-,147.32.87.52,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:48:09.520883,0.000539,udp,147.32.84.170,41568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:13.214616,0.247774,tcp,147.32.84.170,51588.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:13.454208,0.00028,udp,147.32.86.20,55955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:14.256647,0.000283,udp,147.32.84.170,43993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:14.257684,465.553467,tcp,147.32.84.170,46982.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,99,37618,27393,10225,379.979797979798,0.728188633101175,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:14.257877,240.050751,tcp,147.32.84.170,46985.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:16.276982,0.000261,udp,147.32.84.138,46050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:18.168083,0.210048,tcp,147.32.84.170,48083.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:19.520818,0.000326,udp,147.32.84.170,51557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:29.521008,0.000415,udp,147.32.84.170,59245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:29.523012,0.018029,tcp,147.32.84.170,47946.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:33.768170,0.170411,tcp,147.32.86.20,4293.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,71030,1571,69459,959.8648648648649,0.022117415176685907,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:48:40.556507,9.8e-05,udp,147.32.84.138,60905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:46.868810,0.000374,udp,147.32.84.138,37238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:47.553196,0.111005,udp,147.32.84.170,57433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:47.702076,0.000267,udp,147.32.84.170,53019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:47.702796,0.000389,udp,147.32.84.170,54911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:48:53.710204,0.000264,udp,147.32.84.138,36592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:48:56.431768,60.968365,tcp,147.32.84.165,3493.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:48:59.523126,0.017681,tcp,147.32.84.170,60555.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:00.351029,0.000415,udp,212.242.166.25,24374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:49:03.227092,1.964053,tcp,218.212.33.132,50558.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,24,1877,1087,790,78.20833333333333,0.579115610015983,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:49:07.391488,576.407837,udp,147.32.84.229,13363.0,<->,118.170.11.107,33978.0,CON,0.0,0.0,6,413,232,181,68.83333333333333,0.5617433414043583,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:49:07.751215,0.000331,udp,147.32.84.59,57505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:49:09.521077,0.000368,udp,147.32.84.170,55875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:09.521987,0.000342,udp,147.32.84.170,34307.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:15.101924,0.000315,udp,122.221.60.145,31958.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:49:18.034390,0.000696,udp,42.119.196.11,29896.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,5,1,flow=Background-UDP-Established,Background,-1 2011-08-17 05:49:18.169200,0.220704,tcp,147.32.84.170,48093.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:19.520859,0.000316,udp,147.32.84.170,52371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:28.325249,3042.935059,udp,123.17.141.31,28287.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1676,239,1437,279.3333333333333,0.1426014319809069,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:49:32.271525,0.134918,tcp,147.32.86.20,4345.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,38,29241,1033,28208,769.5,0.035327109195991926,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:49:39.523201,0.00031,udp,147.32.84.170,58904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:49.168341,0.000249,udp,147.32.84.170,40516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:49.521931,0.000293,udp,147.32.84.170,60242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:49:57.080145,60.965603,tcp,147.32.84.165,3494.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:49:57.462838,0.206654,tcp,147.32.86.20,4368.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:50:05.196035,6.832308,udp,147.32.84.229,13363.0,<->,126.119.169.123,13413.0,CON,0.0,0.0,4,667,546,121,166.75,0.8185907046476761,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:07.634213,4.337933,udp,147.32.84.229,13363.0,<->,89.189.154.181,9266.0,CON,0.0,0.0,4,667,546,121,166.75,0.8185907046476761,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:09.523795,0.000387,udp,147.32.84.170,33161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:50:09.524927,0.017981,tcp,147.32.84.170,60564.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:50:15.111107,6.117127,tcp,66.249.72.35,56189.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1121,677,444,112.1,0.6039250669045495,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:50:17.854675,0.00036,udp,46.146.134.104,43655.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,78,481,279.5,0.13953488372093023,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:18.762470,0.202119,udp,147.32.84.229,13363.0,<->,173.18.25.144,42339.0,CON,0.0,0.0,2,1164,207,957,582.0,0.17783505154639176,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:19.523832,0.018095,tcp,147.32.84.170,48490.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:50:20.169930,0.218355,tcp,147.32.84.170,48102.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:50:24.011737,0.000423,udp,202.40.134.130,3852.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:32.885353,1432.389038,udp,61.62.109.241,9420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,404,224,180,67.33333333333333,0.5544554455445545,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:50:33.840995,9.2e-05,udp,147.32.85.25,55872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:50:51.168973,0.000281,udp,147.32.84.170,45727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:50:57.725788,60.968479,tcp,147.32.84.165,3495.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:50:59.522130,0.000474,udp,147.32.84.170,41779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:01.099806,3045.614746,udp,78.98.1.55,38436.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1470,1098,372,122.5,0.746938775510204,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:51:12.241380,0.189543,udp,147.32.84.229,13363.0,<->,68.96.96.149,21461.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:51:19.523112,0.000272,udp,147.32.84.170,46740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:19.524101,0.018007,tcp,147.32.84.170,60573.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:21.078562,0.000377,udp,147.32.85.25,44789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:51:21.168641,0.000192,udp,147.32.84.170,49854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:37.977394,0.000375,udp,115.30.230.63,47931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:51:39.522163,0.000398,udp,147.32.84.170,51759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:44.955109,0.000377,udp,85.72.228.70,50564.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,257,195,62,128.5,0.7587548638132295,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:51:47.753201,0.000343,udp,147.32.84.138,58120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:51:49.523243,0.00036,udp,147.32.84.170,50827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:51:58.374528,60.941612,tcp,147.32.84.165,3496.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:52:00.136569,0.000298,udp,173.216.55.227,54360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:52:01.778687,0.20517,tcp,147.32.86.20,4475.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:52:05.876245,0.000334,udp,147.32.85.34,53978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:52:05.929902,0.000292,udp,147.32.85.34,55410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:52:09.522188,0.00035,udp,147.32.84.170,41632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:09.523099,0.000278,udp,147.32.84.170,50335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:09.524107,0.017918,tcp,147.32.84.170,37704.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:10.718303,0.00032,udp,147.32.86.20,58556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:52:21.925107,0.308545,udp,147.32.84.229,13363.0,<->,116.64.251.27,52140.0,CON,0.0,0.0,2,1560,208,1352,780.0,0.13333333333333333,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:52:22.170030,0.000317,udp,147.32.84.170,52556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:22.576529,0.000245,udp,147.32.84.138,59258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:52:29.500033,1.146994,udp,147.32.87.48,3091.0,->,147.32.87.116,161.0,INT,0.0,,22,2882,2882,0,131.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:52:39.523310,0.000369,udp,147.32.84.170,43813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:49.522423,0.000434,udp,147.32.84.170,49625.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:53.167480,0.000195,udp,147.32.84.170,55366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:53.168107,0.000289,udp,147.32.84.170,41850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:52:54.069246,0.000237,udp,147.32.85.89,52976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:52:59.002023,60.969101,tcp,147.32.84.165,3497.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:52:59.524336,0.017822,tcp,147.32.84.170,38681.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:07.821774,3080.723145,udp,95.96.61.138,11923.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,952,704,248,119.0,0.7394957983193278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:53:09.522242,0.000464,udp,147.32.84.170,53092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:09.524317,0.017861,tcp,147.32.84.170,38682.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:13.508125,0.232274,tcp,147.32.84.170,58965.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:13.732684,0.266811,tcp,147.32.84.170,58966.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:13.991680,0.433437,tcp,147.32.84.170,58968.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:19.522352,0.000424,udp,147.32.84.170,39823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:24.170451,0.232664,tcp,147.32.84.170,42184.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:29.522334,0.000368,udp,147.32.84.170,45601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:29.523296,0.000387,udp,147.32.84.170,54030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:31.912177,0.00045,udp,72.189.204.12,53881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:53:33.905496,0.00027,udp,147.32.84.138,53589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:53:35.093061,1.046894,tcp,41.201.59.10,51186.0,->,147.32.85.56,80.0,FSPA_FSPA,0.0,0.0,12,860,491,369,71.66666666666667,0.5709302325581396,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:53:40.539517,0.000207,udp,147.32.84.138,54137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:53:47.042855,0.05923,udp,147.32.84.229,13363.0,<->,85.217.227.173,49185.0,CON,0.0,0.0,4,2938,60,2878,734.5,0.02042205582028591,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:53:49.522369,0.000383,udp,147.32.84.170,59610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:49.524200,0.018045,tcp,147.32.84.170,59605.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:51.924876,0.00019,udp,147.32.84.138,37979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:53:52.008560,0.000529,udp,98.236.152.158,40527.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,947,78,869,473.5,0.08236536430834214,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:53:55.170281,0.000257,udp,147.32.84.170,49587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:55.172516,0.224937,tcp,147.32.84.170,42188.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:53:59.651252,60.950134,tcp,147.32.84.165,3498.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:54:01.860916,0.000299,udp,97.97.225.99,55009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:54:08.935567,0.000305,udp,147.32.84.138,41146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:54:09.345823,0.135147,tcp,147.32.86.20,4585.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,36,29121,913,28208,808.9166666666666,0.03135194533154768,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:54:09.524232,0.01773,tcp,147.32.84.170,47366.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:54:16.093621,0.000196,udp,147.32.84.138,41249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:54:18.421022,0.000295,udp,147.32.84.171,59448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,540,84,456,270.0,0.15555555555555556,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:54:19.522217,0.000502,udp,147.32.84.170,42831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:54:20.250716,37.47678,tcp,200.195.66.162,49354.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,22,4102,1926,2176,186.45454545454547,0.46952705997074595,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:54:34.313149,2788.996094,udp,68.82.37.172,11786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:54:49.523139,0.000305,udp,147.32.84.170,39114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:54:49.729137,0.004216,udp,219.85.95.39,10045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2929,60,2869,732.25,0.020484807101399796,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:54:51.705574,0.000529,udp,193.227.184.1,61125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:54:57.170200,0.000353,udp,147.32.84.170,43015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:54:57.171513,0.211007,tcp,147.32.84.170,42196.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:00.287222,60.966972,tcp,147.32.84.165,3499.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:55:09.522428,0.000457,udp,147.32.84.170,41910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:09.523339,0.000405,udp,147.32.84.170,51754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:09.524443,0.018092,tcp,147.32.84.170,48416.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:12.109854,4.633928,tcp,123.22.108.212,2727.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,14,926,506,420,66.14285714285714,0.5464362850971922,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:55:15.778718,0.000224,udp,147.32.85.25,34225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:55:17.808011,0.000343,udp,178.219.95.88,7044.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:55:19.522497,0.000435,udp,147.32.84.170,48291.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:24.428171,0.000441,udp,83.227.36.110,26229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:55:27.171307,0.000429,udp,147.32.84.170,52687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:29.070542,1.176381,tcp,213.5.130.49,50232.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,17,1297,684,613,76.29411764705883,0.5273708558211256,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:55:29.522367,0.000539,udp,147.32.84.170,38733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:29.523469,0.000344,udp,147.32.84.170,50574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:35.846913,0.000159,udp,147.32.84.138,58875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:55:39.522462,0.019993,udp,147.32.84.170,54974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:39.755462,3093.770508,udp,97.96.39.191,48135.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:55:41.569113,0.000162,udp,147.32.85.25,57049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:55:41.604085,0.001825,udp,147.32.86.89,65055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,76,133,104.5,0.36363636363636365,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:55:49.524779,0.017917,tcp,147.32.84.170,47379.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:55:52.250765,0.000367,udp,85.220.123.180,44904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:55:52.540026,0.134951,tcp,147.32.86.20,4676.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:55:59.526607,0.018695,tcp,147.32.84.170,42910.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:56:00.934621,60.967113,tcp,147.32.84.165,3500.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:56:04.685207,0.00021,udp,147.32.84.138,42377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:06.540374,0.000309,udp,147.32.85.34,56706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:07.012900,0.000348,udp,147.32.85.25,41621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:14.409225,0.895446,tcp,147.32.84.171,32948.0,->,98.207.83.3,19391.0,FSPA_FSRPA,0.0,0.0,13,1593,662,931,122.53846153846153,0.4155681104833647,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:56:14.475056,0.000353,udp,147.32.86.20,63943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:17.349858,0.0,tcp,147.32.84.165,3501.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.360526,2527.913818,udp,68.37.116.14,38046.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,544,304,240,68.0,0.5588235294117647,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:56:17.363426,0.0,tcp,147.32.84.165,3503.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.363829,0.0,tcp,147.32.84.165,3504.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.527621,0.0,tcp,147.32.84.165,3505.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.537860,0.0,tcp,147.32.84.165,3507.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.547895,0.0,tcp,147.32.84.165,3508.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:17.728133,0.0,tcp,147.32.84.165,3509.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:18.360253,0.0,tcp,147.32.84.165,3513.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:18.459639,0.0,tcp,147.32.84.165,3511.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:19.526025,0.000284,udp,147.32.84.170,57397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:56:19.661431,0.0,tcp,147.32.84.165,3512.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:30.776689,0.0,tcp,147.32.84.165,3730.0,->,147.32.79.58,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.377802,0.0,tcp,147.32.84.165,3741.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378000,0.0,tcp,147.32.84.165,3743.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378014,0.0,tcp,147.32.84.165,3742.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378019,0.0,tcp,147.32.84.165,3745.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378165,0.0,tcp,147.32.84.165,3747.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378220,0.0,tcp,147.32.84.165,3746.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.378274,0.0,tcp,147.32.84.165,3749.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:31.464255,0.000233,udp,147.32.84.138,59548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:33.813520,1448.83667,udp,94.127.88.172,64160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,26,5369,4585,784,206.5,0.8539765319426337,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:56:38.376708,0.000194,udp,147.32.84.138,56100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:39.523424,0.000336,udp,147.32.84.170,53183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:56:43.394813,0.0,tcp,147.32.84.165,3983.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.394883,0.0,tcp,147.32.84.165,3982.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.395102,0.0,tcp,147.32.84.165,3981.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.395117,0.0,tcp,147.32.84.165,3987.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.395121,0.0,tcp,147.32.84.165,3986.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.395162,0.0,tcp,147.32.84.165,3985.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:43.395365,0.0,tcp,147.32.84.165,3991.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:49.523656,0.000262,udp,147.32.84.170,40461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:56:53.716325,0.000417,udp,147.32.85.25,39209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:53.720456,0.000213,udp,147.32.85.25,60115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:56:54.811964,0.0,tcp,147.32.84.165,4210.0,->,147.32.79.178,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.412569,0.0,tcp,147.32.84.165,4221.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.412767,0.0,tcp,147.32.84.165,4223.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.412782,0.0,tcp,147.32.84.165,4222.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.412788,0.0,tcp,147.32.84.165,4225.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.412957,0.0,tcp,147.32.84.165,4227.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.413013,0.0,tcp,147.32.84.165,4226.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:55.413071,0.0,tcp,147.32.84.165,4229.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:56:56.133722,0.000339,udp,147.32.84.138,41555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:57:03.153256,0.000263,udp,147.32.85.34,54595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:57:07.429569,0.0,tcp,147.32.84.165,4464.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.429687,60.963524,tcp,147.32.84.165,4385.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:57:07.429704,0.0,tcp,147.32.84.165,4463.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.429778,0.0,tcp,147.32.84.165,4462.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.429916,0.0,tcp,147.32.84.165,4468.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.429981,0.0,tcp,147.32.84.165,4467.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.430049,0.0,tcp,147.32.84.165,4466.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:07.758430,0.0,tcp,147.32.84.165,4472.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:09.522550,0.00033,udp,147.32.84.170,39247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:18.845900,0.0,tcp,147.32.84.165,4648.0,->,147.32.80.44,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447411,0.0,tcp,147.32.84.165,4656.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447650,0.0,tcp,147.32.84.165,4657.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447720,0.0,tcp,147.32.84.165,4659.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447895,0.0,tcp,147.32.84.165,4660.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447910,0.0,tcp,147.32.84.165,4662.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.447916,0.0,tcp,147.32.84.165,4663.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:19.522568,0.000628,udp,147.32.84.170,46157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:29.522651,0.000393,udp,147.32.84.170,52093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:30.864014,0.0,tcp,147.32.84.165,4828.0,->,192.168.1.104,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.170778,0.000362,udp,147.32.84.170,60883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:31.464936,0.0,tcp,147.32.84.165,4838.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.464950,0.0,tcp,147.32.84.165,4837.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.465021,0.0,tcp,147.32.84.165,4841.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.465157,0.0,tcp,147.32.84.165,4840.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.465215,0.0,tcp,147.32.84.165,4844.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:31.465437,0.0,tcp,147.32.84.165,4843.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:34.865182,0.00049,udp,145.236.112.137,13412.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,467,137,330,233.5,0.29336188436830835,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:57:36.160779,2.66855,tcp,66.249.66.211,35154.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,18,8571,983,7588,476.1666666666667,0.11468906778672266,5,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 05:57:38.283127,0.00037,udp,147.32.84.138,34249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:57:38.783243,0.000437,icmp,147.32.87.249,,<-,147.32.87.54,2.0,RED,,0.0,2,148,0,148,74.0,0.0,5,1,flow=Background,Background,-1 2011-08-17 05:57:43.093114,3189.293457,udp,122.116.45.39,43714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:57:43.481869,0.0,tcp,147.32.84.165,1079.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.481883,0.0,tcp,147.32.84.165,1078.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.482116,0.0,tcp,147.32.84.165,1082.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.482130,0.0,tcp,147.32.84.165,1081.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.482135,0.0,tcp,147.32.84.165,1085.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.482180,0.0,tcp,147.32.84.165,1084.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:43.635616,0.000459,udp,89.252.234.138,15723.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:57:49.522648,0.000364,udp,147.32.84.170,45755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:49.523550,0.000347,udp,147.32.84.170,58174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:57:51.971177,0.0004,udp,86.184.247.196,42066.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:57:54.898621,0.0,tcp,147.32.84.165,1250.0,->,147.32.80.224,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499301,0.0,tcp,147.32.84.165,1258.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499660,0.0,tcp,147.32.84.165,1259.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499674,0.0,tcp,147.32.84.165,1261.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499679,0.0,tcp,147.32.84.165,1262.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499684,0.0,tcp,147.32.84.165,1264.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:55.499698,0.0,tcp,147.32.84.165,1265.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:57:57.667303,0.00036,udp,147.32.86.20,58690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:57:57.667905,0.997947,tcp,147.32.86.20,4784.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,93304,1586,91718,1003.2688172043011,0.016998199434107863,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:57:59.523538,0.000395,udp,147.32.84.170,52957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:01.066201,0.259467,udp,147.32.84.229,13363.0,<->,201.9.222.152,63811.0,CON,0.0,0.0,4,2963,60,2903,740.75,0.020249746878164023,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:58:03.072094,0.412317,udp,147.32.84.229,13363.0,<->,186.50.165.40,43906.0,CON,0.0,0.0,4,2918,60,2858,729.5,0.0205620287868403,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:58:06.367077,0.000412,udp,147.32.85.34,49491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:06.373828,0.000287,udp,147.32.85.34,57751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:06.508552,3576.397705,tcp,183.83.206.95,2278.0,->,147.32.85.56,44076.0,PA_PA,0.0,0.0,544,34264,13219,21045,62.98529411764706,0.3857985057202895,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:58:07.516284,0.0,tcp,147.32.84.165,1406.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:07.516302,0.0,tcp,147.32.84.165,1408.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:07.516309,0.0,tcp,147.32.84.165,1410.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:07.516348,0.0,tcp,147.32.84.165,1412.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:07.516517,0.0,tcp,147.32.84.165,1414.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:09.523602,0.00048,udp,147.32.84.170,37437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:09.524619,0.000205,udp,147.32.84.170,42300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:13.458632,0.285895,tcp,147.32.84.170,32797.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:13.516342,0.344342,tcp,147.32.84.170,43962.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:13.853075,0.28055,tcp,147.32.84.170,43964.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:16.345123,0.000465,udp,123.235.22.10,12974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,74,487,280.5,0.1319073083778966,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:58:18.882808,0.000174,udp,147.32.84.138,50576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:19.523616,0.000281,udp,147.32.84.170,57764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:19.533878,60.943428,tcp,147.32.84.165,1432.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:58:19.533999,0.0,tcp,147.32.84.165,1527.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:19.534073,0.0,tcp,147.32.84.165,1529.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:19.534212,0.0,tcp,147.32.84.165,1531.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:19.849051,0.0,tcp,147.32.84.165,1533.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:20.134855,0.0,tcp,147.32.84.165,1535.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:21.104629,0.000328,udp,108.16.43.98,5003.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:58:22.281210,0.000294,udp,147.32.84.138,55997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:27.994542,1.3e-05,udp,147.32.87.48,3150.0,->,147.32.86.238,161.0,INT,0.0,,2,262,262,0,131.0,1.0,5,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 05:58:29.522745,0.000603,udp,147.32.84.170,51969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:30.950506,0.0,tcp,147.32.84.165,1641.0,->,147.32.81.150,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:31.311304,0.000171,udp,147.32.84.138,45161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:31.551457,0.0,tcp,147.32.84.165,1647.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:31.551544,0.0,tcp,147.32.84.165,1649.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:32.152259,0.0,tcp,147.32.84.165,1653.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:32.152480,0.0,tcp,147.32.84.165,1655.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:33.172578,0.000223,udp,147.32.84.170,56704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:39.524686,0.000381,udp,147.32.84.170,35881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:42.967885,0.0,tcp,147.32.84.165,1761.0,->,147.32.81.210,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:43.568603,0.0,tcp,147.32.84.165,1767.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:43.568667,0.0,tcp,147.32.84.165,1769.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:44.169638,0.0,tcp,147.32.84.165,1773.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:44.169738,0.0,tcp,147.32.84.165,1775.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:49.522751,0.000377,udp,147.32.84.170,34946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:58:53.493569,0.000414,udp,147.32.84.59,58482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:58:54.418351,31.022989,tcp,213.87.74.14,52677.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,480,120,360,60.0,0.25,5,0,flow=Background-TCP-Established,Background,-1 2011-08-17 05:58:54.985353,0.0,tcp,147.32.84.165,1881.0,->,147.32.82.16,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:55.586295,0.0,tcp,147.32.84.165,1887.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:55.586348,0.0,tcp,147.32.84.165,1889.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:56.186923,0.0,tcp,147.32.84.165,1893.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:56.187344,0.0,tcp,147.32.84.165,1895.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:58:59.524796,0.017844,tcp,147.32.84.170,59269.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:03.170004,0.000213,udp,147.32.84.170,43156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:06.635870,0.000339,udp,147.32.84.138,60947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:59:07.002498,0.0,tcp,147.32.84.165,2001.0,->,147.32.82.76,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:07.603506,0.0,tcp,147.32.84.165,2008.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:07.603611,0.0,tcp,147.32.84.165,2007.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:07.603668,0.0,tcp,147.32.84.165,2010.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:07.603721,0.0,tcp,147.32.84.165,2009.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:07.603766,0.0,tcp,147.32.84.165,2012.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:08.203776,0.0,tcp,147.32.84.165,2013.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:08.203848,0.0,tcp,147.32.84.165,2014.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:08.204006,0.0,tcp,147.32.84.165,2015.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:08.204020,0.0,tcp,147.32.84.165,2016.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:09.123317,0.000232,udp,147.32.85.89,51451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:59:09.522601,0.00034,udp,147.32.84.170,47763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:09.524448,0.017965,tcp,147.32.84.170,59271.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:16.482543,0.205785,tcp,147.32.86.20,4855.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:59:19.020130,0.0,tcp,147.32.84.165,2122.0,->,147.32.82.136,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:19.522509,0.000376,udp,147.32.84.170,48995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:19.523443,0.000286,udp,147.32.84.170,58023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:19.524487,0.018049,tcp,147.32.84.170,54146.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:19.620456,0.0,tcp,147.32.84.165,2128.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:19.620475,0.0,tcp,147.32.84.165,2130.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:20.221218,60.959164,tcp,147.32.84.165,2154.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,5,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 05:59:20.221293,0.0,tcp,147.32.84.165,2134.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:20.221461,0.0,tcp,147.32.84.165,2136.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:29.522733,0.000692,udp,147.32.84.170,40494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,5,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 05:59:31.037131,0.0,tcp,147.32.84.165,2243.0,->,147.32.82.196,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:31.638399,0.0,tcp,147.32.84.165,2249.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:31.638487,0.0,tcp,147.32.84.165,2251.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:32.238598,0.0,tcp,147.32.84.165,2255.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:32.239025,0.0,tcp,147.32.84.165,2257.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:36.812868,10.756624,tcp,147.32.86.89,1118.0,->,91.103.160.56,80.0,FSPA_FSPA,0.0,0.0,14,4455,780,3675,318.2142857142857,0.1750841750841751,5,1,flow=Background-TCP-Established,Background,-1 2011-08-17 05:59:37.038669,3559.365967,tcp,147.32.84.229,13363.0,,46.146.34.127,52771.0,PA_PA,0.0,0.0,290,24891,11577,13314,85.83103448275862,0.4651078703145715,5,0,flow=Background,Background,-1 2011-08-17 05:59:43.054520,0.0,tcp,147.32.84.165,2363.0,->,147.32.83.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:43.655121,0.0,tcp,147.32.84.165,2370.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:43.655349,0.0,tcp,147.32.84.165,2369.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:43.655362,0.0,tcp,147.32.84.165,2372.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:43.655466,0.0,tcp,147.32.84.165,2371.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:43.655478,0.0,tcp,147.32.84.165,2374.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:44.256146,0.0,tcp,147.32.84.165,2375.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:44.256234,0.0,tcp,147.32.84.165,2376.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:44.256362,0.0,tcp,147.32.84.165,2377.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:44.256377,0.0,tcp,147.32.84.165,2378.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:49.238301,0.000294,udp,147.32.84.138,38471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,5,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 05:59:52.133095,0.00078,udp,46.181.156.178,22136.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,72,482,277.0,0.1299638989169675,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 05:59:55.071834,0.0,tcp,147.32.84.165,2483.0,->,147.32.83.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:55.672746,0.0,tcp,147.32.84.165,2490.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:55.672816,0.0,tcp,147.32.84.165,2489.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:55.672930,0.0,tcp,147.32.84.165,2492.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:55.672945,0.0,tcp,147.32.84.165,2491.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:55.673002,0.0,tcp,147.32.84.165,2494.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:56.273746,0.0,tcp,147.32.84.165,2495.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:56.273938,0.0,tcp,147.32.84.165,2496.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:56.273953,0.0,tcp,147.32.84.165,2497.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:56.273958,0.0,tcp,147.32.84.165,2498.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,5,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 05:59:57.138736,2873.63916,udp,147.32.84.229,13363.0,<->,69.14.200.8,50413.0,CON,0.0,0.0,7,2324,778,1546,332.0,0.3347676419965577,5,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:00:01.855190,0.000384,udp,147.32.87.36,53122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,6,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 06:00:02.518108,3412.858643,udp,195.230.12.88,54344.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,928,680,248,116.0,0.7327586206896551,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:00:02.734744,3599.317871,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,18,1620,810,810,90.0,0.5,6,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 06:00:06.317169,0.000301,udp,147.32.85.34,50267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:00:07.088767,0.0,tcp,147.32.84.165,2603.0,->,147.32.83.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:07.689939,0.0,tcp,147.32.84.165,2610.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:07.690069,0.0,tcp,147.32.84.165,2609.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:07.690078,0.0,tcp,147.32.84.165,2612.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:07.690203,0.0,tcp,147.32.84.165,2611.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:07.690214,0.0,tcp,147.32.84.165,2614.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:08.290941,0.0,tcp,147.32.84.165,2615.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:08.290987,0.0,tcp,147.32.84.165,2616.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:08.291055,0.0,tcp,147.32.84.165,2617.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:08.291174,0.0,tcp,147.32.84.165,2618.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:10.110789,0.000349,udp,147.32.86.20,50454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:00:12.879964,0.000167,udp,147.32.84.138,43096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:00:15.085160,0.154466,udp,147.32.84.229,13363.0,<->,76.16.222.104,38894.0,CON,0.0,0.0,4,2939,60,2879,734.75,0.02041510717931269,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:00:19.106538,0.0,tcp,147.32.84.165,2723.0,->,147.32.83.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.707711,0.0,tcp,147.32.84.165,2730.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.707912,0.0,tcp,147.32.84.165,2729.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.707926,0.0,tcp,147.32.84.165,2732.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.707933,0.0,tcp,147.32.84.165,2731.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.707984,0.0,tcp,147.32.84.165,2734.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:19.868394,0.000461,udp,147.32.84.59,59197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:00:20.307923,0.0,tcp,147.32.84.165,2735.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:20.307995,0.0,tcp,147.32.84.165,2736.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:20.308113,0.0,tcp,147.32.84.165,2737.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:20.308127,0.0,tcp,147.32.84.165,2738.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:29.134528,0.000242,udp,147.32.85.89,43988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:00:31.123600,60.968124,tcp,147.32.84.165,2761.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:00:31.443905,0.0,tcp,147.32.84.165,2848.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:31.724458,0.0,tcp,147.32.84.165,2851.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:31.724510,0.0,tcp,147.32.84.165,2850.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:31.724628,0.0,tcp,147.32.84.165,2853.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:31.724642,0.0,tcp,147.32.84.165,2852.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:31.724791,0.0,tcp,147.32.84.165,2855.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:32.325469,0.0,tcp,147.32.84.165,2856.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:32.325487,0.0,tcp,147.32.84.165,2857.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:32.325532,0.0,tcp,147.32.84.165,2858.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:32.325687,0.0,tcp,147.32.84.165,2859.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:00:34.171559,0.209073,tcp,147.32.84.170,59670.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:00:46.219396,553.220215,udp,221.121.16.183,13678.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:00:58.415511,0.000474,udp,123.240.144.75,38458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:01:00.077227,0.000237,udp,147.32.84.138,58082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:01:04.169305,0.000339,udp,147.32.84.170,56295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:04.170235,0.000364,udp,147.32.84.170,43112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:19.329369,0.000565,udp,123.255.6.2,14795.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,76,480,278.0,0.1366906474820144,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:01:19.524932,0.017852,tcp,147.32.84.170,40327.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:27.129598,0.0,udp,71.59.24.80,27359.0,->,147.32.84.229,13363.0,INT,0.0,,1,74,74,0,74.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:01:29.523900,0.000277,udp,147.32.84.170,40920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:30.361915,0.000224,udp,147.32.85.25,39022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:01:31.771863,60.969097,tcp,147.32.84.165,2870.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:01:34.170007,0.000219,udp,147.32.84.170,56739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:39.144001,0.000212,udp,147.32.85.89,59893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:01:39.524826,0.017909,tcp,147.32.84.170,53907.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:50.617189,0.0,udp,218.91.7.78,27376.0,->,147.32.84.110,29735.0,INT,0.0,,1,72,72,0,72.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:01:56.793913,0.000482,udp,119.83.209.95,52087.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,708,74,634,354.0,0.10451977401129943,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:01:59.523893,0.000379,udp,147.32.84.170,59963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:01:59.851520,3007.891846,udp,79.34.30.38,11506.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:02:05.169862,0.000266,udp,147.32.84.170,38262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:05.170677,0.000226,udp,147.32.84.170,50838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:05.171845,0.212853,tcp,147.32.84.170,59682.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:05.489525,0.000343,udp,147.32.86.20,65386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:02:06.102199,0.000236,udp,147.32.85.34,51444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:02:06.105447,0.000231,udp,147.32.85.34,61086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:02:06.111692,0.00023,udp,147.32.85.34,54431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:02:06.151369,0.000404,udp,147.32.85.34,49597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:02:09.308967,0.000288,udp,144.132.180.86,41382.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:02:11.295443,0.000406,udp,24.206.27.100,46744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:02:19.524998,0.018589,tcp,147.32.84.170,40335.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,8,544,272,272,68.0,0.5,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:23.530647,0.000514,udp,41.248.208.154,48714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,78,485,281.5,0.13854351687388988,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:02:32.420953,60.950756,tcp,147.32.84.165,2871.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:02:39.522996,0.000344,udp,147.32.84.170,58913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:39.524974,0.018303,tcp,147.32.84.170,34696.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:49.523081,0.000352,udp,147.32.84.170,41505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:49.523954,0.000327,udp,147.32.84.170,46927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:02:49.806506,2298.503174,udp,108.73.34.39,39971.0,->,147.32.84.171,6881.0,INT,0.0,,28,2053,2053,0,73.32142857142857,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:02:50.004133,0.000467,udp,75.46.36.4,55454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,76,482,279.0,0.13620071684587814,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:02:59.524924,0.017715,tcp,147.32.84.170,57409.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:06.170529,0.0003,udp,147.32.84.170,38856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:06.171822,0.210665,tcp,147.32.84.170,59465.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:06.622623,1.4e-05,icmp,147.32.87.249,,<-,147.32.87.4,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,6,1,flow=Background,Background,-1 2011-08-17 06:03:09.977555,11.121353,udp,119.120.191.59,28674.0,->,147.32.84.110,29735.0,INT,0.0,,2,144,144,0,72.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:03:13.902831,0.332416,tcp,147.32.84.170,38783.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:16.464594,0.004081,udp,187.89.157.182,6256.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:03:22.269744,0.000229,udp,147.32.85.25,37378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:03:29.523889,0.000344,udp,147.32.84.170,48037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:33.057047,60.952091,tcp,147.32.84.165,2887.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:03:36.078572,0.000223,udp,147.32.84.138,44200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:03:37.079493,24.113905,tcp,114.79.55.32,23603.0,->,147.32.87.36,80.0,SA_FSA,0.0,0.0,7,498,284,214,71.14285714285714,0.570281124497992,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:03:39.161785,0.000328,udp,147.32.85.89,47798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:03:39.523074,0.00038,udp,147.32.84.170,36852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:39.523985,0.000294,udp,147.32.84.170,56471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:39.524913,0.017925,tcp,147.32.84.170,49402.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:03:40.179413,0.000343,udp,147.32.84.138,44237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:03:59.523799,0.000309,udp,147.32.84.170,53299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:03.377870,1.4e-05,tcp,66.249.68.207,62248.0,->,147.32.85.115,80.0,S_,0.0,,1,74,74,0,74.0,1.0,6,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:04:09.525056,0.018543,tcp,147.32.84.170,49406.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:19.297406,0.000306,udp,147.32.84.171,54719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,80,211,145.5,0.27491408934707906,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:19.522932,0.000422,udp,147.32.84.170,34944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:19.523860,0.000319,udp,147.32.84.170,35714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:21.152930,0.028922,udp,147.32.84.171,56997.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:21.668370,0.000261,udp,147.32.84.138,39690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:26.058270,0.000344,udp,147.32.86.20,60933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:29.522932,0.000326,udp,147.32.84.170,57599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:29.804834,0.048621,udp,147.32.84.229,13363.0,<->,88.209.220.110,34359.0,CON,0.0,0.0,2,231,169,62,115.5,0.7316017316017316,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:04:30.318941,0.000556,udp,147.32.84.170,46323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:30.320493,250.046494,tcp,147.32.84.170,42244.0,->,74.125.232.205,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:33.694688,60.952141,tcp,147.32.84.165,2888.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:04:35.165770,0.000255,udp,147.32.84.19,34963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:35.439587,0.000172,tcp,114.79.55.32,23985.0,,147.32.87.36,80.0,FA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:04:38.672368,0.000241,udp,147.32.84.138,49697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:04:39.525126,0.017858,tcp,147.32.84.170,49411.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:44.160774,0.000356,udp,210.242.163.13,50128.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:04:45.103088,16.075729,tcp,93.91.80.9,2200.0,->,147.32.84.229,13363.0,SA_FSA,0.0,0.0,5,302,182,120,60.4,0.6026490066225165,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:04:47.510533,10.805963,udp,147.32.84.229,13363.0,<->,109.105.171.54,19200.0,CON,0.0,0.0,4,676,555,121,169.0,0.8210059171597633,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:04:49.523211,0.000479,udp,147.32.84.170,41415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:04:52.049772,0.000308,udp,175.157.172.70,43478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:04:56.819736,50.765625,udp,112.135.221.62,63434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:05:08.173784,0.000318,udp,147.32.84.170,48631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:08.175654,0.220659,tcp,147.32.84.170,59488.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:09.523895,0.00035,udp,147.32.84.170,58668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:09.524925,0.018106,tcp,147.32.84.170,35915.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:19.526309,0.00029,udp,147.32.84.170,42087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:28.021184,0.439945,udp,81.164.22.190,27405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,664,543,121,166.0,0.8177710843373494,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:05:29.386961,0.000314,udp,147.32.84.138,36616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:05:34.332302,60.968594,tcp,147.32.84.165,2889.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:05:39.172064,0.232472,tcp,147.32.84.170,59492.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:45.776701,0.003015,tcp,147.32.84.164,55388.0,->,79.141.166.3,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,6,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 06:05:49.525428,0.017671,tcp,147.32.84.170,54093.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:05:54.931564,0.000167,udp,147.32.84.138,46496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:05:59.523237,0.000352,udp,147.32.84.170,53114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:01.948163,0.000277,udp,147.32.84.138,45840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:02.442892,3558.414551,tcp,147.32.84.170,43527.0,->,74.125.39.125,5222.0,PA_PA,0.0,0.0,176,13914,7215,6699,79.05681818181819,0.5185424752048297,6,0,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:03.437862,6.3e-05,udp,147.32.84.59,42836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:08.413516,0.0,tcp,125.76.244.197,11011.0,?>,147.32.85.5,28766.0,RA_,0.0,,1,60,60,0,60.0,1.0,6,0,flow=Background,Background,-1 2011-08-17 06:06:09.523229,0.000406,udp,147.32.84.170,42282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:18.337050,0.0,icmp,147.32.84.186,11.0,->,81.218.229.68,,TXD,0.0,,1,86,86,0,86.0,1.0,6,,flow=Background,Background,-1 2011-08-17 06:06:18.434189,1.4e-05,icmp,81.218.229.68,8.0,<->,147.32.84.130,50132.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,6,0,flow=Background,Background,-1 2011-08-17 06:06:18.845691,0.000507,udp,78.83.218.89,34162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:06:19.523253,0.000489,udp,147.32.84.170,44584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:33.332533,0.000214,udp,147.32.85.25,45136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:34.981004,60.965588,tcp,147.32.84.165,2890.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:06:39.523880,0.00026,udp,147.32.84.170,52156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:39.524882,0.01806,tcp,147.32.84.170,49426.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:41.657023,0.000181,udp,147.32.84.138,38378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:43.569256,0.000311,udp,147.32.85.25,36345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:45.193174,0.00027,udp,147.32.84.138,44001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:49.062958,0.207334,tcp,147.32.86.20,1293.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:06:49.525691,0.017979,tcp,147.32.84.170,57447.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:06:52.115095,0.000302,udp,147.32.84.138,33652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:58.606675,0.000182,udp,147.32.85.25,57546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:06:59.525370,0.017694,tcp,147.32.84.170,49429.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:02.900585,6.02112,udp,147.32.84.229,13363.0,->,223.133.83.33,24428.0,INT,0.0,,3,564,564,0,188.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:07:09.525307,0.018198,tcp,147.32.84.170,36588.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:18.482124,0.00027,udp,147.32.84.138,41639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:07:19.523270,0.000477,udp,147.32.84.170,53823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:19.524263,0.000382,udp,147.32.84.170,51739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:24.299724,0.00024,udp,147.32.85.25,60314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:07:29.523664,0.000462,udp,147.32.84.170,48013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:32.363354,0.000467,udp,188.27.187.207,62881.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:07:35.626904,60.94199,tcp,147.32.84.165,2891.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:07:37.332576,0.000868,udp,65.37.55.167,60162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,73,468,270.5,0.13493530499075784,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:07:39.194926,0.000228,udp,147.32.85.89,54185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:07:39.388276,0.000189,udp,147.32.85.25,51561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:07:39.524270,0.000426,udp,147.32.84.170,32909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:39.525481,0.017452,tcp,147.32.84.170,40210.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:43.170520,0.000177,udp,147.32.84.170,57123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:07:43.172593,0.228729,tcp,147.32.84.170,59145.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:01.363458,0.000149,udp,147.32.84.138,57665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:08:13.773840,0.278107,tcp,147.32.84.170,55622.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:14.173797,0.000255,udp,147.32.84.170,39830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:14.175769,0.212426,tcp,147.32.84.170,59155.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:14.257070,0.0002,udp,147.32.84.170,36733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:14.259220,465.358032,tcp,147.32.84.170,44889.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,95,37637,27414,10223,396.17894736842106,0.7283789887610596,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:14.263349,246.121201,tcp,147.32.84.170,44893.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:19.524323,0.000323,udp,147.32.84.170,58492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:29.523932,0.000421,udp,147.32.84.170,35068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:33.733191,2429.742188,udp,74.14.3.244,33117.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:08:35.460739,0.00031,udp,147.32.84.59,48967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:08:35.474167,0.000317,udp,147.32.84.59,56219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:08:36.254706,60.968742,tcp,147.32.84.165,2892.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:08:38.612419,0.000349,udp,147.32.85.89,42045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:08:39.525106,0.000303,udp,147.32.84.170,37051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:44.168702,0.000267,udp,147.32.84.170,33884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:49.525402,0.01855,tcp,147.32.84.170,48457.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:08:50.944027,0.207055,tcp,147.32.86.20,1397.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:08:59.324673,0.000417,udp,76.195.60.102,41354.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:09:09.519183,0.000375,udp,76.102.40.244,51751.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:09:09.525513,0.018297,tcp,147.32.84.170,40245.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:09:21.433761,2044.170166,udp,67.240.100.227,59438.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1030,910,120,257.5,0.883495145631068,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:09:27.995730,0.332772,udp,147.32.84.229,13363.0,<->,114.36.211.153,34259.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:09:29.524562,0.000303,udp,147.32.84.170,58278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:09:36.903482,60.952049,tcp,147.32.84.165,2893.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:09:49.523480,0.000352,udp,147.32.84.170,58351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:09:58.381300,0.16966,tcp,147.32.86.20,1457.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,78,71270,1811,69459,913.7179487179487,0.025410411112670128,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:09:59.525189,0.000466,udp,147.32.84.170,51194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:10:06.560040,0.000299,udp,175.139.158.105,57910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:10:13.198348,0.00178,udp,75.43.196.76,47679.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:10:15.171392,0.211523,tcp,147.32.84.170,59177.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:10:16.287110,0.000363,udp,125.60.240.199,10108.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:10:29.524569,0.000273,udp,147.32.84.170,45466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:10:37.541231,60.965645,tcp,147.32.84.165,2894.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:10:39.523659,0.019966,udp,147.32.84.170,37568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:10:41.154628,0.000345,udp,147.32.84.59,49782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:10:41.930863,1851.419312,tcp,147.32.85.89,47245.0,->,195.113.232.90,80.0,FSPA_FSRPA,0.0,0.0,36,9938,1333,8605,276.05555555555554,0.13413161601931978,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:10:45.172102,0.235312,tcp,147.32.84.170,59181.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:10:46.177307,0.000259,udp,147.32.84.59,48753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:10:57.678768,0.000189,udp,147.32.84.171,60677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,71,137,104.0,0.34134615384615385,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:10:59.525653,0.017688,tcp,147.32.84.170,48474.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:11:01.464696,0.000517,udp,213.195.203.130,18634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,581,75,506,290.5,0.12908777969018934,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:11:06.772478,0.000541,udp,202.173.249.36,48974.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,701,81,620,350.5,0.11554921540656206,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:11:08.003432,0.000247,udp,147.32.85.25,36779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:11:16.169917,0.000374,udp,147.32.84.170,38263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:11:16.170910,0.000376,udp,147.32.84.170,37116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:11:27.889033,0.000301,udp,111.240.49.25,43519.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:11:29.524597,0.00027,udp,147.32.84.170,48192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:11:33.489546,1.183023,udp,126.12.203.188,51415.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,682,152,530,170.5,0.22287390029325513,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:11:34.429327,0.0,icmp,147.32.84.25,771.0,->,221.12.54.35,448.0,URP,0.0,,1,120,120,0,120.0,1.0,6,1,flow=Background,Background,-1 2011-08-17 06:11:35.042455,0.000264,udp,147.32.84.138,60166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:11:38.187096,60.951744,tcp,147.32.84.165,2895.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:11:47.174996,0.217923,tcp,147.32.84.170,59189.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:11:50.514446,0.99627,tcp,147.32.86.20,1556.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,94,93559,1646,91913,995.3085106382979,0.01759317649825244,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:11:58.852731,0.000177,udp,147.32.84.138,39333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:11:58.884708,0.000175,udp,147.32.84.138,48778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:11:59.523755,0.00032,udp,147.32.84.170,44029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:06.292850,0.000235,udp,147.32.85.34,59297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:12:09.524678,0.000476,udp,147.32.84.170,43127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:09.525887,0.019801,tcp,147.32.84.170,60287.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:15.700172,0.000488,udp,147.32.86.20,50043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:12:18.171610,0.000214,udp,147.32.84.170,45093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:19.523714,0.000302,udp,147.32.84.170,33168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:20.004266,221.116867,udp,31.47.133.62,40923.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,3086,2964,122,617.2,0.9604666234607907,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:12:20.406616,9.724498,tcp,147.32.86.89,1894.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,15,6709,1115,5594,447.26666666666665,0.1661946638843345,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:12:22.744959,0.001497,udp,84.228.24.90,27915.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:12:29.524549,0.000296,udp,147.32.84.170,59903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:34.895852,0.000217,udp,147.32.87.33,59885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:12:38.824545,60.952019,tcp,147.32.84.165,2896.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:12:40.391117,26.536816,tcp,66.87.21.99,44231.0,->,147.32.84.229,443.0,FSRPA_FSPA,0.0,0.0,18,1752,819,933,97.33333333333333,0.4674657534246575,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:12:46.954299,9.05792,tcp,46.247.179.185,51873.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:12:49.170542,0.000215,udp,147.32.84.170,47981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:49.523738,0.000332,udp,147.32.84.170,41196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:12:52.126140,1466.364258,udp,78.132.251.237,23285.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2914,2553,361,242.83333333333334,0.8761153054221003,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:12:54.092851,0.000443,udp,66.30.151.222,53505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:12:59.399025,33.669205,tcp,65.49.11.19,80.0,->,147.32.84.117,17254.0,SA_R,0.0,0.0,4,240,120,120,60.0,0.5,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:12:59.525717,0.018095,tcp,147.32.84.170,33917.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:13:03.025390,0.000408,udp,147.32.84.59,46403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:07.009394,0.000253,udp,147.32.84.138,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:07.023708,0.000233,udp,147.32.84.138,46731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:08.035988,0.000125,udp,147.32.84.59,43644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:09.524729,0.000371,udp,147.32.84.170,55664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:13:09.525858,0.017762,tcp,147.32.84.170,33827.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:13:11.843119,1.7e-05,icmp,147.32.86.96,,<-,147.32.87.52,59673.0,ECR,,0.0,2,196,0,196,98.0,0.0,6,0,flow=Background,Background,-1 2011-08-17 06:13:13.990359,16.090139,tcp,66.249.72.182,40467.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,50,30852,2641,28211,617.04,0.0856022300012965,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:13:14.051049,0.239528,tcp,147.32.84.170,52733.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:13:17.031125,0.000246,udp,147.32.84.138,57012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:17.930029,0.001571,udp,108.116.182.65,4452.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:21.347860,31.243385,udp,124.43.239.45,16590.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1070,950,120,267.5,0.8878504672897196,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:28.953867,0.000521,udp,216.36.156.235,6473.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,76,477,276.5,0.13743218806509946,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:29.700678,0.201439,udp,68.3.208.222,62979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3083,120,2963,513.8333333333334,0.03892312682452157,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:34.413155,0.000258,udp,147.32.84.138,43173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:36.908680,0.000268,udp,112.205.234.208,51487.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:39.462288,60.953342,tcp,147.32.84.165,2897.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:13:43.210762,0.007795,udp,217.234.158.117,34607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:13:44.837963,0.000195,udp,147.32.84.138,43114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:13:48.127762,0.000268,udp,147.32.85.25,57102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:14:09.525969,0.018112,tcp,147.32.84.170,33841.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:14:19.525565,0.017902,tcp,147.32.84.170,33842.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:14:22.456988,0.3085,tcp,147.32.86.20,1692.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,33,26499,858,25641,803.0,0.0323785803237858,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:14:28.395043,0.334388,udp,147.32.84.229,13363.0,<->,114.44.184.235,22099.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:14:29.523728,0.000331,udp,147.32.84.170,38445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:14:40.101098,60.950455,tcp,147.32.84.165,2898.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:14:40.786588,0.000229,udp,147.32.84.138,37161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:14:47.107056,0.622055,tcp,147.32.84.171,37448.0,->,83.82.139.7,37774.0,FSPA_FSPA,0.0,0.0,13,1697,780,917,130.53846153846155,0.45963464938126103,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:14:49.523666,0.000363,udp,147.32.84.170,60053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:14:51.173207,0.247692,tcp,147.32.84.170,45057.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:14:51.801113,0.00138,udp,117.2.98.106,10360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:14:59.525776,0.017717,tcp,147.32.84.170,33848.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:01.457241,0.231556,tcp,147.32.86.20,1728.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,45,37216,1151,36065,827.0222222222222,0.03092755803955288,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:15:08.586794,0.000313,udp,147.32.84.138,43100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:08.588096,0.000199,udp,147.32.84.138,50712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:08.616378,0.000222,udp,147.32.84.138,36814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:08.973727,0.000348,udp,147.32.86.92,50973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:09.525594,0.018088,tcp,147.32.84.170,53906.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:17.651280,1.031481,tcp,147.32.3.51,4194.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:15:19.526723,0.018102,tcp,147.32.84.170,50144.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:26.030365,0.000228,udp,147.32.85.25,51816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:29.524037,0.00035,udp,147.32.84.170,33155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:38.688875,0.000224,udp,147.32.84.138,51259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:15:39.545806,0.018474,tcp,147.32.84.170,53910.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:40.737280,60.967266,tcp,147.32.84.165,2899.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:15:45.782064,0.36749,tcp,147.32.84.164,40530.0,->,209.197.4.34,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,6,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 06:15:49.523960,0.000315,udp,147.32.84.170,46740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:15:55.467648,0.023593,tcp,90.183.39.17,39177.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,16,10206,982,9224,637.875,0.09621791103272585,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:15:59.527922,0.018718,tcp,147.32.84.170,50150.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:02.319639,0.00054,udp,219.90.87.2,56183.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,602,77,525,301.0,0.12790697674418605,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:16:10.567992,0.000228,udp,147.32.84.138,45416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:16:19.525727,0.01839,tcp,147.32.84.170,38199.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:21.140722,0.000288,udp,147.32.84.138,46056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:16:22.817303,0.0,tcp,60.248.150.212,80.0,->,147.32.86.109,24604.0,SA_,0.0,,1,60,60,0,60.0,1.0,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:16:24.177682,0.000301,udp,147.32.84.170,53622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:28.147299,1.012771,udp,147.32.87.48,3331.0,->,147.32.87.102,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,6,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:16:39.247438,1.360563,tcp,199.87.232.111,2435.0,->,147.32.85.100,3128.0,S_RA,0.0,0.0,6,378,198,180,63.0,0.5238095238095238,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:16:40.597584,0.000401,udp,147.32.85.125,51562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:16:41.384666,60.967625,tcp,147.32.84.165,2900.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:16:42.260221,16.910971,tcp,147.32.86.89,1052.0,->,147.32.80.7,80.0,FSPA_FSPA,0.0,0.0,10,1576,514,1062,157.6,0.32614213197969544,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:16:49.525155,0.000373,udp,147.32.84.170,55827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:49.526194,0.018326,tcp,147.32.84.170,33862.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:53.585577,0.205203,tcp,147.32.86.20,1829.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:16:55.172849,0.215718,tcp,147.32.84.170,45073.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:16:59.524137,0.000454,udp,147.32.84.170,47425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:09.022922,420.140656,udp,78.141.179.10,34043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,283,149,134,70.75,0.5265017667844523,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:17:15.786442,0.000302,udp,41.190.136.34,59299.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:17:27.042608,0.00045,udp,88.135.148.242,10973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,655,73,582,327.5,0.11145038167938931,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:17:29.524174,0.000293,udp,147.32.84.170,53025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:29.524974,0.000265,udp,147.32.84.170,42159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:35.569906,3578.766113,tcp,147.32.84.164,46014.0,->,68.142.83.180,27017.0,PA_PA,0.0,0.0,290,27452,17018,10434,94.66206896551724,0.6199184030307445,6,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 06:17:39.279484,0.000131,udp,147.32.85.89,46360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:17:39.525034,0.000373,udp,147.32.84.170,58968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:42.032455,60.952431,tcp,147.32.84.165,2901.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:17:43.268667,9.001779,tcp,178.73.194.100,63473.0,->,147.32.85.100,3126.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:17:50.501955,2762.264648,udp,175.144.141.69,17873.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1040,920,120,260.0,0.8846153846153846,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:17:53.402648,0.00047,udp,98.200.140.191,27306.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,314,64,250,157.0,0.20382165605095542,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:17:56.167874,0.000393,udp,147.32.84.170,36726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:56.169137,0.232017,tcp,147.32.84.170,43026.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:17:58.112990,4.103404,tcp,147.32.84.68,54202.0,->,94.236.15.26,80.0,SRPA_SPA,0.0,0.0,10,4856,637,4219,485.6,0.13117792421746294,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:18:04.307046,0.000918,udp,124.106.154.6,60594.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,77,477,277.0,0.13898916967509026,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:18:06.087885,0.000201,udp,147.32.85.34,63021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:18:07.304648,0.000228,udp,147.32.87.36,41751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,6,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 06:18:07.877047,0.001902,udp,98.234.107.111,35630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:18:09.567572,720.371765,udp,174.111.84.154,30726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1371,526,845,97.92857142857143,0.3836615609044493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:18:09.961629,0.0,udp,202.103.52.143,5060.0,->,147.32.87.197,5060.0,INT,0.0,,1,452,452,0,452.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:18:13.532798,0.279387,tcp,147.32.84.170,36585.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:13.804497,0.291625,tcp,147.32.84.170,36587.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:19.130636,2470.159424,udp,76.94.39.201,51761.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:18:19.524131,0.000473,udp,147.32.84.170,58246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:23.781909,0.00023,udp,147.32.84.138,38694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:18:27.087760,8.2e-05,udp,147.32.84.138,34793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:18:27.169833,0.000216,udp,147.32.84.170,37841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:27.171905,0.217244,tcp,147.32.84.170,43036.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:29.528132,0.017837,tcp,147.32.84.170,55544.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:34.593374,0.000645,udp,210.13.67.246,21426.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,951,78,873,475.5,0.08201892744479496,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:18:42.670610,60.966312,tcp,147.32.84.165,2902.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:18:47.894307,1.4e-05,udp,147.32.87.48,3352.0,->,147.32.86.243,161.0,INT,0.0,,2,262,262,0,131.0,1.0,6,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:18:49.524223,0.000639,udp,147.32.84.170,48175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:57.170156,0.000294,udp,147.32.84.170,49123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:57.172266,0.238085,tcp,147.32.84.170,43040.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:18:58.636327,0.000237,udp,147.32.84.59,44893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,85,194,139.5,0.3046594982078853,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:18:59.526256,0.018289,tcp,147.32.84.170,55975.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:03.133956,0.0,tcp,93.187.204.166,8443.0,->,147.32.84.90,1024.0,SA_,0.0,,1,60,60,0,60.0,1.0,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:19:04.202835,0.000301,udp,147.32.84.59,40592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,85,197,141.0,0.30141843971631205,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:05.589622,0.000186,udp,147.32.85.25,45215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:09.011096,0.108785,tcp,88.131.106.22,32344.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1590,782,808,159.0,0.4918238993710692,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:19:09.524243,0.000332,udp,147.32.84.170,36490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:09.526120,0.017983,tcp,147.32.84.170,51232.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:19.524284,0.00037,udp,147.32.84.170,47539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:24.792091,0.000226,udp,147.32.84.59,46712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,85,198,141.5,0.3003533568904594,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:28.171109,0.000137,udp,147.32.84.170,36785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:28.171815,0.000299,udp,147.32.84.170,60279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:28.873322,0.020297,udp,147.32.84.170,54096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:29.525273,0.000501,udp,147.32.84.170,39594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:39.238611,1297.61731,udp,78.141.179.8,34023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,867,681,186,144.5,0.7854671280276817,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:19:39.525227,0.000388,udp,147.32.84.170,33958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:42.979849,5.21029,tcp,147.32.86.89,1228.0,->,77.75.72.22,80.0,FSPA_FSPA,0.0,0.0,49,39301,1606,37695,802.0612244897959,0.04086410015012341,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:19:43.317186,60.967438,tcp,147.32.84.165,2903.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:19:49.093863,0.000277,udp,147.32.86.20,58999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:49.524289,0.000388,udp,147.32.84.170,40165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:49.526398,0.018408,tcp,147.32.84.170,51239.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:54.227297,21.031654,tcp,147.32.84.59,49244.0,->,90.183.38.26,80.0,SRPA_SPA,0.0,0.0,13,4313,1300,3013,331.7692307692308,0.3014143287734755,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:19:56.510868,0.24736,udp,147.32.84.59,35164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:56.760782,243.231628,tcp,147.32.84.59,43027.0,->,74.125.232.201,443.0,SRPA_FSPA,0.0,0.0,31,4933,1539,3394,159.1290322580645,0.31198053922562335,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:19:58.171106,0.000324,udp,147.32.84.170,54573.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:58.172340,0.210484,tcp,147.32.84.170,43050.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:19:59.068525,0.001698,udp,147.32.84.59,57980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:19:59.526233,0.018131,tcp,147.32.84.170,51241.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:03.050072,0.000183,udp,147.32.84.138,58761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:06.885118,0.000298,udp,147.32.85.34,59418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,85,195,140.0,0.30357142857142855,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:10.164983,0.000151,udp,147.32.84.138,53314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:13.396271,3040.975342,udp,79.187.107.154,29434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:20:19.526261,0.018395,tcp,147.32.84.170,40377.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:28.172050,0.00017,udp,147.32.84.170,51807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:28.173231,0.231648,tcp,147.32.84.170,43054.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:35.943672,5.798042,tcp,66.249.72.20,36813.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,10,1293,750,543,129.3,0.580046403712297,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:20:39.026999,3595.673584,udp,147.32.84.229,13363.0,<->,46.118.103.243,59004.0,CON,0.0,0.0,6,3071,134,2937,511.8333333333333,0.04363399544122436,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:20:39.524375,0.108853,udp,147.32.84.170,44653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:39.633850,0.000414,udp,147.32.84.170,55150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:41.130442,0.000213,udp,147.32.84.138,53246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:41.140556,0.000229,udp,147.32.84.138,34023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:43.935832,738.24469,udp,147.32.84.229,13363.0,->,85.196.230.121,53673.0,INT,0.0,,9,3279,3279,0,364.3333333333333,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:20:43.964566,60.967197,tcp,147.32.84.165,2904.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:20:44.656627,0.000224,udp,147.32.84.138,35501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:47.549218,0.000162,udp,147.32.85.25,44419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:50.053441,0.022813,udp,147.32.84.59,35765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,391,87,304,195.5,0.22250639386189258,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:20:51.281601,3064.526855,udp,117.4.141.111,21903.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:20:59.171886,0.000447,udp,147.32.84.170,42139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:59.173141,0.213051,tcp,147.32.84.170,43058.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:20:59.526337,0.017812,tcp,147.32.84.170,51249.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:00.380732,0.000355,icmp,81.218.229.68,8.0,<->,147.32.85.75,17630.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,6,0,flow=Background,Background,-1 2011-08-17 06:21:08.494949,2.202266,udp,147.32.84.229,13363.0,<->,58.172.57.235,64311.0,CON,0.0,0.0,4,282,161,121,70.5,0.5709219858156028,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:21:09.525382,0.000381,udp,147.32.84.170,47658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:09.526464,0.018101,tcp,147.32.84.170,51250.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:13.241009,118.549728,icmp,74.104.102.191,259.0,->,147.32.84.229,19048.0,URH,0.0,,6,1575,1575,0,262.5,1.0,6,0,flow=Background,Background,-1 2011-08-17 06:21:15.532684,0.000541,icmp,147.32.87.249,,<-,147.32.87.11,2.0,RED,,0.0,2,148,0,148,74.0,0.0,6,1,flow=To-Background-MatLab-Server,Background,-1 2011-08-17 06:21:18.799483,62.177361,tcp,147.32.84.59,49537.0,->,90.182.101.157,80.0,SRPA_SPA,0.0,0.0,7,1186,858,328,169.42857142857142,0.7234401349072512,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:21:29.209822,0.000292,udp,147.32.84.170,37269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:29.526215,0.018711,tcp,147.32.84.170,37729.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:32.221243,0.000379,udp,147.32.84.138,46240.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:21:39.525336,0.000238,udp,147.32.84.170,49121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:44.612221,60.952885,tcp,147.32.84.165,2905.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:21:50.146045,0.017724,tcp,147.32.84.59,49642.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2158,1259,899,239.77777777777777,0.5834105653382762,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:21:52.154197,0.000412,icmp,147.32.86.96,,<-,147.32.87.38,34335.0,RED,,0.0,2,196,0,196,98.0,0.0,6,0,flow=Background,Background,-1 2011-08-17 06:21:53.335339,8.99853,tcp,147.32.84.171,45213.0,->,180.194.151.47,51647.0,S_,0.0,,3,222,222,0,74.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:21:59.321031,257.889221,tcp,147.32.84.170,36621.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,44,11827,9175,2652,268.79545454545456,0.775767312082523,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:21:59.525388,0.000298,udp,147.32.84.170,46066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:02.059852,0.000287,udp,147.32.84.138,43385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:22:04.004692,0.205333,tcp,147.32.86.20,2102.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:22:06.443183,0.000311,udp,147.32.86.20,56212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:22:09.524387,0.000483,udp,147.32.84.170,48969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:10.355101,3.852096,tcp,66.249.66.211,37088.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,22,9249,1437,7812,420.40909090909093,0.15536814790788192,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:22:15.695150,3170.025391,udp,147.32.84.229,13363.0,<->,149.5.45.4,43019.0,CON,0.0,0.0,14,1846,776,1070,131.85714285714286,0.42036836403033584,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:22:17.147545,0.066908,tcp,217.212.224.181,41088.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1196,721,475,119.6,0.6028428093645485,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:22:19.525554,0.000301,udp,147.32.84.170,40600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:20.888911,0.000495,udp,206.108.210.17,60772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,609,75,534,304.5,0.12315270935960591,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:22:25.040690,0.000412,udp,147.32.85.34,56725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,541,79,462,270.5,0.14602587800369685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:22:29.524431,0.0004,udp,147.32.84.170,52617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:36.721169,9.751887,tcp,147.32.86.89,1300.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,19,7482,3163,4319,393.7894736842105,0.4227479283614007,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:22:39.526126,0.01819,tcp,147.32.84.170,36668.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:45.250843,60.950363,tcp,147.32.84.165,2906.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:22:46.319467,0.000255,udp,147.32.85.25,50037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:22:49.524585,0.000307,udp,147.32.84.170,56044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:49.526431,0.01785,tcp,147.32.84.170,59313.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:51.416383,0.00029,udp,147.32.85.25,38069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:22:52.877641,649.515442,udp,189.181.35.21,49578.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,716,530,186,119.33333333333333,0.7402234636871509,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:22:59.524413,0.000447,udp,147.32.84.170,43856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:59.525433,0.000385,udp,147.32.84.170,60962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:22:59.526602,0.01788,tcp,147.32.84.170,36574.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:01.172252,0.000299,udp,147.32.84.170,54159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:13.208095,0.247738,tcp,147.32.84.170,43319.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:13.507472,0.289025,tcp,147.32.84.170,55773.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:13.703156,0.275649,tcp,147.32.84.170,43322.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:13.765255,95.090775,udp,82.156.130.222,51440.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,403,261,142,80.6,0.6476426799007444,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:13.788830,0.263979,tcp,147.32.84.170,55775.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:19.525588,0.000306,udp,147.32.84.170,47528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:26.083990,0.000349,udp,202.84.121.13,28964.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:29.524639,0.000372,udp,147.32.84.170,46632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:31.171487,0.000255,udp,147.32.84.170,41808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:31.172281,0.000398,udp,147.32.84.170,35675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:33.811911,0.001203,udp,209.6.123.154,8370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:33.826910,0.00044,udp,93.75.72.179,42287.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,573,74,499,286.5,0.12914485165794065,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:38.074076,0.000331,udp,147.32.84.2,51886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:23:40.694883,0.00048,udp,147.32.86.20,63153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:23:45.887048,60.952133,tcp,147.32.84.165,2907.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:23:50.825945,0.000386,udp,118.161.131.6,23687.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:53.054789,1920.94751,udp,109.172.66.106,2620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,933,138,795,233.25,0.14790996784565916,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:53.993446,3021.644287,udp,86.74.121.97,7620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:56.017148,0.000447,udp,165.194.22.253,38761.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:23:59.524405,0.000478,udp,147.32.84.170,35399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:23:59.695774,0.000175,udp,147.32.84.138,43437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:23:59.794787,0.000417,udp,189.119.112.19,26959.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,655,78,577,327.5,0.11908396946564885,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:24:02.169807,0.000272,udp,147.32.84.170,46375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:24:03.525847,0.000153,udp,147.32.84.138,50230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:24:18.525090,35.105724,udp,114.27.150.181,40080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:24:19.524399,0.000498,udp,147.32.84.170,54191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:24:20.076847,0.012552,tcp,147.32.84.59,49674.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2056,1157,899,228.44444444444446,0.5627431906614786,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:24:23.260156,0.000208,udp,147.32.85.25,46948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:24:27.737289,0.281402,udp,85.76.187.41,33342.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,656,535,121,164.0,0.8155487804878049,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:24:33.197720,0.226103,tcp,147.32.84.170,35449.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:24:39.076985,8.997248,tcp,147.32.84.171,45236.0,->,180.194.151.47,51647.0,S_,0.0,,3,222,222,0,74.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:24:39.525797,0.000302,udp,147.32.84.170,41284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:24:46.524758,60.952389,tcp,147.32.84.165,2908.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:24:59.524644,0.000411,udp,147.32.84.170,35534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:24:59.525553,0.000393,udp,147.32.84.170,51699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:03.166706,0.000299,udp,147.32.87.36,44834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,6,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 06:25:03.261009,0.000335,udp,147.32.85.84,53235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,78,172,125.0,0.312,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:25:04.172682,0.000202,udp,147.32.84.170,52192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:04.174804,0.221497,tcp,147.32.84.170,35453.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:05.663580,3405.410156,udp,82.2.137.60,58288.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,4582,851,3731,327.2857142857143,0.1857267568747272,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:07.635133,0.000335,udp,147.32.86.20,56176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:25:09.405102,0.000379,udp,147.32.86.92,43874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:25:09.415930,0.000348,udp,2.90.144.175,10543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,184,83,101,92.0,0.45108695652173914,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:09.525786,0.00028,udp,147.32.84.170,60523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:09.915444,0.000433,udp,183.34.94.218,24267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:10.246813,0.000384,udp,213.233.93.169,25787.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:13.173052,3148.536133,udp,147.32.84.229,13363.0,<->,149.5.45.8,43022.0,CON,0.0,0.0,76,9158,5360,3798,120.5,0.5852806289582878,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:17.467247,0.001669,udp,201.27.198.112,50200.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:19.525669,0.000315,udp,147.32.84.170,42776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:19.526746,0.018069,tcp,147.32.84.170,36599.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:22.398115,68.205948,tcp,71.89.25.250,55140.0,->,147.32.85.100,3126.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:25:29.524829,0.000376,udp,147.32.84.170,57104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:29.525888,0.000244,udp,147.32.84.170,46425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:35.173442,0.000248,udp,147.32.84.170,35900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:35.174278,0.000314,udp,147.32.84.170,42477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:36.884041,3175.155029,udp,71.87.3.222,1889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,13,2415,1611,804,185.76923076923077,0.6670807453416149,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:25:47.162595,60.966965,tcp,147.32.84.165,2909.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:25:49.524600,0.000415,udp,147.32.84.170,39176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:25:58.251124,0.99912,udp,78.128.177.198,61524.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:25:59.526803,0.018092,tcp,147.32.84.170,55830.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:02.718484,9.005566,tcp,111.8.35.143,56784.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:26:04.777977,0.000255,udp,147.32.84.138,37745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:05.650245,0.018174,tcp,147.32.86.96,44946.0,->,147.32.87.51,12489.0,_FSPA,,0.0,8,548,0,548,68.5,0.0,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:26:05.860877,0.000322,udp,147.32.85.89,54592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,78,184,131.0,0.29770992366412213,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:06.397982,0.000238,udp,147.32.85.34,59399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,85,194,139.5,0.3046594982078853,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:09.524856,0.000396,udp,147.32.84.170,60057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:09.525836,0.00035,udp,147.32.84.170,50512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:15.616535,0.00036,udp,147.32.85.25,35779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:18.402560,0.000326,udp,82.144.199.179,10080.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:18.694233,10.99215,udp,178.140.220.195,62434.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1519,721,798,253.16666666666666,0.47465437788018433,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:19.525625,0.000671,udp,147.32.84.170,43756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:22.124161,0.000363,udp,83.208.146.84,16948.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:27.636713,4.468586,tcp,91.212.149.249,2795.0,->,147.32.86.190,3389.0,FSPA_SRPA,0.0,0.0,81,9249,3843,5406,114.18518518518519,0.4155043788517678,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:26:31.328125,0.000192,udp,147.32.85.25,45218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:34.632539,0.0,udp,202.109.115.169,5060.0,->,147.32.86.180,5060.0,INT,0.0,,1,452,452,0,452.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:26:37.169725,0.000476,udp,147.32.84.170,52318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:37.172053,0.225644,tcp,147.32.84.170,35465.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:39.524575,0.000399,udp,147.32.84.170,42862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:43.456326,0.000211,udp,147.32.84.138,52601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:43.769717,0.000459,udp,94.98.217.135,11714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:44.666218,13.032419,tcp,147.32.86.89,1441.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,11,1868,989,879,169.8181818181818,0.5294432548179872,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:26:47.810002,60.9519,tcp,147.32.84.165,2910.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:26:49.524889,0.000337,udp,147.32.84.170,53158.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:26:53.383665,3042.240723,udp,190.205.120.83,37916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:55.674152,2678.657715,rtp,123.217.225.167,60605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1203,615,588,66.83333333333333,0.5112219451371571,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:26:57.467124,0.000214,udp,147.32.84.138,41551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:57.529838,0.000298,udp,147.32.84.59,52062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:26:59.524889,0.000446,udp,147.32.84.170,57349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:05.504814,0.020846,udp,147.32.85.42,59452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:27:09.526954,0.018117,tcp,147.32.84.170,57502.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:17.043101,0.000341,udp,147.32.84.170,35111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:17.044889,240.044708,tcp,147.32.84.170,56527.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:17.045120,250.044754,tcp,147.32.84.170,56528.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:17.048420,240.041458,tcp,147.32.84.170,56530.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:19.526911,0.0004,udp,147.32.84.170,58543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:25.437169,3140.02002,udp,147.32.84.229,13363.0,<->,31.211.134.37,4193.0,CON,0.0,0.0,32,3890,1394,2496,121.5625,0.3583547557840617,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:27:31.348426,0.000233,udp,147.32.84.138,47207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:27:39.172195,0.000309,udp,147.32.84.170,37733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:39.524871,0.000415,udp,147.32.84.170,33120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:27:40.644139,20.067738,tcp,95.168.183.186,50174.0,->,147.32.87.44,80.0,FSPA_FSA,0.0,0.0,8,557,285,272,69.625,0.5116696588868941,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:27:40.944743,3003.549561,udp,72.130.196.192,40023.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:27:41.377155,0.00022,udp,147.32.84.138,41839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:27:48.447400,60.966644,tcp,147.32.84.165,2911.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:27:50.139555,0.000311,udp,124.6.181.221,23013.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:28:03.171942,0.000246,udp,147.32.84.59,60267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,86,196,141.0,0.3049645390070922,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:28:06.327228,0.000252,udp,147.32.85.34,58411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,85,198,141.5,0.3003533568904594,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:28:06.355044,0.000328,udp,147.32.85.34,53623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,86,196,141.0,0.3049645390070922,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:28:14.127175,0.3189,tcp,147.32.84.170,53703.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:16.806425,3396.396484,udp,109.186.21.153,49983.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2223,1922,301,222.3,0.8645973909131804,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:28:19.525927,0.000278,udp,147.32.84.170,53392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:19.527001,0.017589,tcp,147.32.84.170,32944.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:23.288008,0.000219,udp,147.32.84.138,38515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:28:28.826707,0.000224,udp,147.32.84.138,44857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:28:32.735718,0.000323,udp,39.211.86.113,35854.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:28:35.008014,0.042322,tcp,147.32.84.59,49836.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2142,1243,899,238.0,0.5802987861811392,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:28:39.527053,0.018252,tcp,147.32.84.170,32946.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:41.145360,0.043436,tcp,147.32.84.59,49858.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2059,1160,899,228.77777777777777,0.5633802816901409,6,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 06:28:41.176465,0.214912,tcp,147.32.84.170,50944.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:49.094409,60.966984,tcp,147.32.84.165,2912.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:28:49.525986,0.000269,udp,147.32.84.170,50868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:28:51.142671,0.000336,udp,217.21.59.61,41810.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:28:59.524832,0.000444,udp,147.32.84.170,59697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:00.461644,2524.739258,udp,66.190.85.131,12248.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,3084,2962,122,616.8,0.9604409857328146,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:09.194750,7.990746,udp,147.32.87.48,3458.0,->,147.32.86.252,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,6,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:29:11.175120,0.21733,tcp,147.32.84.170,50948.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:15.038326,3109.531738,udp,147.32.84.229,13363.0,<->,78.141.181.220,34054.0,CON,0.0,0.0,12,1867,1075,792,155.58333333333334,0.5757900374933048,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:17.992115,0.000204,udp,147.32.84.138,60568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:29:19.570196,14.526575,udp,112.226.17.189,50904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,531,149,382,132.75,0.2806026365348399,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:23.930080,0.335809,udp,109.191.76.29,29831.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:29.525959,0.000289,udp,147.32.84.170,57323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:38.048813,0.000172,udp,147.32.84.138,33813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:29:39.524950,0.000259,udp,147.32.84.170,34714.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:39.525778,0.000331,udp,147.32.84.170,60057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:40.647677,0.205153,tcp,147.32.86.20,2500.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:29:43.083453,0.000343,udp,147.32.86.20,58996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:29:44.414582,1914.611938,udp,24.37.123.106,31831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1123,369,754,112.3,0.3285841495992876,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:48.226495,0.000272,udp,147.32.84.138,53992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:29:49.525107,0.000367,udp,147.32.84.170,54171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:49.741696,60.958645,tcp,147.32.84.165,2913.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:29:50.418164,0.000326,udp,71.58.3.221,57422.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:29:59.525214,0.000247,udp,147.32.84.170,57844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:29:59.854305,0.000463,udp,59.86.102.149,35224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,604,76,528,302.0,0.12582781456953643,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:30:01.567647,0.000243,udp,147.32.87.34,33445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,88,140,114.0,0.38596491228070173,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:30:01.625950,0.000318,udp,147.32.87.36,45797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,86,176,131.0,0.3282442748091603,6,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 06:30:07.460313,0.205143,tcp,147.32.86.20,2524.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:30:09.384082,0.000276,udp,147.32.85.89,39877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:30:09.525081,0.000355,udp,147.32.84.170,37136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:30:10.712003,0.206436,tcp,147.32.86.20,2526.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:30:19.527239,0.017611,tcp,147.32.84.170,45097.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:30:20.269063,0.000226,udp,147.32.85.34,54232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,302,82,220,151.0,0.271523178807947,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:30:42.171524,0.000285,udp,147.32.84.170,47624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:30:45.142443,3092.621094,udp,114.158.139.219,22313.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,399,219,180,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:30:48.089652,0.170061,tcp,147.32.86.20,2559.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:30:49.526024,0.000407,udp,147.32.84.170,56079.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:30:50.039079,3314.87085,udp,24.90.226.147,3672.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,921,708,213,153.5,0.7687296416938111,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:30:50.380773,60.966427,tcp,147.32.84.165,2914.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:30:59.526067,0.000315,udp,147.32.84.170,50445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:30:59.527158,0.017881,tcp,147.32.84.170,53057.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:09.524949,0.000395,udp,147.32.84.170,36233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:09.525926,0.000453,udp,147.32.84.170,54336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:16.228808,0.000452,udp,76.17.253.228,55006.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:18.092654,0.000426,udp,86.14.157.162,50171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,627,81,546,313.5,0.1291866028708134,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:19.526183,0.000309,udp,147.32.84.170,39715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:19.527258,0.017944,tcp,147.32.84.170,45105.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:24.414512,0.000306,udp,188.143.130.24,31733.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:25.575550,0.00048,udp,118.70.125.49,57469.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:29.756888,0.077844,udp,147.32.84.229,13363.0,<->,62.64.69.242,48639.0,CON,0.0,0.0,2,168,64,104,84.0,0.38095238095238093,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:39.397285,0.000247,udp,147.32.85.89,45163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:31:39.527147,0.018128,tcp,147.32.84.170,41308.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:43.175133,0.000491,udp,147.32.84.170,33047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:45.738483,0.000635,udp,95.68.15.14,55820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,949,77,872,474.5,0.08113804004214963,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:31:49.526206,0.000409,udp,147.32.84.170,45968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:31:50.712248,0.000275,udp,147.32.84.138,54295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:31:51.027550,60.952648,tcp,147.32.84.165,2915.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:32:03.520509,0.000222,udp,147.32.85.25,45933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:05.972100,0.000418,udp,147.32.85.34,52789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:09.526176,0.000476,udp,147.32.84.170,43429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:32:14.174592,0.00032,udp,147.32.84.170,47752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:32:19.527362,0.017935,tcp,147.32.84.170,41892.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:32:23.331445,0.000572,udp,66.191.79.129,46496.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,76,471,273.5,0.13893967093235832,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:32:29.373209,8.7e-05,udp,147.32.84.138,52935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:43.223935,0.00024,udp,147.32.84.138,49810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:44.406574,0.000297,udp,147.32.85.89,47430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:46.858859,0.105827,udp,147.32.84.229,13363.0,<->,79.164.249.141,26509.0,CON,0.0,0.0,4,667,546,121,166.75,0.8185907046476761,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:32:47.608277,6.003308,udp,147.32.84.229,13363.0,->,190.55.48.55,45593.0,INT,0.0,,3,1386,1386,0,462.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:32:49.470912,8.99977,tcp,147.32.84.179,53461.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,6,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:32:49.526355,0.000193,udp,147.32.84.170,35001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:32:51.628554,0.028588,udp,147.32.85.69,43340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,119,153,136.0,0.4375,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:32:51.664801,60.977219,tcp,147.32.84.165,2916.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:32:52.516043,0.0016,udp,85.65.123.229,29999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,577,517,60,288.5,0.8960138648180243,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:32:56.761867,0.000432,udp,178.23.225.173,52827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:32:59.668692,0.000372,udp,147.32.85.25,49667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:33:03.693720,2636.379395,udp,201.19.106.76,7069.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1071,934,137,267.75,0.8720821661998133,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:33:09.862473,0.000187,udp,147.32.85.25,56579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:33:13.792240,0.326235,tcp,147.32.84.170,58835.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:16.174722,0.000258,udp,147.32.84.170,56407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:19.526425,0.000471,udp,147.32.84.170,55190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:29.527142,0.017998,tcp,147.32.84.170,42064.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:43.738739,0.000318,udp,147.32.84.59,35771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:33:47.175507,0.215772,tcp,147.32.84.170,46234.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:49.527363,0.018092,tcp,147.32.84.170,43100.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:33:52.322305,60.952988,tcp,147.32.84.165,2917.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:34:12.159606,3116.697998,udp,24.23.208.93,13398.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:34:14.380433,16.547371,tcp,200.81.38.97,47070.0,->,147.32.84.229,80.0,FSA_FSA,0.0,0.0,6,416,206,210,69.33333333333333,0.4951923076923077,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:34:15.969511,3373.233887,udp,147.32.84.13,52766.0,<->,82.208.56.89,123.0,CON,0.0,0.0,92,8280,4140,4140,90.0,0.5,6,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 06:34:18.173491,0.240587,tcp,147.32.84.170,46238.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:19.525204,0.000325,udp,147.32.84.170,48565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:31.860217,3582.439697,tcp,147.32.84.170,51703.0,->,74.125.232.214,443.0,PA_PA,0.0,0.0,583,175371,108848,66523,300.80789022298455,0.620672745208729,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:34.151649,0.003534,udp,208.88.186.6,34053.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:34:38.365852,0.000468,udp,125.166.147.57,61417.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,712,77,635,356.0,0.10814606741573034,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:34:38.480773,29.59498,tcp,38.101.148.126,58792.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,59,51853,1762,50091,878.8644067796611,0.03398067614217114,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:34:39.528035,0.000301,udp,147.32.84.170,51027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:39.529112,0.017615,tcp,147.32.84.170,37595.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:48.514174,0.003384,udp,184.160.193.24,39075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:34:49.175185,0.000271,udp,147.32.84.170,39370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:34:51.036306,0.20664,tcp,147.32.86.20,2783.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:34:52.960695,60.951252,tcp,147.32.84.165,2918.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:34:54.421186,0.00028,udp,147.32.84.138,50263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:34:54.425545,0.000176,udp,147.32.85.89,43038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:34:59.526527,0.000331,udp,147.32.84.170,58607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:01.191832,0.000184,udp,147.32.84.222,44601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:03.689247,0.000222,udp,147.32.85.25,35022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:04.021480,0.000453,udp,92.90.16.46,12698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:35:09.527473,0.018072,tcp,147.32.84.170,60664.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:10.537521,0.000504,udp,147.32.86.20,50261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:13.699373,0.0,udp,202.103.52.147,5060.0,->,147.32.87.150,5060.0,INT,0.0,,1,452,452,0,452.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:35:19.527969,0.000378,udp,147.32.84.170,49285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:19.529103,0.017744,tcp,147.32.84.170,40988.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:29.527247,0.000339,udp,147.32.84.170,54168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:36.063984,191.886887,tcp,147.32.84.25,34572.0,->,74.125.232.214,80.0,FSPA_FSPA,0.0,0.0,18,6811,4398,2413,378.3888888888889,0.6457201585670239,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:35:39.535792,0.000322,udp,147.32.84.170,59992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:40.600034,0.000584,udp,147.32.86.20,56258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:40.600701,0.169877,tcp,147.32.86.20,2828.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,78,71270,1751,69519,913.7179487179487,0.0245685421636032,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:35:44.322661,0.000177,udp,147.32.85.25,37976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:46.179745,0.000548,udp,96.254.150.152,62087.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,569,77,492,284.5,0.13532513181019332,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:35:46.882962,0.0,tcp,147.32.84.165,2919.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:46.888787,0.0,tcp,147.32.84.165,2921.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:46.894551,0.0,tcp,147.32.84.165,2922.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.067222,0.0,tcp,147.32.84.165,2923.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.077113,0.0,tcp,147.32.84.165,2925.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.087140,0.0,tcp,147.32.84.165,2926.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.267868,0.0,tcp,147.32.84.165,2927.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.879379,0.0,tcp,147.32.84.165,2930.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:47.942998,0.000218,udp,147.32.84.138,34280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:35:47.978939,0.0,tcp,147.32.84.165,2932.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:48.178665,0.0,tcp,147.32.84.165,2929.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:35:49.526187,0.000461,udp,147.32.84.170,35245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:35:53.713311,0.91977,tcp,90.181.84.58,3500.0,->,147.32.84.2,995.0,S_RA,0.0,0.0,6,366,186,180,61.0,0.5081967213114754,6,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:35:59.527846,0.017579,tcp,147.32.84.170,60671.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:00.148426,9.021308,tcp,147.32.84.215,47874.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:36:00.596914,0.0,tcp,147.32.84.165,3158.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:00.596929,60.961277,tcp,147.32.84.165,3055.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:36:00.596933,0.0,tcp,147.32.84.165,3156.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:00.596983,0.0,tcp,147.32.84.165,3157.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:00.911711,0.0,tcp,147.32.84.165,3163.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:01.197192,0.0,tcp,147.32.84.165,3168.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:01.197431,0.0,tcp,147.32.84.165,3169.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:01.197445,0.0,tcp,147.32.84.165,3170.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:06.724714,0.000321,udp,147.32.85.34,63868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:12.613847,0.0,tcp,147.32.84.165,3397.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:12.614080,0.0,tcp,147.32.84.165,3398.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:12.614129,0.0,tcp,147.32.84.165,3399.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:12.614183,0.0,tcp,147.32.84.165,3401.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:12.614239,0.0,tcp,147.32.84.165,3403.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:13.215261,0.0,tcp,147.32.84.165,3411.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:13.215276,0.0,tcp,147.32.84.165,3409.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:13.215495,0.0,tcp,147.32.84.165,3410.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:18.817289,0.000261,udp,147.32.84.138,36643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:19.525609,0.000398,udp,147.32.84.170,49444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:19.527714,0.01785,tcp,147.32.84.170,40996.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:21.168669,0.000353,udp,147.32.84.170,48115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:22.657564,0.028752,udp,147.32.84.59,49379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,109,143,126.0,0.43253968253968256,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:24.058017,0.00037,udp,147.32.84.138,49354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:24.631284,0.0,tcp,147.32.84.165,3639.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:24.631302,0.0,tcp,147.32.84.165,3637.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:24.631565,0.0,tcp,147.32.84.165,3638.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:24.631578,0.0,tcp,147.32.84.165,3644.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:25.232140,0.0,tcp,147.32.84.165,3649.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:25.232285,0.0,tcp,147.32.84.165,3650.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:25.232447,0.0,tcp,147.32.84.165,3651.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:26.912903,0.205783,tcp,147.32.86.20,2868.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:36:34.059227,0.000271,udp,147.32.84.138,48531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:34.088946,0.000239,udp,147.32.84.138,35016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:34.311603,0.169334,udp,147.32.84.59,59709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,87,143,115.0,0.3782608695652174,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:36.648526,0.0,tcp,147.32.84.165,3877.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:36.648596,0.0,tcp,147.32.84.165,3878.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:36.648807,0.0,tcp,147.32.84.165,3879.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:36.648821,0.0,tcp,147.32.84.165,3881.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:36.648826,0.0,tcp,147.32.84.165,3883.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:37.249515,0.0,tcp,147.32.84.165,3891.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:37.249530,0.0,tcp,147.32.84.165,3889.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:37.249535,0.0,tcp,147.32.84.165,3890.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:39.527749,0.018054,tcp,147.32.84.170,43122.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:47.120096,0.000392,udp,147.32.84.138,50577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:48.666153,0.0,tcp,147.32.84.165,4072.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:48.666168,0.0,tcp,147.32.84.165,4073.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:48.666326,0.0,tcp,147.32.84.165,4075.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:48.666340,0.0,tcp,147.32.84.165,4077.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:49.267273,0.0,tcp,147.32.84.165,4081.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:49.267287,0.0,tcp,147.32.84.165,4082.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:36:49.527592,0.018062,tcp,147.32.84.170,41000.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:36:53.758336,0.000369,udp,147.32.84.138,35583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:56.724778,0.00022,udp,147.32.85.25,47521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:36:59.526647,0.000306,udp,147.32.84.170,57516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:00.682999,0.0,tcp,147.32.84.165,4252.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:00.683157,0.0,tcp,147.32.84.165,4253.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:00.683238,0.0,tcp,147.32.84.165,4255.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:00.683315,0.0,tcp,147.32.84.165,4257.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:01.284266,60.958691,tcp,147.32.84.165,4291.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:37:01.284443,0.0,tcp,147.32.84.165,4261.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:01.284457,0.0,tcp,147.32.84.165,4262.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:01.284461,0.0,tcp,147.32.84.165,4264.0,->,147.32.80.110,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:07.581491,2425.554443,udp,42.117.183.70,23900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:37:09.550417,0.000256,udp,147.32.84.59,44172.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:37:10.840751,0.000313,udp,147.32.84.138,51316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:37:10.967177,8.883819,tcp,14.210.222.98,4865.0,->,147.32.84.2,80.0,FSRPA_SPA,0.0,0.0,120,104034,3750,100284,866.95,0.03604590806851606,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:37:12.700821,0.0,tcp,147.32.84.165,4435.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:12.701047,0.0,tcp,147.32.84.165,4434.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:12.701063,0.0,tcp,147.32.84.165,4439.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:12.701298,0.0,tcp,147.32.84.165,4437.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:13.301541,0.0,tcp,147.32.84.165,4444.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:13.301759,0.0,tcp,147.32.84.165,4443.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:13.301830,0.0,tcp,147.32.84.165,4448.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:17.052741,0.000394,udp,147.32.84.170,35354.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:17.054283,240.347168,tcp,147.32.84.170,42489.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,83,32065,23185,8880,386.32530120481925,0.7230625292374864,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:17.056539,250.044952,tcp,147.32.84.170,42492.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:19.525755,0.000305,udp,147.32.84.170,37519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:19.527596,0.017741,tcp,147.32.84.170,43133.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:22.162474,0.000233,udp,147.32.84.170,52745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:22.164295,0.235325,tcp,147.32.84.170,46269.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:24.718519,0.0,tcp,147.32.84.165,4614.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:24.718534,0.0,tcp,147.32.84.165,4615.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:24.718753,0.0,tcp,147.32.84.165,4617.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:24.718766,0.0,tcp,147.32.84.165,4619.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:25.318942,0.0,tcp,147.32.84.165,4623.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:25.318956,0.0,tcp,147.32.84.165,4624.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:29.480618,0.308915,tcp,147.32.86.20,2922.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:37:29.527633,0.018379,tcp,147.32.84.170,37624.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:35.165100,0.936052,tcp,147.32.86.20,2928.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,92926,1706,91220,978.1684210526316,0.018358694014592256,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:37:36.735501,0.0,tcp,147.32.84.165,4763.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:36.735683,0.0,tcp,147.32.84.165,4765.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:36.735792,0.0,tcp,147.32.84.165,4767.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:36.737149,0.0,tcp,147.32.84.165,4769.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:37.336198,0.0,tcp,147.32.84.165,4771.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:37.336212,0.0,tcp,147.32.84.165,4773.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:39.526641,0.000412,udp,147.32.84.170,40597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:45.479062,3296.918701,udp,99.130.62.19,15573.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:37:48.753252,0.0,tcp,147.32.84.165,4883.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:48.753361,0.0,tcp,147.32.84.165,4885.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:49.353640,0.0,tcp,147.32.84.165,4889.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:49.353866,0.0,tcp,147.32.84.165,4891.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:49.353880,0.0,tcp,147.32.84.165,4893.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:37:49.525617,0.000306,udp,147.32.84.170,52952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:53.176597,0.218847,tcp,147.32.84.170,37722.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:37:54.770114,0.000221,udp,147.32.84.59,56994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:37:55.846197,0.000372,udp,60.186.118.79,51632.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:37:59.805953,0.000243,udp,147.32.84.59,46473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:38:00.769378,0.000223,udp,147.32.84.138,60277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:38:00.770450,0.0,tcp,147.32.84.165,1055.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:00.770669,0.0,tcp,147.32.84.165,1057.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:00.770810,0.0,tcp,147.32.84.165,1059.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:01.371066,0.0,tcp,147.32.84.165,1061.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:01.371257,0.0,tcp,147.32.84.165,1063.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:02.105825,0.181512,udp,147.32.84.229,13363.0,<->,98.127.146.167,15692.0,CON,0.0,0.0,2,158,92,66,79.0,0.5822784810126582,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:06.513066,0.000265,udp,147.32.85.34,51245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:38:09.528442,0.000256,udp,147.32.84.170,48948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:09.530255,0.018148,tcp,147.32.84.170,37453.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:12.787804,60.943432,tcp,147.32.84.165,1087.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:38:12.787819,0.0,tcp,147.32.84.165,1176.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:12.788009,0.0,tcp,147.32.84.165,1178.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:13.102350,0.0,tcp,147.32.84.165,1180.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:13.388253,0.0,tcp,147.32.84.165,1182.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:13.388394,0.0,tcp,147.32.84.165,1184.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:13.667077,0.262249,tcp,147.32.84.170,39069.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:15.888732,0.358078,tcp,67.195.111.228,46133.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1601,750,851,160.1,0.4684572142410993,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:38:17.880884,0.000441,udp,76.175.137.87,47059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,74,478,276.0,0.13405797101449277,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:19.525910,0.000331,udp,147.32.84.170,48320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:19.526895,0.000363,udp,147.32.84.170,42935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:19.706583,3.11424,tcp,219.139.11.196,1265.0,->,147.32.84.2,80.0,SRPA_SA,0.0,0.0,28,20862,1314,19548,745.0714285714286,0.06298533218291631,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:38:24.805111,0.0,tcp,147.32.84.165,1296.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:24.805305,0.0,tcp,147.32.84.165,1298.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:24.805385,0.0,tcp,147.32.84.165,1300.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:25.405451,0.0,tcp,147.32.84.165,1302.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:25.405519,0.0,tcp,147.32.84.165,1304.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:28.674607,0.000371,udp,188.134.41.150,49653.