Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1542879
MD5:	4b6a0d4dc0532915b0aa0a56455b7c50
SHA1:	3a8b9b8c096581dd74f40479747fc37c2809a7a9
SHA256:	2d82e9d059462bc85ba11d000e17846e3ed0e2c4c40c746178d96ad772856eb5
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Machine Learning detection for sample

Detected TCP or UDP traffic on non-standard ports

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542879
Start date and time:	2024-10-26 19:29:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal84.troj.linELF@0/2@0/0

Warnings

VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	6269
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 6269, Parent: 6191, MD5: 4b6a0d4dc0532915b0aa0a56455b7c50) Arguments: /tmp/na.elf

na.elf New Fork (PID: 6270, Parent: 6269)

na.elf New Fork (PID: 6272, Parent: 6269)

na.elf New Fork (PID: 6273, Parent: 6272)

na.elf New Fork (PID: 6274, Parent: 6273)

na.elf New Fork (PID: 6275, Parent: 6274)

na.elf New Fork (PID: 6297, Parent: 6272)

na.elf New Fork (PID: 6298, Parent: 6297)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
na.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
na.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
na.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
na.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
na.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
na.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
na.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
na.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
na.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
na.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
na.elf	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6269.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6269.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6269.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
6275.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6275.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6275.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
6298.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6298.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6298.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
6274.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6274.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6274.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
6270.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6297.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6297.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6297.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
6270.1.0000000000400000.0000000000417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x131e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1324c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1329c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13314:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13328:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1333c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13350:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13364:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13378:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xb924:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc0db:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1319a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6faa:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xdbd4:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xf13e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x10fc6:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xbc9b:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xf2fa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xbf66:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf4f3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6270.1.0000000000400000.0000000000417000.r-x.sdmp	Linux_Trojan_Mirai_1cb033f3	unknown	unknown	0x68ed:$a: C3 EB 06 8A 46 FF 88 47 FF FF CA 48 FF C7 48 FF C6 83 FA FF
Process Memory Space: na.elf PID: 6269	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6269	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3337:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x334b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x335f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3373:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3387:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x339b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3413:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3427:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x343b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x344f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3463:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3477:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x348b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x349f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6269	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x32ea:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x392c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 6270	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6270	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x35d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x360e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3622:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3636:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x364a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x365e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3672:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3686:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x369a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3712:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3726:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x373a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x374e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3762:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6270	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3585:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3bc7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 6274	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6274	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x333d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3351:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3365:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3379:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x338d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3405:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3419:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x342d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3441:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3455:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3469:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x347d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3491:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6274	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x32f0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3932:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 6275	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6275	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x37ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3801:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3815:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3829:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x383d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3851:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3865:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3879:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x388d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3905:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3919:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x392d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3941:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3955:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3969:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x397d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6275	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x37a0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3de2:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 6297	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6297	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x387e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3892:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x390a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x391e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3932:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3946:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x395a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x396e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3982:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3996:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a0e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6297	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3831:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3e73:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: na.elf PID: 6298	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 6298	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x330e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3322:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3336:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x334a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x335e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3372:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3386:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x339a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3412:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3426:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x343a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x344e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3462:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3476:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x348a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x349e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 6298	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x32c1:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3903:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 97 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 65%

Machine Learning detection for sample

Source: na.elf

Joe Sandbox ML: detected

Source: global traffic

TCP traffic: 192.168.2.23:34978 -> 154.213.187.206:1337

Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.206

Source: na.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: na.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: na.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: na.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: na.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 Author: unknown
Source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: BusyBox
Source: Initial sample	String containing 'busybox' found: 20+!g}]/proc/self/maps/proc/ccountoginnterhraseordshellsystemenablebusyboxBusyBoxBuilt-in45.81.39.172

Source: ELF static info symbol of initial sample

.symtab present: no

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_1cb033f3 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 49201ab37ff0b5cdfa9b0b34b6faa170bd25f04df51c24b0b558b7534fecc358, id = 1cb033f3-68c1-4fe5-9cd1-b5d066c1d86e, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal84.troj.linELF@0/2@0/0

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000000400000.0000000000417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6270, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6274, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6275, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6297, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 6298, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
na.elf	66%	ReversingLabs	Linux.Backdoor.Gafgyt
na.elf	100%	Avira	EXP/ELF.Mirai.Z
na.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.billybobbot.com/crawler/)	0%	URL Reputation	safe
http://fast.no/support/crawler.asp)	0%	URL Reputation	safe
http://feedback.redkolibri.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.baidu.com/search/spider.html)	na.elf	false		unknown
http://www.billybobbot.com/crawler/)	na.elf	false	URL Reputation: safe	unknown
http://fast.no/support/crawler.asp)	na.elf	false	URL Reputation: safe	unknown
http://feedback.redkolibri.com/	na.elf	false	URL Reputation: safe	unknown
http://www.baidu.com/search/spider.htm)	na.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
154.213.187.206	unknown	Seychelles	22769	DDOSING-BGP-NETWORKUS	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	nshmips.elf	Get hash	malicious	Unknown	Browse
	nshsh4.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	c0r0n4x.mips.elf	Get hash	malicious	Unknown	Browse
	c0r0n4x.mpsl.elf	Get hash	malicious	Unknown	Browse
	a.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	bin.sh.elf	Get hash	malicious	Unknown	Browse
	LxyPEKz4ts.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	nshmips.elf	Get hash	malicious	Unknown	Browse
	nshsh4.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	c0r0n4x.mips.elf	Get hash	malicious	Unknown	Browse
	c0r0n4x.mpsl.elf	Get hash	malicious	Unknown	Browse
	a.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	bin.sh.elf	Get hash	malicious	Unknown	Browse
	LxyPEKz4ts.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	nshmips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	nshsh4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.ppc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	a.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	nshmips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	nshsh4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	c0r0n4x.ppc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	a.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
DDOSING-BGP-NETWORKUS	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	41.93.234.26
	http://154.213.184.53	Get hash	malicious	Unknown	Browse	154.213.184.53
	SecuriteInfo.com.Linux.Mirai.1599.9143.25129.elf	Get hash	malicious	Unknown	Browse	154.213.187.152
	http://hcmexelatech.com	Get hash	malicious	Unknown	Browse	154.92.238.142
	ExeFile (384).exe	Get hash	malicious	Emotet	Browse	213.176.36.147
	ExeFile (124).exe	Get hash	malicious	Emotet	Browse	213.176.36.147
	https://roblox.tz/games/10449761463/BOSS-The-Strongest-Battlegrounds?privateServerLinkCode=11856892146830167735895077236647	Get hash	malicious	Unknown	Browse	154.213.191.64
	EdrhODreUS.elf	Get hash	malicious	Mirai, Gafgyt, Moobot, Okiru	Browse	154.213.187.164
	https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445	Get hash	malicious	Unknown	Browse	154.213.191.64
	https://shrturl.net/pmf-gx3n	Get hash	malicious	Unknown	Browse	154.213.191.64
INIT7CH	nshmips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	nshsh4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	c0r0n4x.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	c0r0n4x.mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	a.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	bin.sh.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	LxyPEKz4ts.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/resolve/stub-resolv.conf

Download File

Process:	/tmp/na.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	3762
Entropy (8bit):	3.3918926446809334
Encrypted:	false
SSDEEP:	24:KaLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLn:KC
MD5:	DDA1DA93D90AFBFE0E22001C3164DDB0
SHA1:	DB2BABD8E06ABEDCA64BBEA40EC1C230CB57BFAB
SHA-256:	74E942DF44D293AD1FBB88C62771C6D854CC729FCD83304491B24D70A238EC42
SHA-512:	3C6653088D9DA1A055E46ADD699998C3715EB147DD99EB978C02B9AD481A8780E8F5C93B5DAFD77F59305069F647911A4687C51A48E8E27D6011EB30AAF1F9A4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8.8.8.8.nameserver 8.8.4.4.nameserver 8

