Topic Messages: logstash-local-network

First Offset: 1582489  Last Offset: 1605829  Size: 23340
  
  
  
  
  
  
Offset: 1582489   Key:   Timestamp: 2025-12-10 03:33:42.797 Headers: empty
  
{"@version":"1","event":{"hash":"304d507ef20635d55fb81cf3803281e92f07ae10cbad7d14cfbf8369e524a381"},"ecs":{"version":"1.6.0"},"message":"1765337620.333947\tCryeFp1EwuZdw0OQO2\t172.30.1.12\t55621\t8.8.8.8\t53\tudp\t55290\t0.028453\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t212.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:42.250Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":524827},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582490   Key:   Timestamp: 2025-12-10 03:33:42.797 Headers: empty
  
{"@version":"1","event":{"hash":"3ab6149c828889ae6ddec3060de2536e91f6f91479581ab0257e3a8dc1923d69"},"ecs":{"version":"1.6.0"},"message":"1765337620.226340\tC4a49W12lRrDeFvkUg\t172.30.1.12\t58409\t8.8.8.8\t53\tudp\t55287\t0.028406\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t212.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:42.250Z","host":{"name":"f6b540842a86"},"log":{"offset":525002,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582491   Key:   Timestamp: 2025-12-10 03:33:42.797 Headers: empty
  
{"@version":"1","event":{"hash":"ac3c1d13cc5e67e5d99e642bfe45eb1b6fcd59cbc92ce207affad57ec9b7b64b"},"ecs":{"version":"1.6.0"},"message":"1765337620.311091\tC49YOB4C0zPR3o04N2\t172.30.1.12\t56551\t8.8.8.8\t53\tudp\t55288\t-\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t248.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:42.250Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":524659},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582492   Key:   Timestamp: 2025-12-10 03:33:42.797 Headers: empty
  
{"@version":"1","event":{"hash":"8f0c68e171372b697879dbaead0c7ed41a1eaa0c1966170ff0091d5b95ba13f8"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337609.887751\tC9tCvW1qBRIudSOWS9\t172.30.1.12\t41005\t8.8.8.8\t53\tudp\tdns\t0.028882\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:41.692Z","host":{"name":"f6b540842a86"},"log":{"offset":522230,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582493   Key:   Timestamp: 2025-12-10 03:33:43.797 Headers: empty
  
{"@version":"1","event":{"hash":"bb80559d7ad95a0492c193c8bf6f7ddb471823cf17e042c4978fe138d4ffb0e9"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337610.926258\tCYvAPg3Cmkbtgzm8W3\t172.30.1.12\t32927\t8.8.8.8\t53\tudp\tdns\t0.029348\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:42.692Z","host":{"name":"f6b540842a86"},"log":{"offset":522354,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582494   Key:   Timestamp: 2025-12-10 03:33:43.797 Headers: empty
  
{"@version":"1","event":{"hash":"6447462fdf52ce54243726d9a4e197b370d2d932c2f646ff3cc75e45f77768a7"},"ecs":{"version":"1.6.0"},"message":"1765337621.548646\tC8gAA432wHVNKvkaOc\t172.30.1.35\t58737\t172.30.1.254\t53\tudp\t61597\t0.019860\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2175.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:43.250Z","host":{"name":"f6b540842a86"},"log":{"offset":525177,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582495   Key:   Timestamp: 2025-12-10 03:33:43.797 Headers: empty
  
{"@version":"1","event":{"hash":"8b6ebc01463cc91d5fe397d787153a76abd839bd39b73e6c5d8da3967806d5c6"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337611.546037\tC3WTSy4pZ0m9J5aZh3\t172.30.1.35\t55109\t172.30.1.254\t53\tudp\tdns\t0.004130\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:42.694Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":522478},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582496   Key:   Timestamp: 2025-12-10 03:33:44.797 Headers: empty
  
{"@version":"1","event":{"hash":"5f46c3f7299f0da1cf5449690f3f0e4f2675322331abe5c6cebff68baba4af97"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337611.966295\tCKExUa3N7M3lMoW15k\t172.30.1.12\t48171\t8.8.8.8\t53\tudp\tdns\t0.027694\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:43.694Z","host":{"name":"f6b540842a86"},"log":{"offset":522609,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582497   Key:   Timestamp: 2025-12-10 03:33:44.797 Headers: empty
  
{"@version":"1","event":{"hash":"fcf04aa9fcd098999d5426d79aa09d45f819b946d0be76a83bdfd8cc4c28618d"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337561.740094\tCV6ViC4gdYjuJA6v75\tfe80::b2be:76ff:fec9:7610\t130\tff02::1\t131\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:43.694Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":522733},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582498   Key:   Timestamp: 2025-12-10 03:33:44.797 Headers: empty
  
{"@version":"1","event":{"hash":"8036d6aeebd36e4ab88b79a79e85fca5623b9ab8056dfd4c4f2a880cc4cb6882"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337561.890389\tCSazAn4cJa0pEx6KGg\tfe80::6263:4cff:febc:17c6\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:43.694Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":522859},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582499   Key:   Timestamp: 2025-12-10 03:33:45.799 Headers: empty
  
{"@version":"1","event":{"hash":"8d2107e6275d089e5b2605c79111224c5f590486061a745b24d8d3eccb473a81"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337612.996254\tC55HQw2OyfPPTyUJOf\t172.30.1.12\t38187\t8.8.8.8\t53\tudp\tdns\t0.028855\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:44.695Z","host":{"name":"f6b540842a86"},"log":{"offset":523111,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582500   Key:   Timestamp: 2025-12-10 03:33:45.799 Headers: empty
  
{"@version":"1","event":{"hash":"baf62de974385ac6c6eab6981d3927c46febab4c8e6b77db48839d10b391cb10"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337562.688693\tCVauEE5XbH0MXu483\tfe80::c251:7eff:fe56:e095\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:44.695Z","host":{"name":"f6b540842a86"},"log":{"offset":523235,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582501   Key:   Timestamp: 2025-12-10 03:33:45.799 Headers: empty
  
{"@version":"1","event":{"hash":"1d031d5d035d7257c4fe8e1ccac38e6de1dbe8d9377a6b26b1137a93af9d6810"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337562.345547\tC62LaM23p8VXEECyxd\tfe80::a272:2cff:fef5:f5fb\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t116\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:44.694Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":522985},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582502   Key:   Timestamp: 2025-12-10 03:33:45.799 Headers: empty
  
