Edit tour

Linux Analysis Report
x-8.6-.ISIS.elf

Overview

General Information

Sample name:	x-8.6-.ISIS.elf
Analysis ID:	1555102
MD5:	e79e76631968be43cf361b72568fc041
SHA1:	2b7bd128bd1feeda94bb49697832c6a97725dcd0
SHA256:	a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1555102
Start date and time:	2024-11-13 13:07:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x-8.6-.ISIS.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: x-8.6-.ISIS.elf

Runtime Messages

Command:	/tmp/x-8.6-.ISIS.elf
PID:	5421
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

x-8.6-.ISIS.elf (PID: 5421, Parent: 5343, MD5: e79e76631968be43cf361b72568fc041) Arguments: /tmp/x-8.6-.ISIS.elf

x-8.6-.ISIS.elf New Fork (PID: 5422, Parent: 5421)

x-8.6-.ISIS.elf New Fork (PID: 5423, Parent: 5422)

dash New Fork (PID: 5459, Parent: 3591)

rm (PID: 5459, Parent: 3591, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf

dash New Fork (PID: 5460, Parent: 3591)

rm (PID: 5460, Parent: 3591, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x-8.6-.ISIS.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_a10161ce	unknown	unknown	0x2199:$a: 45 B0 8B 45 BC 48 63 D0 48 89 D0 48 C1 E0 02 48 8D 14 10 48 8B
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x94c8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x9c7f:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x72da:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x748c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xbdee:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xdf2a:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x983f:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xbfaa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x9b0a:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
x-8.6-.ISIS.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc1a3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Click to see the 15 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a10161ce	unknown	unknown	0x2199:$a: 45 B0 8B 45 BC 48 63 D0 48 89 D0 48 C1 E0 02 48 8D 14 10 48 8B
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x94c8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x9c7f:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x72da:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x748c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xbdee:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xdf2a:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x983f:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xbfaa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x9b0a:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5422.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc1a3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a10161ce	unknown	unknown	0x2199:$a: 45 B0 8B 45 BC 48 63 D0 48 89 D0 48 C1 E0 02 48 8D 14 10 48 8B
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x94c8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x9c7f:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x72da:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x748c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xbdee:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xdf2a:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x983f:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xbfaa:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x9b0a:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5421.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc1a3:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Click to see the 33 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-13T13:07:59.248610+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60674	185.78.76.132	839	TCP
2024-11-13T13:08:00.121787+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60676	185.78.76.132	839	TCP
2024-11-13T13:08:00.986118+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60678	185.78.76.132	839	TCP
2024-11-13T13:08:01.869098+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60680	185.78.76.132	839	TCP
2024-11-13T13:08:03.327126+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60682	185.78.76.132	839	TCP
2024-11-13T13:08:05.223285+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60684	185.78.76.132	839	TCP
2024-11-13T13:08:06.084212+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60686	185.78.76.132	839	TCP
2024-11-13T13:08:06.939397+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60688	185.78.76.132	839	TCP
2024-11-13T13:08:07.805298+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60690	185.78.76.132	839	TCP
2024-11-13T13:08:08.690580+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60692	185.78.76.132	839	TCP
2024-11-13T13:08:09.554051+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60694	185.78.76.132	839	TCP
2024-11-13T13:08:10.420381+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60696	185.78.76.132	839	TCP
2024-11-13T13:08:11.298069+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60698	185.78.76.132	839	TCP
2024-11-13T13:08:12.160224+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60700	185.78.76.132	839	TCP
2024-11-13T13:08:13.030903+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60702	185.78.76.132	839	TCP
2024-11-13T13:08:13.886747+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60704	185.78.76.132	839	TCP
2024-11-13T13:08:14.741838+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60706	185.78.76.132	839	TCP
2024-11-13T13:08:15.727278+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60708	185.78.76.132	839	TCP
2024-11-13T13:08:16.581926+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60710	185.78.76.132	839	TCP
2024-11-13T13:08:17.443373+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60712	185.78.76.132	839	TCP
2024-11-13T13:08:18.311295+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60714	185.78.76.132	839	TCP
2024-11-13T13:08:19.197580+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60716	185.78.76.132	839	TCP
2024-11-13T13:08:20.066960+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60718	185.78.76.132	839	TCP
2024-11-13T13:08:20.928493+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60720	185.78.76.132	839	TCP
2024-11-13T13:08:21.795104+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60722	185.78.76.132	839	TCP
2024-11-13T13:08:22.656036+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60724	185.78.76.132	839	TCP
2024-11-13T13:08:23.544947+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60726	185.78.76.132	839	TCP
2024-11-13T13:08:24.413904+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60728	185.78.76.132	839	TCP
2024-11-13T13:08:25.297547+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60730	185.78.76.132	839	TCP
2024-11-13T13:08:26.177547+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60732	185.78.76.132	839	TCP
2024-11-13T13:08:27.044073+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60734	185.78.76.132	839	TCP
2024-11-13T13:08:27.926955+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60736	185.78.76.132	839	TCP
2024-11-13T13:08:28.797221+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60738	185.78.76.132	839	TCP
2024-11-13T13:08:29.675224+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60740	185.78.76.132	839	TCP
2024-11-13T13:08:30.541955+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60742	185.78.76.132	839	TCP
2024-11-13T13:08:31.394751+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60744	185.78.76.132	839	TCP
2024-11-13T13:08:32.266105+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60746	185.78.76.132	839	TCP
2024-11-13T13:08:33.155634+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60748	185.78.76.132	839	TCP
2024-11-13T13:08:34.018571+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60750	185.78.76.132	839	TCP
2024-11-13T13:08:34.889207+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60752	185.78.76.132	839	TCP
2024-11-13T13:08:35.760888+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60754	185.78.76.132	839	TCP
2024-11-13T13:08:36.631404+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60756	185.78.76.132	839	TCP
2024-11-13T13:08:37.496341+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60758	185.78.76.132	839	TCP
2024-11-13T13:08:38.379153+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60760	185.78.76.132	839	TCP
2024-11-13T13:08:39.240427+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60762	185.78.76.132	839	TCP
2024-11-13T13:08:40.108726+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60764	185.78.76.132	839	TCP
2024-11-13T13:08:40.979959+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60766	185.78.76.132	839	TCP
2024-11-13T13:08:41.849111+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60768	185.78.76.132	839	TCP
2024-11-13T13:08:42.709465+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60770	185.78.76.132	839	TCP
2024-11-13T13:08:43.577123+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60772	185.78.76.132	839	TCP
2024-11-13T13:08:44.440769+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60774	185.78.76.132	839	TCP
2024-11-13T13:08:45.317637+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60776	185.78.76.132	839	TCP
2024-11-13T13:08:46.181053+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60778	185.78.76.132	839	TCP
2024-11-13T13:08:47.041474+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60780	185.78.76.132	839	TCP
2024-11-13T13:08:47.909118+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60782	185.78.76.132	839	TCP
2024-11-13T13:08:48.791141+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60784	185.78.76.132	839	TCP
2024-11-13T13:08:49.652975+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60786	185.78.76.132	839	TCP
2024-11-13T13:08:50.523768+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60788	185.78.76.132	839	TCP
2024-11-13T13:08:51.380975+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60790	185.78.76.132	839	TCP
2024-11-13T13:08:52.254806+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60792	185.78.76.132	839	TCP
2024-11-13T13:08:53.123111+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60794	185.78.76.132	839	TCP
2024-11-13T13:08:53.985857+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60796	185.78.76.132	839	TCP
2024-11-13T13:08:54.852689+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60798	185.78.76.132	839	TCP
2024-11-13T13:08:55.709671+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60800	185.78.76.132	839	TCP
2024-11-13T13:08:56.570025+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60802	185.78.76.132	839	TCP
2024-11-13T13:08:57.437755+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60804	185.78.76.132	839	TCP
2024-11-13T13:08:58.309220+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60806	185.78.76.132	839	TCP
2024-11-13T13:08:59.185534+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60808	185.78.76.132	839	TCP
2024-11-13T13:09:00.056764+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60810	185.78.76.132	839	TCP
2024-11-13T13:09:00.944018+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60812	185.78.76.132	839	TCP
2024-11-13T13:09:01.823027+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60814	185.78.76.132	839	TCP
2024-11-13T13:09:02.684738+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60816	185.78.76.132	839	TCP
2024-11-13T13:09:03.554965+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60818	185.78.76.132	839	TCP
2024-11-13T13:09:04.418655+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60820	185.78.76.132	839	TCP
2024-11-13T13:09:05.291665+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60822	185.78.76.132	839	TCP
2024-11-13T13:09:06.180615+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60824	185.78.76.132	839	TCP
2024-11-13T13:09:07.043739+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60826	185.78.76.132	839	TCP
2024-11-13T13:09:07.907554+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60828	185.78.76.132	839	TCP
2024-11-13T13:09:08.798034+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60830	185.78.76.132	839	TCP
2024-11-13T13:09:09.660290+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60832	185.78.76.132	839	TCP
2024-11-13T13:09:10.530905+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60834	185.78.76.132	839	TCP
2024-11-13T13:09:11.419399+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60836	185.78.76.132	839	TCP
2024-11-13T13:09:12.308629+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60838	185.78.76.132	839	TCP
2024-11-13T13:09:13.176047+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60840	185.78.76.132	839	TCP
2024-11-13T13:09:14.047597+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60842	185.78.76.132	839	TCP
2024-11-13T13:09:14.912041+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60844	185.78.76.132	839	TCP
2024-11-13T13:09:15.779374+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60846	185.78.76.132	839	TCP
2024-11-13T13:09:16.644682+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60848	185.78.76.132	839	TCP
2024-11-13T13:09:17.505351+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60850	185.78.76.132	839	TCP
2024-11-13T13:09:18.368319+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60852	185.78.76.132	839	TCP
2024-11-13T13:09:19.238895+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60854	185.78.76.132	839	TCP
2024-11-13T13:09:20.102471+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60856	185.78.76.132	839	TCP
2024-11-13T13:09:20.964231+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60858	185.78.76.132	839	TCP
2024-11-13T13:09:21.837862+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60860	185.78.76.132	839	TCP
2024-11-13T13:09:22.703047+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60862	185.78.76.132	839	TCP
2024-11-13T13:09:23.570850+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60864	185.78.76.132	839	TCP
2024-11-13T13:09:24.451978+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60866	185.78.76.132	839	TCP
2024-11-13T13:09:25.317148+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60868	185.78.76.132	839	TCP
2024-11-13T13:09:26.178729+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60870	185.78.76.132	839	TCP
2024-11-13T13:09:27.043658+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60872	185.78.76.132	839	TCP
2024-11-13T13:09:27.898378+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60874	185.78.76.132	839	TCP
2024-11-13T13:09:28.762037+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60876	185.78.76.132	839	TCP
2024-11-13T13:09:29.616871+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60878	185.78.76.132	839	TCP
2024-11-13T13:09:30.501555+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60880	185.78.76.132	839	TCP
2024-11-13T13:09:31.378314+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60882	185.78.76.132	839	TCP
2024-11-13T13:09:32.245529+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60884	185.78.76.132	839	TCP
2024-11-13T13:09:33.114386+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60886	185.78.76.132	839	TCP
2024-11-13T13:09:33.978485+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60888	185.78.76.132	839	TCP
2024-11-13T13:09:34.848970+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60890	185.78.76.132	839	TCP
2024-11-13T13:09:35.713084+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60892	185.78.76.132	839	TCP
2024-11-13T13:09:36.947954+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60894	185.78.76.132	839	TCP
2024-11-13T13:09:37.820544+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60896	185.78.76.132	839	TCP
2024-11-13T13:09:38.697619+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60898	185.78.76.132	839	TCP
2024-11-13T13:09:39.559137+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60900	185.78.76.132	839	TCP
2024-11-13T13:09:40.421424+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60902	185.78.76.132	839	TCP
2024-11-13T13:09:41.298464+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60904	185.78.76.132	839	TCP
2024-11-13T13:09:42.157432+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60906	185.78.76.132	839	TCP
2024-11-13T13:09:43.027111+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60908	185.78.76.132	839	TCP
2024-11-13T13:09:43.913480+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60910	185.78.76.132	839	TCP
2024-11-13T13:09:44.776883+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60912	185.78.76.132	839	TCP
2024-11-13T13:09:45.818483+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60914	185.78.76.132	839	TCP
2024-11-13T13:09:46.706851+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60916	185.78.76.132	839	TCP
2024-11-13T13:09:47.589206+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60918	185.78.76.132	839	TCP
2024-11-13T13:09:48.461456+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60920	185.78.76.132	839	TCP
2024-11-13T13:09:49.322687+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60922	185.78.76.132	839	TCP
2024-11-13T13:09:50.206475+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60924	185.78.76.132	839	TCP
2024-11-13T13:09:51.076296+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60926	185.78.76.132	839	TCP
2024-11-13T13:09:51.950797+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60928	185.78.76.132	839	TCP
2024-11-13T13:09:52.837700+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60930	185.78.76.132	839	TCP
2024-11-13T13:09:53.707791+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60932	185.78.76.132	839	TCP
2024-11-13T13:09:54.571355+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60934	185.78.76.132	839	TCP
2024-11-13T13:09:55.439660+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60936	185.78.76.132	839	TCP
2024-11-13T13:09:56.306296+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60938	185.78.76.132	839	TCP
2024-11-13T13:09:57.194858+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60940	185.78.76.132	839	TCP
2024-11-13T13:09:58.054193+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60942	185.78.76.132	839	TCP
2024-11-13T13:09:58.915763+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60944	185.78.76.132	839	TCP
2024-11-13T13:09:59.789109+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60946	185.78.76.132	839	TCP
2024-11-13T13:10:00.663674+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60948	185.78.76.132	839	TCP
2024-11-13T13:10:01.542492+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60950	185.78.76.132	839	TCP
2024-11-13T13:10:02.411191+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60952	185.78.76.132	839	TCP
2024-11-13T13:10:03.285155+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60954	185.78.76.132	839	TCP
2024-11-13T13:10:04.157848+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60956	185.78.76.132	839	TCP
2024-11-13T13:10:05.017631+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60958	185.78.76.132	839	TCP
2024-11-13T13:10:05.881842+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60960	185.78.76.132	839	TCP
2024-11-13T13:10:06.755060+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60962	185.78.76.132	839	TCP
2024-11-13T13:10:07.617288+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60964	185.78.76.132	839	TCP
2024-11-13T13:10:09.207105+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60966	185.78.76.132	839	TCP
2024-11-13T13:10:10.095807+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60968	185.78.76.132	839	TCP
2024-11-13T13:10:10.962940+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60970	185.78.76.132	839	TCP
2024-11-13T13:10:11.843521+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60972	185.78.76.132	839	TCP
2024-11-13T13:10:12.735729+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60974	185.78.76.132	839	TCP
2024-11-13T13:10:13.744989+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60976	185.78.76.132	839	TCP
2024-11-13T13:10:14.633279+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60978	185.78.76.132	839	TCP
2024-11-13T13:10:15.502527+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60980	185.78.76.132	839	TCP
2024-11-13T13:10:16.394696+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60982	185.78.76.132	839	TCP
2024-11-13T13:10:17.264375+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60984	185.78.76.132	839	TCP
2024-11-13T13:10:18.804541+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60986	185.78.76.132	839	TCP
2024-11-13T13:10:19.674416+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60988	185.78.76.132	839	TCP
2024-11-13T13:10:20.556588+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60990	185.78.76.132	839	TCP
2024-11-13T13:10:21.425692+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60992	185.78.76.132	839	TCP
2024-11-13T13:10:22.286827+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60994	185.78.76.132	839	TCP
2024-11-13T13:10:23.174900+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60996	185.78.76.132	839	TCP
2024-11-13T13:10:24.048100+0100	2846527	1	A Network Trojan was detected	192.168.2.13	60998	185.78.76.132	839	TCP
2024-11-13T13:10:24.909267+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32768	185.78.76.132	839	TCP
2024-11-13T13:10:25.769245+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32770	185.78.76.132	839	TCP
2024-11-13T13:10:26.640685+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32772	185.78.76.132	839	TCP
2024-11-13T13:10:27.502954+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32774	185.78.76.132	839	TCP
2024-11-13T13:10:28.372361+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32776	185.78.76.132	839	TCP
2024-11-13T13:10:29.243743+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32778	185.78.76.132	839	TCP
2024-11-13T13:10:30.107502+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32780	185.78.76.132	839	TCP
2024-11-13T13:10:31.697889+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32782	185.78.76.132	839	TCP
2024-11-13T13:10:32.558187+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32784	185.78.76.132	839	TCP
2024-11-13T13:10:33.425072+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32786	185.78.76.132	839	TCP
2024-11-13T13:10:34.286406+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32788	185.78.76.132	839	TCP
2024-11-13T13:10:35.154396+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32790	185.78.76.132	839	TCP
2024-11-13T13:10:36.020362+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32792	185.78.76.132	839	TCP
2024-11-13T13:10:36.890045+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32794	185.78.76.132	839	TCP
2024-11-13T13:10:37.755637+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32796	185.78.76.132	839	TCP
2024-11-13T13:10:38.624076+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32798	185.78.76.132	839	TCP
2024-11-13T13:10:39.487451+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32800	185.78.76.132	839	TCP
2024-11-13T13:10:40.348855+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32802	185.78.76.132	839	TCP
2024-11-13T13:10:41.206355+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32804	185.78.76.132	839	TCP
2024-11-13T13:10:42.068488+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32806	185.78.76.132	839	TCP
2024-11-13T13:10:42.928505+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32808	185.78.76.132	839	TCP
2024-11-13T13:10:43.795641+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32810	185.78.76.132	839	TCP
2024-11-13T13:10:44.665317+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32812	185.78.76.132	839	TCP
2024-11-13T13:10:45.527619+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32814	185.78.76.132	839	TCP
2024-11-13T13:10:46.397199+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32816	185.78.76.132	839	TCP
2024-11-13T13:10:47.502758+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32818	185.78.76.132	839	TCP
2024-11-13T13:10:48.366286+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32820	185.78.76.132	839	TCP
2024-11-13T13:10:49.241280+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32822	185.78.76.132	839	TCP
2024-11-13T13:10:50.106357+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32824	185.78.76.132	839	TCP
2024-11-13T13:10:50.970254+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32826	185.78.76.132	839	TCP
2024-11-13T13:10:51.832717+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32828	185.78.76.132	839	TCP
2024-11-13T13:10:52.719210+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32830	185.78.76.132	839	TCP
2024-11-13T13:10:53.591695+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32832	185.78.76.132	839	TCP
2024-11-13T13:10:54.472616+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32834	185.78.76.132	839	TCP
2024-11-13T13:10:55.332192+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32836	185.78.76.132	839	TCP
2024-11-13T13:10:56.199417+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32838	185.78.76.132	839	TCP
2024-11-13T13:10:57.062431+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32840	185.78.76.132	839	TCP
2024-11-13T13:10:57.929040+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32842	185.78.76.132	839	TCP
2024-11-13T13:10:58.792498+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32844	185.78.76.132	839	TCP
2024-11-13T13:10:59.666040+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32846	185.78.76.132	839	TCP
2024-11-13T13:11:00.542348+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32848	185.78.76.132	839	TCP
2024-11-13T13:11:01.442051+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32850	185.78.76.132	839	TCP
2024-11-13T13:11:02.337738+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32852	185.78.76.132	839	TCP
2024-11-13T13:11:03.198494+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32854	185.78.76.132	839	TCP
2024-11-13T13:11:04.066868+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32856	185.78.76.132	839	TCP
2024-11-13T13:11:04.928494+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32858	185.78.76.132	839	TCP
2024-11-13T13:11:05.800847+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32860	185.78.76.132	839	TCP
2024-11-13T13:11:06.682958+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32862	185.78.76.132	839	TCP
2024-11-13T13:11:07.558049+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32864	185.78.76.132	839	TCP
2024-11-13T13:11:08.437235+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32866	185.78.76.132	839	TCP
2024-11-13T13:11:09.319883+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32868	185.78.76.132	839	TCP
2024-11-13T13:11:10.182374+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32870	185.78.76.132	839	TCP
2024-11-13T13:11:11.045592+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32872	185.78.76.132	839	TCP
2024-11-13T13:11:11.927877+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32874	185.78.76.132	839	TCP
2024-11-13T13:11:12.791432+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32876	185.78.76.132	839	TCP
2024-11-13T13:11:13.670641+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32878	185.78.76.132	839	TCP
2024-11-13T13:11:14.570807+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32880	185.78.76.132	839	TCP
2024-11-13T13:11:15.434477+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32882	185.78.76.132	839	TCP
2024-11-13T13:11:16.293684+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32884	185.78.76.132	839	TCP
2024-11-13T13:11:17.155238+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32886	185.78.76.132	839	TCP
2024-11-13T13:11:18.019344+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32888	185.78.76.132	839	TCP
2024-11-13T13:11:18.880242+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32890	185.78.76.132	839	TCP
2024-11-13T13:11:19.755278+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32892	185.78.76.132	839	TCP
2024-11-13T13:11:20.623150+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32894	185.78.76.132	839	TCP
2024-11-13T13:11:21.482628+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32896	185.78.76.132	839	TCP
2024-11-13T13:11:22.367044+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32898	185.78.76.132	839	TCP
2024-11-13T13:11:23.232133+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32900	185.78.76.132	839	TCP
2024-11-13T13:11:24.095264+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32902	185.78.76.132	839	TCP
2024-11-13T13:11:24.951240+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32904	185.78.76.132	839	TCP
2024-11-13T13:11:25.818398+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32906	185.78.76.132	839	TCP
2024-11-13T13:11:26.687706+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32908	185.78.76.132	839	TCP
2024-11-13T13:11:27.557940+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32910	185.78.76.132	839	TCP
2024-11-13T13:11:28.450741+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32912	185.78.76.132	839	TCP
2024-11-13T13:11:29.322893+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32914	185.78.76.132	839	TCP
2024-11-13T13:11:30.198310+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32916	185.78.76.132	839	TCP
2024-11-13T13:11:31.068914+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32918	185.78.76.132	839	TCP
2024-11-13T13:11:31.958318+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32920	185.78.76.132	839	TCP
2024-11-13T13:11:32.828934+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32922	185.78.76.132	839	TCP
2024-11-13T13:11:33.712853+0100	2846527	1	A Network Trojan was detected	192.168.2.13	32924	185.78.76.132	839	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x-8.6-.ISIS.elf