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.391152110721333
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	100'216 bytes
MD5:	4b6a0d4dc0532915b0aa0a56455b7c50
SHA1:	3a8b9b8c096581dd74f40479747fc37c2809a7a9
SHA256:	2d82e9d059462bc85ba11d000e17846e3ed0e2c4c40c746178d96ad772856eb5
SHA512:	ed5ef7b33267a527b959253842f847d4485b6fdbd321ec66895eddfb5eb87c3e16a6006768256ff46bbb7bd82d62065d4485955ff850139b6b79f85db5cbe2b9
SSDEEP:	3072:EHWTeAMDiNeiGpcDU92dkGdStyzG9QJ3v6zZ+V:EHWTi+/O+m2dkGc/GJ3v6IV
TLSH:	28A34A13B691CDFAC48BD1F046EF6A118D32F4FE177371AB6390AD902E1D9D12A19E60
File Content Preview:	.ELF..............>.......@.....@.......8...........@.8...@.......................@.......@.....Tl......Tl.......................p.......pQ......pQ.....(........u..............Q.td....................................................H...._........H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	99384
Section Header Size:	64
Number of Section Headers:	13
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x11638	0x0	0x6	AX	16
.fini	PROGBITS	0x411738	0x11738	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x411760	0x11760	0x54ef	0x0	0x2	A	32
.eh_frame	PROGBITS	0x416c50	0x16c50	0x4	0x0	0x2	A	4
.ctors	PROGBITS	0x517000	0x17000	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x517010	0x17010	0x10	0x0	0x3	WA	8
.jcr	PROGBITS	0x517020	0x17020	0x8	0x0	0x3	WA	8
.data	PROGBITS	0x517040	0x17040	0x6e8	0x0	0x3	WA	32
.bss	NOBITS	0x517740	0x17728	0x6e50	0x0	0x3	WA	32
.comment	PROGBITS	0x0	0x17728	0xcba	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x183e2	0x56	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x16c54	0x16c54	6.4854	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0x17000	0x517000	0x517000	0x728	0x7590	2.3343	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 19:30:14.220715046 CEST	34978	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:14.226231098 CEST	1337	34978	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:14.226337910 CEST	34978	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:14.249144077 CEST	34978	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:14.254623890 CEST	1337	34978	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:14.974601984 CEST	1337	34978	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:14.974703074 CEST	34978	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:15.110821962 CEST	1337	34978	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:15.110923052 CEST	34978	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:15.111664057 CEST	34980	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:15.116319895 CEST	1337	34978	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:15.117214918 CEST	1337	34980	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:15.117279053 CEST	34980	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:15.162312984 CEST	34980	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:15.167865992 CEST	1337	34980	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:15.681502104 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 26, 2024 19:30:15.861414909 CEST	1337	34980	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:15.861489058 CEST	34980	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.273335934 CEST	1337	34980	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:16.273427963 CEST	34980	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.278951883 CEST	1337	34980	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:16.362600088 CEST	34982	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.368088007 CEST	1337	34982	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:16.368145943 CEST	34982	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.550091982 CEST	34984	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.555576086 CEST	1337	34984	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:16.555740118 CEST	34984	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.735502005 CEST	34982	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.740899086 CEST	34984	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:16.741137981 CEST	1337	34982	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:16.746352911 CEST	1337	34984	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.110749960 CEST	1337	34982	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.111000061 CEST	34982	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.240607977 CEST	1337	34982	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.240884066 CEST	34982	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.241384983 CEST	34986	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.246387005 CEST	1337	34982	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.246753931 CEST	1337	34986	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.246843100 CEST	34986	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.271332026 CEST	34986	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.276772022 CEST	1337	34986	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.310198069 CEST	1337	34984	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.310411930 CEST	34984	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.446641922 CEST	1337	34984	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.446795940 CEST	34984	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.447577953 CEST	34988	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.452137947 CEST	1337	34984	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.453368902 CEST	1337	34988	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.453425884 CEST	34988	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.472960949 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 26, 2024 19:30:17.486725092 CEST	34988	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:17.492120028 CEST	1337	34988	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.998730898 CEST	1337	34986	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:17.999090910 CEST	34986	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.133783102 CEST	1337	34986	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.134114027 CEST	34986	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.134653091 CEST	34990	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.139575005 CEST	1337	34986	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.140101910 CEST	1337	34990	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.140192986 CEST	34990	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.165139914 CEST	34990	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.170703888 CEST	1337	34990	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.214893103 CEST	1337	34988	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.215013027 CEST	34988	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.334969044 CEST	1337	34988	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.335117102 CEST	34988	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.336086035 CEST	34992	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.340622902 CEST	1337	34988	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.341496944 CEST	1337	34992	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.341559887 CEST	34992	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.372010946 CEST	34992	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:18.377619028 CEST	1337	34992	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.890281916 CEST	1337	34990	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:18.890499115 CEST	34990	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.030019999 CEST	1337	34990	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.030353069 CEST	34990	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.031111002 CEST	34994	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.035834074 CEST	1337	34990	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.036539078 CEST	1337	34994	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.036592960 CEST	34994	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.066540003 CEST	34994	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.072093964 CEST	1337	34994	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.091047049 CEST	1337	34992	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.091120958 CEST	34992	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.227690935 CEST	1337	34992	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.227983952 CEST	34992	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.228825092 CEST	34996	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.233477116 CEST	1337	34992	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.234209061 CEST	1337	34996	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.234267950 CEST	34996	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.297450066 CEST	34996	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.303037882 CEST	1337	34996	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.777545929 CEST	1337	34994	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.777656078 CEST	34994	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.907572031 CEST	1337	34994	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.907831907 CEST	34994	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.908272982 CEST	34998	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.913340092 CEST	1337	34994	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.913605928 CEST	1337	34998	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.913650990 CEST	34998	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.939414024 CEST	34998	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:19.944782972 CEST	1337	34998	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.979691029 CEST	1337	34996	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:19.979763985 CEST	34996	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.115158081 CEST	1337	34996	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.115528107 CEST	34996	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.116220951 CEST	35000	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.121054888 CEST	1337	34996	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.121648073 CEST	1337	35000	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.121696949 CEST	35000	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.154895067 CEST	35000	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.160238028 CEST	1337	35000	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.664949894 CEST	1337	34998	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.665324926 CEST	34998	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.805341005 CEST	1337	34998	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.805696011 CEST	34998	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.806256056 CEST	35002	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.811151028 CEST	1337	34998	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.811901093 CEST	1337	35002	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.812269926 CEST	35002	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.846976995 CEST	35002	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:20.852303982 CEST	1337	35002	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.904776096 CEST	1337	35000	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:20.904982090 CEST	35000	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.044945002 CEST	1337	35000	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.045381069 CEST	35000	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.046128988 CEST	35004	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.050936937 CEST	1337	35000	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.051469088 CEST	1337	35004	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.051522017 CEST	35004	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.090665102 CEST	35004	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.096065044 CEST	1337	35004	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.561024904 CEST	1337	35002	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.561327934 CEST	35002	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.697633982 CEST	1337	35002	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.697926998 CEST	35002	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.698432922 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.703350067 CEST	1337	35002	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.703865051 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.703942060 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.722668886 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.728101015 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.808487892 CEST	1337	35004	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.808742046 CEST	35004	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.945148945 CEST	1337	35004	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.945502996 CEST	35004	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.946073055 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.951083899 CEST	1337	35004	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.951884031 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:21.951955080 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.974929094 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:21.980360985 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.326127052 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.326390982 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.326400995 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.326468945 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.326481104 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.326481104 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.326481104 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.326538086 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.326989889 CEST	35010	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327363014 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.327409029 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327414036 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.327424049 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.327461004 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327491999 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327497005 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.327537060 CEST	35008	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327713013 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.327761889 CEST	35006	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.327992916 CEST	35012	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.332048893 CEST	1337	35006	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.332308054 CEST	1337	35010	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.332360029 CEST	35010	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.336930990 CEST	1337	35008	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.336949110 CEST	1337	35012	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.337011099 CEST	35012	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.371572971 CEST	35010	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.376972914 CEST	1337	35010	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:23.378345013 CEST	35012	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:23.383673906 CEST	1337	35012	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.069813013 CEST	1337	35012	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.069952965 CEST	35012	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.107532024 CEST	1337	35010	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.107912064 CEST	35010	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.199423075 CEST	1337	35012	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.199651957 CEST	35012	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.200277090 CEST	35014	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.205054998 CEST	1337	35012	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.205626965 CEST	1337	35014	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.205679893 CEST	35014	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.227897882 CEST	35014	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.233472109 CEST	1337	35014	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.243149996 CEST	1337	35010	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.243252039 CEST	35010	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.243629932 CEST	35016	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.248583078 CEST	1337	35010	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.249377012 CEST	1337	35016	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.249432087 CEST	35016	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.266444921 CEST	35016	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.272058010 CEST	1337	35016	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.957401991 CEST	1337	35014	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.957789898 CEST	35014	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:24.983936071 CEST	1337	35016	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:24.984060049 CEST	35016	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.095904112 CEST	1337	35014	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.096158981 CEST	35014	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.096764088 CEST	35018	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.101824999 CEST	1337	35014	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.102098942 CEST	1337	35018	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.102158070 CEST	35018	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.113501072 CEST	1337	35016	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.113610983 CEST	35016	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.114310026 CEST	35020	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.119066000 CEST	1337	35016	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.119709015 CEST	1337	35020	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.119754076 CEST	35020	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.130218029 CEST	35018	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.136831999 CEST	1337	35018	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.151886940 CEST	35020	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.157305956 CEST	1337	35020	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.849019051 CEST	1337	35018	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.849251986 CEST	35018	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.876302958 CEST	1337	35020	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.876396894 CEST	35020	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.985430956 CEST	1337	35018	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.985671043 CEST	35018	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.986258030 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:25.991247892 CEST	1337	35018	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.991661072 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:25.991712093 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.012767076 CEST	1337	35020	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:26.012877941 CEST	35020	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.013638020 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.016712904 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.018439054 CEST	1337	35020	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:26.018954992 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:26.019004107 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.022026062 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:26.037381887 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:26.042917967 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702272892 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702378988 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702414989 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.702545881 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.702848911 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702877998 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702888012 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702897072 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.702919006 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.702931881 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.702935934 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.702948093 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703095913 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.703104973 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.703136921 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703138113 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703316927 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.703329086 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.703351974 CEST	35024	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703381062 CEST	35022	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703774929 CEST	35026	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.703879118 CEST	35028	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.708291054 CEST	1337	35022	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.708312035 CEST	1337	35024	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.712990046 CEST	1337	35026	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.713000059 CEST	1337	35028	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.713042021 CEST	35026	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.713056087 CEST	35028	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.760230064 CEST	35028	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.760447025 CEST	35026	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:27.765743017 CEST	1337	35028	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:27.765902042 CEST	1337	35026	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.453463078 CEST	1337	35028	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.453706026 CEST	35028	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.465595007 CEST	1337	35026	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.465652943 CEST	35026	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.589581966 CEST	1337	35028	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.589884996 CEST	35028	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.590362072 CEST	35030	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.595359087 CEST	1337	35028	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.595685005 CEST	1337	35030	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.595729113 CEST	35030	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.605091095 CEST	1337	35026	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.605206966 CEST	35026	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.606158972 CEST	35032	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.611299038 CEST	1337	35026	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.612327099 CEST	1337	35032	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.612423897 CEST	35032	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.623867989 CEST	35030	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.629225016 CEST	1337	35030	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:28.643696070 CEST	35032	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:28.649132013 CEST	1337	35032	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.344082117 CEST	1337	35030	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.344363928 CEST	35030	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.346069098 CEST	1337	35032	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.346134901 CEST	35032	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.476077080 CEST	1337	35032	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.476459980 CEST	35032	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.477159023 CEST	35034	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.481889009 CEST	1337	35032	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.483257055 CEST	1337	35034	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.483335018 CEST	35034	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.483472109 CEST	1337	35030	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.483587027 CEST	35030	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.484456062 CEST	35036	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.489675999 CEST	1337	35030	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.491197109 CEST	1337	35036	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.491240025 CEST	35036	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.524197102 CEST	35034	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.529642105 CEST	1337	35034	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:29.530184984 CEST	35036	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:29.535514116 CEST	1337	35036	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.235668898 CEST	1337	35036	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.235877991 CEST	35036	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.239403963 CEST	1337	35034	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.239490986 CEST	35034	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.370714903 CEST	1337	35036	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.370963097 CEST	35036	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.371618032 CEST	35038	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.375458002 CEST	1337	35034	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.375667095 CEST	35034	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.376208067 CEST	35040	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.376351118 CEST	1337	35036	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.376954079 CEST	1337	35038	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.377008915 CEST	35038	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.381052971 CEST	1337	35034	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.381573915 CEST	1337	35040	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.381664038 CEST	35040	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.420489073 CEST	35038	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.425880909 CEST	1337	35038	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:30.428037882 CEST	35040	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:30.433424950 CEST	1337	35040	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.116784096 CEST	1337	35040	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.116952896 CEST	35040	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.131594896 CEST	1337	35038	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.131719112 CEST	35038	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.247735023 CEST	1337	35040	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.248002052 CEST	35040	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.248864889 CEST	35042	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.254218102 CEST	1337	35040	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.254236937 CEST	1337	35042	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.254280090 CEST	35042	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.267595053 CEST	1337	35038	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.267668009 CEST	35038	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.268407106 CEST	35044	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.273113012 CEST	1337	35038	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.273726940 CEST	1337	35044	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.273773909 CEST	35044	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.283057928 CEST	35042	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.288455009 CEST	1337	35042	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:31.298819065 CEST	35044	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:31.304394960 CEST	1337	35044	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.002618074 CEST	1337	35042	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.002775908 CEST	35042	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.050559998 CEST	1337	35044	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.050789118 CEST	35044	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.136965990 CEST	1337	35042	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.137253046 CEST	35042	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.138051987 CEST	35046	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.142638922 CEST	1337	35042	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.143429041 CEST	1337	35046	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.143511057 CEST	35046	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.166389942 CEST	35046	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.171773911 CEST	1337	35046	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.192215919 CEST	1337	35044	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.192365885 CEST	35044	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.192863941 CEST	35048	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.197657108 CEST	1337	35044	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.198261023 CEST	1337	35048	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.198360920 CEST	35048	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.217338085 CEST	35048	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.222743988 CEST	1337	35048	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.892498970 CEST	1337	35046	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.892723083 CEST	35046	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:32.949333906 CEST	1337	35048	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:32.949580908 CEST	35048	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.028789043 CEST	1337	35046	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.029158115 CEST	35046	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.029932976 CEST	35050	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.034497023 CEST	1337	35046	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.035288095 CEST	1337	35050	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.035362005 CEST	35050	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.062793970 CEST	35050	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.068152905 CEST	1337	35050	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.092571020 CEST	1337	35048	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.092751980 CEST	35048	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.093221903 CEST	35052	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.098110914 CEST	1337	35048	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.098500967 CEST	1337	35052	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.098589897 CEST	35052	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.115525961 CEST	35052	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.120898008 CEST	1337	35052	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.342834949 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 26, 2024 19:30:33.828250885 CEST	1337	35050	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.828449965 CEST	35050	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.841027021 CEST	1337	35052	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.841130972 CEST	35052	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.935494900 CEST	1337	35050	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.935714006 CEST	35050	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.936331034 CEST	35054	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.941134930 CEST	1337	35050	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.941660881 CEST	1337	35054	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.941715956 CEST	35054	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.963375092 CEST	35054	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.968792915 CEST	1337	35054	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.971457005 CEST	1337	35052	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.971537113 CEST	35052	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.971857071 CEST	35056	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.976843119 CEST	1337	35052	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.977248907 CEST	1337	35056	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:33.977335930 CEST	35056	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:33.995138884 CEST	35056	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.000478029 CEST	1337	35056	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.690109968 CEST	1337	35054	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.690232992 CEST	35054	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.720272064 CEST	1337	35056	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.720365047 CEST	35056	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.825004101 CEST	1337	35054	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.825122118 CEST	35054	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.825874090 CEST	35058	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.830477953 CEST	1337	35054	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.831199884 CEST	1337	35058	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.831259966 CEST	35058	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.853647947 CEST	35058	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.858026028 CEST	1337	35056	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.858091116 CEST	35056	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.858405113 CEST	35060	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.858972073 CEST	1337	35058	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.863382101 CEST	1337	35056	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.863684893 CEST	1337	35060	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:34.863729000 CEST	