{"@version":"1","event":{"hash":"f792054385b53634774cbd295f5ae4426e438eea7f5cac40e44c1db57a571052"},"ecs":{"version":"1.6.0"},"message":"1765337622.286578\tFzD5Yn4D7UA1ish3xk\t3\t06B81D8F3880317F63739450833BAE49\tCN=siamsecure.net\tCN=RapidSSL TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US\t1740960000.000000\t1772841599.000000\trsaEncryption\tsha256WithRSAEncryption\trsa\t2048\t65537\t-\tsiamsecure.net,www.siamsecure.net\t-\t-\t-\tF\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:44.742Z","host":{"name":"f6b540842a86"},"log":{"offset":29292,"file":{"path":"/usr/share/filebeat/logs/x509.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582503   Key:   Timestamp: 2025-12-10 03:33:46.799 Headers: empty
  
{"@version":"1","event":{"hash":"3aa94eae794fc0d1ac6dfbe2f468eb1b9ac0dfcc2cb9a0b7373434b6477b5db2"},"ecs":{"version":"1.6.0"},"message":"1765337625.986091\tCRhiRa2lCIprk1Jssj\t172.30.1.132\t6056\t8.8.8.8\t53\tudp\t2425\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:46.251Z","host":{"name":"f6b540842a86"},"log":{"offset":525351,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582504   Key:   Timestamp: 2025-12-10 03:33:46.799 Headers: empty
  
{"@version":"1","event":{"hash":"dbf7fce37a451abb19e935ca3eb7f4848caa73178b3d8b7ba64d07d582e2bfe4"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337565.176053\tCoYD67AbUAZBXkll9\tfe80::2c41:11ff:fe33:ac74\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:46.696Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":523721},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582505   Key:   Timestamp: 2025-12-10 03:33:46.799 Headers: empty
  
{"@version":"1","event":{"hash":"6a90ec5d0fc7ed536c9ebf700335fe7cfa605a1ddaac80adeb07f9b4f12378de"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337614.036355\tC8zz6j36YqOblXOd9i\t172.30.1.12\t43079\t8.8.8.8\t53\tudp\tdns\t0.027757\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:45.695Z","host":{"name":"f6b540842a86"},"log":{"offset":523359,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582506   Key:   Timestamp: 2025-12-10 03:33:46.799 Headers: empty
  
{"@version":"1","event":{"hash":"127815175a17401f0e7b7af76037b2ae8c6b3e4fc42cf6b449b4f0cbe82b0952"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337563.979470\tCe6wZb1GbtNautsBs7\t172.30.1.132\t3\t172.30.1.254\t3\ticmp\t-\t-\t-\t-\tOTH\tT\tT\t0\t-\t1\t99\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:45.695Z","host":{"name":"f6b540842a86"},"log":{"offset":523483,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582507   Key:   Timestamp: 2025-12-10 03:33:46.799 Headers: empty
  
{"@version":"1","event":{"hash":"9b2fd59b0e60280f60f09614930c4f55fe863bf047027b125c246784ee91968a"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337615.066326\tCdYnNB4JUQmAnLSwea\t172.30.1.12\t52584\t8.8.8.8\t53\tudp\tdns\t0.027339\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:46.695Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":523597},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582508   Key:   Timestamp: 2025-12-10 03:33:48.355 Headers: empty
  
{"@version":"1","event":{"hash":"68fd82beec4608fa50c9c1417f2d1ad735d844d95b8982fa8d871d765ee270d5"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337565.612705\tCcxfaP365yP1NsBFBh\tfe80::c251:7eff:fefb:e9d7\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t96\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:47.698Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":523970},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582509   Key:   Timestamp: 2025-12-10 03:33:48.355 Headers: empty
  
{"@version":"1","event":{"hash":"71ba5a65829537f7f26473b5ec5d89d73e9e39ae4195942351914db5868a70f7"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337565.938617\tCz6EA24yTSfnQgUPGj\tfe80::222:19ff:fe59:6c3c\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:47.698Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":524095},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582510   Key:   Timestamp: 2025-12-10 03:33:48.355 Headers: empty
  
{"@version":"1","event":{"hash":"266babcee2ab3eb8a4a3cbd78c6a2ecb5b1c3de91ee2fcdf401fd1c897a0ad74"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337565.455794\tCCELPvs61y7eOL6a8\tfe80::ca1f:66ff:fecb:6f36\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:47.698Z","host":{"name":"f6b540842a86"},"log":{"offset":523845,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582511   Key:   Timestamp: 2025-12-10 03:33:48.355 Headers: empty
  
{"@version":"1","event":{"hash":"3290cc7022190bb5af0b45a37162b342f05f4396a6ae3584537a4ab8d95bfe4f"},"ecs":{"version":"1.6.0"},"message":"1765337622.114234\tCl8DN13rOqwFAivU92\t202.46.62.52\t1075\t172.30.1.2\t80\t1\tGET\tsscweb.dyndns.info\t/index.php?smsite=abll&smid=22967&smtemp=anagawa\t-\t1.1\tMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36\t-\t0\t266\t302\tFound\t-\t-\t(empty)\t-\t-\t-\t-\t-\t-\tFNt3aq1trooVo9e1jl\t-\ttext/html","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:47.719Z","host":{"name":"f6b540842a86"},"log":{"offset":21304,"file":{"path":"/usr/share/filebeat/logs/http.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582512   Key:   Timestamp: 2025-12-10 03:33:48.355 Headers: empty
  