Avira: detected

Found malware configuration

Source: x-8.6-.ISIS.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.78.76.132:839"}

Machine Learning detection for sample

Source: x-8.6-.ISIS.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x-8.6-.ISIS.elf (PID: 5421)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60688 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60706 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60716 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60686 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60694 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60682 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60736 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60740 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60738 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60684 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60710 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60750 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60720 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60732 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60746 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60680 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60726 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60700 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60712 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60702 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60814 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60742 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60818 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60810 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60704 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60826 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60758 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60714 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60764 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60852 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60776 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60786 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60690 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60842 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60674 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60784 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60838 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60734 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60870 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60708 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60780 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60782 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60756 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60882 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60910 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60834 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60908 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60772 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60696 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60914 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60820 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60918 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60926 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60920 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60930 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60754 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60812 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60932 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60778 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60938 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60952 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60862 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60830 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60768 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60850 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60948 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60848 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60792 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60824 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60728 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60770 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60722 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60888 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60760 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60934 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60906 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60896 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60912 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60718 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60832 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60940 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60822 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60966 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60928 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32778 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60846 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60972 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60766 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60698 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32798 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60996 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60808 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32782 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60866 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60676 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60678 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60936 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60864 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60802 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60878 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60876 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60900 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60692 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60978 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60962 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60890 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60986 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60924 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32790 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60828 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60980 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60858 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32784 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60958 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60884 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60982 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60836 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60730 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60956 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60724 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32770 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60880 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60988 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60856 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60748 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60744 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32772 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60944 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60774 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60954 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60946 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60964 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32816 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60800 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60984 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32808 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32828 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32822 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60942 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32820 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32800 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32792 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32776 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60844 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60788 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32838 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32832 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32836 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32812 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32814 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60794 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32774 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60860 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60968 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32804 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32818 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32858 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32830 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60752 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60804 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60894 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32806 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60874 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60892 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32870 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32826 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32834 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32876 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32850 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60854 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32852 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32880 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60762 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60902 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32864 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32884 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32846 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60796 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32788 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32786 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32892 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32854 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60970 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60816 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32890 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32856 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32900 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32894 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32908 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32780 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60840 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60916 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32916 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32802 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32914 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60990 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60960 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32906 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32912 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32824 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60992 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32924 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32920 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32898 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32796 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32866 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60898 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32882 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32868 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32768 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32888 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32902 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32840 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32904 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32886 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32910 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32842 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60994 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32860 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60998 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32872 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32794 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32896 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32844 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32878 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32922 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60790 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60806 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60872 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60886 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32810 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32848 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32862 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60904 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60922 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60950 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60974 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60798 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60976 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32874 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:32918 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:60868 -> 185.78.76.132:839

Source: global traffic

TCP traffic: 192.168.2.13:60674 -> 185.78.76.132:839

Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 50528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a10161ce Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a10161ce Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a10161ce Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a10161ce os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 77e89011a67a539954358118d41ad3dabde0e69bac2bbb2b2da18eaad427d935, id = a10161ce-62e0-4f60-9de7-bd8caf8618be, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: x-8.6-.ISIS.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a10161ce os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 77e89011a67a539954358118d41ad3dabde0e69bac2bbb2b2da18eaad427d935, id = a10161ce-62e0-4f60-9de7-bd8caf8618be, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5422.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a10161ce os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 77e89011a67a539954358118d41ad3dabde0e69bac2bbb2b2da18eaad427d935, id = a10161ce-62e0-4f60-9de7-bd8caf8618be, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5421.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/memcpy.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/mempcpy.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/memset.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strchr.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcmp.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcpy.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strlen.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strpbrk.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/string/x86_64/strspn.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crt1.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crti.S
Source: x-8.6-.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crtn.S

Source: /usr/bin/dash (PID: 5459)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf			Jump to behavior
Source: /usr/bin/dash (PID: 5460)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf			Jump to behavior

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.ISIS.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.ISIS.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.78.76.132:839"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
x-8.6-.ISIS.elf	100%	Avira	EXP/ELF.Mirai.Z
x-8.6-.ISIS.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.78.76.132:839	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.78.76.132	unknown	Poland	262287	MaxihostLTDABR	true
185.125.190.26	unknown	United Kingdom	41231	CANONICAL-ASGB	false
34.243.160.129	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.78.76.132	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_sh4.elf	Get hash	malicious	Mirai	Browse
	main_x86_64.elf	Get hash	malicious	Mirai	Browse
185.125.190.26	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ub8ehJSePAfc9FYqZIT6.mips.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm7.elf	Get hash	malicious	Mirai	Browse
	c0r0n4x.arm5.elf	Get hash	malicious	Unknown	Browse
	gmips.elf	Get hash	malicious	Unknown	Browse
	c0r0n4x.ppc.elf	Get hash	malicious	Unknown	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_mips.elf	Get hash	malicious	Mirai	Browse
	main_ppc.elf	Get hash	malicious	Mirai	Browse
34.243.160.129	main_mpsl.elf	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Linux.GenericKD.28459.8905.27219.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	nPRmTlXhOT.elf	Get hash	malicious	Unknown	Browse
	main_arm.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	FBI.i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	Agszr4Ip6M.elf	Get hash	malicious	Rekoobe	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	garm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	c0r0n4x.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	garm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	nK1cgEhvAP.exe	Get hash	malicious	Unknown	Browse	52.208.21.112
	https://airtable.com/appneJ7gooVVxmNWR/shrmIP3zkga52FQr0	Get hash	malicious	Unknown	Browse	108.138.7.118
	https://cbsaao27.s3.us-east-1.amazonaws.com/res.html#cGF0cmljay5hbWZ0QG1zaWctZXVyb3BlLmNvbQ==	Get hash	malicious	BlackHacker JS Obfuscator, HTMLPhisher	Browse	52.217.83.216
	Xeno Executor Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	18.244.18.122
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	54.217.10.153
	Xeno Executor Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	18.244.18.27
	http://track.reviewmgr.com/ls/click?upn=u001.W5y-2Fhe84rCuLxXDO470nfuKD2Iz98QeQpE-2BkxRR0H-2BqB5cDKklujIJ5FLru7QrAASOSa17vR-2FSCLVAx4lWyy5Q-3D-3DNnGv_Yp4ydSxZWNatis3HtI6bBrJjg57JYwT6kbyY2f89Z-2FBhxNJZyCBl9w6yXNV0YfiKUAGjaILaAN0mF43Ydvv3aAXjCPBMrYvHXhqj-2F90M8IWSluK-2FDr0h4-2FIbAXpExZIWOjtRSKBCrpvm-2BHKZd6Q2itOPvvv8Wh8uHJq1rbQgzA92MMGG0eeFCZzQMnosAWydLTI7R4yQPl90fJpGVjewvRcCF77tY5-2B3PAHwq6SU-2Fc2kSK8E1mMumIEdp0dsw2BfptVK6-2FXO4Hh-2FAV8-2FJ5YFUs6qp3oyRx3LiWrBnDVYrVE-3D	Get hash	malicious	Unknown	Browse	13.224.189.91
	rGO880-PDF.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	http://t.nypost.com/1/e/r?aqet=clk&r=2&ca=26510028&v0=aftua%40gmail.com&ru=//www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%SERIAL%25wDnNeW8yycT&sa=t&esrc=nNeW8F%SERIAL%25A0xys8Em2FL&source=&cd=tS6T8%SERIAL%25Tiw9XH&cad=XpPkDfJX%SERIAL%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%62%79%64%61%2E%6E%67%2F%63%69%67%2E%62%69%6E%2F%67%67%6C%6E%46%78%50%51%30%47%76%38%64%43%45%35%45%43%61%37%66%37%78%63%58%71%32%79%74%4D%57%65%54%6E%31%37%53%74%68%66%4C%56%74%52%44%70%4E%58%36%63%6B%42%66%50%7A%42%38%6B%51%52%36%38%64%67%53%64%31%4C%6C%73%33%71%37%76%6E%79%6E%48%6D%75%41%73%31%2F%23Y2hyaXN0b3BoZXIuZG9sYW5AdmlyZ2lubW9uZXkuY29t	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.35.58.61
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
CANONICAL-ASGB	dlr.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	mips64.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x86_64.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	armv4l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
MaxihostLTDABR	a#U00e7#U00e3o85-97.01865146941-6-9.7.exe	Get hash	malicious	Unknown	Browse	177.54.147.229
	a#U00e7#U00e3o85-97.01865146941-6-9.7.exe	Get hash	malicious	Unknown	Browse	177.54.147.229
	main_m68k.elf	Get hash	malicious	Mirai	Browse	185.78.76.132
	main_sh4.elf	Get hash	malicious	Mirai	Browse	185.78.76.132
	main_x86_64.elf	Get hash	malicious	Mirai	Browse	185.78.76.132
	8isNwyy2qL.exe	Get hash	malicious	Unknown	Browse	177.54.147.242
	x86.elf	Get hash	malicious	Mirai	Browse	168.81.206.220
	LZ_109186961250811H#U00ae.exe	Get hash	malicious	Unknown	Browse	177.54.145.108
	eqqjbbjMlt.elf	Get hash	malicious	Unknown	Browse	177.54.145.107
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	45.92.0.232