35060	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.881045103 CEST	35060	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:34.887454987 CEST	1337	35060	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.587064981 CEST	1337	35058	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.587209940 CEST	35058	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.617630005 CEST	1337	35060	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.617858887 CEST	35060	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.723679066 CEST	1337	35058	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.723860025 CEST	35058	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.724498034 CEST	35062	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.729295969 CEST	1337	35058	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.729883909 CEST	1337	35062	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.729988098 CEST	35062	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.752846956 CEST	35062	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.755409956 CEST	1337	35060	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.755491972 CEST	35060	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.755821943 CEST	35064	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.758164883 CEST	1337	35062	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.760878086 CEST	1337	35060	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.761123896 CEST	1337	35064	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:35.761173010 CEST	35064	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.777704000 CEST	35064	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:35.783024073 CEST	1337	35064	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.467634916 CEST	1337	35062	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.467782974 CEST	35062	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.598582983 CEST	1337	35062	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.598972082 CEST	35062	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.599630117 CEST	35066	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.604341984 CEST	1337	35062	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.605070114 CEST	1337	35066	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.605127096 CEST	35066	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.629880905 CEST	35066	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.635490894 CEST	1337	35066	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.635719061 CEST	1337	35064	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.635806084 CEST	35064	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.636159897 CEST	35068	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.641387939 CEST	1337	35064	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.641715050 CEST	1337	35068	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:36.641758919 CEST	35068	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.659753084 CEST	35068	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:36.665115118 CEST	1337	35068	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.358778000 CEST	1337	35066	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.358974934 CEST	35066	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.386234045 CEST	1337	35068	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.386318922 CEST	35068	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.495948076 CEST	1337	35066	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.496140957 CEST	35066	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.496897936 CEST	35070	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.503678083 CEST	1337	35066	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.504671097 CEST	1337	35070	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.504729986 CEST	35070	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.517992973 CEST	1337	35068	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.518068075 CEST	35068	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.518799067 CEST	35072	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.527075052 CEST	1337	35068	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.527091980 CEST	1337	35072	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.527174950 CEST	35072	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.532227993 CEST	35070	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.540224075 CEST	1337	35070	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:37.552225113 CEST	35072	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:37.559915066 CEST	1337	35072	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.256759882 CEST	1337	35070	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.257014036 CEST	35070	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.275752068 CEST	1337	35072	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.275866032 CEST	35072	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.392792940 CEST	1337	35070	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.392954111 CEST	35070	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.393603086 CEST	35074	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.398416996 CEST	1337	35070	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.399292946 CEST	1337	35074	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.399395943 CEST	35074	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.413120031 CEST	1337	35072	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.413191080 CEST	35072	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.413883924 CEST	35076	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.418541908 CEST	1337	35072	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.419290066 CEST	1337	35076	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.419363022 CEST	35076	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.425467968 CEST	35074	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.430974960 CEST	1337	35074	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:38.442243099 CEST	35076	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:38.447777033 CEST	1337	35076	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.142601967 CEST	1337	35074	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.142756939 CEST	35074	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.174598932 CEST	1337	35076	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.174738884 CEST	35076	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.278846979 CEST	1337	35074	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.279109001 CEST	35074	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.279788971 CEST	35078	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.285099030 CEST	1337	35074	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.285614967 CEST	1337	35078	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.285681963 CEST	35078	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.311054945 CEST	1337	35076	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.311206102 CEST	35076	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.312017918 CEST	35080	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.314286947 CEST	35078	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.316644907 CEST	1337	35076	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.317493916 CEST	1337	35080	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.317576885 CEST	35080	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.319694996 CEST	1337	35078	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:39.334085941 CEST	35080	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:39.339523077 CEST	1337	35080	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.040689945 CEST	1337	35078	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.041045904 CEST	35078	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.068118095 CEST	1337	35080	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.068314075 CEST	35080	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.176589012 CEST	1337	35078	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.176778078 CEST	35078	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.177525997 CEST	35082	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.182213068 CEST	1337	35078	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.183054924 CEST	1337	35082	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.183322906 CEST	35082	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.204386950 CEST	1337	35080	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.204466105 CEST	35080	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.205136061 CEST	35084	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.207055092 CEST	35082	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.209772110 CEST	1337	35080	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.210417986 CEST	1337	35084	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.210478067 CEST	35084	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.212367058 CEST	1337	35082	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.227570057 CEST	35084	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.232882023 CEST	1337	35084	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.942864895 CEST	1337	35082	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.943083048 CEST	35082	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:40.954996109 CEST	1337	35084	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:40.955095053 CEST	35084	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.082526922 CEST	1337	35082	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.082731009 CEST	35082	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.083353043 CEST	35086	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.088239908 CEST	1337	35082	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.088788033 CEST	1337	35086	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.088845015 CEST	35086	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.091969967 CEST	1337	35084	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.092040062 CEST	35084	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.092724085 CEST	35088	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.097695112 CEST	1337	35084	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.098201990 CEST	1337	35088	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.098269939 CEST	35088	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.123137951 CEST	35086	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.128705978 CEST	1337	35086	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.134397030 CEST	35088	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.139853001 CEST	1337	35088	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.846582890 CEST	1337	35086	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.846980095 CEST	35086	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.858197927 CEST	1337	35088	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.858309984 CEST	35088	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.983607054 CEST	1337	35086	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.983768940 CEST	35086	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.984467030 CEST	35090	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.989206076 CEST	1337	35086	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.989911079 CEST	1337	35090	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.989991903 CEST	35090	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.996218920 CEST	1337	35088	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:41.996289015 CEST	35088	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:41.997037888 CEST	35092	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.001645088 CEST	1337	35088	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.002748966 CEST	1337	35092	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.002803087 CEST	35092	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.026030064 CEST	35090	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.031451941 CEST	1337	35090	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.038938046 CEST	35092	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.044271946 CEST	1337	35092	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.739233017 CEST	1337	35090	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.739445925 CEST	35090	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.759133101 CEST	1337	35092	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.759291887 CEST	35092	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.878752947 CEST	1337	35090	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.879122972 CEST	35090	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.879612923 CEST	35094	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.884488106 CEST	1337	35090	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.884965897 CEST	1337	35094	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.885030031 CEST	35094	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.895612001 CEST	1337	35092	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.895690918 CEST	35092	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.896470070 CEST	35096	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.901078939 CEST	1337	35092	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.901798964 CEST	1337	35096	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.901839972 CEST	35096	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.911205053 CEST	35094	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.916522026 CEST	1337	35094	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:42.926613092 CEST	35096	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:42.931977034 CEST	1337	35096	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.581455946 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 26, 2024 19:30:43.664406061 CEST	1337	35094	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.664438009 CEST	1337	35096	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.664608002 CEST	35094	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.664637089 CEST	35096	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.754432917 CEST	1337	35094	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.754673004 CEST	35094	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.755088091 CEST	35098	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.760065079 CEST	1337	35094	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.760518074 CEST	1337	35098	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.760577917 CEST	35098	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.780442953 CEST	1337	35096	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.780518055 CEST	35096	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.781394958 CEST	35100	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.785978079 CEST	1337	35096	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.787040949 CEST	1337	35100	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.787117004 CEST	35100	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.787974119 CEST	35098	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.793301105 CEST	1337	35098	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:43.807271004 CEST	35100	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:43.813047886 CEST	1337	35100	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.515067101 CEST	1337	35098	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.515306950 CEST	35098	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.532876968 CEST	1337	35100	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.533055067 CEST	35100	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.651896954 CEST	1337	35098	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.652296066 CEST	35098	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.652909040 CEST	35102	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.657680035 CEST	1337	35098	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.658293009 CEST	1337	35102	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.658349037 CEST	35102	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.669137001 CEST	1337	35100	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.669209003 CEST	35100	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.670109034 CEST	35104	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.674552917 CEST	1337	35100	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.675604105 CEST	1337	35104	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.675683022 CEST	35104	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.696938038 CEST	35102	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.702303886 CEST	1337	35102	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:44.710735083 CEST	35104	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:44.716103077 CEST	1337	35104	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.423635960 CEST	1337	35104	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.423988104 CEST	35104	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:45.560071945 CEST	1337	35104	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.560553074 CEST	35104	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:45.561268091 CEST	35106	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:45.566035986 CEST	1337	35104	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.566776037 CEST	1337	35106	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.566885948 CEST	35106	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:45.590132952 CEST	35106	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:45.595602989 CEST	1337	35106	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:45.629159927 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 26, 2024 19:30:46.307909012 CEST	1337	35106	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.308126926 CEST	35106	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.429845095 CEST	1337	35102	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.430087090 CEST	35102	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.444082022 CEST	1337	35106	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.444240093 CEST	35106	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.444763899 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.449537039 CEST	1337	35106	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.450078964 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.450169086 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.466785908 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.472213984 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.566179037 CEST	1337	35102	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.566462040 CEST	35102	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.567082882 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.571866989 CEST	1337	35102	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.572443008 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:46.572525024 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.593009949 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:46.598514080 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.210120916 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.210253000 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.330643892 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.330755949 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.562015057 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.562350035 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.562468052 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.562525034 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.562597990 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.562673092 CEST	35110	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.562678099 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.562828064 CEST	35108	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.562993050 CEST	35112	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.563604116 CEST	35114	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.568181038 CEST	1337	35108	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.568213940 CEST	1337	35110	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.568386078 CEST	1337	35112	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.568474054 CEST	35112	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.568958998 CEST	1337	35114	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.569031954 CEST	35114	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.612308979 CEST	35112	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.614515066 CEST	35114	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:47.617831945 CEST	1337	35112	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:47.619981050 CEST	1337	35114	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.313494921 CEST	1337	35114	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.313772917 CEST	35114	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.329994917 CEST	1337	35112	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.330353022 CEST	35112	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.443037987 CEST	1337	35114	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.443496943 CEST	35114	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.444101095 CEST	35116	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.449074984 CEST	1337	35114	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.449475050 CEST	1337	35116	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.449548960 CEST	35116	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.467830896 CEST	1337	35112	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.467912912 CEST	35112	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.468581915 CEST	35118	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.473422050 CEST	1337	35112	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.473958015 CEST	35116	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.474036932 CEST	1337	35118	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.474091053 CEST	35118	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.479517937 CEST	1337	35116	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:48.492780924 CEST	35118	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:48.498162985 CEST	1337	35118	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.205466032 CEST	1337	35116	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.205787897 CEST	35116	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.222681999 CEST	1337	35118	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.222758055 CEST	35118	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.341706038 CEST	1337	35116	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.342052937 CEST	35116	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.342706919 CEST	35120	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.347560883 CEST	1337	35116	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.348253965 CEST	1337	35120	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.348326921 CEST	35120	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.358988047 CEST	1337	35118	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.359066963 CEST	35118	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.359766006 CEST	35122	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.364582062 CEST	1337	35118	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.365230083 CEST	1337	35122	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.365283012 CEST	35122	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.375184059 CEST	35120	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.380657911 CEST	1337	35120	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:49.389770985 CEST	35122	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:49.395153046 CEST	1337	35122	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.141804934 CEST	1337	35122	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.141962051 CEST	35122	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.214065075 CEST	1337	35120	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.214268923 CEST	35120	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.214847088 CEST	35124	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.219727993 CEST	1337	35120	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.220283031 CEST	1337	35124	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.220380068 CEST	35124	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.243325949 CEST	35124	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.248692989 CEST	1337	35124	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.278637886 CEST	1337	35122	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.278793097 CEST	35122	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.279357910 CEST	35126	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.284279108 CEST	1337	35122	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.284701109 CEST	1337	35126	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:50.284773111 CEST	35126	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.303023100 CEST	35126	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:50.308419943 CEST	1337	35126	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.037431002 CEST	1337	35126	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.037751913 CEST	35126	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.077354908 CEST	1337	35124	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.077749014 CEST	35124	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.078248978 CEST	35128	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.083157063 CEST	1337	35124	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.083647966 CEST	1337	35128	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.083709002 CEST	35128	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.104840994 CEST	35128	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.110246897 CEST	1337	35128	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.177113056 CEST	1337	35126	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.177449942 CEST	35126	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.177870989 CEST	35130	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.182832003 CEST	1337	35126	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.183207035 CEST	1337	35130	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.183255911 CEST	35130	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.199506044 CEST	35130	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.205158949 CEST	1337	35130	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.832662106 CEST	1337	35128	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.832873106 CEST	35128	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.937239885 CEST	1337	35130	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.937464952 CEST	35130	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.970199108 CEST	1337	35128	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.970454931 CEST	35128	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.970972061 CEST	35132	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.975867033 CEST	1337	35128	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.976313114 CEST	1337	35132	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:51.976367950 CEST	35132	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:51.997980118 CEST	35132	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.004484892 CEST	1337	35132	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.071820974 CEST	1337	35130	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.072058916 CEST	35130	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.072561979 CEST	35134	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.077503920 CEST	1337	35130	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.077931881 CEST	1337	35134	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.078077078 CEST	35134	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.094327927 CEST	35134	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.099884033 CEST	1337	35134	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.727940083 CEST	1337	35132	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.728125095 CEST	35132	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.863349915 CEST	1337	35132	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.863570929 CEST	35132	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.864074945 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.869015932 CEST	1337	35132	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.869437933 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.869512081 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.888163090 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.893575907 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.980058908 CEST	1337	35134	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.980386019 CEST	35134	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.980954885 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:52.985766888 CEST	1337	35134	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.986277103 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:52.986356020 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:53.001631975 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:53.007170916 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443342924 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443521976 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443600893 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443600893 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443603992 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443615913 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443700075 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443732977 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443736076 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443810940 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.443823099 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443887949 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.443952084 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.444016933 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.444044113 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.444092989 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.444746971 CEST	35140	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.445070028 CEST	35142	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.651869059 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.655860901 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.664997101 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.665142059 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.665237904 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.665299892 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.667541027 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.667612076 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.668833017 CEST	1337	35140	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.668884993 CEST	1337	35142	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.668917894 CEST	35140	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.668988943 CEST	1337	35136	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.669095039 CEST	35142	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.669106007 CEST	35136	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.669107914 CEST	1337	35138	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.669194937 CEST	35138	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.728173971 CEST	35142	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.728553057 CEST	35140	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:54.733658075 CEST	1337	35142	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:54.733957052 CEST	1337	35140	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.412050009 CEST	1337	35140	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.412246943 CEST	35140	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.416800022 CEST	1337	35142	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.416887045 CEST	35142	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.548775911 CEST	1337	35140	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.548965931 CEST	35140	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.549776077 CEST	35144	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.553147078 CEST	1337	35142	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.553260088 CEST	35142	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.553765059 CEST	35146	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.554322958 CEST	1337	35140	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.555186033 CEST	1337	35144	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.555253029 CEST	35144	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.558650970 CEST	1337	35142	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.559138060 CEST	1337	35146	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.559202909 CEST	35146	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.605695009 CEST	35144	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.610363007 CEST	35146	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:55.611023903 CEST	1337	35144	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:55.615751028 CEST	1337	35146	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.298759937 CEST	1337	35146	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.298937082 CEST	35146	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.305444002 CEST	1337	35144	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.305506945 CEST	35144	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.433532000 CEST	1337	35146	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.433810949 CEST	35146	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.434313059 CEST	35148	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.439790964 CEST	1337	35146	