{"@version":"1","event":{"hash":"e5557082ad407c1c7ac09cfeb5d3a563b02eb17ba3641102f091b0cab2fe87ee"},"ecs":{"version":"1.6.0"},"message":"1765337625.986115\tCo4Vf51h3TAj7LXkT3\t172.30.1.132\t6056\t172.30.1.254\t53\tudp\t2425\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:47.251Z","host":{"name":"f6b540842a86"},"log":{"offset":525501,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582513   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"6ef4294ff353eeedf20e25b6f4ab5bed51c8b946bbf3c52eb093fdaab0cc0ddc"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337616.790469\tCyeM2fMgGPgVUjRz4\t172.30.1.65\t5353\t224.0.0.251\t5353\tudp\tdns\t-\t-\t-\tS0\tT\tF\t0\tD\t1\t98\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"offset":524470,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582514   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"8c663933fab24ed9d0c15e924e1f8af4cc09ed8fb8379f3dc5565597bf5262a4"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337616.102573\tC13dim4z7XStdRGI92\t172.30.1.12\t53387\t8.8.8.8\t53\tudp\tdns\t0.022365\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"offset":524220,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582515   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"c6e2eed6b33a42718e5fb6f24567b1cb6243ca18a45f786533c145963bd6957b"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337616.589801\tCxe9OZ24QCIgaJsX9c\t172.30.1.35\t58147\t8.8.8.8\t53\tudp\tdns\t0.027541\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"offset":524344,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582516   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"9092628b9f826b33cc05fa2b4e0d60e79ad4889af34a5dc179c62157c7c329f4"},"ecs":{"version":"1.6.0"},"message":"1765337616.790469\tCyeM2fMgGPgVUjRz4\t172.30.1.65\t5353\t224.0.0.251\t5353\tudp\t0\t-\t_esphomelib._tcp.local\t-\t-\t-\t-\t0\tNOERROR\tT\tF\tF\tF\t0\tpower-consumption-ssc._esphomelib._tcp.local\t0.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.252Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":525656},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582517   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"044d830c8ce4046fd56aa67c1eab8a55f51fda523a7a30b7893cc70217785b62"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337564.269504\tCLd5xZ3XaaLU9KBP2c\tfe80::68b5:14e3:6da1:5bd8\t143\tff02::16\t0\ticmp\t-\t2.498291\t80\t0\tOTH\tF\tF\t0\t-\t3\t248\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"offset":524842,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582518   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"c10ce469ceeef3010ef7ee129dcce762462edd60a6adbc2ac7e1e026b77b4da1"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337621.580044\tCszXSl3ZdABYcl6XBk\t172.30.1.2\t52276\t172.30.4.139\t1514\ttcp\t-\t3.003373\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":524717},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582519   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"bb32459e6d047a67a637693c56ce17ac1f62f0440d846081d95061980b90a060"},"ecs":{"version":"1.6.0"},"message":"1765337626.571737\tC254673fer7qKXm9lf\t172.30.1.35\t57109\t172.30.1.254\t53\tudp\t11082\t-\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2170.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.252Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":525841},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582520   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"b93fc35f6356839dab0955396ebb4d7e9c677974c34433c88332caab6843e846"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337617.136446\tCsCPG12fnBKPHDkBa\t172.30.1.12\t56547\t8.8.8.8\t53\tudp\tdns\t0.027711\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"offset":524976,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582521   Key:   Timestamp: 2025-12-10 03:33:49.357 Headers: empty
  
{"@version":"1","event":{"hash":"730598c4ac36ddc6f22e99ecb697e330c4b059f537ccb0b43d8bd837144d6e9e"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337616.549352\tCMMnyd1WWyRUh4ToK\t172.30.1.35\t58147\t172.30.1.254\t53\tudp\tdns\t0.314742\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:48.699Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":524587},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582522   Key:   Timestamp: 2025-12-10 03:33:50.356 Headers: empty
  
{"@version":"1","event":{"hash":"4e72f95439ef349685dd61653bfba823d93c4554bde9d7d92a46ca9e503adba2"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337622.026680\tCl8DN13rOqwFAivU92\t202.46.62.52\t1075\t172.30.1.2\t80\ttcp\thttp\t0.176209\t312\t512\tSF\tF\tT\t0\tShADadfF\t6\t632\t5\t780\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:49.699Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":525099},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582523   Key:   Timestamp: 2025-12-10 03:33:50.356 Headers: empty
  
{"@version":"1","event":{"hash":"ae6c1afac81db03dc069dbba5c9c775c4ef29fc90752aa627305c36cf307d771"},"ecs":{"version":"1.6.0"},"message":"1765337627.636584\tCBmrobVaIyfiJ8LSb\t172.30.1.12\t52189\t8.8.8.8\t53\tudp\t55291\t0.028456\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t47.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:49.252Z","host":{"name":"f6b540842a86"},"log":{"offset":526008,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582524   Key:   Timestamp: 2025-12-10 03:33:50.356 Headers: empty
  
{"@version":"1","event":{"hash":"083ed0163be3a06997eec162544142b644b553c7a2221768b5e95c2755e0f137"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337620.363088\tCpQXb72YMO10PdCAV4\t172.30.1.12\t40934\t61.90.207.93\t9090\ttcp\t-\t2.026875\t2095\t1274\tSF\tT\tF\t0\tShADadFf\t9\t2571\t5\t1542\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:49.700Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":525237},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582525   Key:   Timestamp: 2025-12-10 03:33:50.356 Headers: empty
  
{"@version":"1","event":{"hash":"7056e8ae0861a52d2818dfe9861f016cd910098aefbfa3de18a06370fd86917b"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337622.197195\tCLYXPd4BIAU4Lcmved\t202.46.62.6\t45068\t172.30.1.2\t443\ttcp\tssl\t0.839204\t1083\t19037\tRSTO\tF\tT\t0\tShADadfR\t20\t2119\t19\t20033\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:49.700Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":525380},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582526   Key:   Timestamp: 2025-12-10 03:33:50.357 Headers: empty
  
{"@version":"1","event":{"hash":"cebd2f02bf10f5b89e81f6d244cf51a9e89c238961545c0ceab9557473ffd83d"},"ecs":{"version":"1.6.0"},"message":"1765337622.278114\tCLYXPd4BIAU4Lcmved\t202.46.62.6\t45068\t172.30.1.2\t443\tTLSv12\tTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\tsecp521r1\twww.siamsecure.net\tF\t-\t-\tT\tFzD5Yn4D7UA1ish3xk,FCUzP22Mn6CdVpNWWb\t(empty)\tCN=siamsecure.net\tCN=RapidSSL TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US\t-\t-\tok\tc54a639adf4392674c538ef931f003d6\tbef8041fc75fa81ab9e6467bcef0f376","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:49.791Z","host":{"name":"f6b540842a86"},"log":{"offset":35350,"file":{"path":"/usr/share/filebeat/logs/ssl.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582527   Key:   Timestamp: 2025-12-10 03:33:51.359 Headers: empty
  
{"@version":"1","event":{"hash":"ffd93a6c012b892d0f891f2fe01686dfc490f0d90158b9f8d6b86cac53c9154a"},"ecs":{"version":"1.6.0"},"message":"1765337628.676384\tCNgSvc3ykFMxBYvvX6\t172.30.1.12\t43213\t8.8.8.8\t53\tudp\t55292\t0.027240\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t290.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.255Z","host":{"name":"f6b540842a86"},"log":{"offset":526181,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582528   Key:   Timestamp: 2025-12-10 03:33:51.359 Headers: empty
  