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:36.822114,0.0,tcp,147.32.84.165,1416.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:36.822122,0.0,tcp,147.32.84.165,1417.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:36.822178,0.0,tcp,147.32.84.165,1418.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:36.822235,0.0,tcp,147.32.84.165,1419.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:36.822294,0.0,tcp,147.32.84.165,1420.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:37.423044,0.0,tcp,147.32.84.165,1423.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:37.423115,0.0,tcp,147.32.84.165,1422.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:37.423200,0.0,tcp,147.32.84.165,1425.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:37.423216,0.0,tcp,147.32.84.165,1424.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:37.423338,0.0,tcp,147.32.84.165,1427.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:39.527499,0.017768,tcp,147.32.84.170,41596.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:38:39.638514,69.201012,tcp,112.213.145.133,56059.0,->,147.32.85.100,3126.0,S_,0.0,,11,794,794,0,72.18181818181819,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:38:40.229850,0.000291,udp,147.32.84.59,41781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:38:42.780473,0.000365,udp,88.213.248.9,56144.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:45.016696,0.000479,udp,184.79.38.227,28280.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,79,484,281.5,0.14031971580817051,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:45.659105,0.000452,udp,95.133.96.210,5575.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:38:48.839616,0.0,tcp,147.32.84.165,1536.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:48.839893,0.0,tcp,147.32.84.165,1538.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:48.839963,0.0,tcp,147.32.84.165,1540.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:49.440230,0.0,tcp,147.32.84.165,1542.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:38:49.440417,0.0,tcp,147.32.84.165,1544.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:00.856932,0.0,tcp,147.32.84.165,1656.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:00.857214,0.0,tcp,147.32.84.165,1658.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:00.857334,0.0,tcp,147.32.84.165,1660.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:01.457710,0.0,tcp,147.32.84.165,1662.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:01.457795,0.0,tcp,147.32.84.165,1664.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:12.874091,0.0,tcp,147.32.84.165,1776.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:12.874160,0.0,tcp,147.32.84.165,1777.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:12.874274,0.0,tcp,147.32.84.165,1778.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:12.874288,0.0,tcp,147.32.84.165,1779.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:12.874377,0.0,tcp,147.32.84.165,1780.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:13.474911,0.0,tcp,147.32.84.165,1783.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:13.475068,60.942375,tcp,147.32.84.165,1802.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:39:13.475082,0.0,tcp,147.32.84.165,1782.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:13.475086,0.0,tcp,147.32.84.165,1785.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:13.475180,0.0,tcp,147.32.84.165,1784.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:13.475241,0.0,tcp,147.32.84.165,1787.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:16.846815,0.027,tcp,90.183.39.17,57142.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,26,13836,1331,12505,532.1538461538462,0.09619832321480197,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:39:19.527842,0.018395,tcp,147.32.84.170,37468.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:39:24.891349,0.0,tcp,147.32.84.165,1897.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:24.891400,0.0,tcp,147.32.84.165,1898.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:24.891528,0.0,tcp,147.32.84.165,1899.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:24.891540,0.0,tcp,147.32.84.165,1900.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:24.891545,0.0,tcp,147.32.84.165,1901.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.492506,0.0,tcp,147.32.84.165,1904.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.492598,0.0,tcp,147.32.84.165,1903.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.492654,0.0,tcp,147.32.84.165,1906.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.492711,0.0,tcp,147.32.84.165,1905.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.492765,0.0,tcp,147.32.84.165,1908.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:25.493708,0.170058,udp,147.32.84.229,13363.0,<->,24.118.253.99,64082.0,CON,0.0,0.0,2,132,71,61,66.0,0.5378787878787878,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:39:28.922167,0.308387,tcp,147.32.86.20,3025.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:39:36.908933,0.0,tcp,147.32.84.165,2017.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:36.908953,0.0,tcp,147.32.84.165,2018.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:36.908959,0.0,tcp,147.32.84.165,2019.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:36.908965,0.0,tcp,147.32.84.165,2020.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:36.909000,0.0,tcp,147.32.84.165,2021.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:37.509465,0.0,tcp,147.32.84.165,2024.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:37.509596,0.0,tcp,147.32.84.165,2023.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:37.509659,0.0,tcp,147.32.84.165,2026.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:37.509709,0.0,tcp,147.32.84.165,2025.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:37.509767,0.0,tcp,147.32.84.165,2028.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:39.525936,0.000327,udp,147.32.84.170,53523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:39:45.170887,0.206648,tcp,147.32.86.20,3039.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:39:48.925827,0.0,tcp,147.32.84.165,2138.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:48.925841,0.0,tcp,147.32.84.165,2139.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:48.925864,0.0,tcp,147.32.84.165,2140.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:48.926021,0.0,tcp,147.32.84.165,2141.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:48.926035,0.0,tcp,147.32.84.165,2142.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:49.525748,0.00036,udp,147.32.84.170,60655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:39:49.526851,0.0,tcp,147.32.84.165,2145.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:49.526867,0.0,tcp,147.32.84.165,2144.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:49.526872,0.0,tcp,147.32.84.165,2147.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:49.526913,0.0,tcp,147.32.84.165,2146.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:49.526989,0.0,tcp,147.32.84.165,2149.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:39:55.172892,0.000499,udp,147.32.84.170,54950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:39:59.069399,2626.075195,udp,69.137.120.248,52468.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3661,181,3480,457.625,0.049440043703906034,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:39:59.525994,0.000291,udp,147.32.84.170,48843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:00.943088,0.0,tcp,147.32.84.165,2258.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:00.943181,0.0,tcp,147.32.84.165,2259.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:00.943231,0.0,tcp,147.32.84.165,2260.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:00.943237,0.0,tcp,147.32.84.165,2261.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:00.943308,0.0,tcp,147.32.84.165,2262.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:01.302364,0.004986,tcp,147.32.86.92,58554.0,->,88.86.102.51,80.0,FSPA_FSPA,0.0,0.0,10,992,488,504,99.2,0.49193548387096775,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:40:01.544145,0.0,tcp,147.32.84.165,2265.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:01.544216,0.0,tcp,147.32.84.165,2264.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:01.544221,0.0,tcp,147.32.84.165,2267.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:01.544289,0.0,tcp,147.32.84.165,2266.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:01.544296,0.0,tcp,147.32.84.165,2269.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,6,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 06:40:02.441046,6.009985,udp,147.32.84.229,13363.0,->,120.126.122.183,56039.0,INT,0.0,,3,252,252,0,84.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:40:05.905676,0.000229,udp,147.32.84.138,54017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:40:06.331039,0.000231,udp,147.32.85.34,49297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:40:10.978923,0.000258,udp,147.32.84.170,51872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:10.979561,0.000138,udp,147.32.84.170,41126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:10.981131,0.365131,tcp,147.32.84.170,60636.0,->,50.17.203.200,81.0,FSPA_FSRA,0.0,0.0,12,1304,924,380,108.66666666666667,0.7085889570552147,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:12.227884,0.000294,udp,147.32.84.138,49369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:40:14.103259,60.95179,tcp,147.32.84.165,2280.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:40:19.526999,0.000317,udp,147.32.84.170,41327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:21.219277,0.000306,udp,147.32.84.138,49748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:40:25.171622,0.000307,udp,147.32.84.170,60110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:25.172484,0.000301,udp,147.32.84.170,54295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:29.526764,0.00028,udp,147.32.84.170,45669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:29.527817,0.017755,tcp,147.32.84.170,38921.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:31.095324,3060.448975,udp,81.30.167.200,45641.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,605,421,184,100.83333333333333,0.6958677685950413,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:40:37.548985,0.000207,udp,147.32.84.138,56344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:40:39.526042,0.020048,udp,147.32.84.170,46288.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:43.532416,3401.404541,udp,207.158.2.226,53221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,426,246,180,71.0,0.5774647887323944,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:40:45.736541,3.17701,udp,24.146.194.191,58471.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,4381,120,4261,730.1666666666666,0.027391006619493265,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:40:55.177932,0.214535,tcp,147.32.84.170,37753.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:56.044558,1351.240112,udp,94.156.163.233,38827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:40:57.055849,2439.2771,udp,218.165.24.1,18019.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:40:59.526340,0.000446,udp,147.32.84.170,40965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:59.528438,0.018308,tcp,147.32.84.170,37483.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:40:59.538755,3019.392578,udp,24.139.58.65,8449.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:41:11.712886,0.0,icmp,147.32.84.164,771.0,->,117.206.70.25,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,6,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 06:41:13.594428,0.000565,udp,78.61.43.47,16218.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,80,478,279.0,0.14336917562724014,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:41:14.740804,60.967682,tcp,147.32.84.165,2281.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:41:19.526030,0.000361,udp,147.32.84.170,49715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:23.073194,0.000214,udp,147.32.85.25,52585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:41:26.173496,0.000307,udp,147.32.84.170,57581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:30.951879,0.000416,udp,60.191.94.124,54991.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:41:43.629240,0.000142,udp,147.32.85.25,34413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:41:49.526094,0.000459,udp,147.32.84.170,48910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:49.528201,0.017862,tcp,147.32.84.170,46920.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:50.221081,2623.008301,udp,147.32.84.229,13363.0,<->,78.141.179.11,34019.0,CON,0.0,0.0,4,677,555,122,169.25,0.8197932053175776,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:41:56.167079,0.000249,udp,147.32.84.170,36543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:56.168908,0.239705,tcp,147.32.84.170,37761.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:59.311280,0.000248,udp,147.32.84.170,48805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:41:59.527872,0.018359,tcp,147.32.84.170,46923.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:42:01.621826,0.000329,udp,147.32.84.59,42315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:09.526502,0.000189,udp,147.32.84.170,37472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:42:11.743359,0.000267,udp,147.32.84.59,47765.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:12.460765,3021.624756,udp,24.107.69.50,33756.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:42:15.388834,60.96748,tcp,147.32.84.165,2282.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:42:20.189379,0.000169,udp,147.32.84.138,57205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:27.675451,0.000326,udp,147.32.86.20,63942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:30.952779,0.354184,tcp,67.195.111.228,44049.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2255,730,1525,225.5,0.3237250554323725,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:42:31.889274,0.000343,udp,147.32.84.59,43918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:31.910531,0.000322,udp,147.32.84.59,34399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:34.982860,0.000319,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,6,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 06:42:35.720848,93.207268,udp,180.12.214.97,35699.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:42:36.982475,0.000392,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,6,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 06:42:51.029168,0.000216,udp,147.32.84.138,47088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:42:53.945186,2851.631348,udp,60.12.95.138,35966.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:42:59.525847,0.000409,udp,147.32.84.170,39746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:42:59.527836,0.018491,tcp,147.32.84.170,54572.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:04.698843,0.000265,udp,147.32.85.25,33987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:43:13.452722,0.335741,tcp,147.32.84.170,48832.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:13.501423,0.275497,tcp,147.32.84.170,58556.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:15.505538,0.087008,udp,68.36.123.126,55052.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,499,209,290,83.16666666666667,0.4188376753507014,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:16.036793,60.950802,tcp,147.32.84.165,2313.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:43:17.268664,0.000339,udp,68.253.231.73,34474.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:17.650626,42.901566,udp,147.32.84.229,13363.0,<->,149.13.32.106,33033.0,CON,0.0,0.0,6,408,228,180,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:19.990789,2321.067627,udp,117.6.162.32,43621.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1151,163,988,287.75,0.1416159860990443,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:29.527109,0.000477,udp,147.32.84.170,42440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:32.722764,0.000325,udp,113.168.51.65,20859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:39.526208,0.000388,udp,147.32.84.170,46776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:46.541307,0.000602,udp,195.234.69.182,19767.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,972,76,896,486.0,0.07818930041152264,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:43:49.526844,0.000316,udp,147.32.84.170,47484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:43:55.429767,0.000281,udp,147.32.86.20,53171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:43:55.462121,0.000332,udp,147.32.84.138,48954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:43:59.528243,0.01773,tcp,147.32.84.170,47706.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:07.027168,0.000298,udp,147.32.85.34,63513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:44:07.035940,0.000352,udp,147.32.85.34,61882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:44:08.726248,0.47451,udp,101.109.245.143,46801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,629,124,505,157.25,0.1971383147853736,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:44:16.673192,60.954189,tcp,147.32.84.165,2314.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:44:19.526873,0.000269,udp,147.32.84.170,42253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:24.867790,3451.213867,udp,216.197.177.240,47488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1370,717,653,137.0,0.5233576642335767,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:44:28.744407,0.000328,udp,147.32.86.20,50204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:44:29.207950,0.000282,udp,147.32.84.170,40696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:29.525991,0.000321,udp,147.32.84.170,36527.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:29.526878,0.000293,udp,147.32.84.170,54060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:29.527910,0.018676,tcp,147.32.84.170,41659.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:39.131503,3296.90918,arp,147.32.87.52,,who,147.32.87.49,,RSP,,,13,780,0,780,60.0,0.0,6,,flow=Background,Background,-1 2011-08-17 06:44:40.591221,0.00041,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,6,1,flow=Background,Background,-1 2011-08-17 06:44:49.526297,0.000296,udp,147.32.84.170,41128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:44:49.527071,0.000309,udp,147.32.84.170,60560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:00.172227,0.000242,udp,147.32.84.170,40631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:00.173062,0.00029,udp,147.32.84.170,35559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:05.684024,1948.037231,udp,147.32.84.229,13363.0,<->,218.164.147.132,15464.0,CON,0.0,0.0,8,531,254,277,66.375,0.4783427495291902,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:07.787953,6.040433,udp,147.32.84.229,13363.0,->,188.194.112.215,54938.0,INT,0.0,,3,435,435,0,145.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:45:09.527000,0.000348,udp,147.32.84.170,53054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:12.132830,1.41275,udp,147.32.84.229,13363.0,<->,188.124.199.111,42698.0,CON,0.0,0.0,4,556,265,291,139.0,0.4766187050359712,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:16.377430,0.209799,tcp,66.249.72.115,33985.0,->,147.32.84.2,59292.0,FSA_FSPA,0.0,0.0,10,2908,338,2570,290.8,0.11623108665749655,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:45:17.310558,60.967258,tcp,147.32.84.165,2315.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:45:26.772595,3350.080078,udp,62.120.238.17,44407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:26.941596,1.506712,udp,95.29.92.149,18843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1398,670,728,174.75,0.4792560801144492,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:29.528169,0.018361,tcp,147.32.84.170,36114.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:30.204963,3041.276123,udp,114.174.182.130,19554.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:31.176673,0.00024,udp,147.32.84.170,40939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:39.537621,0.018235,tcp,147.32.84.170,53891.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:53.867532,0.000422,udp,85.2.110.210,52629.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:45:54.577164,0.000471,icmp,147.32.86.96,,<-,147.32.87.2,12229.0,RED,,0.0,2,130,0,130,65.0,0.0,6,0,flow=Background,Background,-1 2011-08-17 06:45:58.124519,0.000431,udp,147.32.86.20,55489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:45:59.527142,0.000308,udp,147.32.84.170,50978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:45:59.528183,0.018441,tcp,147.32.84.170,53893.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:02.170391,0.000311,udp,147.32.84.170,52534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:02.172477,0.214832,tcp,147.32.84.170,48435.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:04.700001,0.000404,udp,197.0.234.138,16157.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:46:07.041735,0.000288,udp,147.32.85.34,61205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:46:11.114957,3063.463379,udp,186.23.121.121,12017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:46:12.447014,2999.909912,arp,147.32.87.11,,who,147.32.87.1,,CON,,,6,360,180,180,60.0,0.5,6,,flow=From-Normal-V49-MatLab-Server,Normal,0 2011-08-17 06:46:17.958087,60.968224,tcp,147.32.84.165,2316.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:46:29.527158,0.000364,udp,147.32.84.170,44915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:29.528057,0.000311,udp,147.32.84.170,38180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:29.529111,0.018499,tcp,147.32.84.170,41674.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:32.177334,0.000293,udp,147.32.84.170,35226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:44.424760,2.908956,tcp,66.249.66.211,44626.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,24,9769,1512,8257,407.0416666666667,0.15477530965298392,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:46:49.526361,0.000423,udp,147.32.84.170,54241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:49.528461,0.017939,tcp,147.32.84.170,41677.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:46:55.237928,0.000305,udp,147.32.84.138,51768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:46:55.820153,0.000152,udp,147.32.85.25,36227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:46:59.014042,3599.617676,tcp,147.32.84.229,80.0,,98.194.203.228,49709.0,PA_PA,0.0,0.0,249,18080,8597,9483,72.61044176706827,0.47549778761061945,6,0,flow=Background,Background,-1 2011-08-17 06:47:00.210033,0.000363,udp,109.205.114.167,43045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,317,64,253,158.5,0.20189274447949526,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:09.288521,0.890181,tcp,46.47.77.209,3337.0,->,147.32.84.171,6881.0,FSRPA_SPA,0.0,0.0,13,1206,654,552,92.76923076923077,0.5422885572139303,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:47:09.527246,0.000269,udp,147.32.84.170,55399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:09.528234,0.018001,tcp,147.32.84.170,53903.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:17.055180,240.655914,tcp,147.32.84.170,59039.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,87,32321,23782,8539,371.5057471264368,0.7358064416323752,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:17.067826,0.293631,udp,147.32.84.170,59449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:17.379719,0.092709,tcp,147.32.84.170,53211.0,->,199.16.83.72,80.0,FSPA_FSPA,0.0,0.0,13,2793,786,2007,214.84615384615384,0.2814178302900107,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:18.606334,60.966732,tcp,147.32.84.165,2317.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:47:23.793391,0.000292,udp,147.32.84.138,55844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:47:26.265685,0.000191,udp,147.32.85.25,37951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:47:29.235803,1201.922485,udp,147.32.84.229,13363.0,<->,188.168.70.202,45112.0,CON,0.0,0.0,12,4182,316,3866,348.5,0.07556193208990913,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:34.173535,0.000225,udp,147.32.84.170,40457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:34.175593,0.207039,tcp,147.32.84.170,48454.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:35.170172,95.129356,udp,77.30.25.209,25035.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,552,366,186,110.4,0.6630434782608695,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:39.910909,0.002254,udp,94.42.176.240,38175.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,81,60,70.5,0.574468085106383,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:51.964413,3017.983398,udp,74.213.245.198,1777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:52.005713,0.000296,udp,147.32.85.25,49751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:47:59.183012,0.000299,udp,208.54.39.220,24605.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:47:59.526448,0.000419,udp,147.32.84.170,45099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:47:59.527508,0.000341,udp,147.32.84.170,39957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:01.397445,0.829569,tcp,82.161.140.128,51930.0,->,147.32.84.36,443.0,FSPA_FSPA,0.0,0.0,32,13576,1836,11740,424.25,0.13523865645256336,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:48:04.174253,0.223291,tcp,147.32.84.170,50129.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:06.882236,0.000275,udp,147.32.85.34,59386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:07.056098,0.000316,icmp,91.211.116.103,8.0,->,147.32.85.109,64174.0,TXD,0.0,,1,60,60,0,60.0,1.0,6,0,flow=Background,Background,-1 2011-08-17 06:48:09.527882,0.000401,udp,147.32.84.170,35213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:09.528809,0.000381,udp,147.32.84.170,57708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:13.424917,0.216427,tcp,147.32.84.170,41589.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:13.471621,0.274521,tcp,147.32.84.170,47872.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:13.633570,0.317587,tcp,147.32.84.170,41591.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:13.738315,0.276108,tcp,147.32.84.170,47874.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:14.662778,0.000227,udp,147.32.84.138,40352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:16.909676,0.000299,udp,147.32.84.138,49685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:19.253229,60.967648,tcp,147.32.84.165,2318.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:48:19.527144,0.000257,udp,147.32.84.170,58059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:29.527459,0.000292,udp,147.32.84.170,35821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:29.528551,0.018135,tcp,147.32.84.170,39429.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:29.794619,3289.922119,udp,94.253.112.211,52859.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:48:30.942842,0.000362,udp,71.52.64.107,18950.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:48:32.654203,0.00025,udp,147.32.85.25,45723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:33.901044,3.63153,tcp,114.72.208.103,49346.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,17,1394,705,689,82.0,0.505738880918221,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:48:34.338869,0.000206,udp,147.32.84.59,48072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:35.176125,0.000431,udp,147.32.84.170,49027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:38.961940,0.130889,udp,147.32.84.68,63060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,580,80,500,290.0,0.13793103448275862,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:39.527762,0.000363,udp,147.32.84.170,48949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:42.363347,0.001415,udp,201.141.214.129,36517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:48:43.835379,0.000345,udp,147.32.84.138,40692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:49.527416,0.00035,udp,147.32.84.170,60129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:54.690936,0.156899,udp,147.32.84.229,13363.0,<->,72.23.49.25,25828.0,CON,0.0,0.0,2,521,461,60,260.5,0.8848368522072937,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:48:56.910550,0.000468,udp,147.32.86.20,65181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:48:58.967305,20.807796,tcp,147.32.84.184,37930.0,->,199.59.148.20,443.0,FSPA_FSPA,0.0,0.0,18,5379,1925,3454,298.8333333333333,0.35787321063394684,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:48:59.526512,0.000328,udp,147.32.84.170,53242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:48:59.527375,0.000391,udp,147.32.84.170,57367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:02.149110,1.038552,tcp,41.96.12.223,1527.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1452,785,667,72.6,0.540633608815427,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:49:05.070504,0.000316,udp,147.32.84.59,57196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:49:05.174461,0.000147,udp,147.32.84.170,35721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:05.175198,0.000299,udp,147.32.84.170,57274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:09.786984,0.000361,udp,94.158.33.148,13399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:49:11.377880,0.026914,tcp,147.32.86.89,2069.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1843,987,856,204.77777777777777,0.5355398806294086,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:49:13.739566,0.00017,udp,147.32.85.25,40097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:49:19.901199,60.96767,tcp,147.32.84.165,2319.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:49:38.533789,0.000332,udp,94.189.185.198,39923.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,201,83,118,100.5,0.4129353233830846,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:49:39.526376,0.000433,udp,147.32.84.170,40626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:39.527345,0.000417,udp,147.32.84.170,58852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:39.528363,0.017842,tcp,147.32.84.170,35166.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:49.526525,0.000372,udp,147.32.84.170,55126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:49.528626,0.018463,tcp,147.32.84.170,53277.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:49:59.528670,0.018134,tcp,147.32.84.170,53278.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:00.608446,0.000218,udp,147.32.84.59,38615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:05.303387,51.901943,tcp,119.97.211.74,4222.0,->,147.32.84.2,80.0,SPA_FSPA,0.0,0.0,302,291396,7378,284018,964.8874172185431,0.02531949649274527,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:50:06.173058,0.0003,udp,147.32.84.170,33738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:08.519550,0.000255,udp,147.32.84.2,58114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:09.527601,0.000211,udp,147.32.84.170,41640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:10.781509,0.000443,udp,147.32.84.189,43560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:17.116872,0.000109,udp,147.32.84.138,51304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:19.526631,0.000342,udp,147.32.84.170,46432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:20.548966,60.95277,tcp,147.32.84.165,2320.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:50:29.540218,0.169751,tcp,147.32.86.20,3597.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1691,69519,924.8051948051948,0.023746664794270466,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:50:35.275282,1323.550049,udp,147.32.84.229,13363.0,<->,96.35.201.164,17629.0,CON,0.0,0.0,4,1117,530,587,279.25,0.4744852282900627,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:50:37.173048,0.00024,udp,147.32.84.170,50588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:37.174237,0.210968,tcp,147.32.84.170,50155.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:39.526745,0.009839,udp,147.32.84.170,60669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:40.183552,0.000337,udp,113.190.70.213,14427.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:50:42.408788,0.000135,udp,147.32.84.2,52322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:51.093076,0.001629,udp,202.83.75.150,48865.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,579,519,60,289.5,0.8963730569948186,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:50:53.914857,0.000254,udp,147.32.84.2,44126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:50:59.335538,0.00302,udp,70.53.210.202,44988.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2930,60,2870,732.5,0.020477815699658702,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:50:59.526782,0.000294,udp,147.32.84.170,53584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:50:59.527575,0.000309,udp,147.32.84.170,39511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:05.668021,0.000326,udp,202.124.211.114,1683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,163,96,67,81.5,0.588957055214724,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:51:06.337711,0.00043,udp,220.104.220.121,47264.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:51:09.527646,0.000339,udp,147.32.84.170,47979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:19.834767,318.290161,udp,94.188.47.182,30298.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,749,139,610,187.25,0.1855807743658211,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:51:21.187033,60.966515,tcp,147.32.84.165,2321.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:51:25.978356,0.000235,udp,147.32.84.170,39487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:25.980318,240.05986,tcp,147.32.84.170,51545.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,23,4802,2994,1808,208.7826086956522,0.6234902124114952,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:26.016635,0.000297,udp,147.32.84.170,59205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:27.796534,0.00039,udp,174.0.207.58,1150.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:51:37.173426,0.000293,udp,147.32.84.170,51782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:38.813103,5.997315,udp,147.32.84.229,13363.0,->,114.42.79.225,21068.0,INT,0.0,,3,249,249,0,83.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:51:39.528687,0.017641,tcp,147.32.84.170,43642.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:49.526808,0.00042,udp,147.32.84.170,48880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:49.528712,0.01767,tcp,147.32.84.170,34657.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:51:50.680567,0.000236,udp,147.32.84.138,47872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:51:52.578696,604.486938,udp,202.173.189.32,40416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:51:59.527558,0.000349,udp,147.32.84.170,38950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:52:01.512417,0.000433,udp,200.104.244.240,54015.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:06.759865,0.000292,udp,147.32.84.138,55709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:52:09.008906,0.000265,udp,147.32.85.25,57479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:52:09.658774,1220.567139,udp,195.177.106.34,64952.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:12.765544,0.000449,udp,99.92.154.184,40365.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:15.980689,0.000381,udp,147.32.86.20,51043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:52:21.833804,60.951519,tcp,147.32.84.165,2322.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:52:22.902200,9.0368,tcp,147.32.85.74,46015.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:52:26.308321,0.00025,udp,108.113.155.20,29137.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:32.261836,0.000458,udp,147.32.86.20,53402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:52:38.439207,0.000497,udp,213.88.212.42,30820.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,607,74,533,303.5,0.12191103789126853,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:39.173177,0.000313,udp,147.32.84.170,51279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:52:53.391182,0.135256,tcp,147.32.86.20,3727.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:52:53.495889,0.0,tcp,125.141.229.197,3389.0,->,147.32.86.125,64372.0,SA_,0.0,,1,62,62,0,62.0,1.0,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:52:57.549589,0.000507,udp,189.229.30.129,61841.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:52:59.265999,7.016406,tcp,77.31.60.217,54099.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,6,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:53:01.097268,0.000263,udp,147.32.84.138,39257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:03.453072,0.00166,udp,68.5.205.218,34985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,523,463,60,261.5,0.8852772466539197,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:53:04.579674,0.000446,udp,147.32.85.89,36586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:06.654872,0.266009,udp,147.32.84.229,13363.0,<->,41.241.95.239,28454.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:53:10.174064,0.000294,udp,147.32.84.170,56769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:13.211529,0.255867,tcp,147.32.84.170,40492.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:13.517998,0.419029,tcp,147.32.84.170,48442.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:13.929205,0.335001,tcp,147.32.84.170,48444.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:14.256727,0.317649,tcp,147.32.84.170,48445.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:17.774611,0.000212,udp,147.32.84.138,59132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:19.882126,0.000479,udp,213.151.218.140,14233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,73,475,274.0,0.1332116788321168,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:53:20.999253,0.000265,udp,147.32.84.138,59497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:22.470579,60.946598,tcp,147.32.84.165,2323.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:53:24.021451,124.429474,udp,202.84.121.13,10606.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,701,150,551,175.25,0.21398002853067047,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:53:27.653770,0.000295,udp,147.32.84.186,45280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:27.801696,0.000201,udp,147.32.84.138,37770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:28.801840,1.4e-05,udp,91.187.103.11,58900.0,->,147.32.84.2,37032.0,INT,0.0,,1,109,109,0,109.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:53:31.487809,0.000227,udp,147.32.84.59,46259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:37.045796,0.000281,udp,147.32.84.59,40940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,335,86,249,167.5,0.25671641791044775,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:37.061422,0.000272,udp,147.32.84.59,54877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:39.527739,0.000297,udp,147.32.84.170,52431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:45.021965,6.245754,udp,147.32.84.229,13363.0,->,128.97.244.225,65306.0,INT,0.0,,3,180,180,0,60.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:53:46.342815,0.000209,udp,147.32.84.138,58412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:53:49.527922,0.000468,udp,147.32.84.170,47922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:53:53.621617,473.360016,tcp,147.32.84.68,54345.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,15,5589,3672,1917,372.6,0.6570048309178744,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:53:58.519206,0.000388,udp,180.218.113.64,43016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:54:00.189290,0.000396,udp,178.49.199.6,61481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:54:01.945526,0.000258,udp,147.32.85.74,40701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:54:06.408995,0.000274,udp,147.32.85.34,54683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:54:09.526847,0.000399,udp,147.32.84.170,47393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:09.527780,0.000375,udp,147.32.84.170,40411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:09.528913,0.017546,tcp,147.32.84.170,47806.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:19.526892,0.000321,udp,147.32.84.170,44832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:19.527697,0.000307,udp,147.32.84.170,33883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:23.098423,60.952499,tcp,147.32.84.165,2324.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:54:29.528642,0.017923,tcp,147.32.84.170,35418.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:34.639609,168.753067,udp,147.32.84.229,13363.0,<->,174.71.21.200,14417.0,CON,0.0,0.0,18,1376,836,540,76.44444444444444,0.6075581395348837,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:54:39.526991,0.000437,udp,147.32.84.170,42826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:39.528976,0.018015,tcp,147.32.84.170,43739.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:42.172801,0.000282,udp,147.32.84.170,47583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:42.174867,0.208816,tcp,147.32.84.170,56047.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:49.526951,0.000429,udp,147.32.84.170,53368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:54:49.527890,0.000351,udp,147.32.84.170,40989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:00.437498,0.000612,udp,147.32.84.212,18224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:55:02.352264,1.027788,tcp,147.32.86.92,59166.0,->,147.32.87.30,4949.0,_SPA,,0.0,82,19552,0,19552,238.4390243902439,0.0,6,0,flow=Background-TCP-Established,Background,-1 2011-08-17 06:55:04.505964,3148.403564,udp,14.33.247.4,21758.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:55:09.528885,0.017703,tcp,147.32.84.170,52763.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:12.172722,0.000576,udp,147.32.84.170,48086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:12.173816,0.000257,udp,147.32.84.170,60792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:12.175005,0.23287,tcp,147.32.84.170,56051.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:13.015094,0.000289,udp,147.32.84.138,60567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:55:23.624157,1281.844604,udp,147.32.84.229,13363.0,<->,41.243.3.173,30261.0,CON,0.0,0.0,6,3452,514,2938,575.3333333333334,0.14889918887601392,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:55:23.624161,0.160441,udp,147.32.84.229,13363.0,<->,76.29.28.239,31964.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:55:23.736449,60.951366,tcp,147.32.84.165,2325.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:55:29.531038,0.017493,tcp,147.32.84.170,52766.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:55:29.572214,2559.248779,udp,88.152.67.74,23563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1134,1014,120,283.5,0.8941798941798942,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:55:31.222502,0.000169,udp,147.32.84.138,54234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:55:44.687068,0.000272,udp,139.168.210.46,49768.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:55:45.799574,0.051223,tcp,147.32.84.164,43380.0,->,62.140.24.122,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,6,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 06:55:50.619874,6.031775,udp,147.32.84.229,13363.0,->,130.243.239.118,62146.0,INT,0.0,,3,288,288,0,96.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:55:53.729777,0.000213,udp,147.32.85.25,39014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:55:57.279916,3436.615234,icmp,147.32.87.1,261.0,->,147.32.87.3,37664.0,RED,0.0,,23,1610,1610,0,70.0,1.0,6,0,flow=Background,Background,-1 2011-08-17 06:56:03.976682,0.000197,udp,147.32.85.25,49166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:04.049470,0.000427,udp,188.123.241.20,51397.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:04.888476,0.000305,udp,147.32.84.138,46168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:05.001293,0.000439,udp,113.170.53.102,61110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,78,484,281.0,0.1387900355871886,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:12.786256,0.000297,udp,67.175.211.37,15161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:12.985148,123.006851,tcp,147.32.85.113,42382.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,10,1888,1286,602,188.8,0.6811440677966102,6,1,flow=Background-google-analytics1,Background,-1 2011-08-17 06:56:13.174885,0.000224,udp,147.32.84.170,49772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:15.568801,0.000438,udp,202.152.86.7,32015.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,161,94,67,80.5,0.5838509316770186,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:18.756156,129.278549,udp,122.144.98.193,23892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,713,593,120,178.25,0.8316970546984572,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:19.527974,0.000439,udp,147.32.84.170,44383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:19.529177,0.018404,tcp,147.32.84.170,35583.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:19.812298,0.610171,tcp,220.181.51.157,35950.0,->,147.32.84.2,80.0,SRPA_FSPA,0.0,0.0,10,1013,522,491,101.3,0.5153010858835143,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:56:24.373041,60.953396,tcp,147.32.84.165,2326.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:56:24.701899,0.000219,udp,147.32.85.25,54897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:29.527108,0.000346,udp,147.32.84.170,50868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:29.528010,0.00029,udp,147.32.84.170,40398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:31.031531,0.000328,udp,188.17.201.175,25611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:33.800290,3.070775,tcp,66.249.66.211,49309.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,24,9765,1514,8251,406.875,0.15504352278545827,6,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 06:56:39.528087,0.000374,udp,147.32.84.170,45205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:43.174599,0.000368,udp,147.32.84.170,33444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:43.175902,0.216849,tcp,147.32.84.170,56063.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:43.387878,2083.627441,udp,147.32.84.229,13363.0,<->,74.193.26.116,62166.0,CON,0.0,0.0,6,583,399,184,97.16666666666667,0.6843910806174958,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:48.426664,1361.717896,udp,147.32.84.229,13363.0,<->,90.189.251.229,50858.0,CON,0.0,0.0,8,1605,911,694,200.625,0.567601246105919,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:56:49.527024,0.000335,udp,147.32.84.170,33576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:56:52.905191,0.000281,udp,147.32.84.59,52231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:53.016960,0.00029,udp,147.32.84.59,44880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:53.275163,0.000265,udp,147.32.84.59,48629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:56:53.900662,0.206229,tcp,147.32.86.20,3936.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:56:55.274935,60.086342,tcp,147.32.85.113,53891.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,10,1342,883,459,134.2,0.657973174366617,6,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 06:57:09.529074,0.01801,tcp,147.32.84.170,47830.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:10.457098,0.000238,udp,147.32.85.25,58784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:57:13.171083,0.000248,udp,147.32.84.170,48160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:17.054616,0.000475,udp,147.32.84.170,57096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:17.055568,0.000329,udp,147.32.84.170,43719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:17.059150,243.490799,tcp,147.32.84.170,44649.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:18.268271,0.000414,udp,67.191.223.249,26379.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:57:19.527947,0.000359,udp,147.32.84.170,57284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:25.012063,60.951302,tcp,147.32.84.165,2327.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:57:26.505793,0.000192,udp,147.32.84.138,52838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:57:32.886639,0.000257,udp,147.32.84.138,55401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:57:39.528171,0.000302,udp,147.32.84.170,55257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:44.178114,0.215178,tcp,147.32.84.170,39850.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:49.529869,0.000423,udp,147.32.84.170,41671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:49.531049,0.018066,tcp,147.32.84.170,34039.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:57:49.929012,3569.922607,udp,165.230.169.124,50478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5842,120,5722,730.25,0.020540910647038686,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:57:59.530088,0.018019,tcp,147.32.84.170,46717.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:05.036297,6.031095,udp,147.32.84.229,13363.0,->,189.110.101.112,39246.0,INT,0.0,,3,180,180,0,60.0,1.0,6,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 06:58:05.837144,0.000288,udp,120.151.33.149,56811.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:58:07.088527,0.000294,udp,147.32.85.34,55988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:58:12.862328,2869.242188,udp,95.133.236.38,59325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:58:13.920042,0.264404,tcp,147.32.84.170,33851.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:14.178770,0.000371,udp,147.32.84.170,53725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:24.219044,0.000265,udp,147.32.84.138,35474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:58:25.649298,60.953426,tcp,147.32.84.165,2328.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:58:29.528248,0.000387,udp,147.32.84.170,46065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:35.048006,6.160831,tcp,147.32.86.89,2726.0,->,94.138.111.180,80.0,FSPA_FSPA,0.0,0.0,66,55697,3153,52544,843.8939393939394,0.056609871267752306,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:58:39.530309,0.018903,tcp,147.32.84.170,56657.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:40.329270,0.000109,udp,147.32.84.138,47809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:58:45.175710,0.000228,udp,147.32.84.170,53700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:58:57.985657,0.000462,udp,91.195.91.251,56725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:58:59.115984,0.000516,udp,122.44.34.7,2195.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,581,73,508,290.5,0.12564543889845095,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:58:59.530148,0.017951,tcp,147.32.84.170,43564.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:02.871778,3107.543457,udp,81.90.173.232,42148.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1603,1069,534,133.58333333333334,0.6668746101060512,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:03.600254,0.00051,udp,50.15.148.125,24735.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,578,77,501,289.0,0.13321799307958476,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:07.672334,120.383194,tcp,147.32.85.113,45272.0,->,74.125.232.223,80.0,FSPA_FSPA,0.0,0.0,18,7954,1191,6763,441.8888888888889,0.14973598189590143,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:59:09.528265,0.000379,udp,147.32.84.170,54675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:10.106548,0.000419,udp,109.205.114.194,10652.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,6,1,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:15.174818,0.000274,udp,147.32.84.170,49189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:15.176846,0.219288,tcp,147.32.84.170,39866.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:19.528076,0.000522,udp,147.32.84.170,43465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:19.529112,0.000333,udp,147.32.84.170,36050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:22.218082,3154.000732,udp,147.32.85.69,123.0,<->,147.32.30.28,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,6,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 06:59:23.001757,0.000304,udp,147.32.84.19,34628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,87,176,131.5,0.33079847908745247,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:23.183378,0.000395,udp,60.36.35.245,23233.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:23.730526,0.000317,udp,147.32.84.59,44048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:24.953340,0.00032,udp,147.32.84.138,41044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:26.288463,60.966152,tcp,147.32.84.165,2329.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,6,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 06:59:26.905931,0.000357,udp,41.206.156.101,46792.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:27.998455,0.000193,udp,147.32.84.138,53250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:28.003549,0.00028,udp,147.32.84.138,52265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:28.083539,0.015779,tcp,147.32.86.89,2778.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,2044,1296,748,204.4,0.6340508806262231,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:59:29.530119,0.000309,udp,147.32.84.170,52886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:29.531164,0.018573,tcp,147.32.84.170,34056.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:35.706473,0.04353,udp,195.91.111.184,51560.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1129,155,974,282.25,0.13728963684676704,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:39.530508,0.018011,tcp,147.32.84.170,60459.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:40.465655,0.804259,udp,68.245.111.67,42267.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,332,200,132,83.0,0.6024096385542169,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:41.910623,2.182781,tcp,24.248.209.217,37856.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,20,1696,966,730,84.8,0.5695754716981132,6,1,flow=Background-TCP-Established,Background,-1 2011-08-17 06:59:43.626787,0.000131,udp,147.32.84.138,55343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,6,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 06:59:45.031044,2548.935791,udp,186.34.1.169,55410.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,5849,120,5729,731.125,0.02051632757736365,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:46.174630,0.000249,udp,147.32.84.170,35150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:49.528129,0.000409,udp,147.32.84.170,37995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:51.106173,0.108246,udp,147.32.84.229,13363.0,<->,134.192.181.36,41370.0,CON,0.0,0.0,2,149,82,67,74.5,0.5503355704697986,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:52.766424,0.000304,udp,95.96.64.119,46077.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,6,0,flow=Background-UDP-Established,Background,-1 2011-08-17 06:59:58.865207,11.024007,tcp,71.255.35.227,55903.0,->,147.32.85.26,80.0,S_,0.0,,8,608,608,0,76.0,1.0,6,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 06:59:59.528265,0.000316,udp,147.32.84.170,50080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:59.529087,0.000323,udp,147.32.84.170,37249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 06:59:59.530127,0.018592,tcp,147.32.84.170,43572.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,6,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:00.826239,0.000427,udp,147.32.87.36,55511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,96,152,124.0,0.3870967741935484,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:00:01.102944,0.00038,udp,147.32.87.36,33227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,82,203,142.5,0.28771929824561404,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:00:01.102950,0.000377,udp,147.32.87.36,33227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:00:04.052413,3598.267822,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,16,1440,720,720,90.0,0.5,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:00:04.243985,9.041087,tcp,41.123.45.176,1793.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:00:10.100923,0.000184,udp,147.32.87.36,57581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:00:19.039636,0.000285,udp,147.32.84.138,60234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:00:19.470772,0.232114,tcp,147.32.86.20,4122.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,47,38525,1211,37314,819.6808510638298,0.03143413367942894,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:00:19.529306,0.000354,udp,147.32.84.170,34733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:26.010922,0.000371,udp,109.189.96.108,8813.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:00:26.934858,60.951618,tcp,147.32.84.165,2330.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:00:29.528309,0.000503,udp,147.32.84.170,39728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:29.530380,0.017916,tcp,147.32.84.170,40781.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:33.061324,0.0,tcp,113.105.171.62,80.0,->,147.32.86.120,4169.0,SA_,0.0,,1,66,66,0,66.0,1.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:00:48.174560,0.000384,udp,147.32.84.170,52118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:48.176812,0.224296,tcp,147.32.84.170,39878.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:59.528397,0.00028,udp,147.32.84.170,54826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:00:59.529230,0.000355,udp,147.32.84.170,53090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:00.797361,0.000252,udp,147.32.85.25,37383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:01:09.528362,0.000405,udp,147.32.84.170,36207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:09.529346,0.000269,udp,147.32.84.170,43097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:11.050233,24.832483,udp,147.32.84.229,13363.0,<->,207.177.64.67,28379.0,CON,0.0,0.0,7,3125,240,2885,446.42857142857144,0.0768,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:01:11.339282,0.000135,udp,147.32.85.25,33263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:01:14.066939,0.000259,udp,147.32.84.59,46124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:01:15.502513,442.927094,udp,115.65.56.62,48454.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1129,134,995,282.25,0.11868910540301152,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:01:19.170916,0.000396,udp,147.32.84.170,46022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:19.171898,0.000346,udp,147.32.84.170,47191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:19.528486,0.000263,udp,147.32.84.170,52632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:19.529288,0.000307,udp,147.32.84.170,43571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:19.530333,0.017787,tcp,147.32.84.170,43583.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:21.945247,0.000218,udp,147.32.85.25,32975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:01:23.139720,501.843597,udp,147.32.84.229,13363.0,->,111.251.60.136,43948.0,INT,0.0,,9,3054,3054,0,339.3333333333333,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:01:26.353684,0.000569,udp,46.45.11.222,46227.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1012,75,937,506.0,0.0741106719367589,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:01:27.571890,60.951729,tcp,147.32.84.165,2331.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:01:29.529379,0.000437,udp,147.32.84.170,53595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:29.530562,0.018175,tcp,147.32.84.170,46750.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:35.851174,0.206486,tcp,147.32.86.20,4188.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:01:39.530100,0.000381,udp,147.32.84.170,51701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:39.531207,0.019644,tcp,147.32.84.170,34074.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:45.871188,5.995515,udp,147.32.84.229,13363.0,->,62.163.131.221,37825.0,INT,0.0,,3,546,546,0,182.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:01:49.528409,0.000366,udp,147.32.84.170,57614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:01:59.530490,0.018144,tcp,147.32.84.170,56685.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:01.018707,0.392153,udp,147.32.84.229,13363.0,<->,125.224.67.83,20167.0,CON,0.0,0.0,4,2950,60,2890,737.5,0.020338983050847456,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:01.961595,0.000411,udp,178.95.30.210,31900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,595,77,518,297.5,0.12941176470588237,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:03.196596,0.413178,udp,147.32.84.229,13363.0,<->,124.182.175.90,61640.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:03.823743,0.000428,udp,123.0.32.130,14414.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:06.326032,0.000432,udp,147.32.84.138,50873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:06.848893,0.000236,udp,147.32.85.34,60745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:09.341750,0.00033,udp,147.32.84.59,47163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:09.345317,0.000355,udp,147.32.84.59,34520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:19.528526,0.000333,udp,147.32.84.170,34660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:19.643159,0.000305,udp,147.32.84.138,41905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:21.177131,0.000417,udp,147.32.84.170,59881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:21.178122,0.000322,udp,147.32.84.170,51392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:28.209292,60.952492,tcp,147.32.84.165,2332.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:02:29.528516,0.000306,udp,147.32.84.170,59822.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:29.529384,0.000286,udp,147.32.84.170,46541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:33.817455,2764.412598,udp,68.9.144.75,54767.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,471,233,238,78.5,0.49469214437367304,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:39.529403,0.000239,udp,147.32.84.170,57686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:39.530449,0.018028,tcp,147.32.84.170,40799.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:40.794428,1.5e-05,tcp,147.32.80.7,30100.0,->,147.32.87.4,113.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:02:41.103352,0.16337,udp,147.32.84.229,13363.0,<->,67.222.196.52,36049.0,CON,0.0,0.0,2,595,535,60,297.5,0.8991596638655462,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:44.812955,0.000214,udp,147.32.84.59,42884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:46.261251,50.557842,udp,125.4.24.60,17151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:48.540400,0.000284,udp,147.32.85.25,58188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:49.529469,0.000299,udp,147.32.84.170,47346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:50.143653,0.00021,udp,147.32.84.59,44980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:52.167114,0.000251,udp,147.32.84.170,48223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:52.573133,2820.987549,udp,147.32.84.229,13363.0,<->,136.167.82.200,7194.0,CON,0.0,0.0,6,429,249,180,71.5,0.5804195804195804,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:02:53.685639,0.000216,udp,147.32.85.25,38750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:55.020023,0.000214,udp,147.32.84.138,59702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:02:59.529473,0.000314,udp,147.32.84.170,52675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:02:59.530455,0.017797,tcp,147.32.84.170,38672.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:03:00.648875,0.000269,udp,147.32.84.59,51314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:03:03.176129,0.000531,udp,69.165.143.50,50566.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,999,75,924,499.5,0.07507507507507508,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:03:06.908214,0.000234,udp,147.32.84.138,36277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:03:09.530597,0.017892,tcp,147.32.84.170,40514.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:03:10.200133,0.000278,udp,147.32.84.138,42793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:03:13.608628,3536.852783,tcp,91.42.195.234,49183.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,275,24082,12820,11262,87.5709090909091,0.5323478116435512,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:03:19.529461,0.000409,udp,147.32.84.170,34212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:03:19.530605,0.017897,tcp,147.32.84.170,40521.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:03:25.197314,0.000178,udp,147.32.84.138,60665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:03:28.847443,60.967316,tcp,147.32.84.165,2333.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:03:30.991467,0.000652,udp,94.79.44.66,27580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,947,77,870,473.5,0.08130939809926083,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:03:43.216846,0.000346,udp,147.32.84.59,54059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:03:46.900927,24.679771,icmp,93.219.37.18,259.0,->,147.32.84.229,24027.0,URH,0.0,,2,188,188,0,94.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:03:47.894379,0.000381,udp,41.82.152.118,19751.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:03:49.528735,0.000485,udp,147.32.84.170,59089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:03:50.471647,3002.661133,udp,147.32.84.229,13363.0,<->,75.141.100.93,64877.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:03:52.178063,0.2153,tcp,147.32.84.170,36822.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:08.606943,0.134583,tcp,147.32.86.20,4311.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:04:09.529410,0.000284,udp,147.32.84.170,57580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:10.858892,2.230958,tcp,66.249.66.217,65380.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,10,1731,689,1042,173.1,0.3980358174465627,7,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 07:04:16.860798,0.000239,udp,147.32.84.138,51619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:19.930484,0.179811,udp,147.32.84.171,45148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,78,141,109.5,0.3561643835616438,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:22.166469,0.000338,udp,147.32.84.170,37753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:29.165428,3286.006592,udp,81.90.168.63,64193.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1571,1038,533,130.91666666666666,0.6607256524506684,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:04:29.494734,60.951965,tcp,147.32.84.165,2334.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:04:29.528506,0.000397,udp,147.32.84.170,59707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:39.375515,0.000268,udp,147.32.84.138,36488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:43.527700,0.00029,udp,27.133.188.147,39449.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:04:49.528708,0.000419,udp,147.32.84.170,60353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:49.984085,0.000276,udp,147.32.84.59,48300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:49.985139,0.000279,udp,147.32.84.59,48742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:52.175104,0.000198,udp,147.32.84.170,59474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:52.177042,0.225401,tcp,147.32.84.170,36830.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:04:52.865145,0.000231,udp,147.32.84.138,51428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:04:55.124857,0.100588,tcp,109.230.222.209,26682.0,->,147.32.85.101,80.0,FSPA_FSPA,0.0,0.0,10,1562,988,574,156.2,0.6325224071702945,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:04:59.530768,0.000293,udp,147.32.84.170,56136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:00.518484,0.000243,udp,147.32.84.138,52348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:05:06.424327,0.000201,udp,147.32.85.25,36165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:05:09.528725,0.000397,udp,147.32.84.170,57050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:13.542341,0.000445,udp,76.175.134.56,33652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:14.070974,0.000372,udp,173.67.49.63,2211.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:19.530654,0.018039,tcp,147.32.84.170,41021.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:22.355865,0.000391,udp,147.32.84.138,38620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:05:23.177734,0.000273,udp,147.32.84.170,39702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:23.430443,0.680055,udp,114.32.90.231,53540.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,394,209,185,65.66666666666667,0.5304568527918782,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:24.557945,3006.697266,udp,218.69.11.146,14670.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:29.528776,0.000385,udp,147.32.84.170,47889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:29.530653,0.01777,tcp,147.32.84.170,47535.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:30.104799,0.000419,udp,187.178.37.236,47956.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:30.131950,60.966614,tcp,147.32.84.165,2335.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:05:35.277222,0.000322,udp,219.80.200.27,1028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:39.528787,0.009944,udp,147.32.84.170,55017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:40.874134,3050.45166,udp,193.85.162.208,21869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1519,1200,319,151.9,0.7899934167215273,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:41.455144,3019.805908,udp,173.23.48.188,63324.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:05:48.636293,0.014713,tcp,194.228.227.82,14370.0,->,147.32.84.229,80.0,SRA_SA,0.0,0.0,4,244,182,62,61.0,0.7459016393442623,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:05:49.528785,0.000297,udp,147.32.84.170,42388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:49.529516,0.000378,udp,147.32.84.170,43595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:49.530596,0.018048,tcp,147.32.84.170,43264.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:05:59.530899,0.018592,tcp,147.32.84.170,47539.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:06.199147,3045.523438,udp,221.96.69.139,37630.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:06:06.702125,0.000262,udp,147.32.85.34,52853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:06:09.530692,0.00037,udp,147.32.84.170,38008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:09.531516,0.000369,udp,147.32.84.170,53500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:10.486441,0.000266,udp,147.32.86.20,63545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:06:13.053578,0.000186,udp,147.32.85.25,38711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:06:30.778847,60.971241,tcp,147.32.84.165,2336.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:06:39.529785,0.000296,udp,147.32.84.170,35198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:41.116773,6.013777,udp,147.32.84.229,13363.0,->,213.240.226.79,20349.0,INT,0.0,,3,180,180,0,60.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:06:43.865770,0.00021,udp,147.32.85.25,47239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:06:45.252499,0.572529,tcp,212.79.106.72,57212.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,9,1206,452,754,134.0,0.3747927031509121,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:06:49.528842,0.000398,udp,147.32.84.170,43299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:52.162432,0.0,tcp,64.142.97.114,20346.0,->,147.32.84.77,10000.0,S_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:06:52.162442,0.0,tcp,64.142.97.114,20346.0,->,147.32.84.61,10000.0,S_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:06:52.206458,0.0,tcp,64.142.97.114,20346.0,->,147.32.85.189,10000.0,S_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:06:52.215932,0.0,tcp,64.142.97.114,20346.0,->,147.32.86.24,10000.0,S_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:06:52.264614,0.0,tcp,64.142.97.114,20346.0,->,147.32.87.248,10000.0,S_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:06:53.548850,0.000249,udp,147.32.86.20,50543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:06:54.179521,0.000295,udp,147.32.84.170,34486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:54.181700,0.203812,tcp,147.32.84.170,36846.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:06:59.531906,0.000298,udp,147.32.84.170,60147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:05.266567,1921.216675,udp,65.175.153.197,40018.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3459,120,3339,576.5,0.03469210754553339,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:10.965116,0.000311,udp,112.105.124.103,19708.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:14.145290,0.001696,udp,71.37.158.178,55328.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,533,473,60,266.5,0.8874296435272045,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:17.062866,240.046295,tcp,147.32.84.170,44110.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:17.063261,240.046036,tcp,147.32.84.170,44111.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:17.528990,0.000272,tcp,113.105.171.57,80.0,->,147.32.85.86,39191.0,SA_R,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:07:19.340862,0.000241,udp,147.32.85.25,53069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:07:19.528919,0.000412,udp,147.32.84.170,39770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:24.203576,0.262743,tcp,147.32.84.170,36856.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:28.394986,0.000493,udp,174.76.244.151,58998.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:31.427726,60.95068,tcp,147.32.84.165,2337.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:07:46.892039,0.00037,udp,209.47.13.130,13349.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:49.531046,0.018121,tcp,147.32.84.170,48321.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:07:54.603327,3039.71167,udp,124.13.94.212,29374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:07:59.029621,0.000181,udp,147.32.84.138,33476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:08:09.528964,0.000352,udp,147.32.84.170,34565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:09.530868,0.018564,tcp,147.32.84.170,48324.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:13.211695,0.375992,tcp,147.32.84.170,41897.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:13.851195,0.241186,tcp,147.32.84.170,41900.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:19.529888,0.000377,udp,147.32.84.170,35248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:21.945754,0.000418,udp,147.32.84.59,34148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:08:22.107078,0.000321,udp,147.32.84.59,38986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:08:25.175361,0.000323,udp,147.32.84.170,51406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:32.063991,60.967331,tcp,147.32.84.165,2338.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:08:32.492634,0.000339,udp,99.38.230.124,3799.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,147,86,61,73.5,0.5850340136054422,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:08:35.599404,0.000474,udp,147.32.84.2,43786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,626,86,540,313.0,0.13738019169329074,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:08:39.528979,0.000372,udp,147.32.84.170,46826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:49.529992,0.000374,udp,147.32.84.170,45473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:52.499519,0.000254,udp,147.32.84.59,60251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:08:59.529090,0.000336,udp,147.32.84.170,54040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:08:59.530999,0.017668,tcp,147.32.84.170,44909.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:01.271608,0.000162,udp,147.32.84.138,40503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:09:06.319905,1.364627,tcp,66.249.72.115,49361.0,->,147.32.84.2,21443.0,FSA_FSPA,0.0,0.0,845,802333,20798,781535,949.5065088757397,0.02592190524383267,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:09:09.531123,0.01823,tcp,147.32.84.170,42470.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:11.390602,0.000415,udp,74.7.175.69,23394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:09:14.911697,0.000187,udp,147.32.84.138,50132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:09:18.667383,0.000495,udp,68.231.47.124,30332.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:09:21.285536,0.000176,udp,147.32.84.138,58509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:09:21.300399,0.000302,udp,147.32.84.138,58067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:09:26.176395,0.000275,udp,147.32.84.170,36831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:29.529059,0.000381,udp,147.32.84.170,50684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:32.657588,0.000249,udp,147.32.84.138,49757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:09:32.711491,60.967403,tcp,147.32.84.165,2339.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:09:34.465347,3309.917236,udp,147.32.84.229,13363.0,<->,70.119.245.218,45752.0,CON,0.0,0.0,8,549,294,255,68.625,0.5355191256830601,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:09:39.529939,0.000303,udp,147.32.84.170,33292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:42.556322,0.919132,tcp,147.32.86.20,4598.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,93,94551,1526,93025,1016.6774193548387,0.016139437975272605,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:09:49.529248,0.000397,udp,147.32.84.170,34872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:49.531031,0.018843,tcp,147.32.84.170,48343.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:57.306883,0.025524,udp,147.32.84.170,48908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:09:59.530059,0.000412,udp,147.32.84.170,34176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:10:03.272801,0.000315,udp,147.32.85.25,33223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:10:06.058970,0.000188,tcp,31.44.184.50,64004.0,->,147.32.85.120,80.0,S_,0.0,,1,60,60,0,60.0,1.0,7,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:10:06.188281,0.000221,udp,147.32.87.40,53753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:10:08.948153,1886.8927,udp,87.242.46.141,2743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,496,372,124,124.0,0.75,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:10:09.080049,0.000476,udp,24.66.209.9,3612.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:10:09.531938,0.000424,udp,147.32.84.170,60075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:10:28.175161,0.000286,udp,147.32.84.170,45581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:10:33.359321,60.943405,tcp,147.32.84.165,2340.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:10:40.012558,0.023918,udp,98.217.219.125,18955.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:10:45.807413,0.594111,tcp,147.32.84.164,39323.0,->,210.23.14.75,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,7,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 07:10:54.794964,0.026488,udp,147.32.86.96,53687.0,<->,80.250.21.93,161.0,CON,0.0,0.0,2,236,111,125,118.0,0.4703389830508475,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:00.323080,0.000216,udp,147.32.84.138,48886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:11:01.512026,0.461999,udp,147.32.84.171,40173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:11:03.657218,32.325104,udp,80.117.40.74,58314.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,362,220,142,90.5,0.6077348066298343,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:04.944182,0.000471,udp,210.13.73.222,18557.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:09.529995,0.000343,udp,147.32.84.170,40489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:09.752664,0.0002,udp,147.32.85.25,54373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:11:10.156970,0.000191,udp,147.32.84.138,58638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:11:17.724735,6.035071,udp,86.61.193.41,26757.0,->,147.32.86.114,51546.0,INT,0.0,,3,540,540,0,180.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:11:19.940323,0.022845,tcp,90.183.39.17,58665.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,16,10205,981,9224,637.8125,0.09612934835864773,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:11:23.648388,0.000211,udp,147.32.84.59,35396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:11:25.738425,781.702942,arp,147.32.87.45,,who,147.32.87.1,,CON,,,8,480,240,240,60.0,0.5,7,,flow=Background,Background,-1 2011-08-17 07:11:28.175719,0.000246,udp,147.32.84.170,50711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:29.531345,0.018451,tcp,147.32.84.170,58913.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:30.086810,0.000339,udp,78.239.207.102,10710.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:33.988351,60.950527,tcp,147.32.84.165,2341.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:11:34.434364,33.330334,udp,129.132.31.118,38591.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:39.530585,0.000516,udp,147.32.84.170,37278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:39.532791,0.018287,tcp,147.32.84.170,42490.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:41.549293,3037.411621,udp,174.70.168.160,5308.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:11:49.529165,0.000358,udp,147.32.84.170,35904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:59.177426,0.000279,udp,147.32.84.170,39293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:59.316121,0.000298,udp,147.32.84.170,48543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:11:59.531473,0.017868,tcp,147.32.84.170,48362.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:06.385256,0.000192,udp,147.32.85.34,49965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:12:09.530349,0.000299,udp,147.32.84.170,39344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:15.455690,0.00054,udp,124.248.186.145,17515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,78,471,274.5,0.14207650273224043,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:12:19.529357,0.00036,udp,147.32.84.170,35305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:19.530250,0.000357,udp,147.32.84.170,40233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:21.136240,0.000153,udp,147.32.84.138,51352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:12:25.775659,3599.630859,udp,206.116.234.10,65453.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,407,227,180,67.83333333333333,0.5577395577395577,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:12:29.354196,0.000349,udp,197.128.68.120,29796.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,127,67,60,63.5,0.5275590551181102,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:12:29.530145,0.000316,udp,147.32.84.170,34496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:29.531175,0.017787,tcp,147.32.84.170,48365.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:30.175904,0.000429,udp,147.32.84.170,58081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:30.176941,0.000266,udp,147.32.84.170,57332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:30.178191,0.205904,tcp,147.32.84.170,42373.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:34.624327,60.967087,tcp,147.32.84.165,2342.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:12:34.721867,0.00025,udp,147.32.87.33,47586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:12:48.480345,0.000488,udp,147.32.84.2,49217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,626,86,540,313.0,0.13738019169329074,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:12:49.529392,0.000382,udp,147.32.84.170,47301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:49.530246,0.000317,udp,147.32.84.170,39747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:49.531252,0.01777,tcp,147.32.84.170,44936.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:12:55.513535,0.001738,udp,95.190.87.88,11009.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,540,480,60,270.0,0.8888888888888888,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:12:59.530175,0.00036,udp,147.32.84.170,46992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:01.732949,3074.09375,udp,84.72.125.43,26764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:03.127045,0.00029,udp,147.32.84.21,46094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:13:05.413621,35.405437,tcp,78.45.191.77,56274.0,->,147.32.84.215,443.0,FSPA_FSPA,0.0,0.0,108,84910,3745,81165,786.2037037037037,0.04410552349546579,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:13:05.856511,41.564278,udp,208.88.186.8,34020.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,298,178,120,74.5,0.5973154362416108,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:09.529198,0.000356,udp,147.32.84.170,33809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:09.530099,0.000303,udp,147.32.84.170,54534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:13.222923,0.29317,tcp,147.32.84.170,59247.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:14.673046,0.000242,udp,217.227.19.233,61105.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:19.533404,0.232402,tcp,147.32.86.20,4792.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,45,38892,1091,37801,864.2666666666667,0.028052041550961637,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:13:22.887686,0.000115,udp,147.32.85.25,53845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:13:29.529421,0.000427,udp,147.32.84.170,50782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:31.175535,0.000364,udp,147.32.84.170,49465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:32.938192,0.000287,udp,147.32.85.25,36387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:13:32.985064,0.000277,udp,147.32.85.25,45808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:13:35.268317,0.00078,udp,147.32.84.138,43802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:13:35.271707,60.952232,tcp,147.32.84.165,2343.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:13:42.764185,0.000462,udp,200.50.232.2,25893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,574,77,497,287.0,0.13414634146341464,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:43.096773,0.134987,tcp,147.32.86.20,4812.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,38,29241,1033,28208,769.5,0.035327109195991926,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:13:47.168625,0.000491,udp,210.245.52.73,39169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1017,78,939,508.5,0.07669616519174041,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:48.449928,0.000528,udp,94.174.99.163,2161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,546,75,471,273.0,0.13736263736263737,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:49.529451,0.000433,udp,147.32.84.170,53553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:49.530417,0.000401,udp,147.32.84.170,59782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:56.142147,1.131633,udp,113.104.200.30,21099.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,404,219,185,67.33333333333333,0.5420792079207921,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:56.239354,2611.564453,udp,147.32.84.229,13363.0,<->,66.31.194.202,8623.0,CON,0.0,0.0,8,873,627,246,109.125,0.718213058419244,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:59.198371,3487.020752,udp,195.250.153.2,21578.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3180,2256,924,132.5,0.7094339622641509,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:13:59.529308,0.000335,udp,147.32.84.170,57659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:13:59.530156,0.000408,udp,147.32.84.170,45367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:14:07.190109,0.000248,udp,147.32.85.34,59424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:14:17.069187,960.604553,udp,210.71.213.151,15604.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1220,1039,181,203.33333333333334,0.851639344262295,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:14:28.570626,60.187824,tcp,147.32.84.59,50615.0,->,74.125.232.194,80.0,SRPA_SPA,0.0,0.0,46,37634,2030,35604,818.1304347826087,0.0539405856406441,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:14:29.529526,0.00033,udp,147.32.84.170,54976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:14:34.648372,0.000233,udp,147.32.85.25,38544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:14:34.998722,0.042368,udp,90.176.200.218,10123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,256,167,89,128.0,0.65234375,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:14:35.909254,60.952797,tcp,147.32.84.165,2344.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:14:39.530491,0.000308,udp,147.32.84.170,53876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:14:44.033766,0.000433,udp,147.32.86.20,55426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:14:46.066679,0.00036,udp,147.32.84.138,44884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:14:49.531561,0.018289,tcp,147.32.84.170,47445.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:14:49.832723,0.000117,udp,147.32.85.25,34348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:14:57.035432,0.000467,udp,147.32.86.20,56890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:02.179264,0.000374,udp,147.32.84.170,49842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:15:02.180283,0.299832,tcp,147.32.84.170,54773.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:15:03.583154,31.055513,tcp,38.101.148.126,54908.0,->,147.32.85.34,80.0,SRPA_FSPA,0.0,0.0,14,8228,747,7481,587.7142857142857,0.09078755469129801,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:15:12.672728,0.000332,udp,147.32.84.138,42185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:16.430253,0.0,tcp,147.32.84.165,2345.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.430519,0.0,tcp,147.32.84.165,2346.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.437364,0.0,tcp,147.32.84.165,2348.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.607845,0.0,tcp,147.32.84.165,2349.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.608174,0.0,tcp,147.32.84.165,2350.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.627720,0.0,tcp,147.32.84.165,2352.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.695172,1.170452,tcp,212.232.6.11,49231.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1474,786,688,73.7,0.5332428765264586,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:15:16.807922,0.0,tcp,147.32.84.165,2353.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:16.808122,0.0,tcp,147.32.84.165,2354.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:17.306440,2.419985,udp,217.118.83.236,25068.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1420,1300,120,355.0,0.9154929577464789,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:15:17.419351,0.0,tcp,147.32.84.165,2356.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:17.519332,0.0,tcp,147.32.84.165,2357.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:19.531600,0.01776,tcp,147.32.84.170,40653.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:15:25.628599,0.000133,udp,147.32.85.25,48744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:25.718714,0.000422,udp,147.32.85.25,52708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:27.007093,21.597443,tcp,147.32.86.89,3395.0,->,77.75.77.154,80.0,FSPA_FSPA,0.0,0.0,20,11058,998,10060,552.9,0.0902514017001266,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:15:30.237069,0.0,tcp,147.32.84.165,2583.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.237083,0.0,tcp,147.32.84.165,2584.0,->,147.33.84.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.237088,0.0,tcp,147.32.84.165,2581.0,->,192.168.0.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.237092,0.0,tcp,147.32.84.165,2587.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.237149,0.0,tcp,147.32.84.165,2588.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.237160,0.0,tcp,147.32.84.165,2585.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:30.838460,0.0,tcp,147.32.84.165,2595.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:36.995913,0.060817,udp,147.32.84.229,13363.0,<->,82.45.85.192,14635.0,CON,0.0,0.0,4,2914,60,2854,728.5,0.02059025394646534,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:15:39.073695,0.000311,udp,147.32.84.138,44132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:39.540438,0.000428,udp,147.32.84.170,57463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:15:42.254358,0.0,tcp,147.32.84.165,2825.0,->,147.33.84.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.254502,0.0,tcp,147.32.84.165,2822.0,->,192.168.0.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.254627,60.952477,tcp,147.32.84.165,2749.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:15:42.254729,0.0,tcp,147.32.84.165,2824.0,->,147.32.79.120,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.254796,0.0,tcp,147.32.84.165,2829.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.254863,0.0,tcp,147.32.84.165,2826.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.569157,0.0,tcp,147.32.84.165,2832.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.855146,0.0,tcp,147.32.84.165,2837.0,->,147.33.84.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:42.855299,0.0,tcp,147.32.84.165,2834.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:49.061643,0.0002,udp,147.32.84.138,34143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:15:49.280265,0.000649,udp,78.185.147.33,11534.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,591,79,512,295.5,0.13367174280879865,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:15:53.924240,0.000446,udp,219.124.35.27,61802.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:15:54.272241,0.0,tcp,147.32.84.165,3064.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.272254,0.0,tcp,147.32.84.165,3065.0,->,147.33.84.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.272305,0.0,tcp,147.32.84.165,3062.0,->,192.168.0.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.272481,0.0,tcp,147.32.84.165,3068.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.272493,0.0,tcp,147.32.84.165,3069.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.272574,0.0,tcp,147.32.84.165,3066.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:54.872927,0.0,tcp,147.32.84.165,3076.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:15:59.531630,0.018425,tcp,147.32.84.170,37270.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:04.179852,0.000475,udp,147.32.84.170,49914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:04.182092,0.337264,tcp,147.32.84.170,54781.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:06.289313,0.0,tcp,147.32.84.165,3305.0,->,147.33.84.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.289328,0.0,tcp,147.32.84.165,3302.0,->,192.168.0.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.289456,0.0,tcp,147.32.84.165,3304.0,->,147.32.79.240,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.289472,0.0,tcp,147.32.84.165,3309.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.289477,0.0,tcp,147.32.84.165,3306.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.289564,0.0,tcp,147.32.84.165,3308.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.890235,0.0,tcp,147.32.84.165,3317.0,->,147.33.84.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:06.890373,0.0,tcp,147.32.84.165,3314.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:07.358022,0.000216,udp,147.32.85.25,57338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:09.529704,0.000505,udp,147.32.84.170,51073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:11.790112,0.000462,udp,147.32.86.20,63644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:17.505816,3.676168,tcp,213.146.189.237,42204.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,24,3424,1847,1577,142.66666666666666,0.539427570093458,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:16:18.306554,0.0,tcp,147.32.84.165,3500.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:18.306569,0.0,tcp,147.32.84.165,3498.0,->,192.168.1.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:18.306732,0.0,tcp,147.32.84.165,3503.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:18.306746,0.0,tcp,147.32.84.165,3501.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:18.306831,0.0,tcp,147.32.84.165,3506.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:18.907614,0.0,tcp,147.32.84.165,3507.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:19.512845,1978.337036,udp,147.32.84.229,13363.0,<->,78.141.181.223,34059.0,CON,0.0,0.0,8,998,746,252,124.75,0.7474949899799599,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:19.530785,0.000336,udp,147.32.84.170,56536.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:19.531796,0.018077,tcp,147.32.84.170,37273.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:19.911767,0.000427,udp,147.32.84.59,51534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:21.013053,0.000158,udp,147.32.84.138,39173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:22.648632,0.000377,udp,147.32.85.25,50472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:25.076863,0.000426,udp,67.160.196.18,16274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,75,473,274.0,0.13686131386861314,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:25.213069,0.000155,udp,147.32.84.59,37229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:25.860823,16.580807,tcp,147.32.84.59,49176.0,->,147.32.80.7,80.0,FSPA_FSPA,0.0,0.0,10,1562,442,1120,156.2,0.28297055057618437,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:16:30.324116,0.0,tcp,147.32.84.165,3680.0,->,147.32.80.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.324190,0.0,tcp,147.32.84.165,3678.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.324357,0.0,tcp,147.32.84.165,3683.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.324371,0.0,tcp,147.32.84.165,3681.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.324470,0.0,tcp,147.32.84.165,3686.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.324479,0.0,tcp,147.32.84.165,3684.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:30.925024,0.0,tcp,147.32.84.165,3689.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:37.856197,2524.822021,udp,24.209.148.113,3488.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:39.529794,0.000387,udp,147.32.84.170,52243.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:40.458645,0.000251,udp,147.32.84.138,55049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:16:42.341258,0.0,tcp,147.32.84.165,3858.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.341500,0.0,tcp,147.32.84.165,3860.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.341515,0.0,tcp,147.32.84.165,3861.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.341521,0.0,tcp,147.32.84.165,3863.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.341681,0.0,tcp,147.32.84.165,3864.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.942535,0.0,tcp,147.32.84.165,3869.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:42.942661,0.0,tcp,147.32.84.165,3867.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:49.221970,0.000345,udp,84.52.172.147,2204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,252,190,62,126.0,0.753968253968254,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:49.531974,0.018272,tcp,147.32.84.170,37277.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:16:51.455739,2.006575,udp,110.86.22.190,13663.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1098,146,952,274.5,0.13296903460837886,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:52.748592,552.232178,udp,147.32.84.229,13363.0,<->,70.160.62.46,36087.0,CON,0.0,0.0,8,562,315,247,70.25,0.5604982206405694,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:16:54.358396,60.958607,tcp,147.32.84.165,3897.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:16:54.358579,0.0,tcp,147.32.84.165,4041.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:54.358593,0.0,tcp,147.32.84.165,4039.0,->,192.168.1.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:54.358743,0.0,tcp,147.32.84.165,4044.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:54.358757,0.0,tcp,147.32.84.165,4042.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:54.678195,0.0,tcp,147.32.84.165,4047.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:54.959766,0.0,tcp,147.32.84.165,4048.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:16:59.531845,0.018214,tcp,147.32.84.170,37278.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:03.357642,0.000223,udp,147.32.85.25,38892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:05.179697,0.228495,tcp,147.32.84.170,54789.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:06.376114,0.0,tcp,147.32.84.165,4189.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:06.376303,0.0,tcp,147.32.84.165,4191.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:06.376415,0.0,tcp,147.32.84.165,4193.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:06.376522,0.0,tcp,147.32.84.165,4195.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:06.378056,0.0,tcp,147.32.84.165,4197.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:06.977132,0.0,tcp,147.32.84.165,4199.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:07.040482,0.1349,tcp,147.32.86.20,4997.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:17:09.779375,0.000231,udp,147.32.85.89,37266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:10.693232,104.445602,udp,18.98.6.167,23550.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:17:10.821705,0.000302,udp,147.32.84.138,36495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:10.980337,6.961717,tcp,74.115.1.92,49228.0,->,147.32.85.100,3126.0,S_,0.0,,7,546,546,0,78.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:17:12.418010,0.00018,udp,147.32.84.59,53905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:18.393872,0.0,tcp,147.32.84.165,4310.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:18.394108,0.0,tcp,147.32.84.165,4312.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:18.994005,0.0,tcp,147.32.84.165,4316.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:18.994193,0.0,tcp,147.32.84.165,4318.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:18.994299,0.0,tcp,147.32.84.165,4320.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:27.356201,0.000227,udp,147.32.86.20,52637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:29.531699,0.017803,tcp,147.32.84.170,51679.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:30.410918,0.0,tcp,147.32.84.165,4430.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:30.411131,0.0,tcp,147.32.84.165,4432.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:30.411243,0.0,tcp,147.32.84.165,4434.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:31.011791,0.0,tcp,147.32.84.165,4436.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:31.011805,0.0,tcp,147.32.84.165,4438.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:34.357178,41.26952,tcp,208.54.37.196,46500.0,->,147.32.84.229,443.0,SRA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:17:35.478996,0.206133,tcp,147.32.86.20,1047.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:17:39.529916,0.000382,udp,147.32.84.170,58661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:42.428015,0.0,tcp,147.32.84.165,4550.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:42.428251,0.0,tcp,147.32.84.165,4552.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:42.428265,0.0,tcp,147.32.84.165,4554.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:43.028770,0.0,tcp,147.32.84.165,4556.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:43.028934,0.0,tcp,147.32.84.165,4558.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:46.246711,1069.568115,udp,72.211.173.168,6075.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,971,481,490,121.375,0.49536560247167866,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:17:49.530889,0.000276,udp,147.32.84.170,42103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:49.531943,0.017677,tcp,147.32.84.170,43231.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:17:52.544458,0.206754,tcp,147.32.86.20,1062.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,29039,969,28070,784.8378378378378,0.033368917662453944,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:17:53.353182,0.000286,udp,147.32.84.138,50813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:17:54.445567,0.0,tcp,147.32.84.165,4670.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:54.445777,0.0,tcp,147.32.84.165,4672.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:54.445791,0.0,tcp,147.32.84.165,4674.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:55.046383,60.942593,tcp,147.32.84.165,4695.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:17:55.046583,0.0,tcp,147.32.84.165,4676.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:17:55.046597,0.0,tcp,147.32.84.165,4678.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.463174,0.0,tcp,147.32.84.165,4791.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.463344,0.0,tcp,147.32.84.165,4790.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.463422,0.0,tcp,147.32.84.165,4793.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.463496,0.0,tcp,147.32.84.165,4792.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.463573,0.0,tcp,147.32.84.165,4795.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:06.998176,0.000251,udp,147.32.85.34,63005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:18:07.008290,0.000346,udp,147.32.85.34,59309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:18:07.063936,0.0,tcp,147.32.84.165,4796.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:07.064081,0.0,tcp,147.32.84.165,4797.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:07.064149,0.0,tcp,147.32.84.165,4798.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:07.064218,0.0,tcp,147.32.84.165,4799.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:07.064289,0.0,tcp,147.32.84.165,4800.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:09.532007,0.017959,tcp,147.32.84.170,55567.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:18:13.599462,0.234707,tcp,147.32.84.170,49138.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:18:18.480476,0.0,tcp,147.32.84.165,4911.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:18.480655,0.0,tcp,147.32.84.165,4913.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:18.480725,0.0,tcp,147.32.84.165,4915.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:19.081384,0.0,tcp,147.32.84.165,4917.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:19.081490,0.0,tcp,147.32.84.165,4919.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:19.531456,0.000391,udp,147.32.84.170,59155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:18:22.330545,0.000321,udp,147.32.84.138,56263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:18:24.575674,0.000242,udp,147.32.85.25,53771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:18:28.825927,0.000316,udp,213.209.160.225,31420.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,126,66,60,63.0,0.5238095238095238,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:18:30.497724,0.0,tcp,147.32.84.165,1073.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:30.497918,0.0,tcp,147.32.84.165,1075.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:30.497934,0.0,tcp,147.32.84.165,1077.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:31.098399,0.0,tcp,147.32.84.165,1079.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:31.098508,0.0,tcp,147.32.84.165,1081.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:32.782113,1934.091553,udp,109.120.196.11,5707.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,3454,356,3098,287.8333333333333,0.10306890561667632,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:18:39.913749,0.000109,udp,147.32.84.138,46399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:18:41.318344,0.003395,udp,180.183.39.139,39817.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:18:42.514416,0.0,tcp,147.32.84.165,1193.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:42.514546,0.0,tcp,147.32.84.165,1192.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:42.514606,0.0,tcp,147.32.84.165,1195.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:42.514655,0.0,tcp,147.32.84.165,1194.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:42.514712,0.0,tcp,147.32.84.165,1197.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:43.116079,0.0,tcp,147.32.84.165,1198.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:43.116187,0.0,tcp,147.32.84.165,1199.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:43.116202,0.0,tcp,147.32.84.165,1200.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:43.116290,0.0,tcp,147.32.84.165,1201.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:43.116304,0.0,tcp,147.32.84.165,1202.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:44.139816,0.028381,udp,147.32.84.229,13363.0,<->,139.30.43.31,53570.0,CON,0.0,0.0,2,153,60,93,76.5,0.39215686274509803,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:18:44.914321,7.734432,tcp,60.248.150.212,80.0,->,147.32.84.50,57701.0,SA_,0.0,,2,120,120,0,60.0,1.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:18:47.002229,5.436302,tcp,147.32.86.89,3640.0,->,77.75.76.107,80.0,FSPA_FSPA,0.0,0.0,16,5238,1600,3638,327.375,0.30546009927453227,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:18:54.532183,0.0,tcp,147.32.84.165,1313.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:54.532200,0.0,tcp,147.32.84.165,1312.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:54.532204,0.0,tcp,147.32.84.165,1315.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:54.532363,0.0,tcp,147.32.84.165,1314.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:54.532378,0.0,tcp,147.32.84.165,1317.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:55.132726,0.0,tcp,147.32.84.165,1318.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:55.132822,0.0,tcp,147.32.84.165,1319.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:55.132836,0.0,tcp,147.32.84.165,1320.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:55.132877,0.0,tcp,147.32.84.165,1321.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:55.132971,0.0,tcp,147.32.84.165,1322.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:18:57.979899,0.000205,udp,147.32.84.59,36467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:19:06.549661,0.0,tcp,147.32.84.165,1434.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:06.549675,60.969044,tcp,147.32.84.165,1344.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:19:06.549807,0.0,tcp,147.32.84.165,1433.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:06.549821,0.0,tcp,147.32.84.165,1436.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:06.549826,0.0,tcp,147.32.84.165,1435.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:06.869713,0.0,tcp,147.32.84.165,1438.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.150338,0.0,tcp,147.32.84.165,1439.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.150352,0.0,tcp,147.32.84.165,1440.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.150357,0.0,tcp,147.32.84.165,1441.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.150407,0.0,tcp,147.32.84.165,1442.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.150412,0.0,tcp,147.32.84.165,1443.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:07.168322,0.000246,udp,147.32.84.170,51147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:15.089842,0.000154,udp,147.32.84.138,35707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:19:18.567124,0.0,tcp,147.32.84.165,1554.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:18.567194,0.0,tcp,147.32.84.165,1553.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:18.567315,0.0,tcp,147.32.84.165,1556.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:18.567426,0.0,tcp,147.32.84.165,1555.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:18.567432,0.0,tcp,147.32.84.165,1558.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.167620,0.0,tcp,147.32.84.165,1559.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.167693,0.0,tcp,147.32.84.165,1560.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.167699,0.0,tcp,147.32.84.165,1561.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.167844,0.0,tcp,147.32.84.165,1562.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.167859,0.0,tcp,147.32.84.165,1563.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:19.530893,0.00036,udp,147.32.84.170,33316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:19.532004,0.017836,tcp,147.32.84.170,49634.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:20.682953,0.001506,udp,122.134.32.151,59295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,543,483,60,271.5,0.8895027624309392,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:19:22.772637,0.922726,tcp,67.195.115.23,45785.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,14,5667,862,4805,404.7857142857143,0.1521086994882654,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:19:22.831491,0.006734,icmp,204.123.28.55,8.0,<->,147.32.84.1,4.0,ECO,0.0,0.0,2,120,60,60,60.0,0.5,7,1,flow=Background,Background,-1 2011-08-17 07:19:30.583802,0.0,tcp,147.32.84.165,1674.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:30.584026,0.0,tcp,147.32.84.165,1673.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:30.584088,0.0,tcp,147.32.84.165,1676.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:30.584257,0.0,tcp,147.32.84.165,1675.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:30.584271,0.0,tcp,147.32.84.165,1678.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:31.185011,0.0,tcp,147.32.84.165,1679.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:31.185150,0.0,tcp,147.32.84.165,1680.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:31.185165,0.0,tcp,147.32.84.165,1681.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:31.185295,0.0,tcp,147.32.84.165,1682.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:31.185310,0.0,tcp,147.32.84.165,1683.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:19:38.214936,1579.832397,udp,147.32.84.229,13363.0,<->,213.21.8.97,58817.0,CON,0.0,0.0,18,2617,1513,1104,145.38888888888889,0.5781429117309896,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:19:39.530094,0.000434,udp,147.32.84.170,58566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:42.277572,10.004346,udp,82.189.122.214,24702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:19:47.691473,3019.476807,udp,113.80.19.114,1316.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:19:49.531156,0.000213,udp,147.32.84.170,54469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:49.532154,0.01777,tcp,147.32.84.170,49638.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:19:49.641703,0.009859,udp,203.248.117.3,45632.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,246,175,71,123.0,0.7113821138211383,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:19:54.801676,0.00024,udp,147.32.85.89,51396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:00.133193,0.000236,udp,147.32.84.138,43443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:02.442023,0.005476,tcp,147.32.86.92,48485.0,->,147.32.87.40,4949.0,_SPA,,0.0,4,350,0,350,87.5,0.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:20:03.549978,0.000253,udp,147.32.84.59,58292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:05.919559,0.001837,udp,24.13.139.100,55168.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:20:06.914906,0.000233,udp,147.32.85.34,58399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:07.166778,0.000238,udp,147.32.84.170,35557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:07.167898,0.217703,tcp,147.32.84.170,56079.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:07.198872,60.9664,tcp,147.32.84.165,1695.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:20:09.532274,0.017842,tcp,147.32.84.170,48792.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:09.614244,0.0,tcp,186.178.65.64,26468.0,?>,147.32.84.171,51714.0,RA_,0.0,,1,60,60,0,60.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:20:13.729839,0.000325,udp,147.32.84.59,49419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:19.531114,0.000299,udp,147.32.84.170,44195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:19.532137,0.018631,tcp,147.32.84.170,41433.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:22.112563,0.019977,udp,147.32.84.170,44486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:22.170393,0.000309,udp,147.32.84.170,43304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:33.413912,0.613063,tcp,147.32.84.171,56297.0,->,82.8.93.128,33858.0,SRPA_FSRPA,0.0,0.0,12,1530,602,928,127.5,0.3934640522875817,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:20:34.962258,0.0,tcp,111.92.233.174,80.0,->,147.32.84.68,33571.0,SA_,0.0,,1,62,62,0,62.0,1.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:20:37.167145,0.000327,udp,147.32.84.170,60788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:39.551541,0.017911,tcp,147.32.84.170,48798.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:42.992908,0.000221,udp,147.32.84.138,53986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:20:46.225011,0.000321,udp,38.104.224.174,38903.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:20:48.569455,0.0,igmp,147.32.87.1,,->,224.0.0.1,,INT,192.0,,1,60,60,0,60.0,1.0,7,,flow=Background,Background,-1 2011-08-17 07:20:49.132480,1752.539795,udp,113.251.104.137,40596.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:20:49.530240,0.00031,udp,147.32.84.170,47153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:49.531092,0.000299,udp,147.32.84.170,37596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:20:55.211893,0.003092,udp,46.45.248.197,46205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:20:57.799136,0.309307,tcp,147.32.86.20,1232.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:20:59.531206,0.000335,udp,147.32.84.170,55673.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:05.544853,0.000385,udp,147.32.85.5,38975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:07.180198,0.245707,tcp,147.32.84.170,56089.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:07.845745,60.967075,tcp,147.32.84.165,1696.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:21:09.532424,0.017835,tcp,147.32.84.170,41442.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:13.490127,0.000153,udp,147.32.85.25,42969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:28.830349,20.687351,udp,147.32.84.229,13363.0,<->,67.205.200.63,36040.0,CON,0.0,0.0,6,796,614,182,132.66666666666666,0.7713567839195979,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:21:33.061852,3121.616211,udp,109.91.254.65,59739.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,3560,2948,612,222.5,0.8280898876404494,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:21:37.607447,0.000163,udp,147.32.84.186,43434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:38.164466,0.000261,udp,147.32.84.170,45217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:38.720209,0.00026,udp,147.32.84.138,36063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:39.530487,0.000315,udp,147.32.84.170,50467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:47.993878,0.000169,udp,147.32.84.138,46505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:49.532272,0.018366,tcp,147.32.84.170,49656.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:21:55.491943,0.00037,udp,147.32.86.20,63208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:21:56.561607,138.215836,tcp,62.12.86.155,47586.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,42,4372,1841,2531,104.0952380952381,0.4210887465690759,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:22:04.855297,0.000454,udp,220.255.145.66,56958.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:06.738199,0.000215,udp,147.32.85.34,61681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:06.763579,0.000318,udp,147.32.85.34,54577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:08.180066,0.215908,tcp,147.32.84.170,56098.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:22:08.492963,60.952366,tcp,147.32.84.165,1727.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:22:09.530165,0.000369,udp,147.32.84.170,33336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:22:16.580945,0.000184,udp,147.32.84.138,58612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:17.569827,0.012674,udp,147.32.84.59,63577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,73,121,97.0,0.37628865979381443,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:19.532915,0.017981,tcp,147.32.84.170,55609.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:22:19.581553,0.000321,udp,109.191.139.168,49843.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,713,73,640,356.5,0.10238429172510519,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:24.669140,0.000343,udp,98.176.147.200,60970.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:33.948073,0.044928,udp,147.32.84.229,13363.0,<->,129.241.62.200,23167.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:35.512825,0.000188,udp,147.32.85.25,50141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:42.939898,3583.898926,udp,94.219.211.101,42016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1659,1225,434,118.5,0.7383966244725738,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:49.530530,0.000389,udp,147.32.84.170,55603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:22:49.531402,0.000338,udp,147.32.84.170,56050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:22:49.843853,3047.011719,udp,86.100.73.199,63360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:51.554236,0.000409,udp,147.32.86.20,59284.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:22:52.993495,3590.779785,udp,147.32.84.229,13363.0,<->,94.112.102.168,45158.0,CON,0.0,0.0,127,20336,10006,10330,160.1259842519685,0.49203383162863884,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:22:58.157412,0.000721,udp,175.181.108.56,42852.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:00.560415,0.001823,udp,24.131.180.123,58165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,501,60,280.5,0.893048128342246,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:03.578998,0.165347,udp,147.32.84.229,13363.0,<->,206.83.31.76,28733.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:09.130964,60.952122,tcp,147.32.84.165,1728.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:23:09.172801,0.000319,udp,147.32.84.170,49731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:09.174016,0.218633,tcp,147.32.84.170,58292.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:10.911119,0.000412,udp,147.32.85.25,46334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:23:11.355147,0.000438,udp,184.18.68.88,5763.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:13.754463,0.246469,tcp,147.32.84.170,38759.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:14.007057,0.306155,tcp,147.32.84.170,49458.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:14.301063,0.000222,udp,147.32.84.138,44515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:23:21.100008,7.99156,udp,147.32.87.48,3989.0,->,147.32.86.234,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,7,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:23:21.152365,0.000259,udp,147.32.85.25,54346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:23:21.463780,0.000131,udp,147.32.84.138,35435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:23:24.242358,1809.613281,udp,83.158.5.21,35342.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,711,525,186,118.5,0.7383966244725738,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:25.681606,0.206044,tcp,147.32.86.20,1368.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:23:29.003617,2550.114502,udp,147.32.84.229,13363.0,<->,173.17.163.210,34574.0,CON,0.0,0.0,7,5775,120,5655,825.0,0.02077922077922078,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:29.414676,0.000358,udp,147.32.84.59,47050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:23:30.092312,0.000564,udp,67.167.10.142,5692.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,957,75,882,478.5,0.07836990595611286,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:23:37.679607,0.188129,tcp,147.32.86.89,4102.0,->,77.75.76.3,80.0,SRPA_SPA,0.0,0.0,41,35907,3374,32533,875.780487804878,0.09396496504859776,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:23:39.530630,0.000537,udp,147.32.84.170,48987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:39.532731,0.01802,tcp,147.32.84.170,37792.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:49.531451,0.000298,udp,147.32.84.170,59711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:23:54.471886,8.863858,tcp,147.32.84.59,49202.0,->,194.50.240.71,443.0,SRPA_SPA,0.0,0.0,25,12346,3289,9057,493.84,0.2664020735460878,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:23:59.532497,0.017897,tcp,147.32.84.170,48899.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:24:01.029629,0.000238,udp,147.32.84.138,58465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:24:06.595390,0.000364,udp,147.32.85.34,65337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:24:09.768650,60.950996,tcp,147.32.84.165,1729.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:24:10.691709,0.000438,udp,196.210.181.191,55448.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:24:13.518311,0.000384,udp,174.107.198.12,4082.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,154,87,67,77.0,0.564935064935065,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:24:19.532725,0.018031,tcp,147.32.84.170,47123.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:24:20.671314,0.006308,udp,24.85.235.26,11771.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2918,60,2858,729.5,0.0205620287868403,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:24:21.790367,0.125774,tcp,147.32.86.178,2338.0,->,147.32.87.4,110.0,_FSPA,,0.0,18,1394,0,1394,77.44444444444444,0.0,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:24:31.497153,0.30838,tcp,147.32.86.20,1427.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:24:42.800874,0.000225,udp,147.32.84.138,46450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:24:46.813730,0.000372,udp,184.59.185.149,12748.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:24:48.527464,0.000249,udp,147.32.85.25,43039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:24:54.993344,87.934593,tcp,147.32.84.59,49219.0,->,89.174.31.5,443.0,SRPA_FSPA,0.0,0.0,165,83007,49034,33973,503.07272727272726,0.5907212644716711,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:24:55.061621,3418.946777,udp,216.228.218.22,44366.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3160,238,2922,526.6666666666666,0.07531645569620253,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:00.175807,5.008083,tcp,147.32.86.89,4122.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,2834,1080,1754,257.6363636363636,0.38108680310515175,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:25:05.624830,0.206256,tcp,147.32.86.20,1456.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:25:09.531532,0.00039,udp,147.32.84.170,42947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:10.405484,60.942242,tcp,147.32.84.165,1730.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:25:11.017909,3170.628906,udp,147.32.84.229,13363.0,<->,122.130.136.93,49067.0,CON,0.0,0.0,7,3102,204,2898,443.14285714285717,0.06576402321083172,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:13.842141,0.000227,udp,147.32.85.25,38266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:25:19.254932,3593.457275,udp,115.249.36.225,30498.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1124,167,957,281.0,0.148576512455516,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:19.530603,0.000474,udp,147.32.84.170,58512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:21.606252,0.001558,udp,207.118.35.55,6253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:24.035950,0.00022,udp,147.32.85.25,33180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:25:29.532913,0.018301,tcp,147.32.84.170,39545.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:34.088809,0.000184,udp,147.32.84.138,34419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:25:34.550685,0.000219,udp,147.32.85.25,49872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:25:41.179251,0.000444,udp,147.32.84.170,41852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:49.387035,222.909775,tcp,117.4.48.31,34431.0,->,147.32.84.2,80.0,FSA_FSA,0.0,0.0,17,1230,584,646,72.3529411764706,0.47479674796747967,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:25:49.531773,0.000326,udp,147.32.84.170,55933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:51.573265,2462.048584,udp,81.24.80.116,59990.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:54.833330,0.000292,udp,62.199.162.87,20555.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:56.616190,76.521675,udp,109.205.114.194,10652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3801,768,3033,158.375,0.20205209155485399,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:25:59.530847,0.000359,udp,147.32.84.170,44195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:25:59.531726,0.000482,udp,147.32.84.170,35952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:00.630368,0.000237,udp,147.32.84.138,37577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:26:06.563534,0.000342,udp,147.32.85.34,63746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:26:11.033350,60.967838,tcp,147.32.84.165,1731.