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.439822912 CEST	1337	35148	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.439894915 CEST	35148	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.444488049 CEST	1337	35144	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.444569111 CEST	35144	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.445305109 CEST	35150	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.450721979 CEST	1337	35144	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.450752974 CEST	1337	35150	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.450804949 CEST	35150	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.473419905 CEST	35148	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.478893042 CEST	1337	35148	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:56.487592936 CEST	35150	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:56.492969036 CEST	1337	35150	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.203438044 CEST	1337	35150	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.203568935 CEST	35150	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.217982054 CEST	1337	35148	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.218153000 CEST	35148	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.355710030 CEST	1337	35148	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.355928898 CEST	35148	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.356869936 CEST	35152	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.361323118 CEST	1337	35148	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.362293005 CEST	1337	35152	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.362354040 CEST	35152	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.384850979 CEST	35152	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.390232086 CEST	1337	35152	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.632385015 CEST	1337	35150	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.632638931 CEST	35150	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.633322001 CEST	35154	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.638063908 CEST	1337	35150	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.638706923 CEST	1337	35154	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:57.638772011 CEST	35154	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.661376953 CEST	35154	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:57.666807890 CEST	1337	35154	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.109052896 CEST	1337	35152	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.109227896 CEST	35152	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.245497942 CEST	1337	35152	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.245727062 CEST	35152	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.246125937 CEST	35156	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.252371073 CEST	1337	35152	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.252867937 CEST	1337	35156	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.252933025 CEST	35156	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.272448063 CEST	35156	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.277877092 CEST	1337	35156	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.402514935 CEST	1337	35154	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.402694941 CEST	35154	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.542052984 CEST	1337	35154	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.542413950 CEST	35154	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.543200016 CEST	35158	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.547770023 CEST	1337	35154	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.548648119 CEST	1337	35158	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:58.548712969 CEST	35158	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.570445061 CEST	35158	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:58.576056957 CEST	1337	35158	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.012248993 CEST	1337	35156	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.012468100 CEST	35156	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.245022058 CEST	1337	35156	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.245271921 CEST	35156	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.245718002 CEST	35160	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.250595093 CEST	1337	35156	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.255469084 CEST	1337	35160	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.255518913 CEST	35160	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.274854898 CEST	35160	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.280392885 CEST	1337	35160	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.305660009 CEST	1337	35158	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.305860996 CEST	35158	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.443151951 CEST	1337	35158	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.443424940 CEST	35158	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.443909883 CEST	35162	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.449408054 CEST	1337	35158	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.449429035 CEST	1337	35162	154.213.187.206	192.168.2.23
Oct 26, 2024 19:30:59.449472904 CEST	35162	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.469971895 CEST	35162	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:30:59.475294113 CEST	1337	35162	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.018349886 CEST	1337	35160	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.018573046 CEST	35160	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.167737961 CEST	1337	35160	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.167932987 CEST	35160	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.168498993 CEST	35164	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.173304081 CEST	1337	35160	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.173964977 CEST	1337	35164	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.174010992 CEST	35164	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.197179079 CEST	35164	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.202662945 CEST	1337	35164	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.207175016 CEST	1337	35162	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.207223892 CEST	35162	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.343951941 CEST	1337	35162	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.344424009 CEST	35162	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.345112085 CEST	35166	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.349915028 CEST	1337	35162	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.350527048 CEST	1337	35166	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.350579977 CEST	35166	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.382052898 CEST	35166	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:00.387578011 CEST	1337	35166	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.918793917 CEST	1337	35164	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:00.918937922 CEST	35164	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.049573898 CEST	1337	35164	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.049724102 CEST	35164	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.050371885 CEST	35168	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.055114031 CEST	1337	35164	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.055756092 CEST	1337	35168	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.055888891 CEST	35168	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.081156969 CEST	35168	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.086469889 CEST	1337	35168	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.101988077 CEST	1337	35166	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.102138996 CEST	35166	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.240142107 CEST	1337	35166	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.240447998 CEST	35166	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.241370916 CEST	35170	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.245939016 CEST	1337	35166	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.246908903 CEST	1337	35170	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.247021914 CEST	35170	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.273477077 CEST	35170	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.278914928 CEST	1337	35170	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.809547901 CEST	1337	35168	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.809777021 CEST	35168	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.945638895 CEST	1337	35168	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.945882082 CEST	35168	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.946336985 CEST	35172	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.951287031 CEST	1337	35168	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.951738119 CEST	1337	35172	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:01.951817036 CEST	35172	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.975265980 CEST	35172	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:01.980690002 CEST	1337	35172	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.002356052 CEST	1337	35170	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.002499104 CEST	35170	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.142103910 CEST	1337	35170	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.142282009 CEST	35170	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.142963886 CEST	35174	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.148797035 CEST	1337	35170	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.149472952 CEST	1337	35174	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.149523020 CEST	35174	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.175600052 CEST	35174	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.181103945 CEST	1337	35174	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.707990885 CEST	1337	35172	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.708165884 CEST	35172	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.844465971 CEST	1337	35172	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.844625950 CEST	35172	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.845330000 CEST	35176	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.851083040 CEST	1337	35172	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.851561069 CEST	1337	35176	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.851655960 CEST	35176	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.873009920 CEST	35176	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:02.878420115 CEST	1337	35176	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.899238110 CEST	1337	35174	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:02.899338007 CEST	35174	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.035648108 CEST	1337	35174	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.035845995 CEST	35174	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.036887884 CEST	35178	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.041254997 CEST	1337	35174	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.042262077 CEST	1337	35178	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.042332888 CEST	35178	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.072304010 CEST	35178	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.077722073 CEST	1337	35178	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.747092962 CEST	1337	35176	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.747409105 CEST	35176	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.748092890 CEST	35180	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.753002882 CEST	1337	35176	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.753822088 CEST	1337	35180	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.753915071 CEST	35180	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.774262905 CEST	35180	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.779748917 CEST	1337	35180	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.796459913 CEST	1337	35178	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.796554089 CEST	35178	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.937428951 CEST	1337	35178	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.937705994 CEST	35178	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.938335896 CEST	35182	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.943205118 CEST	1337	35178	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.943757057 CEST	1337	35182	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:03.943823099 CEST	35182	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.970120907 CEST	35182	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:03.975493908 CEST	1337	35182	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.494867086 CEST	1337	35180	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.495157957 CEST	35180	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.631479025 CEST	1337	35180	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.631696939 CEST	35180	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.632164955 CEST	35184	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.637155056 CEST	1337	35180	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.637545109 CEST	1337	35184	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.637609959 CEST	35184	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.655864954 CEST	35184	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.661231041 CEST	1337	35184	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.701800108 CEST	1337	35182	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.701984882 CEST	35182	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.839977026 CEST	1337	35182	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.840213060 CEST	35182	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.840760946 CEST	35186	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.845632076 CEST	1337	35182	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.846126080 CEST	1337	35186	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:04.846184969 CEST	35186	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.868016005 CEST	35186	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:04.873372078 CEST	1337	35186	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.364671946 CEST	1337	35184	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.364794970 CEST	35184	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.494257927 CEST	1337	35184	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.494399071 CEST	35184	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.495060921 CEST	35188	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.499839067 CEST	1337	35184	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.500469923 CEST	1337	35188	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.500531912 CEST	35188	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.523386955 CEST	35188	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.528752089 CEST	1337	35188	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.591743946 CEST	1337	35186	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.591811895 CEST	35186	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.722837925 CEST	1337	35186	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.722964048 CEST	35186	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.723462105 CEST	35190	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.728378057 CEST	1337	35186	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.728836060 CEST	1337	35190	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:05.728892088 CEST	35190	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.753474951 CEST	35190	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:05.758918047 CEST	1337	35190	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.261878967 CEST	1337	35188	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.262078047 CEST	35188	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.401382923 CEST	1337	35188	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.401510954 CEST	35188	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.401897907 CEST	35192	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.406941891 CEST	1337	35188	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.407254934 CEST	1337	35192	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.407326937 CEST	35192	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.424874067 CEST	35192	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.430294037 CEST	1337	35192	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.484807014 CEST	1337	35190	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.484891891 CEST	35190	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.622172117 CEST	1337	35190	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.622311115 CEST	35190	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.622868061 CEST	35194	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.627866030 CEST	1337	35190	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.628319025 CEST	1337	35194	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:06.628377914 CEST	35194	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.648924112 CEST	35194	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:06.654393911 CEST	1337	35194	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.163829088 CEST	1337	35192	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.163959026 CEST	35192	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.299659014 CEST	1337	35192	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.299988985 CEST	35192	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.300431013 CEST	35196	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.305325985 CEST	1337	35192	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.305901051 CEST	1337	35196	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.305962086 CEST	35196	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.324826002 CEST	35196	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.330141068 CEST	1337	35196	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.392127991 CEST	1337	35194	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.392412901 CEST	35194	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.527581930 CEST	1337	35194	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.527852058 CEST	35194	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.528419971 CEST	35198	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.533324957 CEST	1337	35194	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.533850908 CEST	1337	35198	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:07.533917904 CEST	35198	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.555896997 CEST	35198	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:07.561332941 CEST	1337	35198	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.045362949 CEST	1337	35196	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.045608044 CEST	35196	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.179461956 CEST	1337	35196	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.179806948 CEST	35196	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.180188894 CEST	35200	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.185184956 CEST	1337	35196	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.185635090 CEST	1337	35200	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.185693979 CEST	35200	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.204308033 CEST	35200	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.209681034 CEST	1337	35200	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.278254986 CEST	1337	35198	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.278474092 CEST	35198	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.416485071 CEST	1337	35198	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.416624069 CEST	35198	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.417174101 CEST	35202	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.422265053 CEST	1337	35198	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.422671080 CEST	1337	35202	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.422739029 CEST	35202	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.443999052 CEST	35202	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:08.450261116 CEST	1337	35202	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.942087889 CEST	1337	35200	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:08.942316055 CEST	35200	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.066200018 CEST	1337	35200	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.066433907 CEST	35200	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.066924095 CEST	35204	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.071939945 CEST	1337	35200	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.072351933 CEST	1337	35204	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.072422028 CEST	35204	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.096509933 CEST	35204	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.101897955 CEST	1337	35204	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.167117119 CEST	1337	35202	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.167316914 CEST	35202	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.297139883 CEST	1337	35202	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.297466040 CEST	35202	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.298517942 CEST	35206	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.302830935 CEST	1337	35202	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.304120064 CEST	1337	35206	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.304189920 CEST	35206	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.338243008 CEST	35206	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.343667030 CEST	1337	35206	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.816010952 CEST	1337	35204	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.816127062 CEST	35204	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.949745893 CEST	1337	35204	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.949857950 CEST	35204	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.950447083 CEST	35208	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.957289934 CEST	1337	35204	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.957376957 CEST	1337	35208	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:09.957423925 CEST	35208	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.985090017 CEST	35208	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:09.990492105 CEST	1337	35208	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.038830042 CEST	1337	35206	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.038928986 CEST	35206	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.168699980 CEST	1337	35206	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.169065952 CEST	35206	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.169961929 CEST	35210	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.174707890 CEST	1337	35206	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.175513983 CEST	1337	35210	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.175606966 CEST	35210	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.211201906 CEST	35210	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.216600895 CEST	1337	35210	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.702047110 CEST	1337	35208	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.702214956 CEST	35208	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.831165075 CEST	1337	35208	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.831366062 CEST	35208	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.832387924 CEST	35212	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.837040901 CEST	1337	35208	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.837927103 CEST	1337	35212	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.838007927 CEST	35212	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.864852905 CEST	35212	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:10.870249987 CEST	1337	35212	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.941539049 CEST	1337	35210	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:10.941787958 CEST	35210	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.076651096 CEST	1337	35210	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.076790094 CEST	35210	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.077624083 CEST	35214	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.082197905 CEST	1337	35210	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.083118916 CEST	1337	35214	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.083208084 CEST	35214	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.109688997 CEST	35214	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.115048885 CEST	1337	35214	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.592927933 CEST	1337	35212	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.593096972 CEST	35212	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.729214907 CEST	1337	35212	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.729379892 CEST	35212	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.729866028 CEST	35216	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.734821081 CEST	1337	35212	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.735270977 CEST	1337	35216	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.735435963 CEST	35216	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.755291939 CEST	35216	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.760821104 CEST	1337	35216	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.812935114 CEST	1337	35214	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.813031912 CEST	35214	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.944228888 CEST	1337	35214	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.944370985 CEST	35214	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.944928885 CEST	35218	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.949805021 CEST	1337	35214	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.950376987 CEST	1337	35218	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:11.950434923 CEST	35218	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.977570057 CEST	35218	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:11.982990026 CEST	1337	35218	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.492799997 CEST	1337	35216	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.492983103 CEST	35216	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.698510885 CEST	1337	35218	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.698663950 CEST	35218	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.835036993 CEST	1337	35218	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.835325003 CEST	35218	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.836285114 CEST	35220	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.840646029 CEST	1337	35218	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.841871023 CEST	1337	35220	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.841942072 CEST	35220	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.874655008 CEST	35220	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.880027056 CEST	1337	35220	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.909007072 CEST	1337	35216	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.909243107 CEST	35216	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.909774065 CEST	35222	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.914753914 CEST	1337	35216	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.915178061 CEST	1337	35222	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:12.915270090 CEST	35222	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.937402964 CEST	35222	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:12.942761898 CEST	1337	35222	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.584053993 CEST	1337	35220	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.584336042 CEST	35220	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.649076939 CEST	1337	35222	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.649184942 CEST	35222	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.720846891 CEST	1337	35220	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.721143961 CEST	35220	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.722134113 CEST	35224	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.726578951 CEST	1337	35220	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.727577925 CEST	1337	35224	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.727648973 CEST	35224	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.762970924 CEST	35224	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.768390894 CEST	1337	35224	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.778732061 CEST	1337	35222	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.778795004 CEST	35222	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.779220104 CEST	35226	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.784192085 CEST	1337	35222	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.784600973 CEST	1337	35226	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:13.784652948 CEST	35226	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.809001923 CEST	35226	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:13.814435959 CEST	1337	35226	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.297172070 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 26, 2024 19:31:14.468626022 CEST	1337	35224	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.468844891 CEST	35224	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.535397053 CEST	1337	35226	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.535703897 CEST	35226	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.605849981 CEST	1337	35224	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.606007099 CEST	35224	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.606868029 CEST	35228	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.611490965 CEST	1337	35224	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.612363100 CEST	1337	35228	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.612468004 CEST	35228	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.647694111 CEST	35228	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.653233051 CEST	1337	35228	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.671916008 CEST	1337	35226	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.672012091 CEST	35226	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.672777891 CEST	35230	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.677577019 CEST	1337	35226	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.678155899 CEST	1337	35230	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:14.678225994 CEST	35230	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.712439060 CEST	35230	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:14.717931986 CEST	1337	35230	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.355602026 CEST	1337	35228	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.355761051 CEST	35228	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.435776949 CEST	1337	35230	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.435889006 CEST	35230	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.491966963 CEST	1337	35228	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.492285013 CEST	35228	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.493029118 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.497689962 CEST	1337	35228	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.498404980 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.498469114 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.524449110 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.529804945 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.573396921 CEST	1337	35230	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.573695898 CEST	35230	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.574158907 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.579267979 CEST	1337	35230	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.579560995 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:15.579618931 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.603751898 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:15.609323978 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.887731075 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.887878895 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.887932062 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.887963057 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.887993097 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888046026 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888057947 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.888124943 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888170958 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.888222933 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.888247967 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888263941 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888350010 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.888377905 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.888386965 CEST	35232	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888417959 CEST	35234	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.888876915 CEST	35236	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.889101028 CEST	35238	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.894440889 CEST	1337	35232	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.894469023 CEST	1337	35234	