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.978720481641848
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x-8.6-.ISIS.elf
File size:	99'332 bytes
MD5:	e79e76631968be43cf361b72568fc041
SHA1:	2b7bd128bd1feeda94bb49697832c6a97725dcd0
SHA256:	a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c
SHA512:	26da0800dede2b10a49fb099c7dfa2bdcbe6731a6861ee6610506832e9500a56ca5b4e32cd64a9319251754d26ad7908552ebb87f004d27eeca6b2b0c6fb1aab
SSDEEP:	3072:2K5ejA4jB4h89HOPQzM9FqVy19W9vmrYuOHy+ZNzX:sHjBzuPQQvk9vmrYuOHy+ZNzX
TLSH:	13A33A33A753D6BAC09322F417DB9675A823B47C0B32312B33D86DE56B05DE91E5A701
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................Q.......Q.....8........p..............Q.td....................................................H...._........H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	73704
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0xe7c8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x40e8c8	0xe8c8	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x40e8e0	0xe8e0	0x26e0	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x410fc0	0x10fc0	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x511000	0x11000	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x511010	0x11010	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x511020	0x11020	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x511040	0x11040	0x4f8	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x511540	0x11538	0x6b50	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x11538	0xa44	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x11f7c	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x123a8	0x3fc0	0x18	0x0		14	243	8
.strtab	STRTAB	0x0	0x16368	0x209c	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x10fc4	0x10fc4	6.2976	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0x11000	0x511000	0x511000	0x538	0x7090	2.1081	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40e8c8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40e8e0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x410fc0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x511000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x511010	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x511020	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x511040	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x511540	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
Q	.symtab	0x5115c0	16384	OBJECT	<unknown>	DEFAULT	10
SendHTTPHex	.symtab	0x402c51	455	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x401fcb	264	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x40165f	858	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x511008	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x511000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x5110c8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40f380	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x511528	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x410cc0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x5110d8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x40f680	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x511018	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x511010	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x410fc0	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x410fc0	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x5110c8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x40f380	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x511528	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x410cc0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x5110d8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x40f680	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x5110d0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x511530	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x5110e0	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x407698	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x408df0	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x40b2e4	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x4072d4	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_lseek	.symtab	0x40e494	45	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x407514	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x40ad04	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x40ad83	67	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x408e00	194	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x407338	42	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x40a304	276	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x40a7e8	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x40ce18	43	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x407390	38	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x40b0e0	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x4073b8	41	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x4093b8	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x51785c	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x40a974	92	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x40ce70	259	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x4072d4	100	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x4072d4	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x40d47c	329	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40d334	109	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40d5c8	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x40cf74	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x4073e4	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x4086d4	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40cf80	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40cf88	218	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40870c	134	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x40740c	35	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x40b10c	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x40b134	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x40b15c	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x408ffc	53	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x409034	897	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40b184	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x407430	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x407458	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x4093e4	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x40b198	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x517860	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x408fe0	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x40c390	137	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x408fd5	10	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x408f88	77	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40dc74	527	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40d96f	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x40a72f	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x407480	104	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x408ee0	25	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x4074e8	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40e494	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40e48c	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x40bdec	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x4087a0	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40bedc	734	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40bd90	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40c1bc	237	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x408810	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x40b0b0	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x40b1c0	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x40b1e8	38	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x407514	106	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x40ce44	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x40cdec	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x40a424	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x40a62c	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40d778	190	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x40758c	39	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x409444	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x409450	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x40b210	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x4075b4	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x409480	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x40948c	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x4075e0	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x4094bc	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x40a584	168	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40afb9	247	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x409524	168	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40b25c	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x40a9d0	415	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x4094f4	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x4076a0	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x40a686	169	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40e5c4	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x4088f0	417	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x40d63c	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x40d63c	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x408aa0	213	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40d8b0	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x408b80	225	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x40d838	119	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x40c2ac	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x408c64	206	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x40d660	140	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x40d6f0	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x408d34	187	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x408ed4	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x40c330	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x40a7fc	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x40a7fc	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x40ab70	351	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x408efc	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x407608	39	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40e4c4	30	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x407678	30	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x407738	199	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x40b2b4	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x407630	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x40b2ec	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x40b340	140	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x40b330	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x407638	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x511020	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x511020	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x517848	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x5114c0	40	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x409524	168	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x511538	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40ad4e	53	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x5110d0	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x511530	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x5110e0	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x5178b0	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x511050	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x40e030	242	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x40e694	246	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40df28	161	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40c41c	1862	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40e890	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x511040	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40e5f4	160	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40de84	163	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40dfcc	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x517838	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x407698	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x517828	8	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40cdbc	48	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40b184	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x408df0	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40b2e4	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x40e78c	59	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x40e01c	19	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x4073b8	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x4093b8	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x40757e	14	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x4072d4	100	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x4072d4	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x4073e4	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x407430	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x40e494	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40e48c	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x40b1e8	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x407514	106	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x40ce44	41	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x40758c	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x409444	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x409450	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x4075b4	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x409480	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x40948c	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40afb9	247	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x517830	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x407630	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x407638	42	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x409f89	410	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x409628	96	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x511340	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x517960	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x409ef0	153	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x518060	24	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x518078	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x40e124	42	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x40cb64	597	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x517840	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x511000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40ad4a	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x40ad4a	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x40ad4a	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x40ad4a	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x40ad4a	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x40ad4d	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x40cdec	18	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x40e14e	830	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x511500	40	OBJECT	<unknown>	DEFAULT	9
__restore_rt	.symtab	0x40afb0	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x517850	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x518040	32	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x51807c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x4095ec	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x409608	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x4095cc	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x511118	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40e7c8	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40b3cc	147	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40d064	133	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x40b460	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x40786b	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4280	.symtab	0x40f980	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40e804	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40d314	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40e82c	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x40b564	148	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x407904	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x511120	8	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40ad04	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x40ad83	67	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40adc6	489	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x5114e8	8	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x408e00	194	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x40792c	68	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40ce00	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x518080	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x518088	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x511538	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x518090	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x51785c	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x407338	42	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40e8c8	5	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x5155e0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x407970	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x40b73c	1608	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x517860	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	5	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x40b5f8	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x408024	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x4082d6	1022	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x408098	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x4080dc	457	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x4082a8	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x40ad4d	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x40ad4d	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x5178e0	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40d0ec	551	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x407800	107	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x511128	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x511140	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x40d3a4	216	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x5155c4	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x511180	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x5155c0	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x5111c0	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x40787a	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x5111a8	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x40a808	362	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40b650	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x40fa80	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40b680	187	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x4079e8	1595	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40a304	276	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x407364	41	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40a7e8	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x408ec4	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x517820	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.3160	.symtab	0x517858	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x40ce18	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x409524	168	FUNC	<unknown>	DEFAULT	2
buf.2989	.symtab	0x5175f0	16	OBJECT	<unknown>	DEFAULT	10
buf.5285	.symtab	0x517600	500	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x5110bc	4	OBJECT	<unknown>	DEFAULT	9
chdir	.symtab	0x407390	38	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x40b0e0	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x4073b8	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x511060	8	OBJECT	<unknown>	DEFAULT	9
completed.2761	.symtab	0x511540	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x4093b8	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x40118f	572	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x40757e	14	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x401494	115	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x5110b8	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x511050	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x517838	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x51785c	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x40a974	92	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x410b00	208	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x40ce70	259	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x4072d4	100	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x4072d4	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x40031f	128	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x40d47c	329	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40d334	109	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40d5c8	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x410ae0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x40cf74	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x4073e4	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x4086d4	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x40a123	452	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40cf80	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40cf80	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40cf88	218	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x4019b9	1554	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40870c	134	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x40411a	11	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x400ea7	65	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x40039f	484	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x404125	142	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x4002f0	47	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x40e4e4	222	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x40740c	35	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40b10c	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40b134	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40b15c	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x408ffc	53	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x409034	897	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40b184	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x407430	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x407458	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x407458	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x4093e4	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x409410	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40b198	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x5115a4	4	OBJECT	<unknown>	DEFAULT	10
h.5284	.symtab	0x517800	32	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x517860	4	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0x408f74	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x408f6c	8	FUNC	<unknown>	DEFAULT	2
i.4528	.symtab	0x5110c0	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x4088f0	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x408fe0	28	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x40c390	137	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x408fd5	10	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x408f88	77	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40dc74	527	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40db5c	280	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40d96f	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40d8e8	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x406c09	298	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x4001c0	125	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x40a4ce	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x40a72f	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x407480	104	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x408ee0	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x407664	18	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x4074e8	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/mempcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strpbrk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strspn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x4013cb	201	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x40e494	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40e48c	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x5115b0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x406d33	1439	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x5115a0	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x4015c6	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x400ee8	109	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x40264e	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x409688	2149	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40a2e7	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x40bdec	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x4087a0	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40bedc	734	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40bd90	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x40c1bc	237	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x408810	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x40b0b0	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x40b1c0	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x511380	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x5113c0	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x517880	40	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x40b1e8	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1440	.symtab	0x5175e0	8	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x408f81	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x408f79	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x5115a8	8	OBJECT	<unknown>	DEFAULT	10
object.2814	.symtab	0x511560	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x407514	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x5178b8	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0x4033fd	3357	FUNC	<unknown>	DEFAULT	2
p.2759	.symtab	0x511048	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x5178c0	8	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x40ce44	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4494	.symtab	0x40f9b5	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4008ba	1085	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x400650	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x40077a	320	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x40069b	223	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x4041b3	10838	FUNC	<unknown>	DEFAULT	2
qual_chars.4498	.symtab	0x40f9d0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x40cdec	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40a418	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40023d	179	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x40a424	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x4105e0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x40a62c	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x511440	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40d778	190	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40758c	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x409444	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x400f55	570	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x409450	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sbrk	.symtab	0x40b210	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4075b4	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x409480	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHOLD	.symtab	0x4020d3	1187	FUNC	<unknown>	DEFAULT	2
sendHTTPtwo	.symtab	0x402e18	455	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0x402fdf	1054	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x40948c	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x4075e0	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x4094bc	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40a46c	98	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x40a584	168	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40afb9	247	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x409524	168	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40b25c	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40a9d0	415	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x4094f4	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x402576	216	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x400cf7	432	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4497	.symtab	0x40f9f0	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4493	.symtab	0x40f9c1	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4494	.symtab	0x40fa20	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4493	.symtab	0x40fa35	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4496	.symtab	0x40fa00	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4495	.symtab	0x40fa10	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x4076a0	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40a53c	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x40a53c	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x40a686	169	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x5114f0	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x5178a8	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x511110	8	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x511100	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x511108	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40e5c4	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x4088f0	417	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x40d63c	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x40d63c	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x408aa0	213	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x40d8b0	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x408e00	194	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x408b80	225	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x40d838	119	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40c2ac	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x408c64	206	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40d660	140	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x40d6f0	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x408d34	187	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x40a7fc	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x408ed4	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40c330	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40a7fc	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x40a7fc	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x40ab70	351	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x408efc	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x401507	191	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x407608	39	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x40e4c4	30	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x407678	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400583	205	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x40fa40	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x40fa58	12	OBJECT	<unknown>	DEFAULT	4
unknown.2050	.symtab	0x40fa64	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x511400	48	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x511080	56	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x40acd0	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x4026f7	1370	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x407738	199	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40b2b4	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x407630	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40b2ec	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40b340	140	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40b330	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x407638	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3747	.symtab	0x410c80	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-13T13:07:59.248610+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60674	185.78.76.132	839	TCP
2024-11-13T13:08:00.121787+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60676	185.78.76.132	839	TCP
2024-11-13T13:08:00.986118+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60678	185.78.76.132	839	TCP
2024-11-13T13:08:01.869098+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60680	185.78.76.132	839	TCP
2024-11-13T13:08:03.327126+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60682	185.78.76.132	839	TCP
2024-11-13T13:08:05.223285+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60684	185.78.76.132	839	TCP
2024-11-13T13:08:06.084212+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60686	185.78.76.132	839	TCP
2024-11-13T13:08:06.939397+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60688	185.78.76.132	839	TCP
2024-11-13T13:08:07.805298+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60690	185.78.76.132	839	TCP
2024-11-13T13:08:08.690580+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60692	185.78.76.132	839	TCP
2024-11-13T13:08:09.554051+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60694	185.78.76.132	839	TCP
2024-11-13T13:08:10.420381+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60696	185.78.76.132	839	TCP
2024-11-13T13:08:11.298069+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60698	185.78.76.132	839	TCP
2024-11-13T13:08:12.160224+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60700	185.78.76.132	839	TCP
2024-11-13T13:08:13.030903+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60702	185.78.76.132	839	TCP
2024-11-13T13:08:13.886747+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60704	185.78.76.132	839	TCP
2024-11-13T13:08:14.741838+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60706	185.78.76.132	839	TCP
2024-11-13T13:08:15.727278+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60708	185.78.76.132	839	TCP
2024-11-13T13:08:16.581926+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60710	185.78.76.132	839	TCP
2024-11-13T13:08:17.443373+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60712	185.78.76.132	839	TCP
2024-11-13T13:08:18.311295+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60714	185.78.76.132	839	TCP
2024-11-13T13:08:19.197580+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60716	185.78.76.132	839	TCP
2024-11-13T13:08:20.066960+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60718	185.78.76.132	839	TCP
2024-11-13T13:08:20.928493+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60720	185.78.76.132	839	TCP
2024-11-13T13:08:21.795104+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60722	185.78.76.132	839	TCP
2024-11-13T13:08:22.656036+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60724	185.78.76.132	839	TCP
2024-11-13T13:08:23.544947+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60726	185.78.76.132	839	TCP
2024-11-13T13:08:24.413904+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60728	185.78.76.132	839	TCP
2024-11-13T13:08:25.297547+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60730	185.78.76.132	839	TCP
2024-11-13T13:08:26.177547+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60732	185.78.76.132	839	TCP
2024-11-13T13:08:27.044073+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60734	185.78.76.132	839	TCP
2024-11-13T13:08:27.926955+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60736	185.78.76.132	839	TCP
2024-11-13T13:08:28.797221+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60738	185.78.76.132	839	TCP
2024-11-13T13:08:29.675224+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60740	185.78.76.132	839	TCP
2024-11-13T13:08:30.541955+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60742	185.78.76.132	839	TCP
2024-11-13T13:08:31.394751+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60744	185.78.76.132	839	TCP
2024-11-13T13:08:32.266105+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60746	185.78.76.132	839	TCP
2024-11-13T13:08:33.155634+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60748	185.78.76.132	839	TCP
2024-11-13T13:08:34.018571+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60750	185.78.76.132	839	TCP
2024-11-13T13:08:34.889207+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60752	185.78.76.132	839	TCP
2024-11-13T13:08:35.760888+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60754	185.78.76.132	839	TCP
2024-11-13T13:08:36.631404+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60756	185.78.76.132	839	TCP