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:26:12.179579,0.000307,udp,147.32.84.170,58393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:14.825081,0.000196,udp,147.32.84.138,33142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:26:18.102213,2865.989502,udp,76.16.120.236,4563.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1180,999,181,196.66666666666666,0.8466101694915255,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:26:23.626638,0.000358,udp,147.32.86.20,55105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:26:29.532960,0.000375,udp,147.32.84.170,58211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:39.531923,0.000305,udp,147.32.84.170,39077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:43.178865,0.000295,udp,147.32.84.170,59770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:49.407031,15.900199,tcp,147.32.86.89,4141.0,->,77.75.72.6,80.0,FSPA_FSPA,0.0,0.0,11,1729,960,769,157.1818181818182,0.5552342394447658,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:26:49.532891,0.000285,udp,147.32.84.170,46517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:26:51.248906,0.000278,udp,147.32.85.25,38225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:26:55.314937,0.206026,tcp,147.32.86.20,1552.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:26:59.532865,0.000289,udp,147.32.84.170,58708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:00.059456,0.000304,udp,68.12.186.96,44096.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:01.493651,0.000469,udp,31.167.92.189,63698.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:03.440787,0.309389,tcp,147.32.86.20,1559.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,32,26439,798,25641,826.21875,0.030182684670373314,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:27:06.631871,0.000438,udp,114.173.47.101,23441.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:09.533795,0.017914,tcp,147.32.84.170,42217.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:10.531652,0.000184,udp,147.32.84.138,59372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:27:11.681638,60.953545,tcp,147.32.84.165,1732.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:27:14.183099,0.000243,udp,147.32.84.170,44189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:14.185144,0.20914,tcp,147.32.84.170,58331.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:17.065675,240.04718,tcp,147.32.84.170,55431.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:17.066706,240.046768,tcp,147.32.84.170,55433.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:19.022622,3390.946533,udp,147.32.84.229,13363.0,<->,220.150.140.164,22836.0,CON,0.0,0.0,6,3486,136,3350,581.0,0.03901319563970167,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:19.532671,0.000384,udp,147.32.84.170,33096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:22.084211,1.139529,tcp,66.65.55.135,52320.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,63,59492,1800,57692,944.3174603174604,0.030256168896658373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:27:26.991136,535.118225,udp,147.32.84.229,13363.0,<->,74.93.30.133,36342.0,CON,0.0,0.0,5,2995,144,2851,599.0,0.048080133555926545,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:28.409881,0.000231,udp,147.32.85.25,56597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:27:29.532860,0.000271,udp,147.32.84.170,38074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:29.533903,0.018516,tcp,147.32.84.170,42226.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:36.699262,0.00029,udp,147.32.84.138,45850.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:27:41.557059,3.001086,tcp,147.32.84.21,41054.0,->,74.125.39.109,,S_,0.0,,2,148,148,0,74.0,1.0,7,,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:27:44.183627,0.211675,tcp,147.32.84.170,58341.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:46.568389,0.00027,udp,147.32.84.138,40565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:27:49.985360,25.062134,udp,121.97.191.64,59292.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:27:53.578856,0.0002,udp,147.32.84.138,56078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:27:59.532119,0.000406,udp,147.32.84.170,34256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:27:59.555575,0.000382,udp,86.180.27.154,26676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,158,92,66,79.0,0.5822784810126582,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:28:09.532086,0.000502,udp,147.32.84.170,40099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:28:12.320817,60.950508,tcp,147.32.84.165,1733.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:28:14.173937,0.000321,udp,147.32.84.170,53319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:28:19.166042,0.000257,udp,147.32.85.25,33916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:28:36.615173,2494.446533,udp,92.255.237.55,42764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1109,558,551,277.25,0.503155996393147,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:28:39.532217,0.000435,udp,147.32.84.170,52600.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:28:39.533147,0.000454,udp,147.32.84.170,35425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:28:44.178032,0.00034,udp,147.32.84.170,58458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:28:46.019280,0.001615,udp,78.184.194.122,25730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,487,60,273.5,0.8903107861060329,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:28:48.880830,2500.401367,udp,77.67.32.12,30445.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,642,456,186,107.0,0.7102803738317757,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:28:59.802750,0.000157,udp,147.32.85.25,59165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:29:12.956816,60.967064,tcp,147.32.84.165,1734.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:29:19.444479,19.284853,tcp,133.1.56.11,50616.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,349,348332,7981,340351,998.0859598853868,0.022912049424112627,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:29:19.533195,0.000397,udp,147.32.84.170,39310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:29:34.703159,0.974267,udp,2.50.201.124,48731.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,823,502,321,102.875,0.6099635479951397,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:29:39.533308,0.000337,udp,147.32.84.170,40224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:29:39.535255,0.018033,tcp,147.32.84.170,34649.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:29:50.468896,0.000299,udp,147.32.85.25,50195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:29:52.023959,0.00047,udp,110.1.23.91,32178.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:01.028258,0.000373,udp,147.32.87.36,55244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,86,208,147.0,0.2925170068027211,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:30:05.671105,0.000218,udp,147.32.84.36,55486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:30:06.214345,0.000458,udp,109.251.35.224,41906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,318,64,254,159.0,0.20125786163522014,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:09.541920,0.00031,udp,147.32.86.20,52754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:30:13.604096,60.967392,tcp,147.32.84.165,1735.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:30:15.179298,0.000462,udp,147.32.84.170,47038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:15.180675,0.237969,tcp,147.32.84.170,40104.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:21.708423,0.776987,udp,94.169.64.190,11518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1218,622,596,203.0,0.5106732348111659,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:22.218931,2.283566,tcp,66.249.66.52,54340.0,->,147.32.87.27,80.0,FSPA_FSPA,0.0,0.0,10,1235,678,557,123.5,0.5489878542510122,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:30:23.698154,0.000264,udp,147.32.84.138,35754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:30:26.167490,743.277222,udp,114.36.22.214,63743.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,711,525,186,118.5,0.7383966244725738,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:33.810094,5.823558,tcp,2.68.231.217,38144.0,->,147.32.84.229,13363.0,SR_SA,0.0,0.0,16,1142,590,552,71.375,0.5166374781085814,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:30:39.532302,0.019961,udp,147.32.84.170,34256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:39.554130,0.018547,tcp,147.32.84.170,42186.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:46.176133,0.293211,tcp,147.32.84.170,40108.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:47.184706,0.000448,udp,75.185.9.135,63017.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:49.533225,0.000317,udp,147.32.84.170,57520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:30:54.716432,1.797533,tcp,66.249.72.115,43557.0,->,147.32.84.2,60660.0,FSA_FSPA,0.0,0.0,1817,1770006,44096,1725910,974.1364887176665,0.024912909899740453,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:30:55.638164,1813.279053,udp,201.189.115.192,63586.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,511,271,240,63.875,0.5303326810176126,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:58.751718,0.00036,udp,89.33.1.184,39985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:30:59.533254,0.000335,udp,147.32.84.170,53833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:00.293793,5.008633,tcp,147.32.86.89,4195.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,11,2833,1079,1754,257.54545454545456,0.38086833745146487,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:31:02.298731,0.120827,udp,147.32.84.171,34509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,303,74,229,151.5,0.24422442244224424,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:31:07.644422,350.826233,tcp,85.26.235.48,8492.0,->,147.32.84.229,80.0,SRPA_FSPA,0.0,0.0,36,8924,3801,5123,247.88888888888889,0.4259300761990139,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:31:07.939910,0.000208,udp,147.32.85.25,38564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:31:14.251923,60.952614,tcp,147.32.84.165,1736.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:31:17.185646,0.212665,tcp,147.32.84.170,40112.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:17.999429,0.000243,udp,147.32.85.25,52917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:31:19.534598,0.018321,tcp,147.32.84.170,34663.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:22.142042,3530.563721,tcp,147.32.87.2,524.0,?>,147.32.86.15,1062.0,A_,0.0,,14,840,840,0,60.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:31:26.293837,0.000417,udp,89.34.135.140,36613.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:31:27.004844,0.162774,udp,147.32.84.229,13363.0,<->,24.2.196.101,23454.0,CON,0.0,0.0,4,2914,60,2854,728.5,0.02059025394646534,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:31:29.532468,0.000297,udp,147.32.84.170,46384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:29.533292,0.000301,udp,147.32.84.170,42884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:36.787588,8.999834,tcp,147.32.84.215,54875.0,->,86.49.87.107,6889.0,S_,0.0,,3,222,222,0,74.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:31:38.923390,0.205421,tcp,147.32.86.20,1802.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:31:39.534045,0.000348,udp,147.32.84.170,52777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:39.535137,0.01816,tcp,147.32.84.170,40827.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:48.180081,0.000223,udp,147.32.84.170,46649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:31:48.673320,0.000272,udp,147.32.86.20,56803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:31:56.218939,0.00042,udp,76.174.156.72,1901.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,85,61,73.0,0.5821917808219178,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:31:56.499212,0.0,icmp,174.127.73.21,2563.0,->,147.32.84.70,,URHPRO,0.0,,1,90,90,0,90.0,1.0,7,,flow=Background,Background,-1 2011-08-17 07:31:59.320795,0.000376,udp,147.32.84.170,42420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:04.093616,0.000288,udp,147.32.85.25,33832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:32:07.145867,0.000314,udp,147.32.85.34,51384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:32:09.533322,0.000449,udp,147.32.84.170,33730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:14.890451,60.966187,tcp,147.32.84.165,1737.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:32:23.335475,82.244064,udp,207.204.233.235,62969.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2211,1507,704,221.1,0.681592039800995,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:24.698954,1439.968262,udp,89.253.109.230,27399.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,810,450,360,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:27.013187,0.00037,udp,200.182.185.129,61440.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:29.533412,0.000314,udp,147.32.84.170,41734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:31.737307,0.134685,tcp,147.32.86.20,1848.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,34,25714,913,24801,756.2941176470588,0.03550595006611185,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:32:33.004304,2777.081787,rtp,147.32.84.229,13363.0,<->,98.252.37.9,60210.0,CON,0.0,0.0,8,3246,206,3040,405.75,0.06346272335181762,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:34.600049,0.000251,udp,147.32.85.25,58869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:32:39.534555,0.018214,tcp,147.32.84.170,34674.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:41.485933,0.232352,tcp,147.32.86.20,1856.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,36588,1091,35497,831.5454545454545,0.029818519733245872,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:32:41.968830,3109.646973,udp,119.123.52.214,49152.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,396,216,180,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:42.325582,0.689208,tcp,147.32.86.33,2685.0,->,147.32.87.54,2222.0,_FSPA,,0.0,126,8702,0,8702,69.06349206349206,0.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:32:42.486559,0.001833,udp,78.159.142.5,27325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,502,60,281.0,0.8932384341637011,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:44.957141,0.053095,tcp,147.32.86.96,58163.0,->,147.32.87.49,12489.0,_FSPA,,0.0,8,590,0,590,73.75,0.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:32:49.532433,0.000366,udp,147.32.84.170,47443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:49.534379,0.017627,tcp,147.32.84.170,43113.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:50.002505,3320.908203,udp,126.58.67.246,11270.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1228,150,1078,307.0,0.12214983713355049,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:32:50.179876,0.000392,udp,147.32.84.170,38722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:50.182234,0.245462,tcp,147.32.84.170,54182.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:59.532620,0.000392,udp,147.32.84.170,50183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:32:59.534696,0.01819,tcp,147.32.84.170,47087.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:33:10.942297,0.000484,udp,120.51.194.62,42932.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,589,75,514,294.5,0.1273344651952462,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:33:12.362293,0.016656,tcp,147.32.84.59,42265.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:33:13.156450,0.143103,udp,147.32.84.229,13363.0,<->,207.255.165.180,1032.0,CON,0.0,0.0,2,140,78,62,70.0,0.5571428571428572,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:33:15.536858,60.941551,tcp,147.32.84.165,1738.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:33:21.330966,0.000205,udp,147.32.84.138,37860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:33:29.533559,0.000289,udp,147.32.84.170,39580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:33:37.883022,1.254685,tcp,213.220.234.58,50808.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,109,16017,6899,9118,146.94495412844037,0.4307298495348692,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:33:39.533356,0.00035,udp,147.32.84.170,60194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:33:39.534327,0.018311,tcp,147.32.84.170,47098.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:33:45.342169,0.239092,tcp,72.14.199.195,62052.0,->,147.32.85.69,80.0,FSPA_FSPA,0.0,0.0,10,1664,596,1068,166.4,0.3581730769230769,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:33:46.078839,0.000246,udp,147.32.84.59,46422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:33:49.533578,0.000329,udp,147.32.84.170,34580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:33:51.112793,0.000195,udp,147.32.84.138,42071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:33:58.676001,0.169655,tcp,147.32.86.20,1927.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:34:02.364117,3142.031738,arp,147.32.87.34,,who,147.32.87.1,,CON,,,22,1320,660,660,60.0,0.5,7,,flow=Background,Background,-1 2011-08-17 07:34:06.934880,0.000208,udp,147.32.85.34,54358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:34:09.104241,7.991631,udp,147.32.87.48,4103.0,->,147.32.86.252,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,7,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:34:16.164030,60.952164,tcp,147.32.84.165,1739.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:34:17.161524,0.00025,udp,147.32.85.25,50833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:34:19.329250,1364.364258,udp,68.34.122.172,34479.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1045,522,523,261.25,0.4995215311004785,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:34:22.180801,0.000228,udp,147.32.84.170,40701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:26.237723,0.000268,udp,147.32.84.59,47612.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:34:29.532827,0.000426,udp,147.32.84.170,53452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:29.534742,0.018422,tcp,147.32.84.170,58000.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:31.844695,19.62426,tcp,137.189.90.241,57672.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,154,136842,5125,131717,888.5844155844156,0.03745195188611684,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:34:32.627949,20.45517,tcp,95.133.120.80,49924.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,14,1107,586,521,79.07142857142857,0.5293586269196026,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:34:36.301840,0.000387,udp,147.32.84.59,55475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:34:41.668869,3595.131348,tcp,147.32.84.170,51703.0,->,74.125.232.214,443.0,PA_PA,0.0,0.0,616,186418,114962,71456,302.6266233766234,0.6166893754894913,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:42.069778,0.000214,udp,147.32.84.138,50314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:34:49.533633,0.000351,udp,147.32.84.170,52736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:49.534498,0.000283,udp,147.32.84.170,44006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:53.180344,0.00017,udp,147.32.84.170,55301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:34:53.918576,0.644943,udp,196.44.230.51,4621.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,608,419,189,101.33333333333333,0.6891447368421053,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:34:56.087285,250.022415,tcp,147.32.84.59,38399.0,->,209.85.148.139,80.0,FSPA_FSPA,0.0,0.0,36,14901,7864,7037,413.9166666666667,0.5277498154486276,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:35:00.479458,0.000228,udp,147.32.84.138,48336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:35:03.679021,0.134912,tcp,147.32.86.20,1982.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:35:08.444891,2421.630859,udp,95.176.193.236,2730.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,960,712,248,120.0,0.7416666666666667,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:35:16.801841,60.953426,tcp,147.32.84.165,1740.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:35:26.030770,0.0,udp,147.32.84.99,427.0,->,192.168.88.186,60680.0,INT,0.0,,1,377,377,0,377.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:35:27.066066,1220.238281,udp,70.40.144.252,60327.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,743,557,186,123.83333333333333,0.7496635262449529,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:35:29.534323,0.000365,udp,147.32.84.170,37181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:29.535218,0.000334,udp,147.32.84.170,34757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:32.932047,0.000365,udp,147.32.86.20,63571.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:35:39.365096,9.136423,tcp,120.84.205.232,62898.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:35:39.532860,0.111406,udp,147.32.84.170,52853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:39.644787,0.000316,udp,147.32.84.170,36317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:39.645858,0.017587,tcp,147.32.84.170,47114.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:45.817206,0.227617,tcp,147.32.84.164,38960.0,->,209.197.26.242,27031.0,FSA_SRA,0.0,0.0,6,402,206,196,67.0,0.5124378109452736,7,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 07:35:49.534728,0.017837,tcp,147.32.84.170,58010.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:55.181075,0.000192,udp,147.32.84.170,54013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:35:55.682235,0.20581,tcp,147.32.86.20,2028.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:35:55.835215,0.045908,udp,147.32.86.96,58770.0,<->,80.250.21.93,161.0,CON,0.0,0.0,4,360,163,197,90.0,0.4527777777777778,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:35:56.505453,0.05024,tcp,147.32.84.79,44490.0,->,62.75.177.33,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:35:59.533603,0.000305,udp,147.32.84.170,36613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:36:14.952660,0.000253,udp,147.32.84.138,53096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:15.182082,0.000445,udp,147.32.86.20,59808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:16.780808,0.00024,udp,147.32.84.138,54917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:17.440987,60.950649,tcp,147.32.84.165,1741.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:36:19.532917,0.000625,udp,147.32.84.170,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:36:19.533998,0.000346,udp,147.32.84.170,52448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:36:20.354270,0.003367,udp,98.166.78.24,3292.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2919,60,2859,729.75,0.020554984583761562,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:36:29.534982,0.018192,tcp,147.32.84.170,47121.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:36:31.043949,0.37801,tcp,67.195.111.228,39158.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2050,717,1333,205.0,0.3497560975609756,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:36:31.330083,0.000384,udp,147.32.84.138,35455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:34.455080,0.00022,udp,147.32.84.138,57837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:35.187838,0.000332,udp,147.32.85.34,65159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:39.534509,0.00033,udp,147.32.84.170,41777.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:36:42.544703,0.000502,udp,147.32.84.59,57096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:43.003541,2143.805664,udp,67.168.107.32,13599.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,673,552,121,168.25,0.8202080237741456,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:36:45.263453,0.000416,udp,173.170.26.206,38481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:36:50.006486,0.000305,udp,147.32.84.138,52087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:51.320849,0.771997,tcp,158.143.65.89,57813.0,->,147.32.85.84,13716.0,FSPA_FSPA,0.0,0.0,22,1845,1033,812,83.86363636363636,0.5598915989159892,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:36:55.622396,0.000287,udp,147.32.85.34,52842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:56.838362,6.013616,udp,147.32.84.229,13363.0,->,89.132.181.231,2555.0,INT,0.0,,3,180,180,0,60.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:36:58.234365,3595.989746,udp,147.32.87.38,138.0,->,147.32.87.63,138.0,INT,0.0,,6,1548,1548,0,258.0,1.0,7,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:36:59.041859,0.000402,udp,147.32.84.184,53890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,88,138,113.0,0.3893805309734513,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:36:59.203118,0.000201,udp,147.32.84.138,58812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:37:06.296742,0.000365,udp,147.32.85.25,41352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:37:09.535441,0.000323,udp,147.32.84.170,34508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:13.250298,0.000453,udp,95.25.61.94,31146.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,76,491,283.5,0.13403880070546736,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:37:15.295147,5.008583,tcp,147.32.86.89,4452.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,12,3838,1079,2759,319.8333333333333,0.2811360083376759,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:37:18.077006,60.968212,tcp,147.32.84.165,1742.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:37:19.160529,0.000491,udp,83.227.36.110,26229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,76,474,275.0,0.13818181818181818,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:37:19.532931,0.00041,udp,147.32.84.170,45185.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:19.534998,0.018299,tcp,147.32.84.170,45491.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:24.523188,5.816136,tcp,66.249.72.35,53887.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,26,13832,1212,12620,532.0,0.08762290341237709,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:37:27.181359,0.000242,udp,147.32.84.170,42204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:28.376810,1300.095947,udp,110.165.232.138,1828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,716,567,149,179.0,0.7918994413407822,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:37:29.532920,0.000409,udp,147.32.84.170,46606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:39.533978,0.000372,udp,147.32.84.170,55424.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:37:43.012438,2742.904297,udp,175.136.229.82,28516.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1459,1087,372,121.58333333333333,0.7450308430431802,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:37:59.535058,0.00037,udp,147.32.84.170,37254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:04.774177,0.00038,rtcp,76.125.71.86,58311.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:06.660090,0.000254,udp,147.32.85.34,60269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:38:06.682091,0.000344,udp,147.32.85.34,51358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,86,241,163.5,0.26299694189602446,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:38:06.738350,3034.908691,udp,147.32.84.229,13363.0,<->,114.42.23.142,50944.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:09.535076,0.000335,udp,147.32.84.170,43972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:11.758869,0.001516,udp,94.156.59.188,8892.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,476,60,268.0,0.8880597014925373,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:12.224359,3085.799316,udp,85.216.231.231,18530.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,1680,1246,434,120.0,0.7416666666666667,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:12.287727,0.000238,udp,147.32.85.25,45329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:38:12.995503,3581.005127,udp,147.32.84.229,13363.0,<->,109.175.211.68,36516.0,CON,0.0,0.0,121,19809,9432,10377,163.71074380165288,0.4761472058155384,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:17.873145,0.000292,udp,147.32.86.20,54985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:38:18.378836,0.003104,udp,180.177.80.114,37241.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,77,473,275.0,0.14,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:18.725382,60.96859,tcp,147.32.84.165,1743.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:38:19.951576,0.001811,icmp,147.32.86.96,,<-,147.32.87.51,5460.0,RED,,0.0,2,196,0,196,98.0,0.0,7,0,flow=Background,Background,-1 2011-08-17 07:38:28.182167,0.000325,udp,147.32.84.170,59480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:29.535290,0.000407,udp,147.32.84.170,44509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:38.344906,3582.023193,udp,114.40.191.162,9478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,119,19500,9974,9526,163.8655462184874,0.5114871794871795,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:38:39.536104,0.000314,udp,147.32.84.170,59060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:45.130348,0.000213,udp,147.32.84.138,59726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:38:58.183654,0.000335,udp,147.32.84.170,59062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:38:59.535288,0.000322,udp,147.32.84.170,60687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:05.880074,0.000415,udp,46.237.215.205,21444.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,225,163,62,112.5,0.7244444444444444,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:06.989437,0.000336,udp,147.32.84.59,56167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:07.125621,0.000239,udp,147.32.84.59,39491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:09.535038,0.000394,udp,147.32.84.170,55204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:15.013724,0.000463,udp,112.210.220.211,22266.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,78,467,272.5,0.14311926605504588,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:19.374402,60.95179,tcp,147.32.84.165,1744.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:39:19.537280,0.018242,tcp,147.32.84.170,44035.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:20.240823,1.6e-05,icmp,147.32.86.96,,<-,147.32.87.38,38740.0,ECR,,0.0,2,196,0,196,98.0,0.0,7,0,flow=Background,Background,-1 2011-08-17 07:39:20.893868,0.000357,udp,81.28.6.254,45351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:22.154628,0.000285,udp,147.32.84.59,51507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:29.184805,0.222746,tcp,147.32.84.170,33957.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:29.535094,0.000445,udp,147.32.84.170,44075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:37.233793,0.000224,udp,147.32.84.59,41163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:37.322326,0.00028,udp,147.32.84.59,43996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:37.332187,0.000302,udp,147.32.84.59,37207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:39.535287,0.00036,udp,147.32.84.170,42702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:40.509471,0.00023,udp,147.32.84.138,52511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:39:43.263202,0.397482,tcp,67.195.115.92,35346.0,->,147.32.85.34,80.0,FSPA_FSPA,0.0,0.0,9,1653,730,923,183.66666666666666,0.44162129461585,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:39:49.007060,0.000538,udp,82.135.194.138,13925.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,682,75,607,341.0,0.10997067448680352,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:49.535448,0.000339,udp,147.32.84.170,53871.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:39:50.505735,154.393707,udp,123.110.27.148,58251.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1054,934,120,263.5,0.8861480075901328,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:51.645008,0.000426,udp,98.193.57.133,27885.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,587,73,514,293.5,0.12436115843270869,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:39:56.693386,0.000269,udp,147.32.84.138,56576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:40:00.157663,0.000172,udp,147.32.85.25,38253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:40:00.182636,0.000207,udp,147.32.84.170,60156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:00.183418,0.000408,udp,147.32.84.170,58241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:00.184773,0.231338,tcp,147.32.84.170,33962.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:01.958525,0.001244,tcp,147.32.49.190,49630.0,->,147.32.84.19,27000.0,SRPA_SPA,0.0,0.0,7,619,387,232,88.42857142857143,0.6252019386106623,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:40:08.289672,0.250187,udp,85.62.233.248,42731.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,602,413,189,100.33333333333333,0.686046511627907,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:40:10.990489,0.024819,udp,147.32.84.170,39283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:19.535425,0.000426,udp,147.32.84.170,44832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:20.011869,60.967251,tcp,147.32.84.165,1745.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:40:24.602093,0.000592,udp,89.120.218.92,29012.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,674,79,595,337.0,0.1172106824925816,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:40:29.537519,0.017779,tcp,147.32.84.170,35405.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:30.845226,0.001695,udp,72.60.6.29,18301.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:40:31.181651,0.00021,udp,147.32.84.170,37382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:33.567994,0.000363,udp,147.32.86.20,53918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:40:35.259188,0.000632,udp,213.87.138.143,25777.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:40:43.931722,0.000199,udp,147.32.84.138,47593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:40:45.756710,0.169543,tcp,147.32.86.20,2293.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,76,71150,1691,69459,936.1842105263158,0.02376669009135629,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:40:46.623622,0.000337,udp,147.32.84.138,48669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:40:49.535475,0.000438,udp,147.32.84.170,48631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:49.536467,0.000339,udp,147.32.84.170,47556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:49.537568,0.017675,tcp,147.32.84.170,50479.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:40:59.535485,0.000424,udp,147.32.84.170,33599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:41:08.246555,0.000486,udp,122.60.98.246,33281.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,75,478,276.5,0.13562386980108498,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:41:10.094350,0.000223,udp,147.32.84.138,44204.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:41:11.218622,0.000407,udp,203.90.20.115,61325.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:41:20.659318,60.967384,tcp,147.32.84.165,1746.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:41:23.159841,0.000225,udp,147.32.84.138,38023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:41:35.768752,2316.938477,udp,188.114.43.111,53177.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:41:42.126172,0.000412,udp,70.180.187.7,23534.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:41:42.565557,0.000267,udp,147.32.84.59,34008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:41:49.537824,0.017887,tcp,147.32.84.170,48790.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:41:56.634661,0.004347,udp,89.112.42.63,2693.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2919,60,2859,729.75,0.020554984583761562,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:41:59.323258,0.000387,udp,147.32.84.170,39385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:41:59.535553,0.000513,udp,147.32.84.170,46821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:41:59.537686,0.018075,tcp,147.32.84.170,50045.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:03.181713,0.000353,udp,147.32.84.170,43468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:07.117142,2.121489,tcp,213.220.234.58,51060.0,->,147.32.84.242,22.0,FSPA_FSPA,0.0,0.0,59,9591,5113,4478,162.5593220338983,0.5331039516213116,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:42:19.537693,0.018099,tcp,147.32.84.170,35421.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:20.218700,0.000488,udp,69.169.250.117,6229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,76,478,277.0,0.1371841155234657,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:42:20.391578,921.836243,udp,83.145.239.200,19917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:42:21.306852,60.951481,tcp,147.32.84.165,1747.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:42:22.648058,0.000343,udp,78.133.79.51,59597.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,160,100,60,80.0,0.625,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:42:22.712352,0.000253,udp,147.32.84.138,43755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:42:23.090762,0.776723,tcp,85.70.37.60,65165.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,10,2415,922,1493,241.5,0.38178053830227743,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:42:26.019586,2977.084961,udp,194.228.143.168,51206.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1371,961,410,137.1,0.700948212983224,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:42:29.535630,0.000406,udp,147.32.84.170,32859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:29.537617,0.018466,tcp,147.32.84.170,48796.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:31.393235,0.207475,tcp,66.249.72.115,55056.0,->,147.32.84.2,58856.0,FSA_FSPA,0.0,0.0,8,614,272,342,76.75,0.44299674267100975,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:42:39.536507,0.000377,udp,147.32.84.170,47756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:42:46.012684,0.206157,tcp,147.32.86.20,2400.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30634,1029,29605,785.4871794871794,0.03359012861526409,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:42:52.753682,6.015469,icmp,111.243.1.90,771.0,->,147.32.84.229,20173.0,URP,0.0,,3,525,525,0,175.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:42:55.368308,0.000183,udp,147.32.85.11,34514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:05.182852,0.000351,udp,147.32.84.170,54163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:43:05.184162,0.225981,tcp,147.32.84.170,53415.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:43:08.371657,0.000229,udp,147.32.85.25,34560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:09.535701,0.000403,udp,147.32.84.170,35524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:43:10.127856,0.000684,udp,99.62.113.72,30341.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:43:15.733424,2583.497559,udp,2.193.21.174,45968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,655,355,300,65.5,0.5419847328244275,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:43:17.485721,0.000128,udp,147.32.84.138,51764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:18.539723,0.000153,udp,147.32.85.25,60036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:19.535511,0.00041,udp,147.32.84.170,46896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:43:21.944066,60.942764,tcp,147.32.84.165,1748.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:43:22.927608,0.003447,udp,24.242.49.217,55271.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2919,60,2859,729.75,0.020554984583761562,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:43:26.065928,2413.088135,udp,95.62.6.98,45869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1170,860,310,117.0,0.7350427350427351,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:43:29.535678,0.00037,udp,147.32.84.170,45795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:43:30.171691,0.000187,udp,147.32.84.138,40741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:33.290002,0.000175,udp,147.32.84.138,57252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:52.640424,0.000311,udp,147.32.86.20,51797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:43:59.954363,1501.273804,udp,68.104.14.215,47001.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,119,15486,7161,8325,130.1344537815126,0.462417667570709,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:44:03.965052,0.000269,udp,147.32.84.138,47741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:44:07.211071,0.000387,udp,147.32.85.34,53464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:44:09.840372,3226.161865,udp,24.4.149.79,1702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:44:15.556961,1915.402832,udp,147.32.84.229,13363.0,->,188.152.229.247,21488.0,INT,0.0,,15,2616,2616,0,174.4,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:44:16.763702,1466.526245,udp,122.60.237.58,57528.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1124,156,968,281.0,0.1387900355871886,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:44:19.537867,0.018095,tcp,147.32.84.170,33049.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:44:22.572230,60.962864,tcp,147.32.84.165,1749.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:44:23.387788,0.000203,udp,89.208.201.73,61229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:44:23.866240,0.000257,udp,147.32.84.138,37459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:44:26.304352,0.000389,udp,147.32.84.138,48609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:44:29.535907,0.000386,udp,147.32.84.170,33893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:44:32.843624,0.350998,udp,147.32.84.229,13363.0,<->,116.47.145.41,12631.0,CON,0.0,0.0,2,553,74,479,276.5,0.13381555153707053,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:44:38.983967,881.57251,udp,147.32.84.229,13363.0,->,86.22.158.238,31643.0,INT,0.0,,15,1095,1095,0,73.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:44:39.535922,0.000353,udp,147.32.84.170,46426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:44:39.537868,0.017961,tcp,147.32.84.170,58126.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:44:49.536852,0.000432,udp,147.32.84.170,51678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:44:55.168194,0.000388,udp,147.32.84.242,48045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,97,153,125.0,0.388,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:44:59.737875,0.000266,udp,69.87.160.2,37999.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:00.702146,3598.360107,udp,147.32.87.7,427.0,->,195.113.54.52,427.0,REQ,0.0,,16,1760,1760,0,110.0,1.0,7,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:45:08.169219,0.000331,udp,147.32.84.170,50499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:08.171149,0.214612,tcp,147.32.84.170,53437.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:09.536942,0.000376,udp,147.32.84.170,57083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:09.537956,0.017938,tcp,147.32.84.170,33056.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:11.605646,127.157143,udp,147.32.84.229,13363.0,<->,89.103.206.37,17896.0,CON,0.0,0.0,12,792,432,360,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:15.376821,0.000435,udp,220.130.223.43,56319.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:19.535959,0.000371,udp,147.32.84.170,58454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:19.537877,0.018203,tcp,147.32.84.170,37347.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:20.176899,3006.560059,udp,95.179.115.223,31620.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:23.209054,60.966984,tcp,147.32.84.165,1750.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:45:26.454832,0.004383,udp,189.61.86.50,39505.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2921,60,2861,730.25,0.020540910647038686,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:27.645323,114.696381,udp,147.32.84.229,13363.0,<->,82.196.72.41,44770.0,CON,0.0,0.0,8,540,292,248,67.5,0.5407407407407407,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:30.177941,0.000293,udp,147.32.84.138,40219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:45:30.719383,3414.793457,tcp,145.236.39.23,1038.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,498,38040,20715,17325,76.3855421686747,0.544558359621451,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:45:39.302805,0.000342,udp,99.37.49.185,25614.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:45:39.547981,0.017827,tcp,147.32.84.170,58134.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:42.535706,0.000288,udp,147.32.85.25,46916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:45:43.148217,0.000378,udp,147.32.84.138,46449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:45:45.292836,5.007807,tcp,147.32.86.89,4596.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,12,3908,1079,2829,325.6666666666667,0.27610030706243605,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:45:47.607432,0.000271,udp,147.32.85.25,43700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:45:59.537151,0.000321,udp,147.32.84.170,34657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:45:59.538273,0.0178,tcp,147.32.84.170,33062.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:01.017906,0.206623,tcp,147.32.86.20,2571.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30694,1089,29605,767.35,0.035479246758324104,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:46:05.163572,0.000354,udp,72.243.251.77,42805.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:46:13.484790,0.000216,udp,147.32.85.25,42885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:18.449170,0.000312,udp,147.32.84.138,46436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:18.542835,0.00028,udp,147.32.85.25,60557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:19.488363,1647.674561,udp,118.167.8.30,14659.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3464,135,3329,577.3333333333334,0.03897228637413395,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:46:19.539998,0.018355,tcp,147.32.84.170,59840.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:23.856397,60.942371,tcp,147.32.84.165,1751.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:46:27.070295,1.3e-05,udp,147.32.84.138,49923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:29.538193,0.018186,tcp,147.32.84.170,36310.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:31.153279,1963.453735,udp,87.178.221.167,38458.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:46:32.559728,2702.238281,icmp,147.32.84.171,771.0,->,117.198.202.75,57626.0,URP,0.0,,26,2600,2600,0,100.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:46:35.039493,2.230833,tcp,213.220.234.58,51158.0,->,147.32.84.242,22.0,FSPA_FSPA,0.0,0.0,64,9889,5343,4546,154.515625,0.5402973000303367,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:46:37.595452,0.000635,udp,66.183.54.106,6502.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,567,74,493,283.5,0.13051146384479717,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:46:39.538884,0.000327,udp,147.32.84.170,55106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:39.539941,0.017938,tcp,147.32.84.170,59843.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:42.461054,0.000294,udp,147.32.86.20,58308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:45.554359,0.0,tcp,186.178.65.64,15728.0,?>,147.32.84.171,59589.0,RA_,0.0,,1,60,60,0,60.0,1.0,7,0,flow=Background,Background,-1 2011-08-17 07:46:46.715444,6.9e-05,udp,147.32.84.138,49691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:46:48.878846,3575.203857,udp,147.32.84.25,43670.0,<->,82.208.56.89,123.0,CON,0.0,0.0,34,3060,1530,1530,90.0,0.5,7,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 07:46:54.055197,3160.237305,udp,147.32.84.229,13363.0,<->,70.181.212.195,11103.0,CON,0.0,0.0,5,801,739,62,160.2,0.9225967540574282,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:46:59.536815,0.000231,udp,147.32.84.170,50159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:46:59.537884,0.017775,tcp,147.32.84.170,37360.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:00.333634,0.000399,udp,147.32.86.20,59674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:01.572263,1957.294922,udp,112.201.106.63,50580.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,649,529,120,162.25,0.8151001540832049,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:09.535934,0.00038,udp,147.32.84.170,44230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:09.581344,0.00014,udp,147.32.85.25,44796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:10.182462,0.000223,udp,147.32.84.170,42157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:10.183223,0.000229,udp,147.32.84.170,38231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:10.184423,0.277946,tcp,147.32.84.170,53454.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:10.974299,0.19175,udp,147.32.84.229,13363.0,<->,96.42.30.120,47741.0,CON,0.0,0.0,4,2930,60,2870,732.5,0.020477815699658702,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:17.067007,0.000295,udp,147.32.84.170,49934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:17.072015,240.045288,tcp,147.32.84.170,42438.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:17.072804,240.044693,tcp,147.32.84.170,42440.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:19.537137,0.000373,udp,147.32.84.170,39129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:22.271039,0.000338,udp,147.32.86.20,65059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:24.484389,60.968189,tcp,147.32.84.165,1752.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:47:26.206502,0.000517,udp,150.101.177.188,2352.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:27.168282,0.000172,udp,147.32.84.138,39552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:29.536216,0.000419,udp,147.32.84.170,54914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:35.372266,0.000464,udp,84.202.59.84,63720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,74,463,268.5,0.1378026070763501,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:40.684418,3016.300781,udp,202.128.17.114,53284.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,278,158,120,69.5,0.5683453237410072,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:41.182205,0.000323,udp,147.32.84.170,38003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:47:43.757854,0.000268,udp,147.32.84.138,33502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:45.169758,0.000216,udp,147.32.85.25,54848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:46.881763,0.000523,udp,94.181.209.129,47710.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,77,480,278.5,0.13824057450628366,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:47:50.404908,0.0,igmp,147.32.87.4,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,7,,flow=Background,Background,-1 2011-08-17 07:47:55.749411,0.000312,udp,147.32.84.19,57147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,84,238,161.0,0.2608695652173913,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:47:56.124138,0.003569,udp,85.230.123.102,59290.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2920,60,2860,730.0,0.02054794520547945,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:48:06.963890,0.00024,udp,147.32.85.34,52675.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:48:09.170638,0.00047,udp,189.111.154.29,24749.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,76,483,279.5,0.13595706618962433,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:48:13.220357,0.337283,tcp,147.32.84.170,34426.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:13.550058,0.280042,tcp,147.32.84.170,34427.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:25.132795,60.967083,tcp,147.32.84.165,1753.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:48:26.972719,0.120709,udp,147.32.84.229,13363.0,<->,68.194.205.239,43953.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:48:29.295418,0.000418,udp,147.32.84.170,38583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:29.333242,0.000301,udp,147.32.84.170,56848.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:30.973293,0.000273,udp,147.32.84.138,51551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:48:38.105684,736.948914,udp,147.32.84.229,13363.0,<->,68.110.248.167,38391.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:48:49.536331,0.000357,udp,147.32.84.170,52948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:49.537180,0.000353,udp,147.32.84.170,38893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:49.538335,0.018088,tcp,147.32.84.170,37282.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:59.537248,0.000328,udp,147.32.84.170,56770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:59.538356,0.018169,tcp,147.32.84.170,42042.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:48:59.855691,7.996079,udp,147.32.87.48,4251.0,->,147.32.86.251,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,7,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:49:05.152344,0.000242,udp,147.32.84.138,54758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:06.951205,0.000241,udp,147.32.84.242,54434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,87,178,132.5,0.3283018867924528,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:07.357841,0.531082,tcp,67.195.112.170,33639.0,->,147.32.84.130,80.0,FSPA_FSPA,0.0,0.0,16,8033,978,7055,502.0625,0.12174779036474542,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:49:12.184716,0.21403,tcp,147.32.84.170,45810.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:49:16.191793,0.106309,tcp,147.32.84.164,46077.0,->,62.140.24.122,27030.0,FSPA_FSPA,0.0,0.0,11,772,433,339,70.18181818181819,0.560880829015544,7,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 07:49:21.209941,0.000523,udp,147.32.84.138,55110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:25.779347,60.95219,tcp,147.32.84.165,1754.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:49:29.537414,0.000479,udp,147.32.84.170,56637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:49:29.937820,0.000546,udp,175.142.188.57,36916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:49:31.908536,0.0,tcp,113.105.171.58,80.0,->,147.32.86.56,59988.0,SA_,0.0,,1,66,66,0,66.0,1.0,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:49:39.540231,0.018305,tcp,147.32.84.170,50290.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:49:40.300047,0.033601,udp,93.81.72.155,6304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,672,551,121,168.0,0.8199404761904762,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:49:48.337368,0.000177,udp,147.32.84.138,46337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:48.352749,0.000337,udp,147.32.84.138,45657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:48.405328,2728.665039,udp,213.141.157.40,36478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1219,209,1010,203.16666666666666,0.17145200984413453,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:49:48.882584,0.000396,udp,62.212.60.248,26227.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:49:49.743181,0.023001,tcp,90.183.39.17,33072.0,->,147.32.87.27,80.0,SRPA_SPA,0.0,0.0,16,10205,981,9224,637.8125,0.09612934835864773,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:49:55.708361,0.000372,udp,178.234.75.180,18466.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:49:59.272193,0.000332,udp,147.32.84.138,56804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:49:59.536508,0.00036,udp,147.32.84.170,44670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:49:59.538539,0.017919,tcp,147.32.84.170,50293.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:01.171529,0.00044,udp,78.30.158.178,33833.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,542,76,466,271.0,0.14022140221402213,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:02.947540,1852.087769,udp,147.32.84.229,13363.0,<->,123.204.130.69,56433.0,CON,0.0,0.0,14,1826,1290,536,130.42857142857142,0.7064622124863089,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:04.401614,0.000201,udp,147.32.84.138,50736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:50:06.250147,2442.692139,udp,124.185.20.51,41835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:06.818671,0.000196,udp,147.32.85.34,64794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:50:09.403225,0.00023,udp,147.32.84.138,42044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:50:09.537348,0.000282,udp,147.32.84.170,47406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:09.667714,0.781402,tcp,147.32.84.184,42976.0,->,63.245.209.92,443.0,FSPA_FSPA,0.0,0.0,15,3682,1439,2243,245.46666666666667,0.39082020640956,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:50:11.894210,0.000346,udp,147.32.84.138,43137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:50:12.209885,0.000333,udp,147.32.84.170,56715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:21.528453,0.625363,tcp,147.32.3.51,4573.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:50:23.669759,0.000549,udp,149.5.45.8,43056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,322,69,253,161.0,0.21428571428571427,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:26.417116,60.95369,tcp,147.32.84.165,1755.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:50:26.427031,0.178804,udp,147.32.84.229,13363.0,<->,24.80.113.167,5163.0,CON,0.0,0.0,2,256,194,62,128.0,0.7578125,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:29.537488,0.000349,udp,147.32.84.170,48210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:29.635563,0.000461,udp,72.229.169.71,30609.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:31.407560,0.004668,tcp,77.75.76.115,60186.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2243,832,1411,224.3,0.3709317877842176,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:50:31.702362,0.004001,tcp,77.75.76.115,60636.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,11,2418,833,1585,219.8181818181818,0.3444995864350703,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:50:33.725638,0.118011,udp,147.32.84.229,13363.0,<->,74.13.253.188,48631.0,CON,0.0,0.0,2,159,93,66,79.5,0.5849056603773585,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:36.744260,1197.312988,udp,151.28.241.235,14937.0,<->,147.32.84.229,443.0,CON,0.0,0.0,4,256,120,136,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:37.122361,0.0025,udp,208.75.10.50,8453.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,83,483,283.0,0.14664310954063603,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:38.073046,0.000563,udp,62.128.48.170,23039.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,949,78,871,474.5,0.0821917808219178,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:50:39.546946,0.000417,udp,147.32.84.170,53200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:43.185111,0.226377,tcp,147.32.84.170,45822.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:50:51.921130,0.230685,tcp,147.32.86.20,2834.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,36588,1091,35497,831.5454545454545,0.029818519733245872,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:51:03.168951,0.018459,udp,147.32.84.171,49174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,528,75,453,264.0,0.14204545454545456,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:04.035156,0.000171,udp,147.32.84.138,40480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:08.055110,0.138395,udp,147.32.84.229,13363.0,<->,71.193.123.72,13219.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:14.188848,0.000286,udp,147.32.84.170,36624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:14.189684,0.000268,udp,147.32.84.170,35271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:14.437134,0.00021,udp,147.32.85.25,60071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:18.653201,28.423531,tcp,222.81.152.216,3424.0,->,147.32.84.2,80.0,SRPA_FSPA,0.0,0.0,287,272800,6460,266340,950.5226480836237,0.02368035190615836,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:51:19.480413,0.000243,udp,147.32.84.138,47616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:19.537564,0.000421,udp,147.32.84.170,54191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:20.962763,0.003532,tcp,90.183.39.17,44673.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1683,785,898,168.3,0.46642899584076053,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:51:22.831972,1.4e-05,icmp,147.32.86.96,,<-,147.32.87.52,42844.0,ECR,,0.0,2,196,0,196,98.0,0.0,7,0,flow=Background,Background,-1 2011-08-17 07:51:23.576668,0.000304,udp,147.32.84.59,63577.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:27.054608,60.953835,tcp,147.32.84.165,1756.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:51:29.536592,0.00042,udp,147.32.84.170,60201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:35.065516,0.000214,udp,147.32.84.138,49688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:51:37.023841,1.222527,tcp,213.220.234.58,51265.0,->,147.32.84.242,22.0,FSPA_FSPA,0.0,0.0,59,9591,5113,4478,162.5593220338983,0.5331039516213116,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:51:38.827942,0.082481,udp,147.32.84.229,13363.0,<->,95.139.232.128,35779.0,CON,0.0,0.0,2,247,185,62,123.5,0.7489878542510121,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:39.430309,0.06398,udp,147.32.84.229,13363.0,<->,88.186.81.224,38317.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:39.537613,0.000279,udp,147.32.84.170,60303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:49.539570,0.018715,tcp,147.32.84.170,33507.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:51:49.943835,3429.411865,udp,147.32.84.229,13363.0,<->,78.141.179.10,34008.0,CON,0.0,0.0,8,961,254,707,120.125,0.2643080124869927,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:53.306653,0.001973,udp,93.185.192.83,1043.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,651,591,60,325.5,0.9078341013824884,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:59.002703,2902.214844,udp,210.198.79.2,63900.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:51:59.326871,0.000402,udp,147.32.84.170,51050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:03.424770,0.882473,tcp,147.32.86.20,2900.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,95,96788,1526,95262,1018.8210526315789,0.01576641732446171,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:52:04.395434,198.61293,tcp,147.32.85.5,43525.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,40,6584,3572,3012,164.6,0.5425273390036452,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:52:06.672490,0.000239,udp,147.32.85.34,52842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:06.704869,0.000214,udp,147.32.85.34,54589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:07.880934,5.998713,udp,147.32.84.229,13363.0,->,86.144.18.25,28374.0,INT,0.0,,3,450,450,0,150.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:52:08.298569,0.000281,udp,147.32.86.20,63804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:09.288427,0.000321,udp,78.100.41.162,9702.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:09.538650,0.000241,udp,147.32.84.170,53096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:10.202833,0.000437,udp,173.183.66.140,61802.0,<->,147.32.84.229,13363.0,CON,1.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:11.662063,27.315605,udp,78.102.217.156,3754.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1056,576,480,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:16.711538,0.000204,udp,147.32.84.138,49360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:19.537791,0.000479,udp,147.32.84.170,42267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:19.539866,0.018258,tcp,147.32.84.170,33512.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:25.754231,0.000223,udp,147.32.85.25,40578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:27.693696,60.966839,tcp,147.32.84.165,1757.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:52:29.538693,0.00029,udp,147.32.84.170,40982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:29.539683,0.01828,tcp,147.32.84.170,42071.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:34.301548,0.000355,udp,147.32.86.20,52452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:34.302156,0.918609,tcp,147.32.86.20,2927.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,96,97104,1586,95518,1011.5,0.016333003789751194,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:52:35.369822,2956.184082,udp,97.101.93.183,53262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,4006,3284,722,400.6,0.8197703444832751,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:35.504692,0.001553,udp,74.215.108.11,31234.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:43.619621,1244.744141,udp,176.14.131.66,51878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,741,555,186,123.5,0.7489878542510121,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:47.185510,0.00022,udp,147.32.84.170,55750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:52:50.369699,0.0,igmp,147.32.87.61,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,7,,flow=Background,Background,-1 2011-08-17 07:52:54.875146,0.000306,udp,147.32.84.19,35045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,87,176,131.5,0.33079847908745247,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:52:55.661954,0.0,icmp,147.32.84.164,771.0,->,109.185.130.197,54728.0,URP,0.0,,1,135,135,0,135.0,1.0,7,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 07:52:55.692038,0.031442,udp,85.161.160.39,49152.0,<->,147.32.86.228,161.0,CON,0.0,0.0,2,243,120,123,121.5,0.49382716049382713,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:52:57.720644,469.243988,udp,147.32.84.229,13363.0,<->,125.230.82.48,21636.0,CON,0.0,0.0,4,679,558,121,169.75,0.8217967599410898,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:00.287354,5.022392,tcp,147.32.86.89,4739.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,12,3960,1078,2882,330.0,0.2722222222222222,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:53:02.569575,3157.020996,udp,147.32.85.121,123.0,<->,89.187.142.41,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,7,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 07:53:02.659807,6.040384,udp,147.32.84.229,13363.0,->,197.200.16.81,3411.0,INT,0.0,,3,1551,1551,0,517.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:53:04.841912,0.000593,udp,91.194.80.1,2985.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,570,76,494,285.0,0.13333333333333333,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:06.441501,61.618851,tcp,147.32.84.59,49474.0,->,209.85.148.104,80.0,SRPA_SPA,0.0,0.0,10,5393,1151,4242,539.3,0.21342480993880958,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:53:06.799986,0.000336,udp,88.250.13.93,14263.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:08.813337,0.000294,udp,218.220.41.32,4992.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:09.538745,0.000326,udp,147.32.84.170,41775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:11.638163,0.000253,udp,147.32.85.25,36022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:53:12.261121,3534.701172,udp,147.32.84.229,13363.0,<->,98.200.74.34,52062.0,CON,0.0,0.0,6,426,243,183,71.0,0.5704225352112676,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:13.229172,0.268029,tcp,147.32.84.170,52964.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:13.547266,0.274888,tcp,147.32.84.170,45810.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:13.771364,0.242467,tcp,147.32.84.170,52967.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:14.021110,0.333855,tcp,147.32.84.170,45813.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:18.866383,0.000243,udp,147.32.85.5,51937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:53:19.537373,0.000368,udp,147.32.84.170,37508.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:19.539333,0.018018,tcp,147.32.84.170,35331.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:20.039718,3579.984375,udp,197.252.5.242,7242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,32,2110,1150,960,65.9375,0.5450236966824644,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:20.223728,189.209152,tcp,197.252.5.242,2592.0,->,147.32.84.229,80.0,SPA_FSPA,0.0,0.0,20,1380,484,896,69.0,0.3507246376811594,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:53:22.486814,3549.408691,udp,83.208.240.71,36799.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,764,518,246,127.33333333333333,0.6780104712041884,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:25.580394,0.000476,udp,83.208.211.96,26495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:28.292064,3491.928955,udp,147.32.84.229,13363.0,<->,95.132.100.241,58450.0,CON,0.0,0.0,13,3554,3314,240,273.38461538461536,0.9324704558244232,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:28.340662,60.967201,tcp,147.32.84.165,1758.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:53:29.538680,0.000314,udp,147.32.84.170,44862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:53:29.624416,0.025227,udp,147.32.84.229,13363.0,<->,78.141.181.223,34002.0,CON,0.0,0.0,2,248,185,63,124.0,0.7459677419354839,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:53:44.990235,0.169694,tcp,147.32.86.20,2985.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1691,69519,924.8051948051948,0.023746664794270466,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:53:45.721252,0.000247,udp,147.32.84.138,50231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:53:58.763602,0.000411,udp,95.70.165.209,62533.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:01.134018,0.00064,udp,83.185.42.56,45600.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,75,479,277.0,0.13537906137184116,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:01.194243,0.000236,udp,147.32.84.138,53763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:54:02.871913,121.389313,udp,147.32.84.229,13363.0,<->,213.252.70.136,31696.0,CON,0.0,0.0,8,536,296,240,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:18.767951,0.145914,udp,147.32.84.229,13363.0,<->,71.14.116.205,38323.0,CON,0.0,0.0,2,136,75,61,68.0,0.5514705882352942,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:19.184388,0.000273,udp,147.32.84.170,45140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:54:19.186483,0.221735,tcp,147.32.84.170,50584.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:54:27.563812,0.32763,udp,147.32.84.229,13363.0,<->,124.33.228.180,2139.0,CON,0.0,0.0,2,553,74,479,276.5,0.13381555153707053,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:27.738800,0.000298,udp,147.32.84.138,41217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:54:28.988297,60.967529,tcp,147.32.84.165,1759.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:54:29.541577,0.018274,tcp,147.32.84.170,60122.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:54:39.537988,0.0004,udp,147.32.84.170,41275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:54:43.240941,0.000312,udp,147.32.85.25,39261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:54:44.636687,0.01956,udp,147.32.84.184,49747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:54:45.968699,0.0,tcp,147.32.84.165,1760.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:45.974595,0.0,tcp,147.32.84.165,1761.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:45.980709,0.0,tcp,147.32.84.165,1763.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:46.152264,0.0,tcp,147.32.84.165,1764.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:46.152522,0.0,tcp,147.32.84.165,1765.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:46.172430,0.0,tcp,147.32.84.165,1767.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:46.353056,0.0,tcp,147.32.84.165,1768.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:46.353311,0.0,tcp,147.32.84.165,1769.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:47.163610,0.0,tcp,147.32.84.165,1772.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:47.965134,0.0,tcp,147.32.84.165,1771.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:48.306171,0.00033,udp,147.32.85.25,35584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:54:56.996148,0.325949,udp,147.32.84.229,13363.0,<->,220.68.139.157,37243.0,CON,0.0,0.0,4,2921,60,2861,730.25,0.020540910647038686,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:54:59.539014,0.000371,udp,147.32.84.170,44556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:54:59.882076,0.0,tcp,147.32.84.165,2003.0,->,147.32.79.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882211,0.0,tcp,147.32.84.165,2001.0,->,192.168.0.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882218,0.0,tcp,147.32.84.165,2000.0,->,147.33.84.61,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882222,0.0,tcp,147.32.84.165,2007.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882360,0.0,tcp,147.32.84.165,2005.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882427,0.0,tcp,147.32.84.165,2004.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:54:59.882431,0.0,tcp,147.32.84.165,2010.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:08.285349,1746.224243,udp,82.209.153.79,9535.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,706,392,314,70.6,0.5552407932011332,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:55:08.541380,6.8e-05,udp,147.32.85.25,36125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:09.538772,0.000328,udp,147.32.84.170,44027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:55:09.553786,0.000303,udp,147.32.86.92,32961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:11.899619,0.0,tcp,147.32.84.165,2242.0,->,192.168.0.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899633,0.0,tcp,147.32.84.165,2241.0,->,147.33.84.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899639,0.0,tcp,147.32.84.165,2244.0,->,147.32.79.121,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899688,0.0,tcp,147.32.84.165,2246.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899696,0.0,tcp,147.32.84.165,2245.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899748,0.0,tcp,147.32.84.165,2248.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:11.899814,0.0,tcp,147.32.84.165,2250.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:12.500438,0.0,tcp,147.32.84.165,2253.0,->,147.33.84.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:13.517032,0.00027,udp,147.32.84.59,44747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:21.187206,0.218448,tcp,147.32.84.170,50593.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:55:23.916492,0.0,tcp,147.32.84.165,2484.0,->,147.32.79.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916631,0.0,tcp,147.32.84.165,2482.0,->,192.168.0.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916645,0.0,tcp,147.32.84.165,2481.0,->,147.33.84.181,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916650,0.0,tcp,147.32.84.165,2488.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916770,0.0,tcp,147.32.84.165,2486.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916784,0.0,tcp,147.32.84.165,2485.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:23.916789,0.0,tcp,147.32.84.165,2491.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:25.993676,2004.950073,udp,77.104.246.228,13351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1076,956,120,269.0,0.8884758364312267,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:55:29.191878,0.000301,udp,147.32.85.25,40276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:32.807274,0.001743,udp,46.181.30.246,7652.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,582,522,60,291.0,0.8969072164948454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:55:35.934400,0.0,tcp,147.32.84.165,2723.0,->,192.168.0.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:35.934471,60.968025,tcp,147.32.84.165,2637.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:55:35.934478,0.0,tcp,147.32.84.165,2722.0,->,147.33.84.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:35.934530,0.0,tcp,147.32.84.165,2725.0,->,147.32.79.241,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:35.934603,0.0,tcp,147.32.84.165,2727.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:35.934614,0.0,tcp,147.32.84.165,2726.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:35.934652,0.0,tcp,147.32.84.165,2729.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:36.254633,0.0,tcp,147.32.84.165,2731.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:36.534832,0.0,tcp,147.32.84.165,2734.0,->,147.33.84.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:44.013725,0.000485,udp,147.32.84.2,46046.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:47.951446,0.0,tcp,147.32.84.165,2918.0,->,147.32.80.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:47.951530,0.0,tcp,147.32.84.165,2916.0,->,192.168.1.47,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:47.951871,0.0,tcp,147.32.84.165,2921.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:47.951886,0.0,tcp,147.32.84.165,2919.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:47.951890,0.0,tcp,147.32.84.165,2923.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:47.951895,0.0,tcp,147.32.84.165,2922.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:48.552582,0.0,tcp,147.32.84.165,2927.0,->,147.32.80.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:52.186554,0.000229,udp,147.32.84.170,38496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:55:52.187876,0.262905,tcp,147.32.84.170,50597.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:55:52.986259,0.000401,udp,147.32.84.138,37788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:55:59.814579,8.998167,tcp,147.32.84.171,54828.0,->,85.17.234.14,47012.0,S_,0.0,,3,222,222,0,74.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:55:59.969280,0.0,tcp,147.32.84.165,3096.0,->,192.168.1.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:59.969299,0.0,tcp,147.32.84.165,3098.0,->,147.32.80.107,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:59.969304,0.0,tcp,147.32.84.165,3099.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:59.969352,0.0,tcp,147.32.84.165,3101.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:59.969478,0.0,tcp,147.32.84.165,3102.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:55:59.969491,0.0,tcp,147.32.84.165,3103.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:04.551256,0.000275,udp,147.32.84.138,36283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:09.538101,0.000481,udp,147.32.84.170,49131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:09.540041,0.018297,tcp,147.32.84.170,60135.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:11.985848,0.0,tcp,147.32.84.165,3276.0,->,192.168.1.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:11.985862,0.0,tcp,147.32.84.165,3278.0,->,147.32.80.167,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:11.985915,0.0,tcp,147.32.84.165,3279.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:11.986053,0.0,tcp,147.32.84.165,3281.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:11.986067,0.0,tcp,147.32.84.165,3282.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:11.986074,0.0,tcp,147.32.84.165,3283.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:12.586971,0.0,tcp,147.32.84.165,3285.0,->,192.168.1.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:18.304447,0.000175,udp,147.32.84.138,36973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:19.064073,8.999653,tcp,147.32.84.171,39952.0,->,85.17.234.14,45192.0,S_,0.0,,3,222,222,0,74.0,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:56:20.832386,0.000171,udp,147.32.84.138,50071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:20.843866,0.00019,udp,147.32.84.138,43084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:23.186369,0.000282,udp,147.32.84.170,58228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:23.188417,0.217467,tcp,147.32.84.170,50601.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:24.003615,0.0,tcp,147.32.84.165,3459.0,->,147.32.80.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.003728,0.0,tcp,147.32.84.165,3457.0,->,192.168.1.227,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.003742,0.0,tcp,147.32.84.165,3462.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.003747,0.0,tcp,147.32.84.165,3460.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.003801,0.0,tcp,147.32.84.165,3464.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.003951,0.0,tcp,147.32.84.165,3463.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:24.589060,6.466725,tcp,66.249.72.134,65488.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,17984,1883,16101,580.1290322580645,0.10470418149466192,7,1,flow=Background-TCP-Established,Background,-1 2011-08-17 07:56:24.604364,0.0,tcp,147.32.84.165,3468.0,->,147.32.80.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:27.594507,0.000222,udp,147.32.84.138,45210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:28.503768,0.919241,tcp,82.117.137.132,1378.0,->,147.32.87.54,2222.0,FSPA_FSPA,0.0,0.0,122,8388,4404,3984,68.75409836065573,0.525035765379113,7,0,flow=Background-TCP-Established,Background,-1 2011-08-17 07:56:29.540161,0.017828,tcp,147.32.84.170,60138.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:36.020645,0.0,tcp,147.32.84.165,3606.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:36.020661,0.0,tcp,147.32.84.165,3608.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:36.020666,0.0,tcp,147.32.84.165,3609.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:36.020813,0.0,tcp,147.32.84.165,3612.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:36.022391,0.0,tcp,147.32.84.165,3614.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:48.037953,60.942833,tcp,147.32.84.165,3631.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:56:48.038026,0.0,tcp,147.32.84.165,3727.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:48.038086,0.0,tcp,147.32.84.165,3729.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:48.352541,0.0,tcp,147.32.84.165,3730.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:48.596768,0.000231,udp,147.32.84.138,57484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:56:48.639065,0.0,tcp,147.32.84.165,3733.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:48.639080,0.0,tcp,147.32.84.165,3735.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:56:49.540142,0.017898,tcp,147.32.84.170,35358.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:53.183938,3464.528809,udp,109.166.135.90,48372.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,24,3751,768,2983,156.29166666666666,0.20474540122633964,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:56:54.186710,0.219039,tcp,147.32.84.170,50605.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:56:59.539197,0.000384,udp,147.32.84.170,37143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:00.055541,0.0,tcp,147.32.84.165,3847.0,->,147.32.81.153,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:00.055662,0.0,tcp,147.32.84.165,3849.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:00.055742,0.0,tcp,147.32.84.165,3850.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:00.656195,0.0,tcp,147.32.84.165,3853.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:00.656252,0.0,tcp,147.32.84.165,3855.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:03.056001,0.000383,udp,147.32.84.242,46744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,97,153,125.0,0.388,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:57:09.422726,3359.717285,udp,178.178.251.150,12763.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1508,672,836,83.77777777777777,0.44562334217506633,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:12.072809,0.0,tcp,147.32.84.165,3967.0,->,147.32.81.213,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:12.073036,0.0,tcp,147.32.84.165,3969.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:12.073051,0.0,tcp,147.32.84.165,3970.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:12.674195,0.0,tcp,147.32.84.165,3973.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:12.674267,0.0,tcp,147.32.84.165,3975.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:17.068640,0.0003,udp,147.32.84.170,33281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:17.069191,0.000392,udp,147.32.84.170,50844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:17.074816,240.243881,tcp,147.32.84.170,53007.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,28,2625,1463,1162,93.75,0.5573333333333333,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:17.106177,0.103797,udp,147.32.84.170,55085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:17.210589,0.094279,tcp,147.32.84.170,48998.0,->,199.16.83.72,80.0,FSPA_FSPA,0.0,0.0,13,2793,786,2007,214.84615384615384,0.2814178302900107,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:19.538277,0.000272,udp,147.32.84.170,58880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:22.893274,0.000554,udp,87.197.96.103,53394.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,73,474,273.5,0.13345521023765997,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:24.090457,0.0,tcp,147.32.84.165,4087.0,->,147.32.82.19,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:24.090527,0.0,tcp,147.32.84.165,4089.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:24.090682,0.0,tcp,147.32.84.165,4090.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:24.691062,0.0,tcp,147.32.84.165,4093.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:24.691076,0.0,tcp,147.32.84.165,4095.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:25.185915,0.29903,tcp,147.32.84.170,50616.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:29.453685,3274.65332,udp,176.14.168.121,25153.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,3428,353,3075,342.8,0.102975495915986,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:29.538857,0.000298,udp,147.32.84.170,53226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:29.539870,0.01816,tcp,147.32.84.170,60153.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:30.357067,0.000447,udp,188.232.45.184,10973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,218,83,135,109.0,0.38073394495412843,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:32.975883,6.03451,udp,147.32.84.229,13363.0,->,81.165.61.14,40714.0,INT,0.0,,3,180,180,0,60.0,1.0,7,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 07:57:34.546406,0.066476,udp,147.32.84.229,13363.0,<->,91.203.176.253,63501.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:36.107506,0.0,tcp,147.32.84.165,4207.0,->,147.32.82.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.107511,0.0,tcp,147.32.84.165,4206.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.107515,0.0,tcp,147.32.84.165,4209.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.107561,0.0,tcp,147.32.84.165,4208.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.107807,0.0,tcp,147.32.84.165,4210.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.708801,0.0,tcp,147.32.84.165,4212.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.708820,0.0,tcp,147.32.84.165,4213.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.708861,0.0,tcp,147.32.84.165,4214.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.708988,0.0,tcp,147.32.84.165,4215.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:36.709003,0.0,tcp,147.32.84.165,4217.0,->,147.32.87.84,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:38.048864,0.000562,rtcp,118.109.120.20,20871.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,645,72,573,322.5,0.11162790697674418,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:57:39.542347,0.018212,tcp,147.32.84.170,47642.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:40.389637,0.000196,udp,147.32.84.138,40057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:57:41.651469,0.028201,udp,147.32.84.171,51451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,80,176,128.0,0.3125,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:57:46.054678,58.217518,icmp,211.138.102.33,11.0,->,147.32.87.124,,TXD,0.0,,2,140,140,0,70.0,1.0,7,,flow=Background,Background,-1 2011-08-17 07:57:48.124660,0.0,tcp,147.32.84.165,4327.0,->,147.32.82.139,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:48.124761,0.0,tcp,147.32.84.165,4329.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:48.124819,0.0,tcp,147.32.84.165,4330.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:48.725567,60.942539,tcp,147.32.84.165,4352.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:57:48.725574,0.0,tcp,147.32.84.165,4333.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:48.725672,0.0,tcp,147.32.84.165,4335.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:57:49.538243,0.000401,udp,147.32.84.170,44796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:49.539236,0.000283,udp,147.32.84.170,32829.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:53.042282,0.000159,udp,147.32.84.138,47731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:57:56.183542,0.000299,udp,147.32.84.170,41059.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:59.539401,0.000379,udp,147.32.84.170,51502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:57:59.540529,0.0178,tcp,147.32.84.170,54019.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:00.152304,0.0,tcp,147.32.84.165,4448.0,->,147.32.82.199,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:00.152318,0.0,tcp,147.32.84.165,4450.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:00.152471,0.0,tcp,147.32.84.165,4451.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:00.753207,0.0,tcp,147.32.84.165,4454.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:00.753221,0.0,tcp,147.32.84.165,4456.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:02.177217,0.003327,udp,190.100.96.134,46878.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2924,60,2864,731.0,0.02051983584131327,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:03.589742,611.733032,udp,208.88.186.8,34061.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,554,430,124,138.5,0.776173285198556,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:06.222517,10.012803,tcp,74.73.22.218,52154.0,->,147.32.85.26,60764.0,FS_,0.0,,8,612,612,0,76.5,1.0,7,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 07:58:07.539454,0.000292,udp,147.32.84.138,58597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:58:11.670916,0.003379,udp,194.149.102.148,11132.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,238,176,62,119.0,0.7394957983193278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:12.169841,0.0,tcp,147.32.84.165,4568.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.169921,0.0,tcp,147.32.84.165,4567.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.169974,0.0,tcp,147.32.84.165,4570.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.169981,0.0,tcp,147.32.84.165,4569.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.170020,0.0,tcp,147.32.84.165,4571.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.770204,0.0,tcp,147.32.84.165,4573.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.770218,0.0,tcp,147.32.84.165,4574.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.770273,0.0,tcp,147.32.84.165,4575.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.770278,0.0,tcp,147.32.84.165,4576.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:12.770334,0.0,tcp,147.32.84.165,4578.0,->,147.32.88.10,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:13.221023,0.226017,tcp,147.32.84.170,44611.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:13.832058,0.254204,tcp,147.32.84.170,40145.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:17.168404,0.000423,udp,194.230.155.14,25470.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:19.538305,0.000353,udp,147.32.84.170,36447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:19.540298,0.01816,tcp,147.32.84.170,44948.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:24.187247,0.0,tcp,147.32.84.165,4688.0,->,147.32.83.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.187391,0.0,tcp,147.32.84.165,4687.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.187455,0.0,tcp,147.32.84.165,4690.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.187507,0.0,tcp,147.32.84.165,4689.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.187566,0.0,tcp,147.32.84.165,4691.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.734233,3090.363281,udp,147.32.84.229,13363.0,<->,190.244.43.178,6965.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:24.787941,0.0,tcp,147.32.84.165,4693.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.788015,0.0,tcp,147.32.84.165,4694.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.788022,0.0,tcp,147.32.84.165,4696.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.788064,0.0,tcp,147.32.84.165,4697.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.788122,0.0,tcp,147.32.84.165,4699.0,->,147.32.88.70,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:24.876784,2702.630859,udp,217.122.217.233,6905.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,961,266,695,120.125,0.2767950052029136,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:25.067033,0.000256,udp,147.32.84.59,49319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:58:29.540281,0.000399,udp,147.32.84.170,42869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:31.486138,0.000478,udp,85.72.228.70,54519.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,251,189,62,125.5,0.7529880478087649,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:31.848203,0.000426,udp,219.106.183.68,20049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,84,61,72.5,0.5793103448275863,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:33.003625,0.000885,udp,147.32.87.36,60163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,7,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 07:58:36.204063,0.0,tcp,147.32.84.165,4809.0,->,147.32.83.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.204078,0.0,tcp,147.32.84.165,4808.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.204084,0.0,tcp,147.32.84.165,4811.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.204093,0.0,tcp,147.32.84.165,4810.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.204141,0.0,tcp,147.32.84.165,4812.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.805197,0.0,tcp,147.32.84.165,4814.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.805269,0.0,tcp,147.32.84.165,4815.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.805276,0.0,tcp,147.32.84.165,4816.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.805327,0.0,tcp,147.32.84.165,4817.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:36.805334,0.0,tcp,147.32.84.165,4819.0,->,147.32.88.130,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:41.454053,0.000278,udp,147.32.84.138,46867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:58:47.498104,2428.640137,udp,147.32.84.229,13363.0,<->,72.207.224.230,20537.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:48.221725,0.0,tcp,147.32.84.165,4929.0,->,147.32.83.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.221882,0.0,tcp,147.32.84.165,4928.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.221950,0.0,tcp,147.32.84.165,4931.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.221999,0.0,tcp,147.32.84.165,4930.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.222006,0.0,tcp,147.32.84.165,4932.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.822526,0.0,tcp,147.32.84.165,4934.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.822609,0.0,tcp,147.32.84.165,4935.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.822618,0.0,tcp,147.32.84.165,4936.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.822727,0.0,tcp,147.32.84.165,4937.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:48.822742,0.0,tcp,147.32.84.165,4939.0,->,147.32.88.190,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:58:49.113826,0.00052,udp,213.239.210.23,34161.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,587,86,501,293.5,0.1465076660988075,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:49.539290,0.000451,udp,147.32.84.170,49556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:53.673287,0.000227,udp,147.32.84.170,34365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,78,139,108.5,0.35944700460829493,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:53.674504,0.000272,udp,147.32.84.170,55543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,380,78,302,190.0,0.20526315789473684,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:53.827869,0.001973,udp,147.32.84.170,51483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,77,141,109.0,0.3532110091743119,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:53.829932,0.001063,udp,147.32.84.170,51863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,77,205,141.0,0.2730496453900709,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:53.832847,5.125599,tcp,147.32.84.170,59375.0,->,91.189.92.166,80.0,FSPA_FSPA,0.0,0.0,395,388174,23235,364939,982.7189873417722,0.059857177451349136,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:56.181948,0.218579,tcp,147.32.84.170,53775.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:58:57.558561,0.000452,udp,217.24.31.63,1025.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,72,485,278.5,0.12926391382405744,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:58:58.181162,0.000352,udp,147.32.85.25,38167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:00.238657,60.968273,tcp,147.32.84.165,4960.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,7,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 07:59:00.238752,0.0,tcp,147.32.84.165,1093.0,->,147.32.83.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.238759,0.0,tcp,147.32.84.165,1092.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.238802,0.0,tcp,147.32.84.165,1095.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.238888,0.0,tcp,147.32.84.165,1094.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.558767,0.0,tcp,147.32.84.165,1096.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.839679,0.0,tcp,147.32.84.165,1098.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.839762,0.0,tcp,147.32.84.165,1099.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.839769,0.0,tcp,147.32.84.165,1100.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.839773,0.0,tcp,147.32.84.165,1101.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:00.839813,0.0,tcp,147.32.84.165,1103.0,->,147.32.88.250,135.0,S_,0.0,,1,62,62,0,62.0,1.0,7,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 07:59:02.689732,0.000379,udp,147.32.86.20,59306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:03.150959,0.000291,udp,147.32.84.59,35905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:07.605377,0.000435,udp,125.113.133.27,60676.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,7,1,flow=Background-UDP-Established,Background,-1 2011-08-17 07:59:07.984382,2823.122803,udp,147.32.84.229,13363.0,<->,24.179.68.212,62403.0,CON,0.0,0.0,6,3485,2934,551,580.8333333333334,0.8418938307030129,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:59:09.540129,0.000298,udp,147.32.84.170,52139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:19.540557,0.000317,udp,147.32.84.170,35899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:19.541611,0.01764,tcp,147.32.84.170,50553.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:20.259742,0.000239,udp,147.32.84.138,57698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:26.188766,0.202452,tcp,147.32.84.170,53779.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:26.190722,0.000323,udp,77.67.32.158,32709.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 07:59:35.831530,0.024263,udp,147.32.85.26,58548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:39.538546,0.000483,udp,147.32.84.170,32890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:39.540670,0.017965,tcp,147.32.84.170,54047.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:39.801069,250.031799,tcp,147.32.84.59,34434.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,7,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 07:59:46.807217,0.000187,udp,147.32.84.188,46904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:49.538502,0.000386,udp,147.32.84.170,58793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:49.540469,0.018003,tcp,147.32.84.170,44969.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:56.188920,0.00029,udp,147.32.84.170,37280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:56.847107,0.00031,udp,147.32.84.138,44990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,7,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 07:59:59.539464,0.000388,udp,147.32.84.170,44737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,7,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 07:59:59.906333,0.131923,udp,147.32.84.229,13363.0,<->,69.117.172.46,54902.0,CON,0.0,0.0,2,546,74,472,273.0,0.13553113553113552,7,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:00.887187,60.968243,tcp,147.32.84.165,1112.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:00:01.239503,0.000299,udp,147.32.87.36,38134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,96,184,140.0,0.34285714285714286,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:00:01.369432,0.000441,udp,147.32.87.36,39892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:00:01.371524,1800.175049,arp,147.32.87.36,,who,147.32.87.33,,RSP,,,2,120,0,120,60.0,0.0,8,,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:00:07.047694,0.000248,udp,147.32.85.34,55319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:00:10.277668,0.018996,udp,147.32.84.130,35367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,87,218,152.5,0.28524590163934427,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:00:10.336509,0.000219,udp,147.32.87.36,54191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:00:10.368864,0.000348,udp,147.32.87.36,36870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:00:14.520870,0.001439,udp,71.183.252.68,38481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:15.442678,0.000463,udp,111.104.41.199,14125.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,75,484,279.5,0.13416815742397137,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:16.295607,0.303202,udp,147.32.84.229,13363.0,<->,211.15.4.240,58286.0,CON,0.0,0.0,2,150,84,66,75.0,0.56,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:25.208156,0.000223,udp,147.32.84.188,46270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,92,142,117.0,0.39316239316239315,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:00:27.184832,0.00034,udp,147.32.84.170,48989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:29.538557,0.000493,udp,147.32.84.170,42812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:29.540738,0.018528,tcp,147.32.84.170,44975.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:37.110708,0.000285,udp,147.32.84.138,35366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:00:39.538361,0.009918,udp,147.32.84.170,35796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:39.549886,0.018124,tcp,147.32.84.170,45747.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:41.479793,0.000734,udp,184.107.41.73,37169.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,972,75,897,486.0,0.07716049382716049,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:41.812499,0.004492,udp,216.66.118.110,44371.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2924,60,2864,731.0,0.02051983584131327,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:42.479668,2.118382,udp,24.154.172.156,37418.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1108,152,956,277.0,0.1371841155234657,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:46.716800,8.999882,tcp,147.32.84.179,53679.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:00:47.942165,0.000237,udp,147.32.84.138,37489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:00:50.393576,0.000299,udp,69.126.205.26,8835.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:00:51.339732,254.955612,udp,147.32.84.229,13363.0,->,78.52.69.219,48152.0,INT,0.0,,6,798,798,0,133.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:00:54.846525,0.0,igmp,147.32.87.2,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,8,,flow=Background,Background,-1 2011-08-17 08:00:58.185791,0.00027,udp,147.32.84.170,58403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:00:59.538680,0.000376,udp,147.32.84.170,45323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:01.536078,60.966061,tcp,147.32.84.165,1113.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:01:06.178740,0.000565,udp,113.39.191.138,35016.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,647,74,573,323.5,0.1143740340030912,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:01:09.538618,0.000384,udp,147.32.84.170,49825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:09.540576,0.018278,tcp,147.32.84.170,50568.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:17.057598,0.000328,udp,147.32.87.36,38920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:01:17.065496,0.000295,udp,147.32.87.36,59332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,86,276,181.0,0.23756906077348067,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:01:19.354673,0.000643,udp,203.181.52.186,12906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,563,77,486,281.5,0.13676731793960922,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:01:19.538652,0.000523,udp,147.32.84.170,35260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:30.409815,834.798645,udp,147.32.84.229,13363.0,<->,68.116.99.254,40755.0,CON,0.0,0.0,6,3436,522,2914,572.6666666666666,0.15192083818393481,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:01:39.539515,0.000467,udp,147.32.84.170,57810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:39.540704,0.018187,tcp,147.32.84.170,45740.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:49.540864,0.018183,tcp,147.32.84.170,44985.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:01:49.867129,0.000307,udp,147.32.84.138,36224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:01:59.539537,0.000454,udp,147.32.84.170,48825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:02.182492,60.967201,tcp,147.32.84.165,1129.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:02:06.730393,0.00038,udp,147.32.85.34,50486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:06.890249,0.000302,udp,147.32.85.34,59982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:11.402870,1100.111572,udp,65.175.227.207,13901.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3109,165,2944,518.1666666666666,0.053071727243486654,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:02:14.583032,3019.759766,udp,82.69.110.125,9582.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1404,1032,372,117.0,0.7350427350427351,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:02:15.169389,0.000293,udp,147.32.84.2,44285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:16.749995,0.000382,udp,147.32.84.59,43572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:19.540609,0.017775,tcp,147.32.84.170,45761.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:22.678142,0.000221,udp,147.32.84.59,33052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:22.729605,0.000202,udp,147.32.85.34,56901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:26.639405,0.169788,tcp,147.32.86.20,3446.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1691,69519,924.8051948051948,0.023746664794270466,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:02:26.963437,0.371758,udp,147.32.84.229,13363.0,<->,111.242.143.99,52407.0,CON,0.0,0.0,6,3113,120,2993,518.8333333333334,0.03854802441374879,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:02:29.538770,0.000321,udp,147.32.84.170,42132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:30.185159,0.000425,udp,147.32.84.170,46048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:30.187192,0.266401,tcp,147.32.84.170,53805.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:38.459146,0.000316,udp,147.32.84.59,59617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:38.700300,3475.967041,udp,147.32.84.136,36162.0,<->,77.78.110.71,123.0,CON,0.0,0.0,24,2160,1080,1080,90.0,0.5,8,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 08:02:45.548993,0.000277,udp,147.32.84.138,47081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:48.177031,0.000334,udp,147.32.84.138,34205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:49.540616,0.018479,tcp,147.32.84.170,44994.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:02:52.502016,3171.003418,udp,147.32.87.214,123.0,<->,147.32.30.28,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,8,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 08:02:53.714478,0.000241,udp,147.32.84.138,41435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:02:54.113347,120.530464,udp,118.70.176.99,26271.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:02:56.504900,0.00018,udp,147.32.84.138,49353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:03:00.637308,0.000205,udp,147.32.85.25,33396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:03:00.982405,1523.559326,udp,147.32.84.229,13363.0,<->,24.242.26.231,15514.0,CON,0.0,0.0,4,299,179,120,74.75,0.5986622073578596,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:03:01.185224,0.000334,udp,147.32.84.170,59257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:01.187345,0.211266,tcp,147.32.84.170,52343.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:02.829840,60.967735,tcp,147.32.84.165,1130.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:03:05.793783,0.000164,udp,147.32.85.25,35415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:03:07.188762,0.000352,udp,147.32.84.59,36614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:03:07.860290,0.002123,udp,46.70.170.25,14618.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:03:09.538585,0.000341,udp,147.32.84.170,54579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:09.540646,0.018412,tcp,147.32.84.170,50385.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:13.225332,0.320036,tcp,147.32.84.170,38247.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:13.762215,0.000225,udp,147.32.86.20,55963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:03:13.787850,0.303295,tcp,147.32.84.170,38250.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:16.524224,0.000252,udp,147.32.84.164,54009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,78,139,108.5,0.35944700460829493,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.524924,0.035704,udp,147.32.84.164,39173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,380,78,302,190.0,0.20526315789473684,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.726613,0.000274,udp,147.32.84.164,56757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,79,140,109.5,0.3607305936073059,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.726756,0.044417,udp,147.32.84.164,60339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.727203,0.00049,udp,147.32.84.164,36666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,79,140,109.5,0.3607305936073059,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.727912,0.03606,udp,147.32.84.164,59374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.729150,0.000519,udp,147.32.84.164,55492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.729958,0.000403,udp,147.32.84.164,40027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.747805,0.000302,udp,147.32.84.164,53251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,557,73,484,278.5,0.1310592459605027,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.764860,4.011305,tcp,147.32.84.164,58561.0,->,91.189.92.166,80.0,FSPA_FSPA,0.0,0.0,387,387646,22707,364939,1001.6692506459948,0.058576639511306705,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:16.839739,4.051172,tcp,147.32.84.164,48664.0,->,174.36.30.74,80.0,FSPA_FSPA,0.0,0.0,60,34922,5732,29190,582.0333333333333,0.16413722009048737,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:19.539437,0.000463,udp,147.32.84.170,43047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:26.038772,73.545334,udp,147.32.84.229,13363.0,<->,174.62.97.193,32684.0,CON,0.0,0.0,10,670,370,300,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:03:26.890428,0.000162,udp,147.32.84.164,57867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,81,142,111.5,0.3632286995515695,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:03:29.539650,0.000314,udp,147.32.84.170,50759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:29.540743,0.018279,tcp,147.32.84.170,41257.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:39.540613,0.01839,tcp,147.32.84.170,52085.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:44.447707,0.121241,udp,147.32.84.170,46047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:44.589863,250.052414,tcp,147.32.84.170,49358.0,->,74.125.232.201,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:03:59.466892,0.000373,udp,64.150.217.212,42442.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:03:59.539486,0.00034,udp,147.32.84.170,47816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:01.185252,0.000359,udp,147.32.84.170,54775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:01.186202,0.000316,udp,147.32.84.170,33293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:03.477837,60.968266,tcp,147.32.84.165,1131.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:04:06.433880,0.000361,udp,67.148.217.6,34817.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:07.946565,15.228927,tcp,95.103.93.193,50724.0,->,147.32.87.33,443.0,FSPA_FSPA,0.0,0.0,18,3068,1776,1292,170.44444444444446,0.5788787483702738,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:04:09.532597,0.000241,udp,147.32.84.138,43170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:09.539832,0.000274,udp,147.32.84.170,60589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:11.396742,0.000245,udp,147.32.85.26,63620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:14.628637,0.00027,udp,147.32.84.130,35368.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,110,160,135.0,0.4074074074074074,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:16.526853,60.7486,tcp,147.32.84.59,49653.0,->,194.79.52.196,80.0,FSPA_FSPA,0.0,0.0,9,2154,1111,1043,239.33333333333334,0.5157845868152274,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:04:19.538766,0.000419,udp,147.32.84.170,51236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:19.539615,0.000303,udp,147.32.84.170,45537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:19.540657,0.017906,tcp,147.32.84.170,52091.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:19.577506,1.655617,tcp,147.32.86.20,3549.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,95796,1406,94390,1041.2608695652175,0.014677022005094159,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:04:20.409319,0.036456,udp,147.32.84.171,35125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,79,237,158.0,0.25,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:20.527737,0.00034,udp,147.32.84.138,46319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:20.527756,0.000348,udp,147.32.84.138,41237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:22.906706,0.132724,udp,147.32.84.194,36146.0,<->,173.238.18.242,23685.0,CON,0.0,0.0,2,594,74,520,297.0,0.12457912457912458,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:23.405983,0.140558,udp,147.32.84.194,36146.0,<->,184.162.115.216,20503.0,CON,0.0,0.0,2,135,74,61,67.5,0.5481481481481482,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:27.168247,0.000411,udp,203.31.81.28,3423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,75,470,272.5,0.13761467889908258,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:29.540885,0.017795,tcp,147.32.84.170,43767.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:31.186064,0.000264,udp,147.32.84.170,49068.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:32.375859,2434.9375,udp,131.183.224.5,34964.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,768,582,186,128.0,0.7578125,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:34.992422,2605.19165,udp,147.32.84.229,13363.0,<->,71.235.163.168,22950.0,CON,0.0,0.0,6,3456,520,2936,576.0,0.15046296296296297,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:36.703561,0.000364,udp,147.32.84.164,58409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:36.704220,0.000164,udp,147.32.84.164,53126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:36.704665,0.000347,udp,147.32.84.164,56646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,77,276,176.5,0.21813031161473087,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:36.705666,0.000257,udp,147.32.84.164,36464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:36.707560,0.000308,udp,147.32.84.164,42317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,77,205,141.0,0.2730496453900709,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:36.708864,2.636556,tcp,147.32.84.164,47038.0,->,91.189.88.33,80.0,FSPA_FSPA,0.0,0.0,39,12771,4457,8314,327.46153846153845,0.34899381411009317,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:49.540738,0.018867,tcp,147.32.84.170,50405.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:04:52.321996,1.271052,udp,147.32.84.229,13363.0,<->,69.119.54.3,14131.0,CON,0.0,0.0,4,1100,553,547,275.0,0.5027272727272727,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:04:53.171251,0.00044,udp,147.32.84.164,45209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,352,81,271,176.0,0.23011363636363635,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:53.171255,0.000447,udp,147.32.84.164,39559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:53.172013,0.000332,udp,147.32.84.164,44110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,557,73,484,278.5,0.1310592459605027,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:53.172135,167.318359,tcp,147.32.84.164,47779.0,->,137.254.16.69,80.0,FSPA_FSPA,0.0,0.0,59980,69267537,889443,68378094,1154.8438979659886,0.012840690437715433,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:53.172987,167.164185,tcp,147.32.84.164,50811.0,->,74.125.232.202,80.0,FSPA_FSPA,0.0,0.0,8239,8327650,173858,8153792,1010.7598009467168,0.020877198249205958,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:04:58.718369,0.000284,udp,147.32.84.59,32893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:04:59.539969,0.0003,udp,147.32.84.170,49118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:01.180273,0.000222,udp,147.32.84.170,51983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:04.126128,60.966629,tcp,147.32.84.165,1132.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:05:04.240832,0.000207,udp,147.32.84.164,41170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,88,145,116.5,0.3776824034334764,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:04.246002,1155.138672,udp,147.32.84.229,13363.0,<->,88.83.35.210,9822.0,CON,0.0,0.0,10,3426,3184,242,342.6,0.9293636894337419,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:05:04.296543,0.116519,udp,147.32.84.164,50903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,74,211,142.5,0.2596491228070175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:04.297068,0.000305,udp,147.32.84.164,56677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,88,145,116.5,0.3776824034334764,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:04.299097,0.000178,udp,147.32.84.164,40840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:04.300676,0.210286,udp,147.32.84.164,32903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,76,277,176.5,0.21529745042492918,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:04.422364,0.005515,udp,147.32.84.164,43730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,71,162,116.5,0.30472103004291845,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:07.583204,0.000309,udp,110.139.11.120,10002.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:05:09.329247,0.000266,udp,147.32.84.164,35462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:09.542061,0.017796,tcp,147.32.84.170,43773.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:10.821978,3344.955566,udp,147.32.84.229,13363.0,<->,178.124.97.186,53343.0,CON,0.0,0.0,12,804,444,360,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:05:11.678597,0.001873,udp,147.32.84.164,38721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:11.678975,0.364697,tcp,147.32.84.164,42932.0,->,50.17.203.200,81.0,FSPA_FSRA,0.0,0.0,10,1181,861,320,118.1,0.729043183742591,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:11.688009,0.000279,udp,147.32.84.164,57549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:11.730027,3596.958252,tcp,147.32.84.164,47592.0,->,74.125.232.216,443.0,SPA_SPA,0.0,0.0,3249,956775,390874,565901,294.48291782086795,0.4085328316479841,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:11.845327,0.000304,udp,147.32.84.164,59171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:11.909102,40.310982,tcp,147.32.84.164,48490.0,->,69.58.183.143,80.0,FSPA_FSPA,0.0,0.0,13,2653,705,1948,204.07692307692307,0.26573690162080665,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:12.163393,0.017077,udp,147.32.84.164,57520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:12.228290,0.009788,udp,147.32.84.164,54085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:12.238492,249.903168,tcp,147.32.84.164,52655.0,->,74.125.232.223,80.0,FSPA_FSRPA,0.0,0.0,23,4168,1068,3100,181.2173913043478,0.2562380038387716,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:12.238499,249.903168,tcp,147.32.84.164,52656.0,->,74.125.232.223,80.0,FSPA_FSRPA,0.0,0.0,23,4168,1068,3100,181.2173913043478,0.2562380038387716,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:12.545268,0.0003,udp,147.32.84.164,52704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:13.154689,0.00991,udp,147.32.84.164,52222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:13.164946,0.019968,udp,147.32.84.164,33181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,84,280,182.0,0.23076923076923078,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:15.040843,0.000213,udp,147.32.84.164,43672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:15.041264,0.000311,udp,147.32.84.164,36487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:15.063890,0.009993,udp,147.32.84.164,57963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:15.271526,0.859033,tcp,147.32.84.164,34223.0,->,205.188.27.208,443.0,FSPA_FSPA,0.0,0.0,22,7259,1361,5898,329.95454545454544,0.1874913899986224,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:15.548133,0.020022,udp,147.32.84.164,54042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,77,229,153.0,0.25163398692810457,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:17.127062,0.000233,udp,147.32.84.138,52380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:18.429310,0.00018,udp,147.32.85.25,48906.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:18.440763,0.120017,udp,147.32.85.25,42897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:23.704421,0.000259,udp,147.32.84.138,33333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:24.013071,0.000225,udp,147.32.85.25,33833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:29.541814,0.000291,udp,147.32.84.170,47897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:29.542629,0.000448,udp,147.32.84.170,43993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:30.912178,2.363722,tcp,38.101.148.126,39420.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,11,1887,606,1281,171.54545454545453,0.32114467408585057,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:05:32.188975,0.00024,udp,147.32.84.170,36601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:32.189844,0.000301,udp,147.32.84.170,58119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:32.190731,0.215504,tcp,147.32.84.170,52370.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:39.561080,0.000327,udp,147.32.84.170,46602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:40.989197,0.010343,udp,147.32.84.164,34976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,87,166,126.5,0.3438735177865613,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:40.991341,0.000348,udp,147.32.84.164,59002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:41.009892,0.112044,udp,147.32.84.164,39305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:41.020197,250.014236,tcp,147.32.84.164,37226.0,->,74.125.232.221,443.0,SRPA_FSPA,0.0,0.0,31,4648,1551,3097,149.93548387096774,0.33369191049913943,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:44.680286,0.000248,udp,147.32.84.59,62160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:05:45.187003,8.103614,tcp,147.32.84.164,43722.0,->,174.35.64.29,80.0,FSPA_FSPA,0.0,0.0,13,3403,1466,1937,261.7692307692308,0.43079635615633266,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:45.187071,8.103271,tcp,147.32.84.164,43723.0,->,174.35.64.29,80.0,FSPA_FSPA,0.0,0.0,13,3496,1466,2030,268.9230769230769,0.4193363844393593,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:45.187297,308.278198,tcp,147.32.84.164,50795.0,->,216.52.242.80,80.0,FSPA_FSPA,0.0,0.0,15,2980,1814,1166,198.66666666666666,0.6087248322147651,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:49.539352,0.000354,udp,147.32.84.170,49371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:49.541277,0.017681,tcp,147.32.84.170,38899.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:05:50.313443,0.000279,udp,147.32.84.164,40609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,83,157,120.0,0.3458333333333333,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.313735,0.000233,udp,147.32.84.164,38399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,87,173,130.0,0.3346153846153846,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.313961,0.704165,tcp,147.32.84.164,48497.0,->,74.125.232.223,443.0,SRPA_SPA,0.0,0.0,15,3388,1011,2377,225.86666666666667,0.29840613931523025,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.314567,240.720139,tcp,147.32.84.164,50542.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4788,1566,3222,154.4516129032258,0.32706766917293234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.314680,0.702799,tcp,147.32.84.164,50543.0,->,209.85.148.132,443.0,SRPA_SPA,0.0,0.0,15,3634,1038,2596,242.26666666666668,0.2856356631810677,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.315434,240.71962,tcp,147.32.84.164,50545.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4788,1566,3222,154.4516129032258,0.32706766917293234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.315551,240.719482,tcp,147.32.84.164,50546.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4788,1566,3222,154.4516129032258,0.32706766917293234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.315726,240.720047,tcp,147.32.84.164,50549.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4757,1551,3206,153.4516129032258,0.3260458272020181,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.315770,240.719742,tcp,147.32.84.164,50550.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4757,1551,3206,153.4516129032258,0.3260458272020181,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.316251,0.701394,tcp,147.32.84.164,50557.0,->,209.85.148.132,443.0,SRPA_SPA,0.0,0.0,15,3600,1020,2580,240.0,0.2833333333333333,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:50.359926,240.676392,tcp,147.32.84.164,56347.0,->,74.125.232.204,443.0,SRPA_FSPA,0.0,0.0,31,4955,1545,3410,159.83870967741936,0.31180625630676084,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:05:57.005519,0.000459,udp,190.242.7.248,12543.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:05:59.540867,0.017766,tcp,147.32.84.170,35713.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:02.063335,2810.296387,udp,147.32.84.229,13363.0,<->,180.177.13.124,49079.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:06:02.780009,0.013588,tcp,147.32.86.96,54025.0,->,147.32.87.51,12489.0,_FSPA,,0.0,8,584,0,584,73.0,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:06:03.185331,0.000263,udp,147.32.84.170,54143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:03.186098,0.000309,udp,147.32.84.170,49152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:03.613332,1084.430542,tcp,147.32.84.164,43784.0,->,74.125.232.195,443.0,FSPA_FSPA,0.0,0.0,1114,1106280,741470,364810,993.0700179533213,0.6702371913078063,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:04.772929,60.966717,tcp,147.32.84.165,1133.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:06:05.183558,0.000222,udp,147.32.84.138,46870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:06:07.573196,0.000225,udp,147.32.85.34,54097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:06:19.539185,0.000407,udp,147.32.84.170,37299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:19.540133,0.000334,udp,147.32.84.170,57042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:20.028072,0.018515,udp,147.32.84.164,60912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.028249,0.001111,udp,147.32.84.164,39604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.029085,0.001008,udp,147.32.84.164,34265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030322,0.000399,udp,147.32.84.164,38305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,70,176,123.0,0.2845528455284553,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030450,0.00273,udp,147.32.84.164,50502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030495,108.034203,tcp,147.32.84.164,45594.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,51,43535,6517,37018,853.6274509803922,0.14969564718042955,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030551,108.193993,tcp,147.32.84.164,45596.