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.899456024 CEST	1337	35236	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.899485111 CEST	1337	35238	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.899525881 CEST	35236	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.899525881 CEST	35238	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.950799942 CEST	35236	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.951028109 CEST	35238	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:16.956252098 CEST	1337	35236	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:16.956386089 CEST	1337	35238	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.653337002 CEST	1337	35236	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.653491020 CEST	35236	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.657915115 CEST	1337	35238	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.658013105 CEST	35238	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.793581963 CEST	1337	35236	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.793893099 CEST	35236	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.794420958 CEST	35240	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.795419931 CEST	1337	35238	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.795495033 CEST	35238	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.795885086 CEST	35242	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.800666094 CEST	1337	35236	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.800687075 CEST	1337	35240	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.800740004 CEST	35240	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.800781012 CEST	1337	35238	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.803119898 CEST	1337	35242	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.803179026 CEST	35242	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.855024099 CEST	35240	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.859029055 CEST	35242	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:17.860627890 CEST	1337	35240	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:17.868290901 CEST	1337	35242	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.545207024 CEST	1337	35240	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.545331955 CEST	35240	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.560808897 CEST	1337	35242	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.560969114 CEST	35242	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.682945967 CEST	1337	35240	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.683199883 CEST	35240	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.683743954 CEST	35244	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.688786983 CEST	1337	35240	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.689202070 CEST	1337	35244	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.689265966 CEST	35244	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.697171926 CEST	1337	35242	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.697232008 CEST	35242	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.697787046 CEST	35246	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.702596903 CEST	1337	35242	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.703099012 CEST	1337	35246	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.703141928 CEST	35246	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.731182098 CEST	35244	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.736732006 CEST	1337	35244	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:18.741102934 CEST	35246	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:18.746505976 CEST	1337	35246	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.445821047 CEST	1337	35246	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.446048021 CEST	35246	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.477464914 CEST	1337	35244	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.477678061 CEST	35244	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.575539112 CEST	1337	35246	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.575818062 CEST	35246	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.576236963 CEST	35248	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.581137896 CEST	1337	35246	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.581720114 CEST	1337	35248	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.581830025 CEST	35248	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.598298073 CEST	35248	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.603852987 CEST	1337	35248	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.612684011 CEST	1337	35244	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.612802982 CEST	35244	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.613262892 CEST	35250	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.618184090 CEST	1337	35244	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.618653059 CEST	1337	35250	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:19.618719101 CEST	35250	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.639520884 CEST	35250	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:19.644962072 CEST	1337	35250	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.331448078 CEST	1337	35248	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.331578016 CEST	35248	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.366028070 CEST	1337	35250	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.366137981 CEST	35250	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.467803955 CEST	1337	35248	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.468102932 CEST	35248	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.468811989 CEST	35252	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.473417997 CEST	1337	35248	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.474159956 CEST	1337	35252	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.474227905 CEST	35252	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.502382994 CEST	35252	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.503140926 CEST	1337	35250	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.503243923 CEST	35250	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.504179001 CEST	35254	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.507733107 CEST	1337	35252	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.508635998 CEST	1337	35250	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.509521008 CEST	1337	35254	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:20.509588957 CEST	35254	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.533763885 CEST	35254	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:20.539462090 CEST	1337	35254	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.217140913 CEST	1337	35252	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.217271090 CEST	35252	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.242814064 CEST	1337	35254	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.242894888 CEST	35254	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.346626043 CEST	1337	35252	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.346842051 CEST	35252	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.347357035 CEST	35256	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.352289915 CEST	1337	35252	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.352667093 CEST	1337	35256	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.352724075 CEST	35256	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.374425888 CEST	35256	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.379734993 CEST	1337	35256	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.384186983 CEST	1337	35254	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.384262085 CEST	35254	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.384574890 CEST	35258	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.389657974 CEST	1337	35254	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.389974117 CEST	1337	35258	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:21.390023947 CEST	35258	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.412872076 CEST	35258	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:21.418291092 CEST	1337	35258	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.086452007 CEST	1337	35256	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.086530924 CEST	35256	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.135937929 CEST	1337	35258	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.136014938 CEST	35258	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.216231108 CEST	1337	35256	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.216340065 CEST	35256	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.217314005 CEST	35260	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.221621990 CEST	1337	35256	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.222573042 CEST	1337	35260	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.222624063 CEST	35260	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.249098063 CEST	35260	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.254465103 CEST	1337	35260	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.275603056 CEST	1337	35258	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.275669098 CEST	35258	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.276206970 CEST	35262	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.281050920 CEST	1337	35258	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.281481981 CEST	1337	35262	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.281533003 CEST	35262	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.308301926 CEST	35262	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:22.314055920 CEST	1337	35262	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.972708941 CEST	1337	35260	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:22.972876072 CEST	35260	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.018208027 CEST	1337	35262	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.018496037 CEST	35262	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.110053062 CEST	1337	35260	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.110311985 CEST	35260	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.110949993 CEST	35264	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.115765095 CEST	1337	35260	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.116425037 CEST	1337	35264	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.116564989 CEST	35264	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.137398958 CEST	35264	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.142936945 CEST	1337	35264	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.148184061 CEST	1337	35262	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.148257971 CEST	35262	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.148617983 CEST	35266	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.153759003 CEST	1337	35262	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.154401064 CEST	1337	35266	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.154576063 CEST	35266	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.177311897 CEST	35266	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.182686090 CEST	1337	35266	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.882061005 CEST	1337	35264	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.882302046 CEST	35264	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:23.898261070 CEST	1337	35266	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:23.898432016 CEST	35266	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.018471003 CEST	1337	35264	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.018696070 CEST	35264	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.019468069 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.024106979 CEST	1337	35264	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.024854898 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.024904013 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.029670000 CEST	1337	35266	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.029776096 CEST	35266	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.030864954 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.035253048 CEST	1337	35266	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.036298990 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.036361933 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.071499109 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.076972008 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:24.085804939 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:24.091176033 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062199116 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062231064 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062439919 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.062489986 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.062513113 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062541962 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062593937 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062597990 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.062611103 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.062627077 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.062635899 CEST	35270	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.062665939 CEST	35268	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.063713074 CEST	35272	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.063877106 CEST	35274	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.068336010 CEST	1337	35268	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.073514938 CEST	1337	35270	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.073635101 CEST	1337	35272	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.073662996 CEST	1337	35274	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.073692083 CEST	35272	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.073719025 CEST	35274	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.126538038 CEST	35272	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.127147913 CEST	35274	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.131882906 CEST	1337	35272	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.132435083 CEST	1337	35274	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.818150043 CEST	1337	35274	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.818319082 CEST	35274	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.849065065 CEST	1337	35272	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.849144936 CEST	35272	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.957051992 CEST	1337	35274	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.957185030 CEST	35274	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.957803965 CEST	35276	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.962433100 CEST	1337	35274	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.963129997 CEST	1337	35276	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:25.963198900 CEST	35276	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.983424902 CEST	35276	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:25.988806963 CEST	1337	35276	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.364658117 CEST	1337	35272	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.364965916 CEST	35272	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.365381002 CEST	35278	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.370389938 CEST	1337	35272	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.370800972 CEST	1337	35278	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.370850086 CEST	35278	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.387495041 CEST	35278	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.393049002 CEST	1337	35278	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.717976093 CEST	1337	35276	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.718118906 CEST	35276	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.858809948 CEST	1337	35276	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.858942986 CEST	35276	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.859740973 CEST	35280	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.864226103 CEST	1337	35276	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.865089893 CEST	1337	35280	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:26.865222931 CEST	35280	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.886312008 CEST	35280	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:26.893198013 CEST	1337	35280	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.119529009 CEST	1337	35278	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.119781017 CEST	35278	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.256567955 CEST	1337	35278	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.256706953 CEST	35278	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.257220030 CEST	35282	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.262089968 CEST	1337	35278	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.262672901 CEST	1337	35282	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.262792110 CEST	35282	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.280699968 CEST	35282	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.286225080 CEST	1337	35282	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.612698078 CEST	1337	35280	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.612940073 CEST	35280	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.749619961 CEST	1337	35280	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.749856949 CEST	35280	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.750435114 CEST	35284	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.756551027 CEST	1337	35280	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.757106066 CEST	1337	35284	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:27.757184982 CEST	35284	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.780155897 CEST	35284	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:27.785629034 CEST	1337	35284	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.021595955 CEST	1337	35282	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.021778107 CEST	35282	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.158385038 CEST	1337	35282	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.158534050 CEST	35282	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.159095049 CEST	35286	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.163980007 CEST	1337	35282	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.164469004 CEST	1337	35286	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.164537907 CEST	35286	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.187762022 CEST	35286	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.193195105 CEST	1337	35286	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.518855095 CEST	1337	35284	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.519006014 CEST	35284	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.655649900 CEST	1337	35284	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.655904055 CEST	35284	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.656331062 CEST	35288	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.661237955 CEST	1337	35284	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.661617041 CEST	1337	35288	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.661684036 CEST	35288	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.683432102 CEST	35288	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:28.688757896 CEST	1337	35288	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.930586100 CEST	1337	35286	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:28.930809021 CEST	35286	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.068814039 CEST	1337	35286	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.069155931 CEST	35286	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.069648981 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.074512005 CEST	1337	35286	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.075053930 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.075098991 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.097438097 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.303246975 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.340372086 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.340414047 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.418159008 CEST	1337	35288	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.418370962 CEST	35288	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.554476023 CEST	1337	35288	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.554666042 CEST	35288	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.555577040 CEST	35292	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.560036898 CEST	1337	35288	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.560940981 CEST	1337	35292	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.561002016 CEST	35292	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.590810061 CEST	35292	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.596193075 CEST	1337	35292	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.830291986 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.830460072 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.966387987 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.966525078 CEST	35290	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.967358112 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:29.971879005 CEST	1337	35290	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.972758055 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:29.972836971 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.005264044 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.218914986 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.219626904 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.224421978 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.320391893 CEST	1337	35292	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.320590019 CEST	35292	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.455832005 CEST	1337	35292	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.456027031 CEST	35292	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.456824064 CEST	35296	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.461683035 CEST	1337	35292	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.462424994 CEST	1337	35296	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.462536097 CEST	35296	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.488096952 CEST	35296	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:30.493484974 CEST	1337	35296	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.968394995 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:30.968578100 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.108248949 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.108490944 CEST	35294	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.109411955 CEST	35298	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.113976955 CEST	1337	35294	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.114795923 CEST	1337	35298	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.114876986 CEST	35298	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.140022993 CEST	35298	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.145456076 CEST	1337	35298	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.209346056 CEST	1337	35296	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.209464073 CEST	35296	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.345684052 CEST	1337	35296	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.345927000 CEST	35296	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.346594095 CEST	35300	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.351284981 CEST	1337	35296	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.352020025 CEST	1337	35300	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.352122068 CEST	35300	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.375787020 CEST	35300	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.381138086 CEST	1337	35300	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.852849007 CEST	1337	35298	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.853060961 CEST	35298	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.988425016 CEST	1337	35298	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.988778114 CEST	35298	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.989401102 CEST	35302	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:31.994281054 CEST	1337	35298	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.994793892 CEST	1337	35302	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:31.994854927 CEST	35302	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.020193100 CEST	35302	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.026484013 CEST	1337	35302	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.092940092 CEST	1337	35300	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.093038082 CEST	35300	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.229944944 CEST	1337	35300	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.230154037 CEST	35300	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.230758905 CEST	35304	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.235632896 CEST	1337	35300	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.236207962 CEST	1337	35304	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.236275911 CEST	35304	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.260746002 CEST	35304	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.266258955 CEST	1337	35304	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.739423990 CEST	1337	35302	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.739569902 CEST	35302	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.876126051 CEST	1337	35302	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.876384974 CEST	35302	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.877023935 CEST	35306	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.882662058 CEST	1337	35302	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.883275986 CEST	1337	35306	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.883362055 CEST	35306	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.910268068 CEST	35306	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:32.916378975 CEST	1337	35306	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.979743004 CEST	1337	35304	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:32.979933023 CEST	35304	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.116677046 CEST	1337	35304	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.116914988 CEST	35304	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.117407084 CEST	35308	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.123908043 CEST	1337	35304	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.124296904 CEST	1337	35308	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.124360085 CEST	35308	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.147629023 CEST	35308	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.153024912 CEST	1337	35308	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.633028030 CEST	1337	35306	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.633214951 CEST	35306	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.769455910 CEST	1337	35306	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.769659042 CEST	35306	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.770376921 CEST	35310	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.775955915 CEST	1337	35306	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.776014090 CEST	1337	35310	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.776079893 CEST	35310	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.800864935 CEST	35310	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:33.806293011 CEST	1337	35310	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.875412941 CEST	1337	35308	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:33.875648022 CEST	35308	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.010406017 CEST	1337	35308	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.010596991 CEST	35308	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.011178970 CEST	35312	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.016376972 CEST	1337	35308	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.016508102 CEST	1337	35312	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.016587019 CEST	35312	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.040359974 CEST	35312	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.045680046 CEST	1337	35312	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.524266005 CEST	1337	35310	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.524527073 CEST	35310	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.660676003 CEST	1337	35310	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.660885096 CEST	35310	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.661525965 CEST	35314	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.666349888 CEST	1337	35310	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.666958094 CEST	1337	35314	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.667063951 CEST	35314	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.692131996 CEST	35314	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.702267885 CEST	1337	35314	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.769395113 CEST	1337	35312	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.769526958 CEST	35312	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.906544924 CEST	1337	35312	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.906689882 CEST	35312	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.907310963 CEST	35316	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.912319899 CEST	1337	35312	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.913502932 CEST	1337	35316	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:34.913569927 CEST	35316	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.937371016 CEST	35316	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:34.942770004 CEST	1337	35316	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.410697937 CEST	1337	35314	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.410927057 CEST	35314	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.547214985 CEST	1337	35314	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.547385931 CEST	35314	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.547981024 CEST	35318	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.553200006 CEST	1337	35314	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.553721905 CEST	1337	35318	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.553762913 CEST	35318	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.576499939 CEST	35318	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.581931114 CEST	1337	35318	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.659447908 CEST	1337	35316	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.659652948 CEST	35316	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.795017958 CEST	1337	35316	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.795218945 CEST	35316	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.795826912 CEST	35320	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.800570011 CEST	1337	35316	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.801167965 CEST	1337	35320	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:35.801208019 CEST	35320	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.825309992 CEST	35320	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:35.830704927 CEST	1337	35320	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.304671049 CEST	1337	35318	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.304964066 CEST	35318	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.441601038 CEST	1337	35318	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.441992044 CEST	35318	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.442671061 CEST	35322	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.448126078 CEST	1337	35318	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.449414015 CEST	1337	35322	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.449472904 CEST	35322	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.473982096 CEST	35322	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.479641914 CEST	1337	35322	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.576145887 CEST	1337	35320	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.576322079 CEST	35320	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.712130070 CEST	1337	35320	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.712351084 CEST	35320	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.712996960 CEST	35324	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.717672110 CEST	1337	35320	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.718267918 CEST	1337	35324	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:36.718314886 CEST	35324	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.744385958 CEST	35324	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:36.749682903 CEST	1337	35324	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:37.476876974 CEST	1337	35324	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:37.477020025 CEST	35324	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:37.614610910 CEST	1337	35324	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:37.614773989 CEST	35324	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:37.615415096 CEST	35326	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:37.620198011 CEST	1337	35324	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:37.620826960 CEST	1337	35326	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:37.620908022 