2024-11-13T13:08:37.496341+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60758	185.78.76.132	839	TCP
2024-11-13T13:08:38.379153+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60760	185.78.76.132	839	TCP
2024-11-13T13:08:39.240427+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60762	185.78.76.132	839	TCP
2024-11-13T13:08:40.108726+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60764	185.78.76.132	839	TCP
2024-11-13T13:08:40.979959+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60766	185.78.76.132	839	TCP
2024-11-13T13:08:41.849111+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60768	185.78.76.132	839	TCP
2024-11-13T13:08:42.709465+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60770	185.78.76.132	839	TCP
2024-11-13T13:08:43.577123+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60772	185.78.76.132	839	TCP
2024-11-13T13:08:44.440769+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60774	185.78.76.132	839	TCP
2024-11-13T13:08:45.317637+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60776	185.78.76.132	839	TCP
2024-11-13T13:08:46.181053+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60778	185.78.76.132	839	TCP
2024-11-13T13:08:47.041474+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60780	185.78.76.132	839	TCP
2024-11-13T13:08:47.909118+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60782	185.78.76.132	839	TCP
2024-11-13T13:08:48.791141+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60784	185.78.76.132	839	TCP
2024-11-13T13:08:49.652975+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60786	185.78.76.132	839	TCP
2024-11-13T13:08:50.523768+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60788	185.78.76.132	839	TCP
2024-11-13T13:08:51.380975+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60790	185.78.76.132	839	TCP
2024-11-13T13:08:52.254806+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60792	185.78.76.132	839	TCP
2024-11-13T13:08:53.123111+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60794	185.78.76.132	839	TCP
2024-11-13T13:08:53.985857+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60796	185.78.76.132	839	TCP
2024-11-13T13:08:54.852689+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60798	185.78.76.132	839	TCP
2024-11-13T13:08:55.709671+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60800	185.78.76.132	839	TCP
2024-11-13T13:08:56.570025+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60802	185.78.76.132	839	TCP
2024-11-13T13:08:57.437755+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60804	185.78.76.132	839	TCP
2024-11-13T13:08:58.309220+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60806	185.78.76.132	839	TCP
2024-11-13T13:08:59.185534+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60808	185.78.76.132	839	TCP
2024-11-13T13:09:00.056764+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60810	185.78.76.132	839	TCP
2024-11-13T13:09:00.944018+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60812	185.78.76.132	839	TCP
2024-11-13T13:09:01.823027+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60814	185.78.76.132	839	TCP
2024-11-13T13:09:02.684738+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60816	185.78.76.132	839	TCP
2024-11-13T13:09:03.554965+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60818	185.78.76.132	839	TCP
2024-11-13T13:09:04.418655+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60820	185.78.76.132	839	TCP
2024-11-13T13:09:05.291665+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60822	185.78.76.132	839	TCP
2024-11-13T13:09:06.180615+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60824	185.78.76.132	839	TCP
2024-11-13T13:09:07.043739+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60826	185.78.76.132	839	TCP
2024-11-13T13:09:07.907554+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60828	185.78.76.132	839	TCP
2024-11-13T13:09:08.798034+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60830	185.78.76.132	839	TCP
2024-11-13T13:09:09.660290+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60832	185.78.76.132	839	TCP
2024-11-13T13:09:10.530905+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60834	185.78.76.132	839	TCP
2024-11-13T13:09:11.419399+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60836	185.78.76.132	839	TCP
2024-11-13T13:09:12.308629+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60838	185.78.76.132	839	TCP
2024-11-13T13:09:13.176047+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60840	185.78.76.132	839	TCP
2024-11-13T13:09:14.047597+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60842	185.78.76.132	839	TCP
2024-11-13T13:09:14.912041+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60844	185.78.76.132	839	TCP
2024-11-13T13:09:15.779374+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60846	185.78.76.132	839	TCP
2024-11-13T13:09:16.644682+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60848	185.78.76.132	839	TCP
2024-11-13T13:09:17.505351+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60850	185.78.76.132	839	TCP
2024-11-13T13:09:18.368319+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60852	185.78.76.132	839	TCP
2024-11-13T13:09:19.238895+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60854	185.78.76.132	839	TCP
2024-11-13T13:09:20.102471+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60856	185.78.76.132	839	TCP
2024-11-13T13:09:20.964231+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60858	185.78.76.132	839	TCP
2024-11-13T13:09:21.837862+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60860	185.78.76.132	839	TCP
2024-11-13T13:09:22.703047+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60862	185.78.76.132	839	TCP
2024-11-13T13:09:23.570850+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60864	185.78.76.132	839	TCP
2024-11-13T13:09:24.451978+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60866	185.78.76.132	839	TCP
2024-11-13T13:09:25.317148+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60868	185.78.76.132	839	TCP
2024-11-13T13:09:26.178729+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60870	185.78.76.132	839	TCP
2024-11-13T13:09:27.043658+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60872	185.78.76.132	839	TCP
2024-11-13T13:09:27.898378+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60874	185.78.76.132	839	TCP
2024-11-13T13:09:28.762037+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60876	185.78.76.132	839	TCP
2024-11-13T13:09:29.616871+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60878	185.78.76.132	839	TCP
2024-11-13T13:09:30.501555+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60880	185.78.76.132	839	TCP
2024-11-13T13:09:31.378314+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60882	185.78.76.132	839	TCP
2024-11-13T13:09:32.245529+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60884	185.78.76.132	839	TCP
2024-11-13T13:09:33.114386+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60886	185.78.76.132	839	TCP
2024-11-13T13:09:33.978485+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60888	185.78.76.132	839	TCP
2024-11-13T13:09:34.848970+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60890	185.78.76.132	839	TCP
2024-11-13T13:09:35.713084+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60892	185.78.76.132	839	TCP
2024-11-13T13:09:36.947954+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60894	185.78.76.132	839	TCP
2024-11-13T13:09:37.820544+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60896	185.78.76.132	839	TCP
2024-11-13T13:09:38.697619+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60898	185.78.76.132	839	TCP
2024-11-13T13:09:39.559137+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60900	185.78.76.132	839	TCP
2024-11-13T13:09:40.421424+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60902	185.78.76.132	839	TCP
2024-11-13T13:09:41.298464+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60904	185.78.76.132	839	TCP
2024-11-13T13:09:42.157432+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60906	185.78.76.132	839	TCP
2024-11-13T13:09:43.027111+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60908	185.78.76.132	839	TCP
2024-11-13T13:09:43.913480+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60910	185.78.76.132	839	TCP
2024-11-13T13:09:44.776883+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60912	185.78.76.132	839	TCP
2024-11-13T13:09:45.818483+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60914	185.78.76.132	839	TCP
2024-11-13T13:09:46.706851+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60916	185.78.76.132	839	TCP
2024-11-13T13:09:47.589206+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60918	185.78.76.132	839	TCP
2024-11-13T13:09:48.461456+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60920	185.78.76.132	839	TCP
2024-11-13T13:09:49.322687+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60922	185.78.76.132	839	TCP
2024-11-13T13:09:50.206475+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60924	185.78.76.132	839	TCP
2024-11-13T13:09:51.076296+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60926	185.78.76.132	839	TCP
2024-11-13T13:09:51.950797+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60928	185.78.76.132	839	TCP
2024-11-13T13:09:52.837700+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60930	185.78.76.132	839	TCP
2024-11-13T13:09:53.707791+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60932	185.78.76.132	839	TCP
2024-11-13T13:09:54.571355+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60934	185.78.76.132	839	TCP
2024-11-13T13:09:55.439660+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60936	185.78.76.132	839	TCP
2024-11-13T13:09:56.306296+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60938	185.78.76.132	839	TCP
2024-11-13T13:09:57.194858+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60940	185.78.76.132	839	TCP
2024-11-13T13:09:58.054193+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60942	185.78.76.132	839	TCP
2024-11-13T13:09:58.915763+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60944	185.78.76.132	839	TCP
2024-11-13T13:09:59.789109+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60946	185.78.76.132	839	TCP
2024-11-13T13:10:00.663674+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60948	185.78.76.132	839	TCP
2024-11-13T13:10:01.542492+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60950	185.78.76.132	839	TCP
2024-11-13T13:10:02.411191+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60952	185.78.76.132	839	TCP
2024-11-13T13:10:03.285155+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60954	185.78.76.132	839	TCP
2024-11-13T13:10:04.157848+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60956	185.78.76.132	839	TCP
2024-11-13T13:10:05.017631+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60958	185.78.76.132	839	TCP
2024-11-13T13:10:05.881842+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60960	185.78.76.132	839	TCP
2024-11-13T13:10:06.755060+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60962	185.78.76.132	839	TCP
2024-11-13T13:10:07.617288+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60964	185.78.76.132	839	TCP
2024-11-13T13:10:09.207105+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60966	185.78.76.132	839	TCP
2024-11-13T13:10:10.095807+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60968	185.78.76.132	839	TCP
2024-11-13T13:10:10.962940+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60970	185.78.76.132	839	TCP
2024-11-13T13:10:11.843521+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60972	185.78.76.132	839	TCP
2024-11-13T13:10:12.735729+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60974	185.78.76.132	839	TCP
2024-11-13T13:10:13.744989+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60976	185.78.76.132	839	TCP
2024-11-13T13:10:14.633279+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60978	185.78.76.132	839	TCP
2024-11-13T13:10:15.502527+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60980	185.78.76.132	839	TCP
2024-11-13T13:10:16.394696+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60982	185.78.76.132	839	TCP
2024-11-13T13:10:17.264375+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60984	185.78.76.132	839	TCP
2024-11-13T13:10:18.804541+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60986	185.78.76.132	839	TCP
2024-11-13T13:10:19.674416+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60988	185.78.76.132	839	TCP
2024-11-13T13:10:20.556588+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60990	185.78.76.132	839	TCP
2024-11-13T13:10:21.425692+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60992	185.78.76.132	839	TCP
2024-11-13T13:10:22.286827+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60994	185.78.76.132	839	TCP
2024-11-13T13:10:23.174900+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60996	185.78.76.132	839	TCP
2024-11-13T13:10:24.048100+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	60998	185.78.76.132	839	TCP
2024-11-13T13:10:24.909267+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32768	185.78.76.132	839	TCP
2024-11-13T13:10:25.769245+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32770	185.78.76.132	839	TCP
2024-11-13T13:10:26.640685+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32772	185.78.76.132	839	TCP
2024-11-13T13:10:27.502954+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32774	185.78.76.132	839	TCP
2024-11-13T13:10:28.372361+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32776	185.78.76.132	839	TCP
2024-11-13T13:10:29.243743+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32778	185.78.76.132	839	TCP
2024-11-13T13:10:30.107502+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32780	185.78.76.132	839	TCP
2024-11-13T13:10:31.697889+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32782	185.78.76.132	839	TCP
2024-11-13T13:10:32.558187+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32784	185.78.76.132	839	TCP
2024-11-13T13:10:33.425072+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32786	185.78.76.132	839	TCP
2024-11-13T13:10:34.286406+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32788	185.78.76.132	839	TCP
2024-11-13T13:10:35.154396+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32790	185.78.76.132	839	TCP
2024-11-13T13:10:36.020362+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32792	185.78.76.132	839	TCP
2024-11-13T13:10:36.890045+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32794	185.78.76.132	839	TCP
2024-11-13T13:10:37.755637+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32796	185.78.76.132	839	TCP
2024-11-13T13:10:38.624076+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32798	185.78.76.132	839	TCP
2024-11-13T13:10:39.487451+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32800	185.78.76.132	839	TCP
2024-11-13T13:10:40.348855+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32802	185.78.76.132	839	TCP
2024-11-13T13:10:41.206355+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32804	185.78.76.132	839	TCP
2024-11-13T13:10:42.068488+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32806	185.78.76.132	839	TCP
2024-11-13T13:10:42.928505+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32808	185.78.76.132	839	TCP
2024-11-13T13:10:43.795641+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32810	185.78.76.132	839	TCP
2024-11-13T13:10:44.665317+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32812	185.78.76.132	839	TCP
2024-11-13T13:10:45.527619+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32814	185.78.76.132	839	TCP
2024-11-13T13:10:46.397199+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32816	185.78.76.132	839	TCP
2024-11-13T13:10:47.502758+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32818	185.78.76.132	839	TCP
2024-11-13T13:10:48.366286+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32820	185.78.76.132	839	TCP
2024-11-13T13:10:49.241280+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32822	185.78.76.132	839	TCP
2024-11-13T13:10:50.106357+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32824	185.78.76.132	839	TCP
2024-11-13T13:10:50.970254+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32826	185.78.76.132	839	TCP
2024-11-13T13:10:51.832717+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32828	185.78.76.132	839	TCP
2024-11-13T13:10:52.719210+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32830	185.78.76.132	839	TCP
2024-11-13T13:10:53.591695+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32832	185.78.76.132	839	TCP
2024-11-13T13:10:54.472616+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32834	185.78.76.132	839	TCP
2024-11-13T13:10:55.332192+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32836	185.78.76.132	839	TCP
2024-11-13T13:10:56.199417+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32838	185.78.76.132	839	TCP
2024-11-13T13:10:57.062431+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32840	185.78.76.132	839	TCP
2024-11-13T13:10:57.929040+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32842	185.78.76.132	839	TCP
2024-11-13T13:10:58.792498+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32844	185.78.76.132	839	TCP
2024-11-13T13:10:59.666040+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32846	185.78.76.132	839	TCP
2024-11-13T13:11:00.542348+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32848	185.78.76.132	839	TCP
2024-11-13T13:11:01.442051+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32850	185.78.76.132	839	TCP
2024-11-13T13:11:02.337738+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32852	185.78.76.132	839	TCP
2024-11-13T13:11:03.198494+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32854	185.78.76.132	839	TCP
2024-11-13T13:11:04.066868+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32856	185.78.76.132	839	TCP
2024-11-13T13:11:04.928494+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32858	185.78.76.132	839	TCP
2024-11-13T13:11:05.800847+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32860	185.78.76.132	839	TCP
2024-11-13T13:11:06.682958+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32862	185.78.76.132	839	TCP
2024-11-13T13:11:07.558049+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32864	185.78.76.132	839	TCP
2024-11-13T13:11:08.437235+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32866	185.78.76.132	839	TCP
2024-11-13T13:11:09.319883+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32868	185.78.76.132	839	TCP
2024-11-13T13:11:10.182374+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32870	185.78.76.132	839	TCP
2024-11-13T13:11:11.045592+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32872	185.78.76.132	839	TCP
2024-11-13T13:11:11.927877+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32874	185.78.76.132	839	TCP
2024-11-13T13:11:12.791432+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32876	185.78.76.132	839	TCP
2024-11-13T13:11:13.670641+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32878	185.78.76.132	839	TCP
2024-11-13T13:11:14.570807+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32880	185.78.76.132	839	TCP
2024-11-13T13:11:15.434477+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32882	185.78.76.132	839	TCP
2024-11-13T13:11:16.293684+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32884	185.78.76.132	839	TCP
2024-11-13T13:11:17.155238+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32886	185.78.76.132	839	TCP
2024-11-13T13:11:18.019344+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32888	185.78.76.132	839	TCP
2024-11-13T13:11:18.880242+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32890	185.78.76.132	839	TCP
2024-11-13T13:11:19.755278+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32892	185.78.76.132	839	TCP
2024-11-13T13:11:20.623150+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32894	185.78.76.132	839	TCP
2024-11-13T13:11:21.482628+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32896	185.78.76.132	839	TCP
2024-11-13T13:11:22.367044+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32898	185.78.76.132	839	TCP
2024-11-13T13:11:23.232133+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32900	185.78.76.132	839	TCP
2024-11-13T13:11:24.095264+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32902	185.78.76.132	839	TCP
2024-11-13T13:11:24.951240+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32904	185.78.76.132	839	TCP
2024-11-13T13:11:25.818398+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32906	185.78.76.132	839	TCP
2024-11-13T13:11:26.687706+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32908	185.78.76.132	839	TCP
2024-11-13T13:11:27.557940+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32910	185.78.76.132	839	TCP
2024-11-13T13:11:28.450741+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32912	185.78.76.132	839	TCP
2024-11-13T13:11:29.322893+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32914	185.78.76.132	839	TCP
2024-11-13T13:11:30.198310+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32916	185.78.76.132	839	TCP
2024-11-13T13:11:31.068914+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32918	185.78.76.132	839	TCP
2024-11-13T13:11:31.958318+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32920	185.78.76.132	839	TCP
2024-11-13T13:11:32.828934+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32922	185.78.76.132	839	TCP
2024-11-13T13:11:33.712853+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	32924	185.78.76.132	839	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 13, 2024 13:07:59.242729902 CET	60674	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:07:59.248496056 CET	839	60674	185.78.76.132	192.168.2.13
Nov 13, 2024 13:07:59.248552084 CET	60674	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:07:59.248610020 CET	60674	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:07:59.254241943 CET	839	60674	185.78.76.132	192.168.2.13
Nov 13, 2024 13:07:59.988265991 CET	839	60674	185.78.76.132	192.168.2.13
Nov 13, 2024 13:07:59.988621950 CET	60674	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.116045952 CET	839	60674	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.116169930 CET	60674	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.116805077 CET	60676	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.121577978 CET	839	60674	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.121701002 CET	839	60676	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.121758938 CET	60676	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.121787071 CET	60676	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.126691103 CET	839	60676	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.853159904 CET	839	60676	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.853427887 CET	60676	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.979208946 CET	839	60676	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.979441881 CET	60676	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.979923010 CET	60678	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.984416008 CET	839	60676	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.986052990 CET	839	60678	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:00.986102104 CET	60678	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.986118078 CET	60678	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:00.990963936 CET	839	60678	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:01.732078075 CET	839	60678	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:01.732202053 CET	60678	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:01.863409996 CET	839	60678	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:01.863555908 CET	60678	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:01.864156961 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:01.868519068 CET	839	60678	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:01.868999004 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:01.869048119 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:01.869097948 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:01.873930931 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.316879034 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.317032099 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.317096949 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.317138910 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.317138910 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.317138910 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.317260027 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.317352057 CET	60680	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.317538977 CET	60682	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.322287083 CET	839	60680	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.326097012 CET	839	60682	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:03.327126026 CET	60682	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.327126026 CET	60682	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:03.331975937 CET	839	60682	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.090107918 CET	839	60682	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.090384960 CET	60682	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:05.217505932 CET	839	60682	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.217749119 CET	60682	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:05.218261957 CET	60684	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:05.222645998 CET	839	60682	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.223215103 CET	839	60684	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.223259926 CET	60684	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:05.223284960 CET	60684	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:05.229012966 CET	839	60684	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.944785118 CET	839	60684	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:05.944897890 CET	60684	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.076023102 CET	839	60684	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.076176882 CET	60684	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.076643944 CET	60686	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.083149910 CET	839	60684	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.084137917 CET	839	60686	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.084187031 CET	60686	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.084212065 CET	60686	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.090570927 CET	839	60686	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.806235075 CET	839	60686	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.806426048 CET	60686	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.933609009 CET	839	60686	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.933815002 CET	60686	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.934422970 CET	60688	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.938735008 CET	839	60686	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.939330101 CET	839	60688	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:06.939377069 CET	60688	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.939397097 CET	60688	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:06.944299936 CET	839	60688	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:07.677027941 CET	839	60688	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:07.677239895 CET	60688	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:07.799223900 CET	839	60688	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:07.799432039 CET	60688	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:07.800200939 CET	60690	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:07.804373026 CET	839	60688	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:07.805155039 CET	839	60690	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:07.805229902 CET	60690	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:07.805298090 CET	60690	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:07.810134888 CET	839	60690	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:08.550771952 CET	839	60690	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:08.550870895 CET	60690	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:08.683001995 CET	839	60690	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:08.683186054 CET	60690	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:08.683871984 CET	60692	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:08.689682007 CET	839	60690	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:08.690443993 CET	839	60692	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:08.690510988 CET	60692	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:08.690579891 CET	60692	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:08.695379972 CET	839	60692	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:09.419912100 CET	839	60692	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:09.420248032 CET	60692	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:09.547944069 CET	839	60692	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:09.548130989 CET	60692	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:09.548547029 CET	60694	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:09.553517103 CET	839	60692	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:09.553901911 CET	839	60694	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:09.553982973 CET	60694	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:09.554050922 CET	60694	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:09.558979988 CET	839	60694	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.288266897 CET	839	60694	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.288544893 CET	60694	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:10.414941072 CET	839	60694	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.415152073 CET	60694	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:10.415471077 CET	60696	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:10.420095921 CET	839	60694	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.420320034 CET	839	60696	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.420361042 CET	60696	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:10.420381069 CET	60696	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:10.425367117 CET	839	60696	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:10.543639898 CET	48202	443	192.168.2.13	185.125.190.26
Nov 13, 2024 13:08:11.160058022 CET	839	60696	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:11.160459042 CET	60696	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:11.291884899 CET	839	60696	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:11.292207003 CET	60696	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:11.292984962 CET	60698	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:11.297295094 CET	839	60696	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:11.297925949 CET	839	60698	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:11.298005104 CET	60698	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:11.298069000 CET	60698	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:11.302948952 CET	839	60698	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.027026892 CET	839	60698	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.027406931 CET	60698	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:12.154098988 CET	839	60698	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.154359102 CET	60698	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:12.155062914 CET	60700	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:12.159353018 CET	839	60698	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.160051107 CET	839	60700	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.160125017 CET	60700	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:12.160223961 CET	60700	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:12.165080070 CET	839	60700	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.897039890 CET	839	60700	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:12.897233963 CET	60700	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.024949074 CET	839	60700	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.025223017 CET	60700	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.025877953 CET	60702	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.030206919 CET	839	60700	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.030807018 CET	839	60702	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.030869007 CET	60702	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.030903101 CET	60702	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.035949945 CET	839	60702	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.752396107 CET	839	60702	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.752579927 CET	60702	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.880302906 CET	839	60702	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.880647898 CET	60702	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.881560087 CET	60704	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.885699987 CET	839	60702	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.886583090 CET	839	60704	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:13.886682034 CET	60704	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.886746883 CET	60704	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:13.891568899 CET	839	60704	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:14.608411074 CET	839	60704	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:14.608608961 CET	60704	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:14.735572100 CET	839	60704	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:14.735865116 CET	60704	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:14.736804962 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:14.740911961 CET	839	60704	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:14.741704941 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:14.741775036 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:14.741837978 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:14.747155905 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.719393969 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.719629049 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.720081091 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.720113993 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.720240116 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.720240116 CET	60706	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.722079039 CET	60708	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.725748062 CET	839	60706	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.727078915 CET	839	60708	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:15.727277994 CET	60708	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.727277994 CET	60708	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:15.732254982 CET	839	60708	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:16.448137045 CET	839	60708	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:16.448405981 CET	60708	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:16.575705051 CET	839	60708	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:16.575908899 CET	60708	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:16.576862097 CET	60710	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:16.580801964 CET	839	60708	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:16.581758022 CET	839	60710	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:16.581860065 CET	60710	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:16.581926107 CET	60710	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:16.586741924 CET	839	60710	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:17.308891058 CET	839	60710	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:17.309254885 CET	60710	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:17.435599089 CET	839	60710	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:17.435851097 CET	60710	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:17.437832117 CET	60712	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:17.440938950 CET	839	60710	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:17.442838907 CET	839	60712	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:17.443372011 CET	60712	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:17.443372965 CET	60712	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:17.448487043 CET	839	60712	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:18.178634882 CET	839	60712	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:18.179056883 CET	60712	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:18.305274010 CET	839	60712	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:18.305605888 CET	60712	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:18.306392908 CET	60714	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:18.310475111 CET	839	60712	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:18.311212063 CET	839	60714	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:18.311270952 CET	60714	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:18.311295033 