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,52,42292,6604,35688,813.3076923076923,0.15615246382294523,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030604,108.19474,tcp,147.32.84.164,45597.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,62,53506,6673,46833,863.0,0.12471498523530071,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.030764,90.754875,tcp,147.32.84.164,49449.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,38,25732,3198,22534,677.1578947368421,0.12428105083164931,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.031606,13.246746,tcp,147.32.84.164,51765.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.034396,13.245,tcp,147.32.84.164,39676.0,->,194.79.52.194,80.0,FSA_SRA,0.0,0.0,6,376,194,182,62.666666666666664,0.5159574468085106,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.035057,13.244157,tcp,147.32.84.164,46264.0,->,194.79.52.204,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.042969,13.242798,tcp,147.32.84.164,41992.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.043043,13.242797,tcp,147.32.84.164,41993.0,->,74.125.232.193,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.265793,53.015236,tcp,147.32.84.164,43556.0,->,194.79.52.98,80.0,FSPA_FSPA,0.0,0.0,13,2551,1040,1511,196.23076923076923,0.40768326146609174,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.428711,0.004584,udp,147.32.84.164,44330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.431345,0.00032,udp,147.32.84.164,51333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.434838,0.000417,udp,147.32.84.164,38792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.440889,0.000469,udp,147.32.84.164,60866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,74,180,127.0,0.29133858267716534,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.441351,0.000358,udp,147.32.84.164,54960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.442136,0.002608,udp,147.32.84.164,45978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.449493,0.002053,udp,147.32.84.164,34351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.464569,0.000225,udp,147.32.84.164,57469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.466154,0.004925,tcp,147.32.84.164,53120.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2046,1042,1004,227.33333333333334,0.509286412512219,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.549929,0.002195,udp,147.32.84.164,43235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,79,209,144.0,0.2743055555555556,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.616938,0.004972,udp,147.32.84.164,35884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.618513,0.002323,udp,147.32.84.164,52814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,76,178,127.0,0.2992125984251969,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.624839,0.007237,udp,147.32.84.164,43467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,76,131,103.5,0.3671497584541063,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.625285,0.000415,udp,147.32.84.164,48794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,71,183,127.0,0.2795275590551181,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.632846,0.000294,udp,147.32.84.164,59993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,76,168,122.0,0.3114754098360656,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.650097,0.03292,udp,147.32.84.164,50139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,73,145,109.0,0.3348623853211009,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.652063,0.024456,udp,147.32.84.164,44349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,76,123,99.5,0.38190954773869346,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.660015,0.000125,udp,147.32.84.164,59588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.660275,0.000448,udp,147.32.84.164,33974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.661605,0.000583,udp,147.32.84.164,40005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.662623,0.00346,udp,147.32.84.164,35700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,89,158,123.5,0.3603238866396761,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.663985,0.000381,udp,147.32.84.164,42863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.664373,12.613967,tcp,147.32.84.164,36403.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.664429,12.613631,tcp,147.32.84.164,36404.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,71,56341,3561,52780,793.5352112676056,0.06320441596705774,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.664436,0.003113,udp,147.32.84.164,43845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.664486,12.613634,tcp,147.32.84.164,36406.0,->,77.75.76.22,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.666176,12.61516,tcp,147.32.84.164,49336.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.666279,0.002622,udp,147.32.84.164,53065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,89,146,117.5,0.37872340425531914,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.666286,12.613168,tcp,147.32.84.164,49338.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.668712,12.610244,tcp,147.32.84.164,55672.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,4469,2739,1730,319.2142857142857,0.6128887894383531,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.668850,1.2112,tcp,147.32.84.164,48513.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2048,1044,1004,227.55555555555554,0.509765625,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.670947,0.000315,udp,147.32.84.164,34295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.671604,0.002054,udp,147.32.84.164,54784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.676992,0.000311,udp,147.32.84.164,50937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.682411,0.000398,udp,147.32.84.164,46104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,82,188,135.0,0.3037037037037037,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.690995,12.626068,tcp,147.32.84.164,37578.0,->,213.189.48.244,80.0,FSA_FSA,0.0,0.0,9,556,314,242,61.77777777777778,0.564748201438849,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.691073,12.626244,tcp,147.32.84.164,37580.0,->,213.189.48.244,80.0,FSA_FSA,0.0,0.0,9,556,314,242,61.77777777777778,0.564748201438849,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:20.968879,0.000282,udp,147.32.84.164,43203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.030260,6.022828,udp,147.32.84.229,13363.0,->,95.189.4.79,7469.0,INT,0.0,,3,690,690,0,230.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:06:21.111198,0.000259,udp,147.32.84.164,56015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.111804,0.002523,udp,147.32.84.164,39590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.115238,0.012917,udp,147.32.84.164,47739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.116273,0.000352,udp,147.32.84.164,47057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.118863,0.000234,udp,147.32.84.164,48979.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.120790,0.000309,udp,147.32.84.164,50184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,76,151,113.5,0.33480176211453744,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.260310,0.000276,udp,147.32.84.164,41640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.260490,0.019987,udp,147.32.84.164,40890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.265502,0.102967,udp,147.32.84.164,34823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,70,139,104.5,0.3349282296650718,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.268967,0.000298,udp,147.32.84.164,38831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.273518,0.000254,udp,147.32.84.164,38896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.274156,0.00423,udp,147.32.84.164,36226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,72,137,104.5,0.3444976076555024,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.281400,0.021455,udp,147.32.84.164,34416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.282958,0.369504,udp,147.32.84.164,46832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,75,175,125.0,0.3,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.368790,0.000323,udp,147.32.84.164,36065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,70,139,104.5,0.3349282296650718,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.627605,0.018955,udp,147.32.84.164,57067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.628198,0.000336,udp,147.32.84.164,57539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,71,150,110.5,0.3212669683257919,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.630242,0.001386,udp,147.32.84.164,41890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.644130,0.000264,udp,147.32.84.164,58632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,71,139,105.0,0.3380952380952381,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.646862,0.000416,udp,147.32.84.164,32969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.650181,99.759148,tcp,147.32.84.164,33372.0,->,77.93.192.144,80.0,SPA_SRPA,0.0,0.0,80,74774,2852,71922,934.675,0.03814160002139781,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.650201,11.631733,tcp,147.32.84.164,33374.0,->,77.93.192.144,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.659053,0.599323,tcp,147.32.84.164,56361.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,13,4535,1404,3131,348.84615384615387,0.3095920617420066,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.659124,0.731061,tcp,147.32.84.164,56362.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,13,5121,1766,3355,393.9230769230769,0.344854520601445,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.659132,0.785107,tcp,147.32.84.164,56364.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,24,14624,2095,12529,609.3333333333334,0.14325765864332604,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.886982,0.000155,udp,147.32.84.164,34257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:21.887416,0.011343,udp,147.32.84.164,55730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.452110,0.042379,udp,147.32.84.164,58555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.544373,0.14002,tcp,147.32.84.164,56373.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,11,1656,1177,479,150.54545454545453,0.7107487922705314,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.545745,0.000217,udp,147.32.84.164,38160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,76,130,103.0,0.36893203883495146,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.675344,0.362879,tcp,147.32.84.164,56377.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,11,1660,1180,480,150.9090909090909,0.7108433734939759,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.741999,0.000242,udp,147.32.84.164,33938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,71,129,100.0,0.355,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.742409,0.000268,udp,147.32.84.164,45601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,71,148,109.5,0.3242009132420091,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:22.742890,20.535378,tcp,147.32.84.164,38834.0,->,194.213.194.147,80.0,FSPA_FSPA,0.0,0.0,11,1884,809,1075,171.27272727272728,0.4294055201698514,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:23.054450,0.004167,udp,147.32.84.164,42703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,81,238,159.5,0.25391849529780564,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:27.957443,1.028201,tcp,147.32.86.20,3661.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,92,95562,1406,94156,1038.7173913043478,0.01471296121889454,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:06:31.885845,0.000234,udp,147.32.84.164,58789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:33.302020,1821.085938,udp,160.217.215.92,40344.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,936,688,248,117.0,0.7350427350427351,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:06:37.534117,0.000204,udp,147.32.84.171,57692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,270,87,183,135.0,0.32222222222222224,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:06:37.620391,0.007935,tcp,147.32.84.164,46356.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,2317,1552,765,257.44444444444446,0.669831678895123,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.623182,15.656329,tcp,147.32.84.164,51870.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,11,782,428,354,71.0909090909091,0.5473145780051151,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.623579,0.002603,udp,147.32.84.164,45160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.623746,14.012999,tcp,147.32.84.164,53213.0,->,77.78.99.22,80.0,SA_SRA,0.0,0.0,6,376,194,182,62.666666666666664,0.5159574468085106,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.624143,108.838547,tcp,147.32.84.164,39793.0,->,194.79.52.194,80.0,FSA_SA,0.0,0.0,9,556,494,62,61.77777777777778,0.8884892086330936,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.626188,0.000333,udp,147.32.84.164,43921.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,71,200,135.5,0.26199261992619927,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.626293,0.000315,udp,147.32.84.164,52091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,72,184,128.0,0.28125,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.898489,0.000231,udp,147.32.84.164,52749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.899009,0.000146,udp,147.32.84.164,40115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.899060,0.000305,udp,147.32.84.164,35279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.900744,0.000261,udp,147.32.84.164,55191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,78,184,131.0,0.29770992366412213,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.904016,0.000431,udp,147.32.84.164,46246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,279,80,199,139.5,0.2867383512544803,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.904544,0.002289,udp,147.32.84.164,57255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,81,151,116.0,0.34913793103448276,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.904784,0.002695,udp,147.32.84.164,59310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,83,153,118.0,0.3516949152542373,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.906861,0.000632,udp,147.32.84.164,39308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,81,200,140.5,0.28825622775800713,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.907848,0.000355,udp,147.32.84.164,37013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,83,202,142.5,0.2912280701754386,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.909415,0.000367,udp,147.32.84.164,45331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,76,182,129.0,0.29457364341085274,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:37.914829,0.1263,tcp,147.32.84.164,51582.0,->,194.79.52.16,80.0,FSPA_FSPA,0.0,0.0,21,13358,1796,11562,636.0952380952381,0.13445126515945502,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:38.006333,0.002187,udp,147.32.84.164,34804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,74,163,118.5,0.31223628691983124,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:38.018217,0.000153,udp,147.32.84.164,43604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:38.123686,0.000372,udp,147.32.84.164,51109.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,81,157,119.0,0.3403361344537815,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:38.124363,0.000412,udp,147.32.84.164,51067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:38.168303,0.00763,udp,147.32.84.164,52989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,74,134,104.0,0.3557692307692308,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:06:39.540099,0.00041,udp,147.32.84.170,48004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:39.541087,0.00036,udp,147.32.84.170,46665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:42.396632,0.000235,udp,147.32.84.138,42636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:06:43.784396,0.000227,udp,147.32.84.138,56892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:06:49.539959,0.000271,udp,147.32.84.170,51437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:06:59.973754,0.000355,udp,115.64.45.51,19127.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:07:00.012918,0.000359,udp,147.32.84.194,56628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:07:00.302194,0.000199,udp,147.32.84.138,55196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:07:02.362476,0.038075,tcp,147.32.84.164,56419.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:07:05.186020,0.000354,udp,147.32.84.170,41415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:05.186915,0.000313,udp,147.32.84.170,45939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:05.419917,60.951893,tcp,147.32.84.165,1134.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:07:06.385431,0.005356,tcp,147.32.87.249,1291.0,->,147.32.87.54,8081.0,_FSA,,0.0,6,364,0,364,60.666666666666664,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:07:18.194634,0.000455,udp,81.252.197.27,34237.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,74,476,275.0,0.13454545454545455,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:07:19.539260,0.000409,udp,147.32.84.170,53015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:22.305262,2710.45752,udp,90.153.55.209,41583.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,536,296,240,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:07:22.359973,0.000415,udp,147.32.84.164,42643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:07:22.360626,0.000214,udp,147.32.84.164,49221.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:07:29.541592,0.000373,udp,147.32.84.170,34737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:32.364266,0.03789,tcp,147.32.84.164,56422.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:07:34.585499,0.000368,udp,147.32.86.20,63390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:07:36.464885,0.152408,udp,147.32.84.229,13363.0,<->,24.1.93.97,17658.0,CON,0.0,0.0,2,566,81,485,283.0,0.1431095406360424,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:07:39.052048,1.243563,tcp,67.0.63.235,49636.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,19,1589,904,685,83.63157894736842,0.5689112649465072,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:07:39.539201,0.00045,udp,147.32.84.170,51153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:42.011401,0.000205,udp,147.32.85.25,53401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:07:44.857909,0.325916,udp,147.32.84.194,36146.0,<->,211.16.223.179,54706.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:07:49.541321,0.018039,tcp,147.32.84.170,50429.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:07:52.360671,0.037461,tcp,147.32.84.164,47393.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:07:53.665882,0.358437,tcp,67.195.111.228,36816.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,2267,728,1539,226.7,0.3211292456991619,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:07:56.724492,0.000236,udp,147.32.84.138,47076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:07:57.278409,0.000334,udp,147.32.84.59,32832.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,78,182,130.0,0.3,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:08:00.902764,0.001424,udp,87.216.182.54,3726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:08:02.361208,0.036964,tcp,147.32.84.164,47394.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:06.057585,60.968704,tcp,147.32.84.165,1135.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:08:07.333838,0.000229,udp,147.32.85.34,58883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:08:07.389114,0.000302,udp,147.32.85.34,53067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:08:12.361336,0.036895,tcp,147.32.84.164,47396.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:13.445799,0.596543,tcp,147.32.84.170,57445.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:08:18.665352,2361.053467,udp,92.244.100.158,19786.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,30,3399,1027,2372,113.3,0.3021476904972051,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:08:19.173312,0.000183,udp,147.32.84.138,56219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:08:19.541272,0.018045,tcp,147.32.84.170,34026.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:08:21.140659,0.000272,udp,147.32.84.164,55270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,81,142,111.5,0.3632286995515695,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:21.141198,0.000245,udp,147.32.84.164,50305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,81,142,111.5,0.3632286995515695,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:22.365395,0.000272,udp,147.32.84.164,37627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:28.304019,3154.204346,udp,119.126.39.179,53258.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,405,225,180,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:08:29.541170,0.017784,tcp,147.32.84.170,59266.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:08:36.227720,0.000232,udp,147.32.84.138,33545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:08:37.186544,0.000402,udp,147.32.84.170,34574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:08:43.009787,0.33876,udp,147.32.84.229,13363.0,<->,220.107.26.107,43003.0,CON,0.0,0.0,2,297,202,95,148.5,0.6801346801346801,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:08:49.540966,0.000294,udp,147.32.84.170,60786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:08:50.404355,0.00035,udp,147.32.84.164,33071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.596874,0.027573,udp,147.32.84.164,48772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.598245,0.000246,udp,147.32.84.164,46481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,85,166,125.5,0.3386454183266932,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.598319,0.070005,udp,147.32.84.164,41801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.598814,0.000461,udp,147.32.84.164,45292.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.599730,242.710373,tcp,147.32.84.164,34277.0,->,74.125.232.208,80.0,FSPA_FSPA,0.0,0.0,21,3008,2023,985,143.23809523809524,0.6725398936170213,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.624014,32.663464,tcp,147.32.84.164,48352.0,->,194.79.55.38,80.0,FSPA_FSPA,0.0,0.0,147,127014,11807,115207,864.0408163265306,0.09295825657014187,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.624026,16.734795,tcp,147.32.84.164,48353.0,->,194.79.55.38,80.0,FSPA_FSPA,0.0,0.0,88,78250,6221,72029,889.2045454545455,0.07950159744408945,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.778229,0.119759,tcp,147.32.84.164,45445.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1404,703,701,140.4,0.5007122507122507,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.903449,0.0004,udp,147.32.84.164,36163.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.904283,0.000388,udp,147.32.84.164,32868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,71,150,110.5,0.3212669683257919,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.909431,0.000351,udp,147.32.84.164,37306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,82,201,141.5,0.28975265017667845,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.914506,0.000319,udp,147.32.84.164,45767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,73,185,129.0,0.28294573643410853,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:50.916668,0.000274,udp,147.32.84.164,53019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:08:52.301504,6.062112,icmp,195.66.139.28,3331.0,->,147.32.85.123,,URFIL,0.0,,3,306,306,0,102.0,1.0,8,,flow=Background,Background,-1 2011-08-17 08:08:59.540777,0.000425,udp,147.32.84.170,48156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:06.706740,60.950893,tcp,147.32.84.165,1136.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:09:09.539456,0.000465,udp,147.32.84.170,57579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:09.687245,0.0003,udp,147.32.84.138,47833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:09:19.540114,0.000407,udp,147.32.84.170,40806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:22.371616,0.000308,udp,147.32.84.164,43054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:09:22.372844,0.000252,udp,147.32.84.164,60435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:09:28.939187,3552.41626,udp,92.86.111.27,18945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1054,307,747,131.75,0.29127134724857684,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:09:29.540267,0.000345,udp,147.32.84.170,54442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:29.791252,0.024609,udp,147.32.84.184,46760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:09:37.185503,0.206734,tcp,147.32.84.170,52888.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:49.541343,0.017984,tcp,147.32.84.170,45175.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:09:54.314260,0.665429,tcp,213.220.234.58,51697.0,->,147.32.84.242,22.0,FSPA_FSPA,0.0,0.0,65,9955,5409,4546,153.15384615384616,0.5433450527373179,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:09:55.697843,3557.439697,udp,147.32.84.229,13363.0,<->,24.131.188.254,53410.0,CON,0.0,0.0,6,3524,138,3386,587.3333333333334,0.03916004540295119,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:00.619305,0.000263,udp,147.32.84.164,57214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.799330,0.000292,udp,147.32.84.164,35665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.800035,0.000518,udp,147.32.84.164,46050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.800246,0.000527,udp,147.32.84.164,49262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.800355,22.492012,tcp,147.32.84.164,57047.0,->,77.75.76.7,80.0,FSPA_FSPA,0.0,0.0,56,44502,3709,40793,794.6785714285714,0.08334456878342546,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.800358,12.491046,tcp,147.32.84.164,57048.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.800766,0.000583,udp,147.32.84.164,35520.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.801486,0.000227,udp,147.32.84.164,48661.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,71,156,113.5,0.31277533039647576,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.801600,0.000259,udp,147.32.84.164,57978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.801751,12.419674,tcp,147.32.84.164,34230.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,37,25771,5265,20506,696.5135135135135,0.20429940630941756,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.801962,12.489425,tcp,147.32.84.164,58828.0,->,77.75.72.68,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.801971,12.48941,tcp,147.32.84.164,58830.0,->,77.75.72.68,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.802211,0.002269,udp,147.32.84.164,57698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.802745,0.110593,tcp,147.32.84.164,34642.0,->,77.75.72.69,80.0,FSPA_FSPA,0.0,0.0,10,1379,829,550,137.9,0.6011602610587382,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.802751,12.488657,tcp,147.32.84.164,34643.0,->,77.75.72.69,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.802756,12.382758,tcp,147.32.84.164,34644.0,->,77.75.72.69,80.0,FSPA_FSPA,0.0,0.0,14,1714,1016,698,122.42857142857143,0.5927654609101517,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.803724,0.004547,udp,147.32.84.164,37383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,71,156,113.5,0.31277533039647576,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.806893,12.484432,tcp,147.32.84.164,44858.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,21,8232,1574,6658,392.0,0.1912050534499514,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.809178,2.48106,tcp,147.32.84.164,56378.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,24,10859,1857,9002,452.4583333333333,0.17101022193572152,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.809223,2.480904,tcp,147.32.84.164,56379.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,17,5885,1103,4782,346.1764705882353,0.18742565845369583,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:00.809232,2.480734,tcp,147.32.84.164,56381.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,73,58283,2999,55284,798.3972602739726,0.0514558275998147,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.081599,0.000226,udp,147.32.84.164,33695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.082115,0.000161,udp,147.32.84.164,47976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.122015,0.000278,udp,147.32.84.164,39550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.122020,0.00609,udp,147.32.84.164,56298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,74,159,116.5,0.31759656652360513,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.122587,0.002764,udp,147.32.84.164,58806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,78,156,117.0,0.3333333333333333,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.125823,0.025073,udp,147.32.84.164,34469.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.133468,0.000187,udp,147.32.84.164,50843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.133764,0.000228,udp,147.32.84.164,39960.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.151292,0.000226,udp,147.32.84.164,40758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.151824,0.020219,udp,147.32.84.164,49373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.172547,0.473743,udp,147.32.84.164,51809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,72,238,155.0,0.23225806451612904,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.197237,0.000212,udp,147.32.84.164,34241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.212881,0.000313,udp,147.32.84.164,53783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.214108,0.00022,udp,147.32.84.164,35285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,70,139,104.5,0.3349282296650718,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.214638,0.000184,udp,147.32.84.164,53100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,70,139,104.5,0.3349282296650718,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.215907,0.000172,udp,147.32.84.164,34702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,72,137,104.5,0.3444976076555024,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.216884,0.00023,udp,147.32.84.164,57977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.217588,0.003896,udp,147.32.84.164,59658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.235660,0.00028,udp,147.32.84.164,38353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,89,186,137.5,0.3236363636363636,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.244582,0.001947,udp,147.32.84.164,48294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,121,192,156.5,0.3865814696485623,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.246807,12.046286,tcp,147.32.84.164,44876.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,13,2780,923,1857,213.84615384615384,0.3320143884892086,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.247217,0.000296,udp,147.32.84.164,51335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.268931,0.000288,udp,147.32.84.164,55971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,120,177,148.5,0.40404040404040403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.273693,0.00312,udp,147.32.84.164,44492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,120,231,175.5,0.3418803418803419,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.286794,0.000359,udp,147.32.84.164,42894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,120,219,169.5,0.35398230088495575,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.301525,0.000281,udp,147.32.84.164,56992.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,69,137,103.0,0.33495145631067963,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.469152,0.075572,tcp,147.32.84.164,43951.0,->,95.131.121.65,80.0,FSPA_FSPA,0.0,0.0,10,1809,970,839,180.9,0.5362078496406855,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:01.646619,0.001678,udp,147.32.84.164,33397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,443,72,371,221.5,0.16252821670428894,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:03.652017,2451.605225,udp,147.32.85.26,60764.0,<->,84.198.158.131,59081.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:07.063311,0.000312,udp,147.32.85.34,65462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:07.122204,0.000411,udp,147.32.85.34,59786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,86,244,165.0,0.2606060606060606,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:07.176421,0.095668,udp,147.32.84.170,37935.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:07.272709,0.025638,udp,147.32.84.170,58034.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:07.313418,0.000516,udp,84.244.92.50,50485.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,239,177,62,119.5,0.7405857740585774,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:07.342935,60.966572,tcp,147.32.84.165,1137.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:10:12.372942,0.037131,tcp,147.32.84.164,47478.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.134652,10.157429,tcp,147.32.84.164,56801.0,->,77.75.73.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.134859,10.156807,tcp,147.32.84.164,56404.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,110,95356,4500,90856,866.8727272727273,0.04719157682788708,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.134965,10.156531,tcp,147.32.84.164,56406.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,21,11708,1139,10569,557.5238095238095,0.0972839084386744,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.135195,10.156815,tcp,147.32.84.164,37532.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,15,6345,1282,5063,423.0,0.2020488573680063,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.218733,10.073172,tcp,147.32.84.164,34290.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,45,33208,6919,26289,737.9555555555555,0.2083534088171525,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.344235,9.947763,tcp,147.32.84.164,44904.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,20,7900,1636,6264,395.0,0.20708860759493672,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.426063,9.865792,tcp,147.32.84.164,34294.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,16,6525,4303,2222,407.8125,0.659463601532567,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.426077,9.865914,tcp,147.32.84.164,34295.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,18,8457,5585,2872,469.8333333333333,0.6603996689133262,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.426662,9.865143,tcp,147.32.84.164,44913.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,17,5360,1086,4274,315.29411764705884,0.20261194029850746,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:13.426907,9.865283,tcp,147.32.84.164,44916.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,14,4096,954,3142,292.57142857142856,0.23291015625,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:15.738644,0.000215,udp,147.32.84.138,46965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:19.542119,0.018225,tcp,147.32.84.170,55021.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:20.344332,0.135087,tcp,147.32.86.20,3865.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:10:22.240583,6.029183,udp,147.32.84.229,13363.0,->,85.178.75.207,15550.0,INT,0.0,,3,246,246,0,82.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:10:26.512231,0.004312,tcp,147.32.84.164,56829.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2921,2049,872,243.41666666666666,0.701472098596371,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.718348,6.573978,tcp,147.32.84.164,44920.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,72,59739,2806,56933,829.7083333333334,0.04697099047523393,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.718398,6.573909,tcp,147.32.84.164,44922.0,->,77.75.76.22,80.0,FSPA_FSPA,0.0,0.0,75,59730,3416,56314,796.4,0.057190691444835094,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.718966,16.573305,tcp,147.32.84.164,56844.0,->,77.75.73.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.719043,6.573271,tcp,147.32.84.164,34321.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,14,4563,2991,1572,325.92857142857144,0.6554898093359632,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.719100,6.5732,tcp,147.32.84.164,34323.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,47,32229,7051,25178,685.7234042553191,0.21877811908529585,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.719435,6.572607,tcp,147.32.84.164,56454.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,70,62478,3084,59394,892.5428571428571,0.049361375204071835,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.719636,6.572414,tcp,147.32.84.164,56458.0,->,77.75.72.52,80.0,FSPA_FSPA,0.0,0.0,17,5113,1126,3987,300.7647058823529,0.22022296107960102,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.721254,0.045603,tcp,147.32.84.164,34738.0,->,77.75.72.69,80.0,FSPA_FSPA,0.0,0.0,10,1402,852,550,140.2,0.6077032810271041,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.721420,16.57135,tcp,147.32.84.164,57162.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.721495,16.571268,tcp,147.32.84.164,57164.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.721568,16.570923,tcp,147.32.84.164,57165.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.756733,0.000245,udp,147.32.84.164,33521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:26.757847,0.00025,udp,147.32.84.164,37537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,77,227,152.0,0.2532894736842105,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:27.236932,0.000387,udp,76.101.0.79,8507.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:32.554853,0.000486,udp,99.141.230.175,36979.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:33.357594,0.000185,udp,147.32.84.138,55999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:38.453519,0.000248,udp,147.32.84.138,54137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:39.539562,0.020143,udp,147.32.84.170,33902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:46.292058,0.000398,udp,147.32.85.25,55120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:47.590692,0.001761,udp,147.32.84.164,43653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:47.592604,0.002366,udp,147.32.84.164,40601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,148,74,74,74.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:50.951771,0.246241,udp,147.32.84.164,43194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:51.198156,0.246881,udp,147.32.84.164,59983.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:51.445129,0.246492,udp,147.32.84.164,42027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:52.373378,0.036612,tcp,147.32.84.164,47563.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:53.001079,0.005664,tcp,147.32.84.164,56879.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2789,1963,826,232.41666666666666,0.7038365005378272,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:10:53.659987,0.00048,udp,80.252.208.14,2899.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,261,177,84,130.5,0.6781609195402298,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:10:56.355642,0.000272,udp,147.32.85.25,45479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:10:59.539523,0.000449,udp,147.32.84.170,51706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:59.541595,0.017783,tcp,147.32.84.170,45184.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:10:59.904954,0.000383,udp,147.32.84.59,58445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:01.352481,0.000366,udp,147.32.84.171,51986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,162,81,81,81.0,0.5,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:02.206425,0.000468,udp,147.32.84.138,53646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:04.219810,0.170594,tcp,147.32.86.20,3904.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,71030,1571,69459,959.8648648648649,0.022117415176685907,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:11:06.543309,0.000336,udp,147.32.84.138,58063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:07.989820,60.955292,tcp,147.32.84.165,1138.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:11:09.540644,0.000332,udp,147.32.84.170,55624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:11:11.552301,0.000258,udp,147.32.84.138,34838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:12.163369,3130.270508,udp,147.32.84.229,13363.0,<->,86.49.75.57,11602.0,CON,0.0,0.0,8,622,306,316,77.75,0.4919614147909968,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:16.387804,0.002229,tcp,147.32.87.249,1327.0,->,147.32.87.13,27001.0,_FSA,,0.0,6,364,0,364,60.666666666666664,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:11:16.843126,0.000338,udp,147.32.84.59,64428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,70,126,98.0,0.35714285714285715,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:11:18.590690,9.000848,tcp,90.176.216.196,20500.0,->,147.32.84.231,80.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:11:18.822529,0.000258,udp,147.32.84.164,57597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:11:19.540554,0.000316,udp,147.32.84.170,35392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:11:24.423464,0.000493,udp,78.8.229.151,1042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:29.542603,0.017952,tcp,147.32.84.170,34051.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:11:39.541554,0.000301,udp,147.32.84.170,58340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:11:45.751506,3112.417236,udp,24.51.64.129,61171.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1474,1102,372,122.83333333333333,0.7476255088195387,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:48.822754,0.00067,udp,98.77.176.16,53242.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:49.540648,0.000358,udp,147.32.84.170,47246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:11:49.573091,22.580694,udp,94.163.209.39,15751.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,785,226,559,157.0,0.2878980891719745,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:53.801039,0.200148,udp,217.118.90.162,18910.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:11:54.417386,0.003233,udp,116.235.148.156,3270.0,->,147.32.84.114,49395.0,INT,0.0,,1,72,72,0,72.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:11:59.541545,0.000379,udp,147.32.84.170,56668.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:00.286845,0.000286,udp,147.32.86.20,53956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:06.826658,0.000267,udp,147.32.85.34,57250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:06.836545,0.000397,udp,147.32.85.34,49617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:07.375085,0.001724,udp,220.248.102.57,8553.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:12:08.113608,0.001945,udp,147.32.84.164,48578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,84,169,126.5,0.33201581027667987,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:08.143954,0.006599,tcp,147.32.84.164,56044.0,->,77.75.77.140,80.0,FSPA_FSPA,0.0,0.0,13,4326,845,3481,332.7692307692308,0.1953305594082293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:08.266586,0.000357,udp,147.32.84.164,37880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:08.267260,0.000261,udp,147.32.84.164,56383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:08.628438,60.967979,tcp,147.32.84.165,1139.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:12:09.540649,0.000367,udp,147.32.84.170,55522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:09.541581,0.000251,udp,147.32.84.170,41780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:11.186961,0.000263,udp,147.32.84.170,37117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:13.543380,57.2356,tcp,147.32.84.164,58134.0,->,91.103.160.43,1935.0,FSPA_FSPA,0.0,0.0,9332,10597148,159686,10437462,1135.5709387055294,0.015068771333570126,8,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:14.237319,0.048801,udp,147.32.84.164,60038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:14.286458,0.000172,udp,147.32.84.164,39303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:14.585682,0.000437,udp,72.252.163.112,9283.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:12:32.383902,0.000199,udp,147.32.84.164,49996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:12:37.922096,0.000231,udp,147.32.84.138,39753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:40.298019,0.000243,udp,147.32.84.138,51820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:42.189628,0.271346,tcp,147.32.84.170,58715.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:44.862103,0.003237,udp,114.32.145.4,13920.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2920,60,2860,730.0,0.02054794520547945,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:12:49.078875,0.00055,udp,147.32.85.25,38578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,530,74,456,265.0,0.13962264150943396,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:12:49.541300,0.00028,udp,147.32.84.170,40095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:12:51.601834,0.308347,udp,113.35.98.138,35029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,261,136,125,65.25,0.5210727969348659,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:13:00.019678,0.000196,udp,147.32.84.59,53200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:01.733731,0.000275,udp,147.32.85.74,52831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,72,139,105.5,0.3412322274881517,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:01.934198,0.218907,tcp,124.16.138.234,14232.0,->,147.32.84.130,80.0,SRA_SA,0.0,0.0,4,252,186,66,63.0,0.7380952380952381,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:13:02.383199,0.037899,tcp,147.32.84.164,59720.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:04.293663,0.000264,udp,147.32.84.138,47903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:06.078482,3.108327,tcp,147.32.85.26,62233.0,->,74.201.102.43,443.0,FSPA_FSPA,0.0,0.0,76,65689,3048,62641,864.328947368421,0.04640046278676795,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:13:06.353738,2970.615723,udp,147.32.84.229,13363.0,<->,147.102.11.119,15782.0,CON,0.0,0.0,19,4012,778,3234,211.1578947368421,0.19391824526420737,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:13:06.803651,0.000278,udp,147.32.84.164,47540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:06.804778,0.000273,udp,147.32.84.164,59796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,71,156,113.5,0.31277533039647576,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:06.805422,0.003914,tcp,147.32.84.164,59017.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2820,1948,872,235.0,0.6907801418439716,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:09.276403,60.951405,tcp,147.32.84.165,1140.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:13:09.540654,0.000429,udp,147.32.84.170,47342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:10.327947,430.207123,tcp,147.32.85.123,54301.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,20,3328,1532,1796,166.4,0.46033653846153844,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:13:10.820146,0.003534,tcp,147.32.84.164,45743.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2420,1552,868,268.8888888888889,0.6413223140495867,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:10.820368,0.00018,udp,147.32.84.164,44734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:10.820924,0.000198,udp,147.32.84.164,54448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:10.820982,0.000197,udp,147.32.84.164,57975.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:10.822076,8.854088,tcp,147.32.84.164,40392.0,->,77.75.72.72,80.0,FSPA_FSPA,0.0,0.0,11,2516,1594,922,228.72727272727272,0.6335453100158982,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:10.822080,8.85409,tcp,147.32.84.164,40393.0,->,77.75.72.72,80.0,FSPA_FSPA,0.0,0.0,11,3120,1558,1562,283.6363636363636,0.49935897435897436,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:13.190478,0.000349,udp,147.32.84.170,36849.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:14.022833,0.216429,tcp,147.32.84.170,56727.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:19.541563,0.000273,udp,147.32.84.170,50545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:19.584455,0.000219,udp,147.32.84.164,56456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584472,0.000287,udp,147.32.84.164,38609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584536,13.721818,tcp,147.32.84.164,59033.0,->,77.75.73.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584828,0.002053,udp,147.32.84.164,52863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,89,186,137.5,0.3236363636363636,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584886,0.000578,udp,147.32.84.164,39025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,77,129,103.0,0.3737864077669903,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584892,0.000696,udp,147.32.84.164,50881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,84,134,109.0,0.3853211009174312,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584978,0.000714,udp,147.32.84.164,44736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584986,13.721784,tcp,147.32.84.164,48623.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.584999,13.72197,tcp,147.32.84.164,48625.0,->,77.75.76.7,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.585862,0.000452,udp,147.32.84.164,51987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.586179,0.00033,udp,147.32.84.164,47854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.586636,13.719385,tcp,147.32.84.164,57148.0,->,77.75.77.140,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.586872,0.000202,udp,147.32.84.164,47155.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.587485,13.71964,tcp,147.32.84.164,42414.0,->,77.75.72.69,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.610492,0.045646,udp,147.32.85.26,64963.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,544,75,469,272.0,0.13786764705882354,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:19.664975,0.000284,udp,147.32.84.164,39340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,72,157,114.5,0.314410480349345,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.773861,0.000285,udp,147.32.84.164,33381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.774155,0.00027,udp,147.32.84.164,41054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.774417,0.004763,udp,147.32.84.164,36406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,72,175,123.5,0.291497975708502,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.777687,0.000285,udp,147.32.84.164,38684.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.778271,0.000193,udp,147.32.84.164,37092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.779623,0.002231,udp,147.32.84.164,36741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.781952,0.000319,udp,147.32.84.164,53372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,72,122,97.0,0.3711340206185567,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.782400,0.002953,udp,147.32.84.164,51842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,72,150,111.0,0.32432432432432434,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.785850,0.000259,udp,147.32.84.164,48592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.801399,0.020341,udp,147.32.84.164,50697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.803535,0.000267,udp,147.32.84.164,40950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,72,137,104.5,0.3444976076555024,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.804707,0.000249,udp,147.32.84.164,37595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,72,138,105.0,0.34285714285714286,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.805869,0.000209,udp,147.32.84.164,57013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.807571,0.00027,udp,147.32.84.164,36618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.809539,0.000286,udp,147.32.84.164,58477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,75,175,125.0,0.3,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.813310,0.000414,udp,147.32.84.164,57718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,72,186,129.0,0.27906976744186046,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.815450,0.000225,udp,147.32.84.164,40819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.826264,0.000198,udp,147.32.84.164,50597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,80,132,106.0,0.37735849056603776,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.827211,0.000257,udp,147.32.84.164,55800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,80,182,131.0,0.3053435114503817,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.829549,0.000326,udp,147.32.84.164,35344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,120,231,175.5,0.3418803418803419,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.829953,0.000219,udp,147.32.84.164,49431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,120,177,148.5,0.40404040404040403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.830013,0.000301,udp,147.32.84.164,37951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,120,191,155.5,0.3858520900321543,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.830825,0.000272,udp,147.32.84.164,57916.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,120,224,172.0,0.3488372093023256,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.847077,13.460125,tcp,147.32.84.164,40440.0,->,77.75.72.72,80.0,FSPA_FSPA,0.0,0.0,18,8495,5623,2872,471.94444444444446,0.6619187757504414,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.907325,0.00018,udp,147.32.84.164,51233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:19.942156,0.000273,udp,147.32.84.164,32956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,69,146,107.5,0.3209302325581395,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:22.385459,0.037561,tcp,147.32.84.164,59780.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:29.249983,0.61114,tcp,213.220.234.58,51787.0,->,147.32.84.242,22.0,FSPA_FSPA,0.0,0.0,61,9723,5113,4610,159.39344262295083,0.5258665021084028,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:13:32.385796,9.8e-05,udp,147.32.84.164,39095.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,72,135,103.5,0.34782608695652173,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:32.386837,0.000185,udp,147.32.84.164,57715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,72,130,101.0,0.3564356435643564,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:35.076144,0.000236,udp,147.32.84.138,44607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:39.540576,0.00037,udp,147.32.84.170,39042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:43.768025,3023.773926,udp,24.102.136.104,22634.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:13:44.180832,0.000253,udp,147.32.84.170,37265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:13:47.538983,0.003818,tcp,147.32.84.164,59079.0,->,77.75.73.9,80.0,FSPA_FSPA,0.0,0.0,12,2828,1956,872,235.66666666666666,0.6916548797736917,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:13:51.826835,0.0,igmp,147.32.87.38,,->,239.255.255.250,,INT,0.0,,1,60,60,0,60.0,1.0,8,,flow=Background,Background,-1 2011-08-17 08:13:58.422231,0.00035,udp,147.32.84.138,36275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:13:59.541535,0.000346,udp,147.32.84.170,60733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:14:02.388235,0.036745,tcp,147.32.84.164,59788.0,->,62.84.143.246,80.0,FSPA_FSPA,0.0,0.0,12,2452,1799,653,204.33333333333334,0.7336867862969005,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:06.493160,0.000324,udp,147.32.85.34,57619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:14:09.913455,60.951839,tcp,147.32.84.165,1141.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:14:11.011272,0.000215,udp,147.32.84.164,60074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:11.011743,0.173397,udp,147.32.84.164,59453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,75,206,140.5,0.2669039145907473,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:11.185679,12.30584,tcp,147.32.84.164,33908.0,->,75.119.194.83,80.0,FSPA_FSPA,0.0,0.0,19,9287,1020,8267,488.7894736842105,0.10983094648433293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:12.840488,0.000635,udp,174.49.64.5,27253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:14:19.540758,0.000492,udp,147.32.84.170,32984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:14:24.074862,0.000372,udp,147.32.84.164,51037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.075245,0.000414,udp,147.32.84.164,45823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.076636,0.000284,udp,147.32.84.164,50908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.102023,19.215366,tcp,147.32.84.164,39325.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.102092,19.215591,tcp,147.32.84.164,39326.0,->,74.125.232.205,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.116364,19.201054,tcp,147.32.84.164,42150.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.324417,0.246691,udp,147.32.84.164,56452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.543171,0.019838,udp,147.32.84.164,47513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,81,152,116.5,0.34763948497854075,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.561182,0.000293,udp,147.32.84.138,41839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:14:24.563384,0.020245,udp,147.32.84.164,45454.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,399,81,318,199.5,0.20300751879699247,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.564577,0.000184,udp,147.32.84.164,47152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.584210,0.009673,udp,147.32.84.164,41475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.698928,0.000213,udp,147.32.84.164,60425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.709683,0.019832,udp,147.32.84.164,59667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.730035,0.009682,udp,147.32.84.164,37482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,80,156,118.0,0.3389830508474576,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.818879,0.24822,udp,147.32.84.164,40865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.848683,0.00032,udp,147.32.84.164,43244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.900276,0.01996,udp,147.32.84.164,46617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,78,318,198.0,0.19696969696969696,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:24.942521,0.108127,udp,147.32.84.164,45070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.125437,0.000315,udp,147.32.84.164,51796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.127149,0.000461,udp,147.32.84.164,36406.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.127416,18.190935,tcp,147.32.84.164,38294.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.127427,18.191153,tcp,147.32.84.164,38295.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.127459,358.208252,tcp,147.32.84.164,38297.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,340,230825,33524,197301,678.8970588235294,0.1452355680710495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.128553,0.000321,udp,147.32.84.164,56222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.479587,0.000308,udp,147.32.84.164,53002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.480065,0.000705,udp,147.32.84.164,34113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.480943,0.00032,udp,147.32.84.164,50756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:25.482720,0.000446,udp,147.32.84.164,44353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:28.831798,0.177016,udp,147.32.84.164,44905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,170,85,85,85.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.167374,0.146503,udp,147.32.84.164,36856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,79,135,107.0,0.3691588785046729,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.185653,0.173786,udp,147.32.84.164,42555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.403409,0.284134,udp,147.32.84.164,44920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.437767,0.000382,udp,147.32.84.164,34452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.710982,0.00028,udp,147.32.84.164,42256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,78,139,108.5,0.35944700460829493,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.711643,0.000192,udp,147.32.84.164,36141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,78,172,125.0,0.312,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:29.948274,0.132654,udp,147.32.84.164,59223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,80,175,127.5,0.3137254901960784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.254097,0.166143,udp,147.32.84.164,38317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.276703,0.022691,udp,147.32.84.164,44058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,80,162,121.0,0.3305785123966942,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.530170,0.000454,udp,147.32.84.164,57031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.531027,0.102762,udp,147.32.84.164,57073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,315,77,238,157.5,0.24444444444444444,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.634328,0.111581,udp,147.32.84.164,55236.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,78,145,111.5,0.34977578475336324,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:30.945171,0.112471,udp,147.32.84.164,45120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:31.432234,0.104445,udp,147.32.84.164,34127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:32.347105,0.052171,tcp,147.32.84.164,43040.0,->,74.125.232.206,80.0,FSRPA_FSPA,0.0,0.0,10,2025,1313,712,202.5,0.6483950617283951,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:34.482416,0.000146,udp,147.32.84.164,58859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:36.671617,0.282422,udp,147.32.84.164,57320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:36.732165,0.170822,udp,147.32.84.164,33362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,84,142,113.0,0.37168141592920356,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:37.143468,0.037582,udp,147.32.84.164,39749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,74,154,114.0,0.32456140350877194,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:37.183948,0.000354,udp,147.32.84.164,41996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,343,76,267,171.5,0.22157434402332363,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:37.219360,0.036688,udp,147.32.84.164,55731.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,72,227,149.5,0.2408026755852843,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:37.803851,0.018006,udp,147.32.84.164,37755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:40.050584,0.000583,udp,183.80.176.217,43309.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,651,79,572,325.5,0.12135176651305683,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:14:40.167590,0.133873,udp,147.32.84.164,57052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:40.338455,12.988066,tcp,147.32.84.164,53595.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,11,1555,933,622,141.36363636363637,0.6,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:40.338479,12.988037,tcp,147.32.84.164,53598.0,->,91.198.174.233,80.0,FSPA_FSRPA,0.0,0.0,50,47245,2664,44581,944.9,0.05638691925071436,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:40.518591,0.018123,udp,147.32.84.164,43425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,80,131,105.5,0.3791469194312796,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:40.573801,22.754293,tcp,147.32.84.164,40949.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,11,1602,864,738,145.63636363636363,0.5393258426966292,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:41.127281,0.285882,udp,147.32.84.164,60619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:41.128016,0.28563,udp,147.32.84.164,53305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:41.413281,0.283997,udp,147.32.84.164,59160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:41.697264,0.284671,udp,147.32.84.164,33973.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:41.697423,0.2845,udp,147.32.84.164,54179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:42.001329,0.282447,udp,147.32.84.164,45591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:42.285126,0.28336,udp,147.32.84.164,60530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:42.566554,0.285824,udp,147.32.84.164,50253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:42.569473,0.282487,udp,147.32.84.164,38587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,152,76,76,76.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:43.134277,0.017874,udp,147.32.84.164,38427.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:14:44.957109,3192.232178,udp,147.32.84.229,13363.0,<->,95.191.57.141,13098.0,CON,0.0,0.0,6,3054,120,2934,509.0,0.03929273084479371,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:14:47.330170,0.077135,udp,147.32.86.55,58367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,86,301,193.5,0.2222222222222222,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:14:54.786327,2904.854248,udp,147.32.84.229,13363.0,<->,76.171.57.133,10287.0,CON,0.0,0.0,9,639,459,180,71.0,0.7183098591549296,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:14:55.152949,3163.743164,udp,178.165.157.95,25891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:14:59.540739,0.000398,udp,147.32.84.170,33718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:15:02.107805,11.211495,tcp,147.32.84.164,42177.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:02.175257,120.842537,tcp,147.32.84.164,55809.0,->,128.84.154.137,80.0,SPA_SRPA,0.0,0.0,80,24362,3733,20629,304.525,0.15323044085050488,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:02.426400,0.000335,udp,147.32.84.164,43082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:02.449972,0.000451,udp,147.32.84.164,59200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,85,332,208.5,0.2038369304556355,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:02.679040,0.000154,udp,147.32.84.164,57942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,81,144,112.5,0.36,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:02.990627,0.112277,udp,147.32.84.164,60537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,278,82,196,139.0,0.2949640287769784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:03.313405,0.040805,udp,147.32.84.164,43836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:03.355126,0.015986,udp,147.32.84.164,39718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,83,213,148.0,0.28040540540540543,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:03.484446,0.144635,udp,147.32.84.164,52558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,78,158,118.0,0.3305084745762712,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:03.530322,0.031499,udp,147.32.84.164,43373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,480,82,398,240.0,0.17083333333333334,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:15:03.565067,0.000488,udp,98.183.47.91,36496.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,586,78,508,293.0,0.13310580204778158,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:15:06.413870,0.000289,udp,147.32.87.40,48980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:07.166122,0.000343,udp,147.32.86.20,63464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:09.541325,0.000253,udp,147.32.84.170,34486.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:15:10.550858,60.967354,tcp,147.32.84.165,1142.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:15:10.713137,2447.556641,udp,149.13.32.94,33033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1037,795,242,129.625,0.7666345226615237,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:15:12.274462,0.000332,udp,147.32.85.25,36604.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:13.444931,0.000529,udp,85.3.181.93,50485.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:15:15.964320,0.000181,udp,147.32.84.138,36896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:19.052710,0.000434,udp,147.32.86.55,49912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,86,301,193.5,0.2222222222222222,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:23.466811,0.000266,udp,147.32.86.92,52223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,86,197,141.5,0.303886925795053,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:27.482107,0.000425,udp,147.32.86.20,55553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:28.357414,7.472196,tcp,82.210.152.11,45701.0,->,147.32.86.55,22.0,FSPA_FSPA,0.0,0.0,40,5740,2068,3672,143.5,0.36027874564459933,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:15:40.640763,0.001933,udp,147.32.86.89,49742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,74,152,113.0,0.3274336283185841,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:40.643830,19.648464,tcp,147.32.86.89,1087.0,->,77.75.73.127,80.0,FSPA_FSPA,0.0,0.0,163,123458,34160,89298,757.4110429447853,0.2766932884057736,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:15:45.376068,2540.525879,udp,79.227.180.141,47103.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:15:46.128635,0.000545,udp,68.4.115.23,40929.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,572,77,495,286.0,0.1346153846153846,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:15:47.188556,0.000232,udp,147.32.84.170,36909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:15:47.190833,0.263932,tcp,147.32.84.170,57771.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:15:50.657038,0.000186,udp,147.32.84.138,60130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:15:53.342804,0.000245,udp,147.32.85.25,59628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,88,123,105.5,0.41706161137440756,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:00.794520,0.000296,udp,147.32.86.20,55685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:02.482045,0.000264,udp,147.32.84.164,40408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,338,78,260,169.0,0.23076923076923078,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:03.772453,392.086487,tcp,147.32.85.5,41688.0,->,74.125.232.215,443.0,FSPA_FSPA,0.0,0.0,61,14540,8100,6440,238.36065573770492,0.5570839064649243,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:16:07.422087,0.0002,udp,147.32.85.34,54122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,86,195,140.5,0.30604982206405695,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:07.424254,0.000284,udp,147.32.85.34,63097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,281,86,195,140.5,0.30604982206405695,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:07.657984,0.00022,udp,147.32.84.164,39623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.658058,0.000479,udp,147.32.84.164,46071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.658422,0.000494,udp,147.32.84.164,60763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.659570,15.662531,tcp,147.32.84.164,51587.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.659637,15.662517,tcp,147.32.84.164,51588.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.659750,15.66214,tcp,147.32.84.164,51590.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.659758,0.000214,udp,147.32.84.164,37092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.846818,0.000304,udp,147.32.84.164,45830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.847386,0.000437,udp,147.32.84.164,57656.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.850107,0.000299,udp,147.32.84.164,50300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.850723,0.247898,udp,147.32.84.164,55919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.851550,0.00033,udp,147.32.84.164,44355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.855619,0.00026,udp,147.32.84.164,53545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:07.855627,0.000316,udp,147.32.84.164,35475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:08.643254,0.398278,udp,147.32.84.164,45238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,75,126,100.5,0.373134328358209,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:08.841175,0.000453,udp,147.32.84.164,45122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:09.540986,0.000461,udp,147.32.84.170,48456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:09.543097,0.018092,tcp,147.32.84.170,55588.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:11.198698,60.968044,tcp,147.32.84.165,1143.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:16:12.941625,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.49,45677.0,ECR,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:16:12.985123,0.859155,tcp,147.32.86.20,4182.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,97,99236,1586,97650,1023.0515463917526,0.01598210326897497,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:16:15.826314,0.000333,udp,91.214.32.81,65457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:16:16.390971,0.000801,udp,147.32.84.164,40232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:17.040038,0.00027,udp,147.32.84.164,37388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,87,143,115.0,0.3782608695652174,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:17.040651,0.022853,udp,147.32.84.164,37418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,87,175,131.0,0.3320610687022901,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:17.630355,0.308922,udp,147.32.84.164,34207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,80,135,107.5,0.37209302325581395,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:17.785909,0.000227,udp,147.32.84.164,56239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,74,129,101.5,0.3645320197044335,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:18.088999,25.246553,tcp,147.32.84.164,34181.0,->,147.172.223.251,80.0,FSPA_FSPA,0.0,0.0,1381,1455261,27557,1427704,1053.7733526430122,0.01893612211142881,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:18.156154,0.000334,udp,147.32.84.164,57599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:18.156732,0.135474,tcp,147.32.84.164,39745.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1434,714,720,143.4,0.497907949790795,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:18.157589,0.389389,tcp,147.32.84.164,47102.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,11,3342,856,2486,303.8181818181818,0.2561340514661879,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:18.190347,0.255698,tcp,147.32.84.170,57775.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:19.544944,0.018554,tcp,147.32.84.170,50752.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:25.537403,0.000236,udp,147.32.84.138,45232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:25.551149,0.000107,udp,147.32.84.138,60296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:27.303583,16.018785,tcp,147.32.84.164,49628.0,->,74.125.232.211,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:27.303588,16.018545,tcp,147.32.84.164,49629.0,->,74.125.232.211,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:27.303627,16.018494,tcp,147.32.84.164,49631.0,->,74.125.232.211,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:27.303776,16.01866,tcp,147.32.84.164,42204.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:27.303781,16.018593,tcp,147.32.84.164,42205.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:27.694269,0.000361,udp,147.32.84.164,44716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,81,270,175.5,0.23076923076923078,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:34.032513,6.004729,udp,147.32.84.229,13363.0,->,78.86.60.23,36672.0,INT,0.0,,3,450,450,0,150.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:16:38.230767,0.000257,udp,147.32.84.138,59972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:38.245122,0.000298,udp,147.32.84.138,39966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:39.541147,0.000248,udp,147.32.84.170,45385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:39.541887,0.000284,udp,147.32.84.170,55187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:48.546375,3228.677734,udp,147.32.84.229,13363.0,<->,69.141.120.13,16147.0,CON,0.0,0.0,4,852,284,568,213.0,0.3333333333333333,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:16:49.203673,9.048188,tcp,68.105.185.121,53432.0,->,147.32.84.229,80.0,S_SA,0.0,0.0,18,1304,608,696,72.44444444444444,0.4662576687116564,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:16:49.541052,0.000375,udp,147.32.84.170,37662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:16:54.336874,0.000116,udp,147.32.84.138,48953.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:16:55.916591,0.000404,udp,193.68.159.4,1120.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:16:59.109433,0.139837,tcp,147.32.84.164,34196.0,->,147.172.223.251,80.0,FSRPA_FSPA,0.0,0.0,26,16797,2227,14570,646.0384615384615,0.13258319938084182,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:59.227269,44.11216,tcp,147.32.84.164,34201.0,->,147.172.223.251,80.0,FSPA_FSPA,0.0,0.0,39,26063,3883,22180,668.2820512820513,0.14898515136400262,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:59.227642,44.111778,tcp,147.32.84.164,34204.0,->,147.172.223.251,80.0,FSPA_FSPA,0.0,0.0,26,9545,3720,5825,367.11538461538464,0.3897328444211629,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:59.227692,44.11174,tcp,147.32.84.164,34205.0,->,147.172.223.251,80.0,FSPA_FSPA,0.0,0.0,52,38817,3202,35615,746.4807692307693,0.08248963083185203,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:59.458648,0.022703,udp,147.32.84.164,40382.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:16:59.626893,0.000274,udp,147.32.84.138,45745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:17:09.011190,0.000445,udp,188.23.243.67,49981.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,235,173,62,117.5,0.7361702127659574,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:17:09.543172,0.018113,tcp,147.32.84.170,59568.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:10.131999,16.978596,tcp,80.162.244.99,55345.0,->,147.32.87.36,80.0,SRPA_FSPA,0.0,0.0,26,14647,2186,12461,563.3461538461538,0.14924557929951526,8,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 08:17:11.846939,60.95071,tcp,147.32.84.165,1144.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:17:13.495046,1.140886,tcp,147.32.3.51,4680.0,->,147.32.87.22,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:17:13.571839,0.044981,udp,147.32.84.164,40191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,81,156,118.5,0.34177215189873417,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:13.617285,0.023948,udp,147.32.84.164,56435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,81,188,134.5,0.30111524163568776,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:17.077087,240.041672,tcp,147.32.84.170,53043.0,->,209.85.148.99,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:18.854257,0.000378,udp,147.32.84.138,46073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:17:19.543158,0.018379,tcp,147.32.84.170,50765.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:19.810426,0.000343,udp,147.32.84.164,55803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:19.812851,0.000375,udp,147.32.84.164,54586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:20.188933,0.000449,udp,147.32.84.170,37951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:20.338432,0.000317,udp,147.32.84.59,33457.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:17:21.671190,0.000448,udp,147.32.84.138,49458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:17:23.034191,0.000261,udp,147.32.84.164,37597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:23.049753,0.000244,udp,147.32.84.164,39323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,82,145,113.5,0.36123348017621143,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:23.050339,0.000218,udp,147.32.84.164,38874.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,82,145,113.5,0.36123348017621143,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:23.653220,0.00045,udp,188.21.141.10,50695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,247,173,74,123.5,0.7004048582995951,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:17:25.154415,0.000397,udp,147.32.84.164,47853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:25.345312,0.000293,udp,147.32.84.59,50539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:17:28.206547,3.004889,tcp,147.32.84.21,36931.0,->,74.125.39.108,,S_,0.0,,2,148,148,0,74.0,1.0,8,,flow=Background-google-pop,Background,-1 2011-08-17 08:17:29.542163,0.000299,udp,147.32.84.170,59974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:29.543198,0.017811,tcp,147.32.84.170,38812.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:39.541120,0.000763,udp,147.32.84.170,40513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:40.525695,0.019911,tcp,147.32.85.123,54383.0,->,78.24.8.135,80.0,FSPA_FSPA,0.0,0.0,10,1664,766,898,166.4,0.46033653846153844,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:17:40.812748,0.001663,udp,203.145.92.115,59081.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:17:46.208523,3598.449951,tcp,147.32.84.164,46014.0,->,68.142.83.180,27017.0,PA_PA,0.0,0.0,301,29354,17696,11658,97.52159468438538,0.6028479934591537,8,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:17:47.390843,0.000385,udp,202.156.74.254,42085.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:17:51.192587,0.243642,tcp,147.32.84.170,57794.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:17:51.822492,183.848831,tcp,147.32.84.194,1310.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,1700,1397235,117423,1279812,821.9029411764706,0.08403954953891078,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:17:58.954026,19.019135,tcp,147.32.84.164,49931.0,->,128.84.154.137,80.0,FSRPA_SPA,0.0,0.0,682,267409,18001,249408,392.0953079178886,0.06731635808817205,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:00.595424,0.000314,udp,147.32.85.25,49407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:18:00.976694,588.56665,udp,147.32.84.229,13363.0,->,87.254.168.115,58730.0,INT,0.0,,6,795,795,0,132.5,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:18:03.578598,0.000373,udp,147.32.84.164,58843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,74,191,132.5,0.2792452830188679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:07.379564,4.498857,tcp,1.144.253.144,60577.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,20,1490,808,682,74.5,0.5422818791946309,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:18:09.522020,0.000408,udp,147.32.84.164,47707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,371,84,287,185.5,0.22641509433962265,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:09.542044,0.00038,udp,147.32.84.170,46187.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:12.483209,60.952671,tcp,147.32.84.165,1145.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:18:13.519960,0.398302,tcp,147.32.84.170,52896.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:17.195147,0.000264,udp,147.32.84.164,55465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.196104,0.000333,udp,147.32.84.164,43769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,76,160,118.0,0.3220338983050847,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.196682,0.000363,udp,147.32.84.164,35638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,73,144,108.5,0.33640552995391704,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.197578,0.000292,udp,147.32.84.164,56617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.351383,6.110006,tcp,147.32.84.164,41748.0,->,66.39.80.162,80.0,FSPA_FSPA,0.0,0.0,11,1496,741,755,136.0,0.49532085561497324,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.438684,0.000231,udp,147.32.84.138,56184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:18:17.450020,0.371695,tcp,147.32.84.164,40591.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,10,1783,847,936,178.3,0.4750420639371845,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:17.641250,15.790969,tcp,147.32.84.164,49943.0,->,128.84.154.137,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:18.362426,15.069447,tcp,147.32.84.164,56142.0,->,128.2.217.13,80.0,FSA_FSA,0.0,0.0,10,614,374,240,61.4,0.6091205211726385,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:21.114912,0.000338,udp,147.32.84.164,47441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,83,213,148.0,0.28040540540540543,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:22.189265,0.000255,udp,147.32.84.170,41581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:22.190245,0.000171,udp,147.32.84.170,34827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:27.057685,16.277771,tcp,147.32.84.164,53952.0,->,192.124.27.99,80.0,FSPA_FSPA,0.0,0.0,192,208065,3892,204173,1083.671875,0.018705692932497055,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:27.233146,0.00024,udp,147.32.84.138,52964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:18:29.545132,0.018444,tcp,147.32.84.170,36852.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:31.442812,0.000332,udp,147.32.84.170,46599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:33.620303,0.119656,tcp,147.32.84.164,49345.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1420,709,711,142.0,0.4992957746478873,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:33.755451,19.676491,tcp,147.32.84.164,36400.0,->,128.2.210.71,80.0,FSPA_FSPA,0.0,0.0,12,2949,745,2204,245.75,0.25262800949474395,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:33.898508,0.425059,tcp,147.32.84.164,40607.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,11,3761,785,2976,341.90909090909093,0.20872108481786758,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:18:39.134169,0.000395,udp,193.85.227.98,49714.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,243,173,70,121.5,0.7119341563786008,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:18:39.541189,0.00039,udp,147.32.84.170,36854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:39.542204,0.000286,udp,147.32.84.170,49909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:42.100757,0.000208,udp,147.32.85.25,33838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:18:42.493733,0.003252,udp,98.232.104.253,20484.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2923,60,2863,730.75,0.020526855969893943,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:18:45.300829,0.000283,udp,147.32.85.89,43138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:18:48.054839,31.76058,tcp,147.32.86.58,1061.0,->,147.32.80.7,80.0,FSPA_FSPA,0.0,0.0,10,1590,472,1118,159.0,0.2968553459119497,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:18:48.238151,0.001501,udp,41.214.225.222,47769.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,522,462,60,261.0,0.8850574712643678,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:18:49.541252,0.000306,udp,147.32.84.170,46583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:56.683619,49.563129,tcp,147.32.84.168,59008.0,->,194.79.54.61,80.0,SPA_SRA,0.0,0.0,7,1785,1527,258,255.0,0.8554621848739495,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:18:59.542114,0.000331,udp,147.32.84.170,35452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:18:59.543132,0.01782,tcp,147.32.84.170,40705.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:02.442798,0.000231,udp,147.32.85.25,43505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:19:07.999830,0.000333,udp,147.32.86.86,55591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:19:11.098356,0.115102,udp,147.32.86.58,48784.0,<->,128.82.200.101,58762.0,CON,0.0,0.0,2,535,475,60,267.5,0.8878504672897196,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:19:11.888330,0.000151,udp,147.32.84.138,48977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:19:13.121387,60.967594,tcp,147.32.84.165,1146.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:19:16.727246,3359.744629,udp,84.242.66.13,19212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,1850,1354,496,115.625,0.7318918918918919,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:19:23.579967,0.000526,udp,113.161.125.127,54329.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:19:24.188121,0.000295,udp,147.32.84.170,60365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:24.190269,0.216783,tcp,147.32.84.170,52108.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:29.541220,0.00045,udp,147.32.84.170,34370.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:35.336828,0.000289,udp,147.32.84.138,35674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:19:40.961397,0.00028,udp,147.32.84.138,60043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:19:41.727282,5.98858,tcp,82.210.152.11,44504.0,->,147.32.86.55,22.0,FSPA_FSPA,0.0,0.0,40,5756,2084,3672,143.9,0.36205698401667824,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:19:41.855789,0.00046,udp,91.124.102.244,21313.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,72,478,275.0,0.13090909090909092,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:19:49.542243,0.000552,udp,147.32.84.170,42537.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:49.543611,0.018393,tcp,147.32.84.170,60510.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:19:51.869742,6.029693,icmp,88.247.117.193,259.0,->,147.32.84.229,22775.0,URH,0.0,,3,519,519,0,173.0,1.0,8,0,flow=Background,Background,-1 2011-08-17 08:19:54.199567,2713.22876,udp,78.23.217.250,48893.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:19:59.541366,0.000362,udp,147.32.84.170,37004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:10.269678,62.10751,tcp,147.32.84.59,49726.0,->,209.85.148.147,80.0,SRPA_SPA,0.0,0.0,34,21866,4694,17172,643.1176470588235,0.21467117899935972,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:20:13.768730,60.967831,tcp,147.32.84.165,1147.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:20:17.716537,0.000606,udp,67.165.154.214,52971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,77,485,281.0,0.13701067615658363,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:20:18.025545,0.000556,udp,213.221.36.86,25611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,76,500,288.0,0.13194444444444445,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:20:18.694405,0.000224,udp,147.32.85.25,48386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:20:25.188967,0.000333,udp,147.32.84.170,38586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:25.190261,0.246028,tcp,147.32.84.170,52116.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:26.357127,6.574439,tcp,82.210.152.11,45985.0,->,147.32.86.55,22.0,FSPA_FSPA,0.0,0.0,40,5740,2068,3672,143.5,0.36027874564459933,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:20:27.219231,0.000415,tcp,147.32.87.249,1417.0,->,147.32.87.54,8530.0,_SRA,,0.0,6,364,0,364,60.666666666666664,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:20:34.231124,0.000247,udp,147.32.85.25,38216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:20:34.254849,3462.370605,udp,212.117.37.217,42857.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2079,792,1287,129.9375,0.38095238095238093,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:20:35.843932,3418.600342,udp,147.32.84.229,13363.0,->,151.73.127.216,27908.0,INT,0.0,,15,1230,1230,0,82.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:20:36.326160,0.000222,udp,147.32.85.112,44556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,77,222,149.5,0.25752508361204013,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:20:49.436220,0.017044,udp,147.32.84.59,50924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,77,305,191.0,0.20157068062827224,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:20:49.542129,0.000367,udp,147.32.84.170,42263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:49.542943,0.000286,udp,147.32.84.170,44058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:55.030031,0.000295,udp,147.32.85.25,43939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:20:56.188939,0.000273,udp,147.32.84.170,42287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:20:58.011695,0.000273,udp,147.32.86.55,43808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,87,227,157.0,0.2770700636942675,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:21:02.900774,2.058999,tcp,46.107.228.18,52509.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,9,648,357,291,72.0,0.5509259259259259,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:21:09.541414,0.000373,udp,147.32.84.170,41616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:13.235915,0.000522,udp,112.198.79.29,31406.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,145,85,60,72.5,0.5862068965517241,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:14.416652,60.966915,tcp,147.32.84.165,1148.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:21:16.645210,9.531398,tcp,66.249.72.35,61426.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,3490,782,2708,290.8333333333333,0.22406876790830946,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:21:18.139833,0.0004,udp,113.169.145.7,60736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,72,463,267.5,0.13457943925233645,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:19.542350,0.000382,udp,147.32.84.170,38245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:19.543482,0.018435,tcp,147.32.84.170,36876.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:19.624205,0.032405,udp,147.32.86.58,53060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,74,290,182.0,0.2032967032967033,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:21:23.123184,9.036858,tcp,147.32.85.74,52677.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:21:25.135525,8.999576,tcp,147.32.84.19,54617.0,->,147.32.201.140,13579.0,S_,0.0,,3,222,222,0,74.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:21:26.465155,0.000433,udp,124.207.242.66,58772.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,618,80,538,309.0,0.12944983818770225,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:27.187988,0.000164,udp,147.32.84.170,36825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:31.491960,0.000592,udp,195.131.217.54,32725.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,596,73,523,298.0,0.12248322147651007,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:39.541313,0.000408,udp,147.32.84.170,33186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:40.363267,0.000489,udp,188.23.14.144,40154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,141,72,69,70.5,0.5106382978723404,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:44.280109,0.000284,udp,147.32.85.23,34854.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:21:44.517734,0.00024,udp,147.32.84.138,49299.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:21:46.952692,0.17825,udp,147.32.84.229,13363.0,<->,99.252.154.211,26879.0,CON,0.0,0.0,3,2847,60,2787,949.0,0.02107481559536354,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:21:48.908708,0.000272,udp,147.32.85.34,61048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:21:52.868544,0.000409,icmp,147.32.86.96,,<-,147.32.87.29,55409.0,RED,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:21:55.812527,0.979859,udp,147.32.87.48,4574.0,->,147.32.87.101,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,8,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:21:59.542445,0.000326,udp,147.32.84.170,50255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:21:59.543525,0.017733,tcp,147.32.84.170,60529.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:02.210521,119.896568,tcp,147.32.84.171,55228.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,3149,885,2264,262.4166666666667,0.2810416005080978,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:22:03.938931,0.000473,udp,175.140.28.223,19407.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:22:06.500018,0.332362,tcp,147.32.85.26,62558.0,->,74.125.232.220,80.0,FSPA_FSPA,0.0,0.0,10,1883,1508,375,188.3,0.8008497079129049,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:22:08.394578,0.000505,udp,195.151.216.113,58196.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,75,486,280.5,0.13368983957219252,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:22:09.541315,0.000332,udp,147.32.84.170,35523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:09.542199,0.000445,udp,147.32.84.170,36716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:13.365653,2438.298584,udp,125.66.77.240,31416.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,670,370,300,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:22:13.932961,3076.115234,udp,147.32.85.115,123.0,<->,199.4.29.166,123.0,CON,0.0,0.0,8,720,360,360,90.0,0.5,8,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 08:22:15.063667,60.966949,tcp,147.32.84.165,1149.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:22:15.295439,0.000244,udp,147.32.84.138,54767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:22:24.833173,0.000908,udp,115.78.9.40,42370.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,576,79,497,288.0,0.1371527777777778,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:22:29.543490,0.017757,tcp,147.32.84.170,33883.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:39.541500,0.000392,udp,147.32.84.170,57909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:39.542544,0.000331,udp,147.32.84.170,59669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:22:50.842135,0.003288,udp,86.57.245.211,26916.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2924,60,2864,731.0,0.02051983584131327,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:22:55.769832,0.20028,tcp,147.32.86.181,1261.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,30,12047,1753,10294,401.56666666666666,0.1455134058271769,8,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:23:09.542439,0.000254,udp,147.32.84.170,44685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:10.337177,0.000266,udp,147.32.85.89,48980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:11.511460,0.000559,udp,94.156.67.185,16627.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,628,73,555,314.0,0.11624203821656051,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:13.330508,170.129822,udp,99.57.17.109,14076.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,22,1485,825,660,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:13.478897,0.22772,tcp,147.32.84.170,59078.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:13.698927,0.258224,tcp,147.32.84.170,59080.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:14.091561,0.27528,tcp,147.32.84.170,52159.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:15.711046,60.952007,tcp,147.32.84.165,1150.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:23:18.727483,248.669205,udp,178.242.253.141,34110.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,685,385,300,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:19.541630,0.0003,udp,147.32.84.170,58716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:19.543501,0.018273,tcp,147.32.84.170,50417.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:19.652498,0.000225,udp,147.32.84.138,56396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:20.364454,2762.101074,udp,116.111.204.249,60954.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:29.541434,0.000255,udp,147.32.84.170,45879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:29.542233,0.000478,udp,147.32.84.170,40399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:29.686586,0.000144,udp,147.32.84.138,47374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:39.542299,0.00033,udp,147.32.84.170,44060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:40.730839,0.000544,udp,112.139.71.102,47518.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,561,74,487,280.5,0.1319073083778966,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:42.403500,0.000445,udp,64.26.204.100,59800.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,556,78,478,278.0,0.14028776978417265,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:43.111701,0.001862,udp,147.32.85.26,58304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,75,149,112.0,0.33482142857142855,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:43.238322,0.000218,udp,147.32.85.26,59879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:43.309356,0.000405,udp,92.124.229.133,26316.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:47.184191,515.912354,udp,147.32.84.229,13363.0,<->,46.59.8.248,9365.0,CON,0.0,0.0,4,694,557,137,173.5,0.8025936599423631,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:49.543311,0.018016,tcp,147.32.84.170,50421.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:23:49.571468,0.000179,udp,147.32.85.25,41147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:49.603640,0.000181,udp,147.32.85.25,46078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:55.430702,0.000506,udp,188.106.223.174,49146.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:23:57.126204,3.089287,tcp,147.32.85.26,62665.0,->,81.91.85.35,80.0,FSPA_FSPA,0.0,0.0,16,7549,1720,5829,471.8125,0.2278447476486952,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:23:58.887301,0.000341,udp,147.32.84.138,54614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:23:59.543242,0.018435,tcp,147.32.84.170,42757.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:24:02.435437,3136.725342,udp,147.32.84.229,13363.0,->,213.141.156.4,53252.0,INT,0.0,,18,3060,3060,0,170.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:24:06.784949,0.000265,udp,147.32.85.34,60394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:07.285530,19.270819,icmp,86.49.116.224,8.0,<->,147.32.86.92,2337.0,ECO,0.0,0.0,40,3920,1960,1960,98.0,0.5,8,0,flow=Background,Background,-1 2011-08-17 08:24:08.574055,0.000449,udp,82.237.10.206,62710.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:16.348403,60.952923,tcp,147.32.84.165,1151.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:24:16.427578,0.019646,udp,147.32.84.164,39843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,557,73,484,278.5,0.1310592459605027,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:24:16.447705,322.549255,tcp,147.32.84.164,55913.0,->,74.125.232.194,443.0,FSPA_FSPA,0.0,0.0,91,60509,46026,14483,664.934065934066,0.7606471764530897,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:24:17.473142,8.999801,tcp,147.32.84.179,53737.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:24:19.541710,0.000487,udp,147.32.84.170,60144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:24:24.969656,0.108232,udp,147.32.84.194,36146.0,<->,18.62.11.73,11154.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:25.036714,0.237945,udp,147.32.84.229,13363.0,<->,41.146.72.67,14958.0,CON,0.0,0.0,2,170,66,104,85.0,0.38823529411764707,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:25.445943,0.000211,udp,147.32.84.138,46323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:26.689147,0.000354,udp,147.32.86.55,48736.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,87,227,157.0,0.2770700636942675,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:27.416942,0.000363,udp,147.32.84.138,55771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:28.984898,14.640922,tcp,117.252.66.199,3152.0,->,147.32.87.36,80.0,SRPA_SPA,0.0,0.0,162,147378,12505,134873,909.7407407407408,0.08484984190313344,8,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 08:24:29.542738,0.000368,udp,147.32.84.170,32970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:24:30.789714,0.296868,udp,147.32.84.229,13363.0,<->,219.103.13.216,51651.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:32.189448,0.00036,udp,147.32.84.170,43423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:24:32.925010,0.000288,udp,147.32.84.138,46555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:32.941433,0.000182,udp,147.32.84.138,50821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:39.546027,0.018141,tcp,147.32.84.170,42155.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:24:41.994288,3524.493896,udp,213.60.133.186,56090.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,528,288,240,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:45.117383,0.806733,udp,147.32.84.229,13363.0,<->,184.160.198.169,24609.0,CON,0.0,0.0,2,273,188,85,136.5,0.6886446886446886,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:50.427094,0.00018,udp,147.32.85.25,38750.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:51.435378,0.003289,udp,128.112.88.134,25884.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:24:52.781394,0.000351,udp,147.32.84.184,36509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,91,140,115.5,0.3939393939393939,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:24:59.543849,0.01804,tcp,147.32.84.170,39025.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:01.105694,0.001667,udp,89.235.224.47,47847.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,529,469,60,264.5,0.8865784499054821,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:03.189016,0.000401,udp,147.32.84.170,48435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:03.190436,0.249461,tcp,147.32.84.170,42113.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:03.808961,0.127395,udp,147.32.84.184,32919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,75,186,130.5,0.28735632183908044,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:04.881178,0.153644,udp,147.32.84.229,13363.0,<->,95.174.209.226,61169.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:06.453880,0.000189,udp,147.32.84.138,38364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:07.081530,0.700177,udp,147.32.84.184,41227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,73,128,100.5,0.36318407960199006,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:07.660097,0.206234,tcp,147.32.86.20,4654.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29099,1029,28070,765.7631578947369,0.03536203993264373,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:25:08.547950,9.083837,tcp,109.236.84.83,56358.0,->,147.32.85.100,3126.0,S_,0.0,,3,186,186,0,62.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:25:09.541502,0.000451,udp,147.32.84.170,40781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:13.715141,0.107352,udp,147.32.84.229,13363.0,<->,128.8.202.46,60023.0,CON,0.0,0.0,2,240,178,62,120.0,0.7416666666666667,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:16.286838,0.00018,udp,147.32.84.59,41383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,87,144,115.5,0.37662337662337664,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:16.986785,60.966145,tcp,147.32.84.165,1152.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:25:19.315848,0.015459,tcp,147.32.85.26,62719.0,->,194.79.54.62,80.0,FSRPA_FSPA,0.0,0.0,49,41579,1840,39739,848.5510204081633,0.044253108540368936,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:25:19.449619,3031.470703,udp,213.192.60.145,13538.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1476,1044,432,123.0,0.7073170731707317,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:19.544720,0.000478,udp,147.32.84.170,52341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:19.546652,0.01859,tcp,147.32.84.170,50433.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:26.678562,0.000546,udp,122.155.36.176,9389.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,76,468,272.0,0.13970588235294118,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:27.158982,0.000398,udp,147.32.86.20,56226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:27.975731,0.933596,tcp,147.32.86.20,4673.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,100,98337,1766,96571,983.37,0.017958652389232943,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:25:29.015444,0.000288,udp,147.32.84.138,36624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:29.543656,0.017875,tcp,147.32.84.170,42161.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:31.118088,0.000394,udp,81.172.59.195,32204.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:34.184874,0.28689,tcp,147.32.84.170,42117.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:36.348047,0.000243,udp,147.32.84.164,57594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,87,143,115.0,0.3782608695652174,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:36.348526,0.000156,udp,147.32.84.164,56449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,87,143,115.0,0.3782608695652174,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:36.349030,0.000207,udp,147.32.84.164,46810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,87,175,131.0,0.3320610687022901,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:38.870394,0.000263,udp,147.32.84.164,37928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:39.175945,20.224121,tcp,147.32.84.164,35540.0,->,128.84.154.137,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:39.541812,0.019888,udp,147.32.84.170,42345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:41.798147,0.00038,udp,147.32.84.25,56686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:43.077103,0.000236,udp,147.32.84.164,43428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.077107,0.000455,udp,147.32.84.164,35601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.077617,0.000245,udp,147.32.84.164,59256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.078228,16.219698,tcp,147.32.84.164,54317.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.078349,16.219427,tcp,147.32.84.164,54321.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.078484,16.218,tcp,147.32.84.164,54986.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.404912,0.000289,udp,147.32.84.164,50122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.405431,0.000287,udp,147.32.84.164,59564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.405445,0.000488,udp,147.32.84.164,50162.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.406959,0.000441,udp,147.32.84.164,35752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.407231,0.019646,udp,147.32.84.164,46188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.408338,0.000396,udp,147.32.84.164,48297.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.425239,0.000417,udp,147.32.84.164,53091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.427363,0.000209,udp,147.32.84.164,34118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.428106,0.000358,udp,147.32.84.164,36702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.428613,0.000235,udp,147.32.84.164,59278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.428858,0.000242,udp,147.32.84.164,51629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,82,151,116.5,0.351931330472103,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.429110,0.000418,udp,147.32.84.164,47624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,368,90,278,184.0,0.24456521739130435,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.429184,0.00049,udp,147.32.84.164,33131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,82,246,164.0,0.25,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.434266,0.00021,udp,147.32.84.164,38075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.436746,0.000282,udp,147.32.84.164,43300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,75,126,100.5,0.373134328358209,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.439691,0.000254,udp,147.32.84.164,38627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,75,127,101.0,0.3712871287128713,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.439698,0.000299,udp,147.32.84.164,58159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,76,142,109.0,0.3486238532110092,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.657224,0.247526,udp,147.32.84.164,40691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.843970,0.000408,udp,147.32.84.164,47652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.844597,0.000355,udp,147.32.84.164,45262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:43.904817,0.247241,udp,147.32.84.164,32919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:45.729982,3331.098389,udp,77.122.2.248,59262.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,5,2312,2045,267,462.4,0.884515570934256,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:25:49.545626,0.000297,udp,147.32.84.170,36566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:25:51.546889,7.344259,tcp,147.32.84.164,47087.0,->,74.125.232.223,443.0,SRPA_SPA,0.0,0.0,15,3388,1011,2377,225.86666666666667,0.29840613931523025,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:51.547566,0.000183,udp,147.32.84.164,35152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.393891,0.018019,udp,147.32.84.164,44535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.394422,0.000419,udp,147.32.84.164,55581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,376,85,291,188.0,0.22606382978723405,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.395094,0.020243,udp,147.32.84.164,49407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,80,162,121.0,0.3305785123966942,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.395562,0.000326,udp,147.32.84.164,37894.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,72,148,110.0,0.32727272727272727,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.396711,0.000292,udp,147.32.84.164,45898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.415664,0.019646,udp,147.32.84.164,40344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,80,264,172.0,0.23255813953488372,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:52.430712,0.223977,udp,147.32.84.164,36499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:25:53.995967,1.3e-05,icmp,147.32.86.96,,<-,147.32.87.41,54131.0,ECR,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:25:56.851703,0.000421,udp,147.32.84.184,41089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:25:59.549642,0.000269,udp,147.32.84.138,33365.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:03.648767,69.154037,tcp,147.32.86.58,1337.0,->,69.63.189.31,80.0,SRPA_SPA,0.0,0.0,14,7041,2132,4909,502.92857142857144,0.3027978980258486,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:26:05.196246,0.233621,tcp,147.32.84.170,42121.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:26:05.754163,0.000295,udp,147.32.84.138,45072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:06.995283,0.00025,udp,147.32.85.34,56026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:09.542877,0.000353,udp,147.32.84.170,50347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:26:10.198406,16.076145,udp,147.32.87.7,427.0,->,195.113.37.38,1025.0,INT,0.0,,11,1255,1255,0,114.0909090909091,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:26:12.798868,2.246711,tcp,2.193.70.55,57444.0,->,147.32.84.229,80.0,FSRPA_FSPA,0.0,0.0,11,794,490,304,72.18181818181819,0.6171284634760705,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:26:13.647172,3177.282959,udp,203.79.118.200,20096.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:17.044069,0.000108,udp,147.32.84.138,44733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:17.633363,60.967506,tcp,147.32.84.165,1153.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:26:25.363784,0.000174,udp,147.32.85.89,52774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:30.799821,0.000567,icmp,147.32.86.96,,<-,147.32.87.49,55412.0,RED,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:26:32.381437,1508.444946,udp,74.75.219.96,65476.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,536,296,240,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:36.179192,0.000251,udp,147.32.84.170,58891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:26:38.786772,0.257631,tcp,147.32.86.131,39693.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,15,2047,895,1152,136.46666666666667,0.43722520762090866,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:26:44.307300,0.000333,udp,111.253.197.124,60168.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:46.790256,0.944407,tcp,147.32.86.20,4742.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,96,97778,1586,96192,1018.5208333333334,0.016220417680868907,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:26:48.015183,0.038926,udp,147.32.84.229,13363.0,<->,130.88.91.103,9351.0,CON,0.0,0.0,2,243,181,62,121.5,0.7448559670781894,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:48.015485,0.124485,udp,147.32.84.229,13363.0,<->,69.124.18.9,1606.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:49.543770,0.018015,tcp,147.32.84.170,42780.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:26:53.357155,0.000217,udp,147.32.85.25,52006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:26:55.135239,0.0006,udp,178.210.148.203,26758.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,162,90,72,81.0,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:57.592604,0.000473,udp,96.238.19.151,65304.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:26:59.543807,0.018347,tcp,147.32.84.170,50446.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:02.338554,9.043576,tcp,147.32.85.74,36270.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:27:05.934609,0.000337,udp,147.32.84.138,42678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:06.083298,6.224575,udp,147.32.84.229,13363.0,->,188.17.57.187,29946.0,INT,0.0,,3,555,555,0,185.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:27:07.188996,0.000222,udp,147.32.84.170,44250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:08.445344,129.244141,udp,89.28.75.142,1526.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,532,292,240,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:27:09.543913,0.01895,tcp,147.32.84.170,44526.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:17.077570,0.000302,udp,147.32.84.170,52740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:17.083913,240.045258,tcp,147.32.84.170,53605.0,->,209.85.148.103,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:17.214860,6.461991,tcp,82.210.152.11,42465.0,->,147.32.86.55,22.0,FSPA_FSPA,0.0,0.0,40,5740,2068,3672,143.5,0.36027874564459933,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:27:18.281302,60.968655,tcp,147.32.84.165,1154.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:27:18.700702,0.000141,udp,147.32.85.25,60712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:19.541720,0.000539,udp,147.32.84.170,38016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:19.542759,0.000297,udp,147.32.84.170,59830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:23.792430,600.149414,tcp,147.32.84.130,49900.0,->,147.251.16.245,5269.0,FSPA_FSPA,0.0,0.0,33,7486,4126,3360,226.84848484848484,0.551162169382848,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:27:27.993167,0.01119,udp,147.32.84.184,44900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,74,143,108.5,0.34101382488479265,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:28.020611,0.002264,udp,147.32.84.184,51026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,73,159,116.0,0.3146551724137931,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:28.231898,0.011483,udp,147.32.84.184,52383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,80,149,114.5,0.34934497816593885,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:28.603672,0.000194,udp,147.32.84.184,37721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:33.675454,0.33685,udp,147.32.84.184,59371.0,<->,213.112.228.61,41612.0,CON,0.0,0.0,4,657,536,121,164.25,0.8158295281582952,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:27:34.046416,0.214991,udp,147.32.84.59,62160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,73,165,119.0,0.3067226890756303,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:36.239679,0.165415,udp,147.32.84.229,13363.0,<->,64.229.23.76,31872.0,CON,0.0,0.0,2,612,73,539,306.0,0.119281045751634,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:27:36.527307,208.469727,udp,147.32.84.229,13363.0,->,111.217.102.63,10080.0,INT,0.0,,15,1110,1110,0,74.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:27:38.189697,0.000296,udp,147.32.84.170,56545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:27:38.488678,0.000318,udp,147.32.86.58,53009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,67,124,95.5,0.3507853403141361,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:42.426488,4.722125,tcp,147.32.84.184,57333.0,->,192.221.106.126,80.0,FSPA_FSPA,0.0,0.0,95,82088,2884,79204,864.0842105263158,0.03513302796998343,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:27:42.519543,4.617171,tcp,147.32.84.184,36493.0,->,80.239.149.27,80.0,FSPA_FSPA,0.0,0.0,30,19621,1318,18303,654.0333333333333,0.06717292696600581,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:27:50.946058,0.000251,udp,147.32.84.59,53755.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:52.908848,0.000435,udp,147.32.84.138,49050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:53.457537,0.000541,udp,89.105.252.154,6332.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:27:56.823459,31.161674,tcp,78.176.119.237,56576.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,28,16561,1580,14981,591.4642857142857,0.09540486685586619,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:27:56.853693,0.000196,udp,147.32.84.138,33459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:27:59.545024,0.000325,udp,147.32.84.170,46121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:05.021732,0.000395,udp,147.32.86.55,38487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,86,301,193.5,0.2222222222222222,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:06.849720,0.000341,udp,147.32.85.34,64886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:06.851612,0.000194,udp,147.32.85.34,57572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:06.901855,0.000334,udp,147.32.85.34,54193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:09.188631,0.000454,udp,147.32.84.170,56929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:09.189690,0.000313,udp,147.32.84.170,49100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:09.544146,0.01816,tcp,147.32.84.170,39437.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:11.674036,0.035839,udp,147.32.84.184,49667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,68,168,118.0,0.288135593220339,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:13.531877,0.311855,tcp,147.32.84.170,49145.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:13.835581,0.371784,tcp,147.32.84.170,49147.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:15.777878,0.000761,udp,91.90.235.50,50347.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,547,74,473,273.5,0.13528336380255943,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:28:18.929920,60.988354,tcp,147.32.84.165,1155.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:28:19.542950,0.000327,udp,147.32.84.170,54879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:19.544863,0.019611,tcp,147.32.84.170,57792.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:29.543036,0.000385,udp,147.32.84.170,59041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:29.543963,0.000205,udp,147.32.84.170,59867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:30.768928,3599.999512,tcp,90.177.18.152,10010.0,,147.32.86.190,3306.0,PA_PA,0.0,0.0,1260,286476,135156,151320,227.36190476190475,0.47178821262514137,8,0,flow=Background,Background,-1 2011-08-17 08:28:32.958154,57.491711,tcp,189.3.239.81,40011.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,30,6746,1687,5059,224.86666666666667,0.2500741179958494,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:28:39.025979,3352.601318,udp,147.32.84.229,13363.0,<->,189.34.46.209,24325.0,CON,0.0,0.0,12,1374,827,547,114.5,0.6018922852983989,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:28:40.179642,0.000342,udp,147.32.84.170,45737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:40.180432,0.000439,udp,147.32.84.170,55063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:40.181719,0.238035,tcp,147.32.84.170,44282.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:46.117103,0.000185,udp,147.32.85.18,53.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:53.937598,0.000323,udp,147.32.84.138,46347.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:28:59.543000,0.000368,udp,147.32.84.170,42359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:28:59.708719,64.994614,tcp,147.32.85.18,45157.0,->,195.47.102.32,443.0,FSRPA_FSPA,0.0,0.0,38,11051,3679,7372,290.8157894736842,0.3329110487738666,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:28:59.970042,0.00021,udp,147.32.87.48,4646.0,->,147.32.86.248,161.0,INT,0.0,,2,262,262,0,131.0,1.0,8,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:29:00.262722,0.000344,udp,147.32.84.21,47801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:04.508882,9.046766,tcp,147.32.84.215,39096.0,->,86.49.87.107,6889.0,S_,0.0,,4,296,296,0,74.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:29:05.386922,0.000205,udp,147.32.85.89,33319.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:09.543100,0.000364,udp,147.32.84.170,51100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:11.190834,0.00022,udp,147.32.84.170,54413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:16.044534,0.0006,udp,121.203.199.212,48036.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:29:19.543083,0.000367,udp,147.32.84.170,44318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:19.543988,0.00027,udp,147.32.84.170,50331.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:19.577507,60.951595,tcp,147.32.84.165,1156.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:29:21.606256,0.000224,udp,147.32.84.138,48011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:24.009635,0.000225,udp,147.32.84.138,60429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:34.210289,3189.027832,udp,147.32.84.229,13363.0,<->,128.172.113.75,50043.0,CON,0.0,0.0,5,2626,1892,734,525.2,0.7204874333587205,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:29:35.717225,0.05693,tcp,147.32.86.96,57513.0,->,147.32.87.54,12489.0,_FSPA,,0.0,8,592,0,592,74.0,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:29:39.543202,0.000262,udp,147.32.84.170,55807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:41.181654,0.000305,udp,147.32.84.138,38569.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:41.861292,0.00053,udp,218.186.31.234,43224.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,78,474,276.0,0.14130434782608695,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:29:42.191657,0.000235,udp,147.32.84.170,49430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:42.192916,0.296461,tcp,147.32.84.170,44290.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:49.014669,2139.532227,udp,147.32.84.229,13363.0,<->,71.239.24.77,55919.0,CON,0.0,0.0,8,548,308,240,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:29:49.546058,0.000389,udp,147.32.84.170,58437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:49.830526,0.000475,udp,147.32.86.131,39867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:53.438723,243.702179,tcp,147.32.84.170,39524.0,->,74.125.232.193,443.0,SRPA_FSPA,0.0,0.0,31,4953,1543,3410,159.7741935483871,0.3115283666464769,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:29:54.986541,0.000181,udp,147.32.84.138,35289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:57.255154,0.000331,udp,147.32.85.25,40500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:29:58.664843,0.000401,udp,147.32.85.26,65139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:01.441524,0.000345,udp,147.32.87.36,58515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,86,208,147.0,0.2925170068027211,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:30:01.442556,0.00038,udp,147.32.87.36,45156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,96,184,140.0,0.34285714285714286,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:30:01.543950,0.000319,udp,147.32.87.36,37538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:30:01.788273,0.000408,icmp,147.32.86.96,,<-,147.32.87.51,55670.0,RED,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:30:07.680395,0.000279,udp,147.32.85.34,59150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:08.540796,0.000224,udp,147.32.84.138,53092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:11.183886,0.007455,udp,147.32.84.59,48493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:11.835801,0.008618,icmp,147.32.86.92,8.0,<->,209.85.148.99,30290.0,ECO,0.0,0.0,2,196,98,98,98.0,0.5,8,0,flow=Background,Background,-1 2011-08-17 08:30:13.191344,0.000188,udp,147.32.84.170,42567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:30:13.192442,0.24165,tcp,147.32.84.170,44295.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:30:17.022278,0.317958,udp,147.32.84.229,13363.0,<->,122.129.186.97,61904.0,CON,0.0,0.0,2,153,87,66,76.5,0.5686274509803921,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:17.647777,0.000217,udp,147.32.85.25,50220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:18.487223,0.00048,udp,202.92.125.132,54205.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:19.543165,0.000356,udp,147.32.84.170,43314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:30:20.214817,60.952057,tcp,147.32.84.165,1157.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:30:20.220366,2885.569092,udp,147.32.84.229,13363.0,<->,173.16.43.194,30766.0,CON,0.0,0.0,6,402,222,180,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:22.922057,0.000291,udp,147.32.84.171,40487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:27.296479,0.000338,udp,147.32.84.138,60739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:28.003379,0.001691,udp,90.216.249.167,14888.