CEST	35326	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:37.645853996 CEST	35326	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:37.651199102 CEST	1337	35326	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.214066029 CEST	1337	35322	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.214282036 CEST	35322	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.350661993 CEST	1337	35322	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.350861073 CEST	35322	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.351528883 CEST	35328	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.356580973 CEST	1337	35322	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.357327938 CEST	1337	35328	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.357403994 CEST	35328	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.370661020 CEST	1337	35326	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.370713949 CEST	35326	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.380132914 CEST	35328	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.385703087 CEST	1337	35328	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.507297039 CEST	1337	35326	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.507514954 CEST	35326	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.508094072 CEST	35330	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.512993097 CEST	1337	35326	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.513715029 CEST	1337	35330	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:38.513791084 CEST	35330	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.535998106 CEST	35330	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:38.546741962 CEST	1337	35330	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.105454922 CEST	1337	35328	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.105575085 CEST	35328	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.242439985 CEST	1337	35328	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.242537022 CEST	35328	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.243282080 CEST	35332	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.247967005 CEST	1337	35328	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.248712063 CEST	1337	35332	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.248759985 CEST	35332	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.261316061 CEST	1337	35330	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.261363029 CEST	35330	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.269546986 CEST	35332	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.275006056 CEST	1337	35332	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.397839069 CEST	1337	35330	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.397984982 CEST	35330	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.398721933 CEST	35334	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.404197931 CEST	1337	35330	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.404218912 CEST	1337	35334	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:39.404268026 CEST	35334	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.425035000 CEST	35334	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:39.431025982 CEST	1337	35334	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.006634951 CEST	1337	35332	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.006810904 CEST	35332	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.143362999 CEST	1337	35332	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.143524885 CEST	35332	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.144207954 CEST	35336	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.150755882 CEST	1337	35332	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.151400089 CEST	1337	35336	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.151459932 CEST	35336	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.151993036 CEST	1337	35334	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.152040958 CEST	35334	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.170754910 CEST	35336	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.178383112 CEST	1337	35336	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.288197994 CEST	1337	35334	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.288423061 CEST	35334	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.289088011 CEST	35338	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.293981075 CEST	1337	35334	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.295129061 CEST	1337	35338	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.295182943 CEST	35338	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.314588070 CEST	35338	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:40.324281931 CEST	1337	35338	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.901236057 CEST	1337	35336	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:40.901429892 CEST	35336	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.194606066 CEST	1337	35336	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.194632053 CEST	1337	35338	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.194756985 CEST	35338	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.194762945 CEST	1337	35338	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.194791079 CEST	35336	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.194873095 CEST	35338	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.195740938 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.196208954 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.200159073 CEST	1337	35336	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.200174093 CEST	1337	35338	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.205286026 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.205317020 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.205338955 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.205358982 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.248424053 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.248507977 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:41.253796101 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:41.253937960 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126236916 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126269102 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126437902 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.126538992 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126547098 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.126597881 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.126601934 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126629114 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.126666069 CEST	35340	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.126666069 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.127381086 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.127438068 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.127454996 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.127481937 CEST	35342	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.132421017 CEST	1337	35340	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.137348890 CEST	1337	35342	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.137547016 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.137604952 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.137617111 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.137641907 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.177990913 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.178087950 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:42.183365107 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:42.183499098 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209598064 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209644079 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209665060 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209677935 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209697962 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209770918 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.209841967 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.209841967 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.209841967 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.209842920 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.209842920 CEST	35346	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.209875107 CEST	35344	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.210577965 CEST	35348	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.210764885 CEST	35350	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.215811968 CEST	1337	35346	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.215821981 CEST	1337	35344	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.215898037 CEST	1337	35348	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.215946913 CEST	35348	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.220875978 CEST	1337	35350	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.220918894 CEST	35350	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.255165100 CEST	35348	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.260582924 CEST	1337	35348	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.261938095 CEST	35350	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.267487049 CEST	1337	35350	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.964359999 CEST	1337	35350	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.964484930 CEST	35350	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:43.971240997 CEST	1337	35348	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:43.971344948 CEST	35348	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.101610899 CEST	1337	35350	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.101857901 CEST	35350	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.102430105 CEST	35352	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.107419014 CEST	1337	35350	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.107757092 CEST	1337	35348	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.107824087 CEST	35348	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.107904911 CEST	1337	35352	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.107961893 CEST	35352	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.108400106 CEST	35354	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.113285065 CEST	1337	35348	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.113748074 CEST	1337	35354	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.113799095 CEST	35354	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.145562887 CEST	35352	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.151056051 CEST	1337	35352	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.152451038 CEST	35354	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.157845020 CEST	1337	35354	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.861594915 CEST	1337	35352	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.861737013 CEST	35352	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.863851070 CEST	1337	35354	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.863943100 CEST	35354	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.997632980 CEST	1337	35352	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:44.997814894 CEST	35352	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:44.998550892 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.001946926 CEST	1337	35354	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.002000093 CEST	35354	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.002264977 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.004225016 CEST	1337	35352	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.004245043 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.004282951 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.007481098 CEST	1337	35354	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.007833958 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.007917881 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.043570042 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.046590090 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.049603939 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.052031994 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.765714884 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.765850067 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:45.781857014 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:45.781969070 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.241828918 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.242000103 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.242430925 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.242472887 CEST	35360	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.242494106 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.243079901 CEST	35362	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.243565083 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.243578911 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.243608952 CEST	35358	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.243608952 CEST	35356	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.247486115 CEST	1337	35358	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.247781992 CEST	1337	35356	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.247797012 CEST	1337	35360	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.247893095 CEST	35360	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.248737097 CEST	1337	35362	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.248786926 CEST	35362	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.286494970 CEST	35360	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.288086891 CEST	35362	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:46.292203903 CEST	1337	35360	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.293570995 CEST	1337	35362	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.989542007 CEST	1337	35360	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:46.989962101 CEST	35360	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.004373074 CEST	1337	35362	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.004451990 CEST	35362	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.125675917 CEST	1337	35360	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.126054049 CEST	35360	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.126738071 CEST	35364	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.132785082 CEST	1337	35360	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.133258104 CEST	1337	35364	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.133313894 CEST	35364	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.140625954 CEST	1337	35362	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.140691996 CEST	35362	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.141330957 CEST	35366	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.146352053 CEST	1337	35362	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.146738052 CEST	1337	35366	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.146775007 CEST	35366	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.166249990 CEST	35364	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.171541929 CEST	1337	35364	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.179796934 CEST	35366	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.185188055 CEST	1337	35366	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.891108990 CEST	1337	35364	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.891262054 CEST	35364	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:47.900377035 CEST	1337	35366	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:47.900475025 CEST	35366	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.029328108 CEST	1337	35364	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.029675007 CEST	35364	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.030220032 CEST	35368	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.035017967 CEST	1337	35364	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.035821915 CEST	1337	35368	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.035881996 CEST	35368	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.036894083 CEST	1337	35366	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.036951065 CEST	35366	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.037626028 CEST	35370	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.042373896 CEST	1337	35366	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.042979002 CEST	1337	35370	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.043021917 CEST	35370	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.074503899 CEST	35368	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.079804897 CEST	1337	35368	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.082117081 CEST	35370	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.087455034 CEST	1337	35370	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.775876045 CEST	1337	35368	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.776175022 CEST	35368	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:48.800688028 CEST	1337	35370	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:48.800858021 CEST	35370	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.043473005 CEST	1337	35368	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.043689966 CEST	1337	35370	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.043808937 CEST	35368	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.043888092 CEST	35370	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.044693947 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.044886112 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.049206972 CEST	1337	35368	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.049343109 CEST	1337	35370	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.050019979 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.050079107 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.054368019 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.054409027 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.087677002 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.093027115 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.093503952 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.098342896 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.990094900 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.990307093 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.990325928 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.990365028 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.991702080 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.991806984 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.992644072 CEST	35376	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.992674112 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.992698908 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.992712021 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.992743015 CEST	35372	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.993362904 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.993397951 CEST	35374	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.993417978 CEST	35378	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:49.997217894 CEST	1337	35372	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.998084068 CEST	1337	35376	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:49.998145103 CEST	35376	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.001615047 CEST	1337	35374	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.001682997 CEST	1337	35378	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.001727104 CEST	35378	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.001756907 CEST	35378	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.007138014 CEST	1337	35378	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.021505117 CEST	35376	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.026917934 CEST	1337	35376	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.738981962 CEST	1337	35376	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.739145994 CEST	35376	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.750998974 CEST	1337	35378	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.751070023 CEST	35378	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.869461060 CEST	1337	35376	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.869853020 CEST	35376	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.870501041 CEST	35380	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.878313065 CEST	1337	35376	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.878329039 CEST	1337	35380	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.878397942 CEST	35380	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.878473997 CEST	35380	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.886080980 CEST	1337	35380	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.891664982 CEST	1337	35378	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.891771078 CEST	35378	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.892162085 CEST	35382	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.897119045 CEST	1337	35378	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.898068905 CEST	1337	35382	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:50.898119926 CEST	35382	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.898195982 CEST	35382	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:50.904465914 CEST	1337	35382	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.632404089 CEST	1337	35380	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.632795095 CEST	35380	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.643049955 CEST	1337	35382	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.643126965 CEST	35382	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.769386053 CEST	1337	35380	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.769597054 CEST	35380	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.770365953 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.775010109 CEST	1337	35380	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.776067019 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.776129961 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.776170969 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.779596090 CEST	1337	35382	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.779654980 CEST	35382	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.780010939 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.781645060 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.785093069 CEST	1337	35382	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.785341978 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:51.785393000 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.785425901 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:51.790719986 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:52.530960083 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:52.531074047 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:52.541289091 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:52.541349888 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.035564899 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.035731077 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.035986900 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.036139011 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.036998987 CEST	35388	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.037214994 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.037230968 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.037249088 CEST	35384	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.037269115 CEST	35386	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.037728071 CEST	35390	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.041661024 CEST	1337	35386	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.041707039 CEST	1337	35384	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.042366982 CEST	1337	35388	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.042423010 CEST	35388	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.042484045 CEST	35388	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.047297955 CEST	1337	35390	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.047348976 CEST	35390	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.047411919 CEST	35390	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.047888994 CEST	1337	35388	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.053056002 CEST	1337	35390	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.783399105 CEST	1337	35390	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.783638000 CEST	35390	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.795011997 CEST	1337	35388	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.795115948 CEST	35388	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.932930946 CEST	1337	35388	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.933037043 CEST	35388	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.933824062 CEST	35392	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.938436031 CEST	1337	35388	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.939311028 CEST	1337	35392	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:53.939558029 CEST	35392	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.939573050 CEST	35392	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:53.945063114 CEST	1337	35392	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.184366941 CEST	1337	35390	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.184714079 CEST	35390	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.185636044 CEST	35394	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.191092968 CEST	1337	35390	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.191108942 CEST	1337	35394	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.191186905 CEST	35394	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.191247940 CEST	35394	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.196767092 CEST	1337	35394	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.688455105 CEST	1337	35392	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.688613892 CEST	35392	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.824994087 CEST	1337	35392	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.825181007 CEST	35392	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.826092005 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.830697060 CEST	1337	35392	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.831717014 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.831785917 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.831861973 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:54.837610960 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.942229986 CEST	1337	35394	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:54.942471981 CEST	35394	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.079015970 CEST	1337	35394	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.079296112 CEST	35394	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.080182076 CEST	35398	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.084664106 CEST	1337	35394	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.085499048 CEST	1337	35398	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.085561037 CEST	35398	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.085632086 CEST	35398	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.091356993 CEST	1337	35398	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.914489031 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.914643049 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.916059971 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.916127920 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.916156054 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.916202068 CEST	35396	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.916867018 CEST	1337	35398	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.916938066 CEST	35398	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.917300940 CEST	35400	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.921610117 CEST	1337	35396	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.925793886 CEST	1337	35400	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.925854921 CEST	35400	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.925966024 CEST	35400	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.932533026 CEST	1337	35400	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.970252037 CEST	1337	35398	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.970510006 CEST	35398	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.971321106 CEST	35402	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.976094007 CEST	1337	35398	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.976613998 CEST	1337	35402	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:55.976671934 CEST	35402	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.976752996 CEST	35402	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:55.982357979 CEST	1337	35402	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.675071001 CEST	1337	35400	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.675211906 CEST	35400	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.732598066 CEST	1337	35402	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.732719898 CEST	35402	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.811770916 CEST	1337	35400	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.812077999 CEST	35400	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.813110113 CEST	35404	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.817517996 CEST	1337	35400	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.818691969 CEST	1337	35404	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.818769932 CEST	35404	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.818849087 CEST	35404	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.824326038 CEST	1337	35404	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.873336077 CEST	1337	35402	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.873634100 CEST	35402	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.874311924 CEST	35406	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.879081011 CEST	1337	35402	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.880301952 CEST	1337	35406	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:56.880394936 CEST	35406	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.880434990 CEST	35406	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:56.887409925 CEST	1337	35406	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.573488951 CEST	1337	35404	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.573829889 CEST	35404	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.641927958 CEST	1337	35406	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.642225027 CEST	35406	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.708468914 CEST	1337	35404	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.708863020 CEST	35404	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.709888935 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.714458942 CEST	1337	35404	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.715364933 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.715431929 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.715511084 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.720918894 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.951112032 CEST	1337	35406	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.951354980 CEST	35406	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.951987982 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.956753969 CEST	1337	35406	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.957356930 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:57.957432032 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.957468987 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:57.962868929 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.479331970 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.479473114 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.897156954 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.897547007 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.897680044 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.897708893 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.897824049 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.897880077 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.897907972 CEST	35408	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.897965908 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.897973061 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.898041964 CEST	35410	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.899034977 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.900192976 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.903882980 CEST	1337	35408	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.909277916 CEST	1337	35410	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.909516096 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.909545898 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:58.909606934 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.909638882 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.909660101 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:58.909740925 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:59.122992992 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:59.122992992 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:59.166667938 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.166680098 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.166742086 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.166745901 