CET	60714	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:18.316133976 CET	839	60714	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:19.064030886 CET	839	60714	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:19.064277887 CET	60714	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:19.191387892 CET	839	60714	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:19.191590071 CET	60714	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:19.192543030 CET	60716	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:19.196455956 CET	839	60714	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:19.197432995 CET	839	60716	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:19.197535992 CET	60716	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:19.197580099 CET	60716	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:19.202363014 CET	839	60716	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.019471884 CET	839	60716	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.019885063 CET	60716	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.060414076 CET	839	60716	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.060991049 CET	60716	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.061885118 CET	60718	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.065965891 CET	839	60716	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.066793919 CET	839	60718	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.066884041 CET	60718	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.066960096 CET	60718	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.071842909 CET	839	60718	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.842348099 CET	839	60718	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.842704058 CET	60718	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.921106100 CET	839	60718	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.921448946 CET	60718	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.923080921 CET	60720	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.926898956 CET	839	60718	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.928344965 CET	839	60720	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:20.928421974 CET	60720	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.928493023 CET	60720	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:20.933439016 CET	839	60720	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:21.661550999 CET	839	60720	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:21.661870956 CET	60720	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:21.788645983 CET	839	60720	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:21.788949966 CET	60720	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:21.790143013 CET	60722	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:21.793853998 CET	839	60720	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:21.794954062 CET	839	60722	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:21.795047045 CET	60722	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:21.795104027 CET	60722	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:21.799874067 CET	839	60722	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:22.522916079 CET	839	60722	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:22.523091078 CET	60722	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:22.649887085 CET	839	60722	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:22.650084972 CET	60722	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:22.651060104 CET	60724	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:22.654999971 CET	839	60722	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:22.655900955 CET	839	60724	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:22.655986071 CET	60724	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:22.656035900 CET	60724	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:22.660814047 CET	839	60724	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:23.409775019 CET	839	60724	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:23.409943104 CET	60724	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:23.538273096 CET	839	60724	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:23.538533926 CET	60724	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:23.539380074 CET	60726	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:23.544045925 CET	839	60724	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:23.544841051 CET	839	60726	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:23.544929028 CET	60726	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:23.544946909 CET	60726	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:23.550604105 CET	839	60726	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:24.279114008 CET	839	60726	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:24.279326916 CET	60726	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:24.406336069 CET	839	60726	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:24.406810045 CET	60726	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:24.408792019 CET	60728	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:24.411694050 CET	839	60726	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:24.413666964 CET	839	60728	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:24.413883924 CET	60728	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:24.413903952 CET	60728	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:24.418863058 CET	839	60728	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:25.159037113 CET	839	60728	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:25.159145117 CET	60728	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:25.290586948 CET	839	60728	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:25.290833950 CET	60728	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:25.291662931 CET	60730	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:25.297415972 CET	839	60728	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:25.297449112 CET	839	60730	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:25.297518015 CET	60730	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:25.297547102 CET	60730	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:25.302512884 CET	839	60730	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.038028002 CET	839	60730	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.038213968 CET	60730	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:26.171375990 CET	839	60730	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.171518087 CET	60730	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:26.172561884 CET	60732	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:26.176424980 CET	839	60730	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.177388906 CET	839	60732	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.177489996 CET	60732	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:26.177546978 CET	60732	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:26.182382107 CET	839	60732	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.910932064 CET	839	60732	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:26.911473036 CET	60732	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.037045956 CET	839	60732	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.037220955 CET	60732	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.038789988 CET	60734	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.042238951 CET	839	60732	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.043678999 CET	839	60734	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.044073105 CET	60734	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.044073105 CET	60734	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.048996925 CET	839	60734	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.788510084 CET	839	60734	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.788746119 CET	60734	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.919747114 CET	839	60734	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.919991016 CET	60734	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.921983004 CET	60736	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.924787045 CET	839	60734	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.926769972 CET	839	60736	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:27.926928043 CET	60736	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.926954985 CET	60736	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:27.931778908 CET	839	60736	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:28.662578106 CET	839	60736	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:28.663045883 CET	60736	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:28.733561039 CET	50528	443	192.168.2.13	34.243.160.129
Nov 13, 2024 13:08:28.739412069 CET	443	50528	34.243.160.129	192.168.2.13
Nov 13, 2024 13:08:28.739569902 CET	50528	443	192.168.2.13	34.243.160.129
Nov 13, 2024 13:08:28.790606022 CET	839	60736	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:28.791055918 CET	60736	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:28.791898012 CET	60738	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:28.796176910 CET	839	60736	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:28.796987057 CET	839	60738	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:28.797162056 CET	60738	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:28.797220945 CET	60738	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:28.802226067 CET	839	60738	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:29.535355091 CET	839	60738	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:29.535484076 CET	60738	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:29.667666912 CET	839	60738	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:29.668001890 CET	60738	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:29.670049906 CET	60740	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:29.672940969 CET	839	60738	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:29.674963951 CET	839	60740	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:29.675055027 CET	60740	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:29.675224066 CET	60740	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:29.680052996 CET	839	60740	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:30.408767939 CET	839	60740	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:30.409249067 CET	60740	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:30.535629988 CET	839	60740	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:30.535860062 CET	60740	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:30.536984921 CET	60742	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:30.540676117 CET	839	60740	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:30.541841030 CET	839	60742	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:30.541929960 CET	60742	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:30.541954994 CET	60742	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:30.546863079 CET	839	60742	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:31.262022018 CET	839	60742	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:31.262327909 CET	60742	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:31.388525963 CET	839	60742	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:31.388756037 CET	60742	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:31.389760971 CET	60744	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:31.393663883 CET	839	60742	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:31.394603968 CET	839	60744	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:31.394670963 CET	60744	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:31.394751072 CET	60744	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:31.400604963 CET	839	60744	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:32.130753040 CET	839	60744	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:32.130932093 CET	60744	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:32.259543896 CET	839	60744	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:32.260042906 CET	60744	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:32.260889053 CET	60746	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:32.264931917 CET	839	60744	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:32.265938044 CET	839	60746	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:32.266030073 CET	60746	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:32.266104937 CET	60746	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:32.270901918 CET	839	60746	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.022573948 CET	839	60746	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.022782087 CET	60746	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:33.149432898 CET	839	60746	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.149729967 CET	60746	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:33.150631905 CET	60748	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:33.154545069 CET	839	60746	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.155486107 CET	839	60748	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.155586004 CET	60748	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:33.155633926 CET	60748	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:33.160588980 CET	839	60748	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.886890888 CET	839	60748	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:33.887126923 CET	60748	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.012195110 CET	839	60748	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.012593031 CET	60748	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.013581991 CET	60750	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.017522097 CET	839	60748	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.018456936 CET	839	60750	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.018528938 CET	60750	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.018570900 CET	60750	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.023463011 CET	839	60750	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.755114079 CET	839	60750	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.755290985 CET	60750	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.882339001 CET	839	60750	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.882802010 CET	60750	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.883975983 CET	60752	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.887792110 CET	839	60750	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.888864994 CET	839	60752	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:34.889206886 CET	60752	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.889206886 CET	60752	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:34.894151926 CET	839	60752	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:35.626638889 CET	839	60752	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:35.626818895 CET	60752	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:35.754374027 CET	839	60752	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:35.754604101 CET	60752	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:35.755855083 CET	60754	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:35.759562969 CET	839	60752	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:35.760735989 CET	839	60754	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:35.760827065 CET	60754	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:35.760888100 CET	60754	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:35.765628099 CET	839	60754	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:36.497107983 CET	839	60754	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:36.497395039 CET	60754	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:36.623893023 CET	839	60754	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:36.624245882 CET	60754	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:36.626400948 CET	60756	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:36.629808903 CET	839	60754	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:36.631261110 CET	839	60756	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:36.631349087 CET	60756	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:36.631403923 CET	60756	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:36.636358976 CET	839	60756	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:37.360995054 CET	839	60756	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:37.361341000 CET	60756	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:37.488351107 CET	839	60756	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:37.488601923 CET	60756	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:37.491086960 CET	60758	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:37.493355989 CET	839	60756	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:37.495872974 CET	839	60758	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:37.496025085 CET	60758	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:37.496340990 CET	60758	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:37.501111984 CET	839	60758	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:38.241246939 CET	839	60758	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:38.241576910 CET	60758	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:38.372958899 CET	839	60758	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:38.373253107 CET	60758	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:38.374087095 CET	60760	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:38.378232002 CET	839	60758	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:38.379024982 CET	839	60760	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:38.379089117 CET	60760	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:38.379153013 CET	60760	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:38.384023905 CET	839	60760	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.106177092 CET	839	60760	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.106514931 CET	60760	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:39.232743979 CET	839	60760	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.233263016 CET	60760	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:39.235259056 CET	60762	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:39.238121986 CET	839	60760	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.240159988 CET	839	60762	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.240253925 CET	60762	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:39.240427017 CET	60762	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:39.245213032 CET	839	60762	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.975734949 CET	839	60762	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:39.976058960 CET	60762	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.102355957 CET	839	60762	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.102497101 CET	60762	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.103686094 CET	60764	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.107423067 CET	839	60762	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.108587980 CET	839	60764	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.108679056 CET	60764	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.108726025 CET	60764	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.113554001 CET	839	60764	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.844487906 CET	839	60764	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.845029116 CET	60764	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.971736908 CET	839	60764	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.972263098 CET	60764	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.974567890 CET	60766	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.977241039 CET	839	60764	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.979505062 CET	839	60766	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:40.979765892 CET	60766	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.979959011 CET	60766	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:40.984960079 CET	839	60766	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:41.714346886 CET	839	60766	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:41.714663029 CET	60766	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:41.775499105 CET	48202	443	192.168.2.13	185.125.190.26
Nov 13, 2024 13:08:41.841150999 CET	839	60766	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:41.841543913 CET	60766	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:41.844079018 CET	60768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:41.846612930 CET	839	60766	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:41.848956108 CET	839	60768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:41.849029064 CET	60768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:41.849111080 CET	60768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:41.853904009 CET	839	60768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:42.576514006 CET	839	60768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:42.576706886 CET	60768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:42.703221083 CET	839	60768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:42.703414917 CET	60768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:42.704519033 CET	60770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:42.708301067 CET	839	60768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:42.709347010 CET	839	60770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:42.709413052 CET	60770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:42.709465027 CET	60770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:42.714256048 CET	839	60770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:43.443073034 CET	839	60770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:43.443428993 CET	60770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:43.569576979 CET	839	60770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:43.570034027 CET	60770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:43.571656942 CET	60772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:43.574928045 CET	839	60770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:43.576843023 CET	839	60772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:43.577054977 CET	60772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:43.577122927 CET	60772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:43.585525036 CET	839	60772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:44.307660103 CET	839	60772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:44.307827950 CET	60772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:44.434636116 CET	839	60772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:44.434777975 CET	60772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:44.435796976 CET	60774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:44.439697981 CET	839	60772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:44.440650940 CET	839	60774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:44.440740108 CET	60774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:44.440768957 CET	60774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:44.446191072 CET	839	60774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:45.179929018 CET	839	60774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:45.180133104 CET	60774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:45.311506033 CET	839	60774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:45.311701059 CET	60774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:45.312586069 CET	60776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:45.316555977 CET	839	60774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:45.317454100 CET	839	60776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:45.317543030 CET	60776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:45.317636967 CET	60776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:45.322630882 CET	839	60776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.046899080 CET	839	60776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.047121048 CET	60776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:46.174806118 CET	839	60776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.175127983 CET	60776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:46.176055908 CET	60778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:46.179919958 CET	839	60776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.180788994 CET	839	60778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.180872917 CET	60778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:46.181052923 CET	60778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:46.187021017 CET	839	60778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.907841921 CET	839	60778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:46.908109903 CET	60778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.035026073 CET	839	60778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.035212994 CET	60778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.036431074 CET	60780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.040029049 CET	839	60778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.041317940 CET	839	60780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.041413069 CET	60780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.041474104 CET	60780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.046242952 CET	839	60780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.785662889 CET	839	60780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.785895109 CET	60780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.902888060 CET	839	60780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.903187990 CET	60780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.904099941 CET	60782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.908085108 CET	839	60780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.908961058 CET	839	60782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:47.909046888 CET	60782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.909117937 CET	60782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:47.914163113 CET	839	60782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:48.645811081 CET	839	60782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:48.646136045 CET	60782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:48.783787966 CET	839	60782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:48.784148932 CET	60782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:48.785166025 CET	60784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:48.789757013 CET	839	60782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:48.790998936 CET	839	60784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:48.791076899 CET	60784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:48.791141033 CET	60784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:48.795924902 CET	839	60784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:49.519957066 CET	839	60784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:49.520493984 CET	60784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:49.646413088 CET	839	60784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:49.646853924 CET	60784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:49.647986889 CET	60786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:49.651738882 CET	839	60784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:49.652836084 CET	839	60786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:49.652935028 CET	60786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:49.652975082 CET	60786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:49.658149958 CET	839	60786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:50.388895035 CET	839	60786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:50.389307976 CET	60786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:50.515865088 CET	839	60786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:50.516417980 CET	60786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:50.518604040 CET	60788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:50.521435022 CET	839	60786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:50.523504019 CET	839	60788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:50.523691893 CET	60788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:50.523767948 CET	60788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:50.528589964 CET	839	60788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:51.245573044 CET	839	60788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:51.245840073 CET	60788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:51.372953892 CET	839	60788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:51.373518944 CET	60788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:51.375799894 CET	60790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:51.378362894 CET	839	60788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:51.380695105 CET	839	60790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:51.380788088 CET	60790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:51.380975008 CET	60790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:51.386100054 CET	839	60790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.120100975 CET	839	60790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.120538950 CET	60790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:52.247895002 CET	839	60790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.248430014 CET	60790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:52.249618053 CET	60792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:52.253277063 CET	839	60790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.254525900 CET	839	60792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.254614115 CET	60792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:52.254806042 CET	60792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:52.259560108 CET	839	60792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.988596916 CET	839	60792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:52.988903046 CET	60792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.115864992 CET	839	60792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.116468906 CET	60792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.117984056 CET	60794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.121556997 CET	839	60792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.122970104 CET	839	60794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.123044014 CET	60794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.123111010 CET	60794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.128112078 CET	839	60794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.851874113 CET	839	60794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.852102041 CET	60794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.979355097 CET	839	60794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.979748964 CET	60794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.980602980 CET	60796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.984675884 CET	839	60794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.985707998 CET	839	60796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:53.985793114 CET	60796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.985857010 CET	60796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:53.992929935 CET	839	60796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:54.719460964 CET	839	60796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:54.719841957 CET	60796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:54.846138954 CET	839	60796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:54.846630096 CET	60796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:54.847548962 CET	60798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:54.851571083 CET	839	60796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:54.852534056 CET	839	60798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:54.852627039 CET	60798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:54.852689028 CET	60798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:54.857506037 CET	839	60798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:55.575123072 CET	839	60798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:55.575680971 CET	60798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:55.702426910 CET	839	60798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:55.702860117 CET	60798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:55.704364061 CET	60800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:55.707802057 CET	839	60798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:55.709383011 CET	839	60800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:55.709481955 CET	60800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:55.709671021 CET	60800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:55.714591026 CET	839	60800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:56.437051058 CET	839	60800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:56.437210083 CET	60800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:56.563977003 CET	839	60800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:56.564398050 CET	60800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:56.565093994 CET	60802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:56.569320917 CET	839	60800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:56.569912910 CET	839	60802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:56.569987059 CET	60802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:56.570024967 CET	60802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:56.574846983 CET	839	60802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:57.302033901 CET	839	60802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:57.302288055 CET	60802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:57.430113077 CET	839	60802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:57.430389881 CET	60802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:57.432336092 CET	60804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:57.435596943 CET	839	60802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:57.437410116 CET	839	60804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:57.437753916 CET	60804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:57.437755108 CET	60804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:57.442863941 CET	839	60804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:58.174276114 CET	839	60804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:58.174422026 CET	60804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:58.301506996 CET	839	60804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:58.302222967 CET	60804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:58.303704023 CET	60806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:58.307135105 CET	839	60804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:58.308682919 CET	839	60806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:58.309220076 CET	60806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:58.309220076 CET	60806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:58.314220905 CET	839	60806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.045839071 CET	839	60806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.046438932 CET	60806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:59.178447962 CET	839	60806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.179006100 CET	60806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:59.180150986 CET	60808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:59.184005022 CET	839	60806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.185163021 CET	839	60808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.185534000 CET	60808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:59.185534000 CET	60808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:08:59.190572023 CET	839	60808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.922071934 CET	839	60808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:08:59.922322989 CET	60808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.049272060 CET	839	60808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.049853086 CET	60808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.051384926 CET	60810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.054944992 CET	839	60808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.056298971 CET	839	60810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.056658030 CET	60810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.056763887 CET	60810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.062052965 CET	839	