{"@version":"1","event":{"hash":"5ffb50d2d5c328bfcde6e2c07b4cfd010296fdb24cfa8a3d6fcbaae0a8d185de"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337618.166363\tC6Bpow2j3awPrSdKQ4\t172.30.1.12\t36263\t8.8.8.8\t53\tudp\tdns\t0.028107\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.700Z","host":{"name":"f6b540842a86"},"log":{"offset":525528,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582529   Key:   Timestamp: 2025-12-10 03:33:51.359 Headers: empty
  
{"@version":"1","event":{"hash":"6d61f59d4d609486b757fe907ba7765f044d6bde64a0b22549f8b9e209d6d3b9"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337568.742174\tCfZFkN1J55TQHm1dG3\tfe80::22e4:300:8a61:450b\t143\tff02::16\t0\ticmp\t-\t0.000444\t40\t0\tOTH\tF\tF\t0\t-\t2\t152\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.700Z","host":{"name":"f6b540842a86"},"log":{"offset":525652,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582530   Key:   Timestamp: 2025-12-10 03:33:51.359 Headers: empty
  
{"@version":"1","event":{"hash":"45daba84311bcd2042e6d1aff92d69cf8ad9064bb75cc3a8756753216a228692"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337564.607811\tCH6k751dRrVQoHps63\tfe80::c86:954f:5d3e:13c9\t143\tff02::16\t0\ticmp\t-\t4.001371\t80\t0\tOTH\tF\tF\t0\t-\t4\t304\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.700Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":525785},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582531   Key:   Timestamp: 2025-12-10 03:33:51.360 Headers: empty
  
{"@version":"1","event":{"hash":"868342913dfd6aeefd62e04daa318a12bb7726cfc61b78e2ac3de2550794ae9b"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337619.196397\tC2teUk1r3vLZw5JPHd\t172.30.1.12\t37907\t8.8.8.8\t53\tudp\tdns\t0.027493\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.700Z","host":{"name":"f6b540842a86"},"log":{"offset":526043,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582532   Key:   Timestamp: 2025-12-10 03:33:51.360 Headers: empty
  
{"@version":"1","event":{"hash":"3cfd1c25231fa12db601cb5348f656ae2a56c4eaa9aa297f3c062f5f2f34b29f"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337568.789580\tCzagczO4bLZDkJgk7\tfe80::2a87:baff:fee8:8f52\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:50.700Z","host":{"name":"f6b540842a86"},"log":{"offset":525918,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582533   Key:   Timestamp: 2025-12-10 03:33:52.360 Headers: empty
  
{"@version":"1","event":{"hash":"f1df8e55b678013a7ff2e215ab8352073bc64cfdeee248906a0b4852783b2d74"},"ecs":{"version":"1.6.0"},"message":"1765337629.706440\tCcVruQ10NIN127jo4a\t172.30.1.12\t55677\t8.8.8.8\t53\tudp\t55293\t0.030064\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t289.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:51.256Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":526356},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582534   Key:   Timestamp: 2025-12-10 03:33:52.360 Headers: empty
  
{"@version":"1","event":{"hash":"d265371b5235adb376fbd4de89acf31b891e927470563087815b1b2c852832ba"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337569.042631\tCJbjT32vh9poLTdWw8\tfe80::a629:9f54:45ee:d1d5\t143\tff02::16\t0\ticmp\t-\t1.007491\t80\t0\tOTH\tF\tF\t0\t-\t3\t248\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:51.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526167,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582535   Key:   Timestamp: 2025-12-10 03:33:52.361 Headers: empty
  
{"@version":"1","event":{"hash":"45fe7888a977f4e6bf470c3c930bfdf24c5c1189369201241e6a3d4bf48d5278"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337620.226340\tC4a49W12lRrDeFvkUg\t172.30.1.12\t58409\t8.8.8.8\t53\tudp\tdns\t0.028406\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:51.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526301,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582536   Key:   Timestamp: 2025-12-10 03:33:52.361 Headers: empty
  
{"@version":"1","event":{"hash":"b92f3b64baee601c5e1df08f4c39b775683344853df7013eed3feb6fb9433f37"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337569.615798\tCGSuld1ti8QpjQvxpl\tfe80::c55e:ff17:5ec1:f6be\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:51.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526425,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582537   Key:   Timestamp: 2025-12-10 03:33:52.361 Headers: empty
  
{"@version":"1","event":{"hash":"fcfe422fc7654f68b60d766c153f91f22ac9959e0b76abe151a249471d116b62"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337620.303921\tCqQk3i5mcnYkozEP8\t172.30.1.12\t56084\t8.8.8.8\t53\tudp\tdns\t0.027671\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:51.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526550,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582538   Key:   Timestamp: 2025-12-10 03:33:53.359 Headers: empty
  
{"@version":"1","event":{"hash":"27458dce1f3af159cbfe531175acbc6ab08f33365f4d7a144a0f46f84ef6ccbf"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337620.262534\tC49YOB4C0zPR3o04N2\t172.30.1.12\t56551\t8.8.8.8\t53\tudp\tdns\t0.027942\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:52.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526673,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582539   Key:   Timestamp: 2025-12-10 03:33:53.359 Headers: empty
  
{"@version":"1","event":{"hash":"32fadae0ddd91bb0c063e30e0e81f3f2c58aa29942e63213626a0249922cf33c"},"ecs":{"version":"1.6.0"},"message":"1765337630.746742\tCH3PBSNiDZfywe6q2\t172.30.1.12\t60275\t8.8.8.8\t53\tudp\t55294\t0.028053\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t44.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:52.256Z","host":{"name":"f6b540842a86"},"log":{"offset":526531,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582540   Key:   Timestamp: 2025-12-10 03:33:53.359 Headers: empty
  
{"@version":"1","event":{"hash":"77c0e8d3e3a5a9da639425d31f471a7b637c0a49835317bae2bf4cf5b1c6639e"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337620.333947\tCryeFp1EwuZdw0OQO2\t172.30.1.12\t55621\t8.8.8.8\t53\tudp\tdns\t0.028453\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:52.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526797,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582541   Key:   Timestamp: 2025-12-10 03:33:53.360 Headers: empty
  