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.911381960 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.911744118 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:31:59.936098099 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:31:59.936338902 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.048082113 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.048307896 CEST	35412	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.049271107 CEST	35416	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.053697109 CEST	1337	35412	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.054672003 CEST	1337	35416	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.054764986 CEST	35416	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.054814100 CEST	35416	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.060179949 CEST	1337	35416	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.072506905 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.072635889 CEST	35414	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.073436975 CEST	35418	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.078073978 CEST	1337	35414	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.078835011 CEST	1337	35418	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.078921080 CEST	35418	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.078984976 CEST	35418	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.084343910 CEST	1337	35418	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.789207935 CEST	1337	35416	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.789341927 CEST	35416	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.821222067 CEST	1337	35418	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.821439028 CEST	35418	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.918476105 CEST	1337	35416	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.918755054 CEST	35416	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.919720888 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.924124002 CEST	1337	35416	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.925246000 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.925312042 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.925405979 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.930737972 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.960560083 CEST	1337	35418	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.960669041 CEST	35418	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.961292982 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.966029882 CEST	1337	35418	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.966672897 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:00.966732979 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.966811895 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:00.972230911 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:01.703006029 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:01.703126907 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:01.712724924 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:01.712796926 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.178822994 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.178858042 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.179044962 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.179044962 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.179214001 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.179243088 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.179282904 CEST	35420	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.179282904 CEST	35422	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.179912090 CEST	35424	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.180676937 CEST	35426	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.184616089 CEST	1337	35422	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.184645891 CEST	1337	35420	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.185400009 CEST	1337	35424	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.185456991 CEST	35424	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.185477972 CEST	35424	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.186048031 CEST	1337	35426	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.186094046 CEST	35426	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.186144114 CEST	35426	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.190861940 CEST	1337	35424	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.191586971 CEST	1337	35426	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.926446915 CEST	1337	35426	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.926459074 CEST	1337	35424	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:02.926707983 CEST	35426	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:02.926708937 CEST	35424	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.062760115 CEST	1337	35424	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.062906027 CEST	35424	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.063307047 CEST	1337	35426	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.063414097 CEST	35426	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.063743114 CEST	35428	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.064764023 CEST	35430	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.068263054 CEST	1337	35424	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.068680048 CEST	1337	35426	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.069117069 CEST	1337	35428	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.069190025 CEST	35428	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.069269896 CEST	35428	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.070142984 CEST	1337	35430	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.070202112 CEST	35430	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.070297003 CEST	35430	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.074538946 CEST	1337	35428	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.075587034 CEST	1337	35430	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.817064047 CEST	1337	35430	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.817358017 CEST	35430	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.818648100 CEST	1337	35428	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.818733931 CEST	35428	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.957355976 CEST	1337	35430	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.957514048 CEST	1337	35428	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.957570076 CEST	35430	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.957650900 CEST	35428	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.958375931 CEST	35432	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.958683014 CEST	35434	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.963277102 CEST	1337	35430	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.963411093 CEST	1337	35428	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.963943958 CEST	1337	35432	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.964020967 CEST	35432	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.964050055 CEST	35432	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.964087009 CEST	1337	35434	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.964147091 CEST	35434	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.964215994 CEST	35434	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:03.969587088 CEST	1337	35432	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:03.969633102 CEST	1337	35434	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.718008995 CEST	1337	35432	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.718352079 CEST	35432	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.719417095 CEST	1337	35434	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.719504118 CEST	35434	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.853924990 CEST	1337	35432	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.854202032 CEST	35432	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.854691029 CEST	35436	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.856406927 CEST	1337	35434	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.856529951 CEST	35434	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.857172966 CEST	35438	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.859621048 CEST	1337	35432	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.860089064 CEST	1337	35436	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.860192060 CEST	35436	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.860264063 CEST	35436	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.861831903 CEST	1337	35434	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.862529039 CEST	1337	35438	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.862595081 CEST	35438	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.862652063 CEST	35438	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:04.865809917 CEST	1337	35436	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:04.868140936 CEST	1337	35438	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:05.620452881 CEST	1337	35438	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:05.620667934 CEST	35438	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:05.757920980 CEST	1337	35438	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:05.758209944 CEST	35438	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:05.758821011 CEST	35440	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:05.763684034 CEST	1337	35438	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:05.764138937 CEST	1337	35440	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:05.764214993 CEST	35440	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:05.764291048 CEST	35440	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:05.769823074 CEST	1337	35440	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:06.624432087 CEST	1337	35436	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:06.624557972 CEST	35436	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:06.755211115 CEST	1337	35436	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:06.755475044 CEST	35436	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:06.755920887 CEST	35442	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:06.761085033 CEST	1337	35436	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:06.761307955 CEST	1337	35442	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:06.761359930 CEST	35442	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:06.761373043 CEST	35442	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:06.766855955 CEST	1337	35442	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.508872986 CEST	1337	35442	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.509285927 CEST	35442	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.512094021 CEST	1337	35440	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.512165070 CEST	35440	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.642298937 CEST	1337	35440	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.642488956 CEST	35440	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.643191099 CEST	35444	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.645422935 CEST	1337	35442	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.645492077 CEST	35442	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.645917892 CEST	35446	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.647905111 CEST	1337	35440	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.648606062 CEST	1337	35444	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.648674011 CEST	35444	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.648745060 CEST	35444	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.650903940 CEST	1337	35442	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.651292086 CEST	1337	35446	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.651350975 CEST	35446	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.651407003 CEST	35446	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:07.654048920 CEST	1337	35444	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:07.656769991 CEST	1337	35446	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.397093058 CEST	1337	35444	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.397449017 CEST	35444	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.404036045 CEST	1337	35446	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.404112101 CEST	35446	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.534614086 CEST	1337	35444	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.534873962 CEST	35444	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.535809040 CEST	35448	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.542120934 CEST	1337	35446	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.542176962 CEST	1337	35444	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.542208910 CEST	1337	35448	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.542210102 CEST	35446	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.542270899 CEST	35448	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.542386055 CEST	35448	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.543263912 CEST	35450	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.547611952 CEST	1337	35446	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.547709942 CEST	1337	35448	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.548629999 CEST	1337	35450	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:08.548691034 CEST	35450	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.548752069 CEST	35450	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:08.554083109 CEST	1337	35450	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.279740095 CEST	1337	35450	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.280034065 CEST	35450	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.302834988 CEST	1337	35448	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.303093910 CEST	35448	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.411190987 CEST	1337	35450	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.411412001 CEST	35450	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.412442923 CEST	35452	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.417140961 CEST	1337	35450	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.418275118 CEST	1337	35452	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.418353081 CEST	35452	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.418407917 CEST	35452	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.425839901 CEST	1337	35452	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.439888954 CEST	1337	35448	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.439990044 CEST	35448	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.440608978 CEST	35454	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.445457935 CEST	1337	35448	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.445987940 CEST	1337	35454	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:09.446057081 CEST	35454	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.446099997 CEST	35454	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:09.451486111 CEST	1337	35454	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.153253078 CEST	1337	35452	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.153601885 CEST	35452	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.195482969 CEST	1337	35454	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.195617914 CEST	35454	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.283262014 CEST	1337	35452	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.283467054 CEST	35452	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.284451008 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.288813114 CEST	1337	35452	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.290318966 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.290390015 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.290457964 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.295783043 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.332158089 CEST	1337	35454	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.332438946 CEST	35454	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.333143950 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.337919950 CEST	1337	35454	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.338557959 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:10.338607073 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.338635921 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:10.344418049 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312141895 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312350988 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.312361956 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312417030 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.312556982 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312589884 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312622070 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.312622070 CEST	35456	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.312638998 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312665939 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.312699080 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.312711000 CEST	35458	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.313539982 CEST	35460	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.313724995 CEST	35462	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.318603992 CEST	1337	35456	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.323542118 CEST	1337	35458	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.323713064 CEST	1337	35460	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.323741913 CEST	1337	35462	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.323808908 CEST	35460	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.323810101 CEST	35462	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.323810101 CEST	35460	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.323810101 CEST	35462	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:11.329436064 CEST	1337	35460	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:11.329463959 CEST	1337	35462	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.082276106 CEST	1337	35462	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.082387924 CEST	35462	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.085608006 CEST	1337	35460	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.085649014 CEST	35460	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.219480991 CEST	1337	35462	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.219687939 CEST	35462	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.220388889 CEST	35464	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.221716881 CEST	1337	35460	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.221786976 CEST	35460	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.222207069 CEST	35466	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.225013971 CEST	1337	35462	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.225692034 CEST	1337	35464	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.225750923 CEST	35464	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.225811958 CEST	35464	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.227078915 CEST	1337	35460	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.227514029 CEST	1337	35466	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.227565050 CEST	35466	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.227658987 CEST	35466	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.231103897 CEST	1337	35464	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.232861042 CEST	1337	35466	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.976619005 CEST	1337	35466	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.976782084 CEST	35466	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:12.977116108 CEST	1337	35464	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:12.977183104 CEST	35464	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.388608932 CEST	1337	35466	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.388825893 CEST	35466	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.389849901 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.394258976 CEST	1337	35466	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.395399094 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.395481110 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.395545959 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.401062012 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.823673010 CEST	1337	35464	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.823913097 CEST	35464	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.824990988 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.829670906 CEST	1337	35464	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.830734015 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:13.830811977 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.830878019 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:13.836426973 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:14.146275043 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:14.146446943 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313031912 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.313328028 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313504934 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.313631058 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313662052 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.313718081 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.313788891 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313788891 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313802958 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.313916922 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.313967943 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.314034939 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.314160109 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.314249039 CEST	35470	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.314863920 CEST	35472	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.315032959 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.315102100 CEST	35468	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.315291882 CEST	35474	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.319783926 CEST	1337	35468	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.324312925 CEST	1337	35470	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.324522018 CEST	1337	35472	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.324621916 CEST	35472	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.324632883 CEST	1337	35474	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.324695110 CEST	35474	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.324749947 CEST	35472	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.324749947 CEST	35474	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:15.330328941 CEST	1337	35472	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:15.330357075 CEST	1337	35474	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.071955919 CEST	1337	35472	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.072158098 CEST	35472	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.087518930 CEST	1337	35474	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.087783098 CEST	35474	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.211401939 CEST	1337	35472	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.211635113 CEST	35472	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.212639093 CEST	35476	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.217077017 CEST	1337	35472	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.218110085 CEST	1337	35476	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.218206882 CEST	35476	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.218293905 CEST	35476	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.223733902 CEST	1337	35476	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.226836920 CEST	1337	35474	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.226944923 CEST	35474	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.227626085 CEST	35478	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.232718945 CEST	1337	35474	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.233130932 CEST	1337	35478	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.233194113 CEST	35478	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.233249903 CEST	35478	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.238699913 CEST	1337	35478	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.970552921 CEST	1337	35476	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.970956087 CEST	35476	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:16.994595051 CEST	1337	35478	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:16.994827986 CEST	35478	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.100382090 CEST	1337	35476	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.100630045 CEST	35476	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.101341009 CEST	35480	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.106880903 CEST	1337	35476	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.106898069 CEST	1337	35480	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.107012987 CEST	35480	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.107060909 CEST	35480	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.112448931 CEST	1337	35480	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.134836912 CEST	1337	35478	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.134937048 CEST	35478	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.135544062 CEST	35482	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.140528917 CEST	1337	35478	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.141025066 CEST	1337	35482	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.141087055 CEST	35482	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.141165018 CEST	35482	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.146590948 CEST	1337	35482	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.860776901 CEST	1337	35480	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.860989094 CEST	35480	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:17.911339998 CEST	1337	35482	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:17.911437035 CEST	35482	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.000325918 CEST	1337	35480	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.000507116 CEST	35480	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.001502037 CEST	35484	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.006464005 CEST	1337	35480	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.007886887 CEST	1337	35484	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.007987022 CEST	35484	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.008034945 CEST	35484	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.014354944 CEST	1337	35484	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.048140049 CEST	1337	35482	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.048329115 CEST	35482	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.049293041 CEST	35486	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.054126024 CEST	1337	35482	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.056554079 CEST	1337	35486	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.056634903 CEST	35486	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.056719065 CEST	35486	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.062187910 CEST	1337	35486	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.764883041 CEST	1337	35484	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.765157938 CEST	35484	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.802638054 CEST	1337	35486	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.802933931 CEST	35486	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.901990891 CEST	1337	35484	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.902302027 CEST	35484	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.903119087 CEST	35488	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.908632994 CEST	1337	35484	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.909389973 CEST	1337	35488	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.909478903 CEST	35488	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.909543991 CEST	35488	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.915263891 CEST	1337	35488	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.939062119 CEST	1337	35486	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.939199924 CEST	35486	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.939898968 CEST	35490	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.944936991 CEST	1337	35486	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.945489883 CEST	1337	35490	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:18.945564985 CEST	35490	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.945595026 CEST	35490	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:18.951006889 CEST	1337	35490	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.669828892 CEST	1337	35488	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.670108080 CEST	35488	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.708661079 CEST	1337	35490	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.708792925 CEST	35490	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.806972027 CEST	1337	35488	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.807168961 CEST	35488	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.808331966 CEST	35492	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.812608957 CEST	1337	35488	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.813688993 CEST	1337	35492	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.813754082 CEST	35492	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.813827991 CEST	35492	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.819382906 CEST	1337	35492	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.845200062 CEST	1337	35490	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.845334053 CEST	35490	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.845983982 CEST	35494	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.850655079 CEST	1337	35490	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.851289988 CEST	1337	35494	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:19.851350069 CEST	35494	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.851399899 CEST	35494	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:19.856740952 CEST	1337	35494	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.563369036 CEST	1337	35492	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.563468933 CEST	35492	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.603528023 CEST	1337	35494	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.603677034 CEST	35494	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.699791908 CEST	1337	35492	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.700112104 CEST	35492	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.701318979 CEST	35496	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.705440044 CEST	1337	35492	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.706801891 CEST	1337	35496	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.706882954 CEST	35496	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.706944942 CEST	35496	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.712349892 CEST	1337	35496	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.740959883 CEST	1337	35494	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.741066933 CEST	35494	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.741791964 CEST	35498	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.746524096 CEST	1337	35494	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.747287035 CEST	1337	35498	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:20.747356892 CEST	35498	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.747446060 CEST	35498	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:20.752794027 CEST	1337	35498	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.465729952 CEST	1337	35496	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.466027975 CEST	35496	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.496290922 CEST	1337	35498	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.496378899 CEST	35498	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.597820997 CEST	1337	35496	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.597995996 CEST	35496	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.599057913 CEST	35500	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.603398085 CEST	1337	35496	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.604485035 CEST	1337	35500	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.604573011 CEST	35500	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.604650021 CEST	35500	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.609991074 CEST	1337	35500	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.635637999 CEST	1337	35498	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.635742903 CEST	35498	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.636447906 CEST	35502	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.641164064 CEST	1337	35498	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.641853094 CEST	1337	35502	154.213.187.206	192.168.2.23
Oct 26, 2024 19:32:21.641926050 CEST	35502	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.641984940 CEST	35502	1337	192.168.2.23	154.213.187.206
Oct 26, 2024 19:32:21.647669077 CEST	1337	35502	154.213.187.206	192.168.2.23