60810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.810966969 CET	839	60810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.811289072 CET	60810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.937938929 CET	839	60810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.938097954 CET	60810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.938971996 CET	60812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.943065882 CET	839	60810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.943888903 CET	839	60812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:00.944017887 CET	60812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.944017887 CET	60812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:00.948915958 CET	839	60812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:01.684319019 CET	839	60812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:01.684665918 CET	60812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:01.815421104 CET	839	60812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:01.815795898 CET	60812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:01.817830086 CET	60814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:01.820755959 CET	839	60812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:01.822877884 CET	839	60814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:01.822973967 CET	60814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:01.823026896 CET	60814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:01.828176022 CET	839	60814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:02.551192045 CET	839	60814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:02.551322937 CET	60814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:02.678653002 CET	839	60814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:02.679034948 CET	60814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:02.679743052 CET	60816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:02.684487104 CET	839	60814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:02.684612036 CET	839	60816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:02.684678078 CET	60816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:02.684737921 CET	60816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:02.689639091 CET	839	60816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:03.419392109 CET	839	60816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:03.419616938 CET	60816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:03.546024084 CET	839	60816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:03.546427965 CET	60816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:03.547420025 CET	60818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:03.553627968 CET	839	60816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:03.554790974 CET	839	60818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:03.554909945 CET	60818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:03.554965019 CET	60818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:03.559823036 CET	839	60818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:04.284970999 CET	839	60818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:04.285386086 CET	60818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:04.411979914 CET	839	60818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:04.412504911 CET	60818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:04.413614988 CET	60820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:04.417468071 CET	839	60818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:04.418514967 CET	839	60820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:04.418654919 CET	60820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:04.418654919 CET	60820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:04.423554897 CET	839	60820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:05.158252954 CET	839	60820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:05.158678055 CET	60820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:05.285491943 CET	839	60820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:05.285842896 CET	60820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:05.286694050 CET	60822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:05.290730000 CET	839	60820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:05.291508913 CET	839	60822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:05.291627884 CET	60822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:05.291665077 CET	60822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:05.296545029 CET	839	60822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.047836065 CET	839	60822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.048042059 CET	60822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:06.174463034 CET	839	60822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.174964905 CET	60822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:06.175652027 CET	60824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:06.179925919 CET	839	60822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.180522919 CET	839	60824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.180583954 CET	60824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:06.180614948 CET	60824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:06.185442924 CET	839	60824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.909744024 CET	839	60824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:06.909884930 CET	60824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.036777973 CET	839	60824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.036988974 CET	60824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.037828922 CET	60826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.043507099 CET	839	60824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.043543100 CET	839	60826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.043636084 CET	60826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.043739080 CET	60826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.048599958 CET	839	60826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.772322893 CET	839	60826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.772669077 CET	60826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.899787903 CET	839	60826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.900284052 CET	60826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.902209044 CET	60828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.905363083 CET	839	60826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.907215118 CET	839	60828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:07.907390118 CET	60828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.907553911 CET	60828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:07.912384987 CET	839	60828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:08.664705038 CET	839	60828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:08.665102005 CET	60828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:08.791858912 CET	839	60828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:08.792243004 CET	60828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:08.793049097 CET	60830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:08.797207117 CET	839	60828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:08.797892094 CET	839	60830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:08.797970057 CET	60830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:08.798033953 CET	60830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:08.802922010 CET	839	60830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:09.526057959 CET	839	60830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:09.526546001 CET	60830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:09.654203892 CET	839	60830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:09.654448032 CET	60830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:09.655209064 CET	60832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:09.659333944 CET	839	60830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:09.660161018 CET	839	60832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:09.660226107 CET	60832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:09.660290003 CET	60832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:09.665091038 CET	839	60832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:10.397429943 CET	839	60832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:10.397792101 CET	60832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:10.524523973 CET	839	60832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:10.524677038 CET	60832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:10.525599003 CET	60834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:10.529624939 CET	839	60832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:10.530576944 CET	839	60834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:10.530766964 CET	60834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:10.530905008 CET	60834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:10.535856962 CET	839	60834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:11.413301945 CET	839	60834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:11.413629055 CET	60834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:11.414261103 CET	60836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:11.418644905 CET	839	60834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:11.419254065 CET	839	60836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:11.419339895 CET	60836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:11.419399023 CET	60836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:11.424282074 CET	839	60836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:12.173572063 CET	839	60836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:12.173837900 CET	60836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:12.301232100 CET	839	60836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:12.301635027 CET	60836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:12.303482056 CET	60838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:12.306618929 CET	839	60836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:12.308455944 CET	839	60838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:12.308556080 CET	60838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:12.308629036 CET	60838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:12.313528061 CET	839	60838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.042382002 CET	839	60838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.042870998 CET	60838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:13.168608904 CET	839	60838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.169020891 CET	60838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:13.170733929 CET	60840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:13.173959017 CET	839	60838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.175756931 CET	839	60840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.175880909 CET	60840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:13.176047087 CET	60840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:13.180840969 CET	839	60840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.912556887 CET	839	60840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:13.912897110 CET	60840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.041454077 CET	839	60840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.041857958 CET	60840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.042577028 CET	60842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.046750069 CET	839	60840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.047419071 CET	839	60842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.047537088 CET	60842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.047596931 CET	60842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.053210974 CET	839	60842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.788480997 CET	839	60842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.788790941 CET	60842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.905158043 CET	839	60842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.905592918 CET	60842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.907078981 CET	60844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.910413027 CET	839	60842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.911887884 CET	839	60844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:14.911988020 CET	60844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.912040949 CET	60844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:14.916846991 CET	839	60844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:15.645721912 CET	839	60844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:15.646157026 CET	60844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:15.771995068 CET	839	60844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:15.772656918 CET	60844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:15.774096012 CET	60846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:15.777559996 CET	839	60844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:15.779021978 CET	839	60846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:15.779372931 CET	60846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:15.779373884 CET	60846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:15.784327984 CET	839	60846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:16.510869026 CET	839	60846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:16.511369944 CET	60846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:16.637516022 CET	839	60846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:16.637803078 CET	60846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:16.638586044 CET	60848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:16.643100977 CET	839	60846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:16.644530058 CET	839	60848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:16.644604921 CET	60848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:16.644681931 CET	60848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:16.650192976 CET	839	60848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:17.373065948 CET	839	60848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:17.373558044 CET	60848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:17.499123096 CET	839	60848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:17.499500036 CET	60848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:17.500375986 CET	60850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:17.504468918 CET	839	60848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:17.505177975 CET	839	60850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:17.505314112 CET	60850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:17.505351067 CET	60850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:17.510102034 CET	839	60850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:18.234658957 CET	839	60850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:18.234806061 CET	60850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:18.362523079 CET	839	60850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:18.362673044 CET	60850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:18.363255024 CET	60852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:18.367590904 CET	839	60850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:18.368184090 CET	839	60852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:18.368274927 CET	60852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:18.368319035 CET	60852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:18.373202085 CET	839	60852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.102818966 CET	839	60852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.103142977 CET	60852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:19.232059956 CET	839	60852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.232297897 CET	60852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:19.232908964 CET	60854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:19.237646103 CET	839	60852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.238703966 CET	839	60854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.238894939 CET	60854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:19.238894939 CET	60854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:19.243832111 CET	839	60854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.968620062 CET	839	60854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:19.969059944 CET	60854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.095805883 CET	839	60854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.096231937 CET	60854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.097098112 CET	60856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.101145983 CET	839	60854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.102010012 CET	839	60856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.102349043 CET	60856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.102471113 CET	60856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.107295990 CET	839	60856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.829463005 CET	839	60856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.830054045 CET	60856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.956301928 CET	839	60856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.956806898 CET	60856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.958836079 CET	60858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.961864948 CET	839	60856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.963864088 CET	839	60858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:20.963969946 CET	60858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.964231014 CET	60858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:20.969134092 CET	839	60858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:21.700750113 CET	839	60858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:21.700970888 CET	60858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:21.831773043 CET	839	60858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:21.832156897 CET	60858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:21.832818985 CET	60860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:21.837162018 CET	839	60858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:21.837661028 CET	839	60860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:21.837800026 CET	60860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:21.837862015 CET	60860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:21.842709064 CET	839	60860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:22.566937923 CET	839	60860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:22.567517996 CET	60860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:22.696732998 CET	839	60860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:22.697063923 CET	60860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:22.698029995 CET	60862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:22.701848984 CET	839	60860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:22.702946901 CET	839	60862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:22.703013897 CET	60862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:22.703047037 CET	60862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:22.708244085 CET	839	60862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:23.436738968 CET	839	60862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:23.437076092 CET	60862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:23.563683987 CET	839	60862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:23.563896894 CET	60862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:23.565706015 CET	60864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:23.568933964 CET	839	60862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:23.570718050 CET	839	60864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:23.570791006 CET	60864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:23.570849895 CET	60864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:23.575764894 CET	839	60864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:24.318574905 CET	839	60864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:24.318841934 CET	60864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:24.445355892 CET	839	60864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:24.445499897 CET	60864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:24.446882010 CET	60866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:24.450512886 CET	839	60864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:24.451803923 CET	839	60866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:24.451960087 CET	60866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:24.451977968 CET	60866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:24.456891060 CET	839	60866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:25.182276964 CET	839	60866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:25.182625055 CET	60866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:25.309317112 CET	839	60866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:25.309802055 CET	60866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:25.311729908 CET	60868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:25.314661980 CET	839	60866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:25.316704035 CET	839	60868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:25.317147970 CET	60868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:25.317147970 CET	60868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:25.322033882 CET	839	60868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.045285940 CET	839	60868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.045717955 CET	60868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:26.172383070 CET	839	60868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.172605991 CET	60868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:26.173656940 CET	60870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:26.177570105 CET	839	60868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.178555965 CET	839	60870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.178678989 CET	60870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:26.178729057 CET	60870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:26.183609009 CET	839	60870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.908083916 CET	839	60870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:26.908652067 CET	60870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.035682917 CET	839	60870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.036348104 CET	60870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.038388014 CET	60872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.041596889 CET	839	60870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.043468952 CET	839	60872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.043566942 CET	60872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.043658018 CET	60872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.049071074 CET	839	60872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.765544891 CET	839	60872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.766071081 CET	60872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.892749071 CET	839	60872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.892925978 CET	60872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.893508911 CET	60874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.898030043 CET	839	60872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.898300886 CET	839	60874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:27.898377895 CET	60874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.898377895 CET	60874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:27.903352976 CET	839	60874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:28.626821041 CET	839	60874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:28.627186060 CET	60874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:28.754580975 CET	839	60874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:28.755017996 CET	60874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:28.756568909 CET	60876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:28.760452032 CET	839	60874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:28.761648893 CET	839	60876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:28.761729956 CET	60876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:28.762037039 CET	60876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:28.766927004 CET	839	60876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:29.482922077 CET	839	60876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:29.483309984 CET	60876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:29.610122919 CET	839	60876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:29.610661983 CET	60876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:29.611768961 CET	60878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:29.615854025 CET	839	60876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:29.616628885 CET	839	60878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:29.616719007 CET	60878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:29.616871119 CET	60878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:29.621680021 CET	839	60878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:30.361371040 CET	839	60878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:30.361579895 CET	60878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:30.494405031 CET	839	60878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:30.494791985 CET	60878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:30.496151924 CET	60880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:30.500200033 CET	839	60878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:30.501199961 CET	839	60880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:30.501554966 CET	60880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:30.501554966 CET	60880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:30.506493092 CET	839	60880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:31.240689993 CET	839	60880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:31.241084099 CET	60880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:31.372260094 CET	839	60880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:31.372608900 CET	60880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:31.373327017 CET	60882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:31.377525091 CET	839	60880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:31.378170967 CET	839	60882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:31.378256083 CET	60882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:31.378314018 CET	60882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:31.383272886 CET	839	60882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.109241962 CET	839	60882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.109431028 CET	60882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:32.238616943 CET	839	60882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.239068031 CET	60882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:32.240339994 CET	60884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:32.244077921 CET	839	60882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.245276928 CET	839	60884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.245445013 CET	60884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:32.245528936 CET	60884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:32.250441074 CET	839	60884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.980659008 CET	839	60884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:32.981028080 CET	60884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.107471943 CET	839	60884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.107886076 CET	60884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.109059095 CET	60886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.112951994 CET	839	60884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.114082098 CET	839	60886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.114305973 CET	60886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.114386082 CET	60886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.119384050 CET	839	60886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.848687887 CET	839	60886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.849077940 CET	60886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.971944094 CET	839	60886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.972493887 CET	60886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.973503113 CET	60888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.977570057 CET	839	60886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.978395939 CET	839	60888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:33.978485107 CET	60888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.978485107 CET	60888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:33.983359098 CET	839	60888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:34.714253902 CET	839	60888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:34.714519024 CET	60888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:34.841558933 CET	839	60888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:34.842267036 CET	60888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:34.843631029 CET	60890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:34.847187042 CET	839	60888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:34.848529100 CET	839	60890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:34.848969936 CET	60890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:34.848969936 CET	60890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:34.853974104 CET	839	60890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:35.578962088 CET	839	60890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:35.579319000 CET	60890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:35.706921101 CET	839	60890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:35.707283020 CET	60890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:35.708089113 CET	60892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:35.712666988 CET	839	60890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:35.712986946 CET	839	60892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:35.713083982 CET	60892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:35.713083982 CET	60892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:35.718046904 CET	839	60892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:36.807518005 CET	839	60892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:36.807828903 CET	60892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:36.939450979 CET	839	60892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:36.939799070 CET	60892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:36.942826033 CET	60894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:36.944741964 CET	839	60892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:36.947771072 CET	839	60894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:36.947953939 CET	60894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:36.947953939 CET	60894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:36.953330040 CET	839	60894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:37.685992002 CET	839	60894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:37.686170101 CET	60894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:37.813565969 CET	839	60894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:37.813802004 CET	60894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:37.815469027 CET	60896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:37.818658113 CET	839	60894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:37.820432901 CET	839	60896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:37.820483923 CET	60896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:37.820544004 CET	60896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:37.825367928 CET	839	60896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:38.559782982 CET	839	60896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:38.560098886 CET	60896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:38.691378117 CET	839	60896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:38.691601038 CET	60896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:38.692528009 CET	60898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:38.696577072 CET	839	60896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:38.697454929 CET	839	60898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:38.697577953 CET	60898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:38.697618961 CET	60898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:38.702604055 CET	839	60898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:39.425163031 CET	839	60898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:39.425494909 CET	60898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:39.552186012 CET	839	60898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:39.552885056 CET	60898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:39.553991079 CET	60900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:39.557766914 CET	839	60898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:39.558850050 CET	839	60900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:39.558993101 CET	60900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:39.559137106 CET	60900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:39.563956022 CET	839	60900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:40.287383080 CET	839	60900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:40.287625074 CET	60900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:40.414053917 CET	839	60900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:40.414494991 CET	60900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:40.415357113 CET	60902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:40.419879913 CET	839	60900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:40.421190023 CET	839	60902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:40.421320915 CET	60902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:40.421423912 CET	60902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:40.427225113 CET	839	60902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:41.164387941 CET	839	60902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:41.164868116 CET	60902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:41.292308092 CET	839	60902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:41.292645931 CET	60902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:41.293379068 CET	60904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:41.297646999 CET	839	60902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:41.298321009 CET	839	60904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:41.298424959 CET	60904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:41.298464060 CET	60904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:41.303273916 CET	839	60904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.022207022 CET	839	60904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.022737026 CET	60904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:42.149188995 CET	839	60904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.149928093 CET	60904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:42.151906013 CET	60906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:42.154907942 CET	839	60904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.156980991 CET	839	60906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.157341003 CET	60906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:42.157432079 CET	60906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:42.162317038 CET	839	60906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.894227028 CET	839	60906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:42.894469976 CET	60906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.020989895 CET	839	60906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.021435022 CET	60906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.022129059 CET	60908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.026285887 CET	839	60906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.026951075 CET	839	60908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.027036905 CET	60908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.027111053 CET	60908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.032145023 CET	839	60908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.790949106 