{"@version":"1","event":{"hash":"6c503d551542cd066932f794d79e0a1210a8a27e27440344f8624f6ce9912d26"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337626.182900\tCLKPc83ZgLjX4iaBl1\t172.30.2.16\t52628\t172.30.1.35\t7680\ttcp\t-\t0.002229\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:52.701Z","host":{"name":"f6b540842a86"},"log":{"offset":526921,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582542   Key:   Timestamp: 2025-12-10 03:33:53.360 Headers: empty
  
{"@version":"1","event":{"hash":"58eaf7df46f7b37a970474599a2368a01b0622b78ad91bf1cc9f0ca62e8949f5"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337625.638232\tCtezox1tVV4ontzwl7\t172.30.1.35\t52175\t172.30.2.17\t7680\ttcp\t-\t0.002695\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:52.701Z","host":{"name":"f6b540842a86"},"log":{"offset":527055,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582543   Key:   Timestamp: 2025-12-10 03:33:54.360 Headers: empty
  
{"@version":"1","event":{"hash":"6f7a0775c5e655a6b95e6371c2a77d3120bd02f0596793195aa64c62add6c6cf"},"ecs":{"version":"1.6.0"},"message":"1765337631.584229\tCordHm3Wpp0yWUpJV9\t172.30.1.35\t60678\t8.8.8.8\t53\tudp\t22117\t0.031632\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t713.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:53.256Z","host":{"name":"f6b540842a86"},"log":{"offset":526704,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582544   Key:   Timestamp: 2025-12-10 03:33:54.360 Headers: empty
  
{"@version":"1","event":{"hash":"8bbaf20b5f312743f6a91f0c591ff62860bc3a69f04e313cd827aeec0af64477"},"ecs":{"version":"1.6.0"},"message":"1765337631.786533\tChgo3314GNmapkaYI1\t172.30.1.12\t58757\t8.8.8.8\t53\tudp\t55295\t0.028135\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t287.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:53.256Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":526872},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582545   Key:   Timestamp: 2025-12-10 03:33:54.360 Headers: empty
  
{"@version":"1","event":{"hash":"9592ff11c26b044d5c161c6428137b23abd205b1c584c792f7694b279fa88f12"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337621.548646\tC8gAA432wHVNKvkaOc\t172.30.1.35\t58737\t172.30.1.254\t53\tudp\tdns\t0.019860\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:53.701Z","host":{"name":"f6b540842a86"},"log":{"offset":527189,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582546   Key:   Timestamp: 2025-12-10 03:33:54.360 Headers: empty
  
{"@version":"1","event":{"hash":"c302ab1fc7d1df0c58e5c1221596e257271bfa2d40f02c438808292662df2365"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337571.702099\tC6eN2a2pKxbh85JuM2\tfe80::86c9:b2ff:fe5c:232\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t96\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:53.702Z","host":{"name":"f6b540842a86"},"log":{"offset":527320,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582547   Key:   Timestamp: 2025-12-10 03:33:55.362 Headers: empty
  
{"@version":"1","event":{"hash":"9ef57c18f02273730f36b1f975077c903a7d426fe3dbd217e2f8a2dec3ba9877"},"ecs":{"version":"1.6.0"},"message":"1765337632.827165\tCSiInz2GwGg1rmT9Qb\t172.30.1.12\t48861\t8.8.8.8\t53\tudp\t55296\t0.029841\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t236.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:54.257Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":527047},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582548   Key:   Timestamp: 2025-12-10 03:33:56.361 Headers: empty
  
{"@version":"1","event":{"hash":"329ed2793c3d8bb10b6bf9d101091c1976acdc9c040ac09aa7747fe0a8be822d"},"ecs":{"version":"1.6.0"},"message":"1765337634.926512\tChMdQy10tfMRabNsf7\t172.30.1.12\t49558\t8.8.8.8\t53\tudp\t55299\t0.026401\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t284.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:56.258Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":527743},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582549   Key:   Timestamp: 2025-12-10 03:33:56.361 Headers: empty
  
{"@version":"1","event":{"hash":"d3c7870a9072f419f0e175865a01502de5b3503a4d72f31f51b2f0c7ef9dae56"},"ecs":{"version":"1.6.0"},"message":"1765337633.866538\tCRCYPt2UmhesbS5xX2\t172.30.1.12\t43612\t8.8.8.8\t53\tudp\t55297\t0.028756\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t41.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:55.257Z","host":{"name":"f6b540842a86"},"log":{"offset":527222,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582550   Key:   Timestamp: 2025-12-10 03:33:56.361 Headers: empty
  
{"@version":"1","event":{"hash":"18af7832598b925fffc073f0a23b7a72399a18dabf0c464af2ce55499246d3fa"},"ecs":{"version":"1.6.0"},"message":"1765337633.896883\tCygi1S24xi2FbJKnM\t172.30.1.12\t51961\t8.8.8.8\t53\tudp\t55298\t0.027630\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t41.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:55.257Z","host":{"name":"f6b540842a86"},"log":{"offset":527396,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582551   Key:   Timestamp: 2025-12-10 03:33:56.361 Headers: empty
  
{"@version":"1","event":{"hash":"5ecce50d0eb05950d42bbf3407209901c888582811d3e5071d4de071ed68fb7d"},"ecs":{"version":"1.6.0"},"message":"1765337631.544000\tCd3HuX1pjFqThdtaad\t172.30.1.35\t60678\t172.30.1.254\t53\tudp\t22117\t2.015238\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2189.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:55.257Z","host":{"name":"f6b540842a86"},"log":{"offset":527569,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582552   Key:   Timestamp: 2025-12-10 03:33:58.361 Headers: empty
  
{"@version":"1","event":{"hash":"8a8af21bde53096e24b1000c801848e574087cd857c6f7a3fa798b3b0b891fed"},"ecs":{"version":"1.6.0"},"message":"1765337635.956519\tCTb8xQ1LdiDVo7poia\t172.30.1.12\t57188\t8.8.8.8\t53\tudp\t55300\t0.027686\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t283.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:57.258Z","host":{"name":"f6b540842a86"},"log":{"offset":527918,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582553   Key:   Timestamp: 2025-12-10 03:33:58.362 Headers: empty
  