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,520,460,60,260.0,0.8846153846153846,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:28.577685,0.000268,udp,147.32.84.138,46917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:29.280458,2474.129883,udp,46.249.160.10,24801.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:29.545476,0.000321,udp,147.32.84.170,47737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:30:30.423589,0.000327,udp,147.32.84.138,40452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:34.621662,0.334367,udp,147.32.84.59,42621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,85,189,137.0,0.3102189781021898,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:35.012186,0.000233,udp,147.32.84.138,47133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:39.312735,6.875651,udp,147.32.84.229,13363.0,<->,95.56.4.66,16165.0,CON,0.0,0.0,4,664,543,121,166.0,0.8177710843373494,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:39.563411,0.000413,udp,147.32.84.170,43593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:30:43.329017,0.000222,udp,147.32.84.138,58523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:45.846539,0.32126,tcp,147.32.84.164,33768.0,->,65.120.128.130,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,8,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:30:46.570623,3252.933594,udp,147.32.84.229,13363.0,<->,78.141.179.9,34001.0,CON,0.0,0.0,6,3469,3349,120,578.1666666666666,0.9654078985298357,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:47.900495,0.000413,udp,147.32.84.138,60036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:47.914604,0.000223,udp,147.32.84.138,51637.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:30:57.676919,0.000603,udp,180.192.124.146,35461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:30:59.543191,0.00033,udp,147.32.84.170,42144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:02.350726,8e-06,icmp,147.32.86.96,,<-,147.32.87.38,40823.0,ECR,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:31:09.544583,0.000302,udp,147.32.84.170,60455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:09.545559,0.017832,tcp,147.32.84.170,43688.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:18.637129,28.300112,tcp,95.84.88.136,49990.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,18,1467,716,751,81.5,0.48807089297886846,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:31:19.545246,0.018437,tcp,147.32.84.170,37330.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:20.852332,60.966579,tcp,147.32.84.165,1158.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:31:24.509165,0.000537,udp,118.109.51.53,42176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,77,517,297.0,0.12962962962962962,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:29.160470,0.001483,udp,84.144.221.55,41049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:33.276522,0.000408,udp,110.55.229.1,13729.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:39.637631,6.013923,tcp,120.84.205.232,62670.0,->,147.32.85.100,3126.0,S_,0.0,,2,124,124,0,62.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:31:41.171420,0.000238,udp,147.32.84.138,34904.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:31:41.520528,0.000404,udp,88.103.252.33,46549.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:43.590232,8.972352,tcp,125.66.29.14,2719.0,->,147.32.86.88,4899.0,S_,0.0,,3,186,186,0,62.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:31:45.485329,2422.704834,udp,196.200.92.83,14360.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:46.168367,0.000347,udp,147.32.84.59,45597.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:31:47.128724,0.000219,udp,147.32.84.138,38891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:31:54.707001,0.000284,udp,147.32.85.25,53703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:31:56.123095,3485.473145,udp,218.40.186.68,33330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:56.933719,0.000348,udp,59.115.147.142,5442.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:31:59.333570,0.000339,udp,147.32.84.170,41588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:59.543024,0.000329,udp,147.32.84.170,40178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:31:59.544951,0.017658,tcp,147.32.84.170,37336.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:00.344223,0.000208,udp,147.32.84.138,46638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:32:01.877463,0.000484,udp,188.134.80.241,17254.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,594,71,523,297.0,0.11952861952861953,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:32:09.545452,0.018089,tcp,147.32.84.170,57824.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:10.383122,89.576462,udp,83.9.195.194,6227.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,398,218,180,66.33333333333333,0.5477386934673367,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:32:10.503727,151.631866,tcp,83.9.195.194,1036.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,35,3755,1274,2481,107.28571428571429,0.3392809587217044,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:32:10.723127,2450.010254,udp,94.43.25.228,59940.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:32:16.197021,0.243627,tcp,147.32.84.170,44312.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:16.373876,0.000356,udp,147.32.84.194,50203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:32:19.545175,0.017752,tcp,147.32.84.170,57826.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:21.499111,60.954536,tcp,147.32.84.165,1159.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:32:26.647267,0.000346,udp,147.32.84.138,47239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:32:29.543269,0.000414,udp,147.32.84.170,41280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:29.544216,0.00028,udp,147.32.84.170,34294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:30.415285,0.000144,udp,147.32.85.89,57926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:32:34.879597,0.000236,udp,147.32.84.2,36635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,75,233,154.0,0.2435064935064935,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:32:39.544245,0.000388,udp,147.32.84.170,57169.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:39.545168,0.000366,udp,147.32.84.170,38005.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:47.191895,0.000226,udp,147.32.84.170,49787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:47.193923,0.23782,tcp,147.32.84.170,44316.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:48.311556,17.176449,tcp,90.84.144.66,34446.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:32:49.544241,0.00071,udp,147.32.84.170,52967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:49.545492,0.000597,udp,147.32.84.170,59954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:55.915811,0.000411,udp,159.148.76.212,10437.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:32:59.546063,0.018685,tcp,147.32.84.170,35761.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:32:59.795929,2279.394531,udp,220.211.35.205,36917.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,698,565,133,174.5,0.8094555873925502,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:33:02.073519,24.278389,tcp,147.32.84.59,49478.0,->,92.240.244.39,80.0,FSPA_FSPA,0.0,0.0,30,16621,4091,12530,554.0333333333333,0.2461344082786836,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:33:02.590924,0.002222,udp,147.32.84.59,50562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:33:07.086626,0.000389,udp,147.32.86.20,57933.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:33:09.546181,0.018163,tcp,147.32.84.170,54562.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:10.188393,0.000521,udp,81.193.149.156,53971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,253,191,62,126.5,0.7549407114624506,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:33:11.267441,0.000542,udp,186.59.40.94,20346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,549,74,475,274.5,0.13479052823315119,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:33:11.964991,0.098072,udp,147.32.84.229,13363.0,<->,79.183.209.15,44315.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:33:13.227415,0.030148,tcp,147.32.84.170,44843.0,->,209.85.148.106,443.0,FSRPA_FSPA,0.0,0.0,14,1237,656,581,88.35714285714286,0.5303152789005658,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:13.875919,0.247558,tcp,147.32.84.170,41197.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:18.217483,0.000297,udp,147.32.84.170,56857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:18.218734,0.221095,tcp,147.32.84.170,46112.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:19.544172,0.00031,udp,147.32.84.170,37795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:19.545005,0.000329,udp,147.32.84.170,60609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:19.567360,0.000324,udp,147.32.84.138,46247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:33:22.138884,60.951015,tcp,147.32.84.165,1160.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:33:29.544341,0.000401,udp,147.32.84.170,56599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:29.546314,0.018234,tcp,147.32.84.170,54569.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:31.409305,0.000345,udp,147.32.85.25,42746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:33:37.203722,71.359001,tcp,147.32.85.123,47607.0,->,66.220.145.40,80.0,FSPA_FSPA,0.0,0.0,15,4827,3841,986,321.8,0.7957323389268697,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:33:43.938335,0.000445,udp,78.1.191.120,32744.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,237,175,62,118.5,0.7383966244725738,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:33:49.190273,0.000381,udp,147.32.84.170,40738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:49.192429,0.251294,tcp,147.32.84.170,46116.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:49.546291,0.018029,tcp,147.32.84.170,35772.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:33:56.761586,0.0002,udp,147.32.85.25,52562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:01.404907,2.930897,tcp,147.32.87.249,1547.0,->,147.32.87.54,8530.0,_SPA,,0.0,102,75168,0,75168,736.9411764705883,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:34:07.287470,0.000213,udp,147.32.85.34,58414.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:09.544214,0.000493,udp,147.32.84.170,43782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:09.889682,0.000357,udp,147.32.84.170,34756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:10.517187,0.010016,udp,147.32.84.170,35646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,98,182,140.0,0.35,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:10.527768,0.020091,udp,147.32.84.170,37127.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,98,284,191.0,0.25654450261780104,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:10.547554,0.000426,udp,147.32.84.170,56969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:10.548402,249.999161,tcp,147.32.84.170,44339.0,->,209.85.149.82,80.0,FSPA_FSPA,0.0,0.0,21,2461,1136,1325,117.19047619047619,0.46160097521332794,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:11.974451,0.484708,tcp,147.32.3.51,4747.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:34:15.511066,0.0,tcp,147.32.84.165,1161.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.511268,0.0,tcp,147.32.84.165,1162.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.522827,0.0,tcp,147.32.84.165,1164.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.694871,0.0,tcp,147.32.84.165,1165.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.695108,0.0,tcp,147.32.84.165,1166.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.705205,0.0,tcp,147.32.84.165,1168.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.894917,0.0,tcp,147.32.84.165,1169.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:15.895201,0.0,tcp,147.32.84.165,1170.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:16.426159,0.0,tcp,147.32.84.165,1174.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:17.627740,0.0,tcp,147.32.84.165,1173.0,->,147.32.79.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:20.638189,0.000232,udp,147.32.84.138,57721.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:26.410070,3570.080322,udp,109.200.244.13,29882.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,6492,248,6244,541.0,0.03820086260012323,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:34:29.043788,0.0,tcp,147.32.84.165,1394.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.043859,0.0,tcp,147.32.84.165,1396.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.043864,60.943855,tcp,147.32.84.165,1309.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:34:29.545276,0.00032,udp,147.32.84.170,40915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:29.644415,0.0,tcp,147.32.84.165,1409.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.644495,0.0,tcp,147.32.84.165,1406.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.644501,0.0,tcp,147.32.84.165,1408.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.644606,0.0,tcp,147.32.84.165,1413.0,->,147.32.79.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.644614,0.0,tcp,147.32.84.165,1410.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:29.644687,0.0,tcp,147.32.84.165,1412.0,->,192.168.0.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:31.458141,0.213537,udp,147.32.84.59,58841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,79,182,130.5,0.30268199233716475,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:34.532106,305.929718,udp,190.50.198.76,52114.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3062,121,2941,510.3333333333333,0.0395166557805356,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:34:39.546736,0.000372,udp,147.32.84.170,49556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:41.061547,0.0,tcp,147.32.84.165,1637.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.061561,0.0,tcp,147.32.84.165,1634.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.662375,0.0,tcp,147.32.84.165,1648.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.662391,0.0,tcp,147.32.84.165,1649.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.662395,0.0,tcp,147.32.84.165,1646.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.662399,0.0,tcp,147.32.84.165,1652.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:41.662403,0.0,tcp,147.32.84.165,1653.0,->,147.32.79.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:42.560976,0.000354,udp,147.32.85.25,44438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:45.331013,0.000285,udp,147.32.84.59,54054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:49.455748,0.017249,udp,147.32.85.123,60165.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,83,169,126.0,0.32936507936507936,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:49.546493,0.018617,tcp,147.32.84.170,49759.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:49.801338,0.000164,udp,147.32.84.138,37379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:51.188695,0.000292,udp,147.32.84.170,58629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:34:53.078518,0.0,tcp,147.32.84.165,1874.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.078587,0.0,tcp,147.32.84.165,1876.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679281,0.0,tcp,147.32.84.165,1889.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679293,0.0,tcp,147.32.84.165,1886.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679297,0.0,tcp,147.32.84.165,1888.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679301,0.0,tcp,147.32.84.165,1893.0,->,147.32.79.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679305,0.0,tcp,147.32.84.165,1890.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:53.679309,0.0,tcp,147.32.84.165,1892.0,->,192.168.0.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:34:56.990149,0.000278,udp,147.32.84.138,42608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:34:59.546457,0.01882,tcp,147.32.84.170,47430.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:01.630857,0.000566,udp,112.140.2.47,23655.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:35:03.107405,0.000526,udp,147.32.85.25,55648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,534,74,460,267.0,0.13857677902621723,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:04.115490,3579.833008,tcp,157.157.118.35,55582.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,381,46130,27920,18210,121.0761154855643,0.6052460437892911,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:05.096004,0.0,tcp,147.32.84.165,2118.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.096008,0.0,tcp,147.32.84.165,2115.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.696507,0.0,tcp,147.32.84.165,2129.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.696669,0.0,tcp,147.32.84.165,2130.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.696718,0.0,tcp,147.32.84.165,2127.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.696722,0.0,tcp,147.32.84.165,2133.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:05.696846,0.0,tcp,147.32.84.165,2134.0,->,147.32.79.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:06.691553,0.000518,udp,113.160.131.10,15025.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:35:10.614022,8.991624,tcp,147.32.84.179,53763.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:17.113288,0.0,tcp,147.32.84.165,2312.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.113302,0.0,tcp,147.32.84.165,2313.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.713792,0.0,tcp,147.32.84.165,2321.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.713936,0.0,tcp,147.32.84.165,2322.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.713951,0.0,tcp,147.32.84.165,2324.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.713956,0.0,tcp,147.32.84.165,2325.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:17.714010,0.0,tcp,147.32.84.165,2328.0,->,192.168.1.50,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:19.547326,0.018264,tcp,147.32.84.170,49763.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:20.110210,0.000225,udp,147.32.84.138,50316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:22.191725,0.000302,udp,147.32.84.170,47970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:29.131493,0.0,tcp,147.32.84.165,2493.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:29.131507,0.0,tcp,147.32.84.165,2492.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:29.547524,0.018606,tcp,147.32.84.170,41108.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:29.673484,0.00026,udp,147.32.85.25,52766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:29.732172,60.968079,tcp,147.32.84.165,2530.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:35:29.732285,0.0,tcp,147.32.84.165,2502.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:29.732293,0.0,tcp,147.32.84.165,2501.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:29.732396,0.0,tcp,147.32.84.165,2505.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:29.732403,0.0,tcp,147.32.84.165,2504.0,->,192.168.1.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:35.494049,7.171031,tcp,66.249.72.182,53297.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,27,15794,1338,14456,584.9629629629629,0.08471571482841585,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:36.576483,0.000231,udp,147.32.84.138,39023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:41.148475,0.0,tcp,147.32.84.165,2674.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.148489,0.0,tcp,147.32.84.165,2673.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.747388,0.0,tcp,95.130.170.231,29083.0,->,147.32.84.116,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.749872,0.0,tcp,147.32.84.165,2683.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.749887,0.0,tcp,147.32.84.165,2682.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.749995,0.0,tcp,147.32.84.165,2686.0,->,147.32.80.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.750006,0.0,tcp,147.32.84.165,2685.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.750108,0.0,tcp,147.32.84.165,2688.0,->,147.32.80.170,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:41.750635,0.082851,tcp,95.130.170.231,29083.0,->,147.32.84.70,80.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:41.752809,0.077129,tcp,95.130.170.231,29083.0,->,147.32.84.118,80.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:41.752824,0.0,tcp,95.130.170.231,29083.0,->,147.32.85.0,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.759209,0.000284,tcp,95.130.170.231,29083.0,->,147.32.85.21,80.0,S_RA,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.762203,0.0,tcp,95.130.170.231,29083.0,->,147.32.85.211,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.772228,0.0,tcp,95.130.170.231,29083.0,->,147.32.86.103,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.793833,0.0,tcp,95.130.170.231,29083.0,->,147.32.87.195,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:41.793840,0.0,tcp,95.130.170.231,29083.0,->,147.32.87.199,80.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:35:42.013392,179.635223,tcp,147.32.84.25,46342.0,->,74.125.232.215,80.0,FSPA_FSPA,0.0,0.0,18,6858,4399,2459,381.0,0.6414406532516769,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:42.165566,0.000357,udp,147.32.84.138,46922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:47.693364,0.149321,tcp,147.32.84.59,50948.0,->,74.125.232.196,80.0,FSPA_FSPA,0.0,0.0,10,2658,2035,623,265.8,0.7656132430398797,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:35:49.546316,0.000333,udp,147.32.84.170,57399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:52.309898,0.306351,udp,147.32.84.229,13363.0,<->,119.230.7.96,61433.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:35:53.166116,0.0,tcp,147.32.84.165,2853.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.166130,0.0,tcp,147.32.84.165,2854.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.192540,0.000226,udp,147.32.84.170,41870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:35:53.477927,0.00202,udp,147.32.84.194,60219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:53.766791,0.0,tcp,147.32.84.165,2862.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.767007,0.0,tcp,147.32.84.165,2863.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.767074,0.0,tcp,147.32.84.165,2865.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.767270,0.0,tcp,147.32.84.165,2866.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:53.767285,0.0,tcp,147.32.84.165,2869.0,->,192.168.1.230,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:35:55.885105,0.000279,udp,147.32.84.194,64225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,72,157,114.5,0.314410480349345,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:35:56.334589,0.053744,tcp,147.32.84.79,60181.0,->,62.75.177.33,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:35:59.163081,0.0004,udp,203.160.29.75,27642.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:36:01.892608,0.000256,udp,147.32.84.138,36640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:03.661464,0.000169,udp,147.32.84.138,37196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:05.183392,0.0,tcp,147.32.84.165,3003.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:05.784678,0.0,tcp,147.32.84.165,3009.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:05.784779,0.0,tcp,147.32.84.165,3011.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:05.784795,0.0,tcp,147.32.84.165,3013.0,->,147.32.81.36,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:05.784901,0.0,tcp,147.32.84.165,3015.0,->,147.32.81.37,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:05.883992,0.00032,udp,147.32.85.34,61862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:05.886765,0.000292,udp,147.32.85.34,61176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:09.545471,0.00034,udp,147.32.84.170,38898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:10.443831,9.092216,udp,109.167.7.194,11441.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,8,512,240,272,64.0,0.46875,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:36:17.200507,0.0,tcp,147.32.84.165,3123.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:17.801483,0.0,tcp,147.32.84.165,3129.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:17.801572,0.0,tcp,147.32.84.165,3131.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:17.801711,0.0,tcp,147.32.84.165,3133.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:17.802461,0.0,tcp,147.32.84.165,3135.0,->,147.32.81.97,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:17.909017,475.96698,udp,147.32.84.229,13363.0,<->,118.1.88.24,12235.0,CON,0.0,0.0,6,411,231,180,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:36:19.546490,0.000298,udp,147.32.84.170,60728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:19.547575,0.018159,tcp,147.32.84.170,35796.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:24.191493,0.00023,udp,147.32.84.170,34214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:24.193630,0.239499,tcp,147.32.84.170,46142.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:29.217925,0.0,tcp,147.32.84.165,3243.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:29.218063,0.0,tcp,147.32.84.165,3245.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:29.545705,0.000402,udp,147.32.84.170,38967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:29.546737,0.000283,udp,147.32.84.170,59922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:29.818785,0.0,tcp,147.32.84.165,3249.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:29.818878,0.0,tcp,147.32.84.165,3251.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:30.420135,0.0,tcp,147.32.84.165,3255.0,->,147.32.81.157,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:30.420150,60.967777,tcp,147.32.84.165,3274.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:36:31.593161,0.000394,udp,147.32.84.68,57541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:33.867239,22.614672,tcp,178.113.147.26,49565.0,->,147.32.84.229,80.0,SRPA_FSPA,0.0,0.0,10,840,290,550,84.0,0.34523809523809523,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:36:38.198421,0.021342,tcp,147.32.85.2,49174.0,->,147.32.80.13,3128.0,SRPA_FSPA,0.0,0.0,11,3706,3245,461,336.90909090909093,0.8756071235833783,8,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:36:41.235830,0.0,tcp,147.32.84.165,3364.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:41.235925,0.0,tcp,147.32.84.165,3366.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:41.836181,0.0,tcp,147.32.84.165,3370.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:41.836246,0.0,tcp,147.32.84.165,3372.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:42.437274,0.0,tcp,147.32.84.165,3376.0,->,147.32.81.217,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:52.184412,0.000221,udp,147.32.85.25,44067.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:36:53.253411,0.0,tcp,147.32.84.165,3485.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:53.253439,0.0,tcp,147.32.84.165,3487.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:53.853781,0.0,tcp,147.32.84.165,3491.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:53.853795,0.0,tcp,147.32.84.165,3493.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:54.454446,0.0,tcp,147.32.84.165,3497.0,->,147.32.82.23,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:36:55.192349,0.000374,udp,147.32.84.170,60541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:55.193640,0.242002,tcp,147.32.84.170,46146.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:36:59.302888,1806.692383,udp,62.221.134.144,58695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1245,269,976,311.25,0.21606425702811244,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:37:02.436355,0.000476,udp,113.143.134.240,64847.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,544,78,466,272.0,0.14338235294117646,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:37:03.250052,0.000553,udp,82.37.235.153,17726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:37:03.808638,2599.309082,udp,147.32.84.229,13363.0,<->,173.3.53.8,57394.0,CON,0.0,0.0,4,654,534,120,163.5,0.8165137614678899,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:37:04.074920,6.004072,udp,147.32.84.229,13363.0,->,190.142.244.3,11217.0,INT,0.0,,3,180,180,0,60.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:37:05.270271,0.0,tcp,147.32.84.165,3605.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.270285,0.0,tcp,147.32.84.165,3604.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.270290,0.0,tcp,147.32.84.165,3607.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.871268,0.0,tcp,147.32.84.165,3610.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.871340,0.0,tcp,147.32.84.165,3611.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.871347,0.0,tcp,147.32.84.165,3612.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.871398,0.0,tcp,147.32.84.165,3613.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:05.871405,0.0,tcp,147.32.84.165,3614.0,->,147.32.87.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:06.367987,1.245005,udp,147.32.85.6,54539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,4,359,222,137,89.75,0.6183844011142061,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:06.472209,0.0,tcp,147.32.84.165,3617.0,->,147.32.82.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:06.472224,0.0,tcp,147.32.84.165,3616.0,->,147.32.87.83,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:06.855959,3565.195801,tcp,147.32.86.113,1048.0,->,208.68.163.220,5222.0,SPA_SPA,0.0,0.0,319,55864,19400,36464,175.12225705329155,0.3472719461549477,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:37:14.136389,0.000208,udp,147.32.85.88,61880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,351,81,270,175.5,0.23076923076923078,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:17.287355,0.0,tcp,147.32.84.165,3725.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:17.287427,0.0,tcp,147.32.84.165,3727.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:17.888540,0.0,tcp,147.32.84.165,3731.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:17.888622,0.0,tcp,147.32.84.165,3733.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:18.489253,0.0,tcp,147.32.84.165,3737.0,->,147.32.82.143,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:19.548392,0.000518,udp,147.32.84.170,39830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:37:20.942936,0.433038,tcp,147.32.85.88,57817.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,14,3366,1016,2350,240.42857142857142,0.3018419489007724,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:37:22.653982,0.000182,udp,147.32.85.25,50091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:26.082801,0.000347,udp,147.32.84.138,36869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:26.194449,0.000339,udp,147.32.84.170,52200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:37:27.199668,0.000321,udp,147.32.84.138,38388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:28.288370,0.000257,udp,147.32.84.138,42576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:28.842015,6.044293,udp,147.32.84.229,13363.0,->,65.30.35.161,54144.0,INT,0.0,,3,606,606,0,202.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:37:29.304631,0.0,tcp,147.32.84.165,3845.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:29.304742,0.0,tcp,147.32.84.165,3847.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:29.546769,0.000295,udp,147.32.84.170,41282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:37:29.905960,0.0,tcp,147.32.84.165,3851.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:29.906028,0.0,tcp,147.32.84.165,3853.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:30.506521,0.0,tcp,147.32.84.165,3857.0,->,147.32.82.203,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:35.189375,0.000263,udp,147.32.86.155,60030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,74,149,111.5,0.33183856502242154,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:39.101109,0.001482,udp,46.7.112.153,15882.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,485,60,272.5,0.8899082568807339,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:37:41.322485,0.0,tcp,147.32.84.165,3966.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.322567,60.954269,tcp,147.32.84.165,3882.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:37:41.322574,0.0,tcp,147.32.84.165,3965.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.637184,0.0,tcp,147.32.84.165,3970.0,->,147.32.83.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.923405,0.0,tcp,147.32.84.165,3971.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.923419,0.0,tcp,147.32.84.165,3972.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.923423,0.0,tcp,147.32.84.165,3973.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.923486,0.0,tcp,147.32.84.165,3974.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:41.923491,0.0,tcp,147.32.84.165,3975.0,->,147.32.88.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:42.523634,0.0,tcp,147.32.84.165,3978.0,->,147.32.83.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:42.523648,0.0,tcp,147.32.84.165,3977.0,->,147.32.88.9,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:49.547253,0.01838,tcp,147.32.84.170,35814.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:37:49.890865,0.363447,tcp,147.32.86.58,1884.0,->,199.187.125.26,80.0,FSPA_FSPA,0.0,0.0,10,1255,441,814,125.5,0.35139442231075696,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:37:53.339094,0.0,tcp,147.32.84.165,4086.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.339162,0.0,tcp,147.32.84.165,4085.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.339169,0.0,tcp,147.32.84.165,4088.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.940132,0.0,tcp,147.32.84.165,4091.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.940146,0.0,tcp,147.32.84.165,4092.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.940151,0.0,tcp,147.32.84.165,4093.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.940242,0.0,tcp,147.32.84.165,4094.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:53.940255,0.0,tcp,147.32.84.165,4095.0,->,147.32.88.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:54.541190,0.0,tcp,147.32.84.165,4098.0,->,147.32.83.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:54.541204,0.0,tcp,147.32.84.165,4097.0,->,147.32.88.69,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:37:55.328984,0.000442,udp,147.32.86.155,60045.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,76,186,131.0,0.2900763358778626,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:37:57.188817,0.000329,udp,147.32.84.170,53119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:37:59.546657,0.00035,udp,147.32.84.170,33776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:04.351436,0.000163,udp,147.32.84.138,35280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:05.356761,0.0,tcp,147.32.84.165,4206.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.356852,0.0,tcp,147.32.84.165,4205.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.356859,0.0,tcp,147.32.84.165,4207.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.957592,0.0,tcp,147.32.84.165,4211.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.957606,0.0,tcp,147.32.84.165,4212.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.957645,0.0,tcp,147.32.84.165,4214.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.957694,0.0,tcp,147.32.84.165,4213.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:05.957753,0.0,tcp,147.32.84.165,4216.0,->,147.32.88.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:06.501230,0.000392,udp,147.32.85.34,54772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:06.508922,0.000258,udp,147.32.85.34,59303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:06.558623,0.0,tcp,147.32.84.165,4218.0,->,147.32.83.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:06.558630,0.0,tcp,147.32.84.165,4217.0,->,147.32.88.129,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:09.547639,0.00028,udp,147.32.84.170,42978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:11.380548,0.000416,udp,147.32.84.164,53790.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,76,156,116.0,0.3275862068965517,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:11.381291,0.135399,udp,147.32.84.164,33076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:12.965354,0.000261,udp,147.32.84.164,40075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,85,159,122.0,0.3483606557377049,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.416772,0.135214,tcp,147.32.86.20,1365.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,37,29181,973,28208,788.6756756756756,0.03334361399540797,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:38:13.567571,0.269736,tcp,147.32.84.170,43818.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:13.625080,0.238216,tcp,147.32.84.170,47301.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:13.640063,0.000356,udp,147.32.84.164,42488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.640069,0.000404,udp,147.32.84.164,46413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.640114,0.000433,udp,147.32.84.164,57967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.640172,0.000435,udp,147.32.84.164,35732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.640672,0.000448,udp,147.32.84.164,44539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.641691,20.017952,tcp,147.32.84.164,47131.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.642124,10.016583,tcp,147.32.84.164,50410.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.642166,250.039322,tcp,147.32.84.164,39601.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,31,4542,1539,3003,146.51612903225808,0.33883751651254956,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.642176,250.039169,tcp,147.32.84.164,39602.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,31,4542,1539,3003,146.51612903225808,0.33883751651254956,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.829482,0.237295,tcp,147.32.84.170,43820.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:13.885201,0.031314,udp,147.32.84.164,53940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,453,73,380,226.5,0.16114790286975716,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.909150,9.756283,tcp,147.32.84.164,35615.0,->,192.124.27.94,80.0,FSPA_FSPA,0.0,0.0,49,33209,3899,29310,677.734693877551,0.11740793158481135,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:13.909378,9.756036,tcp,147.32.84.164,35616.0,->,192.124.27.94,80.0,FSPA_FSPA,0.0,0.0,23,9071,2776,6295,394.39130434782606,0.3060302061514717,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:14.200522,0.348043,tcp,147.32.84.170,47304.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:14.232424,0.00031,udp,147.32.84.164,34545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,83,151,117.0,0.3547008547008547,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:14.233949,0.000454,udp,147.32.84.164,59189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,83,181,132.0,0.3143939393939394,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:15.979209,0.000207,udp,147.32.84.164,43565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,68,123,95.5,0.35602094240837695,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:16.767637,0.00012,udp,147.32.84.138,34662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:17.376166,0.0,tcp,147.32.84.165,4326.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.376174,0.0,tcp,147.32.84.165,4325.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.376178,0.0,tcp,147.32.84.165,4327.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.976713,0.0,tcp,147.32.84.165,4331.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.976809,0.0,tcp,147.32.84.165,4332.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.976858,0.0,tcp,147.32.84.165,4334.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.976865,0.0,tcp,147.32.84.165,4333.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:17.976935,0.0,tcp,147.32.84.165,4336.0,->,147.32.88.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:18.578228,0.0,tcp,147.32.84.165,4338.0,->,147.32.83.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:18.578321,0.0,tcp,147.32.84.165,4337.0,->,147.32.88.189,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:18.678204,0.000224,udp,147.32.84.164,53696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,79,155,117.0,0.33760683760683763,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:18.678661,0.18361,udp,147.32.84.164,57105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,79,174,126.5,0.31225296442687744,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:18.862706,0.412551,tcp,147.32.84.164,52883.0,->,69.65.3.210,80.0,FSPA_FSPA,0.0,0.0,11,1673,871,802,152.0909090909091,0.5206216377764495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:23.089322,9.652225,udp,147.32.85.2,31604.0,<->,114.134.207.26,25397.0,CON,0.0,0.0,4,649,527,122,162.25,0.8120184899845917,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:38:25.007877,3027.566406,udp,90.179.87.230,25295.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,928,680,248,116.0,0.7327586206896551,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:38:26.187404,65.576645,tcp,147.32.85.2,49211.0,->,74.125.39.95,443.0,SRPA_SPA,0.0,0.0,71,68494,2510,65984,964.7042253521126,0.03664554559523462,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:38:28.193126,0.000309,udp,147.32.84.170,54171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:29.393313,0.0,tcp,147.32.84.165,4446.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.393392,0.0,tcp,147.32.84.165,4445.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.393399,0.0,tcp,147.32.84.165,4447.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.994155,0.0,tcp,147.32.84.165,4451.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.994235,0.0,tcp,147.32.84.165,4452.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.994242,0.0,tcp,147.32.84.165,4454.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.994285,0.0,tcp,147.32.84.165,4453.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:29.994385,0.0,tcp,147.32.84.165,4456.0,->,147.32.88.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:30.595411,0.0,tcp,147.32.84.165,4458.0,->,147.32.83.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:30.595499,0.0,tcp,147.32.84.165,4457.0,->,147.32.88.249,135.0,S_,0.0,,1,62,62,0,62.0,1.0,8,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 08:38:35.272810,0.001653,udp,147.32.85.36,51945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:35.696667,6.563168,udp,147.32.84.229,13363.0,->,194.44.224.224,32794.0,INT,0.0,,6,1698,1698,0,283.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:38:36.124490,0.91639,tcp,147.32.84.164,52891.0,->,69.65.3.210,80.0,FSPA_FSPA,0.0,0.0,50,41481,1785,39696,829.62,0.04303174947566356,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:36.728649,0.006018,udp,147.32.84.184,45394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,72,142,107.0,0.3364485981308411,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:36.735079,0.000411,udp,147.32.84.59,47217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:36.739575,0.0005,udp,147.32.84.59,48742.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:38.860348,14.800158,tcp,147.32.84.164,47162.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.068469,0.00018,udp,147.32.84.164,39607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.068474,0.00028,udp,147.32.84.164,41321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.069994,0.00028,udp,147.32.84.164,42914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.071577,0.000372,udp,147.32.84.164,51898.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.073189,0.000366,udp,147.32.84.164,45462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,79,184,131.5,0.30038022813688214,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.074737,0.000288,udp,147.32.84.164,48808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.259012,0.111833,udp,147.32.84.164,42923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,72,125,98.5,0.36548223350253806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.259710,0.000418,udp,147.32.84.164,42377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.260781,0.358599,udp,147.32.84.164,48304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.320406,0.248974,udp,147.32.84.164,48371.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.431859,0.000418,udp,147.32.84.164,59578.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.549761,0.018676,tcp,147.32.84.170,50153.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:39.619728,0.000369,udp,147.32.84.164,36879.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,73,225,149.0,0.24496644295302014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.818018,0.248874,udp,147.32.84.164,60289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:39.890405,0.000282,udp,147.32.84.164,50862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,76,122,99.0,0.3838383838383838,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:41.640245,239.412811,tcp,147.32.84.25,38154.0,->,74.125.232.215,80.0,FSPA_FSPA,0.0,0.0,73,12616,4124,8492,172.82191780821918,0.3268864933417882,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:38:41.962503,60.967953,tcp,147.32.84.165,4469.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:38:42.789275,0.000215,udp,147.32.85.34,50472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:46.152534,0.000405,udp,147.32.84.164,34965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:49.547478,0.000381,udp,147.32.84.170,39723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:49.549529,0.017885,tcp,147.32.84.170,37854.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:50.254349,303.440796,tcp,147.32.84.164,53538.0,->,195.113.232.83,80.0,FSPA_FSPA,0.0,0.0,45,23426,3458,19968,520.5777777777778,0.14761376248612654,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.307508,303.495239,tcp,147.32.84.164,47347.0,->,18.7.25.115,80.0,FSPA_FSPA,0.0,0.0,40,18415,4224,14191,460.375,0.22937822427368992,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.344650,0.455166,udp,147.32.84.164,43583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,74,178,126.0,0.29365079365079366,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.344662,0.104558,udp,147.32.84.164,33955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,84,156,120.0,0.35,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.486635,0.141442,udp,147.32.84.164,40801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,144,72,72,72.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.508280,443.225708,tcp,147.32.84.164,33536.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,54,17494,12470,5024,323.962962962963,0.7128158225677375,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.509888,303.185028,tcp,147.32.84.164,47961.0,->,195.113.232.98,80.0,FSPA_FSPA,0.0,0.0,22,3096,1967,1129,140.72727272727272,0.6353359173126615,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.509895,13.14225,tcp,147.32.84.164,47962.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.524809,3.247619,tcp,147.32.84.164,60360.0,->,174.129.242.131,80.0,FSPA_FSPA,0.0,0.0,11,1745,1297,448,158.63636363636363,0.7432664756446992,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:50.984860,0.000254,udp,147.32.84.164,35844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,73,131,102.0,0.35784313725490197,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:38:52.334482,0.000266,udp,147.32.84.138,59488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:54.795100,0.000275,udp,147.32.85.103,56121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,100,152,126.0,0.3968253968253968,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:38:59.103419,134.406616,tcp,147.32.86.113,1073.0,->,91.203.99.45,80.0,FSPA_FSPA,0.0,0.0,13,3137,1453,1684,241.30769230769232,0.46318138348740834,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:38:59.195575,0.000293,udp,147.32.84.170,50925.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:59.196843,0.261429,tcp,147.32.84.170,60813.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:59.547551,0.000294,udp,147.32.84.170,51820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:38:59.549448,0.018451,tcp,147.32.84.170,48915.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:02.609800,284.686951,tcp,147.32.84.59,54241.0,->,74.125.232.215,443.0,FSPA_FSPA,0.0,0.0,43,10257,5480,4777,238.53488372093022,0.5342692795164278,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:39:02.956855,3576.248047,udp,147.32.84.229,13363.0,<->,133.9.247.190,54526.0,CON,0.0,0.0,120,20185,9571,10614,168.20833333333334,0.47416398315580877,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:02.979040,0.206388,tcp,147.32.86.20,1406.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30151,1029,29122,773.1025641025641,0.03412822128619283,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:39:09.549806,0.017676,tcp,147.32.84.170,37857.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:17.817384,10.00037,tcp,147.32.86.181,1346.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,22,2647,1755,892,120.31818181818181,0.663014733660748,8,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:39:19.547787,0.000548,udp,147.32.84.170,42381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:23.350931,301.603394,tcp,147.32.85.103,57042.0,->,147.32.192.34,993.0,FSRPA_FSPA,0.0,0.0,43,9516,2353,7163,221.30232558139534,0.24726775956284153,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:39:26.016254,22.72459,tcp,18.111.115.40,59042.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,1835,1959368,34868,1924500,1067.775476839237,0.017795534070169566,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:39:26.424621,209.912704,udp,89.217.42.167,10210.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,257,137,120,64.25,0.5330739299610895,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:28.397735,237.931992,tcp,147.32.84.59,46857.0,->,80.239.149.26,80.0,FSPA_FSPA,0.0,0.0,46,16701,4168,12533,363.0652173913044,0.24956589425782888,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:39:28.400965,18.010872,tcp,147.32.84.59,40404.0,->,69.63.190.28,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:39:28.426054,0.000444,udp,76.208.164.230,46423.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:29.549972,0.017956,tcp,147.32.84.170,48918.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:30.877182,0.000212,udp,147.32.85.25,57423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:39:31.397104,1690.80542,udp,86.52.158.60,13607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,389,251,138,97.25,0.6452442159383034,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:31.551057,366.519196,tcp,147.32.84.164,37405.0,->,74.125.232.201,443.0,FSPA_FSPA,0.0,0.0,124,95734,89148,6586,772.0483870967741,0.9312052144483673,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:32.351698,3428.130127,udp,147.32.84.3,40080.0,<->,147.32.30.28,123.0,CON,0.0,0.0,68,6120,3060,3060,90.0,0.5,8,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 08:39:33.063511,3029.480713,udp,92.252.104.219,42404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:34.063486,0.000345,udp,147.32.84.138,58880.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:39:37.391834,0.000327,udp,147.32.86.58,60138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,75,153,114.0,0.32894736842105265,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:39:37.451215,0.000263,udp,147.32.84.59,60178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:39:38.656372,19.709467,udp,147.32.86.24,31002.0,<->,87.254.65.107,18266.0,CON,0.0,0.0,4,249,129,120,62.25,0.5180722891566265,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:38.681363,1806.407959,udp,147.32.86.155,12093.0,<->,78.45.13.139,58730.0,CON,0.0,0.0,10,2027,1620,407,202.7,0.7992106561420819,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:39.262607,0.000263,udp,147.32.86.113,53958.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,71,156,113.5,0.31277533039647576,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:39:39.551088,0.017739,tcp,147.32.84.170,48920.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:39.723143,464.333374,udp,147.32.86.155,12093.0,<->,174.62.200.253,32801.0,CON,0.0,0.0,4,1058,938,120,264.5,0.8865784499054821,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:42.610439,60.942135,tcp,147.32.84.165,4470.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:39:46.537010,0.000374,udp,147.32.84.164,59043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:48.817025,0.000424,udp,113.161.87.71,51320.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:49.548800,0.00051,udp,147.32.84.170,60890.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:39:50.165339,0.000538,udp,147.32.84.164,38954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,97,183,140.0,0.3464285714285714,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:50.165663,0.000417,udp,147.32.84.164,53473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:50.165826,0.000449,udp,147.32.84.164,39708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,87,268,177.5,0.24507042253521127,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:50.165995,0.000581,udp,147.32.84.164,33825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,382,97,285,191.0,0.25392670157068065,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:50.167121,243.535339,tcp,147.32.84.164,50002.0,->,74.125.232.221,443.0,FSPA_FSRPA,0.0,0.0,28,2648,1492,1156,94.57142857142857,0.5634441087613293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:50.413964,0.246873,udp,147.32.84.164,55709.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:39:51.132208,1885.873535,udp,147.32.85.26,60764.0,<->,149.5.45.252,43001.0,CON,0.0,0.0,6,729,540,189,121.5,0.7407407407407407,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:52.685200,3295.584473,udp,147.32.84.229,13363.0,<->,24.30.95.80,4880.0,CON,0.0,0.0,10,1598,279,1319,159.8,0.17459324155193992,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:57.438028,3025.141113,udp,79.247.92.246,39869.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:39:59.549824,0.000438,udp,147.32.84.170,57051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:40:01.131994,0.000356,udp,147.32.84.138,47657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:05.101912,0.000427,udp,186.59.6.40,13056.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:06.324205,0.188466,udp,147.32.84.164,46223.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:06.513670,0.108132,udp,147.32.84.164,51587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:06.523066,0.000405,udp,147.32.84.164,59862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:06.658407,0.092351,udp,147.32.84.164,58901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,70,141,105.5,0.33175355450236965,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:06.751118,0.000279,udp,147.32.84.164,47463.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,70,141,105.5,0.33175355450236965,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.007645,0.000228,udp,147.32.84.164,54733.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.008400,0.00026,udp,147.32.84.164,47026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.008912,0.000379,udp,147.32.84.164,35522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,73,220,146.5,0.24914675767918087,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.044676,0.369176,tcp,147.32.84.164,35499.0,->,75.101.154.43,80.0,FSPA_FSPA,0.0,0.0,10,1691,839,852,169.1,0.4961561206386753,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.444730,0.162342,udp,147.32.84.164,52546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,74,233,153.5,0.24104234527687296,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.495917,0.049857,tcp,147.32.84.164,48815.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,12,4938,1020,3918,411.5,0.2065613608748481,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.497024,0.068463,tcp,147.32.84.164,48816.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,19,11498,1284,10214,605.1578947368421,0.11167159506001044,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.497143,0.052077,tcp,147.32.84.164,48818.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,12,7266,1020,6246,605.5,0.14037985136251033,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:07.532515,0.051327,tcp,147.32.84.164,48822.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,13,7105,1086,6019,546.5384615384615,0.15285010555946515,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:13.601011,1497.498779,udp,147.32.84.229,13363.0,<->,94.137.195.104,11488.0,CON,0.0,0.0,8,3214,208,3006,401.75,0.06471686372121967,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:19.469397,0.000419,udp,147.32.84.164,51252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,357,72,285,178.5,0.20168067226890757,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.469401,0.000589,udp,147.32.84.164,57903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.470140,0.000466,udp,147.32.84.164,41464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.470408,0.000208,udp,147.32.84.164,50618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.470412,14.197631,tcp,147.32.84.164,46508.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.550870,0.000419,udp,147.32.84.170,39419.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:40:19.552923,0.01784,tcp,147.32.84.170,50167.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:40:19.778816,0.000234,udp,147.32.84.164,49004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,72,125,98.5,0.36548223350253806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.780239,0.000184,udp,147.32.84.164,33843.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,72,165,118.5,0.3037974683544304,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.782145,0.0005,udp,147.32.84.164,55723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.785809,0.000258,udp,147.32.84.164,58255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,79,174,126.5,0.31225296442687744,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.786581,0.000233,udp,147.32.84.164,55873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.787092,0.010348,udp,147.32.84.164,33967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.793712,0.000313,udp,147.32.84.164,59902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.798066,0.000327,udp,147.32.84.164,47394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.798613,0.000304,udp,147.32.84.164,34374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.803484,0.121645,udp,147.32.84.164,36541.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.927399,0.000198,udp,147.32.84.164,39851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:19.927779,0.187966,udp,147.32.84.164,57208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,74,386,230.0,0.1608695652173913,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:23.591754,3521.110596,udp,147.32.84.229,13363.0,->,123.0.208.1,17109.0,INT,0.0,,27,1986,1986,0,73.55555555555556,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:40:27.938548,0.000313,udp,147.32.84.164,38002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,70,141,105.5,0.33175355450236965,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:28.391859,0.052356,tcp,147.32.84.164,48837.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,12,4652,998,3654,387.6666666666667,0.21453138435081684,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:28.391873,0.067947,tcp,147.32.84.164,48838.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,19,13189,1194,11995,694.1578947368421,0.09052998711047085,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:28.396000,0.065868,tcp,147.32.84.164,48840.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,17,12641,1064,11577,743.5882352941177,0.0841705561268887,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:28.427571,0.067471,tcp,147.32.84.164,48841.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,15,8477,1130,7347,565.1333333333333,0.13330187566356022,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:33.179108,1252.775024,udp,115.176.215.176,60437.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:33.655657,0.000394,udp,199.40.206.187,35611.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:38.793890,0.020616,udp,147.32.84.59,36845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:39.328123,3318.60791,udp,147.32.84.229,13363.0,<->,174.74.46.176,54294.0,CON,0.0,0.0,8,3208,3028,180,401.0,0.9438902743142145,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:43.238038,60.968277,tcp,147.32.84.165,4471.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:40:43.991643,0.000226,udp,147.32.84.138,43651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:44.005282,0.200182,tcp,147.32.84.164,33612.0,->,89.149.217.139,80.0,FSPA_FSPA,0.0,0.0,54,47711,2007,45704,883.5370370370371,0.04206577099620633,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:44.204614,0.020229,udp,147.32.84.164,33176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,84,288,186.0,0.22580645161290322,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:44.393984,0.067822,tcp,147.32.84.164,48851.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,15,8128,1215,6913,541.8666666666667,0.14948326771653545,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:44.428587,0.05009,tcp,147.32.84.164,48855.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,12,6941,1083,5858,578.4166666666666,0.15602939057772655,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:45.854808,0.361297,tcp,147.32.84.164,44902.0,->,209.197.6.228,27031.0,FSA_SRA,0.0,0.0,6,406,206,200,67.66666666666667,0.5073891625615764,8,0,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:40:48.822929,0.118364,udp,147.32.84.21,56819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,73,274,173.5,0.21037463976945245,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:49.650106,0.134984,udp,147.32.85.20,60607.0,<->,98.231.220.233,25585.0,CON,0.0,0.0,2,943,77,866,471.5,0.0816542948038176,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:51.597481,0.000263,udp,147.32.84.138,54344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:52.307191,63.874027,tcp,183.83.85.8,58880.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,23,2092,1236,856,90.95652173913044,0.5908221797323135,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:40:52.694763,14.101539,tcp,147.32.84.184,43042.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,360,240,120,60.0,0.6666666666666666,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:40:53.584937,0.00167,udp,113.159.221.182,51706.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,516,456,60,258.0,0.8837209302325582,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:53.690659,0.002822,udp,147.32.84.184,50056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,73,156,114.5,0.31877729257641924,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:55.919667,3105.046143,udp,89.162.247.244,62006.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:40:56.610202,0.000425,udp,147.32.84.138,58669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:40:59.367103,4.133556,tcp,82.31.85.29,4205.0,->,147.32.85.20,60607.0,FSPA_FSPA,0.0,0.0,16,1052,571,481,65.75,0.5427756653992395,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:41:02.178666,0.000407,udp,147.32.84.164,35446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:02.179435,0.00053,udp,147.32.84.164,56738.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:02.216074,0.000484,udp,147.32.84.164,52966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:02.309552,0.203881,tcp,147.32.84.164,33627.0,->,89.149.217.139,80.0,FSPA_FSPA,0.0,0.0,49,47443,1894,45549,968.2244897959183,0.03992159011866872,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:02.633764,0.082715,tcp,147.32.84.164,48865.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,27,17117,1611,15506,633.9629629629629,0.09411695974761933,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:02.694542,0.050838,tcp,147.32.84.164,48869.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,12,4982,1083,3899,415.1666666666667,0.21738257727820154,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:03.622294,0.000364,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,8,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 08:41:05.905887,0.485769,tcp,147.32.86.27,1114.0,->,147.32.87.54,2222.0,_FSPA,,0.0,96,6472,0,6472,67.41666666666667,0.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:41:06.007631,3.651175,udp,120.90.60.143,10081.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,658,538,120,164.5,0.817629179331307,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:41:06.499358,0.205608,tcp,147.32.86.20,1508.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30321,1089,29232,758.025,0.03591570198872069,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:41:07.569499,0.00032,udp,147.32.84.59,55802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:09.165573,0.000151,udp,147.32.84.164,60245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,70,141,105.5,0.33175355450236965,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:10.842784,0.000684,udp,221.36.143.12,58253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,581,75,506,290.5,0.12908777969018934,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:41:13.123973,0.076783,tcp,147.32.84.164,33640.0,->,89.149.217.139,80.0,FSPA_FSA,0.0,0.0,9,1888,1264,624,209.77777777777777,0.6694915254237288,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:13.183990,0.194408,tcp,147.32.84.164,33641.0,->,89.149.217.139,80.0,FSPA_FSPA,0.0,0.0,55,48021,2213,45808,873.1090909090909,0.046084004914516564,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:13.396076,0.000289,udp,147.32.84.164,44153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,77,148,112.5,0.3422222222222222,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:13.397260,0.067992,tcp,147.32.84.164,48874.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,14,8184,1125,7059,584.5714285714286,0.1374633431085044,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:14.185573,0.000238,udp,147.32.84.59,53022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,78,173,125.5,0.3107569721115538,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:19.549440,0.000303,udp,147.32.84.170,58881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:19.550295,0.000303,udp,147.32.84.170,37560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:29.549725,0.000271,udp,147.32.84.170,52080.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:30.854884,0.001812,udp,70.179.138.246,51482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:41:32.607080,0.00029,udp,147.32.84.59,46939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,85,247,166.0,0.2560240963855422,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:33.325022,0.880049,udp,109.46.43.56,4974.0,<->,147.32.85.84,13716.0,CON,0.0,0.0,12,765,365,400,63.75,0.477124183006536,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:41:34.197472,0.000516,udp,147.32.84.170,57225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:35.534783,0.000253,udp,147.32.84.138,51670.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:36.589503,0.209005,tcp,147.32.84.164,33648.0,->,89.149.217.139,80.0,FSPA_FSPA,0.0,0.0,54,47424,2124,45300,878.2222222222222,0.04478744939271255,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:37.704833,0.000392,udp,147.32.84.164,45941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:41:43.886532,60.96608,tcp,147.32.84.165,4487.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:41:48.553633,0.000317,udp,147.32.84.138,45393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:49.548974,0.000392,udp,147.32.84.170,48044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:49.549923,0.000373,udp,147.32.84.170,50544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:51.068532,11.57908,tcp,147.32.85.6,54883.0,->,77.75.77.212,80.0,FSPA_FSPA,0.0,0.0,12,3480,773,2707,290.0,0.2221264367816092,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:41:51.536551,0.000344,udp,147.32.85.6,53752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:51.543114,0.00396,udp,147.32.85.6,55436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,71,142,106.5,0.3333333333333333,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:53.009986,0.000167,udp,147.32.84.138,54710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:41:54.526052,0.02506,udp,147.32.84.229,13363.0,<->,78.141.179.10,34010.0,CON,0.0,0.0,2,595,78,517,297.5,0.13109243697478992,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:41:57.513657,7.688435,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,5,600,284,316,120.0,0.47333333333333333,8,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 08:41:59.340717,0.000409,udp,147.32.84.170,58558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:59.549871,0.000354,udp,147.32.84.170,50794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:41:59.711697,0.091655,tcp,147.32.84.164,48885.0,->,91.215.157.104,80.0,FSPA_FSPA,0.0,0.0,15,8335,1198,7137,555.6666666666666,0.14373125374925014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:01.034619,0.008298,udp,147.32.85.6,56647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,320,120,200,160.0,0.375,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:02.389894,0.000569,udp,222.252.22.110,57479.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:42:05.199009,0.240439,tcp,147.32.84.170,60840.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:05.202822,4.689169,tcp,147.32.84.165,4488.0,->,222.73.45.135,81.0,FSPA_FSPA,0.0,0.0,10,1011,568,443,101.1,0.5618199802176064,8,1,flow=From-Botnet-V49-TCP-CC75-HTTP-Custom-Port-Not-Encrypted-Non-Periodic,Botnet,1 2011-08-17 08:42:07.706815,0.000276,udp,147.32.84.59,44617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:09.550871,0.02033,tcp,147.32.84.170,48243.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:10.925037,3490.253418,udp,147.32.84.8,38701.0,<->,82.208.56.89,123.0,CON,0.0,0.0,44,3960,1980,1980,90.0,0.5,8,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 08:42:11.758200,3062.250732,udp,147.32.84.229,13363.0,<->,196.40.84.156,33480.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:42:13.245427,0.000268,udp,147.32.84.164,35281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,74,145,109.5,0.3378995433789954,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:16.262571,0.00309,udp,147.32.84.184,45621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,72,215,143.5,0.2508710801393728,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:18.862336,3043.096924,udp,188.232.67.124,63213.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:42:19.550859,0.01786,tcp,147.32.84.170,48244.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:19.644610,0.001624,udp,88.248.111.76,33225.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,519,459,60,259.5,0.884393063583815,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:42:20.870973,0.000392,udp,147.32.84.164,40402.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,80,162,121.0,0.3305785123966942,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:20.871640,0.000275,udp,147.32.84.164,43730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,80,264,172.0,0.23255813953488372,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:21.414763,0.000299,udp,147.32.84.164,45429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,77,161,119.0,0.3235294117647059,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:21.430799,0.000219,udp,147.32.84.164,46734.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:21.431626,0.000273,udp,147.32.84.164,46040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:22.319741,0.000349,udp,147.32.84.164,52985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:42:23.093177,0.000308,udp,147.32.84.59,42120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:29.549041,0.000371,udp,147.32.84.170,58064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:31.830861,0.205494,tcp,147.32.86.20,1579.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30625,1089,29536,765.625,0.035559183673469386,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:42:34.533474,36.049332,tcp,147.32.86.164,1054.0,->,147.32.192.230,524.0,FSRPA_SPA,0.0,0.0,21,1926,981,945,91.71428571428571,0.5093457943925234,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:42:36.196339,0.000472,udp,147.32.84.170,40806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:39.549889,0.000366,udp,147.32.84.170,41798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:44.533091,60.952019,tcp,147.32.84.165,4489.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:42:49.549274,0.000416,udp,147.32.84.170,34590.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:42:50.253589,0.000206,udp,147.32.84.138,55915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:52.143673,0.000298,udp,147.32.84.138,54211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:54.567990,0.000217,udp,147.32.84.138,39638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:59.220602,0.019392,udp,147.32.84.184,33192.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:42:59.551450,0.018758,tcp,147.32.84.170,48249.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:01.585620,0.810579,tcp,82.77.149.132,26124.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,17,1340,654,686,78.82352941176471,0.4880597014925373,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:43:13.004545,0.001713,udp,178.140.223.108,36719.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,517,457,60,258.5,0.8839458413926499,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:43:13.950898,0.24309,tcp,147.32.84.170,43582.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:14.186185,0.408599,tcp,147.32.84.170,43583.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,22,4849,1431,3418,220.4090909090909,0.29511239430810476,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:18.657255,0.000228,udp,147.32.84.138,33483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:19.549803,0.000371,udp,147.32.84.170,51995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:21.285413,6.015428,udp,147.32.84.229,13363.0,->,111.253.106.5,13123.0,INT,0.0,,3,234,234,0,78.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:43:21.633800,0.000156,udp,147.32.85.25,37237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:22.210753,0.000286,udp,147.32.86.20,58487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:22.297714,0.001632,udp,95.246.17.51,10059.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,515,455,60,257.5,0.883495145631068,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:43:23.589994,0.000177,udp,147.32.84.138,48078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:27.374627,0.000483,udp,87.113.22.62,63591.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:43:27.380454,6.021041,udp,147.32.84.229,13363.0,->,92.231.52.87,27843.0,INT,0.0,,3,1506,1506,0,502.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:43:29.408267,3.185268,tcp,147.32.85.26,63068.0,->,77.75.72.3,80.0,FSPA_FSPA,0.0,0.0,125,114126,5813,108313,913.008,0.0509349315668647,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:43:29.550889,0.019027,tcp,147.32.84.170,53391.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:38.197681,0.000217,udp,147.32.84.170,37623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:39.549101,0.000357,udp,147.32.84.170,44037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:39.551002,0.018174,tcp,147.32.84.170,56664.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:40.395166,571.900879,udp,86.25.169.139,23200.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1080,150,930,270.0,0.1388888888888889,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:43:41.450594,0.000449,udp,24.210.129.209,25451.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,143,82,61,71.5,0.5734265734265734,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:43:43.041701,0.000278,udp,147.32.84.184,47708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:45.170629,60.967339,tcp,147.32.84.165,4490.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:43:49.335994,0.000195,udp,147.32.84.138,54711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:49.549757,0.000294,udp,147.32.84.170,58521.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:49.550773,0.018279,tcp,147.32.84.170,56665.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:56.040522,0.000289,udp,147.32.84.138,34503.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:43:59.549940,0.000319,udp,147.32.84.170,38290.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:43:59.550973,0.018014,tcp,147.32.84.170,56666.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:01.962574,3570.432373,udp,147.32.84.229,13363.0,<->,141.156.150.237,7236.0,CON,0.0,0.0,128,20960,10615,10345,163.75,0.5064408396946565,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:04.729809,0.000545,udp,151.27.113.132,46318.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,313,64,249,156.5,0.20447284345047922,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:05.669106,0.000552,udp,82.192.15.236,42809.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,545,77,468,272.5,0.14128440366972478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:09.197362,0.000363,udp,147.32.84.170,33725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:09.198251,0.000303,udp,147.32.84.170,36705.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:09.549153,0.000393,udp,147.32.84.170,50609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:09.551140,0.01783,tcp,147.32.84.170,45186.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:12.343033,0.000277,udp,147.32.85.25,37113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:44:15.863584,0.000256,udp,147.32.84.138,48737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:44:19.549306,0.000389,udp,147.32.84.170,55828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:19.550257,0.000298,udp,147.32.84.170,58494.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:29.549193,0.000484,udp,147.32.84.170,53693.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:29.550241,0.000414,udp,147.32.84.170,43376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:40.196350,0.000216,udp,147.32.84.170,57117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:44:45.579017,0.000418,udp,147.32.87.36,58700.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:44:45.586311,0.000319,udp,147.32.87.36,40718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,389,86,303,194.5,0.2210796915167095,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:44:45.818369,60.96228,tcp,147.32.84.165,4491.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:44:45.917686,3591.607422,udp,85.99.32.27,45926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,2207,1907,300,220.7,0.8640688717716357,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:51.106272,0.000345,udp,58.50.224.62,34225.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:55.170181,0.481302,udp,82.136.71.209,42346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,263,143,120,65.75,0.5437262357414449,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:57.721484,0.001676,udp,210.188.26.167,8883.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,516,456,60,258.0,0.8837209302325582,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:44:58.783533,13.200725,tcp,65.49.11.19,80.0,->,147.32.84.82,34368.0,SA_,0.0,,2,120,120,0,60.0,1.0,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:44:59.679617,0.000391,udp,114.174.211.88,20493.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:45:09.551218,0.018177,tcp,147.32.84.170,58463.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:11.198591,0.000245,udp,147.32.84.170,33588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:11.199745,0.265358,tcp,147.32.84.170,38688.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:12.284965,0.000404,icmp,147.32.87.252,,<-,147.32.87.4,2.0,RED,,0.0,2,196,0,196,98.0,0.0,8,1,flow=Background,Background,-1 2011-08-17 08:45:15.717773,2927.799561,udp,46.40.89.196,30461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:45:18.986758,0.000307,udp,147.32.84.164,55195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:18.993764,14.722756,tcp,147.32.84.164,51877.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:18.993830,14.722351,tcp,147.32.84.164,51879.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:18.993834,14.722335,tcp,147.32.84.164,51880.0,->,77.104.226.16,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:18.994388,0.020083,udp,147.32.84.164,60218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,559,74,485,279.5,0.13237924865831843,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.187750,0.000371,udp,147.32.84.164,35835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.188950,244.594376,tcp,147.32.84.164,58398.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,28,5735,3391,2344,204.82142857142858,0.59128160418483,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.189063,524.625671,tcp,147.32.84.164,58402.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,144,76029,16546,59483,527.9791666666666,0.21762748424943112,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.189391,0.000268,udp,147.32.84.164,49022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.189666,0.000257,udp,147.32.84.164,43010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.190047,0.000331,udp,147.32.84.164,47386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.210572,1.348576,tcp,147.32.84.164,54405.0,->,74.125.232.193,80.0,FSRPA_FSPA,0.0,0.0,17,5058,3376,1682,297.52941176470586,0.6674574930802689,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.368885,0.000222,udp,147.32.84.164,33504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.369745,0.009828,udp,147.32.84.164,56887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.370751,0.000424,udp,147.32.84.164,46278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.380669,0.019918,udp,147.32.84.164,56093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.381976,0.000284,udp,147.32.84.164,43375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,74,155,114.5,0.3231441048034934,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.411961,0.0003,udp,147.32.84.164,40166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,79,150,114.5,0.34497816593886466,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.454026,0.111633,udp,147.32.84.164,50770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,76,147,111.5,0.34080717488789236,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.495048,0.020023,udp,147.32.84.164,33212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,590,74,516,295.0,0.12542372881355932,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:19.549888,0.000296,udp,147.32.84.170,44434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:19.566027,0.000543,udp,147.32.84.164,39793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:21.341102,0.000508,udp,202.39.75.2,59263.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,75,477,276.0,0.1358695652173913,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:45:22.784174,0.000394,udp,147.32.84.164,52407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,90,176,133.0,0.3383458646616541,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:23.003126,0.000216,udp,147.32.84.164,52233.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,77,135,106.0,0.3632075471698113,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:23.196200,0.002012,udp,147.32.84.164,44423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,76,166,121.0,0.3140495867768595,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:24.862538,0.004786,tcp,147.32.84.184,37494.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,17,9703,1067,8636,570.7647058823529,0.10996598990003092,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:45:24.962382,0.003342,tcp,147.32.84.184,35171.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1769,840,929,196.55555555555554,0.47484454494064443,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:45:29.551189,0.017826,tcp,147.32.84.170,53407.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:31.480929,0.108566,udp,147.32.84.164,46946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:31.536865,0.000184,udp,147.32.84.164,56222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,72,170,121.0,0.2975206611570248,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:31.720540,0.000366,udp,147.32.84.164,37511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,361,74,287,180.5,0.20498614958448755,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:45:33.025957,0.917096,tcp,147.32.86.20,1725.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,102,100311,1826,98485,983.4411764705883,0.0182033874649839,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:45:39.549371,0.020071,udp,147.32.84.170,58857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:42.199478,0.224776,tcp,147.32.84.170,38692.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:46.466005,60.951817,tcp,147.32.84.165,4492.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:45:49.549305,0.00053,udp,147.32.84.170,58216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:49.551613,0.018185,tcp,147.32.84.170,56681.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:45:50.227560,3.038717,tcp,212.183.140.41,48703.0,->,147.32.85.100,3126.0,S_,0.0,,2,148,148,0,74.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:45:53.049219,0.061141,udp,193.253.240.76,11791.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,445,133,312,111.25,0.298876404494382,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:46:04.877966,0.000212,udp,147.32.84.138,60909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:04.888482,0.000246,udp,147.32.84.138,43809.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:06.329411,0.000288,udp,147.32.85.34,52969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:07.747814,3099.390869,udp,70.94.89.30,48253.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1494,1038,456,124.5,0.6947791164658634,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:46:09.549382,0.000387,udp,147.32.84.170,51754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:09.550262,0.000409,udp,147.32.84.170,40452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:09.551379,0.018919,tcp,147.32.84.170,45281.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:10.157842,0.000257,udp,147.32.84.138,49913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:11.673651,0.000227,udp,147.32.85.42,57557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,85,135,110.0,0.38636363636363635,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:13.198579,0.000487,udp,147.32.84.170,54043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:13.199947,0.25182,tcp,147.32.84.170,38696.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:21.152725,2738.587158,udp,91.217.197.10,45336.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,272,152,120,68.0,0.5588235294117647,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:46:30.715225,0.000624,udp,89.164.163.174,50655.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,536,73,463,268.0,0.13619402985074627,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:46:39.549419,0.000466,udp,147.32.84.170,40121.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:39.551518,0.018474,tcp,147.32.84.170,45205.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:39.946735,0.000258,udp,147.32.84.138,40436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:47.103556,60.951744,tcp,147.32.84.165,4493.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:46:49.553830,0.018245,tcp,147.32.84.170,45287.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:46:49.816033,0.000235,udp,147.32.84.138,57522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:46:59.549399,0.000395,udp,147.32.84.170,36098.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:02.974608,0.000412,udp,147.32.84.19,41091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:47:03.157743,0.001588,udp,213.10.96.176,53140.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,526,466,60,263.0,0.8859315589353612,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:08.411880,0.000434,udp,147.32.84.138,40340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:47:09.687066,2853.878906,udp,203.177.237.81,21537.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,293,173,120,73.25,0.590443686006826,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:12.739792,66.996819,udp,77.37.180.120,11276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,478,354,124,119.5,0.7405857740585774,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:15.197350,0.000259,udp,147.32.84.170,48459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:15.198561,0.24338,tcp,147.32.84.170,38704.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:17.088746,250.042297,tcp,147.32.84.170,37639.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:17.090619,250.040649,tcp,147.32.84.170,37640.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:17.096405,250.03508,tcp,147.32.84.170,37642.0,->,209.85.148.106,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:19.551325,0.017902,tcp,147.32.84.170,37394.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:28.718872,0.000258,udp,147.32.84.138,49072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:47:34.017235,0.000233,udp,147.32.84.138,45039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:47:35.719127,0.206225,tcp,147.32.86.20,1825.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,40,30217,1089,29128,755.425,0.036039315617036764,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:47:36.145455,0.00337,udp,67.167.123.100,19904.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2922,60,2862,730.5,0.02053388090349076,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:36.404837,0.000194,udp,147.32.84.138,37272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:47:46.197915,0.259414,tcp,147.32.84.170,38714.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:47.740924,60.966908,tcp,147.32.84.165,4494.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:47:49.031508,0.000628,udp,60.209.251.232,14109.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,73,487,280.0,0.13035714285714287,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:49.308502,0.000487,udp,94.178.52.43,10924.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:51.365303,2413.425293,udp,206.116.51.15,61346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:51.692398,3194.141113,udp,147.32.84.229,13363.0,<->,95.111.106.7,41158.0,CON,0.0,0.0,14,1925,561,1364,137.5,0.2914285714285714,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:47:51.773514,0.0,igmp,147.32.87.5,,->,224.0.1.22,,INT,0.0,,1,60,60,0,60.0,1.0,8,,flow=Background,Background,-1 2011-08-17 08:47:54.714626,27.046032,tcp,18.111.115.40,59191.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,23,12246,1890,10356,532.4347826086956,0.1543361097501225,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:47:59.549545,0.000428,udp,147.32.84.170,48013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:47:59.651294,0.000328,udp,147.32.85.69,41178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:00.523507,3026.018799,udp,109.95.38.12,47853.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:05.414860,126.555534,udp,147.32.84.229,13363.0,<->,111.249.162.135,7887.0,CON,0.0,0.0,6,3052,2932,120,508.6666666666667,0.9606815203145478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:05.746403,0.000418,udp,147.32.85.34,56411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:05.748526,0.000294,udp,147.32.85.34,50134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:05.766447,0.000238,udp,147.32.85.34,57201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:07.308422,0.000177,udp,147.32.87.36,50640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,8,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 08:48:11.739978,3180.094238,udp,212.233.154.14,3589.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:13.289379,1.3e-05,udp,147.32.84.138,54130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:13.608178,0.300514,tcp,147.32.84.170,39070.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:13.805084,0.246113,tcp,147.32.84.170,54221.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:15.368379,0.000231,udp,147.32.84.59,35296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:19.551145,0.000403,udp,147.32.84.170,50499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:30.780020,0.000716,udp,89.204.138.162,29498.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,943,76,867,471.5,0.08059384941675504,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:32.314324,0.003495,udp,147.32.85.2,62804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,86,162,124.0,0.3467741935483871,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:32.571641,3.34635,tcp,147.32.86.126,1187.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,8679,842,7837,510.52941176470586,0.09701578522871299,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:48:33.698378,3092.927002,udp,89.117.247.88,2330.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:42.291428,0.000167,udp,147.32.84.130,35388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,107,157,132.0,0.4053030303030303,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:43.545005,2.51298,tcp,66.249.66.250,64279.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,10,1550,718,832,155.0,0.4632258064516129,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:48:48.196547,0.000398,udp,147.32.84.170,32780.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:48.387951,60.967697,tcp,147.32.84.165,4495.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:48:49.287873,7.996367,udp,147.32.87.48,4844.0,->,147.32.86.244,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,8,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:48:55.558407,6.7e-05,udp,147.32.84.138,41205.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:55.601771,0.000249,udp,147.32.84.170,39811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:55.650254,0.00035,udp,147.32.84.170,51518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:48:57.374178,3055.118652,udp,147.32.84.229,13363.0,<->,78.251.136.231,45743.0,CON,0.0,0.0,6,414,234,180,69.0,0.5652173913043478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:48:57.937598,0.000203,udp,147.32.84.138,60618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:48:59.163390,0.000621,udp,68.167.121.235,60469.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,77,481,279.0,0.13799283154121864,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:49:01.661889,0.000596,udp,81.81.96.243,19557.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:49:02.665569,0.003512,udp,41.104.31.225,29876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:49:05.590621,0.000213,udp,147.32.84.138,54026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:05.989178,0.000495,udp,151.65.50.61,6455.0,<->,147.32.86.58,48784.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:49:06.329209,0.01954,udp,147.32.85.6,50645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,405,74,331,202.5,0.18271604938271604,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:09.549662,0.000285,udp,147.32.84.170,52447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:09.550496,0.000286,udp,147.32.84.170,53881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:09.551516,0.01798,tcp,147.32.84.170,45792.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:14.847134,0.206078,tcp,147.32.86.20,1906.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30201,1029,29172,774.3846153846154,0.034071719479487436,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:49:15.354623,0.000334,udp,147.32.84.164,36324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.355302,0.000413,udp,147.32.84.164,60945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.449616,0.000375,udp,147.32.84.164,42203.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.473209,0.000289,udp,147.32.84.164,47346.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,72,125,98.5,0.36548223350253806,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.474270,0.000258,udp,147.32.84.164,33073.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,81,137,109.0,0.37155963302752293,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.546095,0.000191,udp,147.32.84.164,35589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,79,155,117.0,0.33760683760683763,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:15.546527,0.000295,udp,147.32.84.164,54327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,79,155,117.0,0.33760683760683763,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:17.762027,0.000163,udp,147.32.84.164,58113.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.627002,245.183701,tcp,147.32.84.164,37181.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,63,34003,5220,28783,539.7301587301587,0.15351586624709584,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.627252,0.02061,udp,147.32.84.164,37301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,81,166,123.5,0.32793522267206476,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.640348,0.01982,udp,147.32.84.164,51390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,81,166,123.5,0.32793522267206476,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.661407,0.00026,udp,147.32.84.164,33876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.662827,0.247729,udp,147.32.84.164,52758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.670109,0.009955,udp,147.32.84.164,53097.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:18.680542,0.108933,udp,147.32.84.164,58805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:19.198095,0.238431,tcp,147.32.84.170,35257.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:19.662110,0.000268,udp,147.32.84.164,48323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,76,144,110.0,0.34545454545454546,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:19.663138,0.043461,udp,147.32.84.164,50214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,73,220,146.5,0.24914675767918087,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:19.707093,0.151349,tcp,147.32.84.164,46847.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1406,703,703,140.6,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:19.917396,0.421219,tcp,147.32.84.164,58933.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,11,3658,779,2879,332.54545454545456,0.21295790049207217,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.121649,0.000507,udp,147.32.84.164,59547.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,589,81,508,294.5,0.13752122241086587,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.124379,0.000382,udp,147.32.84.164,59580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,589,81,508,294.5,0.13752122241086587,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.125182,243.685425,tcp,147.32.84.164,57844.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,43,17308,4647,12661,402.51162790697674,0.26848856020337414,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.127881,243.6828,tcp,147.32.84.164,37192.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,22,3807,2315,1492,173.04545454545453,0.6080903598634095,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.167614,0.009974,udp,147.32.84.164,44485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.179417,0.111377,udp,147.32.84.164,42808.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.187456,243.623016,tcp,147.32.84.164,48597.0,->,74.125.232.197,80.0,FSPA_FSPA,0.0,0.0,41,17697,4594,13103,431.6341463414634,0.25959202124653896,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.209832,0.000386,udp,147.32.84.164,33712.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.303831,0.000265,udp,147.32.84.164,41946.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,80,493,286.5,0.13961605584642234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.481848,0.000185,udp,147.32.84.164,54279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,74,122,98.0,0.37755102040816324,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.604502,0.00031,udp,147.32.84.164,55845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.743482,0.000206,udp,147.32.84.164,50190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,81,146,113.5,0.3568281938325991,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.885732,0.000237,udp,147.32.84.164,41335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.893375,242.917236,tcp,147.32.84.164,44082.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,24,5514,2444,3070,229.75,0.4432354007979688,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:20.902002,242.908691,tcp,147.32.84.164,45030.0,->,74.125.232.199,80.0,FSPA_FSPA,0.0,0.0,36,14256,2840,11416,396.0,0.19921436588103256,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:21.003551,242.806915,tcp,147.32.84.164,39460.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,30,8953,2642,6311,298.43333333333334,0.2950966156595555,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066026,0.000256,udp,147.32.84.164,53588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,83,157,120.0,0.3458333333333333,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066156,0.000256,udp,147.32.84.164,50891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,84,170,127.0,0.33070866141732286,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066273,244.337952,tcp,147.32.84.164,37650.0,->,74.125.232.223,443.0,SRPA_FSPA,0.0,0.0,31,4542,1539,3003,146.51612903225808,0.33883751651254956,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066332,0.000408,udp,147.32.84.164,58215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066416,0.000764,udp,147.32.84.164,34374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,87,275,181.0,0.24033149171270718,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066607,0.010292,udp,147.32.84.164,53870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066620,0.000827,udp,147.32.84.164,59998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,84,272,178.0,0.23595505617977527,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.066736,244.337952,tcp,147.32.84.164,52664.0,->,209.85.148.105,443.0,SRPA_FSPA,0.0,0.0,31,4560,1538,3022,147.09677419354838,0.33728070175438596,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.067200,244.336166,tcp,147.32.84.164,49762.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4755,1549,3206,153.38709677419354,0.32576235541535226,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.067255,244.335876,tcp,147.32.84.164,49763.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4755,1549,3206,153.38709677419354,0.32576235541535226,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.069391,0.000432,udp,147.32.84.164,46474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,448,130,318,224.0,0.29017857142857145,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.077852,0.010039,udp,147.32.84.164,44873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.116137,244.286591,tcp,147.32.84.164,49768.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4788,1566,3222,154.4516129032258,0.32706766917293234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.116141,4.25168,tcp,147.32.84.164,49769.0,->,209.85.148.132,443.0,SRPA_SPA,0.0,0.0,15,3634,1038,2596,242.26666666666668,0.2856356631810677,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.116147,244.286575,tcp,147.32.84.164,49770.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4788,1566,3222,154.4516129032258,0.32706766917293234,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:26.116245,244.287628,tcp,147.32.84.164,49774.0,->,209.85.148.132,443.0,SRPA_FSPA,0.0,0.0,31,4757,1551,3206,153.4516129032258,0.3260458272020181,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:27.352006,0.000232,udp,147.32.84.138,38877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:29.550657,0.000217,udp,147.32.84.170,38258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:30.439849,0.000409,udp,147.32.84.59,52532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:39.551665,0.018294,tcp,147.32.84.170,51716.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:49:44.097917,0.000375,udp,147.32.86.20,55416.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:44.325038,0.517519,tcp,78.80.6.250,24352.0,->,147.32.87.27,443.0,FSPA_FSPA,0.0,0.0,101,92280,2999,89281,913.6633663366337,0.03249891634156914,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:49:45.286414,0.000237,udp,147.32.84.138,48795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:46.150613,12.052733,tcp,147.32.86.155,52635.0,->,147.32.192.127,443.0,FSPA_FSPA,0.0,0.0,55,14284,3928,10356,259.7090909090909,0.27499299915989917,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:49:49.035887,60.966831,tcp,147.32.84.165,4496.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:49:49.384581,0.000522,udp,46.146.182.2,26194.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:49:50.869152,0.119311,udp,147.32.84.59,23176.0,<->,208.88.187.36,33033.0,CON,0.0,0.0,4,719,596,123,179.75,0.8289290681502086,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:49:52.715429,1423.401978,udp,147.32.84.59,23176.0,<->,218.220.168.247,19648.0,CON,0.0,0.0,4,1075,149,926,268.75,0.1386046511627907,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:49:54.890347,0.000288,udp,147.32.84.138,54697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:56.609558,0.000233,udp,147.32.84.138,46197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:57.706247,16.0795,tcp,147.32.84.164,56334.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.706262,16.079493,tcp,147.32.84.164,56335.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.706266,0.000158,udp,147.32.84.164,34947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,259,92,167,129.5,0.3552123552123552,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.706278,16.080505,tcp,147.32.84.164,41474.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.706362,16.08057,tcp,147.32.84.164,41476.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.757677,0.000388,udp,147.32.86.135,51606.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,68,126,97.0,0.35051546391752575,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:49:57.931656,0.009929,udp,147.32.84.164,58353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,80,186,133.0,0.3007518796992481,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.932430,0.000368,udp,147.32.84.164,45633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,74,497,285.5,0.1295971978984238,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.932443,0.00051,udp,147.32.84.164,33019.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.934892,0.000315,udp,147.32.84.164,52905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:57.935459,0.00034,udp,147.32.84.164,37677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,75,499,287.0,0.13066202090592335,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:58.692002,0.369509,udp,147.32.84.164,43069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,158,72,86,79.0,0.45569620253164556,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:58.789251,0.140075,udp,147.32.84.164,44814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,82,165,123.5,0.3319838056680162,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:49:58.906429,0.000258,udp,147.32.84.164,59881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,77,128,102.5,0.375609756097561,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:50:01.165908,0.374682,tcp,147.32.84.164,58997.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,11,3226,846,2380,293.27272727272725,0.26224426534407935,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:50:01.236015,0.127838,tcp,147.32.84.164,46914.0,->,83.145.197.2,80.0,FSPA_FSPA,0.0,0.0,10,1410,704,706,141.0,0.49929078014184397,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:50:01.419228,0.371942,tcp,147.32.84.164,58999.0,->,75.101.145.196,80.0,FSPA_FSPA,0.0,0.0,11,3226,846,2380,293.27272727272725,0.26224426534407935,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:50:06.144111,0.000293,udp,147.32.85.34,57116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:09.552515,0.018447,tcp,147.32.84.170,51720.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:10.109752,0.000336,udp,147.32.86.135,50179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,438,76,362,219.0,0.1735159817351598,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:10.914626,0.488907,tcp,147.32.86.20,1951.0,->,80.239.207.156,80.0,FSPA_FSPA,0.0,0.0,34,27095,858,26237,796.9117647058823,0.03166635910684628,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:50:29.549690,0.000389,udp,147.32.84.170,36559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:29.905530,0.000515,udp,147.32.84.166,51754.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:31.708987,0.000476,udp,216.130.237.18,46461.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:50:37.726123,0.206571,tcp,147.32.86.20,1971.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,29022,1029,27993,763.7368421052631,0.03545586107091172,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:50:39.561302,0.018075,tcp,147.32.84.170,51853.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:49.102412,0.206573,tcp,147.32.86.20,1979.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,28289,1029,27260,764.5675675675676,0.0363745625508148,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:50:49.549704,0.000505,udp,147.32.84.170,48033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:49.550731,0.000352,udp,147.32.84.170,57226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:49.683011,60.941959,tcp,147.32.84.165,4497.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:50:50.523956,0.000228,udp,147.32.84.59,45776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:52.196789,0.000235,udp,147.32.84.170,52618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:50:53.699640,16.903694,icmp,147.32.85.75,2563.0,->,60.248.150.212,,URHPRO,0.0,,2,172,172,0,86.0,1.0,8,,flow=Background,Background,-1 2011-08-17 08:50:54.467107,0.000161,udp,147.32.84.138,58966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:54.496523,0.000309,udp,147.32.84.138,44691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:55.118652,0.000489,udp,46.190.56.37,61602.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:50:56.483503,0.000397,udp,147.32.86.155,57396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:50:59.550660,0.000276,udp,147.32.84.170,45613.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:01.903629,0.002424,udp,147.32.85.25,33969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:05.103638,0.000209,udp,147.32.84.79,46432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,85,244,164.5,0.25835866261398177,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:09.549807,0.000245,udp,147.32.84.170,58055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:09.617633,0.000278,udp,147.32.84.138,55703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:11.917828,0.397806,udp,91.113.185.86,53013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,268,180,88,134.0,0.6716417910447762,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:51:21.603195,0.135028,tcp,147.32.86.20,2005.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,33,25654,853,24801,777.3939393939394,0.03325017541124191,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:51:29.498595,0.000336,udp,147.32.84.68,62827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,80,158,119.0,0.33613445378151263,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:32.360023,0.000197,udp,147.32.84.138,44157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:39.549765,0.000293,udp,147.32.84.170,43260.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:49.551677,0.018518,tcp,147.32.84.170,51862.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:50.310223,60.952011,tcp,147.32.84.165,4498.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:51:55.116925,8e-05,udp,147.32.84.138,43726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:55.495748,0.238361,tcp,147.32.86.113,1147.0,->,77.75.77.9,80.0,SRPA_FSPA,0.0,0.0,9,1928,1221,707,214.22222222222223,0.633298755186722,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:51:57.556925,0.000197,udp,147.32.84.138,42842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:51:59.342676,0.000368,udp,147.32.84.170,46509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:59.343696,240.409622,tcp,147.32.84.170,54256.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,35,7686,5406,2280,219.6,0.7033567525370804,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:59.549797,0.00035,udp,147.32.84.170,51798.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:51:59.551699,0.017925,tcp,147.32.84.170,49607.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:03.821030,0.000186,udp,147.32.84.138,40882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:05.547317,0.000378,udp,147.32.85.34,52038.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:05.594326,0.000291,udp,147.32.85.34,53999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:09.549801,0.000399,udp,147.32.84.170,45210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:09.550700,0.000351,udp,147.32.84.170,50334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:12.507421,0.000245,udp,147.32.86.113,58658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:13.294618,0.039787,udp,147.32.84.189,44531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:14.122028,0.092115,tcp,147.32.86.89,1565.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,12,2966,951,2015,247.16666666666666,0.320633850303439,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:52:23.215599,2903.217773,udp,76.122.138.83,62656.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1343,280,1063,223.83333333333334,0.20848845867460908,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:52:25.198568,0.221886,tcp,147.32.84.170,35283.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:29.549842,0.000326,udp,147.32.84.170,40235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:30.278022,1.412175,tcp,147.32.86.89,1665.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,12,3485,1080,2405,290.4166666666667,0.3098995695839311,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:52:32.020514,3047.808105,udp,147.32.84.229,13363.0,<->,80.167.162.184,43647.0,CON,0.0,0.0,8,526,262,264,65.75,0.49809885931558934,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:52:35.103540,0.000468,udp,113.210.231.186,53585.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:52:39.550853,0.00051,udp,147.32.84.170,56351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:41.666528,0.000347,udp,147.32.84.138,54149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:42.304848,0.021306,tcp,147.32.84.21,41854.0,->,62.168.44.116,80.0,FSPA_FSPA,0.0,0.0,10,1818,938,880,181.8,0.5159515951595159,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:52:43.953327,0.000527,udp,94.127.219.148,11529.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:52:49.551376,0.000341,udp,147.32.84.170,57326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:50.947873,60.952873,tcp,147.32.84.165,4499.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:52:53.905816,0.00042,udp,147.32.86.135,63044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:56.187754,0.000264,udp,147.32.84.170,47137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:52:57.480395,0.000287,udp,147.32.86.20,63134.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:52:59.551941,0.017783,tcp,147.32.84.170,51873.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:00.928790,0.021752,tcp,147.32.85.6,55128.0,->,80.250.10.39,80.0,FSPA_FSPA,0.0,0.0,22,13794,1434,12360,627.0,0.10395824271422358,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:53:00.937419,0.062757,tcp,147.32.85.6,55133.0,->,80.250.10.39,80.0,FSPA_FSPA,0.0,0.0,23,15061,1494,13567,654.8260869565217,0.09919660049133523,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:53:02.915283,0.000274,udp,147.32.84.138,39274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:04.310713,0.000223,udp,147.32.84.138,37216.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:10.202853,0.000418,udp,147.32.84.59,52348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:10.777740,0.000349,udp,147.32.85.25,43767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:10.950583,0.000446,udp,91.185.65.14,60176.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:13.231271,0.238868,tcp,147.32.84.170,57379.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:13.981553,0.248752,tcp,147.32.84.170,48022.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:19.102629,0.000293,udp,147.32.84.138,36596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:19.550556,0.000289,udp,147.32.84.170,58330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:20.367037,549.031006,tcp,84.2.19.197,43297.0,->,147.32.84.229,13363.0,SRPA_SPA,0.0,0.0,113,14843,8706,6137,131.35398230088495,0.5865391093444722,8,0,flow=Background-TCP-Established,Background,-1 2011-08-17 08:53:20.924210,0.000405,udp,147.32.84.59,60173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:22.203040,0.000633,udp,202.64.221.42,2512.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,550,72,478,275.0,0.13090909090909092,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:25.307604,0.000177,udp,147.32.84.138,38883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:26.197502,0.000336,udp,147.32.84.170,48567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:26.498777,0.000354,udp,147.32.84.59,62984.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,93,143,118.0,0.3940677966101695,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:29.551886,0.018124,tcp,147.32.84.170,44333.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:32.931636,0.000305,udp,147.32.84.138,53445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:39.212759,0.000646,udp,180.3.223.94,15821.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,763,76,687,381.5,0.09960681520314547,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:39.551870,0.018707,tcp,147.32.84.170,51631.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:39.715816,0.00025,udp,147.32.84.138,48977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:41.054986,0.214628,udp,147.32.84.59,22975.0,<->,96.39.163.128,64219.0,CON,0.0,0.0,2,308,64,244,154.0,0.2077922077922078,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:53:42.400316,164.25264,udp,95.79.92.212,22118.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1641,1404,237,273.5,0.8555758683729433,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:44.846296,0.352006,udp,147.32.84.59,22975.0,<->,122.117.211.211,31251.0,CON,0.0,0.0,2,553,78,475,276.5,0.1410488245931284,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:53:47.880835,0.000254,udp,63.203.3.206,60308.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:49.993350,0.000426,udp,82.137.93.189,60259.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:51.586382,60.951691,tcp,147.32.84.165,4500.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:53:54.157396,0.000563,udp,109.69.42.204,26165.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,312,64,248,156.0,0.20512820512820512,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:53:56.006789,0.000359,udp,147.32.85.26,55199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,77,147,112.0,0.34375,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:53:57.196717,0.000507,udp,147.32.84.170,56010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:57.197681,0.000283,udp,147.32.84.170,57528.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:53:59.551724,0.018453,tcp,147.32.84.170,44337.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:02.780552,15.547061,tcp,90.182.143.118,47081.0,->,147.32.84.36,443.0,FSRPA_FSPA,0.0,0.0,27,12217,2233,9984,452.48148148148147,0.1827780960956045,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:54:03.371006,2995.230225,udp,147.32.84.229,13363.0,<->,80.56.234.252,40233.0,CON,0.0,0.0,26,4006,2410,1596,154.07692307692307,0.6015976035946081,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:05.975650,0.000304,udp,147.32.85.34,62644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,328,85,243,164.0,0.25914634146341464,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:05.992444,0.00038,udp,147.32.85.34,52154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:11.223124,0.000193,udp,147.32.84.134,53517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,65,140,102.5,0.3170731707317073,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:12.776304,92.500656,tcp,147.32.86.89,1999.0,->,92.123.64.162,80.0,SRPA_SPA,0.0,0.0,21,12393,1380,11013,590.1428571428571,0.11135318324860809,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:54:15.748612,0.156397,udp,92.251.101.74,19011.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,245,183,62,122.5,0.746938775510204,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:18.416358,0.000322,udp,147.32.84.138,40117.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:18.425778,0.00017,udp,147.32.84.138,35530.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:19.551391,0.000332,udp,147.32.84.170,59358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:24.473138,2168.405273,udp,85.105.232.66,44198.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:26.792123,0.252109,udp,147.32.84.164,41026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:54:27.291910,0.247893,udp,147.32.84.164,58967.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:54:28.196213,0.000253,udp,147.32.84.170,53279.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:29.550897,0.000392,udp,147.32.84.170,33639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:30.523098,0.000195,udp,147.32.84.138,59207.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:34.547139,0.000266,udp,147.32.84.164,48488.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:54:34.547747,0.000386,udp,147.32.84.164,33646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:54:34.548499,240.054947,tcp,147.32.84.164,52515.0,->,209.85.148.147,443.0,FSRPA_FSPA,0.0,0.0,34,4770,3119,1651,140.2941176470588,0.6538784067085954,8,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 08:54:39.551167,0.000268,udp,147.32.84.170,35133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:40.128929,2500.366699,udp,75.66.42.67,49294.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,270,150,120,67.5,0.5555555555555556,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:40.864672,0.000364,udp,147.32.84.134,35511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,79,285,182.0,0.21703296703296704,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:41.056142,0.000327,udp,147.32.84.134,52816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,77,150,113.5,0.3392070484581498,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:46.392671,0.001551,udp,211.246.70.186,11250.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,528,468,60,264.0,0.8863636363636364,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:47.504035,0.00018,udp,147.32.84.134,59202.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:48.585323,0.000675,udp,89.28.68.46,52676.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,553,79,474,276.5,0.14285714285714285,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:49.181602,0.000227,udp,147.32.84.138,36713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:51.008396,0.000559,udp,223.207.209.168,26396.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,73,479,276.0,0.1322463768115942,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:54:51.023766,0.002488,udp,147.32.84.59,37539.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,87,205,146.0,0.2979452054794521,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:54:52.099542,1767.398071,tcp,147.32.84.134,52394.0,->,147.32.192.34,993.0,FSPA_FSRPA,0.0,0.0,62,12092,3684,8408,195.03225806451613,0.30466424082037713,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:52.223204,60.967041,tcp,147.32.84.165,4501.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:54:52.432365,2.526149,tcp,147.32.84.134,46760.0,->,64.12.249.116,443.0,FSPA_FSPA,0.0,0.0,21,7204,1300,5904,343.04761904761904,0.1804553026096613,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.139961,0.020094,udp,147.32.84.134,56028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.141377,0.000312,udp,147.32.84.134,37140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.270300,240.917465,tcp,147.32.84.134,33256.0,->,209.85.148.99,443.0,FSPA_FSPA,0.0,0.0,36,5475,1961,3514,152.08333333333334,0.35817351598173514,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.372655,3124.710693,tcp,147.32.84.134,54725.0,->,69.171.227.26,5222.0,SPA_SPA,0.0,0.0,872,159077,55922,103155,182.42775229357798,0.35154044896496667,8,0,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.465459,0.017446,udp,147.32.84.134,33175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.474560,0.000289,udp,147.32.84.134,42845.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,70,145,107.5,0.32558139534883723,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.841619,0.118272,udp,147.32.84.134,33057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,182,71,111,91.0,0.3901098901098901,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.881645,0.000338,udp,147.32.84.134,55001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:54.882489,0.400086,tcp,147.32.84.134,47131.0,->,199.7.51.72,80.0,FSPA_FSPA,0.0,0.0,12,2649,833,1816,220.75,0.31445828614571536,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:55.078868,1.177965,tcp,147.32.84.134,60368.0,->,64.12.239.113,443.0,SRPA_FSPA,0.0,0.0,23,7580,1695,5885,329.5652173913044,0.22361477572559366,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:55.105446,0.016868,udp,147.32.84.134,45815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,378,75,303,189.0,0.1984126984126984,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:55.122806,10.236507,tcp,147.32.84.134,34106.0,->,199.7.48.72,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:55.405742,0.000246,udp,147.32.84.134,36572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:55.407000,0.000431,udp,147.32.84.134,43026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,318,77,241,159.0,0.24213836477987422,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:56.672556,0.000287,udp,147.32.84.134,43718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:59.187817,0.000281,udp,147.32.84.170,45132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:59.189659,0.244581,tcp,147.32.84.170,56752.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:54:59.315013,0.000301,udp,147.32.84.134,54061.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,77,145,111.0,0.34684684684684686,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:54:59.549840,0.000543,udp,147.32.84.170,35930.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:00.984654,1176.484009,udp,95.54.28.241,36376.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,34,2227,1207,1020,65.5,0.5419847328244275,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:04.466667,0.000581,udp,58.50.224.62,34945.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:05.240850,2287.86084,udp,147.32.84.229,13363.0,<->,151.32.42.230,31752.0,CON,0.0,0.0,10,1430,923,507,143.0,0.6454545454545455,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:05.437944,0.000261,udp,147.32.84.36,38395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:55:05.925937,0.142377,udp,147.32.84.229,13363.0,<->,24.93.124.143,44688.0,CON,0.0,0.0,2,517,457,60,258.5,0.8839458413926499,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:08.607109,6.283025,udp,147.32.84.59,17426.0,->,94.181.57.244,4820.0,INT,0.0,,3,243,243,0,81.0,1.0,8,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 08:55:09.406928,0.000458,udp,80.90.145.129,18391.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:09.551767,0.018055,tcp,147.32.84.170,59051.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:09.745491,0.0004,udp,147.32.84.134,50982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:09.784982,0.000497,udp,147.32.84.134,48545.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:09.810005,0.017027,udp,147.32.84.134,45589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:10.060763,0.280407,udp,147.32.84.134,53270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,181,75,106,90.5,0.4143646408839779,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:11.702956,26.059488,tcp,188.67.210.16,53004.0,->,147.32.84.229,443.0,FSPA_SRA,0.0,0.0,20,1524,846,678,76.2,0.5551181102362205,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:55:13.710027,0.000326,udp,147.32.84.134,47215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,355,87,268,177.5,0.24507042253521127,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:17.170748,0.248835,udp,147.32.84.134,42549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:17.667888,0.250884,udp,147.32.84.134,44792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:19.122999,2994.796387,udp,197.252.5.242,7242.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,32,2130,1170,960,66.5625,0.5492957746478874,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:19.553715,0.000389,udp,147.32.84.170,37075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:19.602869,629.445496,udp,147.232.5.167,41829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,476,352,124,119.0,0.7394957983193278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:36.083842,2474.826904,udp,89.215.123.182,34726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,268,148,120,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:38.477610,0.978534,udp,78.128.187.151,4749.0,->,239.255.255.250,1900.0,INT,0.0,,2,280,280,0,140.