CET	839	60908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.791297913 CET	60908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.906208992 CET	839	60908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.906733036 CET	60908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.908174992 CET	60910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.911838055 CET	839	60908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.913093090 CET	839	60910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:43.913292885 CET	60910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.913480043 CET	60910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:43.918366909 CET	839	60910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:44.717067957 CET	839	60910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:44.717441082 CET	60910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:44.769546032 CET	839	60910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:44.770020008 CET	60910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:44.771677017 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:44.774981022 CET	839	60910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:44.776551962 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:44.776680946 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:44.776882887 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:44.781647921 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.564919949 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.565354109 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.811721087 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.811726093 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.812127113 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.812127113 CET	60912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.813261032 CET	60914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.817094088 CET	839	60912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.818063021 CET	839	60914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:45.818299055 CET	60914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.818483114 CET	60914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:45.823295116 CET	839	60914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:46.572639942 CET	839	60914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:46.572943926 CET	60914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:46.700542927 CET	839	60914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:46.700896025 CET	60914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:46.701781034 CET	60916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:46.705871105 CET	839	60914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:46.706643105 CET	839	60916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:46.706703901 CET	60916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:46.706851006 CET	60916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:46.711600065 CET	839	60916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:47.450906992 CET	839	60916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:47.451364994 CET	60916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:47.582091093 CET	839	60916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:47.582474947 CET	60916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:47.583781004 CET	60918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:47.587492943 CET	839	60916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:47.588787079 CET	839	60918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:47.588898897 CET	60918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:47.589205980 CET	60918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:47.594014883 CET	839	60918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:48.326425076 CET	839	60918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:48.326687098 CET	60918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:48.454071999 CET	839	60918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:48.454802990 CET	60918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:48.455805063 CET	60920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:48.459909916 CET	839	60918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:48.461045027 CET	839	60920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:48.461250067 CET	60920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:48.461456060 CET	60920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:48.466896057 CET	839	60920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:49.189733028 CET	839	60920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:49.190059900 CET	60920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:49.316538095 CET	839	60920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:49.316931963 CET	60920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:49.317620039 CET	60922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:49.321930885 CET	839	60920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:49.322509050 CET	839	60922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:49.322686911 CET	60922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:49.322686911 CET	60922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:49.327687979 CET	839	60922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:50.068555117 CET	839	60922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:50.068952084 CET	60922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:50.199784994 CET	839	60922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:50.200154066 CET	60922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:50.201149940 CET	60924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:50.204958916 CET	839	60922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:50.206075907 CET	839	60924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:50.206262112 CET	60924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:50.206475019 CET	60924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:50.211287022 CET	839	60924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.001280069 CET	839	60924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.001717091 CET	60924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.069962978 CET	839	60924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.070261955 CET	60924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.071234941 CET	60926	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.075143099 CET	839	60924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.075982094 CET	839	60926	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.076194048 CET	60926	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.076296091 CET	60926	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.081003904 CET	839	60926	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.812112093 CET	839	60926	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.812433958 CET	60926	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.943627119 CET	839	60926	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.943981886 CET	60926	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.945513010 CET	60928	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.948689938 CET	839	60926	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.950319052 CET	839	60928	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:51.950551987 CET	60928	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.950797081 CET	60928	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:51.955684900 CET	839	60928	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:52.703974009 CET	839	60928	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:52.704272985 CET	60928	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:52.830638885 CET	839	60928	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:52.831135035 CET	60928	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:52.832333088 CET	60930	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:52.836082935 CET	839	60928	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:52.837259054 CET	839	60930	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:52.837604046 CET	60930	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:52.837699890 CET	60930	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:52.842638969 CET	839	60930	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:53.576005936 CET	839	60930	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:53.576358080 CET	60930	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:53.701332092 CET	839	60930	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:53.701688051 CET	60930	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:53.702542067 CET	60932	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:53.706743956 CET	839	60930	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:53.707583904 CET	839	60932	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:53.707735062 CET	60932	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:53.707791090 CET	60932	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:53.712599039 CET	839	60932	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:54.437211037 CET	839	60932	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:54.437772989 CET	60932	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:54.564860106 CET	839	60932	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:54.565041065 CET	60932	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:54.565720081 CET	60934	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:54.570729017 CET	839	60932	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:54.571213961 CET	839	60934	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:54.571329117 CET	60934	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:54.571355104 CET	60934	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:54.577151060 CET	839	60934	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:55.305409908 CET	839	60934	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:55.305771112 CET	60934	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:55.432841063 CET	839	60934	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:55.433049917 CET	60934	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:55.433873892 CET	60936	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:55.438704967 CET	839	60934	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:55.439491034 CET	839	60936	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:55.439575911 CET	60936	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:55.439660072 CET	60936	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:55.445285082 CET	839	60936	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:56.173535109 CET	839	60936	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:56.174045086 CET	60936	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:56.299869061 CET	839	60936	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:56.300323009 CET	60936	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:56.301273108 CET	60938	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:56.305263042 CET	839	60936	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:56.306088924 CET	839	60938	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:56.306296110 CET	60938	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:56.306296110 CET	60938	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:56.311332941 CET	839	60938	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.060903072 CET	839	60938	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.061168909 CET	60938	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:57.188591003 CET	839	60938	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.188793898 CET	60938	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:57.189527988 CET	60940	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:57.193728924 CET	839	60938	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.194578886 CET	839	60940	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.194858074 CET	60940	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:57.194858074 CET	60940	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:57.199781895 CET	839	60940	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.919961929 CET	839	60940	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:57.920403004 CET	60940	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.048157930 CET	839	60940	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.048427105 CET	60940	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.049228907 CET	60942	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.053388119 CET	839	60940	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.054047108 CET	839	60942	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.054130077 CET	60942	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.054193020 CET	60942	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.058964968 CET	839	60942	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.782233953 CET	839	60942	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.782829046 CET	60942	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.909266949 CET	839	60942	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.909687042 CET	60942	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.910768032 CET	60944	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.914563894 CET	839	60942	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.915618896 CET	839	60944	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:58.915694952 CET	60944	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.915762901 CET	60944	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:58.920564890 CET	839	60944	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:59.653172016 CET	839	60944	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:59.653513908 CET	60944	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:59.781300068 CET	839	60944	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:59.781857014 CET	60944	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:59.783902884 CET	60946	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:59.786751032 CET	839	60944	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:59.788794041 CET	839	60946	185.78.76.132	192.168.2.13
Nov 13, 2024 13:09:59.788916111 CET	60946	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:59.789108992 CET	60946	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:09:59.793862104 CET	839	60946	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:00.522015095 CET	839	60946	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:00.522397995 CET	60946	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:00.655975103 CET	839	60946	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:00.656374931 CET	60946	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:00.658520937 CET	60948	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:00.661243916 CET	839	60946	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:00.663520098 CET	839	60948	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:00.663608074 CET	60948	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:00.663674116 CET	60948	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:00.668569088 CET	839	60948	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:01.407844067 CET	839	60948	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:01.408334017 CET	60948	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:01.534961939 CET	839	60948	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:01.535429955 CET	60948	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:01.537036896 CET	60950	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:01.540309906 CET	839	60948	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:01.542076111 CET	839	60950	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:01.542310953 CET	60950	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:01.542491913 CET	60950	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:01.548101902 CET	839	60950	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:02.278163910 CET	839	60950	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:02.278388023 CET	60950	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:02.405103922 CET	839	60950	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:02.405284882 CET	60950	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:02.406167984 CET	60952	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:02.410316944 CET	839	60950	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:02.411035061 CET	839	60952	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:02.411113977 CET	60952	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:02.411190987 CET	60952	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:02.415946960 CET	839	60952	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:03.144217014 CET	839	60952	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:03.144575119 CET	60952	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:03.277002096 CET	839	60952	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:03.277508974 CET	60952	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:03.278709888 CET	60954	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:03.284373999 CET	839	60952	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:03.284842968 CET	839	60954	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:03.284936905 CET	60954	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:03.285155058 CET	60954	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:03.291687012 CET	839	60954	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.023284912 CET	839	60954	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.023811102 CET	60954	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:04.150892973 CET	839	60954	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.151310921 CET	60954	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:04.152605057 CET	60956	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:04.156399012 CET	839	60954	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.157466888 CET	839	60956	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.157568932 CET	60956	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:04.157847881 CET	60956	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:04.162657022 CET	839	60956	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.882927895 CET	839	60956	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:04.883261919 CET	60956	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.011229992 CET	839	60956	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.011702061 CET	60956	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.012506962 CET	60958	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.016751051 CET	839	60956	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.017467976 CET	839	60958	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.017570972 CET	60958	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.017631054 CET	60958	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.022449017 CET	839	60958	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.748250008 CET	839	60958	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.748440027 CET	60958	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.875756979 CET	839	60958	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.876075029 CET	60958	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.876672983 CET	60960	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.881290913 CET	839	60958	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.881649971 CET	839	60960	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:05.881840944 CET	60960	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.881841898 CET	60960	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:05.886828899 CET	839	60960	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:06.619081974 CET	839	60960	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:06.619314909 CET	60960	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:06.745807886 CET	839	60960	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:06.746090889 CET	60960	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:06.746654034 CET	60962	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:06.751451015 CET	839	60960	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:06.754801989 CET	839	60962	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:06.754925013 CET	60962	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:06.755059958 CET	60962	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:06.762866974 CET	839	60962	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:07.482714891 CET	839	60962	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:07.483419895 CET	60962	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:07.609261990 CET	839	60962	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:07.609875917 CET	60962	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:07.611936092 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:07.614854097 CET	839	60962	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:07.616904020 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:07.617100954 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:07.617288113 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:07.622162104 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.196878910 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.197098970 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.197130919 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.197127104 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.197237015 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.197261095 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.197885036 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.197930098 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.198345900 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.198396921 CET	60964	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.198462009 CET	60966	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.202435970 CET	839	60964	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.206969023 CET	839	60966	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.207050085 CET	60966	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.207104921 CET	60966	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:09.211999893 CET	839	60966	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.959055901 CET	839	60966	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:09.959363937 CET	60966	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.086821079 CET	839	60966	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.087353945 CET	60966	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.088134050 CET	60968	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.092433929 CET	839	60966	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.095642090 CET	839	60968	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.095740080 CET	60968	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.095807076 CET	60968	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.101526976 CET	839	60968	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.829370975 CET	839	60968	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.829732895 CET	60968	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.956573009 CET	839	60968	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.956811905 CET	60968	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.957815886 CET	60970	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.961733103 CET	839	60968	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.962814093 CET	839	60970	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:10.962886095 CET	60970	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.962939978 CET	60970	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:10.968127966 CET	839	60970	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:11.710585117 CET	839	60970	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:11.710911036 CET	60970	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:11.837241888 CET	839	60970	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:11.837371111 CET	60970	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:11.838131905 CET	60972	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:11.842528105 CET	839	60970	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:11.843339920 CET	839	60972	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:11.843477011 CET	60972	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:11.843521118 CET	60972	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:11.848407984 CET	839	60972	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:12.597362041 CET	839	60972	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:12.597644091 CET	60972	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:12.729630947 CET	839	60972	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:12.729860067 CET	60972	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:12.730657101 CET	60974	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:12.735194921 CET	839	60972	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:12.735551119 CET	839	60974	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:12.735630989 CET	60974	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:12.735728979 CET	60974	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:12.740852118 CET	839	60974	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:13.738789082 CET	839	60974	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:13.738857985 CET	839	60974	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:13.738980055 CET	60974	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:13.739155054 CET	60974	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:13.739937067 CET	60976	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:13.743942022 CET	839	60974	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:13.744801998 CET	839	60976	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:13.744935989 CET	60976	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:13.744988918 CET	60976	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:13.749859095 CET	839	60976	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:14.502803087 CET	839	60976	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:14.503004074 CET	60976	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:14.627268076 CET	839	60976	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:14.627517939 CET	60976	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:14.628228903 CET	60978	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:14.632379055 CET	839	60976	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:14.633096933 CET	839	60978	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:14.633210897 CET	60978	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:14.633279085 CET	60978	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:14.638149977 CET	839	60978	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:15.369961023 CET	839	60978	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:15.370167971 CET	60978	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:15.496573925 CET	839	60978	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:15.496818066 CET	60978	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:15.497474909 CET	60980	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:15.501802921 CET	839	60978	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:15.502422094 CET	839	60980	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:15.502487898 CET	60980	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:15.502526999 CET	60980	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:15.507349968 CET	839	60980	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:16.261374950 CET	839	60980	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:16.261799097 CET	60980	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:16.388858080 CET	839	60980	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:16.389035940 CET	60980	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:16.389688015 CET	60982	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:16.394056082 CET	839	60980	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:16.394546032 CET	839	60982	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:16.394675016 CET	60982	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:16.394695997 CET	60982	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:16.399493933 CET	839	60982	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:17.131428957 CET	839	60982	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:17.131684065 CET	60982	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:17.258440018 CET	839	60982	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:17.258693933 CET	60982	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:17.259372950 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:17.263597965 CET	839	60982	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:17.264277935 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:17.264329910 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:17.264374971 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:17.269295931 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.794572115 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.794729948 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.794749022 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.794912100 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.794929981 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.794980049 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.794991016 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.795084000 CET	60984	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.795769930 CET	60986	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.804414988 CET	839	60984	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.804445028 CET	839	60986	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:18.804506063 CET	60986	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.804541111 CET	60986	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:18.809313059 CET	839	60986	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:19.553529024 CET	839	60986	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:19.553690910 CET	60986	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:19.668498993 CET	839	60986	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:19.668665886 CET	60986	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:19.669306993 CET	60988	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:19.673679113 CET	839	60986	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:19.674259901 CET	839	60988	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:19.674357891 CET	60988	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:19.674416065 CET	60988	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:19.679395914 CET	839	60988	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:20.418137074 CET	839	60988	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:20.418376923 CET	60988	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:20.550451994 CET	839	60988	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:20.550632954 CET	60988	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:20.551606894 CET	60990	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:20.555572033 CET	839	60988	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:20.556478024 CET	839	60990	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:20.556567907 CET	60990	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:20.556587934 CET	60990	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:20.561662912 CET	839	60990	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:21.292684078 CET	839	60990	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:21.292884111 CET	60990	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:21.419831038 CET	839	60990	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:21.420161963 CET	60990	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:21.420742035 CET	60992	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:21.425046921 CET	839	60990	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:21.425579071 CET	839	60992	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:21.425646067 CET	60992	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:21.425692081 CET	60992	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:21.430440903 CET	839	60992	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:22.152978897 CET	839	60992	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:22.153244019 CET	60992	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:22.280348063 CET	839	60992	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:22.280767918 CET	60992	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:22.281342983 CET	60994	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:22.286381006 CET	839	60992	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:22.286669970 CET	839	60994	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:22.286770105 CET	60994	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:22.286827087 CET	60994	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:22.293212891 CET	839	60994	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.037077904 CET	839	60994	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.037499905 CET	60994	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:23.167965889 CET	839	60994	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.168432951 CET	60994	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:23.169635057 CET	60996	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:23.173418045 CET	839	60994	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.174746990 CET	839	60996	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.174851894 CET	60996	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:23.174900055 CET	60996	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:23.179788113 CET	839	60996	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.910955906 CET	839	60996	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:23.911310911 CET	60996	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.042129040 CET	839	60996	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.042592049 CET	60996	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.043174982 CET	60998	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.047458887 CET	839	60996	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.047991991 CET	839	60998	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.048074007 CET	60998	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.048099995 CET	60998	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.053103924 CET	839	60998	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.775850058 CET	839	60998	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.776176929 CET	60998	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.903143883 CET	839	60998	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.903496981 CET	60998	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.904387951 CET	32768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.908349991 CET	839	60998	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.909189939 CET	839	32768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:24.909240007 CET	32768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.909266949 CET	32768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:24.914062023 CET	839	32768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:25.636122942 CET	839	32768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:25.636554003 CET	32768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:25.762831926 CET	839	32768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:25.763076067 CET	32768	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:25.764069080 CET	32770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:25.767863989 CET	839	32768	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:25.769121885 CET	839	32770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:25.769210100 CET	32770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:25.769244909 CET	32770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:25.773979902 CET	839	32770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:26.506700039 CET	839	32770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:26.506917000 CET	32770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:26.634865046 CET	839	32770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:26.635086060 CET	32770	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:26.635628939 CET	32772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:26.639923096 CET	839	32770	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:26.640558004 CET	839	32772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:26.640630007 CET	