{"@version":"1","event":{"hash":"e459f5f9c1b3a28ac7ed8be2a0a09ca0a8bd4a8d4e4b113e10eb49bdb31f4ae4"},"ecs":{"version":"1.6.0"},"message":"1765337636.986697\tCGNvDO3aucqojMMjj2\t172.30.1.12\t44514\t8.8.8.8\t53\tudp\t55301\t0.027585\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t37.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:58.258Z","host":{"name":"f6b540842a86"},"log":{"offset":528262,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582554   Key:   Timestamp: 2025-12-10 03:33:58.361 Headers: empty
  
{"@version":"1","event":{"hash":"e3b14bc1cbccf433debd2ea8972802f4ab4a2bcc726c00db1400bf84d4b29685"},"ecs":{"version":"1.6.0"},"message":"1765337636.585543\tC0nTVX1YIEHk7Q3q89\t172.30.1.35\t55380\t8.8.8.8\t53\tudp\t61727\t0.026564\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2733.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:58.258Z","host":{"name":"f6b540842a86"},"log":{"offset":528093,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582555   Key:   Timestamp: 2025-12-10 03:34:00.363 Headers: empty
  
{"@version":"1","event":{"hash":"8a1b5af94c9a5d2541330d0daa83f1f8e5e666eb2c59f54233006104a51df55a"},"ecs":{"version":"1.6.0"},"message":"1765337638.016528\tC9tPqt2a4E67YGjKh5\t172.30.1.12\t60007\t8.8.8.8\t53\tudp\t55302\t0.027049\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t194.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:33:59.259Z","host":{"name":"f6b540842a86"},"log":{"offset":528436,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582556   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"4c42b648018cd82228fd1fe7c7ef3db4bb8720a3fddb4275866a37e04ed9e928"},"ecs":{"version":"1.6.0"},"message":"1765337636.545559\tCiiHont4SmeegJDnb\t172.30.1.35\t55380\t172.30.1.254\t53\tudp\t61727\t2.013475\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2184.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.259Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":528611},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582557   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"354fcd7074f17eacb85e4eada8f61d6d8210296d10a4182a5f3a2827990ff715"},"ecs":{"version":"1.6.0"},"message":"1765337640.076605\tCfdZFA3trnfCWzDlD3\t172.30.1.12\t41976\t8.8.8.8\t53\tudp\t55304\t0.030464\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t192.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:01.260Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":528957},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582558   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"b3c491fbc7b5965b03c76066510efe1102a6be0cf6f98fbf841dabee9d1ad27c"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337628.676384\tCNgSvc3ykFMxBYvvX6\t172.30.1.12\t43213\t8.8.8.8\t53\tudp\tdns\t0.027240\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.702Z","host":{"name":"f6b540842a86"},"log":{"offset":527951,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582559   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"9bfb31cf5b55852a2f5d03d5047fd5f4e7aea33d77b5e2e8c2c6cb88a25fda95"},"ecs":{"version":"1.6.0"},"message":"1765337639.046797\tCj6dmTrzDWzyBJMQ1\t172.30.1.12\t38720\t8.8.8.8\t53\tudp\t55303\t0.026666\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t35.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.259Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":528784},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582560   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"b38661f3c5ec77b460fe04dd8a2638d8606baea5bb8eb92bbdb6ad7b5ef46725"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337625.986115\tCo4Vf51h3TAj7LXkT3\t172.30.1.132\t6056\t172.30.1.254\t53\tudp\tdns\t0.081892\t43\t43\tSF\tT\tT\t0\tDd\t1\t71\t1\t71\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.702Z","host":{"name":"f6b540842a86"},"log":{"offset":527444,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582561   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"d35032c663d68f407d065c2dafe22d5eed479cc13cc79844c13008daab049c3a"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337625.986091\tCRhiRa2lCIprk1Jssj\t172.30.1.132\t6056\t8.8.8.8\t53\tudp\tdns\t0.028616\t43\t43\tSF\tT\tF\t0\tDd\t1\t71\t1\t71\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.702Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":527573},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582562   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"928f4b9d0687bd1f2f38769eb3cda88bb80a9f00cb07f01f0db914f29886fd09"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337626.556455\tC254673fer7qKXm9lf\t172.30.1.35\t57109\t172.30.1.254\t53\tudp\tdns\t0.005487\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.702Z","host":{"name":"f6b540842a86"},"log":{"offset":527697,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582563   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"b50dbd0f697ae908308785045179d25ba35a7a66b617edf66a35f855ac6bc865"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337627.636584\tCBmrobVaIyfiJ8LSb\t172.30.1.12\t52189\t8.8.8.8\t53\tudp\tdns\t0.028456\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:00.702Z","host":{"name":"f6b540842a86"},"log":{"offset":527828,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582564   Key:   Timestamp: 2025-12-10 03:34:01.365 Headers: empty
  
{"@version":"1","event":{"hash":"b1460e1788f21e0873add2900a314a762e3c955d68764ad69b14da08e6fae33e"},"ecs":{"version":"1.6.0"},"message":"1765337639.152404\tCBrz9J1mUMfzSBdjtc\t172.30.1.65\t5353\t224.0.0.251\t5353\tudp\t0\t0.594135\tpower-consumption-ssc.local\t1\tC_INTERNET\t255\t*\t0\tNOERROR\tT\tF\tF\tF\t0\t_esphomelib._tcp.local,power-consumption-ssc._esphomelib._tcp.local,power-consumption-ssc.local,TXT 51 api_encryption=Noise_NNpsk0_25519_ChaChaPoly_SHA256 TXT 12 network=wifi TXT 24 board=ttgo-t7-v14-mini32 TXT 14 platform=ESP32 TXT 16 mac=0cb8151ae720 TXT 16 version=2023.6.5 TXT 35 friendly_name=Power-Consumption-SSC,172.30.1.65\t4500.000000,4500.000000,120.000000,4500.000000,120.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:01.260Z","host":{"name":"f6b540842a86"},"log":{"offset":529132,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582565   Key:   Timestamp: 2025-12-10 03:34:02.806 Headers: empty
  
{"@version":"1","event":{"hash":"fc3af69b61de3951a5f62aa9cc5ae5b2a4a5d61aa1177a4d60e865c578fd9340"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337629.706440\tCcVruQ10NIN127jo4a\t172.30.1.12\t55677\t8.8.8.8\t53\tudp\tdns\t0.030064\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:01.703Z","host":{"name":"f6b540842a86"},"log":{"offset":528200,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582566   Key:   Timestamp: 2025-12-10 03:34:02.806 Headers: empty
  