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:55:39.552410,0.009819,udp,147.32.84.170,42897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:39.562830,0.000312,udp,147.32.84.170,46445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:41.708417,0.001552,udp,62.198.73.139,58695.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:48.112754,0.207021,tcp,147.32.86.20,2237.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,37,28170,1029,27141,761.3513513513514,0.03652822151224707,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:55:48.895369,0.00044,udp,147.32.84.134,46214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:48.897381,240.051987,tcp,147.32.84.134,36349.0,->,74.125.232.200,80.0,FSPA_FSPA,0.0,0.0,24,5499,2164,3335,229.125,0.39352609565375524,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:48.937764,250.028458,tcp,147.32.84.134,41247.0,->,209.85.149.101,80.0,FSPA_FSPA,0.0,0.0,276,237611,19752,217859,860.9094202898551,0.0831274646375799,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:55:49.322873,3065.1875,udp,98.213.46.40,11174.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,280,160,120,70.0,0.5714285714285714,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:49.551112,0.00037,udp,147.32.84.170,33191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:55:52.707403,0.000405,icmp,147.32.86.96,,<-,147.32.87.51,45065.0,RED,,0.0,2,196,0,196,98.0,0.0,8,0,flow=Background,Background,-1 2011-08-17 08:55:52.870340,60.952198,tcp,147.32.84.165,4502.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:55:53.184450,5.943633,tcp,147.32.86.113,1471.0,->,217.67.25.237,80.0,SRPA_FSPA,0.0,0.0,80,59922,6495,53427,749.025,0.10839090818063482,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:55:54.955141,0.155218,udp,147.32.84.229,13363.0,<->,67.197.76.201,15485.0,CON,0.0,0.0,4,2950,60,2890,737.5,0.020338983050847456,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:55:57.041714,0.000267,udp,147.32.84.138,54556.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:55:59.249856,5.975619,tcp,66.249.72.134,48608.0,->,147.32.87.38,443.0,FSPA_FSPA,0.0,0.0,31,17984,1867,16117,580.1290322580645,0.10381450177935943,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:55:59.828739,2.000378,tcp,147.32.85.26,63401.0,->,95.168.196.41,80.0,FSPA_FSPA,0.0,0.0,11,3446,808,2638,313.27272727272725,0.23447475333720255,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:55:59.964584,2086.554688,udp,91.217.67.18,32578.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2702,1630,1072,135.1,0.6032568467801629,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:00.540025,0.00023,udp,147.32.85.25,57821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:06.408406,0.000387,udp,147.32.85.34,52472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:09.551021,0.000265,udp,147.32.84.170,50375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:09.552002,0.020374,tcp,147.32.84.170,59059.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:09.900329,60.931599,tcp,147.32.84.21,33206.0,->,74.125.232.201,80.0,FSA_FSA,0.0,0.0,8,544,338,206,68.0,0.6213235294117647,8,1,flow=Background-google-analytics10,Background,-1 2011-08-17 08:56:15.423083,0.00045,udp,67.224.142.31,51112.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:17.097913,0.00025,udp,147.32.84.138,46384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:17.112476,0.000366,udp,147.32.84.138,51516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:17.962039,1347.561279,udp,67.163.27.69,64906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,491,367,124,122.75,0.7474541751527495,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:18.213471,0.000445,udp,171.0.201.86,17317.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,139,79,60,69.5,0.5683453237410072,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:18.451805,0.113972,udp,147.32.84.59,15675.0,<->,82.81.230.114,14408.0,CON,0.0,0.0,2,573,77,496,286.5,0.1343804537521815,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:56:18.528938,18.352858,tcp,147.32.84.59,49210.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:56:19.550999,0.000359,udp,147.32.84.170,54875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:20.501346,0.000147,udp,147.32.84.138,49886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:23.986990,3041.998779,udp,147.32.84.229,13363.0,<->,68.53.44.105,40832.0,CON,0.0,0.0,4,274,154,120,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:24.719718,171.381912,udp,98.194.24.182,8368.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,982,304,678,163.66666666666666,0.3095723014256619,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:26.857095,2629.451416,udp,71.180.153.114,27236.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,972,724,248,121.5,0.7448559670781894,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:28.372465,0.000201,udp,147.32.84.138,43241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:29.549891,0.000461,udp,147.32.84.170,43901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:33.054524,0.000168,udp,147.32.84.138,49665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:56:33.206482,0.537359,tcp,147.32.84.134,43507.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,14,3699,2447,1252,264.2142857142857,0.6615301432819681,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:36.868410,0.004234,udp,147.32.84.134,45479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,69,144,106.5,0.323943661971831,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.008303,0.000265,udp,147.32.84.134,44815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.012238,0.000256,udp,147.32.84.134,44896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.014368,0.000216,udp,147.32.84.134,56199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,79,189,134.0,0.2947761194029851,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.020663,0.000354,udp,147.32.84.134,53244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.243562,0.000188,udp,147.32.84.134,34092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,85,151,118.0,0.3601694915254237,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.244165,0.029913,udp,147.32.84.134,45901.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,85,188,136.5,0.31135531135531136,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.369241,0.000245,udp,147.32.84.134,58480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,72,133,102.5,0.35121951219512193,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:37.559481,0.0147,udp,147.32.84.134,54671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,79,182,130.5,0.30268199233716475,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:38.721634,14.40238,tcp,147.32.84.134,54988.0,->,98.129.229.152,80.0,FSPA_FSPA,0.0,0.0,29,13860,3143,10717,477.9310344827586,0.22676767676767676,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.063573,14.060317,tcp,147.32.84.134,54993.0,->,98.129.229.152,80.0,FSPA_FSPA,0.0,0.0,14,3619,1491,2128,258.5,0.4119922630560928,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.200915,0.021701,udp,147.32.84.134,38830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,405,74,331,202.5,0.18271604938271604,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.551066,0.000409,udp,147.32.84.170,49609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:39.553115,0.017796,tcp,147.32.84.170,39243.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:39.580621,0.000553,udp,147.32.84.134,35081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.658796,19.424467,tcp,147.32.84.134,57843.0,->,98.129.229.150,80.0,FSPA_FSPA,0.0,0.0,11,2158,1002,1156,196.1818181818182,0.4643188137164041,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.664394,0.035202,udp,147.32.84.134,46529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,82,148,115.0,0.3565217391304348,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.664456,0.029949,udp,147.32.84.134,47218.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,83,149,116.0,0.3577586206896552,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.664462,0.041132,udp,147.32.84.134,47147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,82,148,115.0,0.3565217391304348,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.695538,0.041087,udp,147.32.84.134,33672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,83,186,134.5,0.30855018587360594,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.706882,0.035059,udp,147.32.84.134,35114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,82,185,133.5,0.30711610486891383,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.723288,0.194181,udp,147.32.84.229,13363.0,<->,200.84.114.211,17822.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:56:39.742868,0.034993,udp,147.32.84.134,49388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,85,151,118.0,0.3601694915254237,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.773304,0.035375,udp,147.32.84.134,42037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,80,183,131.5,0.3041825095057034,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.773555,0.035492,udp,147.32.84.134,35868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,84,187,135.5,0.30996309963099633,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.774359,0.000455,udp,147.32.84.134,54510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,87,170,128.5,0.33852140077821014,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.776227,19.162142,tcp,147.32.84.134,37594.0,->,74.125.232.217,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.778918,0.040602,udp,147.32.84.134,41968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,273,85,188,136.5,0.31135531135531136,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.809997,0.035223,udp,147.32.84.134,40227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,85,151,118.0,0.3601694915254237,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.845480,0.00028,udp,147.32.84.134,49644.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,81,147,114.0,0.35526315789473684,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.845664,0.000311,udp,147.32.84.134,52526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,85,151,118.0,0.3601694915254237,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.845969,0.035107,udp,147.32.84.134,59075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,81,184,132.5,0.30566037735849055,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.856231,0.000123,udp,147.32.84.134,59432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,81,147,114.0,0.35526315789473684,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.882051,0.020046,udp,147.32.84.134,44397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.923672,0.000228,udp,147.32.84.134,58795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,81,147,114.0,0.35526315789473684,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.924387,0.035406,udp,147.32.84.134,54300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,81,184,132.5,0.30566037735849055,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:39.994146,318.95755,tcp,147.32.84.134,58985.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,107,69431,5520,63911,648.8878504672897,0.07950339185666346,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:42.660309,16.277428,tcp,147.32.84.134,58240.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:42.660384,16.270561,tcp,147.32.84.134,50019.0,->,195.113.232.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:44.188539,274.766998,tcp,147.32.84.134,51498.0,->,74.125.232.220,80.0,FSPA_FSRPA,0.0,0.0,28,6838,4791,2047,244.21428571428572,0.7006434630008774,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:44.215597,244.73909,tcp,147.32.84.134,33581.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,21,3365,1805,1560,160.23809523809524,0.5364041604754829,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:44.310173,240.096603,tcp,147.32.84.134,39588.0,->,74.125.232.217,443.0,FSPA_FSPA,0.0,0.0,32,6158,2130,4028,192.4375,0.34589152322182526,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:44.310273,245.805527,tcp,147.32.84.134,39589.0,->,74.125.232.217,443.0,SRPA_FSPA,0.0,0.0,31,4733,1551,3182,152.67741935483872,0.3276991337418128,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.556700,12.380201,tcp,147.32.84.134,58659.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.557045,12.525314,tcp,147.32.84.134,57872.0,->,98.129.229.150,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.557269,12.380695,tcp,147.32.84.134,58664.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.559813,0.000236,udp,147.32.84.134,52168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.560933,365.899658,tcp,147.32.84.134,41337.0,->,74.125.232.223,443.0,FSPA_FSPA,0.0,0.0,45,6694,2430,4264,148.75555555555556,0.3630116522258739,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:46.648468,312.303223,tcp,147.32.84.134,59023.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,24,4871,1438,3433,202.95833333333334,0.2952165879696161,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:47.147657,11.896161,tcp,147.32.84.134,39846.0,->,64.215.254.120,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:47.147867,11.789858,tcp,147.32.84.134,46810.0,->,2.21.101.115,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:49.552355,0.019383,tcp,147.32.84.170,51656.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:53.508051,60.96751,tcp,147.32.84.165,4503.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:56:54.275275,304.675842,tcp,147.32.84.134,59030.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,57,32449,2412,30037,569.280701754386,0.07433202872199451,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:59.550195,0.000416,udp,147.32.84.170,34258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:59.551134,0.000321,udp,147.32.84.170,59209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:56:59.981820,18.957075,tcp,147.32.84.134,36425.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:59.981934,18.957111,tcp,147.32.84.134,36426.0,->,74.125.232.200,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:56:59.982646,18.957802,tcp,147.32.84.134,33538.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:00.250491,0.003984,udp,147.32.84.134,44396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,71,131,101.0,0.35148514851485146,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:00.905534,0.000264,udp,147.32.84.134,58842.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,63,138,100.5,0.31343283582089554,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:00.906773,0.000278,udp,147.32.84.134,44667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,63,138,100.5,0.31343283582089554,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:01.371436,0.000176,udp,147.32.84.138,45269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:02.198660,0.000232,udp,147.32.84.170,41913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:02.199475,0.000332,udp,147.32.84.170,51826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:02.537119,76.411461,tcp,147.32.84.134,55463.0,->,94.127.76.60,80.0,FSPA_FSPA,0.0,0.0,32,16320,2356,13964,510.0,0.1443627450980392,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:02.537237,76.411522,tcp,147.32.84.134,55465.0,->,94.127.76.60,80.0,FSPA_FSPA,0.0,0.0,24,8633,2484,6149,359.7083333333333,0.2877331171087687,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:03.303389,0.000306,udp,147.32.84.134,40049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,78,129,103.5,0.37681159420289856,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:03.304240,0.195297,udp,147.32.84.134,34213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,78,178,128.0,0.3046875,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:03.500239,305.633575,tcp,147.32.84.134,47906.0,->,204.11.109.22,80.0,FSPA_FSPA,0.0,0.0,34,7481,3970,3511,220.02941176470588,0.5306777168827697,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.081809,305.052032,tcp,147.32.84.134,47907.0,->,204.11.109.22,80.0,FSPA_FSPA,0.0,0.0,39,8831,5151,3680,226.43589743589743,0.5832861510587702,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.148736,0.01723,udp,147.32.84.134,57266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.180513,14.758391,tcp,147.32.84.134,37666.0,->,74.125.232.217,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.227594,0.001805,udp,147.32.84.134,47362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,439,76,363,219.5,0.17312072892938496,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.271983,0.055964,udp,147.32.84.134,52980.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,76,136,106.0,0.3584905660377358,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.415685,34.642754,tcp,147.32.84.134,53681.0,->,74.200.246.228,80.0,FSPA_FSPA,0.0,0.0,11,2678,1296,1382,243.45454545454547,0.4839432412247946,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:04.715146,14.330113,tcp,147.32.84.134,39831.0,->,64.215.254.121,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:06.346612,19.544647,tcp,147.32.84.184,49375.0,->,74.125.232.206,80.0,FSA_FSA,0.0,0.0,6,360,240,120,60.0,0.6666666666666666,8,1,flow=Background-google-analytics15,Background,-1 2011-08-17 08:57:08.421859,70.526726,tcp,147.32.84.134,55481.0,->,94.127.76.60,80.0,FSPA_FSPA,0.0,0.0,13,1908,877,1031,146.76923076923077,0.45964360587002095,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:57:09.381515,0.000431,udp,147.32.86.20,53501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:09.550241,0.000425,udp,147.32.84.170,47069.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:09.550879,0.000383,udp,147.32.84.170,34897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:09.552025,0.017825,tcp,147.32.84.170,35574.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:10.278378,0.000211,udp,147.32.84.138,44417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:13.154319,0.251709,udp,116.25.168.187,2363.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,785,140,645,196.25,0.17834394904458598,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:17.092713,250.046677,tcp,147.32.84.170,51395.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:18.668916,0.009835,udp,147.32.84.184,52006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,109,268,188.5,0.2891246684350133,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:21.722808,0.145344,udp,147.32.84.59,17426.0,<->,174.96.77.143,60248.0,CON,0.0,0.0,2,535,72,463,267.5,0.13457943925233645,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:57:22.058838,0.001946,udp,147.32.86.113,58938.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:22.545596,0.000218,udp,147.32.86.113,64666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:26.687815,730.517212,udp,147.32.84.59,17426.0,<->,94.75.71.187,55975.0,CON,0.0,0.0,22,2661,1701,960,120.95454545454545,0.6392333709131905,8,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:57:29.532854,0.138051,udp,141.30.193.8,50575.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:29.552189,0.018649,tcp,147.32.84.170,45679.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:34.349522,0.000118,udp,147.32.84.138,56250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:34.960049,0.004546,udp,149.5.45.236,33033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:36.456801,0.198228,tcp,147.32.85.88,49311.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,18,7620,2433,5187,423.3333333333333,0.31929133858267716,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:57:36.466038,0.189962,tcp,147.32.85.88,60610.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,17,8450,1039,7411,497.05882352941177,0.1229585798816568,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:57:36.874194,2827.141113,udp,94.215.229.220,40732.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2290,1055,1235,143.125,0.4606986899563319,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:37.182168,0.102234,tcp,147.32.85.88,52952.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2077,840,1237,230.77777777777777,0.40442946557534903,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:57:39.310289,2038.901367,udp,84.74.51.209,21897.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,16,2925,1272,1653,182.8125,0.4348717948717949,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:41.792444,2405.894775,udp,219.69.50.23,46957.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:49.550256,0.000513,udp,147.32.84.170,42302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:49.552341,0.018228,tcp,147.32.84.170,39258.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:57:50.940647,0.000726,udp,98.148.229.96,31297.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-UDP-Established,Background,-1 2011-08-17 08:57:51.632200,0.000237,udp,147.32.86.20,64633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:57:54.156127,60.966587,tcp,147.32.84.165,4504.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:57:56.632973,35.340691,tcp,147.32.84.59,38140.0,->,69.63.181.51,80.0,FSRPA_FSPA,0.0,0.0,23,8642,2300,6342,375.7391304347826,0.26614209673686645,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:57:58.946967,0.206202,tcp,147.32.86.20,2350.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,43,34534,1151,33383,803.1162790697674,0.033329472404007646,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:57:59.552045,0.018354,tcp,147.32.84.170,39259.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:00.572641,0.002015,udp,147.32.84.59,50128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,75,125,100.0,0.375,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:00.739024,2738.595703,udp,147.32.84.229,13363.0,<->,212.34.50.205,45547.0,CON,0.0,0.0,4,278,156,122,69.5,0.5611510791366906,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:58:02.576752,0.000208,udp,147.32.84.138,34411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:05.759834,0.00039,udp,147.32.85.34,51138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:05.768562,0.000213,udp,147.32.85.34,60856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:07.504948,11.516106,tcp,147.32.86.155,52702.0,->,194.192.199.252,12350.0,S_,0.0,,8,608,608,0,76.0,1.0,8,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 08:58:09.550068,0.000325,udp,147.32.84.170,36483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:09.550948,0.000307,udp,147.32.84.170,48551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:09.551989,0.018187,tcp,147.32.84.170,48123.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:13.530713,0.33142,tcp,147.32.84.170,54165.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:13.536364,0.000722,udp,109.115.181.254,57822.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:58:16.216260,0.000228,udp,147.32.84.138,52120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:19.550323,0.000337,udp,147.32.84.170,46769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:20.641003,0.000207,udp,147.32.85.89,42540.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:23.938540,2417.911621,udp,81.91.210.3,21736.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1259,899,360,125.9,0.7140587768069897,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:58:25.736598,0.009974,udp,147.32.84.118,65179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:29.552203,0.018015,tcp,147.32.84.170,38083.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:30.297907,0.171925,udp,147.32.84.229,13363.0,<->,70.186.200.254,59042.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:58:35.201111,3.5e-05,udp,147.32.84.170,39452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:35.201671,0.000449,udp,147.32.84.170,47246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:42.010617,0.000312,udp,147.32.86.20,54283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:42.163633,0.000254,udp,147.32.84.138,36475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:48.969452,0.000256,udp,147.32.85.25,54802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:49.551124,0.000276,udp,147.32.84.170,53422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:58:49.729691,0.000289,udp,147.32.84.134,41213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:58:52.393609,0.000345,udp,147.32.84.134,36993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,83,499,291.0,0.14261168384879724,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:58:52.439687,8.9e-05,udp,147.32.84.134,38638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:58:53.048348,0.009969,udp,147.32.84.134,43049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,581,81,500,290.5,0.13941480206540446,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:58:53.281715,2184.015137,udp,60.224.90.152,53457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,276,156,120,69.0,0.5652173913043478,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:58:53.285839,2881.097412,tcp,147.32.84.59,47666.0,->,205.188.10.185,443.0,SPA_SPA,0.0,0.0,292,50278,9783,40495,172.18493150684932,0.19457814551095906,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:58:54.803200,60.951382,tcp,147.32.84.165,4505.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:58:57.275063,0.000239,udp,147.32.84.59,40514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:58:59.551146,0.000361,udp,147.32.84.170,53951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:04.908408,1360.375854,udp,212.142.86.102,29412.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1128,755,373,141.0,0.6693262411347518,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:06.198458,0.232345,tcp,147.32.84.170,33243.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:06.372276,0.000432,udp,194.24.158.3,38345.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,124,64,60,62.0,0.5161290322580645,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:06.951199,0.21876,udp,213.211.33.150,14160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,843,705,138,210.75,0.8362989323843416,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:07.667581,0.000368,udp,147.32.84.59,47060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,81,158,119.5,0.3389121338912134,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:59:09.550222,0.000367,udp,147.32.84.170,55173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:09.568552,0.000295,udp,147.32.84.138,54986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:59:13.170879,0.000268,udp,147.32.84.138,46342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:59:15.807342,6.022075,udp,147.32.84.229,13363.0,->,80.73.162.96,61054.0,INT,0.0,,3,1569,1569,0,523.0,1.0,8,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 08:59:19.551257,0.000323,udp,147.32.84.170,42456.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:27.021940,1305.251709,udp,147.32.84.229,13363.0,<->,92.251.71.19,47732.0,CON,0.0,0.0,6,609,425,184,101.5,0.6978653530377669,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:29.238537,2.720374,tcp,147.32.86.113,1614.0,->,77.75.72.52,80.0,SRPA_FSPA,0.0,0.0,24,12283,2831,9452,511.7916666666667,0.23048115281283074,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:59:32.397412,17.906277,tcp,147.32.84.59,43620.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:59:32.418334,0.869352,tcp,147.32.84.59,45561.0,->,66.135.38.140,80.0,FSPA_FSPA,0.0,0.0,38,25395,2048,23347,668.2894736842105,0.08064579641661744,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:59:35.145513,0.000281,udp,147.32.85.25,58425.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:59:37.177284,0.024199,udp,147.32.84.59,22975.0,<->,77.78.162.116,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,8,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 08:59:39.550341,0.000439,udp,147.32.84.170,50910.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:39.552456,0.017719,tcp,147.32.84.170,48141.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 08:59:39.990056,0.211495,udp,62.103.173.126,18555.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,262,189,73,131.0,0.7213740458015268,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:40.035828,6.343504,tcp,147.32.86.184,49174.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,32,12592,1759,10833,393.5,0.13969186785260482,8,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 08:59:43.126412,0.008623,udp,78.94.65.155,64182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,310,66,244,155.0,0.2129032258064516,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:45.574315,4.552492,tcp,61.158.100.233,1425.0,->,147.32.87.44,80.0,SRPA_FSPA,0.0,0.0,18,10344,798,9546,574.6666666666666,0.0771461716937355,8,1,flow=Background-TCP-Established,Background,-1 2011-08-17 08:59:47.651077,0.000439,udp,77.167.30.212,34633.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,8,0,flow=Background-UDP-Established,Background,-1 2011-08-17 08:59:54.958546,0.000144,udp,147.32.84.138,50986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,8,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 08:59:55.440090,60.952038,tcp,147.32.84.165,4506.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,8,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 08:59:57.769805,0.000416,udp,147.32.84.134,38639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,264,79,185,132.0,0.29924242424242425,8,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 08:59:59.551345,0.00033,udp,147.32.84.170,52362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,8,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:01.235446,0.000461,udp,176.62.179.203,51476.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:02.956093,0.000479,udp,41.206.11.39,24346.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:04.650672,1804.198486,udp,147.32.87.36,123.0,<->,147.32.80.13,123.0,CON,0.0,0.0,14,1260,630,630,90.0,0.5,9,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 09:00:08.976356,0.004116,udp,213.161.7.134,28374.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2933,60,2873,733.25,0.020456870098874872,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:09.551321,0.000269,udp,147.32.84.170,51145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:15.286476,0.000237,udp,147.32.84.134,40176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,78,128,103.0,0.3786407766990291,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:00:19.347347,0.000607,udp,85.206.11.121,37828.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:19.551280,0.000343,udp,147.32.84.170,44632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:22.577493,0.169571,udp,147.32.84.229,13363.0,<->,96.51.238.244,28297.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:22.729274,0.370651,udp,147.32.84.229,13363.0,<->,61.58.178.28,35211.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:23.965656,0.000307,udp,107.48.22.139,37935.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:26.879806,0.000419,udp,147.32.84.59,36135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:00:27.936822,0.247181,udp,147.32.84.164,34075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:00:30.160042,0.000543,udp,41.78.50.55,51457.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,548,73,475,274.0,0.1332116788321168,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:30.442759,0.240456,tcp,66.249.72.35,35331.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,10,1290,633,657,129.0,0.4906976744186046,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:00:30.850801,1678.789795,udp,147.32.84.229,13363.0,<->,210.229.7.171,45358.0,CON,0.0,0.0,8,1527,288,1239,190.875,0.18860510805500982,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:34.656453,0.000173,udp,147.32.84.138,50713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:00:35.599431,0.058116,udp,147.32.84.59,22975.0,<->,95.26.79.248,17594.0,CON,0.0,0.0,2,578,72,506,289.0,0.1245674740484429,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:00:38.164204,0.087589,tcp,213.108.85.3,1289.0,->,147.32.85.56,44076.0,FSPA_FSPA,0.0,0.0,9,700,400,300,77.77777777777777,0.5714285714285714,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:00:39.196887,0.000355,udp,147.32.84.170,60418.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:39.199026,0.25141,tcp,147.32.84.170,33255.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:39.550376,0.020001,udp,147.32.84.170,37311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:39.572095,0.018126,tcp,147.32.84.170,48149.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:39.737794,0.0006,udp,188.205.230.66,21193.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,590,79,511,295.0,0.13389830508474576,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:43.498666,90.964691,tcp,147.32.86.24,1276.0,->,147.32.80.13,3128.0,SRPA_SPA,0.0,0.0,30,23890,807,23083,796.3333333333334,0.033779824194223526,9,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:00:45.516600,0.928475,tcp,147.32.86.20,2495.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,101,102172,1706,100466,1011.6039603960396,0.01669733390752848,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:00:49.473737,6.3e-05,udp,147.32.84.138,45903.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:00:49.551271,0.00031,udp,147.32.84.170,39859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:00:56.078069,60.96743,tcp,147.32.84.165,4507.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:00:56.953296,0.140034,udp,147.32.84.229,13363.0,<->,67.83.31.34,48629.0,CON,0.0,0.0,4,2928,60,2868,732.0,0.020491803278688523,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:57.951298,1827.806274,udp,147.32.84.229,13363.0,<->,99.253.192.126,60101.0,CON,0.0,0.0,4,268,144,124,67.0,0.5373134328358209,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:00:59.550442,0.000285,udp,147.32.84.170,59826.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:03.469901,604.457458,udp,217.84.192.177,46163.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,479,355,124,119.75,0.7411273486430062,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:07.065358,0.000281,udp,147.32.84.138,43550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:01:09.550413,0.000374,udp,147.32.84.170,33672.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:09.551370,0.000503,udp,147.32.84.170,59572.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:09.552731,0.018412,tcp,147.32.84.170,47176.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:10.200639,0.248374,tcp,147.32.84.170,33260.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:16.678132,0.0,icmp,147.32.86.155,771.0,->,147.32.80.9,28414.0,URP,0.0,,1,70,70,0,70.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:01:19.550894,0.000261,udp,147.32.84.170,32936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:21.169483,0.000265,udp,147.32.84.134,58535.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,79,140,109.5,0.3607305936073059,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:01:21.169491,0.000316,udp,147.32.84.134,36574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:01:21.207957,1.167601,tcp,147.32.84.134,50295.0,->,91.189.92.166,80.0,FSPA_FSPA,0.0,0.0,448,385400,23877,361523,860.2678571428571,0.06195381421899326,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:01:21.219364,0.003382,udp,147.32.84.134,59746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,268,81,187,134.0,0.30223880597014924,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:01:22.201529,0.001398,udp,147.32.84.59,46776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:01:29.551768,0.000386,udp,147.32.84.170,38135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:32.028986,0.704768,tcp,147.32.84.59,47670.0,->,76.74.255.116,80.0,FSPA_FSPA,0.0,0.0,18,7414,1886,5528,411.8888888888889,0.25438359859724846,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:01:37.362622,2416.219727,udp,77.251.116.249,61770.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,265,145,120,66.25,0.5471698113207547,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:38.982851,0.000435,udp,90.178.64.220,23816.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:39.552461,0.018766,tcp,147.32.84.170,58701.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:39.782135,0.000382,udp,147.32.84.138,43726.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:01:45.790663,0.00047,udp,78.43.165.103,52718.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:49.550182,0.000354,udp,147.32.84.170,39391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:53.637401,0.000213,udp,147.32.84.138,38557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:01:54.010951,0.000796,udp,71.142.53.238,64829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,74,464,269.0,0.137546468401487,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:55.569244,0.000342,udp,147.32.84.138,49509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:01:56.032787,0.981974,udp,147.32.87.48,4974.0,->,147.32.87.101,161.0,INT,0.0,,48,6288,6288,0,131.0,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:01:56.629760,0.00582,tcp,147.32.84.59,58714.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1678,932,746,167.8,0.5554231227651967,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:01:56.725816,60.951996,tcp,147.32.84.165,4508.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:01:57.444004,0.000704,udp,121.29.139.79,23876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,75,490,282.5,0.13274336283185842,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:01:59.344144,240.519135,tcp,147.32.84.170,41942.0,->,209.85.148.103,443.0,FSPA_FSPA,0.0,0.0,34,7520,5318,2202,221.1764705882353,0.7071808510638298,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:01:59.551294,0.00034,udp,147.32.84.170,58905.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:00.548245,9.005895,tcp,147.32.85.26,63565.0,->,89.103.199.29,51413.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:02:00.864504,6.01353,tcp,147.32.84.59,49496.0,->,77.75.76.22,80.0,SRPA_FSPA,0.0,0.0,28,20772,1076,19696,741.8571428571429,0.05180050067398421,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:02:01.080052,0.169938,tcp,147.32.86.20,2559.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,77,71210,1751,69459,924.8051948051948,0.02458924308383654,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:02:01.258995,0.000347,udp,147.32.84.138,40896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:02.366104,0.000259,udp,147.32.84.138,33659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:03.251213,0.000403,udp,147.32.84.138,35335.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:03.365607,6.783771,udp,147.32.84.59,17426.0,->,92.62.224.17,59107.0,INT,0.0,,6,420,420,0,70.0,1.0,9,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 09:02:03.440006,1805.607422,udp,112.162.195.112,57335.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,314,190,124,78.5,0.6050955414012739,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:06.007436,0.000311,udp,147.32.84.58,61724.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:08.561415,0.055768,udp,147.32.84.59,54000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,82,150,116.0,0.35344827586206895,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:09.825489,0.000218,udp,147.32.84.59,52837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,70,154,112.0,0.3125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:11.816224,0.000428,udp,147.32.84.138,52148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:12.201059,0.000329,udp,147.32.84.170,43392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:16.086124,0.00012,udp,147.32.84.138,58544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:17.369756,0.000575,udp,83.18.13.170,29028.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,122,62,60,61.0,0.5081967213114754,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:18.341725,0.053826,udp,193.85.202.210,2348.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,845,699,146,211.25,0.8272189349112427,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:19.552327,0.000265,udp,147.32.84.170,57063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:19.553364,0.018118,tcp,147.32.84.170,57158.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:21.176906,0.000384,udp,147.32.86.135,58110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,574,79,495,287.0,0.13763066202090593,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:23.447445,0.00016,udp,147.32.84.138,52522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:24.626754,0.000235,udp,147.32.84.138,45395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,194,60,134,97.0,0.30927835051546393,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:25.179927,0.020867,udp,147.32.84.138,52173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,209,72,137,104.5,0.3444976076555024,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:29.348179,0.000218,udp,147.32.84.138,57568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:29.551206,0.000316,udp,147.32.84.170,60877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:29.744615,0.000413,udp,183.91.3.2,40214.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:34.513619,0.365637,tcp,147.32.86.113,1755.0,->,204.9.163.158,80.0,FSRPA_FSPA,0.0,0.0,10,1107,522,585,110.7,0.4715447154471545,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:02:37.201122,0.000405,udp,147.32.86.135,63093.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,379,84,295,189.5,0.22163588390501318,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:37.894626,2084.309814,tcp,147.32.85.88,62304.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,23,6850,3526,3324,297.82608695652175,0.5147445255474452,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:02:39.553493,0.017849,tcp,147.32.84.170,57160.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:40.140356,0.00043,udp,221.58.34.167,4112.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,425,80,345,212.5,0.18823529411764706,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:41.596046,0.000315,udp,147.32.84.59,48814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:42.342821,0.00035,udp,90.154.200.198,28303.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,223,161,62,111.5,0.7219730941704036,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:02:43.192056,0.000363,udp,147.32.84.170,34374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:02:46.423825,2113.910889,tcp,147.32.85.88,62409.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,21,4063,2301,1762,193.47619047619048,0.5663302978095004,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:02:46.553104,0.000267,udp,147.32.84.138,37058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:54.898460,0.000183,udp,147.32.85.25,42379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:02:57.363348,60.952644,tcp,147.32.84.165,4509.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:02:59.552236,0.000258,udp,147.32.84.170,34214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:04.958799,0.000394,udp,147.32.85.25,46315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:06.018559,17.87635,tcp,147.32.84.59,40413.0,->,75.102.3.15,80.0,FSPA_FSPA,0.0,0.0,17,8179,3515,4664,481.11764705882354,0.4297591392590781,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:03:06.722716,2613.979004,udp,147.32.84.229,13363.0,<->,86.146.98.225,27870.0,CON,0.0,0.0,4,736,152,584,184.0,0.20652173913043478,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:03:07.465714,0.000433,udp,147.32.84.138,53927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:08.718703,0.031766,udp,147.32.84.229,13363.0,<->,149.13.32.52,33033.0,CON,0.0,0.0,2,551,491,60,275.5,0.8911070780399274,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:03:09.551438,0.000434,udp,147.32.84.170,54226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:12.245872,0.000169,udp,147.32.84.138,33512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:14.066806,0.278088,tcp,147.32.84.170,43641.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:14.190652,0.000307,udp,147.32.84.170,45446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:16.479897,0.000342,udp,147.32.84.181,58825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,73,289,181.0,0.20165745856353592,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:17.294793,9.017052,tcp,84.26.47.169,51420.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,512,194,318,64.0,0.37890625,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:03:19.552836,4e-06,udp,147.32.84.170,50036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:19.553366,0.018477,tcp,147.32.84.170,50245.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:27.432947,0.000346,udp,147.32.84.59,35272.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,86,239,162.5,0.26461538461538464,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:30.837266,0.000304,udp,147.32.84.138,50896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:33.071178,0.000304,udp,147.32.84.138,47392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:33.132148,0.000164,udp,147.32.84.138,53339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:33.165291,1365.47168,udp,147.32.84.138,4444.0,->,147.32.255.255,4586.0,INT,0.0,,82,6642,6642,0,81.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:03:33.165854,1365.471558,udp,147.32.84.138,4444.0,->,147.32.255.255,4636.0,INT,0.0,,82,6642,6642,0,81.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:03:36.978528,0.000569,udp,147.32.84.166,39064.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,578,80,498,289.0,0.1384083044982699,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:39.553231,0.018132,tcp,147.32.84.170,55450.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:03:39.988556,0.020915,udp,147.32.84.59,33050.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,431,80,351,215.5,0.18561484918793503,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:40.762714,1.1e-05,icmp,147.32.86.96,,<-,147.32.87.52,528.0,ECR,,0.0,2,196,0,196,98.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:03:43.223414,0.000137,udp,147.32.84.138,40923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:45.810816,0.15577,udp,147.32.86.208,11289.0,<->,98.242.190.77,59789.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:03:46.984799,0.000197,udp,147.32.84.138,43944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:47.841117,0.000235,udp,147.32.84.138,35499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:48.172610,0.000567,udp,70.112.151.165,56876.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:03:49.041016,0.000727,udp,87.246.58.62,38235.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,948,72,876,474.0,0.0759493670886076,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:03:51.358185,0.000266,udp,147.32.85.25,37282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:03:58.001331,60.96748,tcp,147.32.84.165,4510.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:03:58.425747,1872.853271,udp,88.101.156.126,28478.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,922,632,290,115.25,0.6854663774403471,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:04:07.314178,0.000378,udp,147.32.84.138,52654.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:07.388284,0.000262,udp,147.32.84.138,46031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:07.411661,0.000273,udp,147.32.84.138,44889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:07.425147,0.000251,udp,147.32.84.138,46089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:07.474970,717.62793,udp,147.32.84.138,4445.0,->,147.32.255.255,4591.0,INT,0.0,,11,891,891,0,81.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:04:09.553487,0.018617,tcp,147.32.84.170,48863.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:10.588143,0.104686,udp,147.32.84.59,40322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,85,147,116.0,0.36637931034482757,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:10.915709,0.000269,udp,147.32.84.59,51560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,85,160,122.5,0.3469387755102041,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:10.969106,0.000164,udp,147.32.84.59,44989.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,82,157,119.5,0.34309623430962344,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:11.673666,0.000177,udp,147.32.85.25,60199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:19.551532,0.000284,udp,147.32.84.170,46481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:19.552321,0.000351,udp,147.32.84.170,55128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:23.246425,0.000218,udp,147.32.84.138,45018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:25.391426,19.386003,tcp,147.32.84.181,49185.0,->,80.79.27.46,80.0,SRPA_FSPA,0.0,0.0,16,8285,1149,7136,517.8125,0.13868436934218467,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:26.293602,0.000146,udp,147.32.84.138,40737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:30.451148,2512.048584,udp,92.241.69.58,36067.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:04:30.589844,0.186429,tcp,147.32.86.20,2688.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,74,71030,1571,69459,959.8648648648649,0.022117415176685907,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:32.565517,0.200636,tcp,147.32.86.113,1803.0,->,77.93.216.2,80.0,SRPA_SPA,0.0,0.0,32,26208,3737,22471,819.0,0.14259004884004883,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:35.178991,0.988409,tcp,147.32.84.134,48590.0,->,63.245.209.92,443.0,FSPA_FSPA,0.0,0.0,19,6559,1922,4637,345.2105263157895,0.2930324744625705,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:04:35.345646,0.000443,udp,121.84.151.179,2725.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:04:35.463841,0.183203,udp,147.32.84.134,47996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:04:36.247028,0.131416,udp,147.32.84.134,38029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,203,86,117,101.5,0.4236453201970443,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:04:38.712486,0.20647,tcp,147.32.86.20,2694.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,28602,1029,27573,752.6842105263158,0.035976505139500736,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:40.113158,0.127165,udp,147.32.86.208,59659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,224,76,148,112.0,0.3392857142857143,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:41.630155,0.135985,udp,147.32.84.59,47247.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:42.556996,0.000224,udp,147.32.84.138,51310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:42.698089,0.000364,udp,147.32.84.138,48246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:42.703642,0.000208,udp,147.32.84.138,35974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:42.716370,0.000361,udp,147.32.84.138,54897.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:43.303591,0.026644,udp,147.32.85.119,56783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,77,154,115.5,0.3333333333333333,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:45.173410,0.012636,udp,147.32.85.124,62579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,75,151,113.0,0.33185840707964603,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:45.726340,0.010166,tcp,147.32.85.119,4900.0,->,91.213.160.12,80.0,SRPA_FSPA,0.0,0.0,9,1366,843,523,151.77777777777777,0.6171303074670571,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:47.201442,0.000226,udp,147.32.84.170,35327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:47.203165,0.244925,tcp,147.32.84.170,38785.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:47.357045,86.961136,udp,109.112.70.231,34149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,675,375,300,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:04:49.551629,0.000397,udp,147.32.84.170,43119.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:04:50.766772,0.000348,udp,147.32.84.59,53168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,87,236,161.5,0.2693498452012384,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:51.143490,11.739131,tcp,147.32.85.119,4917.0,->,91.213.160.12,80.0,FSA_FSA,0.0,0.0,7,432,246,186,61.714285714285715,0.5694444444444444,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:51.147343,132.922867,tcp,147.32.85.119,4923.0,->,81.0.233.58,80.0,SPA_SRPA,0.0,0.0,81,79239,1695,77544,978.2592592592592,0.021390981713550146,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:52.447170,0.0,igmp,147.32.87.5,,->,239.255.255.253,,INT,0.0,,1,60,60,0,60.0,1.0,9,,flow=Background,Background,-1 2011-08-17 09:04:53.189633,8.148092,tcp,147.32.86.113,1870.0,->,89.185.233.162,80.0,SRPA_FSPA,0.0,0.0,14,4808,3887,921,343.42857142857144,0.8084442595673876,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:55.349673,0.000152,udp,147.32.84.138,58963.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:56.188966,0.000597,udp,109.121.254.29,11980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1197,75,1122,598.5,0.06265664160401002,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:04:56.304632,0.035388,udp,147.32.86.110,33560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,276,74,202,138.0,0.26811594202898553,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:57.478240,0.112491,tcp,194.39.218.10,37481.0,->,147.32.87.41,80.0,FSPA_FSPA,0.0,0.0,9,2346,783,1563,260.6666666666667,0.3337595907928389,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:04:58.179056,0.000204,udp,147.32.84.181,52196.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,87,161,124.0,0.35080645161290325,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:04:58.648757,60.968616,tcp,147.32.84.165,4511.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:05:00.092162,0.000373,udp,147.32.84.138,58028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:00.107021,0.000328,udp,147.32.84.138,46329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:00.142356,0.000286,udp,147.32.84.138,35009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:01.060621,0.000182,udp,147.32.84.222,33269.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:01.883977,15.344046,tcp,147.32.85.7,42902.0,->,77.75.73.25,80.0,FSPA_FSPA,0.0,0.0,21,11306,1913,9393,538.3809523809524,0.16920219352556165,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:03.451024,0.000381,udp,147.32.84.138,54692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:07.849180,0.000298,udp,147.32.85.25,47285.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:07.984211,0.365273,tcp,147.32.84.164,56817.0,->,50.17.203.200,81.0,FSPA_FSRA,0.0,0.0,10,1181,861,320,118.1,0.729043183742591,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:05:08.007793,967.161926,udp,178.76.57.156,25720.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1113,153,960,278.25,0.13746630727762804,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:12.094541,167.395172,udp,77.21.97.114,50660.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,2056,1816,240,257.0,0.8832684824902723,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:13.628845,2515.130371,tcp,147.32.84.164,47592.0,->,74.125.232.216,443.0,PA_PA,0.0,0.0,2468,1015826,183026,832800,411.59886547811993,0.18017455745373714,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:05:15.629936,0.119948,tcp,194.39.218.10,37921.0,->,147.32.87.41,80.0,FSPA_FSPA,0.0,0.0,12,5059,839,4220,421.5833333333333,0.1658430519865586,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:18.200672,0.289618,tcp,147.32.84.170,38789.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:05:20.119840,0.0037,udp,147.32.84.181,53599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:20.167315,0.000222,udp,147.32.84.181,49229.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:20.178219,0.002353,udp,147.32.84.181,52834.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,76,150,113.0,0.336283185840708,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:20.188658,0.000311,udp,147.32.84.181,57729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:20.218486,0.000229,udp,147.32.84.181,60728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:24.161509,0.140677,udp,147.32.84.184,59371.0,<->,24.215.97.247,40353.0,CON,0.0,0.0,2,138,76,62,69.0,0.5507246376811594,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:29.344220,0.000401,udp,147.32.84.164,56630.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:05:29.345017,297.296448,tcp,147.32.84.164,57983.0,->,74.125.232.204,443.0,FSPA_FSPA,0.0,0.0,48,8971,4161,4810,186.89583333333334,0.46382788986735035,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:05:29.554645,0.000485,udp,147.32.84.170,44562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:05:30.461677,0.000404,udp,147.32.84.138,40222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:30.766368,0.057919,tcp,147.32.86.147,59751.0,->,77.93.192.142,80.0,FSPA_FSPA,0.0,0.0,16,5520,3568,1952,345.0,0.6463768115942029,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:30.932022,0.000439,udp,147.32.86.147,37513.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,83,164,123.5,0.3360323886639676,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:30.941079,0.534866,tcp,147.32.86.113,1891.0,->,93.99.39.168,80.0,FSPA_FSPA,0.0,0.0,31,22446,3617,18829,724.0645161290323,0.16114229706852,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:32.560614,0.016873,tcp,147.32.86.147,34078.0,->,91.198.174.232,80.0,SR_SA,0.0,0.0,3,208,134,74,69.33333333333333,0.6442307692307693,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:33.969002,0.086648,tcp,147.32.86.147,40906.0,->,74.125.232.192,80.0,FSPA_FSPA,0.0,0.0,14,5280,1002,4278,377.14285714285717,0.18977272727272726,9,1,flow=Background-google-analytics1,Background,-1 2011-08-17 09:05:36.189017,0.000282,udp,147.32.84.138,54986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:36.285841,0.000313,udp,147.32.84.138,46049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:38.814189,0.438831,udp,109.184.127.29,54404.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1085,545,540,271.25,0.5023041474654378,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:39.562005,0.000356,udp,147.32.84.170,44445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:05:39.563030,0.01824,tcp,147.32.84.170,41318.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:05:42.542295,0.346677,udp,95.143.214.196,58934.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,233,156,77,116.5,0.6695278969957081,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:44.317015,0.000204,udp,147.32.85.25,42011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:44.660528,2456.022949,udp,184.59.24.160,54045.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,264,144,120,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:46.556826,8.713226,tcp,147.32.84.59,51547.0,->,94.199.40.244,80.0,FSPA_FSPA,0.0,0.0,15,5015,1774,3241,334.3333333333333,0.35373878364905287,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:05:46.887553,0.000332,udp,147.32.84.138,44224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:46.964834,0.206472,tcp,147.32.86.20,2760.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,38,28698,1029,27669,755.2105263157895,0.0358561572234999,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:05:47.172714,0.025376,udp,147.32.84.59,17426.0,<->,78.141.181.220,34062.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:05:47.732833,1919.529175,udp,2.54.153.190,10699.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,952,704,248,119.0,0.7394957983193278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:49.130288,0.01505,udp,147.32.85.26,56174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,77,244,160.5,0.2398753894080997,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:49.211306,0.230339,tcp,147.32.84.170,38793.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:05:49.509048,0.000294,udp,147.32.84.138,53025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:05:57.620495,2202.368164,udp,83.70.227.184,50875.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,1850,1245,605,308.3333333333333,0.672972972972973,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:05:59.296663,60.951267,tcp,147.32.84.165,4512.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:05:59.551694,0.000565,udp,147.32.84.170,46139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:01.210294,0.175707,udp,147.32.86.141,1029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,72,139,105.5,0.3412322274881517,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:01.595603,0.000329,udp,147.32.84.138,44546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:02.187783,0.000331,udp,147.32.84.138,38768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:02.326768,0.000399,udp,147.32.84.138,33026.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:02.776992,10.9261,tcp,209.200.154.47,80.0,->,147.32.84.238,31012.0,SA_,0.0,,2,120,120,0,60.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:06:05.390262,9.000375,tcp,147.32.84.179,53840.0,->,192.168.254.1,22.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,9,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:06:05.507610,0.000263,udp,147.32.84.138,39599.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:05.671807,0.000267,udp,147.32.85.34,50143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:05.681675,0.000266,udp,147.32.85.34,63161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:05.684294,0.000304,udp,147.32.85.34,51270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,85,239,162.0,0.2623456790123457,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:05.788340,0.200552,udp,147.32.84.229,13363.0,<->,67.219.232.226,3154.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:07.230665,30.04158,tcp,147.32.84.59,49329.0,->,147.32.80.7,80.0,SRPA_FSPA,0.0,0.0,9,1545,485,1060,171.66666666666666,0.313915857605178,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:06:09.551646,0.000365,udp,147.32.84.170,38533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:11.935475,0.000634,udp,41.183.36.252,27806.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,631,72,559,315.5,0.11410459587955626,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:12.279044,2453.316895,udp,195.70.143.160,25380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,767,545,222,127.83333333333333,0.7105606258148631,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:15.456760,0.00026,udp,147.32.85.25,52479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:15.824335,0.000275,udp,147.32.84.138,42674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:19.553826,0.018053,tcp,147.32.84.170,51919.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:20.200339,0.000335,udp,147.32.84.170,44337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:20.201661,0.334117,tcp,147.32.84.170,38798.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:20.509079,0.000427,udp,81.144.211.83,57093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:22.268429,6.05735,udp,147.32.84.229,13363.0,->,24.208.28.175,4256.0,INT,0.0,,3,228,228,0,76.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:06:23.463296,26.780512,tcp,200.243.38.59,48233.0,->,147.32.84.229,13363.0,FSPA_FSRPA,0.0,0.0,28,4861,1247,3614,173.60714285714286,0.25653157786463693,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:06:25.611288,0.000229,udp,147.32.85.25,41201.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:26.577080,7e-06,icmp,147.32.87.249,,<-,147.32.87.5,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:06:29.551433,0.000449,udp,147.32.84.170,51258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:29.552461,0.000381,udp,147.32.84.170,46480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:29.553748,0.018019,tcp,147.32.84.170,50270.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:30.688191,0.000186,udp,147.32.84.138,43173.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:30.857926,0.00039,udp,147.32.84.138,56948.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:31.546754,25.160938,tcp,147.32.85.103,57076.0,->,209.85.148.104,80.0,FSPA_FSPA,0.0,0.0,89,69304,6919,62385,778.6966292134831,0.09983550733002425,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:06:32.822536,0.000425,udp,147.32.85.103,35838.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.258008,0.000331,udp,147.32.84.138,37443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.286593,0.000259,udp,147.32.84.138,35836.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.313416,0.000234,udp,147.32.84.138,44702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.372845,0.000266,udp,147.32.84.138,59324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.462431,0.000293,udp,147.32.84.138,35522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:33.478897,0.000464,udp,147.32.84.138,50679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:34.202336,0.000105,udp,147.32.84.138,34999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:37.937502,472.859741,tcp,147.32.84.59,49555.0,->,158.195.65.158,26207.0,FSPA_FSPA,0.0,0.0,66,4351,1684,2667,65.92424242424242,0.38703746265226385,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:06:39.551699,0.000481,udp,147.32.84.170,33788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:42.265774,8.903396,tcp,208.54.85.166,35355.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,516,198,318,64.5,0.38372093023255816,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:06:47.906246,0.000377,udp,147.32.86.20,60835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:50.665139,0.000273,udp,147.32.86.135,63118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,83,166,124.5,0.3333333333333333,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:51.198749,0.000342,udp,147.32.84.170,39913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:52.472777,0.157183,udp,147.32.84.229,13363.0,<->,24.208.252.122,41809.0,CON,0.0,0.0,2,514,454,60,257.0,0.8832684824902723,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:54.959893,1708.710327,udp,147.32.84.229,13363.0,<->,92.124.15.198,30926.0,CON,0.0,0.0,6,3058,120,2938,509.6666666666667,0.03924133420536298,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:56.394034,0.000228,udp,147.32.85.25,33403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:57.145314,0.000341,udp,147.32.85.103,25954.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:06:57.395057,0.000751,udp,79.183.215.157,30868.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,972,74,898,486.0,0.07613168724279835,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:57.983208,0.040515,udp,147.32.84.229,13363.0,<->,149.5.45.253,43034.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:06:59.552373,0.000301,udp,147.32.84.170,47711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:59.553428,0.018284,tcp,147.32.84.170,48886.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:06:59.933448,60.96386,tcp,147.32.84.165,4513.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:07:01.304662,0.002536,udp,147.32.84.59,57281.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,74,162,118.0,0.3135593220338983,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:01.442784,0.000145,udp,147.32.84.138,44483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:07.787310,0.000425,udp,89.179.70.10,65186.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:07:09.551708,0.000367,udp,147.32.84.170,59118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:09.553708,0.01894,tcp,147.32.84.170,51926.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:17.097411,0.000278,udp,147.32.84.170,35544.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:17.150789,0.297055,tcp,147.32.84.170,44307.0,->,199.7.50.72,80.0,FSPA_FSPA,0.0,0.0,13,2793,786,2007,214.84615384615384,0.2814178302900107,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:20.177046,0.126742,tcp,147.32.86.113,1992.0,->,89.187.132.203,80.0,SRPA_FSPA,0.0,0.0,9,1500,736,764,166.66666666666666,0.49066666666666664,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:07:21.069871,15.812104,tcp,147.32.84.59,49615.0,->,86.63.194.225,80.0,FSA_FSA,0.0,0.0,8,492,246,246,61.5,0.5,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:07:22.188882,0.000333,udp,147.32.84.170,46579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:22.190052,0.236035,tcp,147.32.84.170,38813.0,->,195.24.232.205,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:27.797131,2318.494873,udp,147.32.84.229,13363.0,->,84.42.157.22,43745.0,INT,0.0,,27,4401,4401,0,163.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:07:29.392717,0.000186,udp,147.32.84.138,59261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:29.553819,0.018512,tcp,147.32.84.170,48897.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:30.120411,0.329601,udp,147.32.84.229,13363.0,<->,114.24.122.2,31116.0,CON,0.0,0.0,2,516,456,60,258.0,0.8837209302325582,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:07:32.140153,0.000134,udp,147.32.84.138,36154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:36.648418,0.000292,udp,147.32.84.138,55378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:38.449143,0.000257,udp,147.32.84.138,55908.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:39.551816,0.000347,udp,147.32.84.170,50947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:39.552670,0.00028,udp,147.32.84.170,39585.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:39.553647,0.018149,tcp,147.32.84.170,51937.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:40.418569,0.000364,udp,147.32.85.124,53797.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,83,184,133.5,0.31086142322097376,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:45.757397,0.000272,udp,147.32.85.34,64739.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:48.906616,0.000235,udp,147.32.84.138,33439.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:49.835531,0.000386,udp,95.143.213.236,60221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:07:53.203093,0.000372,udp,147.32.84.170,52602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:07:53.759465,0.000316,udp,147.32.84.138,36995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:07:56.214093,0.035952,tcp,147.32.86.113,2030.0,->,91.213.160.12,80.0,SRPA_FSPA,0.0,0.0,9,1621,835,786,180.11111111111111,0.5151141270820481,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:07:56.284218,29.010204,tcp,147.32.84.59,43993.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,19,8515,1080,7435,448.1578947368421,0.1268349970640047,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:07:59.553893,0.019246,tcp,147.32.84.170,50289.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:00.222611,0.000343,udp,147.32.86.20,51771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,76,208,142.0,0.2676056338028169,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:00.580794,60.955776,tcp,147.32.84.165,4514.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:08:00.942486,0.00019,udp,147.32.84.138,47791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:05.028954,0.003141,udp,147.32.84.59,39695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,78,188,133.0,0.2932330827067669,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:05.358511,0.000225,udp,147.32.85.34,64647.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:05.378509,0.000275,udp,147.32.85.34,55474.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:05.387487,0.000229,udp,147.32.85.34,57107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,85,240,162.5,0.26153846153846155,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:06.183163,0.000269,udp,147.32.84.138,42241.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:08.972103,1868.386475,udp,147.32.84.229,13363.0,<->,72.51.192.218,20643.0,CON,0.0,0.0,6,795,615,180,132.5,0.7735849056603774,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:08:09.551571,0.000414,udp,147.32.84.170,34256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:09.553666,0.018223,tcp,147.32.84.170,43342.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:11.022647,0.002054,udp,147.32.86.113,49819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,485,81,404,242.5,0.1670103092783505,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:12.553098,0.000297,udp,147.32.84.138,50010.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:13.609567,0.260162,tcp,147.32.84.170,42216.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,20,4170,1164,3006,208.5,0.27913669064748203,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:13.848035,0.519835,tcp,147.32.84.170,39059.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:14.070633,0.270403,tcp,147.32.84.170,42219.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:14.412465,0.000515,udp,147.32.84.59,57271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:14.617253,0.002064,udp,147.32.84.59,48814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,81,160,120.5,0.3360995850622407,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:19.761491,5.095454,udp,147.32.84.59,17426.0,->,147.32.65.196,3490.0,INT,0.0,,3,210,210,0,70.0,1.0,9,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 09:08:24.184410,1890.609619,udp,87.120.65.74,46971.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1508,321,1187,150.8,0.21286472148541113,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:08:26.298949,0.0,udp,147.32.84.99,427.0,->,192.168.88.186,63759.0,INT,0.0,,1,377,377,0,377.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:08:29.552773,0.000372,udp,147.32.84.170,48981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:29.553965,0.018602,tcp,147.32.84.170,43351.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:38.978615,0.000183,udp,147.32.84.138,47779.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:39.554082,0.018025,tcp,147.32.84.170,54062.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:42.022395,0.429726,tcp,147.32.86.113,2073.0,->,77.93.215.24,80.0,SRPA_FSPA,0.0,0.0,36,34652,1286,33366,962.5555555555555,0.03711185501558351,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:08:42.411728,0.000487,udp,81.183.92.173,50239.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:08:43.067003,0.229268,tcp,147.32.86.113,2098.0,->,77.93.215.24,80.0,SRPA_FSPA,0.0,0.0,9,1630,853,777,181.11111111111111,0.5233128834355828,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:08:45.722381,0.118293,tcp,147.32.86.20,2915.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,31,23736,853,22883,765.6774193548387,0.03593697337377823,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:08:46.747445,4e-06,icmp,147.32.87.249,,<-,147.32.87.54,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:08:48.632162,0.000206,udp,147.32.84.138,57867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:49.551913,0.00026,udp,147.32.84.170,49170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:49.909768,0.045494,udp,147.32.84.59,17426.0,<->,213.146.167.20,17886.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:08:50.601508,21.216881,tcp,147.32.85.26,63743.0,->,94.127.76.70,80.0,FSPA_FSPA,0.0,0.0,17,9489,957,8532,558.1764705882352,0.10085361998103066,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:08:52.832456,0.000302,udp,147.32.84.59,47199.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:08:54.200909,0.000617,udp,125.127.148.141,6733.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,309,64,245,154.5,0.20711974110032363,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:08:55.198709,0.000365,udp,147.32.84.170,38582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,81,229,155.0,0.26129032258064516,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:08:56.768690,0.000125,udp,147.32.65.196,26658.0,->,147.32.84.59,17426.0,INT,0.0,,1,70,70,0,70.0,1.0,9,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 09:08:58.924384,0.000506,udp,93.75.111.208,16359.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,566,72,494,283.0,0.127208480565371,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:08:59.553531,0.017911,tcp,147.32.84.170,54065.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:09:01.218915,60.938953,tcp,147.32.84.165,4515.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:09:04.376025,0.000595,udp,223.204.112.84,22517.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,637,79,558,318.5,0.12401883830455258,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:07.027455,0.000309,udp,147.32.84.138,55323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:12.802618,929.650879,udp,41.212.208.131,58212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,746,560,186,124.33333333333333,0.7506702412868632,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:14.500425,2144.27124,udp,147.32.84.229,13363.0,<->,208.88.186.4,34041.0,CON,0.0,0.0,14,1704,1263,441,121.71428571428571,0.7411971830985915,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:15.167318,0.000266,udp,147.32.84.138,44345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:15.321055,0.446173,udp,109.120.24.79,24205.0,<->,147.32.84.184,59371.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:16.244210,0.000325,udp,147.32.84.138,47002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:20.625591,0.000304,udp,147.32.84.138,51324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:20.657895,0.000198,udp,147.32.84.138,49774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:20.980341,0.139518,udp,147.32.84.229,13363.0,<->,129.79.152.112,1589.0,CON,0.0,0.0,4,2953,60,2893,738.25,0.02031832035218422,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:21.185793,21.701042,tcp,147.32.85.26,63786.0,->,93.184.221.133,80.0,SRPA_FSPA,0.0,0.0,120,116589,2954,113635,971.575,0.025336867114393296,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:09:23.208149,242.096069,tcp,147.32.84.59,48262.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,59,33258,5354,27904,563.6949152542373,0.16098382344097661,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:09:26.198936,0.000399,udp,147.32.84.170,53027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:09:29.553767,0.018319,tcp,147.32.84.170,50065.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:09:35.633416,8e-06,icmp,147.32.87.249,,<-,147.32.87.52,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:09:40.929903,59.285469,udp,147.32.84.229,13363.0,->,91.89.54.156,20318.0,INT,0.0,,6,1086,1086,0,181.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:09:41.519295,0.310936,udp,147.32.84.229,13363.0,<->,59.147.187.21,56904.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:45.210928,0.000265,udp,147.32.84.59,54557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:48.000189,863.42041,udp,147.32.84.229,13363.0,<->,201.215.218.34,7804.0,CON,0.0,0.0,4,271,151,120,67.75,0.5571955719557196,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:48.353728,0.000301,udp,147.32.84.138,44722.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:48.979483,0.000271,udp,147.32.84.222,48031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:09:49.475586,1229.944824,udp,147.32.84.229,13363.0,<->,76.181.9.125,28822.0,CON,0.0,0.0,6,1255,1061,194,209.16666666666666,0.8454183266932271,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:09:49.551879,0.00035,udp,147.32.84.170,42352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:09:59.210279,0.09307,tcp,147.32.80.7,42464.0,->,147.32.84.19,25.0,FSPA_FSPA,0.0,0.0,26,5941,4433,1508,228.5,0.7461706783369803,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:09:59.967141,0.000213,udp,147.32.85.25,57500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:00.391423,0.00029,udp,147.32.84.59,60911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,78,187,132.5,0.2943396226415094,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:00.985186,0.000179,udp,147.32.84.138,37225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:01.006346,0.005188,tcp,147.32.84.59,56804.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1980,1109,871,220.0,0.5601010101010101,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:10:01.846287,60.954094,tcp,147.32.84.165,4516.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:10:02.640271,0.000329,udp,147.32.86.92,46889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:04.933851,0.001909,udp,147.32.86.89,60245.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,434,81,353,217.0,0.18663594470046083,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:05.198657,0.000274,udp,147.32.84.138,40896.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:05.270935,0.000316,udp,147.32.84.138,51388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:05.327727,0.000294,udp,147.32.84.138,38363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:05.661516,0.000367,udp,147.32.84.36,56622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:09.343147,0.000641,udp,88.188.240.92,32858.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:10:09.552687,0.000345,udp,147.32.84.170,47917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:10.152080,0.031918,udp,147.32.84.59,49208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,80,138,109.0,0.3669724770642202,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:11.820754,0.256846,udp,147.32.84.59,49394.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,74,128,101.0,0.36633663366336633,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:15.967667,42.344769,tcp,147.32.85.124,49517.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,32,22463,9772,12691,701.96875,0.435026488002493,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:10:19.553800,0.017863,tcp,147.32.84.170,59344.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:22.292248,0.000227,udp,147.32.84.138,60313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:24.268188,0.001864,udp,147.32.84.59,60761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:27.560067,303.422455,tcp,147.32.85.124,49622.0,->,195.113.232.82,80.0,FSPA_FSPA,0.0,0.0,33,21662,2370,19292,656.4242424242424,0.10940818022343274,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:10:28.429811,0.236704,tcp,147.32.84.170,33719.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:29.551914,0.000431,udp,147.32.84.170,58593.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:29.552867,0.000439,udp,147.32.84.170,54360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:29.768966,0.000681,udp,201.191.198.65,51446.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,160,94,66,80.0,0.5875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:10:30.490693,0.000386,udp,118.9.239.219,48032.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:10:30.867630,0.000272,udp,147.32.84.138,35395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:31.375773,0.00021,udp,147.32.85.25,36015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:31.750613,0.000244,udp,147.32.84.138,41110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:32.708580,0.012121,tcp,90.183.39.17,43009.0,->,147.32.84.14,80.0,FSPA_FSPA,0.0,0.0,10,1434,959,475,143.4,0.6687587168758717,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:10:33.119720,0.000743,udp,147.32.84.138,53302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:33.144317,0.000473,udp,147.32.85.87,42929.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:36.746354,0.134429,udp,147.32.84.229,13363.0,<->,98.204.14.187,1789.0,CON,0.0,0.0,2,530,470,60,265.0,0.8867924528301887,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:10:39.551991,0.00987,udp,147.32.84.170,37420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:40.107029,250.043457,tcp,147.32.85.87,47963.0,->,209.85.148.132,443.0,FSPA_FSPA,0.0,0.0,32,4826,1538,3288,150.8125,0.3186904268545379,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:10:41.913318,0.000303,udp,147.32.86.20,63266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,85,178,131.5,0.3231939163498099,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:43.634159,0.000312,udp,147.32.86.141,1052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:49.553445,0.000368,udp,147.32.84.170,51023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:10:56.170711,0.000645,udp,98.177.187.35,15247.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,315,64,251,157.5,0.20317460317460317,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:10:57.073068,0.000319,udp,147.32.84.138,45497.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:10:58.119357,29.405697,tcp,69.248.0.54,52371.0,->,147.32.85.109,80.0,FSPA_FSPA,0.0,0.0,11,1854,756,1098,168.54545454545453,0.4077669902912621,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:10:59.202288,0.225195,tcp,147.32.84.170,33723.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:11:02.483601,60.954395,tcp,147.32.84.165,4517.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:11:04.322943,0.000322,udp,147.32.84.138,42041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:04.337979,0.000284,udp,147.32.84.138,35715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:04.379414,0.000231,udp,147.32.84.138,54422.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:04.390484,0.000357,udp,147.32.84.138,39211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:04.450131,0.000287,udp,147.32.84.138,59181.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:06.781848,0.000263,udp,153.110.137.33,55926.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,160,100,60,80.0,0.625,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:08.507694,14.282829,udp,147.32.86.111,61158.0,<->,96.6.40.39,3478.0,CON,0.0,0.0,31,4812,4596,216,155.2258064516129,0.9551122194513716,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:08.779989,0.000348,udp,147.32.84.181,55574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,94,197,145.5,0.3230240549828179,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:09.810054,0.000495,udp,147.32.84.189,60161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,432,80,352,216.0,0.18518518518518517,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:10.441179,0.000474,udp,212.98.206.198,16055.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:13.269004,0.00033,udp,147.32.84.138,40312.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,79,217,148.0,0.2668918918918919,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:16.238217,0.043312,udp,147.32.84.229,13363.0,<->,89.215.35.94,56263.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:17.202255,0.000144,udp,147.32.84.138,53083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:19.554049,0.018048,tcp,147.32.84.170,43373.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:11:19.799646,20.787527,tcp,38.101.148.126,45827.0,->,147.32.87.27,80.0,SRPA_FSPA,0.0,0.0,40,31055,1389,29666,776.375,0.04472709708581549,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:11:20.354134,0.084056,tcp,147.32.85.124,49778.0,->,79.141.170.11,27031.0,FSA_SRA,0.0,0.0,6,372,186,186,62.0,0.5,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:11:20.671994,0.000327,udp,147.32.84.138,49043.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:20.892187,0.000363,udp,147.32.86.147,54883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:23.692298,0.00043,udp,147.32.84.138,50658.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:23.717514,0.000616,udp,99.182.17.68,5770.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:28.436391,0.0002,udp,147.32.84.138,50664.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:28.655795,0.000245,udp,147.32.84.138,36060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:29.598141,0.000382,udp,147.32.84.59,52748.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,98,148,123.0,0.3983739837398374,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:30.082260,0.000363,udp,147.32.84.19,57768.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:33.423391,0.170081,udp,147.32.84.59,54866.0,<->,173.216.34.1,44013.0,CON,0.0,0.0,2,635,575,60,317.5,0.905511811023622,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:11:33.440525,0.001268,udp,147.32.85.124,57431.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,290,75,215,145.0,0.25862068965517243,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:35.169665,0.000217,udp,85.230.172.150,29351.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,257,173,84,128.5,0.6731517509727627,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:36.861638,0.000716,udp,188.26.166.72,64689.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,79,483,281.0,0.14056939501779359,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:37.381445,0.000351,udp,147.32.84.138,39081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:39.552089,0.000368,udp,147.32.84.170,60372.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:11:39.554022,0.018362,tcp,147.32.84.170,46287.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:11:39.621617,0.169416,tcp,147.32.86.20,3063.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,66,60532,1513,59019,917.1515151515151,0.0249950439436992,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:11:44.371255,0.000455,udp,147.32.86.141,1029.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:46.051555,0.006473,tcp,147.32.84.181,49268.0,->,77.78.99.21,80.0,SRPA_FSPA,0.0,0.0,8,1994,1130,864,249.25,0.5667001003009027,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:11:46.053579,0.001813,udp,89.146.157.168,10013.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,559,499,60,279.5,0.8926654740608229,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:49.037729,0.000315,udp,147.32.84.138,54470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:49.554057,0.018822,tcp,147.32.84.170,51119.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:11:50.535119,0.008241,tcp,91.93.151.6,80.0,->,147.32.86.220,57213.0,SA_R,0.0,0.0,2,120,60,60,60.0,0.5,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:11:51.789692,115.046547,tcp,147.32.86.208,4790.0,->,74.125.232.197,80.0,FSPA_FSPA,0.0,0.0,11,3686,1594,2092,335.09090909090907,0.43244709712425394,9,1,flow=Background-google-analytics6,Background,-1 2011-08-17 09:11:55.087041,0.00021,udp,147.32.84.138,40126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:55.254684,0.000297,udp,147.32.85.30,62686.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,76,220,148.0,0.25675675675675674,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:11:56.509978,0.195167,udp,147.32.86.111,63488.0,<->,76.170.89.210,61808.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:11:57.119013,372.802185,tcp,147.32.86.141,1122.0,->,74.125.232.196,80.0,FSPA_FSRPA,0.0,0.0,72,33027,14261,18766,458.7083333333333,0.43179822569412907,9,1,flow=Background-google-analytics5,Background,-1 2011-08-17 09:11:59.552940,0.000274,udp,147.32.84.170,56300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:01.199644,0.000224,udp,147.32.84.170,41326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:01.201892,0.210948,tcp,147.32.84.170,33732.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:01.404187,0.323308,udp,61.218.161.151,24960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1401,136,1265,350.25,0.09707351891506068,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:12:01.597684,18.313353,tcp,147.32.86.141,1134.0,->,74.125.232.196,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,9,1,flow=Background-google-analytics5,Background,-1 2011-08-17 09:12:02.225240,0.000322,udp,147.32.84.138,47025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:02.257581,0.000298,udp,147.32.84.138,36446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:03.121078,60.939537,tcp,147.32.84.165,4518.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:12:03.641395,0.000302,udp,147.32.84.138,42018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:03.669829,0.007164,tcp,147.32.85.124,49968.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,11,3415,691,2724,310.45454545454544,0.20234260614934113,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:12:07.123384,0.246869,udp,147.32.86.155,53014.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:07.662520,0.000239,udp,147.32.84.138,44333.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:08.693693,0.000221,udp,147.32.85.25,41129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:08.750890,0.000487,udp,213.226.63.152,22666.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:12:10.496904,0.000261,udp,147.32.86.20,56300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:11.654186,0.000315,udp,147.32.84.138,33160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:11.721983,0.000287,udp,147.32.84.138,35988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:11.756667,0.000373,udp,147.32.84.138,33287.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:11.797618,0.000164,udp,147.32.84.138,47176.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:25.928363,0.515998,tcp,147.32.3.51,4905.0,->,147.32.84.46,10010.0,S_RA,0.0,0.0,4,244,124,120,61.0,0.5081967213114754,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:12:26.048392,0.000553,udp,89.190.203.199,44060.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,609,77,532,304.5,0.12643678160919541,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:12:28.190507,0.166951,tcp,147.32.86.141,1163.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,3714,1271,2443,412.6666666666667,0.3422186322024771,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:12:29.552840,0.00028,udp,147.32.84.170,43324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:30.959480,0.000288,udp,147.32.86.194,56669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,74,170,122.0,0.30327868852459017,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:31.200018,0.000236,udp,147.32.84.170,34237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:31.201184,0.225366,tcp,147.32.84.170,33736.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:31.637338,0.248034,udp,147.32.84.134,43548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:12:33.687232,0.00067,tcp,147.32.86.96,35828.0,->,147.32.87.5,524.0,_FSPA,,0.0,4,252,0,252,63.0,0.0,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:12:39.478526,0.000265,udp,147.32.84.138,38430.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:39.554020,0.018855,tcp,147.32.84.170,46295.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:12:43.260012,0.674002,udp,147.32.87.48,1112.0,->,147.32.87.126,161.0,INT,0.0,,76,9996,9996,0,131.52631578947367,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:12:44.574503,0.00032,udp,147.32.84.138,43532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:44.592324,0.000242,udp,147.32.84.138,33592.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:44.684906,0.000368,udp,147.32.84.138,51581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:44.855392,0.000166,udp,147.32.84.138,40087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:45.007204,0.000411,udp,147.32.84.138,57674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:46.874920,79.303268,udp,94.156.155.216,26021.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:12:54.610112,0.000214,udp,147.32.84.138,53619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:54.993225,0.000555,udp,147.32.85.25,57021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:55.440866,0.000146,udp,147.32.84.164,38130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,91,165,128.0,0.35546875,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:12:55.442134,240.139343,tcp,147.32.84.164,47310.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,25,5199,2488,2711,207.96,0.47855356799384496,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:12:58.060261,0.000415,udp,147.32.85.47,53602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,312,77,235,156.0,0.2467948717948718,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:12:59.497899,7e-06,tcp,199.59.164.114,80.0,?>,147.32.86.12,41283.0,A_,0.0,,2,120,120,0,60.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:12:59.524699,1944.627197,udp,147.32.86.208,11289.0,<->,88.87.30.109,53352.0,CON,0.0,0.0,4,262,142,120,65.5,0.5419847328244275,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:01.886524,0.000222,udp,147.32.84.138,47338.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:02.200460,0.000264,udp,147.32.84.170,34687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:03.722748,0.000299,udp,147.32.86.148,40013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,90,140,115.0,0.391304347826087,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:03.748448,60.939396,tcp,147.32.84.165,4519.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:13:05.135077,0.000206,udp,147.32.84.138,34919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:07.485065,0.000341,udp,147.32.86.111,64349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,272,80,192,136.0,0.29411764705882354,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:09.552875,0.00037,udp,147.32.84.170,37178.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:09.562731,0.000352,udp,147.32.84.138,36085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:10.552447,0.003834,udp,69.117.255.3,47877.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2936,60,2876,734.0,0.020435967302452316,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:13.525128,0.261908,tcp,147.32.84.170,42116.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:13.779502,0.293909,tcp,147.32.84.170,42118.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:14.074592,0.000544,udp,85.26.241.130,47830.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,611,76,535,305.5,0.12438625204582651,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:14.164212,0.004287,tcp,147.32.85.30,49163.0,->,89.202.157.196,80.0,FSPA_FSPA,0.0,0.0,12,3240,2709,531,270.0,0.8361111111111111,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:13:14.457019,0.000247,udp,147.32.84.59,37361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,76,143,109.5,0.3470319634703196,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:15.673650,0.000373,udp,147.32.86.111,59926.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,75,164,119.5,0.3138075313807531,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:16.756254,0.000259,udp,147.32.84.138,58232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:18.328927,0.000243,udp,147.32.84.59,36767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,94,144,119.0,0.3949579831932773,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:18.387950,0.000415,udp,147.32.84.138,48981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:18.393339,0.000288,udp,147.32.86.111,51823.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:18.405144,0.000418,udp,147.32.84.59,47517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,83,158,120.5,0.34439834024896265,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:19.862234,0.000266,udp,147.32.84.138,33927.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:22.013712,0.000175,udp,147.32.84.138,49404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:22.193616,0.000155,udp,147.32.86.148,40610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,86,136,111.0,0.38738738738738737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:22.733464,0.000338,udp,147.32.84.138,36591.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:25.549419,104.359734,tcp,147.32.86.111,1199.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,36,25912,9455,16457,719.7777777777778,0.3648888545847484,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:13:29.554326,0.018426,tcp,147.32.84.170,52701.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:29.650131,44.999691,tcp,66.249.67.105,56518.0,->,147.32.86.52,80.0,S_,0.0,,5,370,370,0,74.0,1.0,9,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:13:31.748881,0.205465,tcp,147.32.86.20,3149.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,36,28327,969,27358,786.8611111111111,0.03420764641508102,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:13:33.191879,0.237306,udp,94.82.37.94,51765.0,<->,147.32.86.24,31002.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:33.240445,0.00058,udp,41.59.0.141,64445.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,229,167,62,114.5,0.7292576419213974,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:34.635091,0.000412,udp,77.49.195.162,62992.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:35.979435,0.028223,udp,176.14.177.129,18347.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,539,74,465,269.5,0.137291280148423,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:39.943728,0.000363,udp,147.32.84.138,55698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:40.028129,0.000202,udp,147.32.84.138,44766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:40.261839,0.000239,udp,147.32.84.134,51066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,192,68,124,96.0,0.3541666666666667,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.265390,0.067247,tcp,147.32.84.134,53445.0,->,194.79.52.193,80.0,FSPA_FSPA,0.0,0.0,9,1450,934,516,161.11111111111111,0.6441379310344828,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.334357,19.935877,tcp,147.32.84.134,49085.0,->,194.79.52.192,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.440631,0.000169,udp,147.32.84.134,45132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.496218,0.000296,udp,147.32.84.134,52623.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.498626,0.01626,tcp,147.32.84.134,54210.0,->,194.79.54.61,80.0,FSPA_FSPA,0.0,0.0,10,1408,864,544,140.8,0.6136363636363636,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.646851,0.000462,udp,147.32.84.134,58489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.647782,0.004433,tcp,147.32.84.134,51419.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2057,1057,1000,228.55555555555554,0.5138551288283909,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.673297,0.002196,udp,147.32.84.134,44778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.676868,90.302765,tcp,147.32.84.134,59850.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,16,5123,1946,3177,320.1875,0.3798555533866875,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.727420,102.412102,tcp,147.32.84.134,59851.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,64,42343,6055,36288,661.609375,0.14299884278393124,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.728226,102.412155,tcp,147.32.84.134,59855.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,51,33433,3860,29573,655.5490196078431,0.11545479017736966,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.729947,0.036351,tcp,147.32.84.134,59861.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,10,2652,1066,1586,265.2,0.4019607843137255,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.738157,0.000434,udp,147.32.84.134,37859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,70,160,115.0,0.30434782608695654,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.739279,102.079552,tcp,147.32.84.134,46593.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,59,44699,5009,39690,757.6101694915254,0.11206067249826618,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.753576,0.000329,udp,147.32.84.134,57564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,77,151,114.0,0.33771929824561403,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.755509,0.000397,udp,147.32.84.134,44681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,76,166,121.0,0.3140495867768595,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.758327,0.000389,udp,147.32.84.134,39360.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.758680,0.00021,udp,147.32.84.134,53886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.759611,0.000361,udp,147.32.84.134,49461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.760630,0.000316,udp,147.32.84.134,59987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.761702,0.000212,udp,147.32.84.134,51994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.762625,0.000261,udp,147.32.84.134,44316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.764301,0.000228,udp,147.32.84.134,59268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.765264,0.000424,udp,147.32.84.134,37057.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,73,163,118.0,0.3093220338983051,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:40.765761,0.000285,udp,147.32.84.134,60944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:41.061470,0.048224,udp,147.32.84.134,58627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,79,131,105.0,0.3761904761904762,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:41.196438,0.000312,udp,147.32.84.134,43574.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:41.379510,0.000273,udp,147.32.84.134,59636.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:44.011326,0.000532,udp,147.32.86.141,1052.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,252,84,168,126.0,0.3333333333333333,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:44.964860,1762.561768,udp,147.32.84.229,13363.0,<->,61.89.48.201,58218.0,CON,0.0,0.0,6,409,226,183,68.16666666666667,0.5525672371638142,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:45.074970,0.0,tcp,147.32.84.165,4520.0,->,147.32.79.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.075190,0.0,tcp,147.32.84.165,4521.0,->,192.168.0.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.081526,0.0,tcp,147.32.84.165,4523.0,->,147.33.84.1,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.257581,0.0,tcp,147.32.84.165,4524.0,->,147.32.79.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.257781,0.0,tcp,147.32.84.165,4525.0,->,192.168.0.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.267526,0.0,tcp,147.32.84.165,4527.0,->,147.33.84.2,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.423350,932.680542,udp,113.199.168.102,39229.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,504,356,148,126.0,0.7063492063492064,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:45.457804,0.0,tcp,147.32.84.165,4528.0,->,147.32.79.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:45.457961,0.0,tcp,147.32.84.165,4529.0,->,192.168.0.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:46.069869,0.0,tcp,147.32.84.165,4531.0,->,147.33.84.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:46.107320,0.000293,udp,147.32.84.138,55013.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:46.557551,9.010034,tcp,147.32.85.26,63855.0,->,88.83.169.30,45290.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:13:47.170364,0.0,tcp,147.32.84.165,4533.0,->,192.168.0.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:49.553260,0.000405,udp,147.32.84.170,60950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:50.579825,0.000183,udp,147.32.84.138,45626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:52.221629,0.078641,udp,147.32.84.59,39195.0,<->,95.92.146.53,26676.0,CON,0.0,0.0,2,567,82,485,283.5,0.14462081128747795,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:13:52.563546,0.009672,tcp,147.32.84.134,47048.0,->,194.79.52.204,80.0,FSPA_FSPA,0.0,0.0,9,1932,1167,765,214.66666666666666,0.6040372670807453,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.652783,0.002225,udp,147.32.84.134,55696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.656302,0.010415,tcp,147.32.84.134,45792.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,1707,1042,665,189.66666666666666,0.6104276508494435,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.670056,17.600222,tcp,147.32.84.134,46609.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.703159,0.000392,udp,147.32.84.134,56081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,72,146,109.0,0.3302752293577982,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.705087,0.000566,udp,147.32.84.134,40923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,72,163,117.5,0.30638297872340425,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.705119,0.000631,udp,147.32.84.134,54435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,71,200,135.5,0.26199261992619927,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.707726,17.572538,tcp,147.32.84.134,55012.0,->,195.168.10.171,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.731745,0.000627,udp,147.32.84.134,35781.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.732964,0.00031,udp,147.32.84.134,39840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,76,132,104.0,0.36538461538461536,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.873375,0.000203,udp,147.32.84.134,44137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.918716,0.004573,tcp,147.32.84.134,48145.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1957,1093,864,217.44444444444446,0.5585079202861523,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.962031,0.000239,udp,147.32.84.134,53532.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:52.997987,0.000299,udp,147.32.84.134,48820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,84,162,123.0,0.34146341463414637,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:53.057756,0.000351,udp,147.32.84.134,37730.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:53.133584,247.159973,tcp,147.32.84.134,50304.0,->,74.125.232.207,80.0,FSPA_FSRPA,0.0,0.0,21,2808,1816,992,133.71428571428572,0.6467236467236467,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:53.133698,0.000248,udp,147.32.84.134,58678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,88,178,133.0,0.3308270676691729,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:13:54.522495,0.000489,udp,166.137.137.132,31123.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:13:55.009099,14.894768,tcp,147.32.86.141,1222.0,->,90.183.38.11,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:13:57.099760,0.384364,tcp,147.32.86.148,46733.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,10,1719,838,881,171.9,0.4874927283304247,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:13:57.574354,0.000645,udp,147.32.84.138,44566.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:58.687167,0.0,tcp,147.32.84.165,4755.0,->,147.32.79.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:58.687233,0.0,tcp,147.32.84.165,4753.0,->,147.33.84.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:58.687290,0.0,tcp,147.32.84.165,4754.0,->,192.168.0.59,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:58.687296,0.0,tcp,147.32.84.165,4757.0,->,147.32.79.60,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:59.056478,0.045383,udp,147.32.84.189,53126.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,77,209,143.0,0.2692307692307692,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:13:59.287767,0.0,tcp,147.32.84.165,4765.0,->,147.33.84.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:59.287788,0.0,tcp,147.32.84.165,4766.0,->,192.168.0.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:59.287792,0.0,tcp,147.32.84.165,4767.0,->,147.32.79.62,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:59.287796,0.0,tcp,147.32.84.165,4771.0,->,147.33.84.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:13:59.553636,0.000346,udp,147.32.84.170,45170.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:13:59.554787,0.018989,tcp,147.32.84.170,58160.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:01.585260,0.000215,udp,147.32.84.138,47432.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:01.597850,0.000432,udp,115.177.126.26,23655.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:14:02.201027,0.000339,udp,147.32.84.170,49529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:02.949535,0.000365,udp,147.32.84.59,35115.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,97,147,122.0,0.3975409836065574,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:07.503153,0.000367,udp,147.32.86.20,51304.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:09.553398,0.000317,udp,147.32.84.170,43142.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:09.554493,0.018056,tcp,147.32.84.170,37184.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:10.582728,0.000374,udp,147.32.84.138,37328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:10.704195,0.0,tcp,147.32.84.165,1039.0,->,192.168.0.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:10.704203,60.940163,tcp,147.32.84.165,4908.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:14:10.704245,0.0,tcp,147.32.84.165,1040.0,->,147.32.79.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:10.704352,0.0,tcp,147.32.84.165,1038.0,->,147.33.84.119,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:11.304873,0.0,tcp,147.32.84.165,1051.0,->,192.168.0.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:11.304985,0.0,tcp,147.32.84.165,1052.0,->,147.32.79.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:11.305052,0.0,tcp,147.32.84.165,1050.0,->,147.33.84.122,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:11.305179,0.0,tcp,147.32.84.165,1053.0,->,192.168.0.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:18.875641,0.000308,udp,147.32.86.20,55761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:19.553700,0.000274,udp,147.32.84.170,35944.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:20.354952,0.000309,udp,147.32.84.138,46082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:22.721647,0.0,tcp,147.32.84.165,1280.0,->,147.32.79.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:22.721778,0.0,tcp,147.32.84.165,1278.0,->,147.33.84.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:22.721880,0.0,tcp,147.32.84.165,1279.0,->,192.168.0.179,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:22.721888,0.0,tcp,147.32.84.165,1282.0,->,147.32.79.180,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:23.322025,0.0,tcp,147.32.84.165,1290.0,->,147.33.84.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:23.322238,0.0,tcp,147.32.84.165,1291.0,->,192.168.0.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:23.322246,0.0,tcp,147.32.84.165,1292.0,->,147.32.79.182,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:23.322253,0.0,tcp,147.32.84.165,1296.0,->,147.33.84.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:25.103991,0.000617,udp,91.18.161.12,1274.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,75,466,270.5,0.13863216266173753,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:14:30.689873,0.00024,udp,147.32.84.138,35020.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:30.726818,0.000314,udp,147.32.84.138,34868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:31.680924,0.000184,udp,147.32.84.138,35470.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:32.200990,0.228536,tcp,147.32.84.170,52170.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:34.739115,0.0,tcp,147.32.84.165,1519.0,->,192.168.0.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:34.739122,0.0,tcp,147.32.84.165,1520.0,->,147.32.79.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:34.739173,0.0,tcp,147.32.84.165,1518.0,->,147.33.84.239,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:35.340012,0.0,tcp,147.32.84.165,1531.0,->,192.168.0.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:35.340083,0.0,tcp,147.32.84.165,1532.0,->,147.32.79.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:35.340088,0.0,tcp,147.32.84.165,1530.0,->,147.33.84.242,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:35.340185,0.0,tcp,147.32.84.165,1533.0,->,192.168.0.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:39.021050,0.000376,udp,147.32.84.138,43749.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:39.555866,0.000338,udp,147.32.84.170,54452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:40.389222,0.001167,tcp,147.32.87.249,1931.0,->,147.32.87.3,524.0,_FSPA,,0.0,4,244,0,244,61.0,0.0,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:14:44.331771,0.00051,udp,147.32.85.124,54830.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,629,81,548,314.5,0.1287758346581876,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:46.756574,0.0,tcp,147.32.84.165,1715.0,->,147.32.80.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:46.756589,0.0,tcp,147.32.84.165,1714.0,->,192.168.1.45,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:46.756594,0.0,tcp,147.32.84.165,1717.0,->,147.32.80.46,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:47.357196,0.0,tcp,147.32.84.165,1723.0,->,192.168.1.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:47.357243,0.0,tcp,147.32.84.165,1724.0,->,147.32.80.48,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:47.357363,0.0,tcp,147.32.84.165,1725.0,->,192.168.1.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:47.357375,0.0,tcp,147.32.84.165,1726.0,->,147.32.80.49,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:49.554934,0.000358,udp,147.32.84.170,35194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:49.557045,0.018502,tcp,147.32.84.170,39002.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:14:50.066974,0.000183,udp,147.32.84.138,38262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:50.149447,0.000281,udp,147.32.84.138,42053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:50.469526,1562.039673,udp,90.188.111.169,24980.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,6407,586,5821,640.7,0.09146246293116904,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:14:51.641628,0.000104,udp,134.100.136.111,60356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,165,105,60,82.5,0.6363636363636364,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:14:52.262382,17.726442,tcp,147.32.86.155,52801.0,->,147.32.192.47,80.0,FSPA_FSPA,0.0,0.0,11,1800,947,853,163.63636363636363,0.5261111111111111,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:14:53.389188,0.001914,udp,147.32.85.124,55679.0,<->,147.32.1.20,53.0,CON,0.0,0.0,2,252,73,179,126.0,0.2896825396825397,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:55.244315,606.170349,udp,152.78.75.87,10797.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:14:55.515670,0.000456,udp,147.32.84.59,38762.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:14:58.773676,0.0,tcp,147.32.84.165,1894.0,->,192.168.1.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:58.773690,0.0,tcp,147.32.84.165,1895.0,->,147.32.80.105,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:58.773777,0.0,tcp,147.32.84.165,1896.0,->,192.168.1.106,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:59.374026,0.0,tcp,147.32.84.165,1904.0,->,147.32.80.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:59.374159,0.0,tcp,147.32.84.165,1903.0,->,192.168.1.108,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:14:59.374215,0.0,tcp,147.32.84.165,1906.0,->,147.32.80.109,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:00.879112,0.000275,udp,147.32.84.138,32866.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:01.312980,1616.393066,udp,112.167.153.80,21973.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1192,368,824,119.2,0.3087248322147651,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:15:05.191564,0.000461,udp,147.32.86.20,54110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:07.557546,9.002999,tcp,147.32.85.26,63874.0,->,84.42.157.166,12107.0,S_,0.0,,3,194,194,0,64.66666666666667,1.0,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:15:09.552988,0.00046,udp,147.32.84.170,43137.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:09.554187,0.017719,tcp,147.32.84.170,37192.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:09.866613,577.660522,udp,180.218.24.16,19129.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3170,227,2943,528.3333333333334,0.07160883280757098,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:15:10.028786,0.000383,udp,147.32.85.119,50381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:10.790653,0.0,tcp,147.32.84.165,2075.0,->,192.168.1.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:10.790721,0.0,tcp,147.32.84.165,2076.0,->,147.32.80.165,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:10.790785,0.0,tcp,147.32.84.165,2077.0,->,192.168.1.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:10.790789,0.0,tcp,147.32.84.165,2078.0,->,147.32.80.166,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:11.391585,0.0,tcp,147.32.84.165,2084.0,->,192.168.1.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:11.391657,60.955612,tcp,147.32.84.165,2113.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:15:11.391665,0.0,tcp,147.32.84.165,2085.0,->,147.32.80.168,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:11.391768,0.0,tcp,147.32.84.165,2086.0,->,192.168.1.169,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:13.454080,89.434357,tcp,147.32.85.26,63883.0,->,94.127.76.70,80.0,SRPA_FSPA,0.0,0.0,21,11260,1507,9753,536.1904761904761,0.13383658969804618,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:14.086748,0.000262,udp,147.32.84.189,44392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:16.134353,0.006693,udp,147.32.85.119,54922.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,87,159,123.0,0.35365853658536583,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:19.551958,0.000338,udp,147.32.84.170,42744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:19.552819,0.000302,udp,147.32.84.170,48018.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:19.584287,0.033602,udp,147.32.85.30,63652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,288,95,193,144.0,0.3298611111111111,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:20.664261,0.0003,udp,147.32.84.138,52961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:20.668050,0.000361,udp,147.32.84.138,42282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:20.720034,0.00029,udp,147.32.84.138,38711.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:22.253785,0.170329,tcp,147.32.86.20,3239.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,68,61181,1573,59608,899.7205882352941,0.02571059642699531,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:22.807997,0.0,tcp,147.32.84.165,2257.0,->,147.32.80.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:22.808203,0.0,tcp,147.32.84.165,2256.0,->,192.168.1.225,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:22.808217,0.0,tcp,147.32.84.165,2259.0,->,147.32.80.226,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:23.408730,0.0,tcp,147.32.84.165,2265.0,->,192.168.1.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:23.408866,0.0,tcp,147.32.84.165,2266.0,->,147.32.80.228,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:23.408960,0.0,tcp,147.32.84.165,2267.0,->,192.168.1.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:23.409017,0.0,tcp,147.32.84.165,2268.0,->,147.32.80.229,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:23.591684,0.000291,udp,147.32.84.138,54875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:25.249985,0.807124,udp,147.32.85.119,57381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,277,82,195,138.5,0.296028880866426,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:26.097864,0.000188,udp,147.32.84.138,37479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:29.552180,0.000384,udp,147.32.84.170,59697.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:29.553103,0.000286,udp,147.32.84.170,44698.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:29.554100,0.018865,tcp,147.32.84.170,37194.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:31.686815,18.606052,tcp,147.32.86.89,2607.0,->,77.75.77.20,80.0,FSPA_FSPA,0.0,0.0,26,13416,4598,8818,516.0,0.34272510435301135,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:31.998939,0.000413,udp,147.32.85.26,52785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:33.199168,0.000217,udp,147.32.84.170,58615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:34.825981,0.0,tcp,147.32.84.165,2406.0,->,147.32.81.31,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:34.825991,0.0,tcp,147.32.84.165,2407.0,->,147.32.81.32,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:34.827657,0.0,tcp,147.32.84.165,2409.0,->,147.32.81.33,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:35.270651,0.000239,udp,147.32.84.138,43558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:35.426574,0.0,tcp,147.32.84.165,2412.0,->,147.32.81.34,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:35.426642,0.0,tcp,147.32.84.165,2413.0,->,147.32.81.35,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:39.130753,0.00048,udp,88.101.97.241,28160.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,231,169,62,115.5,0.7316017316017316,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:15:39.552210,0.010244,udp,147.32.84.170,42306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:39.563952,0.018423,tcp,147.32.84.170,37196.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:43.250621,0.000282,udp,147.32.85.119,54858.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,80,175,127.5,0.3137254901960784,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:43.492069,0.000234,udp,147.32.84.59,45802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,332,86,246,166.0,0.25903614457831325,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:43.551774,0.000242,udp,147.32.84.59,50947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.429536,0.000303,udp,147.32.84.138,44839.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.447311,0.000233,udp,147.32.84.138,38969.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.487070,0.000374,udp,147.32.84.138,55183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.499848,0.000202,udp,147.32.84.138,46399.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.527299,0.000238,udp,147.32.84.138,53228.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:44.839905,0.000398,udp,147.32.84.181,53696.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:46.842916,0.0,tcp,147.32.84.165,2526.0,->,147.32.81.91,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:46.843094,0.0,tcp,147.32.84.165,2527.0,->,147.32.81.92,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:46.843206,0.0,tcp,147.32.84.165,2529.0,->,147.32.81.93,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:47.443911,0.0,tcp,147.32.84.165,2532.0,->,147.32.81.94,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:47.444001,0.0,tcp,147.32.84.165,2533.0,->,147.32.81.95,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:47.445728,0.0,tcp,147.32.84.165,2535.0,->,147.32.81.96,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:47.818019,0.558024,tcp,220.181.51.155,3484.0,->,147.32.84.130,80.0,SRPA_FSPA,0.0,0.0,10,1672,554,1118,167.2,0.33133971291866027,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:47.959984,15.868997,tcp,147.32.85.26,63964.0,->,94.127.72.70,80.0,FSPA_FSPA,0.0,0.0,27,16696,1638,15058,618.3703703703703,0.09810733109726881,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:49.553019,0.000344,udp,147.32.84.170,57359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:15:51.304988,0.024426,udp,147.32.84.229,13363.0,<->,78.141.179.9,443.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:15:56.497851,0.000317,udp,147.32.84.181,50495.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,71,182,126.5,0.28063241106719367,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:56.531259,15.536613,tcp,147.32.86.89,2653.0,->,77.75.76.72,80.0,FSPA_FSPA,0.0,0.0,34,18071,11341,6730,531.5,0.627580100713851,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:15:58.751578,0.000192,udp,147.32.84.138,38190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:58.860018,0.0,tcp,147.32.84.165,2646.0,->,147.32.81.151,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:58.860066,0.0,tcp,147.32.84.165,2647.0,->,147.32.81.152,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:58.861518,0.002277,udp,147.32.84.181,59242.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,83,186,134.5,0.30855018587360594,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:15:59.461324,0.0,tcp,147.32.84.165,2652.0,->,147.32.81.154,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:59.461415,0.0,tcp,147.32.84.165,2653.0,->,147.32.81.155,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:59.461526,0.0,tcp,147.32.84.165,2655.0,->,147.32.81.156,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:15:59.552255,0.000352,udp,147.32.84.170,53766.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:00.065268,44.999966,tcp,66.249.67.105,53011.0,->,147.32.86.52,80.0,S_,0.0,,5,370,370,0,74.0,1.0,9,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:16:00.569201,0.000396,udp,147.32.84.138,38072.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:03.546664,0.000577,udp,147.32.84.138,44139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:05.028628,0.000295,udp,147.32.84.138,57482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:05.059088,0.000185,udp,147.32.84.138,44727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:05.084246,0.000339,udp,147.32.84.138,56208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:05.242699,0.000216,udp,147.32.85.34,60550.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:06.015864,0.000304,udp,147.32.84.138,37351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:07.831784,0.000263,udp,147.32.84.138,57132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:07.906714,4.2e-05,udp,147.32.84.138,39296.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:07.940503,0.000231,udp,147.32.84.138,58465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:08.034754,0.05763,udp,147.32.84.189,57214.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,75,297,186.0,0.20161290322580644,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:09.370067,0.45886,tcp,147.32.86.27,1131.0,->,147.32.87.54,2222.0,_FSPA,,0.0,96,6472,0,6472,67.41666666666667,0.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:09.553074,0.000383,udp,147.32.84.170,49431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:09.849108,0.779979,tcp,147.32.86.194,2545.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,42,29115,2093,27022,693.2142857142857,0.0718873432938348,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:10.877340,0.0,tcp,147.32.84.165,2766.0,->,147.32.81.211,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:10.877397,0.0,tcp,147.32.84.165,2767.0,->,147.32.81.212,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:11.478335,0.0,tcp,147.32.84.165,2772.0,->,147.32.81.214,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:11.478476,0.0,tcp,147.32.84.165,2773.0,->,147.32.81.215,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:11.478592,0.0,tcp,147.32.84.165,2775.0,->,147.32.81.216,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:11.626971,1.222072,tcp,147.32.86.135,2655.0,->,88.146.119.120,80.0,FSRPA_FSPA,0.0,0.0,10,2064,1262,802,206.4,0.6114341085271318,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:12.882841,0.003449,udp,111.255.6.116,54797.