System Behavior

Analysis Process: na.elf PID: 6269, Parent PID: 6191

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Chronological Activities

Analysis Process: na.elf PID: 6270, Parent PID: 6269

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Analysis Process: na.elf PID: 6272, Parent PID: 6269

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Chronological Activities

Analysis Process: na.elf PID: 6273, Parent PID: 6272

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Chronological Activities

Analysis Process: na.elf PID: 6274, Parent PID: 6273

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Chronological Activities

Analysis Process: na.elf PID: 6275, Parent PID: 6274

General

Start time (UTC):	17:30:13
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Analysis Process: na.elf PID: 6297, Parent PID: 6272

General

Start time (UTC):	17:30:15
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Chronological Activities

Analysis Process: na.elf PID: 6298, Parent PID: 6297

General

Start time (UTC):	17:30:15
Start date (UTC):	26/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	100216 bytes
MD5 hash:	4b6a0d4dc0532915b0aa0a56455b7c50

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/resolve/stub-resolv.conf

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: na.elf PID: 6269, Parent PID: 6191

General

Chronological Activities

Analysis Process: na.elf PID: 6270, Parent PID: 6269

General

Analysis Process: na.elf PID: 6272, Parent PID: 6269

General

Chronological Activities

Analysis Process: na.elf PID: 6273, Parent PID: 6272

General

Chronological Activities

Analysis Process: na.elf PID: 6274, Parent PID: 6273

General

Chronological Activities

Analysis Process: na.elf PID: 6275, Parent PID: 6274

General

Analysis Process: na.elf PID: 6297, Parent PID: 6272

General

Chronological Activities

Analysis Process: na.elf PID: 6298, Parent PID: 6297

General

Linux Analysis Report
na.elf