{"@version":"1","event":{"hash":"9c7ef07dbd3f83e8711a2b452e5f4283132ee2c5a1b9c9de3cc1939b2cec620d"},"ecs":{"version":"1.6.0"},"message":"1765337641.164681\tC9X1ZJ3wqGEdmx50A\t172.30.1.12\t56582\t8.8.8.8\t53\tudp\t55305\t-\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t33.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:02.260Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":529677},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582567   Key:   Timestamp: 2025-12-10 03:34:02.806 Headers: empty
  
{"@version":"1","event":{"hash":"a321e38b0dbc08fc14a8fdd6aa65f8f47b44711fbb1c2d8de0657c1bea79d269"},"ecs":{"version":"1.6.0"},"message":"1765337639.442142\tCBrz9J1mUMfzSBdjtc\t172.30.1.65\t5353\t224.0.0.251\t5353\tudp\t0\t1.407659\tpower-consumption-ssc.local\t1\tC_INTERNET\t255\t*\t0\tNOERROR\tT\tF\tF\tF\t0\t_esphomelib._tcp.local,power-consumption-ssc._esphomelib._tcp.local,power-consumption-ssc.local,TXT 51 api_encryption=Noise_NNpsk0_25519_ChaChaPoly_SHA256 TXT 12 network=wifi TXT 24 board=ttgo-t7-v14-mini32 TXT 14 platform=ESP32 TXT 16 mac=0cb8151ae720 TXT 16 version=2023.6.5 TXT 35 friendly_name=Power-Consumption-SSC,172.30.1.65\t4500.000000,4500.000000,120.000000,4500.000000,120.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:02.260Z","host":{"name":"f6b540842a86"},"log":{"offset":529843,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582568   Key:   Timestamp: 2025-12-10 03:34:02.806 Headers: empty
  
{"@version":"1","event":{"hash":"9d33b5bd65177476073bb1c8a51220b727cd2a678e235a2f7114bfd80adbea9e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337580.318185\tCNQeP8BYfW242juWk\t172.30.1.35\t53098\t8.8.8.8\t443\tudp\t-\t0.059751\t4514\t6493\tSF\tT\tF\t0\tDd\t11\t4822\t14\t6885\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:01.703Z","host":{"name":"f6b540842a86"},"log":{"offset":528324,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582569   Key:   Timestamp: 2025-12-10 03:34:02.806 Headers: empty
  
{"@version":"1","event":{"hash":"6fe97c4701a43a26ba4c07c10be1a1d9a9584fbad620a48e772cec30167f042e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337634.590009\tCNGjpy1Mxs2K5i1Hal\t172.30.1.2\t52278\t172.30.4.139\t1514\ttcp\t-\t2.999089\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:01.703Z","host":{"name":"f6b540842a86"},"log":{"offset":528075,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582570   Key:   Timestamp: 2025-12-10 03:34:03.810 Headers: empty
  
{"@version":"1","event":{"hash":"d24e92ea98b3d24959d1bba353c281779549320059ff6b2a99be72da6752d8f2"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337580.375994\tCWvAsG4NrQvXFhOOcj\t172.30.1.35\t51231\t40.99.10.50\t443\tudp\t-\t0.315963\t9895\t20022\tSF\tT\tF\t0\tDd\t21\t10483\t21\t20610\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:02.703Z","host":{"name":"f6b540842a86"},"log":{"offset":528456,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582571   Key:   Timestamp: 2025-12-10 03:34:03.810 Headers: empty
  
{"@version":"1","event":{"hash":"fb440635bbd082555c24a19470c00cbf6baefc9a7358ef5ecd6f4bf176e2b763"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337630.746742\tCH3PBSNiDZfywe6q2\t172.30.1.12\t60275\t8.8.8.8\t53\tudp\tdns\t0.028053\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:02.703Z","host":{"name":"f6b540842a86"},"log":{"offset":528596,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582572   Key:   Timestamp: 2025-12-10 03:34:03.810 Headers: empty
  
{"@version":"1","event":{"hash":"d3d4721f6abbd45e024426ef827f1f2bbf969b8d29e4337e4b6f479bab0aae13"},"ecs":{"version":"1.6.0"},"message":"1765337641.593543\tCebN8d2AAWvWdldH15\t172.30.1.35\t53254\t8.8.8.8\t53\tudp\t11759\t0.028072\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2197.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:03.261Z","host":{"name":"f6b540842a86"},"log":{"offset":530388,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582573   Key:   Timestamp: 2025-12-10 03:34:03.811 Headers: empty
  
{"@version":"1","event":{"hash":"649836b6f2649e2465052fa689e72d82d45afde8b131e25c3b24d48e049b9c6f"},"ecs":{"version":"1.6.0"},"message":"1765337642.156616\tCvE1yn3d6FsopBHng3\t172.30.1.12\t48415\t8.8.8.8\t53\tudp\t55306\t0.029114\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t190.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:03.261Z","host":{"name":"f6b540842a86"},"log":{"offset":530557,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582574   Key:   Timestamp: 2025-12-10 03:34:04.810 Headers: empty
  
{"@version":"1","event":{"hash":"88a7973b96c7111d9a7d92e5491ae4886c116b0bd9dc3f9f1902636fb3631a9f"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337631.786533\tChgo3314GNmapkaYI1\t172.30.1.12\t58757\t8.8.8.8\t53\tudp\tdns\t0.028135\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:03.704Z","host":{"name":"f6b540842a86"},"log":{"offset":528845,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582575   Key:   Timestamp: 2025-12-10 03:34:04.810 Headers: empty
  
{"@version":"1","event":{"hash":"ecb235bef2a91e5486d8ebe0c42d34453fa68b6d60fba8d26873a6b719c49171"},"ecs":{"version":"1.6.0"},"message":"1765337641.588064\tCkapXs3Q9DXwBN54J6\t172.30.1.35\t53254\t172.30.1.254\t53\tudp\t11759\t1.114621\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2154.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:04.261Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":530732},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582576   Key:   Timestamp: 2025-12-10 03:34:04.810 Headers: empty
  
{"@version":"1","event":{"hash":"68de1d9efb6b9b100b92452c680ad58a16553634a88e361b8af3373655f336b0"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337631.584229\tCordHm3Wpp0yWUpJV9\t172.30.1.35\t60678\t8.8.8.8\t53\tudp\tdns\t0.031632\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:03.704Z","host":{"name":"f6b540842a86"},"log":{"offset":528719,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582577   Key:   Timestamp: 2025-12-10 03:34:04.811 Headers: empty
  