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2935,60,2875,733.75,0.020442930153321975,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:12.954686,0.000349,udp,147.32.86.194,64353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,83,202,142.5,0.2912280701754386,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:15.557117,2.636033,tcp,147.32.85.26,64007.0,->,178.40.77.207,20308.0,FSPA_FSPA,0.0,0.0,18,2737,1356,1381,152.05555555555554,0.49543295579101204,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:16.550394,0.003411,udp,62.107.192.10,44124.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2934,60,2874,733.5,0.02044989775051125,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:17.027658,0.000293,udp,147.32.84.138,52088.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:17.926132,0.000326,udp,147.32.84.138,44277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:19.555040,0.000435,udp,147.32.84.170,46751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:19.555998,0.000349,udp,147.32.84.170,39065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:22.894871,60.940208,tcp,147.32.84.165,2797.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:16:22.894885,0.0,tcp,147.32.84.165,2887.0,->,147.32.82.17,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:22.894890,0.0,tcp,147.32.84.165,2888.0,->,147.32.82.18,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:23.496150,0.0,tcp,147.32.84.165,2893.0,->,147.32.82.20,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:23.496241,0.0,tcp,147.32.84.165,2894.0,->,147.32.82.21,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:23.496317,0.0,tcp,147.32.84.165,2896.0,->,147.32.82.22,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:25.118128,0.001479,udp,91.207.88.239,63158.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,521,461,60,260.5,0.8848368522072937,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:28.375071,0.000235,udp,147.32.84.138,44793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:28.466425,0.000231,udp,147.32.84.138,44324.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:30.448676,0.000284,udp,147.32.84.138,36412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:33.758332,0.001595,udp,147.32.84.181,57099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,73,139,106.0,0.3443396226415094,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:33.779487,0.000505,icmp,147.32.86.96,,<-,147.32.87.51,19992.0,RED,,0.0,2,196,0,196,98.0,0.0,9,0,flow=Background,Background,-1 2011-08-17 09:16:34.911876,0.0,tcp,147.32.84.165,3006.0,->,147.32.87.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:34.911985,0.0,tcp,147.32.84.165,3007.0,->,147.32.82.77,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:34.912041,0.0,tcp,147.32.84.165,3009.0,->,147.32.87.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:34.912099,0.0,tcp,147.32.84.165,3008.0,->,147.32.82.78,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:34.912156,0.0,tcp,147.32.84.165,3011.0,->,147.32.87.79,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:34.988800,343.31427,udp,31.162.40.185,52277.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1081,542,539,270.25,0.5013876040703052,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:35.512811,0.0,tcp,147.32.84.165,3013.0,->,147.32.82.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:35.512880,0.0,tcp,147.32.84.165,3012.0,->,147.32.87.80,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:35.512941,0.0,tcp,147.32.84.165,3014.0,->,147.32.82.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:35.512948,0.0,tcp,147.32.84.165,3015.0,->,147.32.87.81,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:35.513001,0.0,tcp,147.32.84.165,3016.0,->,147.32.82.82,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:35.919679,0.000251,udp,147.32.84.138,37477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:39.552208,0.000386,udp,147.32.84.170,49627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:39.554298,0.017926,tcp,147.32.84.170,58182.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:44.327514,21.182417,udp,147.32.84.229,13363.0,<->,70.27.6.178,53133.0,CON,0.0,0.0,4,750,629,121,187.5,0.8386666666666667,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:45.055130,3.511477,tcp,147.32.86.194,2626.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,48,33960,4149,29811,707.5,0.1221731448763251,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:46.607784,0.000262,udp,147.32.84.138,37964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:46.929589,0.0,tcp,147.32.84.165,3127.0,->,147.32.82.137,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:46.929650,0.0,tcp,147.32.84.165,3128.0,->,147.32.82.138,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:47.454155,0.00024,udp,147.32.86.111,59150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,76,284,180.0,0.2111111111111111,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:47.530407,0.0,tcp,147.32.84.165,3133.0,->,147.32.82.140,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:47.530423,0.0,tcp,147.32.84.165,3134.0,->,147.32.82.141,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:47.530538,0.0,tcp,147.32.84.165,3136.0,->,147.32.82.142,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:48.156039,0.087546,tcp,147.32.86.194,2650.0,->,81.95.101.10,80.0,FSPA_FSPA,0.0,0.0,14,6901,1130,5771,492.92857142857144,0.16374438487175771,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:16:49.553082,0.000392,udp,147.32.84.170,58101.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:49.554207,0.018251,tcp,147.32.84.170,58183.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:16:52.500253,0.000606,udp,147.32.85.119,62688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,74,195,134.5,0.275092936802974,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:57.377883,0.000725,udp,95.190.121.215,47333.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,535,72,463,267.5,0.13457943925233645,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:16:58.060726,0.000225,udp,147.32.84.138,36408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:16:58.947167,0.0,tcp,147.32.84.165,3247.0,->,147.32.82.197,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:58.947228,0.0,tcp,147.32.84.165,3248.0,->,147.32.82.198,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:59.547854,0.0,tcp,147.32.84.165,3253.0,->,147.32.82.200,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:59.547991,0.0,tcp,147.32.84.165,3254.0,->,147.32.82.201,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:59.548003,0.0,tcp,147.32.84.165,3256.0,->,147.32.82.202,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:16:59.704341,0.000198,udp,147.32.84.138,55542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:00.113658,0.002049,udp,147.32.85.119,64900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,80,214,147.0,0.272108843537415,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:03.959340,0.000376,udp,147.32.84.138,60140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:04.833385,0.000231,udp,147.32.84.138,49499.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:06.398673,0.000248,udp,147.32.84.138,44820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:06.534762,0.000181,udp,147.32.84.138,47200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:07.078197,0.002669,udp,147.32.84.59,53135.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:08.682662,0.000231,udp,147.32.84.138,59801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:08.957904,0.000339,udp,147.32.84.134,34386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,73,120,96.5,0.37823834196891193,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:17:09.309804,0.000486,udp,147.32.84.134,54990.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,77,124,100.5,0.38308457711442784,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:17:09.312187,0.729795,tcp,147.32.84.134,37288.0,->,174.143.250.23,80.0,FSPA_FSPA,0.0,0.0,13,1936,907,1029,148.92307692307693,0.4684917355371901,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:17:09.499818,0.00026,udp,147.32.84.138,58516.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:09.730032,0.000205,udp,147.32.84.138,35063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:09.771677,0.000278,udp,147.32.84.138,36504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:09.796155,0.000372,udp,147.32.84.138,58579.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:10.004238,0.000477,udp,151.42.110.232,14000.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:17:10.097918,11.78232,tcp,147.32.86.135,2677.0,->,88.146.119.120,80.0,FSPA_FSPA,0.0,0.0,12,2056,1270,786,171.33333333333334,0.617704280155642,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:17:10.305465,0.000128,udp,147.32.84.130,35408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,274,112,162,137.0,0.40875912408759124,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:10.964161,0.0,tcp,147.32.84.165,3366.0,->,147.32.88.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:10.964221,0.0,tcp,147.32.84.165,3367.0,->,147.32.83.3,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:10.964268,0.0,tcp,147.32.84.165,3369.0,->,147.32.88.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:10.964274,0.0,tcp,147.32.84.165,3368.0,->,147.32.83.4,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:10.964330,0.0,tcp,147.32.84.165,3371.0,->,147.32.88.5,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.564868,0.0,tcp,147.32.84.165,3373.0,->,147.32.83.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.564938,0.0,tcp,147.32.84.165,3372.0,->,147.32.88.6,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.564950,0.0,tcp,147.32.84.165,3374.0,->,147.32.83.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.564990,0.0,tcp,147.32.84.165,3375.0,->,147.32.88.7,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.565037,0.0,tcp,147.32.84.165,3376.0,->,147.32.83.8,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:11.907321,0.000384,udp,147.32.84.138,33662.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:13.448792,0.000414,udp,196.215.151.155,51046.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:17:14.620003,0.000207,udp,147.32.86.148,37962.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,73,210,141.5,0.2579505300353357,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:15.140580,1260.108521,udp,88.103.59.231,10034.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,1722,1443,279,143.5,0.837979094076655,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:17:15.380808,0.000301,udp,147.32.84.138,33914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:17.076564,0.000343,udp,147.32.84.170,33008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:17.087563,240.038315,tcp,147.32.84.170,35030.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,26,2493,1397,1096,95.88461538461539,0.560369033293221,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:17.092991,250.03389,tcp,147.32.84.170,35032.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:17.093838,250.032852,tcp,147.32.84.170,35033.0,->,209.85.148.147,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:18.757829,4.999406,udp,220.248.102.62,29444.0,->,147.32.84.229,49153.0,INT,0.0,,2,184,184,0,92.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:17:18.793766,0.000356,udp,147.32.84.138,53017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:19.553192,0.000394,udp,147.32.84.170,46480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:19.596259,0.000493,udp,147.32.84.138,38943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:19.609986,0.000212,udp,147.32.84.138,47776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:19.838989,0.998207,tcp,147.32.84.59,49504.0,->,63.245.209.92,443.0,FSPA_FSPA,0.0,0.0,17,5124,1793,3331,301.4117647058824,0.34992193598750976,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:17:20.519838,0.000275,udp,147.32.84.138,38792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:20.900137,0.000242,udp,147.32.84.138,40025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:20.949452,0.000273,udp,147.32.84.138,50041.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:21.852345,0.575818,tcp,193.220.57.193,2432.0,->,147.32.84.229,443.0,SR_SA,0.0,0.0,3,184,122,62,61.333333333333336,0.6630434782608695,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:17:22.981811,0.0,tcp,147.32.84.165,3487.0,->,147.32.88.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:22.981903,0.0,tcp,147.32.84.165,3488.0,->,147.32.83.63,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:22.981952,0.0,tcp,147.32.84.165,3490.0,->,147.32.88.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:22.981959,0.0,tcp,147.32.84.165,3489.0,->,147.32.83.64,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:22.982005,0.0,tcp,147.32.84.165,3492.0,->,147.32.88.65,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.481061,0.002255,udp,147.32.86.111,54133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,73,139,106.0,0.3443396226415094,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:23.582464,60.940399,tcp,147.32.84.165,3513.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:17:23.582526,0.0,tcp,147.32.84.165,3494.0,->,147.32.83.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.582538,0.0,tcp,147.32.84.165,3493.0,->,147.32.88.66,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.582626,0.0,tcp,147.32.84.165,3495.0,->,147.32.83.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.582633,0.0,tcp,147.32.84.165,3496.0,->,147.32.88.67,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.582699,0.0,tcp,147.32.84.165,3497.0,->,147.32.83.68,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:23.955994,0.000226,udp,147.32.84.138,45526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:24.449758,0.000165,udp,147.32.84.138,38482.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:24.840216,0.000205,udp,147.32.84.138,38594.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:27.289970,0.000414,udp,147.32.84.138,43792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:27.474746,0.000294,udp,147.32.84.138,52411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:29.554274,0.017883,tcp,147.32.84.170,37216.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:29.622197,0.000437,udp,147.32.84.184,41957.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,379,78,301,189.5,0.20580474934036938,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:30.063537,0.000154,udp,147.32.84.138,56251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:30.113884,0.000325,udp,147.32.86.147,49407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:32.688592,0.041215,udp,147.32.84.59,22975.0,<->,92.235.165.53,12463.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:17:32.868115,0.000562,udp,119.235.80.189,26572.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:17:34.998772,0.0,tcp,147.32.84.165,3608.0,->,147.32.88.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:34.998865,0.0,tcp,147.32.84.165,3609.0,->,147.32.83.123,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:34.998897,0.0,tcp,147.32.84.165,3611.0,->,147.32.88.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:34.998990,0.0,tcp,147.32.84.165,3610.0,->,147.32.83.124,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:34.999071,0.0,tcp,147.32.84.165,3613.0,->,147.32.88.125,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:35.142862,0.000313,udp,147.32.84.21,52108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:35.599563,0.0,tcp,147.32.84.165,3615.0,->,147.32.83.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:35.599724,0.0,tcp,147.32.84.165,3614.0,->,147.32.88.126,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:35.599794,0.0,tcp,147.32.84.165,3616.0,->,147.32.83.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:35.599806,0.0,tcp,147.32.84.165,3617.0,->,147.32.88.127,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:35.599869,0.0,tcp,147.32.84.165,3618.0,->,147.32.83.128,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:37.877006,0.000303,udp,147.32.84.138,43995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:39.553204,0.000373,udp,147.32.84.170,33487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:39.554296,0.018291,tcp,147.32.84.170,58196.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:39.944090,0.00027,udp,147.32.84.138,45863.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:40.802077,0.012925,tcp,147.32.85.74,52114.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:17:44.248509,10.029677,tcp,147.32.84.21,58515.0,->,93.185.110.34,80.0,FSPA_FSPA,0.0,0.0,26,14081,2757,11324,541.5769230769231,0.1957957531425325,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:17:44.311158,0.96063,tcp,147.32.86.194,2733.0,->,77.75.72.68,80.0,FSPA_FSPA,0.0,0.0,43,32098,1498,30600,746.4651162790698,0.04666957442831329,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:17:47.016376,0.0,tcp,147.32.84.165,3728.0,->,147.32.88.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.016425,0.0,tcp,147.32.84.165,3729.0,->,147.32.83.183,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.016429,0.0,tcp,147.32.84.165,3731.0,->,147.32.88.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.016486,0.0,tcp,147.32.84.165,3730.0,->,147.32.83.184,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.016494,0.0,tcp,147.32.84.165,3733.0,->,147.32.88.185,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.616649,0.0,tcp,147.32.84.165,3735.0,->,147.32.83.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.616718,0.0,tcp,147.32.84.165,3734.0,->,147.32.88.186,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.616725,0.0,tcp,147.32.84.165,3736.0,->,147.32.83.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.616775,0.0,tcp,147.32.84.165,3737.0,->,147.32.88.187,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:47.616782,0.0,tcp,147.32.84.165,3738.0,->,147.32.83.188,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:48.255232,0.000275,udp,147.32.84.138,58403.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:49.556051,0.018532,tcp,147.32.84.170,52742.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:54.599672,0.000149,udp,147.32.84.138,54356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:56.084645,0.000311,udp,147.32.84.138,50706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:57.653058,0.000243,udp,147.32.84.138,47328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:17:59.033309,0.0,tcp,147.32.84.165,3848.0,->,147.32.88.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.033372,0.0,tcp,147.32.84.165,3849.0,->,147.32.83.243,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.033376,0.0,tcp,147.32.84.165,3851.0,->,147.32.88.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.033415,0.0,tcp,147.32.84.165,3850.0,->,147.32.83.244,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.033468,0.0,tcp,147.32.84.165,3853.0,->,147.32.88.245,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.554229,0.018353,tcp,147.32.84.170,39033.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:17:59.634092,0.0,tcp,147.32.84.165,3855.0,->,147.32.83.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.634103,0.0,tcp,147.32.84.165,3854.0,->,147.32.88.246,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.634140,0.0,tcp,147.32.84.165,3856.0,->,147.32.83.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.634195,0.0,tcp,147.32.84.165,3857.0,->,147.32.88.247,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:17:59.634262,0.0,tcp,147.32.84.165,3858.0,->,147.32.83.248,135.0,S_,0.0,,1,62,62,0,62.0,1.0,9,1,flow=From-Botnet-V49-TCP-Attempt,Botnet,1 2011-08-17 09:18:05.092106,0.000379,udp,147.32.85.34,53166.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:06.191160,0.000221,udp,147.32.84.138,50099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:06.199322,0.000234,udp,147.32.84.170,34226.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:09.553244,0.000372,udp,147.32.84.170,37087.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:15.112295,0.00041,udp,147.32.84.138,34320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:17.793396,0.000493,udp,91.207.122.196,61052.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:18.117331,0.000522,udp,77.29.41.189,25703.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:24.210933,60.938805,tcp,147.32.84.165,3872.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:18:27.840851,0.000353,udp,147.32.85.30,49522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:28.948659,0.057507,udp,147.32.85.30,61070.0,<->,81.182.26.249,24959.0,CON,0.0,0.0,2,602,542,60,301.0,0.9003322259136213,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:29.066517,0.040062,udp,147.32.85.30,61070.0,<->,149.5.45.5,43011.0,CON,0.0,0.0,2,135,73,62,67.5,0.5407407407407407,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:29.238390,0.000298,udp,147.32.84.59,47886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,86,148,117.0,0.36752136752136755,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:29.552347,0.000451,udp,147.32.84.170,57531.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:29.553455,0.000391,udp,147.32.84.170,37483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:31.468357,0.018693,udp,147.32.85.30,54130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,78,123,100.5,0.3880597014925373,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:32.480861,0.000174,udp,147.32.84.138,42329.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:33.790252,0.000466,udp,85.243.106.164,51474.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,129,69,60,64.5,0.5348837209302325,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:34.854287,7.371828,tcp,147.32.86.194,2837.0,->,77.75.76.7,80.0,FSPA_FSPA,0.0,0.0,11,1322,799,523,120.18181818181819,0.6043872919818457,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:18:36.544843,0.0,udp,182.145.50.16,44833.0,->,147.32.87.218,35606.0,INT,0.0,,1,72,72,0,72.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:18:37.272879,0.003718,udp,24.67.205.58,5590.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2933,60,2873,733.25,0.020456870098874872,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:37.763231,0.000234,udp,147.32.84.138,51489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:38.171511,0.000329,udp,147.32.84.138,60775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:39.553330,0.000293,udp,147.32.84.170,57392.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:42.268110,0.000237,udp,147.32.84.138,32784.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:42.359699,0.000622,udp,87.139.175.45,34495.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:43.443204,0.000608,udp,121.220.9.101,55689.0,<->,147.32.86.155,12093.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:44.687791,0.000171,udp,147.32.85.25,34099.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:45.595053,930.436096,udp,86.24.75.16,46931.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,1058,938,120,264.5,0.8865784499054821,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:18:47.102436,0.000452,udp,147.32.84.134,34343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:47.595010,21.646515,tcp,192.162.76.7,1824.0,->,147.32.86.58,48784.0,FSPA_FSPA,0.0,0.0,20,1432,765,667,71.6,0.534217877094972,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:18:48.644097,0.000243,udp,147.32.84.134,37951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.644490,0.000199,udp,147.32.84.134,46150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.644513,19.25111,tcp,147.32.84.134,37255.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.644702,17.085833,tcp,147.32.84.134,37256.0,->,209.85.148.103,80.0,FSRPA_FSPA,0.0,0.0,33,19414,3710,15704,588.3030303030303,0.19109920675800968,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.776929,0.000454,udp,147.32.84.134,50563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.777843,0.000463,udp,147.32.84.134,36558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.790494,0.020089,udp,147.32.84.134,52485.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,610,79,531,305.0,0.12950819672131147,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.803797,0.000386,udp,147.32.84.134,38379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.815158,0.020147,udp,147.32.84.134,33542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,404,77,327,202.0,0.1905940594059406,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.836759,0.015859,udp,147.32.84.134,54408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,605,79,526,302.5,0.1305785123966942,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:48.853264,0.000369,udp,147.32.84.134,39678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:49.180129,0.000332,udp,147.32.84.134,43053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,76,181,128.5,0.29571984435797666,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:49.224054,0.027732,udp,147.32.84.134,59044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,75,169,122.0,0.3073770491803279,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:49.605469,0.000219,udp,147.32.84.134,55294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,75,137,106.0,0.35377358490566035,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:49.661725,0.000292,udp,147.32.84.134,53215.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,79,147,113.0,0.3495575221238938,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:49.723678,0.194412,udp,147.32.84.134,51303.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,531,76,455,265.5,0.1431261770244821,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:18:50.770003,123.014275,tcp,147.32.84.118,49564.0,->,209.85.148.132,443.0,FSPA_FSPA,0.0,0.0,28,15138,1706,13432,540.6428571428571,0.1126965253005681,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:18:51.560651,0.000291,udp,147.32.84.118,60492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,380,96,284,190.0,0.25263157894736843,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:51.562394,123.022903,tcp,147.32.84.118,49592.0,->,209.85.148.132,443.0,FSPA_FSPA,0.0,0.0,28,15626,2254,13372,558.0714285714286,0.14424676820683477,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:18:56.692326,0.000178,udp,147.32.84.138,42690.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:18:59.554232,0.018966,tcp,147.32.84.170,49471.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:18:59.995632,240.05899,tcp,147.32.84.170,50949.0,->,74.125.232.193,80.0,FSPA_FSPA,0.0,0.0,23,4841,2994,1847,210.47826086956522,0.6184672588308201,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:00.031680,0.000275,udp,147.32.84.170,37633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,445,89,356,222.5,0.2,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:00.174984,0.000237,udp,147.32.84.138,60033.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:01.686930,0.000277,udp,147.32.84.59,41008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,80,130,105.0,0.38095238095238093,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:02.299070,0.031926,udp,147.32.85.56,44076.0,<->,81.83.78.86,28014.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:19:03.619119,0.000168,udp,147.32.84.138,38666.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:06.078698,0.065066,udp,147.32.84.134,36051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.078706,0.121233,udp,147.32.84.134,47363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.144965,0.029371,udp,147.32.84.134,51555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,67,138,102.5,0.32682926829268294,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.175276,0.137416,udp,147.32.84.134,41737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,88,151,119.5,0.3682008368200837,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.201058,0.924132,udp,147.32.84.134,34440.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,316,79,237,158.0,0.25,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.203127,0.216766,tcp,147.32.84.170,52538.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:06.272251,0.000277,udp,147.32.84.134,58154.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,71,146,108.5,0.3271889400921659,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.313107,0.000329,udp,147.32.84.134,35560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,88,151,119.5,0.3682008368200837,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.449033,0.425574,udp,147.32.84.134,41827.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,87,146,116.5,0.37339055793991416,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.875126,0.000477,udp,147.32.84.134,59846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,87,146,116.5,0.37339055793991416,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:06.876439,0.387431,udp,147.32.84.134,55100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,87,165,126.0,0.34523809523809523,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:07.160043,0.000384,udp,147.32.84.134,58325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,77,135,106.0,0.3632075471698113,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:07.234369,0.389782,udp,147.32.84.134,54887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,84,182,133.0,0.3157894736842105,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.001949,0.167755,udp,147.32.84.134,51003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,237,91,146,118.5,0.38396624472573837,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.002019,2.151302,udp,147.32.84.134,51786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,75,148,111.5,0.336322869955157,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.286017,0.013574,udp,147.32.84.134,45886.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.300141,0.000185,udp,147.32.84.134,56570.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,190,70,120,95.0,0.3684210526315789,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.300796,0.007699,udp,147.32.84.134,33294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,173,70,103,86.5,0.4046242774566474,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.446106,0.001849,udp,147.32.84.134,45048.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,440,80,360,220.0,0.18181818181818182,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:09.555910,0.018421,tcp,147.32.84.170,34322.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:10.823200,0.000281,udp,147.32.85.89,53951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:14.189496,0.000166,udp,147.32.84.138,56586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:14.784502,0.00031,udp,147.32.84.138,37565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:16.966956,0.000176,udp,147.32.84.138,41887.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:18.594205,0.000323,udp,147.32.84.138,54546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:19.552425,0.000267,udp,147.32.84.170,35001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:19.553237,0.000311,udp,147.32.84.170,43878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:21.808748,0.106446,tcp,147.32.86.178,2432.0,->,147.32.87.4,110.0,_FSPA,,0.0,18,1396,0,1396,77.55555555555556,0.0,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:19:21.836797,0.000387,udp,147.32.84.138,48538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:24.837968,60.939842,tcp,147.32.84.165,3873.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:19:25.606745,0.000484,udp,89.204.137.243,31567.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:19:26.429994,0.000412,udp,147.32.86.135,51111.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:28.681751,0.000299,udp,147.32.84.138,55322.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:28.691878,0.000345,udp,147.32.84.138,57310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:28.726794,0.000364,udp,147.32.84.138,55206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:29.077334,0.00023,udp,147.32.84.138,45133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:32.608395,129.107925,tcp,147.32.84.134,55728.0,->,65.54.113.26,80.0,SPA_SRPA,0.0,0.0,88,71761,4462,67299,815.4659090909091,0.062178620699265615,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.012884,128.703766,tcp,147.32.84.134,55730.0,->,65.54.113.26,80.0,SPA_SRPA,0.0,0.0,24,11581,2656,8925,482.5416666666667,0.2293411622485105,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.013084,138.718811,tcp,147.32.84.134,55731.0,->,65.54.113.26,80.0,SPA_SRPA,0.0,0.0,111,99777,5090,94687,898.8918918918919,0.05101376068633052,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.013372,138.718628,tcp,147.32.84.134,55732.0,->,65.54.113.26,80.0,SPA_SRPA,0.0,0.0,113,94950,7160,87790,840.2654867256637,0.07540810953133228,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.013666,128.702652,tcp,147.32.84.134,55733.0,->,65.54.113.26,80.0,SPA_SRPA,0.0,0.0,25,10994,2728,8266,439.76,0.2481353465526651,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.089194,0.017379,udp,147.32.84.134,60255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,78,171,124.5,0.3132530120481928,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.203975,10.442659,tcp,147.32.84.59,49992.0,->,216.137.61.73,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:19:33.791274,0.038619,udp,147.32.84.134,45892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,83,147,115.0,0.36086956521739133,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.830335,0.000284,udp,147.32.84.134,57124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,83,147,115.0,0.36086956521739133,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.832000,0.105987,udp,147.32.84.134,40128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:33.939289,0.162878,udp,147.32.84.134,41258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,82,276,179.0,0.22905027932960895,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:34.009929,0.010036,udp,147.32.84.134,57514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,485,80,405,242.5,0.16494845360824742,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:34.043099,0.020288,udp,147.32.84.134,49682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,71,269,170.0,0.2088235294117647,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:34.065351,0.000179,udp,147.32.84.134,39723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:34.680721,0.000273,udp,147.32.84.138,39487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:34.747316,0.000222,udp,147.32.85.34,57947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:34.770868,0.00023,udp,147.32.84.138,45461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:34.782003,0.000327,udp,147.32.84.138,40078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:34.792498,0.000441,udp,147.32.84.138,35955.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:35.066722,16.167467,tcp,80.188.42.194,2833.0,->,147.32.84.36,443.0,FSRPA_FSPA,0.0,0.0,31,11028,3844,7184,355.741935483871,0.3485672832789264,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:19:35.753720,0.00031,udp,147.32.84.21,36682.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,74,124,99.0,0.37373737373737376,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:37.027048,0.000238,udp,147.32.85.26,52909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:37.197976,0.000352,udp,147.32.84.170,45655.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:38.058829,18.832012,tcp,147.32.84.59,49944.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:19:38.742345,0.000197,udp,147.32.84.138,50659.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:38.867687,0.000298,udp,147.32.84.138,57412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:39.555805,0.018131,tcp,147.32.84.170,35522.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:39.685569,0.000348,udp,147.32.84.138,33645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:40.391636,0.000426,udp,147.32.84.138,58706.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:41.109984,0.000446,udp,114.157.135.226,26223.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,592,77,515,296.0,0.13006756756756757,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:19:41.460503,0.000212,udp,147.32.84.138,33023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:41.475467,0.00031,udp,147.32.84.138,33460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:41.482622,0.000395,udp,147.32.84.138,38032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:42.698320,15.200073,tcp,147.32.84.134,43065.0,->,74.125.232.228,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:43.936958,0.000206,udp,147.32.84.138,44695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:45.582926,0.000502,udp,147.32.84.59,64728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,71,238,154.5,0.2297734627831715,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:45.794101,0.000151,udp,147.32.84.138,38783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:47.002967,0.000201,udp,147.32.84.138,33740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:47.036722,0.000466,udp,147.32.84.138,60648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:47.051881,0.000426,udp,147.32.84.138,33853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:47.101860,0.000246,udp,147.32.84.138,40239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:47.291997,0.000303,udp,147.32.84.138,54785.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:48.176455,0.000249,udp,147.32.84.134,45638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:48.177200,0.000339,udp,147.32.84.134,37811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:19:48.475351,23.5786,tcp,147.32.84.59,49176.0,->,178.237.25.51,80.0,SRPA_FSPA,0.0,0.0,13,2318,1708,610,178.30769230769232,0.7368421052631579,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:19:49.554552,0.01839,tcp,147.32.84.170,34327.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:52.295890,1.955459,tcp,147.32.86.89,2810.0,->,77.75.72.3,80.0,SRPA_SPA,0.0,0.0,13,3173,2423,750,244.07692307692307,0.7636306334699023,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:19:52.899640,0.000263,udp,147.32.84.138,50687.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:53.031880,0.000284,udp,147.32.84.138,34775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:53.034295,0.000395,udp,147.32.84.138,40252.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:53.712801,0.000368,udp,147.32.84.138,59404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:56.092934,0.009383,udp,147.32.84.132,57217.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,248,76,172,124.0,0.3064516129032258,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:19:56.435497,180.138199,tcp,147.32.85.30,49323.0,->,66.220.158.32,80.0,FSPA_FSPA,0.0,0.0,34,28902,3714,25188,850.0588235294117,0.1285032177703965,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:19:58.160127,0.000191,udp,147.32.84.138,43512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:59.552429,0.000456,udp,147.32.84.170,39892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:59.554569,0.01816,tcp,147.32.84.170,35524.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:19:59.632168,0.000293,udp,147.32.84.138,44436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:19:59.699526,0.000266,udp,147.32.84.138,51994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:01.364004,0.000234,udp,147.32.84.222,33639.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:05.734742,0.000574,udp,147.32.84.59,41124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,132,167,149.5,0.4414715719063545,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:05.893027,0.000293,udp,147.32.85.34,52413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,85,241,163.0,0.2607361963190184,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:05.932652,0.000268,udp,147.32.85.34,51627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:07.244983,0.000191,udp,147.32.84.138,38674.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:08.199995,0.00042,udp,147.32.84.170,41855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:09.070723,0.000375,udp,147.32.84.138,56238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:09.237611,0.000476,udp,180.22.54.168,23575.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:09.584106,0.000322,udp,147.32.84.59,52227.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,75,181,128.0,0.29296875,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:10.219358,0.000347,udp,147.32.84.138,55685.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:10.248540,0.000218,udp,147.32.84.138,46449.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:12.837696,0.00994,tcp,147.32.85.88,55518.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,9,2104,1319,785,233.77777777777777,0.6269011406844106,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:20:15.496517,0.000274,udp,95.117.224.128,27549.0,<->,147.32.86.24,31002.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:17.455564,0.000278,udp,147.32.84.138,34188.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:18.446844,407.261292,tcp,122.183.186.97,48717.0,->,147.32.84.2,80.0,SRPA_FSPA,0.0,0.0,542,513341,15386,497955,947.1236162361623,0.029972279634784674,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:20:18.942537,0.130882,udp,147.32.84.229,13363.0,<->,92.101.139.104,44468.0,CON,0.0,0.0,4,2937,60,2877,734.25,0.020429009193054137,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:19.035483,6.903499,tcp,147.32.84.59,55704.0,->,74.125.232.213,443.0,FSPA_FSPA,0.0,0.0,13,1538,1002,536,118.3076923076923,0.6514954486345904,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:20:19.738895,0.563828,tcp,147.32.84.132,58660.0,->,77.75.76.68,80.0,FSPA_FSPA,0.0,0.0,17,5912,1460,4452,347.7647058823529,0.2469553450608931,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:20:19.747418,0.0003,udp,147.32.85.34,65065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:20.284923,0.009464,udp,147.32.84.132,65337.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,194,89,105,97.0,0.4587628865979381,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:21.241681,0.00023,udp,147.32.84.138,52268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:21.571601,0.000467,udp,147.32.84.138,55090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:22.221552,0.000169,udp,147.32.84.138,53027.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:23.259686,0.000642,udp,123.21.90.125,34481.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,564,79,485,282.0,0.1400709219858156,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:25.466489,60.954529,tcp,147.32.84.165,3874.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:20:29.553263,0.000325,udp,147.32.84.170,54888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:29.555406,0.018462,tcp,147.32.84.170,34332.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:31.402663,115.059135,tcp,147.32.86.194,2884.0,->,195.113.232.91,80.0,FSPA_FSPA,0.0,0.0,10,2042,774,1268,204.2,0.37904015670910873,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:20:32.360588,0.000298,udp,147.32.84.138,49315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:32.635109,0.000242,udp,147.32.84.138,38562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:33.182185,0.000392,udp,147.32.84.165,1025.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,85,246,165.5,0.256797583081571,9,1,flow=From-Botnet-V49-UDP-DNS,Botnet,1 2011-08-17 09:20:38.208567,0.241153,tcp,147.32.84.170,52550.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:39.553229,0.010106,udp,147.32.84.170,42792.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:40.358811,0.000413,udp,147.32.84.138,36472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.387008,0.000307,udp,147.32.84.138,49671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.403127,0.000264,udp,147.32.84.138,38759.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.418840,0.000446,udp,147.32.84.138,57868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.553141,0.000273,udp,147.32.84.138,47643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.609420,0.000363,udp,147.32.84.138,59828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.643810,0.000299,udp,147.32.84.138,54443.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:40.653371,0.000404,udp,147.32.84.138,39295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:42.013811,0.213637,udp,109.160.102.77,57468.0,<->,147.32.84.184,59371.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:43.885758,0.000479,udp,78.73.87.80,40879.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,156,89,67,78.0,0.5705128205128205,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:20:45.475106,0.000207,udp,147.32.84.138,52775.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,95,170,132.5,0.3584905660377358,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:46.538131,0.000329,udp,147.32.84.138,34405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:46.641233,0.000359,udp,147.32.84.138,49124.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:47.121258,0.000232,udp,147.32.84.138,57723.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:49.537190,0.000236,udp,147.32.84.138,34825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:50.646513,0.000312,udp,147.32.84.138,44066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:51.189534,0.000302,udp,147.32.84.59,62401.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,79,174,126.5,0.31225296442687744,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:52.990651,0.000468,udp,147.32.84.170,43837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,74,144,109.0,0.3394495412844037,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:53.151426,0.000289,udp,147.32.84.138,33852.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:53.220349,0.000445,udp,147.32.84.138,53971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:53.257403,0.000257,udp,147.32.84.138,45086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:53.705342,0.000242,udp,147.32.84.138,51841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:54.396538,0.00036,udp,147.32.85.25,54900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:54.890416,1119.753662,icmp,147.32.87.1,261.0,->,147.32.87.5,37664.0,RED,0.0,,4,280,280,0,70.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:20:56.262315,0.000196,udp,147.32.84.170,60148.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,81,132,106.5,0.38028169014084506,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.262369,0.025558,udp,147.32.84.170,60719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.262580,0.000211,udp,147.32.84.170,49167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,77,138,107.5,0.3581395348837209,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.263622,0.001247,udp,147.32.84.170,39273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.264955,0.000246,udp,147.32.84.170,58985.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,77,205,141.0,0.2730496453900709,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.265264,2.663654,tcp,147.32.84.170,35865.0,->,91.189.88.33,80.0,FSPA_FSPA,0.0,0.0,41,13336,4768,8568,325.2682926829268,0.35752849430113975,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.265489,2.657276,tcp,147.32.84.170,35866.0,->,91.189.88.33,80.0,FSPA_FSPA,0.0,0.0,41,13150,4665,8485,320.7317073170732,0.3547528517110266,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.265714,2.661587,tcp,147.32.84.170,49744.0,->,91.189.92.166,80.0,FSPA_FSPA,0.0,0.0,98,46218,14547,31671,471.61224489795916,0.3147475009736466,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:20:56.696385,136.821533,tcp,147.32.85.26,64205.0,->,209.85.148.105,80.0,FSPA_FSPA,0.0,0.0,138,91662,27131,64531,664.2173913043479,0.2959896140167136,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:20:58.375685,0.000422,udp,147.32.84.138,54263.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:58.395913,0.000301,udp,147.32.84.138,56222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:58.466090,0.00032,udp,147.32.84.138,59949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:20:58.536399,0.000307,udp,147.32.84.138,52063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:03.233927,0.000583,udp,147.32.84.138,45534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:04.757933,0.000215,udp,147.32.84.138,59786.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:04.811208,0.000278,udp,147.32.84.138,52058.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:04.818501,0.000272,udp,147.32.84.138,52941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:04.855330,0.000243,udp,147.32.84.138,57667.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:09.194701,0.000331,udp,147.32.84.170,58757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:09.195905,0.214389,tcp,147.32.84.170,52562.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:09.554527,0.000449,udp,147.32.84.170,43030.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:09.555707,0.018445,tcp,147.32.84.170,34346.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:11.106259,0.000456,udp,147.32.84.170,37356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,340,81,259,170.0,0.23823529411764705,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:11.805508,0.912038,tcp,217.122.122.62,52059.0,->,147.32.84.229,443.0,SRA_SA,0.0,0.0,4,244,182,62,61.0,0.7459016393442623,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:21:12.114514,0.000237,udp,147.32.84.138,39082.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:12.155708,0.000323,udp,147.32.84.138,56092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:12.172071,0.00046,udp,147.32.84.138,58277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:13.357376,0.000438,udp,86.110.193.199,51362.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:21:15.991901,1217.201416,udp,195.91.111.184,18742.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,3103,296,2807,387.875,0.09539155655816951,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:21:16.160237,0.000259,udp,147.32.84.138,58914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:19.554147,0.000448,udp,147.32.84.170,50265.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:19.555051,0.018247,tcp,147.32.84.170,49502.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:20.032739,0.00042,udp,118.82.195.192,30827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:21:21.057159,5.540642,tcp,147.32.84.59,49525.0,->,63.245.209.152,80.0,FSPA_FSPA,0.0,0.0,10,1545,841,704,154.5,0.544336569579288,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:21:21.206448,0.000375,udp,147.32.84.138,34609.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:21.900074,0.000168,udp,147.32.84.138,52267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:21.908346,0.000303,udp,147.32.84.138,57235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:21.982308,0.000306,udp,147.32.84.138,47769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:22.001245,0.000306,udp,147.32.84.138,55461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:23.631822,123.256271,tcp,147.32.84.59,54169.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,13,4270,2127,2143,328.46153846153845,0.49812646370023417,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:21:24.415689,0.023309,udp,147.32.85.26,59855.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,450,77,373,225.0,0.1711111111111111,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:25.555832,0.000344,udp,147.32.85.25,46081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:25.577194,8e-05,udp,147.32.85.25,53971.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:25.796247,0.194954,tcp,147.32.85.26,64262.0,->,217.163.21.41,80.0,SRPA_FSPA,0.0,0.0,18,10884,5750,5134,604.6666666666666,0.5282984196986402,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:21:26.104022,60.940895,tcp,147.32.84.165,3905.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:21:29.001773,0.000325,udp,147.32.84.138,51198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:29.003433,0.000391,udp,147.32.84.138,43681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:29.006859,0.000224,udp,147.32.84.138,50787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:29.018866,0.000306,udp,147.32.84.138,59151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:29.553511,0.00031,udp,147.32.84.170,34951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:29.554406,0.000264,udp,147.32.84.170,56692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:29.896657,0.000211,udp,147.32.84.138,35884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:34.212602,0.000344,udp,147.32.84.138,33300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:34.212665,0.000288,udp,147.32.84.138,33300.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:34.228758,0.000202,udp,147.32.84.138,45379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:35.550560,0.126491,tcp,217.67.201.162,59509.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,12,3133,816,2317,261.0833333333333,0.26045323970635176,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:21:35.855003,0.0,tcp,147.32.84.59,1096.0,->,78.45.49.58,64956.0,S_,0.0,,1,78,78,0,78.0,1.0,9,0,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 09:21:38.795354,0.000295,udp,147.32.84.138,36428.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:38.809287,0.000202,udp,147.32.84.138,52238.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:38.823147,0.000205,udp,147.32.84.138,35617.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:38.831029,0.000319,udp,147.32.84.138,38650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:39.103641,0.000277,udp,147.32.84.138,51519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:39.198569,0.220759,tcp,147.32.84.170,52569.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:39.944906,0.000287,udp,147.32.84.138,38741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:40.426790,0.000324,udp,147.32.84.138,57635.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:43.471059,0.000235,udp,147.32.84.138,56949.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:44.053312,0.000294,udp,147.32.84.138,59802.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:44.080574,0.000264,udp,147.32.84.138,58435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:44.117310,0.00025,udp,147.32.84.138,53846.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:44.159970,0.000394,udp,147.32.84.138,59715.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:44.510038,0.000817,udp,202.62.98.10,60464.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,995,78,917,497.5,0.07839195979899498,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:21:46.887438,0.002125,udp,147.32.84.59,54538.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:47.511995,0.000259,udp,147.32.84.138,44773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:47.538745,0.000241,udp,147.32.84.138,50796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:47.595305,0.000266,udp,147.32.84.138,46977.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:49.556762,0.018289,tcp,147.32.84.170,46748.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:51.277687,0.000342,udp,147.32.84.138,34468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:53.211205,0.000357,udp,147.32.84.138,35629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:54.128452,0.000219,udp,147.32.84.138,46420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:55.090516,0.000373,udp,147.32.84.59,57332.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,79,174,126.5,0.31225296442687744,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:21:59.554400,0.000359,udp,147.32.84.170,48857.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:21:59.556248,0.017641,tcp,147.32.84.170,46750.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:00.872434,0.000236,udp,147.32.84.138,37648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:01.429129,0.0,icmp,217.25.224.103,259.0,->,147.32.84.229,21387.0,URH,0.0,,1,70,70,0,70.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:22:03.641532,0.000282,udp,147.32.84.138,48914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:03.659562,0.000242,udp,147.32.84.138,35096.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:03.722985,0.000345,udp,147.32.84.138,57756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:09.201988,0.00027,udp,147.32.84.170,48491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:09.203238,0.21814,tcp,147.32.84.170,52574.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:09.554808,0.000268,udp,147.32.84.170,33359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:09.892599,0.000215,udp,147.32.84.138,40931.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:09.919619,0.000291,udp,147.32.84.138,56206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:09.920238,0.000366,udp,147.32.84.138,58147.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:09.941659,0.000239,udp,147.32.84.138,56744.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:11.667352,0.000183,udp,147.32.85.25,46500.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:16.430108,0.000261,udp,147.32.84.138,47037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:16.432702,0.000165,udp,147.32.84.138,39800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:19.198863,0.000304,udp,147.32.84.59,56510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,79,174,126.5,0.31225296442687744,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:19.554536,0.000362,udp,147.32.84.170,34179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:20.407327,0.000375,udp,147.32.84.138,34231.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:20.475904,0.000198,udp,147.32.84.138,59168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:20.489385,0.000413,udp,147.32.84.59,40972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,86,196,141.0,0.3049645390070922,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:20.540157,0.000285,udp,147.32.84.138,36267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:21.958282,0.000705,udp,178.140.15.2,20221.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:22.069190,0.000257,udp,147.32.84.138,60476.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:22.807911,0.000349,udp,147.32.85.7,53102.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,76,180,128.0,0.296875,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:22.972699,0.000462,udp,212.24.174.194,46164.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:23.316674,2.007478,tcp,147.32.84.59,42492.0,->,74.125.232.205,80.0,FSRPA_FSPA,0.0,0.0,16,4937,3320,1617,308.5625,0.6724731618391736,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:22:25.504204,0.000137,udp,147.32.84.138,37388.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:26.733113,60.937996,tcp,147.32.84.165,3906.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:22:27.788585,0.000307,udp,147.32.84.138,46161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:28.317304,8.967443,tcp,83.222.166.179,3475.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:22:29.743260,0.000615,udp,209.116.218.35,9008.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,558,78,480,279.0,0.13978494623655913,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:30.853286,0.000245,udp,147.32.85.89,34924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:32.602160,40.685661,tcp,147.32.84.59,56990.0,->,72.233.69.4,80.0,FSPA_FSPA,0.0,0.0,13,3989,936,3053,306.84615384615387,0.23464527450488845,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:22:33.724409,0.000247,udp,147.32.84.59,42023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,85,167,126.0,0.3373015873015873,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:33.966571,0.000277,udp,147.32.84.59,33160.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,89,171,130.0,0.3423076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:36.591360,0.000326,udp,147.32.84.138,43583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:36.632985,0.000213,udp,147.32.84.138,55581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:38.013950,0.189899,udp,147.32.86.113,63022.0,<->,174.45.212.5,25295.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:39.554472,0.000316,udp,147.32.84.170,57770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:39.556419,0.018365,tcp,147.32.84.170,46755.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:40.206815,0.000272,udp,147.32.84.170,50558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:40.207667,0.000325,udp,147.32.84.170,54089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:40.209149,0.220044,tcp,147.32.84.170,52579.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:40.309889,0.000322,udp,147.32.84.138,37182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:40.403638,0.000268,udp,147.32.84.138,38364.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:41.144194,45.000351,tcp,66.249.67.105,36288.0,->,147.32.86.52,80.0,S_,0.0,,5,370,370,0,74.0,1.0,9,1,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:22:44.961393,0.000668,udp,74.73.161.181,44607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:47.022632,0.000343,udp,147.32.84.138,37558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:47.124530,0.000621,udp,147.32.84.138,41315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:47.133469,0.000201,udp,147.32.84.138,50086.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:47.857790,0.000371,udp,99.149.194.36,37963.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:22:49.554591,0.000524,udp,147.32.84.170,54651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:49.556746,0.018201,tcp,147.32.84.170,49516.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:22:53.909177,60.924278,tcp,59.95.55.161,3090.0,->,147.32.84.222,80.0,FSPA_FSPA,0.0,0.0,82,61403,7950,53453,748.8170731707318,0.12947250134358257,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:22:55.494646,0.000492,udp,147.32.85.34,54105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:22:59.555550,0.000394,udp,147.32.84.170,59035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:01.055335,0.000342,udp,147.32.84.138,54277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:01.360595,0.000239,udp,147.32.84.138,41634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:01.366837,0.000276,udp,147.32.84.138,46262.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:01.379752,0.000255,udp,147.32.84.138,34665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:01.393389,0.00056,udp,147.32.84.138,53393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:01.480026,0.000232,udp,147.32.84.138,55384.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:07.490583,8.939263,tcp,147.32.85.30,49363.0,->,93.184.220.20,80.0,SRPA_FSPA,0.0,0.0,10,2100,1483,617,210.0,0.7061904761904761,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:23:08.048754,0.021116,udp,147.32.84.21,58652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,87,149,118.0,0.3686440677966102,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:09.554529,0.000419,udp,147.32.84.170,55327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:09.555500,0.000387,udp,147.32.84.170,51268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:09.661366,0.000186,udp,147.32.84.138,59741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:09.682804,0.000293,udp,147.32.84.138,60194.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:09.724174,0.000215,udp,147.32.84.138,34009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:10.230673,0.000427,udp,147.32.86.148,44466.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,89,169,129.0,0.3449612403100775,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:10.393159,0.000297,udp,217.118.79.22,18130.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,128,68,60,64.0,0.53125,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:23:11.042608,0.000434,udp,147.32.86.148,38246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:11.044686,0.001983,udp,147.32.86.148,37692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,72,203,137.5,0.26181818181818184,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:11.197987,0.000427,udp,147.32.84.170,51583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:11.846986,607.830383,udp,147.32.85.26,60764.0,<->,82.212.30.82,55845.0,CON,0.0,0.0,4,488,364,124,122.0,0.7459016393442623,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:23:12.917440,10.45935,tcp,147.32.84.59,53630.0,->,92.123.64.104,80.0,FSA_FSA,0.0,0.0,8,544,338,206,68.0,0.6213235294117647,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:23:13.209890,0.000184,udp,147.32.84.59,50445.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,81,131,106.0,0.38207547169811323,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:14.797182,0.037532,udp,147.32.84.21,46830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,79,177,128.0,0.30859375,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:16.227304,0.000416,udp,147.32.84.138,39740.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:16.262064,0.000527,udp,147.32.84.138,56996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:18.151175,0.000344,udp,147.32.84.138,36782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:18.633049,0.001765,udp,178.61.135.218,22042.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,527,467,60,263.5,0.8861480075901328,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:23:19.554390,0.000507,udp,147.32.84.170,42794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:21.201550,0.000387,udp,147.32.84.138,49161.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:21.222266,0.000287,udp,147.32.84.138,56434.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:21.255460,0.000282,udp,147.32.84.138,60546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:21.290659,0.000294,udp,147.32.84.138,35763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:22.358273,0.056522,tcp,147.32.84.181,49428.0,->,95.172.94.66,80.0,FSRPA_FSPA,0.0,0.0,8,1473,1082,391,184.125,0.7345553292600135,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:23:25.199825,0.000193,udp,147.32.84.138,35219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:25.228542,0.000243,udp,147.32.84.138,38195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:25.294926,0.000173,udp,147.32.84.138,43831.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:25.315367,0.000215,udp,147.32.84.138,45707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:25.318008,0.00025,udp,147.32.84.138,33996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:27.359770,60.940063,tcp,147.32.84.165,3907.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:23:29.648788,0.000174,udp,147.32.84.170,55220.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:32.172763,1380.098755,tcp,147.32.84.170,39463.0,->,64.12.73.133,443.0,SPA_SPA,0.0,0.0,67,6636,2514,4122,99.04477611940298,0.37884267631103075,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:33.432344,0.000208,udp,147.32.84.138,53830.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:33.445086,0.000316,udp,147.32.84.138,42564.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:33.502694,0.000291,udp,147.32.84.138,34514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:33.606752,0.000178,udp,147.32.84.138,37232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:33.632158,0.000406,udp,147.32.84.138,35525.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:35.518981,0.000385,udp,147.32.84.170,44283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.519275,0.000283,udp,147.32.84.170,56964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.519845,0.020834,udp,147.32.84.170,47800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.519964,0.000544,udp,147.32.84.170,47778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,89,286,187.5,0.23733333333333334,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.520953,0.000407,udp,147.32.84.170,36956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.521101,0.000737,udp,147.32.84.170,42757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,72,157,114.5,0.314410480349345,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.521496,100.008362,tcp,147.32.84.170,36712.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,59,35018,6268,28750,593.5254237288135,0.1789936604032212,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.521568,100.008301,tcp,147.32.84.170,36714.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,27,10712,4119,6593,396.74074074074076,0.38452203136669155,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.521716,20.003847,tcp,147.32.84.170,36717.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.522253,0.000399,udp,147.32.84.170,48743.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.523425,2.013326,tcp,147.32.84.170,52928.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,1931,1047,884,214.55555555555554,0.5422061108234075,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.563492,300.777679,tcp,147.32.84.170,36653.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,70,43416,10736,32680,620.2285714285714,0.2472821079786254,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.563551,19.968172,tcp,147.32.84.170,36655.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.568807,19.962942,tcp,147.32.84.170,49886.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:35.903422,0.000314,udp,147.32.84.59,39805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:36.013677,0.024997,udp,147.32.84.170,39366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,80,215,147.5,0.2711864406779661,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.019373,0.000368,udp,147.32.84.170,59628.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.020044,0.00045,udp,147.32.84.170,45763.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,575,80,495,287.5,0.1391304347826087,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.029458,0.000229,udp,147.32.84.170,33496.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.030086,0.000515,udp,147.32.84.170,33268.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,71,174,122.5,0.2897959183673469,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.031770,0.000257,udp,147.32.84.170,33337.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.032787,0.000269,udp,147.32.84.170,36446.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.033881,0.000245,udp,147.32.84.170,48387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.348408,0.000253,udp,147.32.84.170,55378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.348571,0.000241,udp,147.32.84.170,50348.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.349270,0.000286,udp,147.32.84.170,38415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:36.838490,0.000351,udp,147.32.84.170,60464.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,80,183,131.5,0.3041825095057034,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.240062,0.000287,udp,147.32.84.170,54595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.240676,0.000506,udp,147.32.84.170,54945.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.240736,0.000619,udp,147.32.84.170,59467.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,212,79,133,106.0,0.37264150943396224,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.240868,0.003216,udp,147.32.84.170,56791.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.241522,0.000472,udp,147.32.84.170,35764.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.241579,0.003594,udp,147.32.84.170,52436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,70,160,115.0,0.30434782608695654,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.241585,0.000691,udp,147.32.84.170,36820.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,79,178,128.5,0.30739299610894943,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.244484,0.000252,udp,147.32.84.170,47444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,70,160,115.0,0.30434782608695654,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245295,90.674026,tcp,147.32.84.170,39510.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,42,36519,4599,31920,869.5,0.12593444508338125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245542,18.279268,tcp,147.32.84.170,39514.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245591,18.279079,tcp,147.32.84.170,39515.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245643,18.278727,tcp,147.32.84.170,39516.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245737,18.279083,tcp,147.32.84.170,39517.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.245747,18.278919,tcp,147.32.84.170,39518.0,->,194.79.52.199,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.248157,90.849861,tcp,147.32.84.170,39642.0,->,194.79.52.196,80.0,SPA_SRPA,0.0,0.0,47,33522,3158,30364,713.2340425531914,0.09420678957102799,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.646330,0.002165,udp,147.32.84.170,58789.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.646536,0.000255,udp,147.32.84.170,41052.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.647182,0.000323,udp,147.32.84.170,49691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,73,129,101.0,0.3613861386138614,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.648004,0.000381,udp,147.32.84.170,50753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,73,162,117.5,0.31063829787234043,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.651535,0.000279,udp,147.32.84.170,51189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.652058,0.000268,udp,147.32.84.170,52320.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.653443,0.000314,udp,147.32.84.170,39514.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.654768,0.000244,udp,147.32.84.170,55400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.655583,0.0002,udp,147.32.84.170,43554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.656762,0.00029,udp,147.32.84.170,41966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,73,163,118.0,0.3093220338983051,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.736515,0.000397,udp,147.32.84.170,38412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,74,147,110.5,0.334841628959276,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.737120,0.000298,udp,147.32.84.170,43168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.740551,0.000283,udp,147.32.84.170,33004.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,73,163,118.0,0.3093220338983051,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.830335,0.001986,udp,147.32.84.170,60993.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,79,152,115.5,0.341991341991342,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.834032,0.000318,udp,147.32.84.170,43981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.837556,0.000347,udp,147.32.84.170,33788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.838230,0.000204,udp,147.32.84.170,43568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.839806,0.000404,udp,147.32.84.170,57168.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,82,172,127.0,0.3228346456692913,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.862994,0.005776,tcp,147.32.84.170,55056.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,10,2629,1041,1588,262.9,0.39596804868771396,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.863372,0.000304,udp,147.32.84.170,54480.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.864941,0.00034,udp,147.32.84.170,41060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,71,167,119.0,0.29831932773109243,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.868440,0.000338,udp,147.32.84.170,53523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,74,170,122.0,0.30327868852459017,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.869287,0.000204,udp,147.32.84.170,33191.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:37.871635,0.000262,udp,147.32.84.170,50258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,76,139,107.5,0.35348837209302325,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.815507,0.00042,udp,147.32.84.170,41373.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.815932,0.000221,udp,147.32.84.170,44859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,73,125,99.0,0.3686868686868687,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.816848,0.002515,udp,147.32.84.170,44225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,285,71,214,142.5,0.24912280701754386,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.816886,0.000823,udp,147.32.84.170,50524.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.867809,96.676743,tcp,147.32.84.170,50313.0,->,92.123.64.160,80.0,FSPA_FSPA,0.0,0.0,22,10320,1099,9221,469.09090909090907,0.1064922480620155,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.872383,106.672035,tcp,147.32.84.170,49910.0,->,92.123.64.153,80.0,FSPA_FSPA,0.0,0.0,20,8525,1033,7492,426.25,0.12117302052785923,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.872851,0.00037,udp,147.32.84.170,52965.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,79,216,147.5,0.2677966101694915,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:38.989206,0.000484,udp,147.32.84.170,59507.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,66,232,149.0,0.2214765100671141,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.134870,0.017046,udp,147.32.84.170,49643.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,77,163,120.0,0.32083333333333336,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.208272,0.000142,udp,147.32.84.170,33806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,339,76,263,169.5,0.22418879056047197,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.208687,0.000494,udp,147.32.84.170,50391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,76,251,163.5,0.2324159021406728,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.209175,0.000721,udp,147.32.84.170,37804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,80,214,147.0,0.272108843537415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.209243,0.000799,udp,147.32.84.170,46751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,282,78,204,141.0,0.2765957446808511,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.210780,0.034013,udp,147.32.84.170,60747.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,77,137,107.0,0.3598130841121495,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.245641,0.000299,udp,147.32.84.170,41752.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,360,77,283,180.0,0.21388888888888888,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.285952,0.000176,udp,147.32.84.170,56164.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.286114,0.000222,udp,147.32.84.170,51230.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,72,235,153.5,0.23452768729641693,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.286494,0.000239,udp,147.32.84.170,51276.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.288455,0.000153,udp,147.32.84.170,51994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.288619,0.000288,udp,147.32.84.170,56028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,75,226,150.5,0.24916943521594684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.289934,0.00023,udp,147.32.84.170,43660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,72,215,143.5,0.2508710801393728,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.290350,0.000318,udp,147.32.84.170,35261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,72,203,137.5,0.26181818181818184,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.291688,0.000293,udp,147.32.84.170,57256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.292468,0.000284,udp,147.32.84.170,35778.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.294015,0.000293,udp,147.32.84.170,51717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,305,71,234,152.5,0.23278688524590163,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.295909,0.000198,udp,147.32.84.170,41825.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.296765,0.000263,udp,147.32.84.170,60011.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,76,185,130.5,0.29118773946360155,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.298652,0.000259,udp,147.32.84.170,45548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,77,214,145.5,0.2646048109965636,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.349225,0.000388,udp,147.32.84.170,35582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,81,244,162.5,0.24923076923076923,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.351550,0.000404,udp,147.32.84.170,53542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,72,159,115.5,0.3116883116883117,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.352186,0.000448,udp,147.32.84.170,58626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,73,210,141.5,0.2579505300353357,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.448180,0.000327,udp,147.32.84.170,56417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.450177,0.000378,udp,147.32.84.170,52517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,79,242,160.5,0.24610591900311526,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.768715,0.000264,udp,147.32.84.170,43213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,78,140,109.0,0.3577981651376147,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.769363,0.000319,udp,147.32.84.170,33037.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,403,78,325,201.5,0.1935483870967742,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.771187,0.164112,udp,147.32.84.170,45565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,310,75,235,155.0,0.24193548387096775,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.799369,0.035499,udp,147.32.84.170,60634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,69,135,102.0,0.3382352941176471,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.839892,0.000357,udp,147.32.84.170,37473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,70,174,122.0,0.28688524590163933,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.841109,0.000298,udp,147.32.84.170,57889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,79,225,152.0,0.2598684210526316,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.841749,0.000449,udp,147.32.84.170,44970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,79,213,146.0,0.2705479452054795,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.842725,0.000377,udp,147.32.84.170,44036.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,68,288,178.0,0.19101123595505617,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.935310,0.017937,udp,147.32.84.170,53902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.953636,0.00023,udp,147.32.84.170,33611.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,75,124,99.5,0.3768844221105528,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:39.973080,0.837707,udp,147.32.84.170,49062.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,401,74,327,200.5,0.18453865336658354,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.420410,0.066528,udp,147.32.84.170,43049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,74,160,117.0,0.3162393162393162,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.651570,1.025699,udp,147.32.84.170,45501.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,78,150,114.0,0.34210526315789475,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.936106,0.19324,udp,147.32.84.170,45094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,331,72,259,165.5,0.2175226586102719,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.945089,0.000365,udp,147.32.84.170,58615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.945924,0.035418,udp,147.32.84.170,41092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.982182,14.710004,tcp,147.32.84.170,51571.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:40.982189,14.715689,tcp,147.32.84.170,51572.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:41.129764,0.162698,udp,147.32.84.170,57491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,319,72,247,159.5,0.22570532915360503,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:41.201617,0.00045,udp,147.32.84.170,45475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:41.428944,0.01817,udp,147.32.84.170,54801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,497,74,423,248.5,0.1488933601609658,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:41.678226,0.515448,udp,147.32.84.170,34844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,78,143,110.5,0.35294117647058826,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:43.474092,0.000255,udp,147.32.84.138,42580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:43.640209,0.000254,udp,147.32.84.138,45461.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:44.505838,0.000258,udp,147.32.84.138,50559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:44.523201,0.000391,udp,147.32.84.138,34381.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:44.794173,0.174036,udp,147.32.84.229,13363.0,<->,173.169.168.108,51940.0,CON,0.0,0.0,2,142,81,61,71.0,0.5704225352112676,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:23:45.550957,0.000426,udp,147.32.84.138,46404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:46.236369,0.000317,udp,147.32.84.59,36361.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:48.195268,0.00024,udp,147.32.84.138,48180.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:49.554431,0.000345,udp,147.32.84.170,59174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:49.732445,0.000168,udp,147.32.84.138,41398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:49.965428,0.000225,udp,147.32.84.138,58375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:52.454583,0.000269,udp,147.32.84.138,47813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:52.532315,0.000251,udp,147.32.84.138,57359.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:52.600688,0.000204,udp,147.32.84.138,33917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:54.492704,0.000209,udp,147.32.84.138,44718.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:23:56.257846,0.000419,udp,125.239.196.148,5480.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:23:57.772099,1.070068,tcp,94.163.128.217,60798.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,18,1414,750,664,78.55555555555556,0.5304101838755304,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:23:59.380681,0.000207,udp,147.32.84.170,52224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:59.589262,0.000235,udp,147.32.84.170,38175.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:23:59.589855,0.000325,udp,147.32.84.170,57883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,75,160,117.5,0.3191489361702128,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.306266,0.000208,udp,147.32.84.138,52031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:00.475471,0.000447,udp,147.32.84.134,42713.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,598,91,507,299.0,0.15217391304347827,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:24:00.476825,240.057999,tcp,147.32.84.134,41795.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,22,3933,2098,1835,178.77272727272728,0.5334350368675311,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:24:00.512892,0.000198,udp,147.32.84.134,32835.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,89,174,131.5,0.33840304182509506,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:24:00.514688,250.036789,tcp,147.32.84.134,47730.0,->,209.85.149.139,80.0,FSPA_FSPA,0.0,0.0,53,32294,6691,25603,609.3207547169811,0.2071901901281972,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:24:00.817483,0.00446,tcp,147.32.84.170,53027.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2153,1269,884,239.22222222222223,0.5894101254064097,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.941015,14.599137,tcp,147.32.84.170,49942.0,->,92.123.64.153,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.941086,0.000253,udp,147.32.84.170,36719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,85,129,107.0,0.397196261682243,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.941519,0.002915,udp,147.32.84.170,47130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,549,81,468,274.5,0.14754098360655737,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.941579,124.595932,tcp,147.32.84.170,58772.0,->,80.239.149.32,80.0,FSPA_FSPA,0.0,0.0,18,4912,1387,3525,272.8888888888889,0.28236970684039087,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.941919,14.584502,tcp,147.32.84.170,39977.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.942120,0.000943,udp,147.32.84.170,45330.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.942168,14.582483,tcp,147.32.84.170,39980.0,->,195.113.232.82,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.942360,14.680797,tcp,147.32.84.170,50051.0,->,69.63.190.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.943633,14.74957,tcp,147.32.84.170,51600.0,->,69.63.180.43,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.945153,14.598213,tcp,147.32.84.170,37463.0,->,92.123.64.130,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.945763,14.594278,tcp,147.32.84.170,51797.0,->,92.123.64.195,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:00.945972,14.594186,tcp,147.32.84.170,51800.0,->,92.123.64.195,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.555283,0.019908,udp,147.32.84.170,50344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.555943,0.00022,udp,147.32.84.170,52782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,72,136,104.0,0.34615384615384615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.557826,73.972237,tcp,147.32.84.170,36860.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,71,54768,3409,51359,771.3802816901408,0.06224437627811861,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.575542,0.000436,udp,147.32.84.170,60325.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,602,93,509,301.0,0.15448504983388706,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.669717,0.00027,udp,147.32.84.170,58150.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.670385,0.00027,udp,147.32.84.170,57143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:01.920693,13.610256,tcp,147.32.84.170,36781.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:02.045632,0.017242,udp,147.32.84.170,41589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,82,219,150.5,0.2724252491694352,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:02.063309,0.008663,udp,147.32.84.170,50626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,421,82,339,210.5,0.19477434679334918,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:02.080966,0.001913,udp,147.32.84.170,52651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:03.886342,0.000429,udp,147.32.84.134,51923.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:24:03.934515,0.000341,udp,147.32.84.170,50091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:05.094501,70.435585,tcp,147.32.84.170,36871.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,13,2499,1100,1399,192.23076923076923,0.44017607042817125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:05.094761,10.429895,tcp,147.32.84.170,36873.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,12,3872,1034,2838,322.6666666666667,0.26704545454545453,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:05.252407,0.000237,udp,147.32.84.170,51116.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:07.339064,3.8e-05,udp,147.32.84.138,33608.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:07.341760,0.00035,udp,147.32.84.138,39367.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:07.404506,0.0004,udp,147.32.84.138,36741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:07.412848,0.000255,udp,147.32.84.138,59183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:07.425843,0.00034,udp,147.32.84.138,41772.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:07.440259,0.000209,udp,147.32.84.138,40129.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:09.826234,0.000307,udp,147.32.84.138,60996.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:11.262151,0.179491,udp,147.32.84.21,43451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,80,124,102.0,0.39215686274509803,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:11.276740,0.000314,udp,147.32.86.20,57195.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:12.039282,0.00028,udp,147.32.84.19,34452.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,68,154,111.0,0.3063063063063063,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:12.202891,0.000195,udp,147.32.84.170,43773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:12.203638,0.000353,udp,147.32.84.170,40280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:12.205058,0.222584,tcp,147.32.84.170,35584.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:13.221683,0.000225,udp,147.32.84.170,60966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:13.222214,0.000238,udp,147.32.84.170,38380.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:13.478830,0.000443,udp,147.32.84.59,54553.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:13.498023,0.000266,udp,147.32.84.59,62924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:16.094884,0.000457,udp,147.32.84.138,43280.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:17.030571,0.000271,udp,147.32.84.59,53689.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:18.182349,0.0005,udp,46.247.248.101,62378.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:19.687927,0.173134,udp,147.32.84.229,13363.0,<->,209.162.0.11,49805.0,CON,0.0,0.0,3,664,101,563,221.33333333333334,0.15210843373493976,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:19.840245,1310.694458,udp,121.73.169.162,60622.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,20,2404,1784,620,120.2,0.7420965058236273,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:20.000499,0.000196,udp,147.32.85.25,41060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.659666,0.000471,udp,147.32.84.138,42987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.682671,0.000369,udp,147.32.84.138,56234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.683517,0.000456,udp,147.32.84.138,46100.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.692657,0.00029,udp,147.32.84.138,37328.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.708657,0.00033,udp,147.32.84.138,39920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:20.733676,0.000373,udp,147.32.84.138,42691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:21.303169,0.000224,udp,147.32.84.138,35385.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:21.874479,0.000153,icmp,147.32.86.96,,<-,147.32.87.52,60701.0,ECR,,0.0,2,196,0,196,98.0,0.0,9,0,flow=Background,Background,-1 2011-08-17 09:24:22.348505,0.000143,udp,147.32.84.138,33219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:22.919761,734.531616,udp,91.37.180.93,40162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3074,134,2940,512.3333333333334,0.043591411841249185,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:27.673328,0.000273,udp,147.32.84.138,41171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.683505,0.000357,udp,147.32.84.138,41397.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.689925,0.000331,udp,147.32.84.138,49787.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.734023,0.000244,udp,147.32.84.138,40051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.793569,0.000294,udp,147.32.84.138,33492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.820271,0.000237,udp,147.32.84.138,59377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.846178,0.000247,udp,147.32.84.138,50978.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:27.988538,60.949516,tcp,147.32.84.165,3908.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:24:30.043094,0.000562,udp,85.3.211.254,53829.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:36.678490,0.000282,udp,147.32.84.138,43128.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:39.559468,0.000433,udp,147.32.84.170,37213.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:40.439784,0.000219,udp,147.32.85.25,59070.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:42.839874,0.64589,tcp,67.195.115.43,55130.0,->,147.32.87.36,80.0,FSPA_FSPA,0.0,0.0,14,5924,871,5053,423.14285714285717,0.14702903443619175,9,1,flow=To-Background-CVUT-WebServer,Background,-1 2011-08-17 09:24:43.199129,0.000231,udp,147.32.84.170,44235.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:48.664749,0.000325,udp,147.32.84.138,35405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:48.688591,0.000209,udp,147.32.84.138,33812.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:48.692980,0.000335,udp,147.32.84.138,51932.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:48.696084,0.000213,udp,147.32.84.138,36588.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:48.719547,0.000428,udp,147.32.84.138,32867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:49.556812,0.000276,udp,147.32.84.170,47393.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:24:51.131994,1029.105835,udp,212.8.163.86,47164.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,2250,521,1729,160.71428571428572,0.23155555555555554,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:53.764015,69.363762,udp,83.233.243.165,36459.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,8,1367,889,478,170.875,0.6503291880029262,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:54.630574,0.010468,udp,147.32.84.132,51107.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,203,73,130,101.5,0.35960591133004927,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:55.052080,0.000517,udp,82.57.22.204,56700.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:24:58.602775,0.00024,udp,147.32.84.138,57947.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:58.619963,0.000302,udp,147.32.84.138,54318.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:24:58.672930,0.000273,udp,147.32.84.138,52616.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:00.709648,2.9e-05,udp,147.32.85.25,48031.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:02.115364,0.00037,udp,147.32.84.138,38959.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:04.483387,911.59259,udp,149.5.45.254,43029.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1236,811,425,123.6,0.6561488673139159,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:06.658431,9.577827,tcp,93.91.88.190,53114.0,->,147.32.84.229,80.0,SRPA_SPA,0.0,0.0,7,592,406,186,84.57142857142857,0.6858108108108109,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:25:07.708905,0.000259,udp,147.32.84.138,58976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:07.716564,0.000286,udp,147.32.84.138,40491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:07.862098,0.000299,udp,147.32.84.138,42436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:09.555540,0.00038,udp,147.32.84.170,34853.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:10.249388,0.010087,udp,147.32.84.132,51012.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,164,74,90,82.0,0.45121951219512196,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:10.667709,0.250139,udp,147.32.84.59,60703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,80,160,120.0,0.3333333333333333,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:12.335358,0.000569,udp,87.18.244.222,17162.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,560,74,486,280.0,0.13214285714285715,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:14.202051,0.000355,udp,147.32.84.170,42008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:15.690463,0.00045,udp,147.32.84.138,54928.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:15.698441,0.000351,udp,147.32.84.138,52016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:22.066869,0.000203,udp,147.32.84.138,46631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:22.225955,0.000326,udp,147.32.84.138,40197.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:24.384665,0.159578,tcp,147.32.84.59,49605.0,->,193.63.75.26,80.0,FSPA_FSPA,0.0,0.0,11,1562,741,821,142.0,0.47439180537772085,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:25:26.354395,0.000213,udp,147.32.85.25,45273.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:27.206022,0.000306,udp,147.32.84.138,59016.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:28.247272,0.00022,udp,147.32.84.138,54911.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:28.271645,0.0003,udp,147.32.84.138,40190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:28.411455,0.000231,udp,147.32.84.138,33776.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:28.626196,60.955414,tcp,147.32.84.165,3909.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:25:29.556328,0.000256,udp,147.32.84.170,55316.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:31.584516,0.00022,udp,147.32.84.138,43447.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:33.475139,0.000219,udp,147.32.84.138,52660.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:33.477598,0.000261,udp,147.32.84.138,55471.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:33.488528,0.000207,udp,147.32.84.138,44523.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:35.016659,574.25885,tcp,147.32.86.147,37481.0,->,74.125.232.195,80.0,FSPA_FSPA,0.0,0.0,31,16760,3073,13687,540.6451612903226,0.18335322195704057,9,1,flow=Background-google-analytics4,Background,-1 2011-08-17 09:25:37.233295,53.994965,tcp,147.32.84.132,58824.0,->,77.75.76.72,80.0,SRPA_FSPA,0.0,0.0,16,5526,3944,1582,345.375,0.7137169743032935,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:25:39.254188,0.000219,udp,147.32.84.138,53448.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:39.555651,0.010172,udp,147.32.84.170,37899.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:39.567439,0.01808,tcp,147.32.84.170,58132.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:43.339184,0.00047,udp,114.45.191.234,1063.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:43.537335,0.000226,udp,147.32.84.138,50375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:44.202256,0.000248,udp,147.32.84.170,52210.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:25:45.555033,0.00033,udp,147.32.84.138,56902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:45.555685,0.000212,udp,147.32.84.138,53462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:45.558142,0.000244,udp,147.32.84.138,60627.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:45.615503,0.000322,udp,147.32.84.138,54981.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:46.407548,1201.695801,udp,62.84.193.50,13827.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,753,524,229,125.5,0.6958831341301461,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:48.838354,0.000245,udp,147.32.84.138,45940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:48.873512,0.000292,udp,147.32.84.138,46071.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:48.986361,0.000415,udp,147.32.84.138,50988.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:49.166681,0.000465,udp,147.32.84.59,43840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,586,73,513,293.0,0.12457337883959044,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:49.684560,0.002055,udp,78.160.196.188,12935.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,505,60,282.5,0.8938053097345132,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:25:51.304417,0.000297,udp,147.32.84.138,58884.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:51.404616,0.000285,udp,147.32.84.138,50029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:51.426194,0.000311,udp,147.32.84.138,44837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.500674,0.000259,udp,147.32.84.138,46171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.520588,0.000218,udp,147.32.84.138,57351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.531359,0.000276,udp,147.32.84.138,44875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.535226,0.0003,udp,147.32.84.138,60701.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.544531,0.000263,udp,147.32.84.138,56737.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:53.592224,0.000304,udp,147.32.84.138,35862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:54.331469,0.000318,udp,147.32.84.138,41171.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:55.879646,0.000184,udp,147.32.84.138,51543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:55.922508,0.000334,udp,147.32.84.138,46437.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:25:59.555817,0.000324,udp,147.32.84.170,60602.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:00.031665,0.000241,udp,147.32.84.138,57132.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:00.150101,0.000235,udp,147.32.84.138,59518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:00.156610,0.000278,udp,147.32.84.138,38567.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:02.265951,0.00018,udp,147.32.84.138,42032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:03.845729,0.08853,tcp,147.32.84.59,49957.0,->,193.63.75.26,80.0,FSPA_FSPA,0.0,0.0,13,5217,743,4474,401.3076923076923,0.1424190147594403,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:26:04.081671,0.000364,udp,147.32.84.138,44489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:04.115976,0.000274,udp,147.32.84.138,54596.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:04.118392,0.000212,udp,147.32.84.138,35421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:04.498949,250.203537,tcp,147.32.84.59,34126.0,->,209.85.148.99,80.0,FSPA_FSPA,0.0,0.0,54,25761,4036,21725,477.05555555555554,0.15667093668724041,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:26:05.494494,17.477962,tcp,131.159.18.72,41323.0,->,147.32.85.109,80.0,FSPA_FSPA,0.0,0.0,14,2937,918,2019,209.78571428571428,0.3125638406537283,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:06.023413,0.000309,udp,147.32.84.138,41182.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:06.227789,0.000235,udp,147.32.85.34,53509.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:06.229528,0.000244,udp,147.32.85.34,57515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:06.336902,0.000374,udp,147.32.85.89,44002.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:06.768398,19.025871,tcp,147.32.84.59,34242.0,->,74.125.232.223,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:26:07.830257,0.000263,udp,147.32.84.138,42678.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:07.861750,0.000385,udp,147.32.84.138,60435.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:07.919460,0.00031,udp,147.32.84.138,60074.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:07.923469,0.000249,udp,147.32.84.138,59042.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:08.991937,0.423003,tcp,147.32.84.59,55704.0,->,74.125.232.214,443.0,FSPA_FSPA,0.0,0.0,21,5289,1915,3374,251.85714285714286,0.36207222537341655,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:26:09.556700,0.000328,udp,147.32.84.170,49118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:09.885492,0.000316,udp,147.32.85.6,49562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,202,76,126,101.0,0.37623762376237624,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:09.922790,0.00262,udp,147.32.85.6,60315.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,71,142,106.5,0.3333333333333333,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:10.556830,0.00038,udp,147.32.84.138,57511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:10.668939,0.000196,udp,147.32.84.138,55805.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:14.205240,0.000352,udp,147.32.84.170,44626.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:15.294009,0.000301,udp,147.32.84.138,50542.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:15.304636,0.000325,udp,147.32.84.138,57868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,83,133,108.0,0.38425925925925924,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:15.312962,0.000321,udp,147.32.84.138,51645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:15.313594,0.000287,udp,147.32.84.138,57800.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:15.339201,0.000291,udp,147.32.84.138,48143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,83,221,152.0,0.2730263157894737,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:17.468879,0.00038,udp,147.32.84.59,36006.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:18.853959,231.559692,tcp,193.220.57.193,2723.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,29,2479,886,1593,85.48275862068965,0.3574021782977007,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:19.555700,0.000418,udp,147.32.84.170,44341.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:19.604011,0.121882,udp,147.32.85.34,57413.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,342,68,274,171.0,0.19883040935672514,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:20.099835,0.000411,udp,115.165.113.117,49256.0,<->,147.32.84.229,443.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:26:21.858033,0.004316,udp,147.32.85.6,58066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,120,203,161.5,0.3715170278637771,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:22.558738,0.000281,udp,147.32.84.59,58492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:25.313022,11.592158,tcp,147.32.84.59,50163.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,372,246,126,62.0,0.6612903225806451,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:26:27.042342,0.000248,udp,147.32.84.134,36549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:26:27.043013,0.000354,udp,147.32.84.134,59895.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,78,168,123.0,0.3170731707317073,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:26:27.382240,28.832548,tcp,210.212.180.132,2935.0,->,147.32.84.74,80.0,FSPA_FSPA,0.0,0.0,52,39840,4243,35597,766.1538461538462,0.10650100401606426,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:27.982737,0.007238,tcp,147.32.84.170,50726.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2210,1451,759,221.0,0.6565610859728507,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:28.442462,0.000685,udp,121.82.137.216,65033.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,580,78,502,290.0,0.13448275862068965,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:26:29.264670,60.937115,tcp,147.32.84.165,3910.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:26:29.555680,0.000434,udp,147.32.84.170,52323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:29.556565,0.000293,udp,147.32.84.170,40891.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:30.752091,25.461157,tcp,210.212.180.132,2939.0,->,147.32.84.74,80.0,FSPA_FSPA,0.0,0.0,16,6641,1457,5184,415.0625,0.21939466947748834,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:36.516031,0.010218,udp,147.32.84.59,42968.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,75,248,161.5,0.23219814241486067,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:39.445470,0.000246,udp,147.32.84.138,60756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:45.201411,0.000309,udp,147.32.84.170,38546.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:46.497734,0.000282,udp,147.32.86.194,64376.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,88,179,133.5,0.3295880149812734,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:46.944687,0.337611,udp,147.32.84.229,13363.0,<->,190.51.92.164,25943.0,CON,0.0,0.0,4,2965,60,2905,741.25,0.02023608768971332,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:26:48.976081,48.487309,tcp,87.219.160.198,49175.0,->,147.32.84.229,13363.0,FSPA_FSPA,0.0,0.0,16,1188,464,724,74.25,0.39057239057239057,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:55.892444,0.00023,udp,147.32.85.89,39078.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:56.242693,0.000213,udp,147.32.84.170,35404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:56.244108,0.005358,tcp,147.32.84.170,50731.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2256,1451,805,225.6,0.6431737588652482,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:56.535656,0.000199,udp,147.32.84.170,40390.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:56.537147,0.005381,tcp,147.32.84.170,53100.0,->,77.78.99.22,80.0,FSPA_FSPA,0.0,0.0,9,2256,1236,1020,250.66666666666666,0.5478723404255319,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:57.185087,1.024861,tcp,77.89.131.58,56458.0,->,147.32.84.229,443.0,FSPA_FSPA,0.0,0.0,19,1627,872,755,85.63157894736842,0.5359557467732022,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:58.057257,5.060805,udp,188.244.44.2,64831.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,539,381,158,134.75,0.7068645640074211,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:26:58.245286,47.488705,tcp,80.243.105.226,50636.0,->,147.32.84.19,993.0,FSPA_FSPA,0.0,0.0,226,95456,9038,86418,422.37168141592923,0.0946823667448877,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:26:58.346608,0.000297,udp,147.32.84.138,58576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:26:59.557394,0.023061,tcp,147.32.84.170,39602.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:26:59.662035,0.000295,udp,147.32.84.138,42882.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:00.690792,0.000493,udp,108.4.184.215,49149.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:27:11.587116,0.014354,tcp,147.32.85.6,55505.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,1800,1032,768,180.0,0.5733333333333334,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:27:14.857684,0.000293,udp,147.32.84.25,54084.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,87,227,157.0,0.2770700636942675,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:15.192917,0.000382,udp,147.32.84.170,57001.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:15.196256,0.227556,tcp,147.32.84.170,35615.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:17.103501,0.000343,udp,147.32.84.170,33396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:17.104679,243.636856,tcp,147.32.84.170,52803.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:17.104687,243.636322,tcp,147.32.84.170,52804.0,->,209.85.148.104,443.0,SRPA_FSPA,0.0,0.0,27,2559,1463,1096,94.77777777777777,0.5717076983196561,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:17.104777,240.231308,tcp,147.32.84.170,52806.0,->,209.85.148.104,443.0,FSPA_FSPA,0.0,0.0,80,31891,23041,8850,398.6375,0.72249223918974,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:17.801174,10.849481,tcp,147.32.84.59,41622.0,->,2.20.182.19,443.0,FSRPA_FSPA,0.0,0.0,53,29107,5915,23192,549.188679245283,0.20321572130415363,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:27:18.969272,65.253784,tcp,147.32.84.162,55551.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,475,534999,7056,527943,1126.3136842105264,0.013188809698709718,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:27:19.555722,0.000521,udp,147.32.84.170,60551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:19.558126,0.018119,tcp,147.32.84.170,45423.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:19.656671,0.054976,tcp,147.32.84.59,34289.0,->,87.98.136.212,80.0,FSPA_FSPA,0.0,0.0,10,2046,1344,702,204.6,0.656891495601173,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:27:25.173080,0.004715,udp,147.32.86.111,62144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:25.178192,0.002058,udp,147.32.86.111,62648.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:26.215001,14.917475,tcp,147.32.86.89,3606.0,->,77.75.76.29,80.0,FSPA_FSPA,0.0,0.0,27,11008,4306,6702,407.7037037037037,0.39117005813953487,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:27:26.701075,9.827306,tcp,78.108.97.41,46685.0,->,147.32.84.242,443.0,FSRPA_FSPA,0.0,0.0,100,87950,3428,84522,879.5,0.03897669130187607,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:27:26.825929,0.017032,tcp,147.32.86.89,3642.0,->,77.75.77.21,80.0,FSPA_FSPA,0.0,0.0,12,3569,792,2777,297.4166666666667,0.2219108994115999,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:27:29.555941,0.00037,udp,147.32.84.170,45565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:29.890483,60.954861,tcp,147.32.84.165,3911.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:27:39.556408,0.000502,udp,147.32.84.170,58122.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:39.557427,0.018605,tcp,147.32.84.170,45425.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:40.878347,0.000238,udp,147.32.84.181,61465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:40.941129,0.000166,udp,147.32.84.138,44366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:46.199836,0.21896,tcp,147.32.84.170,35625.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:47.891668,0.000229,udp,147.32.84.138,46582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:47.910213,0.00044,udp,188.157.232.130,39154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:27:49.556857,0.000501,udp,147.32.84.170,49522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:27:51.356578,0.000295,udp,147.32.84.138,41710.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:51.469409,119.564751,tcp,147.32.85.88,53658.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,3548,2426,1122,295.6666666666667,0.6837655016910936,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:27:56.810964,0.000354,udp,147.32.84.138,42442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:27:59.006479,0.256564,tcp,147.32.85.26,64622.0,->,82.208.7.108,80.0,FSPA_FSPA,0.0,0.0,21,12458,1989,10469,593.2380952380952,0.15965644565740889,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:27:59.905043,0.000211,udp,147.32.84.138,52044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:00.295657,0.009474,udp,147.32.84.132,53580.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,160,72,88,80.0,0.45,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:01.396740,0.000211,udp,147.32.84.138,49055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:04.226122,0.00048,udp,147.32.86.147,53246.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:04.432892,0.000285,udp,147.32.84.170,54828.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,79,153,116.0,0.34051724137931033,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:04.435711,241.127945,tcp,147.32.84.170,58988.0,->,74.125.232.204,80.0,FSPA_FSPA,0.0,0.0,21,2941,1579,1362,140.04761904761904,0.536892213532812,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:04.531436,241.048309,tcp,147.32.84.170,53654.0,->,209.85.149.82,80.0,FSPA_FSPA,0.0,0.0,21,2461,1136,1325,117.19047619047619,0.46160097521332794,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:06.285690,0.000269,udp,147.32.85.34,58051.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:10.814881,0.000266,udp,147.32.84.138,60982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:13.591159,0.404915,tcp,147.32.84.170,54320.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,15,2064,895,1169,137.6,0.43362403100775193,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:16.203300,0.210842,tcp,147.32.84.170,53017.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:19.556039,0.000364,udp,147.32.84.170,58140.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:23.613355,0.000249,udp,147.32.84.59,42771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:25.540877,0.000409,udp,116.15.165.2,24699.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:26.894513,0.024064,tcp,147.32.84.170,56615.0,->,62.168.44.116,80.0,FSPA_FSPA,0.0,0.0,12,2382,1695,687,198.5,0.7115869017632241,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:28.054708,0.590595,tcp,147.32.84.184,50040.0,->,192.9.162.55,80.0,FSPA_FSPA,0.0,0.0,11,1072,557,515,97.45454545454545,0.519589552238806,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:28:28.414308,0.000562,udp,91.61.44.19,25640.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,554,79,475,277.0,0.14259927797833935,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:29.733225,0.03816,udp,147.32.84.134,47143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:29.772859,0.005426,udp,147.32.84.134,44015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,68,151,109.5,0.3105022831050228,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:29.978799,0.000552,udp,147.32.84.134,35314.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:29.979976,250.37088,tcp,147.32.84.134,54660.0,->,74.125.232.202,80.0,FSPA_FSRPA,0.0,0.0,24,4289,2802,1487,178.70833333333334,0.6532991373280485,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:30.528117,60.939011,tcp,147.32.84.165,3912.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:28:30.847665,29.482164,tcp,147.32.84.134,56841.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,114,75381,10830,64551,661.2368421052631,0.14367015560950372,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:30.847793,29.48177,tcp,147.32.84.134,56842.0,->,81.31.45.94,80.0,FSPA_FSPA,0.0,0.0,100,56435,10831,45604,564.35,0.1919199078585984,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:32.355662,49.831486,tcp,147.32.86.111,1486.0,->,2.20.182.50,80.0,SRPA_FSPA,0.0,0.0,11,3817,870,2947,347.0,0.22792769190463716,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:28:33.029381,0.002816,udp,147.32.86.111,56023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,72,176,124.0,0.2903225806451613,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:34.430173,0.020173,udp,147.32.84.134,59377.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.435720,0.000546,udp,173.57.192.37,46380.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:34.437916,0.000271,udp,147.32.84.134,35844.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.438002,15.894532,tcp,147.32.84.134,49790.0,->,2.20.182.42,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.439696,556.024902,tcp,147.32.84.134,51684.0,->,66.220.158.53,80.0,FSPA_FSPA,0.0,0.0,51,17666,3116,14550,346.3921568627451,0.17638401449111288,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.450802,0.000414,udp,147.32.84.134,41411.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.473140,0.000301,udp,147.32.84.134,41717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:34.473727,0.005863,udp,147.32.84.134,32943.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,72,155,113.5,0.31718061674008813,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:35.017158,0.000257,udp,147.32.84.170,59475.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.112900,0.000248,udp,147.32.84.134,38473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,72,151,111.5,0.32286995515695066,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:35.113623,0.000372,udp,147.32.84.134,41753.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,72,493,282.5,0.12743362831858407,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:35.114670,245.235931,tcp,147.32.84.134,37808.0,->,74.125.232.197,80.0,FSPA_FSRPA,0.0,0.0,41,16772,1828,14944,409.0731707317073,0.10899117576913904,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:35.682450,0.000473,udp,147.32.84.170,37391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,83,377,230.0,0.18043478260869567,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.685395,9.861637,tcp,147.32.84.170,45357.0,->,193.179.124.35,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.685926,0.00023,udp,147.32.84.170,34289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686001,0.000218,udp,147.32.84.170,40451.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686160,0.000236,udp,147.32.84.170,35504.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686215,0.000382,udp,147.32.84.170,36090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686223,79.860008,tcp,147.32.84.170,54156.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,42,28948,3413,25535,689.2380952380952,0.11790106397678596,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686670,19.857643,tcp,147.32.84.170,54162.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.686784,0.000284,udp,147.32.84.170,34421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.687306,19.862333,tcp,147.32.84.170,42463.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.687310,19.862337,tcp,147.32.84.170,42464.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.687349,7.215939,tcp,147.32.84.170,33328.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.687372,0.622179,tcp,147.32.84.170,33330.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2085,1065,1020,231.66666666666666,0.5107913669064749,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:35.710924,19.837917,tcp,147.32.84.170,60883.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.001091,14.331722,tcp,147.32.84.134,54683.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:28:36.325377,0.185721,udp,147.32.84.170,54821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,79,211,145.0,0.27241379310344827,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.327749,0.000656,udp,147.32.84.170,53760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,543,80,463,271.5,0.14732965009208104,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.327873,0.000742,udp,147.32.84.170,52970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,427,79,348,213.5,0.18501170960187355,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.328935,0.000303,udp,147.32.84.170,38410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,356,85,271,178.0,0.23876404494382023,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.329343,59.221313,tcp,147.32.84.170,45728.0,->,2.20.182.32,80.0,FSPA_FSRPA,0.0,0.0,11,1769,1235,534,160.8181818181818,0.6981345392877332,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.329883,0.000282,udp,147.32.84.170,39986.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,304,81,223,152.0,0.26644736842105265,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.334276,0.000426,udp,147.32.84.170,56044.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,501,81,420,250.5,0.16167664670658682,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.340655,0.000269,udp,147.32.84.170,58120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,79,216,147.5,0.2677966101694915,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.443333,0.068742,tcp,147.32.84.170,32901.0,->,62.168.44.115,80.0,FSPA_FSPA,0.0,0.0,12,3319,1451,1868,276.5833333333333,0.4371798734558602,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.511527,0.001948,udp,147.32.84.170,33298.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,79,347,213.0,0.18544600938967137,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.670052,0.000444,udp,147.32.84.170,56554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.670649,0.00032,udp,147.32.84.170,33869.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,75,160,117.5,0.3191489361702128,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.672246,0.000212,udp,147.32.84.170,59756.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,75,160,117.5,0.3191489361702128,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.672315,0.000205,udp,147.32.84.170,33217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.672691,0.000259,udp,147.32.84.170,40982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.673723,0.000344,udp,147.32.84.170,52708.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,75,157,116.0,0.3232758620689655,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.673873,0.000201,udp,147.32.84.170,40483.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.674224,0.000213,udp,147.32.84.170,50465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.675994,0.00034,udp,147.32.84.170,53301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,79,182,130.5,0.30268199233716475,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.676489,0.000151,udp,147.32.84.170,40179.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,73,137,105.0,0.3476190476190476,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.676837,0.000244,udp,147.32.84.170,60355.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:36.677889,0.000184,udp,147.32.84.170,38356.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,71,156,113.5,0.31277533039647576,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:38.119535,0.000393,udp,147.32.84.170,44453.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,405,74,331,202.5,0.18271604938271604,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:40.390564,0.0,udp,147.32.84.59,61287.0,->,192.168.1.101,427.0,INT,0.0,,1,86,86,0,86.0,1.0,9,1,flow=Background-Attempt-cmpgw-CVUT,Background,-1 2011-08-17 09:28:41.730888,0.000285,udp,147.32.84.59,63060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:43.704255,0.000164,udp,147.32.84.138,34695.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:46.196433,0.000323,udp,147.32.84.170,38477.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:46.824736,0.00034,udp,147.32.84.170,39934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,569,78,491,284.5,0.13708260105448156,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:46.990158,8.551785,tcp,147.32.84.170,35143.0,->,77.75.73.86,80.0,FSPA_FSPA,0.0,0.0,22,13105,2213,10892,595.6818181818181,0.16886684471575736,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.205906,0.000318,udp,147.32.84.170,55302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,77,159,118.0,0.326271186440678,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.206088,0.000281,udp,147.32.84.170,45976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,72,154,113.0,0.3185840707964602,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.209803,0.000349,udp,147.32.84.170,43770.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,72,175,123.5,0.291497975708502,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.210594,0.000286,udp,147.32.84.170,38021.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.211078,0.000211,udp,147.32.84.170,38964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,78,163,120.5,0.3236514522821577,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.478800,0.000369,udp,147.32.84.170,38819.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,260,93,167,130.0,0.3576923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:47.812183,0.000244,udp,147.32.84.170,39860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:48.377315,16.753963,tcp,147.32.86.113,2316.0,->,69.17.116.124,80.0,SRPA_FSPA,0.0,0.0,10,1664,1006,658,166.4,0.6045673076923077,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:28:49.147931,0.005682,tcp,147.32.84.170,54237.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2472,1667,805,247.2,0.6743527508090615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:49.464156,0.000716,udp,217.117.30.37,22952.