{"@version":"1","event":{"hash":"5c7c6b494aa214add44b456956063e5485b85d099270f788f34ed13d40c673b4"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337632.827165\tCSiInz2GwGg1rmT9Qb\t172.30.1.12\t48861\t8.8.8.8\t53\tudp\tdns\t0.029841\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:04.704Z","host":{"name":"f6b540842a86"},"log":{"offset":529100,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582578   Key:   Timestamp: 2025-12-10 03:34:04.811 Headers: empty
  
{"@version":"1","event":{"hash":"d87dd69245c2cfd3f3c2d87a4dd731586912de2b47c82fe93e44a83fe8a4560a"},"ecs":{"version":"1.6.0"},"message":"1765337643.196595\tCqIvJA29svixa4sFDj\t172.30.1.12\t48015\t8.8.8.8\t53\tudp\t55307\t0.026677\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t31.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:04.261Z","host":{"name":"f6b540842a86"},"log":{"offset":530906,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582579   Key:   Timestamp: 2025-12-10 03:34:04.810 Headers: empty
  
{"@version":"1","event":{"hash":"0af8f71cc843cfdcca697b196620fe621474b4fb429434a10b3c3968370fda6c"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337581.998813\tCqPoZ11M58hjrjQOJ\t172.30.1.132\t45496\t216.239.35.12\t123\tudp\tntp\t0.030913\t48\t48\tSF\tT\tF\t0\tDd\t1\t76\t1\t76\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:03.704Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":528969},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582580   Key:   Timestamp: 2025-12-10 03:37:05.950 Headers: empty
  
{"@version":"1","event":{"hash":"ce1a8ec8067784d05368b9913ead0e2356d89c37018412a6a57dc5d6a8d4c254"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337812.948229\tCQ6vdv1RWADceDSEv6\t172.30.1.12\t35992\t8.8.8.8\t53\tudp\tdns\t0.028858\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:04.844Z","host":{"name":"f6b540842a86"},"log":{"offset":574588,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582581   Key:   Timestamp: 2025-12-10 03:37:05.950 Headers: empty
  
{"@version":"1","event":{"hash":"491b496cd03a0bd4b69d2398d6d9e636d51f4f909774d8304bef4b5b0fba48ff"},"ecs":{"version":"1.6.0"},"message":"1765337822.258402\tCWqalH3BWjB7SHzB9f\t172.30.1.12\t51985\t8.8.8.8\t53\tudp\t55484\t0.095575\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t96.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:05.370Z","host":{"name":"f6b540842a86"},"log":{"offset":576146,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582582   Key:   Timestamp: 2025-12-10 03:37:05.950 Headers: empty
  
{"@version":"1","event":{"hash":"a5843a19c67f5972700fb59e1770ca3bc80847f3bb26953881f9afbc5127d85c"},"ecs":{"version":"1.6.0"},"message":"1765337823.288496\tCHYNCu4Py02h74qhHa\t172.30.1.12\t42194\t8.8.8.8\t53\tudp\t55485\t0.030130\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t95.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:05.370Z","host":{"name":"f6b540842a86"},"log":{"offset":576320,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582583   Key:   Timestamp: 2025-12-10 03:37:05.950 Headers: empty
  
{"@version":"1","event":{"hash":"8aa5dc80516882ff3a31e8d00bf90b9430b9be8954734964ed27fff8ee558755"},"ecs":{"version":"1.6.0"},"message":"1765337824.328424\tCEl12YLNFA7MQA7Xb\t172.30.1.12\t37679\t8.8.8.8\t53\tudp\t55486\t0.028699\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t8.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:05.370Z","host":{"name":"f6b540842a86"},"log":{"offset":576494,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582584   Key:   Timestamp: 2025-12-10 03:37:06.950 Headers: empty
  
{"@version":"1","event":{"hash":"50ec2dddfb94c21e01af9333ee580e40029dc20c1462e47ff13a8000ad76fbf3"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337813.988238\tCNU8dnLFdiLCvwXJd\t172.30.1.12\t38415\t8.8.8.8\t53\tudp\tdns\t0.028878\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:05.847Z","host":{"name":"f6b540842a86"},"log":{"offset":574712,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582585   Key:   Timestamp: 2025-12-10 03:37:06.951 Headers: empty
  
{"@version":"1","event":{"hash":"aedbefa8db67be9884e9a75e86c107c5c1666d501d54ad7f651c31ada171c0e4"},"ecs":{"version":"1.6.0"},"message":"1765337825.368402\tCWZeCk181d3yYbYFE\t172.30.1.12\t35605\t8.8.8.8\t53\tudp\t55487\t0.027522\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t7.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:06.371Z","host":{"name":"f6b540842a86"},"log":{"offset":576666,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582586   Key:   Timestamp: 2025-12-10 03:37:06.951 Headers: empty
  
{"@version":"1","event":{"hash":"21d1fbb4eab1978acd70ca9e6471a69afa988291572907a983dd29f9245ecebd"},"ecs":{"version":"1.6.0"},"message":"1765337825.875577\tCYAb5j2i8L4WcK2Fd5\t172.30.1.132\t50212\t8.8.8.8\t53\tudp\t7949\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:06.371Z","host":{"name":"f6b540842a86"},"log":{"offset":576838,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582587   Key:   Timestamp: 2025-12-10 03:37:07.951 Headers: empty
  
{"@version":"1","event":{"hash":"57f4d4ae1106c8b34ec70efd50b0fdb78bf33d4e62f425049c3cc98cb5bc4c53"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337815.028301\tCFpwLi2Y5OT40lZbAd\t172.30.1.12\t57385\t8.8.8.8\t53\tudp\tdns\t0.028005\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:06.847Z","host":{"name":"f6b540842a86"},"log":{"offset":574835,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}
Offset: 1582588   Key:   Timestamp: 2025-12-10 03:37:07.951 Headers: empty
  
{"@version":"1","event":{"hash":"3c70f02cd80f244f7baf3fddf3d2dac1bfdfc5cd6e8edfb8a5bcec5e737ee2b3"},"ecs":{"version":"1.6.0"},"message":"1765337826.398394\tCBkCBn2NYHk1dorLOh\t172.30.1.12\t54576\t8.8.8.8\t53\tudp\t55488\t0.026543\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t6.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:07.371Z","host":{"name":"f6b540842a86"},"log":{"offset":577145,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}