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,537,74,463,268.5,0.1378026070763501,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:49.556844,0.000437,udp,147.32.84.170,33374.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:28:50.570338,0.000252,udp,147.32.84.59,52510.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:28:54.133893,0.000517,udp,97.83.122.37,57968.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:28:59.557921,0.018422,tcp,147.32.84.170,49785.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:29:03.790493,0.205688,tcp,147.32.86.20,3898.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,39,30320,1029,29291,777.4358974358975,0.033937994722955146,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:04.991732,0.000239,udp,147.32.84.138,57313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:06.128169,0.302869,udp,147.32.86.24,31002.0,<->,200.148.82.122,14775.0,CON,0.0,0.0,2,558,79,479,279.0,0.14157706093189965,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:29:09.555890,0.000368,udp,147.32.84.170,57888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:29:09.581361,601.66626,udp,92.251.98.115,61653.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,480,356,124,120.0,0.7416666666666667,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:29:14.750896,0.001441,udp,147.32.85.36,35264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:16.199770,0.218329,tcp,147.32.84.170,53083.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1218,549,669,121.8,0.45073891625615764,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:29:16.821428,9.055809,tcp,31.162.31.21,2244.0,->,147.32.84.229,13363.0,S_SA,0.0,0.0,8,492,186,306,61.5,0.3780487804878049,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:22.224739,0.007046,udp,147.32.84.59,60638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,78,205,141.5,0.2756183745583039,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:23.044384,0.000584,udp,81.9.28.2,12584.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:29:26.565138,6.024201,udp,147.32.84.229,13363.0,->,151.49.231.254,45374.0,INT,0.0,,3,435,435,0,145.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:29:27.481719,1013.318604,tcp,195.132.245.224,1123.0,->,147.32.84.229,443.0,SPA_SPA,0.0,0.0,70,5594,3422,2172,79.91428571428571,0.6117268501966393,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:29.331879,0.000535,udp,86.51.5.30,16126.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,161,94,67,80.5,0.5838509316770186,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:29:29.556092,0.000418,udp,147.32.84.170,33970.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:29:31.155373,60.95726,tcp,147.32.84.165,3913.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:29:33.401608,0.000671,udp,151.60.2.20,8602.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,318,64,254,159.0,0.20125786163522014,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:29:37.716769,0.00032,udp,147.32.84.138,53075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:40.235602,0.151275,tcp,147.32.85.36,55521.0,->,217.74.68.230,443.0,FSPA_FSPA,0.0,0.0,12,2373,569,1804,197.75,0.23978086809945218,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:41.538043,2.665456,tcp,66.249.66.250,57730.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,22,8776,1086,7690,398.90909090909093,0.12374658158614403,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:44.075824,0.000275,udp,147.32.84.59,58914.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,327,85,242,163.5,0.2599388379204893,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:44.860270,0.000159,udp,147.32.84.138,54487.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:51.099483,240.069962,tcp,147.32.84.59,47452.0,->,74.125.232.194,80.0,FSPA_FSPA,0.0,0.0,24,4700,2084,2616,195.83333333333334,0.44340425531914895,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:29:53.802550,6.033132,udp,147.32.84.229,13363.0,->,69.119.57.129,11243.0,INT,0.0,,3,1362,1362,0,454.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:29:54.099210,0.000305,udp,147.32.84.138,42426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:55.720127,0.000362,udp,147.32.84.138,48465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:29:57.600158,59.774693,tcp,158.64.118.132,62115.0,->,147.32.84.229,13363.0,FA_FPA,0.0,0.0,6,360,180,180,60.0,0.5,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:29:59.559060,0.018255,tcp,147.32.84.170,44009.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:01.543886,0.364502,udp,147.32.84.59,53991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,75,176,125.5,0.29880478087649404,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:01.862377,0.000468,udp,147.32.87.36,51306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,82,137,109.5,0.3744292237442922,9,1,flow=From-Normal-V49-CVUT-WebServer,Normal,0 2011-08-17 09:30:01.930176,848.347351,tcp,147.32.84.229,13363.0,,193.247.250.17,47341.0,PA_PA,0.0,0.0,81,6628,2903,3725,81.82716049382717,0.437990343995172,9,0,flow=Background,Background,-1 2011-08-17 09:30:04.676839,0.005024,udp,85.26.155.11,59201.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:30:05.543846,0.000312,udp,147.32.86.20,51489.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:06.479856,0.000328,udp,147.32.85.34,60502.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:06.535436,0.00026,udp,147.32.85.34,55870.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:09.061218,0.000313,udp,147.32.84.138,33417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:11.609274,0.000147,udp,147.32.84.170,53138.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:11.609807,0.000462,udp,147.32.84.170,33669.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,75,160,117.5,0.3191489361702128,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:13.658971,0.17163,rtcp,147.32.84.229,13363.0,<->,97.101.11.215,19207.0,CON,0.0,0.0,9,3205,227,2978,356.1111111111111,0.07082683307332294,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:30:16.727580,0.000276,udp,147.32.85.125,60159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:17.210512,0.226761,tcp,147.32.84.170,53091.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:17.997841,1001.547119,tcp,81.100.168.29,36872.0,->,147.32.84.229,13363.0,SPA_SPA,0.0,0.0,755,105764,63723,42041,140.08476821192053,0.6025017964524791,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:19.557096,0.000454,udp,147.32.84.170,35237.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:24.619550,0.000627,udp,81.167.54.18,49427.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,270,189,81,135.0,0.7,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:30:26.491995,0.00036,udp,147.32.84.170,34582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.493268,0.002159,udp,147.32.84.170,41151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,71,128,99.5,0.35678391959798994,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.495901,0.007119,tcp,147.32.84.170,54251.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2221,1462,759,222.1,0.6582620441242684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.641726,0.00048,udp,147.32.84.170,43441.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,83,377,230.0,0.18043478260869567,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.641783,0.000484,udp,147.32.84.170,46012.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,68,153,110.5,0.3076923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.641866,0.000474,udp,147.32.84.170,51919.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,76,128,102.0,0.37254901960784315,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.642260,0.000304,udp,147.32.84.170,36249.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,83,217,150.0,0.27666666666666667,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.642993,18.907873,tcp,147.32.84.170,43496.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.643184,18.911572,tcp,147.32.84.170,54220.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.643289,18.911253,tcp,147.32.84.170,54222.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.643349,18.908428,tcp,147.32.84.170,54223.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.643407,18.908398,tcp,147.32.84.170,54224.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,37,23892,1731,22161,645.7297297297297,0.07245102963335008,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.644237,0.000422,udp,147.32.84.170,41091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.644243,0.019201,udp,147.32.84.170,60757.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,405,74,331,202.5,0.18271604938271604,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.644327,0.000452,udp,147.32.84.170,42665.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646035,8.495191,tcp,147.32.84.170,33388.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646114,8.541039,tcp,147.32.84.170,33389.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646282,18.90522,tcp,147.32.84.170,54233.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646385,18.905493,tcp,147.32.84.170,54235.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646490,18.905016,tcp,147.32.84.170,54237.0,->,81.95.101.9,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646571,18.912598,tcp,147.32.84.170,45810.0,->,74.125.232.203,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.646895,8.543013,tcp,147.32.84.170,33401.0,->,77.78.99.23,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.664116,18.893925,tcp,147.32.84.170,60952.0,->,2.21.108.20,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.668322,0.008192,udp,147.32.84.170,41679.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,417,80,337,208.5,0.19184652278177458,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.805167,0.000317,udp,147.32.84.170,33040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,79,215,147.0,0.2687074829931973,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.805491,0.00025,udp,147.32.84.170,47492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.806888,0.000338,udp,147.32.84.170,47028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:26.807749,18.750389,tcp,147.32.84.170,35083.0,->,2.20.182.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.263492,0.000279,udp,147.32.84.170,60362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,78,160,119.0,0.3277310924369748,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.264311,0.000301,udp,147.32.84.170,58745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,77,180,128.5,0.29961089494163423,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.265468,0.00023,udp,147.32.84.170,48032.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,75,139,107.0,0.35046728971962615,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.266629,0.000234,udp,147.32.84.170,36375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,73,158,115.5,0.31601731601731603,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.267143,0.000204,udp,147.32.84.170,45462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.267573,0.000222,udp,147.32.84.170,53114.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,77,180,128.5,0.29961089494163423,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.267645,0.000202,udp,147.32.84.170,43186.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,79,143,111.0,0.35585585585585583,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.268226,0.000433,udp,147.32.84.170,38878.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,253,75,178,126.5,0.2964426877470356,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.268843,0.0003,udp,147.32.84.170,52153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,248,79,169,124.0,0.3185483870967742,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.269413,0.000324,udp,147.32.84.170,33782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,74,156,115.0,0.3217391304347826,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.269420,0.000429,udp,147.32.84.170,34219.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,79,190,134.5,0.2936802973977695,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:27.271391,0.00024,udp,147.32.84.170,47387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,71,135,103.0,0.3446601941747573,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:28.251190,0.00036,udp,147.32.84.170,49998.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,405,74,331,202.5,0.18271604938271604,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:29.168740,2.507701,tcp,66.249.66.110,35699.0,->,147.32.84.188,80.0,FSPA_FSPA,0.0,0.0,12,3124,848,2276,260.3333333333333,0.2714468629961588,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:29.557115,0.000371,udp,147.32.84.170,40340.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:30.773580,306.598206,tcp,147.32.85.124,50353.0,->,92.123.64.145,80.0,FSPA_FSRPA,0.0,0.0,17,7143,899,6244,420.1764705882353,0.12585748285034298,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:31.795228,60.953243,tcp,147.32.84.165,3914.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:30:33.278890,0.270927,tcp,147.32.86.111,1528.0,->,77.93.192.167,80.0,FSRPA_FSPA,0.0,0.0,14,8524,1311,7213,608.8571428571429,0.1538010323791647,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:35.235457,0.000217,udp,147.32.85.25,40581.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:36.318092,666.805054,udp,84.75.49.83,64482.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,489,365,124,122.25,0.7464212678936605,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:30:39.568123,0.000279,udp,147.32.84.170,50123.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:30:43.362474,0.014623,tcp,147.32.84.59,57452.0,->,90.183.38.22,80.0,FSPA_FSPA,0.0,0.0,12,4057,1415,2642,338.0833333333333,0.3487798866157259,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:30:45.814498,0.000341,udp,147.32.84.138,34519.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:46.140816,0.01462,tcp,147.32.86.89,3960.0,->,88.86.101.2,80.0,FSPA_FSPA,0.0,0.0,10,1550,802,748,155.0,0.5174193548387097,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:49.961680,0.036719,udp,147.32.85.36,55343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,86,194,140.0,0.30714285714285716,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:54.204744,0.000278,udp,147.32.84.59,39902.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,76,175,125.5,0.30278884462151395,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:30:58.428580,10.504306,tcp,202.147.244.66,36209.0,->,147.32.84.229,13363.0,FSRPA_FSPA,0.0,0.0,16,1360,730,630,85.0,0.5367647058823529,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:30:59.557999,0.000286,udp,147.32.84.170,53885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:01.176693,0.0202,udp,147.32.84.184,38415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,364,75,289,182.0,0.20604395604395603,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:01.758306,0.000466,udp,147.32.84.138,41342.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:03.811319,0.0005,udp,64.58.138.151,14338.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,244,182,62,122.0,0.7459016393442623,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:31:08.058165,9.5e-05,udp,147.32.84.138,51774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:09.557294,0.000367,udp,147.32.84.170,47008.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:09.558235,0.000334,udp,147.32.84.170,48184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:09.774671,0.367101,tcp,147.32.84.59,54269.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,23,7270,1774,5496,316.0869565217391,0.24401650618982118,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:31:10.205726,960.325134,tcp,147.32.84.170,43984.0,->,74.125.232.198,443.0,PA_PA,0.0,0.0,1741,1283789,215926,1067863,737.385985066054,0.16819430607366165,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:10.967700,0.000252,udp,147.32.84.138,45146.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:12.647854,72.911438,tcp,147.32.84.170,54273.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,135,127788,8634,119154,946.5777777777778,0.06756502958024227,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.649891,0.023406,tcp,147.32.84.170,47852.0,->,2.21.92.124,80.0,FSPA_FSPA,0.0,0.0,10,1832,1124,708,183.2,0.6135371179039302,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.904152,72.657455,tcp,147.32.84.170,54280.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,21,8728,1436,7292,415.6190476190476,0.16452795600366635,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.904474,72.655075,tcp,147.32.84.170,54281.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,15,4221,1239,2982,281.4,0.2935323383084577,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.904842,12.649369,tcp,147.32.84.170,54282.0,->,81.95.101.9,80.0,FSPA_FSPA,0.0,0.0,43,29534,2023,27511,686.8372093023256,0.06849732511681451,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.919863,0.000404,udp,147.32.84.170,46758.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,73,155,114.0,0.3201754385964912,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:12.920589,0.000269,udp,147.32.84.170,42716.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,249,73,176,124.5,0.2931726907630522,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.095291,0.000178,udp,147.32.84.170,45976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,201,72,129,100.5,0.3582089552238806,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.110550,12.4478,tcp,147.32.84.170,32802.0,->,77.75.77.86,80.0,FSPA_FSPA,0.0,0.0,15,6823,1168,5655,454.8666666666667,0.17118569544188772,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.413050,0.000309,udp,147.32.84.170,49049.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.413158,0.108395,udp,147.32.84.170,46085.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.447048,0.000446,udp,147.32.84.170,50515.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,267,82,185,133.5,0.30711610486891383,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.447208,0.000303,udp,147.32.84.170,36301.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,269,83,186,134.5,0.30855018587360594,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.448815,0.000337,udp,147.32.84.170,36136.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,81,184,132.5,0.30566037735849055,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.452080,0.000289,udp,147.32.84.170,37065.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,80,162,121.0,0.3305785123966942,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.452772,0.000348,udp,147.32.84.170,32950.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,80,183,131.5,0.3041825095057034,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.719016,0.001777,udp,147.32.84.170,57691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.721249,0.000288,udp,147.32.84.170,35493.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,77,134,105.5,0.36492890995260663,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.927324,11.632868,tcp,147.32.84.170,47866.0,->,2.21.92.124,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.927527,11.632899,tcp,147.32.84.170,35121.0,->,2.20.182.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.927531,11.632887,tcp,147.32.84.170,35122.0,->,2.20.182.16,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.927681,11.626066,tcp,147.32.84.170,43745.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:13.927745,11.625959,tcp,147.32.84.170,43746.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:14.365518,0.004759,tcp,147.32.84.170,54330.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,10,2390,1585,805,239.0,0.6631799163179917,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:14.610483,0.207385,tcp,147.32.86.20,3990.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,35830,1151,34679,814.3181818181819,0.03212391850404689,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:31:16.685281,0.01969,tcp,147.32.84.170,33457.0,->,77.78.99.23,80.0,FSPA_FSPA,0.0,0.0,9,2050,1166,884,227.77777777777777,0.568780487804878,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:19.206887,0.000241,udp,147.32.84.170,33405.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:31:19.667192,0.0,icmp,173.244.210.228,771.0,->,147.32.85.74,18778.0,URP,0.0,,1,169,169,0,169.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:31:20.580013,0.000241,udp,147.32.84.138,44865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:30.123724,0.0,tcp,113.105.171.54,80.0,->,147.32.86.33,65038.0,SA_,0.0,,1,66,66,0,66.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:31:32.431452,60.973797,tcp,147.32.84.165,3915.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:31:36.362884,0.000173,udp,147.32.84.138,38603.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:39.810844,0.000244,udp,147.32.84.138,55253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:45.566150,0.000366,icmp,147.32.87.249,,<-,147.32.87.13,2.0,RED,,0.0,2,148,0,148,74.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:31:46.598615,0.369592,tcp,67.195.110.190,38530.0,->,147.32.85.85,80.0,FSPA_FSPA,0.0,0.0,15,5628,923,4705,375.2,0.16400142146410804,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:31:51.840429,894.447388,udp,174.91.74.165,54141.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,18,1215,675,540,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:31:56.943796,0.000214,udp,147.32.85.25,44619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:31:59.353157,240.505142,tcp,147.32.84.170,54422.0,->,209.85.148.147,443.0,FSPA_FSPA,0.0,0.0,34,7519,5317,2202,221.14705882352942,0.7071419071685064,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:03.812557,600.111511,udp,147.32.84.229,13363.0,<->,208.107.36.11,47886.0,CON,0.0,0.0,4,266,146,120,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:05.127725,0.000277,udp,147.32.85.34,61310.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:09.111350,0.131914,udp,147.32.84.229,13363.0,<->,69.143.237.148,60737.0,CON,0.0,0.0,2,168,102,66,84.0,0.6071428571428571,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:09.544712,0.000306,udp,147.32.84.134,58788.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,193,68,125,96.5,0.35233160621761656,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:09.558106,0.000318,udp,147.32.84.170,35615.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:15.155160,0.002354,udp,114.78.84.142,47722.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,81,476,278.5,0.14542190305206462,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:15.189597,0.000264,udp,147.32.84.138,49806.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:16.234276,0.2479,udp,147.32.84.134,54144.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:19.557914,0.000301,udp,147.32.84.170,33692.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:19.575294,3.061342,tcp,147.32.86.111,1572.0,->,188.121.36.239,80.0,SRPA_FSPA,0.0,0.0,11,4056,884,3172,368.72727272727275,0.21794871794871795,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:32:21.193798,0.000235,udp,147.32.84.170,33479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:21.263251,0.001711,udp,178.183.179.32,51726.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:21.333721,836.994751,arp,147.32.87.30,,who,147.32.87.1,,CON,,,36,2160,1080,1080,60.0,0.5,9,,flow=Background,Background,-1 2011-08-17 09:32:22.934216,0.000559,udp,76.97.156.181,61049.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:24.522458,0.000246,udp,147.32.84.59,41821.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,80,174,127.0,0.31496062992125984,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:26.920681,61.236622,tcp,147.32.84.59,46542.0,->,91.198.174.234,80.0,FSPA_FSRPA,0.0,0.0,14,2935,1764,1171,209.64285714285714,0.601022146507666,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:32:28.139892,0.000155,udp,147.32.84.138,54892.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:33.088594,60.940884,tcp,147.32.84.165,3916.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:32:33.937499,0.000322,udp,147.32.84.170,37865.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,251,74,177,125.5,0.2948207171314741,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:35.065568,0.002293,udp,147.32.84.170,40047.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,70,161,115.5,0.30303030303030304,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:35.288539,0.002205,udp,147.32.84.170,39444.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:35.290894,0.002071,udp,147.32.84.170,44631.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,78,168,123.0,0.3170731707317073,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:35.994892,5.497144,udp,23.19.33.18,4935.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,561,156,405,140.25,0.27807486631016043,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:36.154552,0.654454,udp,147.32.84.229,13363.0,<->,95.131.133.254,59019.0,CON,0.0,0.0,4,668,547,121,167.0,0.8188622754491018,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:40.566472,0.000372,udp,147.32.84.134,33551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:40.748940,0.000407,udp,217.226.191.248,54891.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:32:42.866881,0.000361,udp,147.32.84.134,57982.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,75,159,117.0,0.32051282051282054,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:42.867510,0.000386,udp,147.32.84.134,36795.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:42.867885,0.000378,udp,147.32.84.134,46793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:42.868939,17.485498,tcp,147.32.84.134,40814.0,->,74.125.232.202,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:44.116018,0.000299,udp,147.32.84.134,41624.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,298,80,218,149.0,0.2684563758389262,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:44.125792,16.227297,tcp,147.32.84.134,43844.0,->,2.20.182.25,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:44.126148,16.220823,tcp,147.32.84.134,60311.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:45.135073,0.00019,udp,147.32.84.138,51145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:47.720513,0.001936,udp,147.32.84.170,56917.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:47.800368,0.00201,udp,147.32.84.170,59560.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.558357,0.000354,udp,147.32.84.170,50875.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.601580,0.000345,udp,147.32.84.170,45783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,70,160,115.0,0.30434782608695654,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.715598,0.006738,tcp,147.32.84.170,39215.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2301,1281,1020,255.66666666666666,0.5567144719687093,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.717570,0.000193,udp,147.32.84.170,34378.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,70,143,106.5,0.3286384976525822,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.718067,0.000227,udp,147.32.84.170,36294.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,230,70,160,115.0,0.30434782608695654,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.723720,0.081135,tcp,147.32.84.170,45901.0,->,195.168.10.171,80.0,FSPA_FSPA,0.0,0.0,12,7458,1483,5975,621.5,0.1988468758380263,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.769410,0.000233,udp,147.32.84.170,39801.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,83,139,111.0,0.3738738738738739,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.771486,90.151627,tcp,147.32.84.170,51489.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,35,31127,2870,28257,889.3428571428572,0.09220291065634337,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.771798,90.151527,tcp,147.32.84.170,51491.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,18,10088,2626,7462,560.4444444444445,0.2603092783505155,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:49.777427,0.033149,tcp,147.32.84.170,41433.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,15,9785,1517,8268,652.3333333333334,0.1550332141032192,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.024818,0.002511,udp,147.32.84.170,45543.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,255,90,165,127.5,0.35294117647058826,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.025155,0.0025,udp,147.32.84.170,47529.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,77,152,114.5,0.33624454148471616,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.031245,0.003035,udp,147.32.84.170,39232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.039005,0.002627,udp,147.32.84.170,39810.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,86,161,123.5,0.3481781376518219,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.041954,0.000392,udp,147.32.84.170,58761.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,86,194,140.0,0.30714285714285716,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.042774,0.000362,udp,147.32.84.170,42459.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,74,164,119.0,0.31092436974789917,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.047085,0.001859,udp,147.32.84.170,46915.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.047623,0.002067,udp,147.32.84.170,48941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,225,76,149,112.5,0.3377777777777778,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.049331,0.00048,udp,147.32.84.170,46193.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,77,133,105.0,0.36666666666666664,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.053293,0.00218,udp,147.32.84.170,44584.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.053674,0.00026,udp,147.32.84.170,38872.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,77,131,104.0,0.3701923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.054341,0.00025,udp,147.32.84.170,33066.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,77,158,117.5,0.3276595744680851,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.109375,0.007101,tcp,147.32.84.170,41435.0,->,194.79.54.62,80.0,FSPA_FSPA,0.0,0.0,14,5936,950,4986,424.0,0.16004043126684636,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.132105,0.000256,udp,147.32.84.170,52873.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.132567,0.000281,udp,147.32.84.170,42040.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.132744,0.000239,udp,147.32.84.170,55141.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.234443,0.009809,udp,147.32.84.170,49433.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,78,148,113.0,0.34513274336283184,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.470338,335.121155,tcp,147.32.84.170,37835.0,->,74.125.232.201,80.0,FSPA_FSPA,0.0,0.0,43,13706,9870,3836,318.74418604651163,0.7201225740551583,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.470565,705.142883,tcp,147.32.84.170,37839.0,->,74.125.232.201,80.0,FSPA_FSRPA,0.0,0.0,52,11145,7645,3500,214.32692307692307,0.6859578286227007,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:50.998408,0.000163,udp,147.32.84.138,41491.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:51.850795,0.000306,udp,147.32.84.134,58657.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:52.203738,0.000325,udp,147.32.84.170,32851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:32:52.795768,0.000221,udp,147.32.84.134,48395.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,70,135,102.5,0.34146341463414637,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:53.105935,0.00046,udp,147.32.84.134,38964.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,329,74,255,164.5,0.22492401215805471,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:53.107164,17.240707,tcp,147.32.84.134,33186.0,->,88.86.123.245,80.0,FSPA_FSPA,0.0,0.0,158,124894,9920,114974,790.4683544303797,0.07942735439652826,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:53.122303,0.000199,udp,147.32.85.25,57522.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:32:53.422754,0.000304,udp,147.32.84.134,45732.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,79,149,114.0,0.34649122807017546,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:53.428297,0.000332,udp,147.32.84.134,37888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,76,141,108.5,0.35023041474654376,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:53.429558,0.002721,udp,147.32.84.134,55803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,76,217,146.5,0.2593856655290102,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:32:59.558950,0.000322,udp,147.32.84.170,52352.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:04.469103,0.000218,udp,147.32.84.138,49391.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:05.033860,0.00048,udp,46.55.53.126,10577.0,<->,147.32.86.58,48784.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:08.857631,0.000502,udp,178.177.147.103,34212.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:09.558090,0.000345,udp,147.32.84.170,39877.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:09.560000,0.019124,tcp,147.32.84.170,58404.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:10.061049,0.000233,udp,147.32.84.59,39060.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,84,237,160.5,0.2616822429906542,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:13.249275,0.283409,tcp,147.32.84.170,35592.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,15,2044,875,1169,136.26666666666668,0.4280821917808219,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:13.767768,0.249352,tcp,147.32.84.170,35595.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:14.922261,5.989405,udp,147.32.84.229,13363.0,->,87.206.60.58,57257.0,INT,0.0,,3,759,759,0,253.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:33:18.786782,0.121136,udp,147.32.84.229,13363.0,<->,208.88.186.9,34014.0,CON,0.0,0.0,2,240,177,63,120.0,0.7375,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:18.838924,0.129972,udp,147.32.84.229,13363.0,<->,69.251.210.49,46758.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:18.839095,0.069689,udp,147.32.84.229,13363.0,<->,85.152.238.228,40037.0,CON,0.0,0.0,2,524,464,60,262.0,0.8854961832061069,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:21.444164,0.000598,udp,68.14.163.183,21787.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:22.554172,0.000352,udp,147.32.84.19,58442.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,80,237,158.5,0.25236593059936907,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:26.363267,0.0,tcp,125.141.229.197,3389.0,->,147.32.86.101,23323.0,SA_,0.0,,1,62,62,0,62.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:33:29.560317,0.018395,tcp,147.32.84.170,41109.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:30.590259,0.000413,udp,147.32.84.138,59561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,78,216,147.0,0.2653061224489796,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:33.717747,60.954597,tcp,147.32.84.165,3917.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:33:34.947086,0.107978,udp,147.32.85.34,52421.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,72,147,109.5,0.3287671232876712,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:37.473489,723.462769,udp,81.95.168.174,17906.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,491,367,124,122.75,0.7474541751527495,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:43.871839,120.254402,tcp,147.32.85.88,59761.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,11,1834,1133,701,166.72727272727272,0.6177753544165758,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:33:46.064795,257.162476,tcp,194.108.204.19,57509.0,->,147.32.84.138,8432.0,FSPA_FSPA,0.0,0.0,514,299975,94346,205629,583.6089494163424,0.3145128760730061,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:33:49.560225,0.018434,tcp,147.32.84.170,33836.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:53.198675,0.00044,udp,147.32.84.170,36306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:53.200691,0.224591,tcp,147.32.84.170,50072.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:54.021049,0.000312,udp,147.32.85.26,50548.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:33:54.485903,0.016876,tcp,147.32.84.59,52506.0,->,81.171.72.12,3653.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:33:55.204047,0.000549,udp,84.108.147.131,44616.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,248,186,62,124.0,0.75,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:56.566776,0.000323,tcp,95.168.183.186,57810.0,->,147.32.87.44,27977.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:33:57.554622,0.002193,udp,79.173.105.132,14872.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:33:59.560591,0.000525,udp,147.32.84.170,48576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:33:59.561700,0.000403,udp,147.32.84.170,45552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:00.247636,0.000176,udp,147.32.85.25,34234.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:02.115167,0.000227,udp,147.32.84.138,40725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:02.805336,1.2724,tcp,147.32.86.20,4110.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,101,97731,1886,95845,967.6336633663366,0.019297868639428634,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:34:07.039603,0.002245,udp,147.32.85.7,51429.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,247,79,168,123.5,0.31983805668016196,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:09.786345,0.000632,udp,217.66.166.118,39863.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,620,76,544,310.0,0.12258064516129032,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:34:12.430277,0.000625,udp,91.79.130.145,23540.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,565,73,492,282.5,0.12920353982300886,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:34:12.496553,16.254562,tcp,147.32.84.59,49670.0,->,217.31.51.209,80.0,FSPA_FSPA,0.0,0.0,13,2515,1865,650,193.46153846153845,0.7415506958250497,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:34:13.809938,0.000242,udp,147.32.84.170,33618.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,75,164,119.5,0.3138075313807531,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.810129,0.00269,udp,147.32.84.170,52555.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.812041,100.6688,tcp,147.32.84.170,54513.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,17,8843,2585,6258,520.1764705882352,0.2923216103132421,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.813093,11.754481,tcp,147.32.84.170,54852.0,->,194.79.54.24,80.0,FSA_FSA,0.0,0.0,8,564,350,214,70.5,0.6205673758865248,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.813258,11.754273,tcp,147.32.84.170,54855.0,->,194.79.54.24,80.0,FSA_FSA,0.0,0.0,8,564,350,214,70.5,0.6205673758865248,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.814791,11.752905,tcp,147.32.84.170,34085.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,6,410,206,204,68.33333333333333,0.5024390243902439,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.814851,11.752853,tcp,147.32.84.170,34086.0,->,194.79.52.196,80.0,FSA_SRA,0.0,0.0,5,336,206,130,67.2,0.6130952380952381,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.819821,11.747981,tcp,147.32.84.170,40555.0,->,194.79.54.61,80.0,FSA_FSA,0.0,0.0,10,716,428,288,71.6,0.5977653631284916,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:13.977002,0.000633,udp,147.32.84.170,52490.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,79,178,128.5,0.30739299610894943,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.012255,0.000276,udp,147.32.84.170,43153.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,78,151,114.5,0.3406113537117904,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.015004,0.000313,udp,147.32.84.170,59029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,76,166,121.0,0.3140495867768595,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.018353,0.000252,udp,147.32.84.170,40450.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.019298,0.00022,udp,147.32.84.170,40184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,217,72,145,108.5,0.3317972350230415,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.023804,0.004446,udp,147.32.84.170,42924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,239,79,160,119.5,0.3305439330543933,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.024968,0.00024,udp,147.32.84.170,40271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.027498,0.000393,udp,147.32.84.170,54131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,75,165,120.0,0.3125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.156263,0.002568,udp,147.32.84.170,39751.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,79,152,115.5,0.341991341991342,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.279285,0.000391,udp,147.32.84.170,37275.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,72,162,117.0,0.3076923076923077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:14.753911,3.009664,tcp,147.32.84.21,56449.0,->,74.125.39.109,,S_,0.0,,2,148,148,0,74.0,1.0,9,,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:34:14.834586,0.000245,udp,147.32.84.138,41533.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:19.215431,0.000477,udp,80.86.59.179,60550.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,234,172,62,117.0,0.7350427350427351,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:34:19.560197,0.018733,tcp,147.32.84.170,34848.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.109905,0.011892,tcp,147.32.84.170,46002.0,->,194.79.52.194,80.0,FSPA_FSPA,0.0,0.0,9,1970,1305,665,218.88888888888889,0.6624365482233503,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.161603,117.488235,tcp,147.32.84.59,50143.0,->,74.125.232.203,80.0,FSPA_FSPA,0.0,0.0,26,14412,2746,11666,554.3076923076923,0.19053566472384123,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:34:24.209076,0.000423,udp,147.32.84.170,50688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.290833,0.000338,udp,147.32.84.170,32934.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,235,72,163,117.5,0.30638297872340425,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.298926,0.067919,tcp,147.32.84.170,48034.0,->,195.168.10.171,80.0,FSPA_FSPA,0.0,0.0,12,7461,1487,5974,621.75,0.1993030424876022,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.339634,90.141197,tcp,147.32.84.170,54540.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,10,1981,1398,583,198.1,0.7057041898031298,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.339932,90.141022,tcp,147.32.84.170,54542.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,10,2097,1399,698,209.7,0.6671435383881735,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.341287,90.298141,tcp,147.32.84.170,54546.0,->,194.79.52.199,80.0,SPA_SRPA,0.0,0.0,15,7500,1471,6029,500.0,0.19613333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.424284,0.00244,udp,147.32.84.170,39369.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,219,73,146,109.5,0.3333333333333333,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.427109,0.000292,udp,147.32.84.170,56811.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,73,163,118.0,0.3093220338983051,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.428178,0.000578,udp,147.32.84.170,59257.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,76,166,121.0,0.3140495867768595,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.524444,0.000281,udp,147.32.84.170,49860.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.524600,0.000249,udp,147.32.84.170,59889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,81,175,128.0,0.31640625,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.525051,0.000212,udp,147.32.84.170,58323.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,76,140,108.0,0.35185185185185186,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.525058,0.000209,udp,147.32.84.170,60313.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,211,74,137,105.5,0.35071090047393366,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.525941,0.0003,udp,147.32.84.170,52512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,250,76,174,125.0,0.304,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:24.592805,0.675868,tcp,66.249.71.107,41228.0,->,147.32.84.19,443.0,FSPA_FSPA,0.0,0.0,20,5418,1889,3529,270.9,0.34865263935031376,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:34:24.631538,0.000302,udp,147.32.84.170,48103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,266,88,178,133.0,0.3308270676691729,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:34.355483,60.938309,tcp,147.32.84.165,3918.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:34:34.817868,0.000219,udp,147.32.84.138,42803.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:34.822518,9.2e-05,udp,147.32.84.138,51640.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:36.085505,0.000163,udp,147.32.84.138,40426.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:36.580564,7.025022,tcp,120.1.82.182,4295.0,->,147.32.84.2,80.0,SRPA_SPA,0.0,0.0,125,110395,3848,106547,883.16,0.034856651116445495,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:34:39.369434,0.000305,udp,147.32.86.20,51888.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:39.558521,0.00037,udp,147.32.84.170,36936.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:49.566221,0.000457,udp,212.5.128.94,63734.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:34:49.646943,200.996628,udp,93.82.136.135,62093.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,640,300,340,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:34:52.357683,0.020634,udp,147.32.86.147,42653.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,375,87,288,187.5,0.232,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:55.202537,0.000298,udp,147.32.84.170,46387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:55.203229,0.000314,udp,147.32.84.170,46387.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:34:56.309522,0.000207,udp,147.32.84.138,60460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:34:58.564796,6.578923,tcp,147.32.84.59,43238.0,->,193.86.76.38,80.0,FSPA_FSPA,0.0,0.0,72,68723,1940,66783,954.4861111111111,0.028229268221701614,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:34:58.748152,0.000684,udp,92.36.132.128,52683.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,978,81,897,489.0,0.08282208588957055,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:35:00.692921,0.000607,udp,62.227.46.7,14121.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,130,70,60,65.0,0.5384615384615384,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:35:14.960742,0.000352,udp,121.127.201.143,3182.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,146,79,67,73.0,0.541095890410959,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:35:17.088764,49.544254,tcp,147.32.85.26,64990.0,->,209.85.149.189,443.0,FSPA_FSPA,0.0,0.0,21,4479,3108,1371,213.28571428571428,0.6939048894842599,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:35:19.560414,0.020398,tcp,147.32.84.170,34872.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:20.756777,704.773621,rtp,85.227.231.252,43373.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,12,2015,1204,811,167.91666666666666,0.5975186104218362,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:35:24.238307,0.000209,udp,147.32.84.138,59251.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:35:26.206068,0.0003,udp,147.32.84.170,54029.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:29.561418,0.000368,udp,147.32.84.170,44677.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:34.982470,60.954891,tcp,147.32.84.165,3919.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:35:39.558495,0.02044,udp,147.32.84.170,56856.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:39.580681,0.018134,tcp,147.32.84.170,58466.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:41.934779,0.206465,tcp,147.32.86.20,4180.0,->,188.138.84.239,80.0,FSPA_FSPA,0.0,0.0,44,36162,1151,35011,821.8636363636364,0.03182899175930535,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:35:43.356071,0.000503,udp,188.16.0.66,34320.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:35:49.558621,0.000453,udp,147.32.84.170,59145.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:49.559574,0.000391,udp,147.32.84.170,47407.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:49.560701,0.019275,tcp,147.32.84.170,58467.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:59.559314,0.000377,udp,147.32.84.170,50681.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:35:59.560504,0.018417,tcp,147.32.84.170,58680.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:01.825815,0.000304,udp,147.32.85.7,44580.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,242,79,163,121.0,0.32644628099173556,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:04.054596,0.019709,tcp,147.32.86.58,2394.0,->,77.75.77.9,80.0,FSPA_FSPA,0.0,0.0,12,2921,2098,823,243.41666666666666,0.718247175624786,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:36:06.453266,0.039129,udp,147.32.84.59,60484.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,83,223,153.0,0.27124183006535946,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:07.790573,0.000405,udp,147.32.85.7,43991.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,565,76,489,282.5,0.13451327433628318,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:13.515358,0.000153,udp,147.32.84.138,35804.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:15.318443,0.000216,udp,147.32.84.138,53956.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:16.138228,0.000321,udp,147.32.84.138,40719.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:19.559539,0.000299,udp,147.32.84.170,59586.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:19.560537,0.017855,tcp,147.32.84.170,58682.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:22.488069,0.043417,tcp,147.32.84.59,51202.0,->,74.125.232.205,80.0,FSPA_FSPA,0.0,0.0,9,2117,1547,570,235.22222222222223,0.730751062824752,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:36:22.745532,57.357525,tcp,66.249.72.182,37634.0,->,147.32.87.38,80.0,FSPA_FSPA,0.0,0.0,12,2795,812,1983,232.91666666666666,0.29051878354203936,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:36:23.419693,30.683084,tcp,121.37.43.14,1235.0,->,147.32.87.51,3389.0,FSPA_SRPA,0.0,0.0,16,2329,1247,1082,145.5625,0.5354229282954057,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:36:24.038376,0.000335,udp,147.32.84.59,52253.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,323,85,238,161.5,0.2631578947368421,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:24.650120,0.000346,udp,147.32.84.138,39995.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:30.010999,0.210652,tcp,147.32.86.58,2422.0,->,213.189.48.221,80.0,FSPA_FSPA,0.0,0.0,9,1978,978,1000,219.77777777777777,0.49443882709807885,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:36:32.122729,0.019405,udp,147.32.86.89,56208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,241,72,169,120.5,0.2987551867219917,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:35.624573,60.949718,tcp,147.32.84.165,3920.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:36:36.525566,0.000238,udp,147.32.84.138,42089.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:39.558678,0.000255,udp,147.32.84.170,35511.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:39.864744,0.000314,udp,147.32.84.222,52339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,334,91,243,167.0,0.27245508982035926,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:40.014161,120.091011,tcp,147.32.84.171,41525.0,->,147.32.80.13,80.0,FSPA_FSPA,0.0,0.0,12,2686,873,1813,223.83333333333334,0.3250186150409531,9,1,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:36:44.233463,0.000576,udp,94.44.81.26,4239.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:36:49.402513,0.013367,udp,147.32.86.110,38063.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,74,139,106.5,0.3474178403755869,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:49.559588,0.000373,udp,147.32.84.170,59200.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:50.345840,0.001657,udp,89.190.52.198,52276.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,478,60,269.0,0.8884758364312267,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:36:55.147489,18.242119,tcp,84.244.101.227,40629.0,->,147.32.87.33,443.0,FSPA_FSPA,0.0,0.0,139,113366,8845,104521,815.5827338129496,0.07802162905985922,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:36:58.210250,0.000366,udp,147.32.84.170,37386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:36:59.043297,0.003429,udp,98.244.21.154,12405.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2941,60,2881,735.25,0.020401224073444406,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:36:59.868878,0.00017,udp,147.32.84.138,36232.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:36:59.879914,0.001948,udp,195.206.226.73,24822.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,555,495,60,277.5,0.8918918918918919,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:37:00.435551,2.783966,udp,147.32.86.44,123.0,->,65.55.56.40,123.0,INT,0.0,,2,180,180,0,90.0,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:37:03.959027,0.034763,udp,147.32.86.194,64415.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,77,179,128.0,0.30078125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:04.253652,12.78525,tcp,147.32.86.58,2473.0,->,77.75.72.6,80.0,FSPA_FSPA,0.0,0.0,11,2151,1310,841,195.54545454545453,0.609019060901906,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:37:05.734997,0.00016,udp,147.32.84.138,41909.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:06.998713,0.119163,tcp,147.32.85.34,60517.0,->,147.32.80.7,25.0,FSPA_FSPA,0.0,0.0,24,5177,3846,1331,215.70833333333334,0.742901294185822,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:37:09.016028,0.000164,udp,147.32.84.138,43256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:09.493894,0.000658,udp,78.15.86.107,59960.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:37:10.354740,0.000364,udp,147.32.84.59,57883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:10.357447,0.0002,udp,147.32.84.59,47055.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:14.271627,0.000216,udp,147.32.84.138,34125.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:19.559721,0.000286,udp,147.32.84.170,41417.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:21.460074,0.000661,udp,175.158.180.130,37375.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,552,76,476,276.0,0.13768115942028986,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:37:29.558639,0.000493,udp,147.32.84.170,53375.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:29.559626,0.000292,udp,147.32.84.170,34083.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:29.628561,0.014967,udp,147.32.84.59,61198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,336,76,260,168.0,0.2261904761904762,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:33.675126,0.000361,udp,147.32.84.170,42688.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:33.675681,0.000177,udp,147.32.84.170,36727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:33.873671,0.020065,udp,147.32.84.170,60017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,521,83,438,260.5,0.15930902111324377,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:34.304003,471.402924,tcp,147.32.84.170,59871.0,->,66.220.153.23,80.0,FSPA_FSPA,0.0,0.0,105,55237,14095,41142,526.0666666666667,0.25517316291616127,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:34.318843,0.017212,udp,147.32.84.170,44431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,164,82,82,82.0,0.5,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:34.887768,0.002014,udp,147.32.84.170,58256.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,527,80,447,263.5,0.15180265654648956,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:34.892470,40.697945,tcp,147.32.84.170,56632.0,->,2.20.182.10,80.0,FSPA_FSPA,0.0,0.0,12,4182,894,3288,348.5,0.21377331420373027,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:36.257547,60.955063,tcp,147.32.84.165,3921.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:37:36.490118,114.727768,tcp,147.32.84.59,49851.0,->,74.125.232.220,80.0,FSPA_FSPA,0.0,0.0,88,77035,3481,73554,875.3977272727273,0.04518725254754333,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:37:37.086798,18.504744,tcp,147.32.84.170,46231.0,->,92.123.68.161,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:37.087250,18.495628,tcp,147.32.84.170,36927.0,->,195.113.232.98,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:37.087521,18.495346,tcp,147.32.84.170,38469.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:37.087689,18.495186,tcp,147.32.84.170,38470.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:37.088794,18.592573,tcp,147.32.84.170,59884.0,->,66.220.153.23,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:37.776353,0.03889,udp,147.32.84.59,50208.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,83,146,114.5,0.3624454148471616,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:39.560456,0.017979,tcp,147.32.84.170,34916.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:40.037441,0.031787,udp,147.32.84.170,40728.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:40.069737,0.019024,udp,147.32.84.170,56601.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,489,83,406,244.5,0.16973415132924335,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:40.717892,0.038601,udp,147.32.84.170,56883.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:41.868840,13.722415,tcp,147.32.84.170,45889.0,->,92.123.68.155,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:37:48.252183,0.132192,udp,147.32.84.59,54460.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,73,189,131.0,0.2786259541984733,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:49.926897,0.022607,udp,147.32.84.59,56619.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,257,83,174,128.5,0.3229571984435798,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:37:54.579733,0.000886,udp,96.51.240.163,63923.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,257,176,81,128.5,0.6848249027237354,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:37:57.048316,0.105082,tcp,147.32.84.59,36047.0,->,78.138.112.34,80.0,FSPA_FSPA,0.0,0.0,28,17643,1532,16111,630.1071428571429,0.08683330499348184,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:37:57.660069,7.986255,udp,147.32.87.48,1363.0,->,147.32.86.230,161.0,INT,0.0,,10,1310,1310,0,131.0,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:37:58.198382,0.000264,udp,147.32.84.59,60022.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,232,91,141,116.0,0.3922413793103448,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:00.205387,0.000354,udp,147.32.84.170,46157.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:02.367382,0.000457,udp,91.193.207.40,60686.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:04.664066,0.012845,tcp,147.32.85.74,48210.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:38:04.716503,0.000318,udp,147.32.84.170,41517.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,80,217,148.5,0.26936026936026936,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.717260,0.002906,udp,147.32.84.170,55769.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,70,213,141.5,0.24734982332155478,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.873955,0.00017,udp,147.32.84.170,36707.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,75,130,102.5,0.36585365853658536,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.875160,0.000266,udp,147.32.84.170,33862.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.934001,0.005244,udp,147.32.84.170,49771.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,81,244,162.5,0.24923076923076923,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.934128,0.000579,udp,147.32.84.170,43343.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.935125,0.000269,udp,147.32.84.170,47094.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,188,68,120,94.0,0.3617021276595745,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.942343,0.000448,udp,147.32.84.170,58638.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.951060,0.000307,udp,147.32.84.170,59305.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,72,168,120.0,0.3,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.952895,0.000217,udp,147.32.84.170,34717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,271,67,204,135.5,0.24723247232472326,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.953922,0.01789,udp,147.32.84.170,42868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,168,84,84,84.0,0.5,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.966814,0.000246,udp,147.32.84.170,41023.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.968394,16.00658,tcp,147.32.84.170,38943.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,11,2508,810,1698,228.0,0.3229665071770335,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.976434,0.00027,udp,147.32.84.170,51861.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,199,72,127,99.5,0.36180904522613067,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.994108,0.002871,udp,147.32.84.170,44090.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,72,223,147.5,0.2440677966101695,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.998023,0.000248,udp,147.32.84.170,58840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,83,146,114.5,0.3624454148471616,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:04.999170,0.000303,udp,147.32.84.170,41793.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,83,180,131.5,0.3155893536121673,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.034272,0.033124,udp,147.32.84.170,50412.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,83,377,230.0,0.18043478260869567,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.042944,0.003014,udp,147.32.84.170,42189.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,301,75,226,150.5,0.24916943521594684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.077160,0.000228,udp,147.32.84.170,55952.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,71,145,108.0,0.3287037037037037,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.103365,10.488932,tcp,147.32.84.170,46264.0,->,92.123.68.161,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.103644,10.480273,tcp,147.32.84.170,38501.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.103704,10.480217,tcp,147.32.84.170,38502.0,->,195.113.232.89,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.103817,10.578464,tcp,147.32.84.170,59913.0,->,66.220.153.23,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.106722,0.00856,udp,147.32.84.170,34110.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.111488,0.026285,udp,147.32.84.170,54551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.157054,0.000292,udp,147.32.84.170,50054.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,74,140,107.0,0.34579439252336447,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.157743,0.002258,udp,147.32.84.170,59438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:05.173186,0.001987,udp,147.32.84.170,55813.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,293,71,222,146.5,0.24232081911262798,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:07.939782,0.000443,udp,76.184.251.230,55815.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1044,76,968,522.0,0.07279693486590039,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:09.030672,0.060314,tcp,147.32.84.59,36093.0,->,78.138.112.34,80.0,FSPA_FSPA,0.0,0.0,10,1901,1156,745,190.1,0.6081009994739611,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:38:09.558483,0.000393,udp,147.32.84.170,48889.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:09.559430,0.000264,udp,147.32.84.170,57462.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:09.560707,0.017933,tcp,147.32.84.170,59100.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:10.858423,0.064949,udp,147.32.84.59,54438.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,220,78,142,110.0,0.35454545454545455,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:14.317162,0.305376,tcp,147.32.84.170,40590.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:14.421966,0.000226,udp,147.32.84.138,50056.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:14.512440,0.000254,udp,147.32.84.59,38105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,228,89,139,114.0,0.39035087719298245,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:14.614671,0.303388,tcp,147.32.84.170,40593.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:15.727165,0.000321,udp,147.32.85.25,58900.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:20.567127,15.017051,tcp,147.32.84.170,55665.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.567266,0.421624,tcp,147.32.84.170,54769.0,->,91.213.160.12,80.0,FSPA_FSPA,0.0,0.0,10,1756,875,881,175.6,0.4982915717539863,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.567336,15.017123,tcp,147.32.84.170,54770.0,->,91.213.160.12,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.568034,0.002068,udp,147.32.84.170,57741.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,69,218,143.5,0.24041811846689895,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.569015,15.023646,tcp,147.32.84.170,55060.0,->,74.125.232.220,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.850332,0.000283,udp,147.32.84.170,55924.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:20.974116,24.610355,tcp,147.32.84.170,50771.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,11,2508,810,1698,228.0,0.3229665071770335,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:21.142329,0.006161,udp,147.32.84.170,37003.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:21.144804,0.000418,udp,147.32.84.170,59913.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,71,125,98.0,0.3622448979591837,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:21.145623,0.000284,udp,147.32.84.170,60362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,196,71,125,98.0,0.3622448979591837,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:21.149521,0.002367,udp,147.32.84.170,49557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,76,169,122.5,0.31020408163265306,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:21.180629,0.000601,udp,85.173.106.38,21764.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,557,76,481,278.5,0.13644524236983843,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:21.560386,0.039904,udp,147.32.86.44,10966.0,<->,149.5.45.9,43018.0,CON,0.0,0.0,2,137,75,62,68.5,0.5474452554744526,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:25.695361,0.000187,udp,147.32.84.138,46699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:25.715062,21.914085,udp,195.113.36.251,427.0,->,239.255.255.253,427.0,INT,0.0,,6,743,743,0,123.83333333333333,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:38:27.589634,5.673098,tcp,147.32.86.44,1087.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,20,5583,1999,3584,279.15,0.3580512269389217,9,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:38:29.559816,0.000397,udp,147.32.84.170,52671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:31.205853,0.000362,udp,147.32.84.170,57534.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:32.600429,0.000594,udp,222.252.16.107,43286.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,619,74,545,309.5,0.11954765751211632,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:35.331890,0.378955,tcp,147.32.84.164,60401.0,->,213.239.204.205,80.0,FSPA_FSPA,0.0,0.0,10,1315,786,529,131.5,0.5977186311787073,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:38:35.370516,0.000161,udp,147.32.85.88,60816.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:38:36.895343,60.953835,tcp,147.32.84.165,3922.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:38:38.969950,0.767764,tcp,210.94.41.89,61350.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,10,1644,1020,624,164.4,0.6204379562043796,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:38:39.559682,0.000373,udp,147.32.84.170,51306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:46.122572,0.000468,udp,77.120.86.10,21790.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:46.741297,0.001685,udp,86.155.192.125,25939.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,575,515,60,287.5,0.8956521739130435,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:38:49.558754,0.000414,udp,147.32.84.170,33317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:38:53.351998,0.000252,udp,147.32.84.138,58379.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:02.208323,0.00045,udp,147.32.84.170,33941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:09.558737,0.000459,udp,147.32.84.170,32966.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:09.702758,0.00027,udp,147.32.84.138,57455.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:12.701035,0.000242,udp,147.32.85.25,36999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:15.674022,0.000324,udp,147.32.84.170,51028.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,70,213,141.5,0.24734982332155478,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:19.558728,0.000402,udp,147.32.84.170,42727.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:19.559620,0.000441,udp,147.32.84.170,39278.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:21.541714,115.979843,tcp,147.32.86.44,1128.0,->,147.32.80.13,3128.0,FSPA_FSPA,0.0,0.0,20,4876,1858,3018,243.8,0.3810500410172272,9,0,flow=To-Background-CVUT-Proxy,Background,-1 2011-08-17 09:39:22.929255,299.952454,icmp,147.32.87.1,261.0,->,147.32.87.4,37664.0,RED,0.0,,4,280,280,0,70.0,1.0,9,0,flow=Background,Background,-1 2011-08-17 09:39:23.411667,0.000284,udp,147.32.84.138,44691.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:24.546942,0.000177,udp,147.32.84.170,45694.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:25.103949,0.000374,udp,147.32.84.59,36568.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:25.530287,0.111659,udp,147.32.84.170,46703.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,349,83,266,174.5,0.23782234957020057,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:25.619696,0.000577,udp,113.161.65.183,42310.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,562,77,485,281.0,0.13701067615658363,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:39:25.642396,0.913117,udp,147.32.84.170,33518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,353,83,270,176.5,0.23512747875354106,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:26.921222,0.035333,udp,147.32.84.170,37583.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,265,77,188,132.5,0.29056603773584905,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:27.062867,0.302691,tcp,147.32.84.170,39215.0,->,69.58.183.140,80.0,FSPA_FSPA,0.0,0.0,13,4415,787,3628,339.61538461538464,0.1782559456398641,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:29.922717,0.000183,udp,147.32.84.138,46607.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:31.107021,0.000331,udp,147.32.84.59,63646.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,283,74,209,141.5,0.26148409893992935,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:37.532059,60.951324,tcp,147.32.84.165,3923.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:39:38.059675,0.000313,udp,147.32.85.25,55131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:39.559784,0.000386,udp,147.32.84.170,50458.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:39:41.001936,0.000359,udp,147.32.85.89,50746.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:43.073003,0.000281,udp,147.32.84.25,45000.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,387,86,301,193.5,0.2222222222222222,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:49.001393,0.000515,udp,217.203.205.186,53356.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:39:56.551857,0.118676,udp,147.32.85.26,56561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,284,74,210,142.0,0.2605633802816901,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:56.965850,0.219863,udp,147.32.85.30,61118.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,78,149,113.5,0.3436123348017621,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:39:59.558807,0.000338,udp,147.32.84.170,36076.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:01.148776,0.169452,tcp,147.32.86.20,4370.0,->,87.98.230.229,80.0,FSPA_FSPA,0.0,0.0,69,63026,1573,61453,913.4202898550725,0.02495795386031162,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:40:01.234658,0.372303,udp,147.32.84.229,13363.0,<->,114.27.159.247,41808.0,CON,0.0,0.0,2,136,74,62,68.0,0.5441176470588235,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:04.205169,0.00027,udp,147.32.84.170,37645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:07.995661,0.000238,udp,147.32.84.138,42649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:11.016506,0.000358,udp,147.32.84.170,54745.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,390,85,305,195.0,0.21794871794871795,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:15.043390,0.000256,udp,124.122.137.66,40419.0,<->,147.32.86.110,31338.0,CON,0.0,0.0,2,128,60,68,64.0,0.46875,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:19.107423,0.000427,udp,147.32.85.25,50814.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:22.887480,0.000627,udp,78.147.2.122,2907.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,589,76,513,294.5,0.12903225806451613,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:23.267269,0.000246,udp,147.32.84.170,56261.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.269017,0.000571,udp,147.32.84.170,53248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,223,73,150,111.5,0.3273542600896861,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.270418,0.000438,udp,147.32.84.170,40420.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,69,206,137.5,0.2509090909090909,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.271002,0.000139,udp,147.32.84.170,46362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,78,130,104.0,0.375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.271401,0.249977,tcp,147.32.84.170,33803.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1893,1038,855,210.33333333333334,0.5483359746434231,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.271852,0.000206,udp,147.32.84.170,56650.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.271856,0.284499,tcp,147.32.84.170,40795.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,52,51770,1569,50201,995.5769230769231,0.030307127680123624,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.271860,0.00045,udp,147.32.84.170,50259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.272777,0.000422,udp,147.32.84.170,45512.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,238,76,162,119.0,0.31932773109243695,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.272795,0.634518,tcp,147.32.84.170,33816.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,2026,1142,884,225.11111111111111,0.5636722606120435,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.272932,7.153284,tcp,147.32.84.170,33818.0,->,77.78.99.21,80.0,SA_SRA,0.0,0.0,4,256,134,122,64.0,0.5234375,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.273519,22.318911,tcp,147.32.84.170,50821.0,->,217.31.57.205,80.0,FSPA_FSPA,0.0,0.0,12,3708,812,2896,309.0,0.21898597626752966,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.273571,12.320204,tcp,147.32.84.170,50822.0,->,217.31.57.205,80.0,FSA_FSA,0.0,0.0,8,564,350,214,70.5,0.6205673758865248,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.273702,12.416892,tcp,147.32.84.170,56952.0,->,69.171.242.14,80.0,FSA_FSA,0.0,0.0,7,482,272,210,68.85714285714286,0.5643153526970954,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.273847,12.325826,tcp,147.32.84.170,54436.0,->,74.125.232.198,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.289600,12.302003,tcp,147.32.84.170,55758.0,->,195.113.232.97,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.536888,0.00029,udp,147.32.84.170,45266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.538067,0.000288,udp,147.32.84.170,51473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,75,212,143.5,0.2613240418118467,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.538955,0.000233,udp,147.32.84.170,52837.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,313,75,238,156.5,0.23961661341853036,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.540387,0.000338,udp,147.32.84.170,53633.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,287,72,215,143.5,0.2508710801393728,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.540730,0.000246,udp,147.32.84.170,39327.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,198,71,127,99.0,0.35858585858585856,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.541969,0.000351,udp,147.32.84.170,52198.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,299,74,225,149.5,0.24749163879598662,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.542898,0.000215,udp,147.32.84.170,57472.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.543351,0.00034,udp,147.32.84.170,39833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,317,77,240,158.5,0.24290220820189273,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.544423,0.000241,udp,147.32.84.170,43557.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,291,77,214,145.5,0.2646048109965636,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.544873,0.000303,udp,147.32.84.170,52075.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,311,74,237,155.5,0.2379421221864952,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.546028,0.000373,udp,147.32.84.170,51610.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,74,157,115.5,0.3203463203463203,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.633547,0.000372,udp,147.32.84.170,56255.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,325,81,244,162.5,0.24923076923076923,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.633865,0.000255,udp,147.32.84.170,48267.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,73,222,147.5,0.24745762711864408,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.635628,0.00026,udp,147.32.84.170,33266.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,72,159,115.5,0.3116883116883117,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.636275,0.000218,udp,147.32.84.170,56270.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,300,72,228,150.0,0.24,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.636410,0.000385,udp,147.32.84.170,48505.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.691152,0.017221,udp,147.32.84.170,51629.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,222,71,151,111.0,0.31981981981981983,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.709504,0.022889,udp,147.32.84.170,47306.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,337,71,266,168.5,0.21068249258160238,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.717215,0.000271,udp,147.32.86.92,56271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,321,85,236,160.5,0.26479750778816197,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:23.719288,0.004156,tcp,147.32.84.170,33845.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1897,1042,855,210.77777777777777,0.5492883500263575,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.759317,0.000211,udp,147.32.84.170,46217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,200,68,132,100.0,0.34,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.759521,0.00021,udp,147.32.84.170,35156.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,206,75,131,103.0,0.3640776699029126,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.760015,0.000227,udp,147.32.84.170,60409.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,205,72,133,102.5,0.35121951219512193,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.761554,0.000175,udp,147.32.84.170,37081.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,229,83,146,114.5,0.3624454148471616,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.768300,0.000239,udp,147.32.84.170,51274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,308,83,225,154.0,0.2694805194805195,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.768666,0.005209,tcp,147.32.84.170,33846.0,->,77.78.99.21,80.0,FSPA_FSPA,0.0,0.0,9,1897,1042,855,210.77777777777777,0.5492883500263575,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.768875,0.032452,udp,147.32.84.170,43264.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,489,83,406,244.5,0.16973415132924335,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.779260,0.006938,tcp,147.32.84.170,40834.0,->,77.78.99.25,80.0,FSPA_FSPA,0.0,0.0,19,11294,1161,10133,594.421052631579,0.10279794581193553,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.797229,0.000287,udp,147.32.84.170,43217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,294,81,213,147.0,0.2755102040816326,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.803318,0.002786,udp,147.32.84.170,38212.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,70,144,107.0,0.32710280373831774,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:23.806512,0.000391,udp,147.32.84.170,54851.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,71,175,123.0,0.2886178861788618,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:24.010883,0.000185,udp,147.32.84.170,44366.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,210,76,134,105.0,0.3619047619047619,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:24.011819,0.000332,udp,147.32.84.170,38143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,297,71,226,148.5,0.23905723905723905,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:24.012259,0.001807,udp,147.32.84.170,42999.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,427,79,348,213.5,0.18501170960187355,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:24.378501,0.000656,udp,123.220.56.151,63030.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:26.327386,0.000382,udp,147.32.84.170,37311.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,226,82,144,113.0,0.36283185840707965,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:26.567499,69.099144,tcp,147.32.84.170,49261.0,->,92.38.226.7,80.0,FSPA_FSPA,0.0,0.0,146,132025,4880,127145,904.2808219178082,0.03696269645900398,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.107348,0.000294,udp,147.32.84.170,41492.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,183,68,115,91.5,0.37158469945355194,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.107494,0.113151,udp,147.32.84.170,55481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,231,75,156,115.5,0.3246753246753247,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.108552,0.000305,udp,147.32.84.170,59725.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,68,168,118.0,0.288135593220339,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.109659,0.039685,udp,147.32.84.170,40007.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,77,186,131.5,0.29277566539923955,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.128713,0.000256,udp,147.32.84.170,52634.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,71,143,107.0,0.3317757009345794,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.149711,0.02239,udp,147.32.84.170,48671.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,286,77,209,143.0,0.2692307692307692,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.166969,0.001885,udp,147.32.84.170,52587.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,478,81,397,239.0,0.1694560669456067,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.169533,309.995117,tcp,147.32.84.170,46764.0,->,2.21.96.146,443.0,FSRPA_FSPA,0.0,0.0,30,5075,1880,3195,169.16666666666666,0.3704433497536946,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.175572,0.001755,udp,147.32.84.170,42941.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,408,74,334,204.0,0.18137254901960784,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.210106,0.000297,udp,147.32.84.170,36017.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,246,78,168,123.0,0.3170731707317073,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.211818,31.778419,tcp,147.32.84.170,49851.0,->,64.18.21.1,80.0,SPA_SRPA,0.0,0.0,22,20432,704,19728,928.7272727272727,0.03445575567736883,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:27.221073,0.010132,udp,147.32.84.170,39184.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,333,75,258,166.5,0.22522522522522523,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:29.559844,0.000395,udp,147.32.84.170,47549.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:32.988528,0.000268,udp,147.32.86.111,55961.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,243,82,161,121.5,0.3374485596707819,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:33.307636,0.000156,udp,147.32.84.138,37389.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:33.312750,0.000439,udp,147.32.84.138,48807.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:33.766761,0.026595,tcp,90.183.39.17,45827.0,->,147.32.84.2,80.0,FSPA_FSPA,0.0,0.0,22,13001,1188,11813,590.9545454545455,0.09137758633951235,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:40:34.200892,0.000281,udp,147.32.84.170,48589.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:34.203467,0.213793,tcp,147.32.84.170,59402.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:35.727251,0.000683,udp,77.122.104.137,52934.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,132,72,60,66.0,0.5454545454545454,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:37.745441,0.000239,udp,147.32.86.20,50565.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,261,84,177,130.5,0.3218390804597701,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:37.959609,0.000215,udp,147.32.84.138,43976.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:40:38.160759,60.949039,tcp,147.32.84.165,3924.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:40:39.562146,0.018148,tcp,147.32.84.170,59234.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:42.818047,0.000533,udp,81.91.210.2,10089.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,228,155,73,114.0,0.6798245614035088,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:44.553062,0.712743,tcp,210.94.41.89,51027.0,->,147.32.84.36,80.0,FSPA_FSPA,0.0,0.0,10,1542,1112,430,154.2,0.7211413748378729,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:40:49.559924,0.000356,udp,147.32.84.170,57621.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:49.560729,0.000465,udp,147.32.84.170,39620.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:51.971278,0.000474,udp,95.244.60.160,10606.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,131,71,60,65.5,0.5419847328244275,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:53.080146,0.073891,udp,147.32.84.229,13363.0,<->,91.139.247.121,51283.0,CON,0.0,0.0,2,233,171,62,116.5,0.7339055793991416,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:40:53.212849,0.070506,tcp,147.32.84.59,58675.0,->,78.138.112.34,80.0,FSPA_FSPA,0.0,0.0,10,2072,1212,860,207.2,0.584942084942085,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:40:59.559866,0.000494,udp,147.32.84.170,46295.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:59.560838,0.000268,udp,147.32.84.170,45309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:40:59.561871,0.017885,tcp,147.32.84.170,42131.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:03.150837,0.00063,udp,147.32.85.36,52015.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,197,76,121,98.5,0.38578680203045684,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:03.666299,0.000328,udp,147.32.84.170,36912.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,78,162,120.0,0.325,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:03.667057,0.000432,udp,147.32.84.170,33937.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,582,78,504,291.0,0.13402061855670103,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:03.668294,0.303897,tcp,147.32.84.170,54476.0,->,74.125.232.198,80.0,FSRPA_FSPA,0.0,0.0,14,4158,2947,1211,297.0,0.7087542087542088,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.198164,0.000319,udp,147.32.84.170,56258.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.199039,0.000277,udp,147.32.84.170,42254.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.200382,0.207597,tcp,147.32.84.170,59407.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.302473,241.312317,tcp,147.32.84.170,54478.0,->,74.125.232.198,80.0,FSPA_FSPA,0.0,0.0,21,3046,1948,1098,145.04761904761904,0.639527248850952,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.783858,0.000371,udp,147.32.84.170,44760.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.784624,0.000296,udp,147.32.84.170,32881.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.785584,242.393677,tcp,147.32.84.170,53170.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,2685,1523,1162,95.89285714285714,0.5672253258845438,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.785640,242.393753,tcp,147.32.84.170,53171.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,2685,1523,1162,95.89285714285714,0.5672253258845438,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.786088,242.394684,tcp,147.32.84.170,53177.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,28,2652,1490,1162,94.71428571428571,0.5618401206636501,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.786276,287.310852,tcp,147.32.84.170,53180.0,->,209.85.149.132,443.0,FSPA_FSPA,0.0,0.0,216,68143,10799,57344,315.47685185185185,0.15847555875144917,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.786443,242.373947,tcp,147.32.84.170,39341.0,->,74.125.232.197,443.0,SRPA_FSPA,0.0,0.0,31,4957,1547,3410,159.90322580645162,0.3120839217268509,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:04.797056,322.224426,tcp,147.32.84.170,47895.0,->,74.125.232.223,443.0,SPA_SPA,0.0,0.0,54,10253,3415,6838,189.87037037037038,0.3330732468545792,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:05.613013,0.000441,udp,79.171.13.81,5937.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,144,83,61,72.0,0.5763888888888888,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:05.614596,0.000382,udp,147.32.85.87,54151.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:05.619005,0.000451,udp,147.32.85.87,48431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,324,76,248,162.0,0.2345679012345679,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:09.559877,0.000316,udp,147.32.84.170,49091.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:09.560699,0.00032,udp,147.32.84.170,39345.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:11.762637,0.000553,udp,80.72.152.162,10958.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,250,176,74,125.0,0.704,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:12.967118,0.046768,udp,147.32.84.229,13363.0,<->,149.5.45.5,43042.0,CON,0.0,0.0,5,5176,60,5116,1035.2,0.011591962905718702,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:14.816162,0.000327,udp,147.32.85.25,35225.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:14.885343,0.00279,udp,147.32.85.36,42436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,307,75,232,153.5,0.24429967426710097,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:18.558253,0.000206,udp,147.32.84.138,53876.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:19.560899,0.000462,udp,147.32.84.170,45009.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:19.561938,0.000559,udp,147.32.84.170,50224.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:19.562939,0.018577,tcp,147.32.84.170,33656.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:22.625743,0.010639,udp,147.32.84.59,65321.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,407,85,322,203.5,0.20884520884520885,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:22.638017,0.613485,tcp,147.32.84.59,1622.0,->,199.59.149.232,80.0,FSPA_FSPA,0.0,0.0,10,2845,1408,1437,284.5,0.49490333919156415,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:41:22.935648,0.264714,udp,147.32.84.229,13363.0,<->,41.240.228.124,64771.0,CON,0.0,0.0,2,120,60,60,60.0,0.5,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:23.006987,0.000637,udp,68.242.143.148,15608.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:28.721248,0.000446,udp,24.118.197.114,57179.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:29.560705,0.000412,udp,147.32.84.170,54107.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:29.561867,0.018443,tcp,147.32.84.170,50675.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:30.125171,0.000385,udp,147.32.85.25,37729.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:32.183883,0.000336,udp,147.32.84.138,50783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:32.707302,0.000564,udp,188.167.109.107,31413.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:32.762527,27.716393,tcp,213.226.237.254,50739.0,->,147.32.87.33,443.0,SPA_FSRPA,0.0,0.0,15,2832,1560,1272,188.8,0.5508474576271186,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:41:32.816567,0.000452,udp,147.32.84.59,47576.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:35.186783,0.023068,tcp,147.32.85.47,1175.0,->,147.32.3.91,443.0,FSPA_FSPA,0.0,0.0,17,2169,1342,827,127.58823529411765,0.6187183033656063,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:41:35.600700,0.000358,udp,147.32.84.7,35423.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:38.798302,60.940037,tcp,147.32.84.165,3925.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:41:41.001013,0.000646,udp,147.32.85.87,59336.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,275,78,197,137.5,0.28363636363636363,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:47.891709,0.033464,tcp,147.32.86.187,49163.0,->,213.199.181.90,80.0,SRPA_FSPA,0.0,0.0,8,900,397,503,112.5,0.4411111111111111,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:41:49.562075,0.018026,tcp,147.32.84.170,59273.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:51.257487,0.000363,udp,147.32.86.194,64893.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:51.542983,31.443848,udp,93.100.3.33,14941.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,6,3537,3417,120,589.5,0.9660729431721798,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:51.656126,0.00024,udp,147.32.84.170,49436.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:52.660841,0.561794,tcp,147.32.85.47,1189.0,->,147.32.3.91,443.0,FSPA_FSPA,0.0,0.0,17,3642,1664,1978,214.23529411764707,0.45689181768259196,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:41:55.795519,0.000166,udp,147.32.85.25,38942.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:41:57.617353,0.000725,udp,112.68.233.14,24208.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,538,74,464,269.0,0.137546468401487,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:41:59.559925,0.000419,udp,147.32.84.170,37552.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:41:59.562126,0.018083,tcp,147.32.84.170,40511.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:00.414503,0.000194,udp,147.32.84.138,39683.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:06.337569,4.8e-05,icmp,147.32.87.249,,<-,147.32.87.13,2.0,ECR,,0.0,2,148,0,148,74.0,0.0,9,1,flow=Background,Background,-1 2011-08-17 09:42:06.637921,0.000319,udp,147.32.84.59,55796.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:06.715334,0.000374,udp,147.32.84.59,57131.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,330,85,245,165.0,0.25757575757575757,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:09.561975,0.018332,tcp,147.32.84.170,42172.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:14.366316,0.001692,udp,147.32.84.170,41518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,234,79,155,117.0,0.33760683760683763,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:14.512187,0.000288,udp,147.32.84.170,39774.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:15.007809,0.000183,udp,147.32.84.138,59481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:15.511433,10.097883,tcp,147.32.84.170,33665.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:16.562487,0.000167,udp,147.32.84.170,51868.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,79,139,109.0,0.3623853211009174,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:16.701301,258.91806,tcp,147.32.84.170,54519.0,->,74.125.232.198,80.0,FSPA_FSRPA,0.0,0.0,173,122019,21808,100211,705.3121387283237,0.17872626394250077,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:16.993139,0.009872,udp,147.32.84.170,48104.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:16.997016,0.000344,udp,147.32.84.170,35209.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:16.997932,248.621185,tcp,147.32.84.170,51175.0,->,74.125.232.223,80.0,FSPA_FSRPA,0.0,0.0,47,18845,2811,16034,400.9574468085106,0.14916423454497213,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.040171,0.00034,udp,147.32.84.170,55274.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,372,70,302,186.0,0.1881720430107527,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.041377,0.000334,udp,147.32.84.170,46035.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.042051,0.000299,udp,147.32.84.170,41105.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,377,75,302,188.5,0.1989389920424403,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.050657,0.000372,udp,147.32.84.170,56562.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,409,77,332,204.5,0.1882640586797066,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.052245,0.000321,udp,147.32.84.170,54920.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.052938,0.000306,udp,147.32.84.170,49649.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.078244,0.00034,udp,147.32.84.170,49282.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,396,78,318,198.0,0.19696969696969696,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.155168,0.000608,udp,147.32.84.170,33632.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,563,75,488,281.5,0.13321492007104796,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:17.189924,0.000309,udp,147.32.84.170,48651.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:18.049514,0.000408,udp,147.32.84.170,53840.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:21.313406,1.5e-05,udp,147.32.84.138,41974.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:21.937072,0.000331,udp,147.32.84.170,57248.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,309,75,234,154.5,0.24271844660194175,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:22.016755,0.000294,udp,147.32.85.34,58398.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,292,77,215,146.0,0.2636986301369863,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:22.474347,0.000432,udp,147.32.84.170,32859.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:22.475146,244.687042,tcp,147.32.84.170,53215.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4755,1549,3206,153.38709677419354,0.32576235541535226,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:22.475768,244.683807,tcp,147.32.84.170,53219.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4792,1570,3222,154.58064516129033,0.32762938230383976,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:22.479506,244.683655,tcp,147.32.84.170,53221.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4754,1548,3206,153.3548387096774,0.3256205300799327,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:22.479802,244.683075,tcp,147.32.84.170,53223.0,->,209.85.149.132,443.0,SRPA_FSPA,0.0,0.0,31,4754,1548,3206,153.3548387096774,0.3256205300799327,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:28.331523,243.24942,udp,147.32.84.8,38701.0,<->,82.208.56.89,123.0,CON,0.0,0.0,6,540,270,270,90.0,0.5,9,1,flow=To-Normal-V49-UDP-NTP-server,Normal,0 2011-08-17 09:42:29.560070,0.000302,udp,147.32.84.170,34302.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:29.560940,0.000386,udp,147.32.84.170,59558.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:30.285963,0.108535,tcp,147.32.86.27,1343.0,->,213.199.177.155,443.0,FSPA_FSPA,0.0,0.0,19,8268,2042,6226,435.1578947368421,0.24697629414610547,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:42:31.663093,0.000426,udp,193.200.32.33,63151.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,140,80,60,70.0,0.5714285714285714,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:42:35.355879,0.049658,udp,109.150.253.74,49154.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,275,155,120,68.75,0.5636363636363636,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:42:38.324569,1.545082,tcp,147.32.85.87,49766.0,->,209.85.149.132,443.0,SRPA_SPA,0.0,0.0,15,3569,989,2580,237.93333333333334,0.27710843373493976,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:42:39.426884,60.938206,tcp,147.32.84.165,3926.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:42:45.391088,0.000279,udp,147.32.84.138,45767.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:45.973106,0.000225,udp,147.32.84.19,50271.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,263,87,176,131.5,0.33079847908745247,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:46.116212,0.672506,udp,147.32.87.48,1412.0,->,147.32.87.126,161.0,INT,0.0,,76,9996,9996,0,131.52631578947367,1.0,9,1,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:42:49.560064,0.000379,udp,147.32.84.170,34595.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:49.562086,0.018045,tcp,147.32.84.170,40539.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:42:49.903075,0.000565,udp,86.160.149.120,30709.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,241,179,62,120.5,0.7427385892116183,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:42:53.290324,0.000574,udp,147.32.85.87,34308.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,221,75,146,110.5,0.3393665158371041,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:53.294391,0.000386,udp,147.32.85.87,46783.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,233,80,153,116.5,0.34334763948497854,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:54.368063,0.11873,udp,147.32.84.229,13363.0,<->,208.88.186.8,34041.0,CON,0.0,0.0,2,532,472,60,266.0,0.8872180451127819,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:42:55.992669,0.000837,udp,147.32.85.87,45143.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,295,73,222,147.5,0.24745762711864408,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:42:59.126188,0.919755,tcp,147.32.86.20,4500.0,->,193.93.174.21,80.0,FSPA_FSPA,0.0,0.0,103,107582,1586,105996,1044.485436893204,0.014742243126173523,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:42:59.561925,0.020211,tcp,147.32.84.170,50709.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:00.276093,5.009025,tcp,147.32.86.89,4247.0,->,90.183.101.168,80.0,FSPA_FSPA,0.0,0.0,12,3732,1078,2654,311.0,0.28885316184351556,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:43:03.605558,0.03202,udp,147.32.84.59,52383.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,218,78,140,109.0,0.3577981651376147,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:05.016923,0.195499,udp,147.32.84.59,51309.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,347,74,273,173.5,0.2132564841498559,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:05.622932,0.018553,udp,147.32.84.59,62699.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,216,79,137,108.0,0.36574074074074076,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:07.196080,0.000311,udp,147.32.84.170,35211.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:07.196933,0.000223,udp,147.32.84.170,60939.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:11.564740,0.005579,udp,147.32.84.40,48351.0,<->,93.99.5.140,123.0,CON,0.0,0.0,2,180,90,90,90.0,0.5,9,1,flow=Background-UDP-NTP-Established-1,Background,-1 2011-08-17 09:43:13.366097,0.000684,udp,117.4.111.103,23096.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,980,78,902,490.0,0.07959183673469387,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:13.743867,2.435073,tcp,147.32.84.170,45434.0,->,209.85.148.106,443.0,FSPA_FSPA,0.0,0.0,16,2649,1142,1507,165.5625,0.43110607776519444,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:14.069467,0.009701,udp,147.32.84.132,63458.0,<->,8.8.8.8,53.0,CON,0.0,0.0,2,210,82,128,105.0,0.3904761904761905,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:14.402579,0.000253,udp,147.32.84.138,51190.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:14.657120,0.278471,tcp,147.32.84.170,47138.0,->,209.85.148.105,443.0,FSPA_FSPA,0.0,0.0,16,2677,1162,1515,167.3125,0.4340679865521106,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:16.530534,0.000299,udp,147.32.84.138,49130.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:16.736014,0.000951,udp,67.149.34.25,57383.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,1492,156,1336,746.0,0.10455764075067024,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:19.149285,112.384377,udp,212.96.169.134,1066.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,10,1335,731,604,133.5,0.547565543071161,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:19.559848,0.000413,udp,147.32.84.170,50349.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:19.561775,0.019938,tcp,147.32.84.170,43349.0,->,209.85.148.103,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:21.258994,0.050726,udp,147.32.84.229,13363.0,<->,46.233.13.68,18152.0,CON,0.0,0.0,2,138,78,60,69.0,0.5652173913043478,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:24.801156,51.501881,tcp,147.32.86.135,2920.0,->,88.146.119.120,80.0,FSA_FSA,0.0,0.0,9,546,302,244,60.666666666666664,0.5531135531135531,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:43:27.267051,0.0,tcp,113.105.171.58,80.0,->,147.32.86.29,3695.0,SA_,0.0,,1,66,66,0,66.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:43:29.560149,0.000249,udp,147.32.84.170,54283.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:29.560955,0.000267,udp,147.32.84.170,42159.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:29.716281,0.000262,udp,147.32.84.59,37139.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,76,214,145.0,0.2620689655172414,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:30.282020,201.965698,tcp,147.32.84.170,52502.0,->,74.125.232.206,443.0,SPA_SPA,0.0,0.0,95,50822,4104,46718,534.9684210526316,0.08075243004997835,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.433972,0.000245,udp,147.32.84.170,60551.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.434239,0.000315,udp,147.32.84.170,58918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.434368,0.020401,udp,147.32.84.170,59815.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,73,142,107.5,0.3395348837209302,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.434438,0.000359,udp,147.32.84.170,59479.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.435215,0.00068,udp,147.32.84.170,34526.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,604,84,520,302.0,0.1390728476821192,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.455183,0.01058,udp,147.32.84.170,58133.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,557,73,484,278.5,0.1310592459605027,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.456472,0.000302,udp,147.32.84.170,39582.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,256,85,171,128.0,0.33203125,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.458234,0.000341,udp,147.32.84.170,52885.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.465584,0.000436,udp,147.32.84.170,55077.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,73,171,122.0,0.29918032786885246,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.467224,180.461426,tcp,147.32.84.170,48034.0,->,209.85.148.106,80.0,SPA_SPA,0.0,0.0,37,19664,2439,17225,531.4594594594595,0.12403376729048006,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.467375,14.144494,tcp,147.32.84.170,48038.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.467452,14.144051,tcp,147.32.84.170,48039.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:31.519813,0.000545,udp,62.221.85.202,62277.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,137,77,60,68.5,0.5620437956204379,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:31.526830,60.617355,udp,178.19.22.126,64771.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,482,358,124,120.5,0.7427385892116183,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:31.578850,0.000374,udp,147.32.84.170,57841.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,573,73,500,286.5,0.1273996509598604,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:38.240554,0.001855,udp,99.235.151.55,5401.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,541,481,60,270.5,0.88909426987061,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:39.559870,0.000436,udp,147.32.84.170,47112.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:39.560829,0.000273,udp,147.32.84.170,58481.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:43:40.053643,60.953976,tcp,147.32.84.165,3927.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:43:40.296707,4.3e-05,tcp,147.32.87.27,3306.0,->,147.32.84.2,36356.0,SA_,0.0,,2,148,148,0,74.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:43:42.832398,1.4e-05,tcp,147.32.87.27,3306.0,->,147.32.84.2,36403.0,SA_,0.0,,2,148,148,0,74.0,1.0,9,0,flow=Background-TCP-Established,Background,-1 2011-08-17 09:43:43.129790,0.000276,udp,147.32.85.25,53326.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,66,141,103.5,0.3188405797101449,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:44.939579,0.001857,udp,147.32.84.242,49174.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,245,99,146,122.5,0.40408163265306124,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:46.918675,0.059828,udp,147.32.84.229,13363.0,<->,88.135.156.87,11745.0,CON,0.0,0.0,4,2971,60,2911,742.75,0.02019522046449007,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:48.686077,0.00022,udp,147.32.85.25,51277.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:49.209768,0.000373,udp,147.32.85.30,56702.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,215,77,138,107.5,0.3581395348837209,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:50.177084,0.00041,udp,94.234.170.32,12515.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,242,180,62,121.0,0.743801652892562,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:43:53.266883,0.000255,udp,147.32.84.138,58563.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:43:59.682735,0.047733,udp,147.32.84.132,63062.0,<->,8.8.8.8,53.0,CON,0.0,0.0,4,478,158,320,119.5,0.3305439330543933,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:05.135790,0.000224,udp,147.32.85.34,60518.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,322,85,237,161.0,0.2639751552795031,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:05.171091,0.000274,udp,147.32.85.34,63259.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:05.715283,0.004839,udp,71.207.102.70,30856.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,2945,60,2885,736.25,0.02037351443123939,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:06.477331,0.013309,tcp,147.32.84.215,44021.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:44:07.098950,0.001422,udp,109.238.236.198,7760.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,14,2636,523,2113,188.28571428571428,0.19840667678300455,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:07.469594,10.021753,tcp,147.32.85.7,39006.0,->,74.125.232.223,443.0,SRPA_SPA,0.0,0.0,15,3388,1011,2377,225.86666666666667,0.29840613931523025,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:44:08.197207,0.218872,tcp,147.32.84.170,38978.0,->,195.24.233.55,80.0,FSPA_FSPA,0.0,0.0,10,1219,549,670,121.9,0.45036915504511893,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:44:08.332055,0.000386,udp,147.32.85.7,58652.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:08.987377,0.247578,udp,147.32.84.134,51951.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:44:09.562218,0.01782,tcp,147.32.84.170,48046.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:44:10.026830,0.000412,udp,147.32.84.134,42183.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Jist,Normal,0 2011-08-17 09:44:11.990670,0.000626,udp,109.205.254.23,37738.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,320,64,256,160.0,0.2,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:14.129557,0.000447,udp,85.172.185.237,16369.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:18.963448,0.000299,udp,147.32.84.138,36152.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:19.561939,0.018194,tcp,147.32.84.170,48047.0,->,209.85.148.106,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:44:21.344878,0.000452,udp,60.49.73.27,43156.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:23.074461,0.000498,udp,95.105.183.49,65206.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,236,174,62,118.0,0.7372881355932204,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:28.825326,0.000254,udp,147.32.86.147,58940.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,128,178,153.0,0.41830065359477125,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:29.270901,0.000206,udp,147.32.84.138,56222.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:29.992493,1.1e-05,icmp,147.32.86.96,,<-,147.32.87.29,61227.0,ECR,,0.0,2,196,0,196,98.0,0.0,9,0,flow=Background,Background,-1 2011-08-17 09:44:34.846369,0.012864,tcp,147.32.85.74,41943.0,->,86.49.87.107,6889.0,S_RA,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-TCP-Attempt,Background,-1 2011-08-17 09:44:35.653708,0.0007,udp,109.205.248.163,2173.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,302,64,238,151.0,0.2119205298013245,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:39.561338,0.000399,udp,147.32.84.170,50250.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:44:40.690657,60.9398,tcp,147.32.84.165,3928.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:44:44.076276,0.001645,udp,147.32.84.59,58717.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,71,137,104.0,0.34134615384615385,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:44:49.561049,0.000317,udp,147.32.84.170,43972.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:44:50.416318,0.02794,udp,147.32.84.229,13363.0,<->,87.118.158.7,31871.0,CON,0.0,0.0,2,148,87,61,74.0,0.5878378378378378,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:50.660798,0.0005,udp,83.221.34.4,16833.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:44:55.415840,0.000514,udp,89.162.197.14,13062.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,142,82,60,71.0,0.5774647887323944,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:01.065324,0.000374,udp,147.32.85.25,44351.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,208,79,129,104.0,0.3798076923076923,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:05.648223,0.000269,udp,147.32.86.92,36794.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,306,78,228,153.0,0.2549019607843137,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:10.483273,0.000264,udp,147.32.84.138,59149.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:16.096491,0.451894,udp,199.40.206.187,59633.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,275,155,120,68.75,0.5636363636363636,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:19.562371,0.017947,tcp,147.32.84.170,34310.0,->,209.85.148.99,80.0,FSA_FSA,0.0,0.0,7,478,272,206,68.28571428571429,0.5690376569037657,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:45:19.796435,0.000566,udp,118.7.74.184,20651.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,136,76,60,68.0,0.5588235294117647,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:21.464386,0.000335,udp,147.32.85.87,57039.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,213,77,136,106.5,0.3615023474178404,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:25.259084,64.391411,udp,147.32.84.184,59371.0,->,193.0.231.250,43314.0,INT,0.0,,18,1260,1260,0,70.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:45:29.174087,0.00029,udp,147.32.84.59,47994.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,258,78,180,129.0,0.3023255813953488,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:29.560025,0.000437,udp,147.32.84.170,58614.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:45:30.621234,0.079497,tcp,147.32.84.59,53865.0,->,78.138.112.61,80.0,FSPA_FSPA,0.0,0.0,10,1880,1013,867,188.0,0.5388297872340425,9,1,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:45:36.279663,0.857825,udp,82.41.9.195,16889.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,4,551,275,276,137.75,0.49909255898366606,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:41.318934,60.939594,tcp,147.32.84.165,3929.0,->,222.189.228.111,3389.0,FSPA_FSPA,0.0,0.0,10,1076,437,639,107.6,0.40613382899628253,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:45:46.054064,0.000213,udp,147.32.85.89,33561.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,204,77,127,102.0,0.37745098039215685,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:46.896143,0.000243,udp,147.32.84.138,49782.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:45:51.265034,28.290956,udp,147.32.84.229,13363.0,<->,72.133.206.240,65442.0,CON,0.0,0.0,10,670,370,300,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:54.595872,0.134308,udp,147.32.84.229,13363.0,<->,129.93.23.29,28998.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:55.985681,0.026917,udp,147.32.86.96,57131.0,<->,80.250.21.93,161.0,CON,0.0,0.0,2,236,111,125,118.0,0.4703389830508475,9,1,flow=Background-UDP-Established,Background,-1 2011-08-17 09:45:59.560940,0.000317,udp,147.32.84.170,52465.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:45:59.562084,0.018261,tcp,147.32.84.170,32848.0,->,209.85.148.104,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:00.019386,0.000318,udp,147.32.84.59,39410.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,191,70,121,95.5,0.36649214659685864,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:01.338236,0.000606,udp,147.32.84.164,49400.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,97,183,140.0,0.3464285714285714,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.338243,0.248677,udp,147.32.84.164,51217.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.339141,0.000178,udp,147.32.84.164,59918.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,207,75,132,103.5,0.36231884057971014,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.384112,45.278976,tcp,147.32.84.164,59438.0,->,74.125.232.223,443.0,SPA_SPA,0.0,0.0,16,3454,1011,2443,215.875,0.29270411117544876,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.661666,0.000283,udp,147.32.84.164,53704.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,136,222,179.0,0.37988826815642457,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.662030,45.172421,tcp,147.32.84.164,45333.0,->,209.85.148.106,443.0,SPA_SPA,0.0,0.0,12,1471,935,536,122.58333333333333,0.6356220258327668,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.662077,0.000555,udp,147.32.84.164,57334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,460,136,324,230.0,0.2956521739130435,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.662084,45.171974,tcp,147.32.84.164,45334.0,->,209.85.148.106,443.0,SPA_SPA,0.0,0.0,12,1471,935,536,122.58333333333333,0.6356220258327668,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.662153,0.000628,udp,147.32.84.164,55358.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,571,79,492,285.5,0.138353765323993,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:01.662992,0.000262,udp,147.32.84.164,47103.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,296,105,191,148.0,0.3547297297297297,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.081694,0.247837,udp,147.32.84.164,54773.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.226405,0.00041,udp,147.32.84.164,39289.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,262,84,178,131.0,0.32061068702290074,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.236981,45.256119,tcp,147.32.84.164,57422.0,->,74.125.232.195,443.0,SPA_SPA,0.0,0.0,16,3866,1016,2850,241.625,0.2628039317123642,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.329803,0.000429,udp,147.32.84.164,48473.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.691654,0.009689,udp,147.32.84.164,46468.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,344,79,265,172.0,0.22965116279069767,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:02.701800,45.167915,tcp,147.32.84.164,50156.0,->,209.85.149.95,443.0,SPA_SPA,0.0,0.0,20,6426,1648,4778,321.3,0.25645813881108,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:05.188404,0.000299,udp,147.32.84.123,60353.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,252,101,151,126.0,0.4007936507936508,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:05.788683,0.000286,udp,147.32.85.34,49362.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,326,86,240,163.0,0.26380368098159507,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:07.015967,0.000314,udp,147.32.84.164,35431.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,426,73,353,213.0,0.17136150234741784,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:09.231434,0.133214,udp,147.32.84.59,22975.0,<->,129.105.233.147,13680.0,CON,0.0,0.0,2,579,73,506,289.5,0.12607944732297063,9,0,flow=Background-Established-cmpgw-CVUT,Background,-1 2011-08-17 09:46:09.562413,0.000427,udp,147.32.84.170,50293.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:10.169196,0.000348,udp,147.32.84.164,37645.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,88,270,179.0,0.24581005586592178,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:10.441419,0.000247,udp,147.32.84.138,53106.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:11.207401,0.000411,udp,147.32.84.170,40053.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,280,81,199,140.0,0.2892857142857143,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:12.129719,0.017722,udp,147.32.84.123,58244.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,502,76,426,251.0,0.15139442231075698,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:14.976038,0.000321,udp,147.32.84.164,47554.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,290,102,188,145.0,0.35172413793103446,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.976042,0.010241,udp,147.32.84.164,37120.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,240,83,157,120.0,0.3458333333333333,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.976115,45.227947,tcp,147.32.84.164,59457.0,->,74.125.232.223,443.0,SPA_SPA,0.0,0.0,16,3454,1011,2443,215.875,0.29270411117544876,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.977316,0.000364,udp,147.32.84.164,36396.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,362,87,275,181.0,0.24033149171270718,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.977673,45.292431,tcp,147.32.84.164,42179.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,16,3700,1038,2662,231.25,0.28054054054054056,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.977786,45.292706,tcp,147.32.84.164,42182.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,16,3700,1038,2662,231.25,0.28054054054054056,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.978409,6.477044,tcp,147.32.84.164,42187.0,->,209.85.149.132,443.0,SRPA_SPA,0.0,0.0,15,3694,1066,2628,246.26666666666668,0.2885760693015701,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:14.998960,45.245136,tcp,147.32.84.164,37708.0,->,74.125.232.198,443.0,SPA_SPA,0.0,0.0,16,3867,1017,2850,241.6875,0.2629945694336695,9,1,flow=From-Normal-V49-Grill,Normal,0 2011-08-17 09:46:15.746141,0.000243,udp,147.32.84.138,59239.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:17.136003,21.7005,tcp,38.101.148.126,36582.0,->,147.32.86.92,80.0,FSPA_FSPA,0.0,0.0,14,3519,701,2818,251.35714285714286,0.199204319408923,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:46:17.432885,0.000233,udp,147.32.84.138,42334.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:19.561534,0.000382,udp,147.32.84.170,42404.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:21.206072,0.000504,udp,81.214.57.125,33607.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,133,73,60,66.5,0.5488721804511278,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:23.599015,0.339944,udp,147.32.84.229,13363.0,<->,114.40.165.176,40080.0,CON,0.0,0.0,2,602,75,527,301.0,0.12458471760797342,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:29.560240,0.000308,udp,147.32.84.170,52344.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:30.882436,0.000532,udp,88.203.20.213,40754.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,249,187,62,124.5,0.751004016064257,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:31.506437,0.000178,udp,147.32.84.138,52108.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:33.292343,0.000191,udp,147.32.84.138,43408.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,214,81,133,107.0,0.37850467289719625,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:37.909773,0.159169,udp,147.32.85.117,61159.0,<->,65.34.216.39,17575.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:39.560484,0.000314,udp,147.32.84.170,38559.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:41.207709,0.00041,udp,147.32.84.170,55622.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,244,81,163,122.0,0.3319672131147541,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:41.757267,0.000466,udp,147.32.86.20,64167.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,314,85,229,157.0,0.27070063694267515,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:41.947106,0.799031,tcp,147.32.84.165,3930.0,->,222.189.228.111,3389.0,SPA_SPA,0.0,0.0,6,836,317,519,139.33333333333334,0.3791866028708134,9,0,flow=From-Botnet-V49-TCP-CC74-HTTP-Custom-Port-Not-Encrypted,Botnet,1 2011-08-17 09:46:45.493938,0.000659,udp,94.101.193.176,3187.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,135,75,60,67.5,0.5555555555555556,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:45.843015,0.001447,udp,195.96.230.170,34571.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,232,170,62,116.0,0.7327586206896551,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:46.398067,0.00122,udp,147.32.85.36,58317.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,576,75,501,288.0,0.13020833333333334,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:46:49.561233,0.000428,udp,147.32.84.170,54092.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,400,74,326,200.0,0.185,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:46:51.020466,0.001869,udp,220.130.11.192,54455.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,531,471,60,265.5,0.8870056497175142,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:54.389102,0.00014,tcp,147.32.192.230,524.0,,147.32.86.24,1039.0,A_A,0.0,0.0,2,120,60,60,60.0,0.5,9,0,flow=Background,Background,-1 2011-08-17 09:46:57.021274,0.000425,udp,99.6.253.124,52818.0,<->,147.32.84.229,13363.0,CON,0.0,0.0,2,134,74,60,67.0,0.5522388059701493,9,0,flow=Background-UDP-Established,Background,-1 2011-08-17 09:46:59.564561,0.01781,tcp,147.32.84.170,37447.0,->,209.85.148.147,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:01.493346,0.003936,udp,147.32.86.111,61386.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,236,71,165,118.0,0.3008474576271186,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1 2011-08-17 09:47:04.048575,0.005146,tcp,147.32.86.111,1840.0,->,194.79.52.204,80.0,SRPA_FSPA,0.0,0.0,8,1562,1003,559,195.25,0.6421254801536491,9,1,flow=Background-TCP-Established,Background,-1 2011-08-17 09:47:07.505225,0.010072,udp,147.32.84.170,32987.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,566,76,490,283.0,0.13427561837455831,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:07.989383,0.247075,udp,147.32.84.170,44833.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,150,75,75,75.0,0.5,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.354876,0.000269,udp,147.32.84.170,55363.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,254,84,170,127.0,0.33070866141732286,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.354999,0.000528,udp,147.32.84.170,52339.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,358,85,273,179.0,0.23743016759776536,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.355790,0.282112,tcp,147.32.84.170,45937.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,14,3535,955,2580,252.5,0.27015558698727016,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.361099,0.278919,tcp,147.32.84.170,45939.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,14,3534,954,2580,252.42857142857142,0.2699490662139219,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.361115,1.649882,tcp,147.32.84.170,45940.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,116,54227,5471,48756,467.4741379310345,0.10089070020469508,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.361514,0.119461,tcp,147.32.84.170,45946.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,10,1366,896,470,136.6,0.6559297218155198,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.361709,0.11927,tcp,147.32.84.170,45950.0,->,209.85.149.132,443.0,SPA_SPA,0.0,0.0,10,1366,896,470,136.6,0.6559297218155198,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:08.982102,0.000438,udp,147.32.84.170,60867.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,542,75,467,271.0,0.13837638376383765,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:09.357550,0.0,udp,147.32.84.184,59371.0,->,193.0.231.250,21204.0,INT,0.0,,1,70,70,0,70.0,1.0,9,0,flow=Background-UDP-Attempt,Background,-1 2011-08-17 09:47:09.563368,0.018072,tcp,147.32.84.170,41152.0,->,209.85.148.105,80.0,FSA_FSA,0.0,0.0,6,412,272,140,68.66666666666667,0.6601941747572816,9,1,flow=From-Normal-V49-Stribrek,Normal,0 2011-08-17 09:47:10.852321,0.000196,udp,147.32.86.110,60206.0,<->,147.32.80.9,53.0,CON,0.0,0.0,2,227,75,152,113.5,0.3303964757709251,9,1,flow=To-Background-UDP-CVUT-DNS-Server,Background,-1