32772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:26.640685081 CET	32772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:26.645488024 CET	839	32772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:27.367986917 CET	839	32772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:27.368246078 CET	32772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:27.495640039 CET	839	32772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:27.495872974 CET	32772	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:27.496669054 CET	32774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:27.501419067 CET	839	32772	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:27.502791882 CET	839	32774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:27.502871037 CET	32774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:27.502954006 CET	32774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:27.507863045 CET	839	32774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:28.238033056 CET	839	32774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:28.238519907 CET	32774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:28.365803003 CET	839	32774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:28.366152048 CET	32774	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:28.366909027 CET	32776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:28.372066975 CET	839	32774	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:28.372188091 CET	839	32776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:28.372267962 CET	32776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:28.372360945 CET	32776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:28.377325058 CET	839	32776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.109704018 CET	839	32776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.109986067 CET	32776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:29.237075090 CET	839	32776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.237462997 CET	32776	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:29.238548994 CET	32778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:29.242381096 CET	839	32776	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.243535995 CET	839	32778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.243655920 CET	32778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:29.243742943 CET	32778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:29.248702049 CET	839	32778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.976686954 CET	839	32778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:29.976927042 CET	32778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:30.101341009 CET	839	32778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:30.101660967 CET	32778	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:30.102480888 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:30.106561899 CET	839	32778	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:30.107352018 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:30.107450962 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:30.107501984 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:30.112579107 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.687701941 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.687863111 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.687885046 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.688144922 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.688144922 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.688234091 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.688256979 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.688286066 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.688714981 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.688780069 CET	32780	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.689096928 CET	32782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.693159103 CET	839	32780	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.697722912 CET	839	32782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:31.697812080 CET	32782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.697889090 CET	32782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:31.702739954 CET	839	32782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:32.425880909 CET	839	32782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:32.426379919 CET	32782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:32.551767111 CET	839	32782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:32.552012920 CET	32782	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:32.552907944 CET	32784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:32.556971073 CET	839	32782	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:32.558037043 CET	839	32784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:32.558109999 CET	32784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:32.558187008 CET	32784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:32.563208103 CET	839	32784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:33.291475058 CET	839	32784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:33.291801929 CET	32784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:33.418821096 CET	839	32784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:33.419161081 CET	32784	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:33.420036077 CET	32786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:33.424042940 CET	839	32784	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:33.424932957 CET	839	32786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:33.425019979 CET	32786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:33.425071955 CET	32786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:33.429939032 CET	839	32786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:34.153209925 CET	839	32786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:34.153481960 CET	32786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:34.280291080 CET	839	32786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:34.280735016 CET	32786	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:34.281382084 CET	32788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:34.285621881 CET	839	32786	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:34.286230087 CET	839	32788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:34.286351919 CET	32788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:34.286406040 CET	32788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:34.291227102 CET	839	32788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.020971060 CET	839	32788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.021205902 CET	32788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:35.147952080 CET	839	32788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.148195982 CET	32788	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:35.149333954 CET	32790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:35.153182983 CET	839	32788	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.154242039 CET	839	32790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.154359102 CET	32790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:35.154396057 CET	32790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:35.159276009 CET	839	32790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.884927034 CET	839	32790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:35.885237932 CET	32790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.014005899 CET	839	32790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.014322996 CET	32790	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.015388966 CET	32792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.019239902 CET	839	32790	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.020256042 CET	839	32792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.020320892 CET	32792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.020361900 CET	32792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.025260925 CET	839	32792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.754472971 CET	839	32792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.754729986 CET	32792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.883824110 CET	839	32792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.884119987 CET	32792	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.885027885 CET	32794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.889056921 CET	839	32792	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.889853954 CET	839	32794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:36.889991045 CET	32794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.890044928 CET	32794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:36.895256042 CET	839	32794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:37.620919943 CET	839	32794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:37.621253014 CET	32794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:37.749375105 CET	839	32794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:37.749692917 CET	32794	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:37.750619888 CET	32796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:37.754592896 CET	839	32794	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:37.755505085 CET	839	32796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:37.755582094 CET	32796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:37.755636930 CET	32796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:37.760407925 CET	839	32796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:38.486567020 CET	839	32796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:38.486923933 CET	32796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:38.617739916 CET	839	32796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:38.618063927 CET	32796	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:38.618973017 CET	32798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:38.623051882 CET	839	32796	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:38.623873949 CET	839	32798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:38.624025106 CET	32798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:38.624075890 CET	32798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:38.628907919 CET	839	32798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:39.352669954 CET	839	32798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:39.352932930 CET	32798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:39.480520010 CET	839	32798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:39.480963945 CET	32798	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:39.482306004 CET	32800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:39.486227036 CET	839	32798	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:39.487293005 CET	839	32800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:39.487377882 CET	32800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:39.487451077 CET	32800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:39.492274046 CET	839	32800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:40.214910030 CET	839	32800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:40.215116024 CET	32800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:40.342520952 CET	839	32800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:40.342711926 CET	32800	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:40.343744993 CET	32802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:40.347719908 CET	839	32800	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:40.348731041 CET	839	32802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:40.348855019 CET	32802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:40.348855019 CET	32802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:40.353693962 CET	839	32802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.072519064 CET	839	32802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.072715044 CET	32802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:41.200300932 CET	839	32802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.200685978 CET	32802	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:41.201246977 CET	32804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:41.205642939 CET	839	32802	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.206193924 CET	839	32804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.206355095 CET	32804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:41.206355095 CET	32804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:41.211349964 CET	839	32804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.934246063 CET	839	32804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:41.934426069 CET	32804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.061075926 CET	839	32804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.061371088 CET	32804	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.062719107 CET	32806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.066150904 CET	839	32804	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.067507982 CET	839	32806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.067593098 CET	32806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.068487883 CET	32806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.073227882 CET	839	32806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.803705931 CET	839	32806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.804109097 CET	32806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.922522068 CET	839	32806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.922799110 CET	32806	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.923605919 CET	32808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.927633047 CET	839	32806	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.928389072 CET	839	32808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:42.928459883 CET	32808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.928504944 CET	32808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:42.933537006 CET	839	32808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:43.663196087 CET	839	32808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:43.663351059 CET	32808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:43.789830923 CET	839	32808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:43.790604115 CET	32808	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:43.790604115 CET	32810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:43.795497894 CET	839	32808	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:43.795548916 CET	839	32810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:43.795640945 CET	32810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:43.795640945 CET	32810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:43.800523996 CET	839	32810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:44.528589964 CET	839	32810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:44.528655052 CET	32810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:44.655602932 CET	839	32810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:44.655813932 CET	32810	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:44.659969091 CET	32812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:44.661190987 CET	839	32810	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:44.665227890 CET	839	32812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:44.665317059 CET	32812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:44.665317059 CET	32812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:44.670236111 CET	839	32812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:45.394917011 CET	839	32812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:45.394974947 CET	32812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:45.522114992 CET	839	32812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:45.522205114 CET	32812	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:45.522651911 CET	32814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:45.527051926 CET	839	32812	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:45.527527094 CET	839	32814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:45.527618885 CET	32814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:45.527618885 CET	32814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:45.532444000 CET	839	32814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:46.263354063 CET	839	32814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:46.264772892 CET	32814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:46.390947104 CET	839	32814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:46.391103983 CET	32814	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:46.392095089 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:46.396163940 CET	839	32814	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:46.397011042 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:46.397074938 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:46.397198915 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:46.401983023 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.143218994 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.143460989 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.496968985 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.497127056 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.497483969 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.497524977 CET	32816	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.497699022 CET	32818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.502052069 CET	839	32816	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.502665043 CET	839	32818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:47.502758026 CET	32818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.502758026 CET	32818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:47.507915020 CET	839	32818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:48.232994080 CET	839	32818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:48.233304024 CET	32818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:48.360081911 CET	839	32818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:48.360296011 CET	32818	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:48.360662937 CET	32820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:48.365555048 CET	839	32818	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:48.366190910 CET	839	32820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:48.366250038 CET	32820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:48.366286039 CET	32820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:48.371349096 CET	839	32820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.108515978 CET	839	32820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.108830929 CET	32820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:49.235441923 CET	839	32820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.235719919 CET	32820	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:49.236316919 CET	32822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:49.240677118 CET	839	32820	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.241178989 CET	839	32822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.241246939 CET	32822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:49.241280079 CET	32822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:49.246155024 CET	839	32822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.972551107 CET	839	32822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:49.972831011 CET	32822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.100626945 CET	839	32822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.101021051 CET	32822	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.101454973 CET	32824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.106065989 CET	839	32822	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.106292009 CET	839	32824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.106332064 CET	32824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.106357098 CET	32824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.111182928 CET	839	32824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.837061882 CET	839	32824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.837205887 CET	32824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.964674950 CET	839	32824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.964890003 CET	32824	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.965307951 CET	32826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.969863892 CET	839	32824	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.970151901 CET	839	32826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:50.970208883 CET	32826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.970253944 CET	32826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:50.975121021 CET	839	32826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:51.697820902 CET	839	32826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:51.697989941 CET	32826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:51.825288057 CET	839	32826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:51.825638056 CET	32826	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:51.826296091 CET	32828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:51.831964016 CET	839	32826	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:51.832628965 CET	839	32828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:51.832688093 CET	32828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:51.832716942 CET	32828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:51.837630987 CET	839	32828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:52.586402893 CET	839	32828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:52.586627007 CET	32828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:52.713476896 CET	839	32828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:52.713788033 CET	32828	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:52.714261055 CET	32830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:52.718832016 CET	839	32828	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:52.719114065 CET	839	32830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:52.719177961 CET	32830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:52.719209909 CET	32830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:52.724067926 CET	839	32830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:53.458796024 CET	839	32830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:53.459022999 CET	32830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:53.585959911 CET	839	32830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:53.586144924 CET	32830	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:53.586785078 CET	32832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:53.591033936 CET	839	32830	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:53.591633081 CET	839	32832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:53.591677904 CET	32832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:53.591695070 CET	32832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:53.596462011 CET	839	32832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:54.335047007 CET	839	32832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:54.335306883 CET	32832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:54.466828108 CET	839	32832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:54.467024088 CET	32832	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:54.467502117 CET	32834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:54.471919060 CET	839	32832	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:54.472486973 CET	839	32834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:54.472573996 CET	32834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:54.472615957 CET	32834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:54.477466106 CET	839	32834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:55.199918032 CET	839	32834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:55.200154066 CET	32834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:55.326423883 CET	839	32834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:55.326807022 CET	32834	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:55.327159882 CET	32836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:55.331909895 CET	839	32834	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:55.332073927 CET	839	32836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:55.332159996 CET	32836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:55.332191944 CET	32836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:55.337127924 CET	839	32836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.066416979 CET	839	32836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.066766977 CET	32836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:56.193501949 CET	839	32836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.193762064 CET	32836	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:56.194294930 CET	32838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:56.198642015 CET	839	32836	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.199332952 CET	839	32838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.199389935 CET	32838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:56.199417114 CET	32838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:56.204210997 CET	839	32838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.929049015 CET	839	32838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:56.929362059 CET	32838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.055437088 CET	839	32838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.055773020 CET	32838	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.056946993 CET	32840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.060991049 CET	839	32838	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.062333107 CET	839	32840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.062397003 CET	32840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.062431097 CET	32840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.067878008 CET	839	32840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.807135105 CET	839	32840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.807439089 CET	32840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.923352957 CET	839	32840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.923722982 CET	32840	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.924139977 CET	32842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.928636074 CET	839	32840	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.928941965 CET	839	32842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:57.929016113 CET	32842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.929039955 CET	32842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:57.934005022 CET	839	32842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:58.659158945 CET	839	32842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:58.659543037 CET	32842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:58.786278009 CET	839	32842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:58.786623955 CET	32842	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:58.787491083 CET	32844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:58.791759968 CET	839	32842	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:58.792351961 CET	839	32844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:58.792432070 CET	32844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:58.792498112 CET	32844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:58.797327042 CET	839	32844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:59.531548023 CET	839	32844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:59.531874895 CET	32844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:59.658763885 CET	839	32844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:59.659185886 CET	32844	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:59.660840034 CET	32846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:59.665127039 CET	839	32844	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:59.665843010 CET	839	32846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:10:59.665981054 CET	32846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:59.666039944 CET	32846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:10:59.670942068 CET	839	32846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:00.403990030 CET	839	32846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:00.404361963 CET	32846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:00.535765886 CET	839	32846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:00.536202908 CET	32846	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:00.537087917 CET	32848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:00.541093111 CET	839	32846	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:00.542206049 CET	839	32848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:00.542268038 CET	32848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:00.542347908 CET	32848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:00.547684908 CET	839	32848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:01.302851915 CET	839	32848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:01.303071022 CET	32848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:01.435570002 CET	839	32848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:01.435899019 CET	32848	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:01.436631918 CET	32850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:01.440767050 CET	839	32848	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:01.441901922 CET	839	32850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:01.441987991 CET	32850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:01.442050934 CET	32850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:01.446846962 CET	839	32850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:02.199522972 CET	839	32850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:02.199882984 CET	32850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:02.331305981 CET	839	32850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:02.331733942 CET	32850	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:02.332631111 CET	32852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:02.336746931 CET	839	32850	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:02.337565899 CET	839	32852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:02.337693930 CET	32852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:02.337738037 CET	32852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:02.343039989 CET	839	32852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.065079927 CET	839	32852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.065469980 CET	32852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:03.192284107 CET	839	32852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.192662001 CET	32852	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:03.193350077 CET	32854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:03.197531939 CET	839	32852	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.198353052 CET	839	32854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.198431969 CET	32854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:03.198493958 CET	32854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:03.203399897 CET	839	32854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.928039074 CET	839	32854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:03.928394079 CET	32854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.061106920 CET	839	32854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.061371088 CET	32854	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.061914921 CET	32856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.066196918 CET	839	32854	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.066752911 CET	839	32856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.066812992 CET	32856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.066868067 CET	32856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.071763039 CET	839	32856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.813324928 CET	839	32856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.813792944 CET	32856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.921928883 CET	839	32856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.922441959 CET	32856	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.923305035 CET	32858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.927393913 CET	839	32856	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.928339958 CET	839	32858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:04.928438902 CET	32858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.928493977 CET	32858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:04.933345079 CET	839	32858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:05.666634083 CET	839	32858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:05.667054892 CET	32858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:05.794352055 CET	839	32858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:05.794814110 CET	32858	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:05.795726061 CET	32860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:05.799823999 CET	839	32858	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:05.800738096 CET	839	32860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:05.800847054 CET	32860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:05.800847054 CET	32860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:05.805804014 CET	839	32860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:06.543891907 CET	839	32860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:06.544205904 CET	32860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:06.677023888 CET	839	32860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:06.677333117 CET	32860	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:06.677881956 CET	32862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:06.682178974 CET	839	32860	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:06.682827950 CET	839	32862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:06.682940960 CET	32862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:06.682957888 CET	32862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:06.687803030 CET	839	32862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:07.422782898 CET	839	32862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:07.423130989 CET	32862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:07.550743103 CET	839	32862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:07.551012039 CET	32862	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:07.551668882 CET	32864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:07.557813883 CET	839	32862	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:07.557847023 CET	839	32864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:07.557962894 CET	32864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:07.558048964 CET	32864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:07.564105034 CET	839	32864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:08.304074049 CET	839	32864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:08.304259062 CET	32864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:08.431725025 CET	839	32864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:08.431823015 CET	32864	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:08.432306051 CET	32866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:08.437108040 CET	839	32864	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:08.437123060 CET	839	32866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:08.437172890 CET	32866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:08.437235117 CET	32866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:08.442714930 CET	839	32866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:09.186152935 CET	839	32866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:09.186357975 CET	32866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:09.313910961 CET	839	32866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:09.314277887 CET	32866	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:09.314704895 CET	32868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:09.319602966 CET	839	32866	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:09.319719076 CET	839	32868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:09.319842100 CET	32868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:09.319883108 CET	32868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:09.324805021 CET	839	32868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.048239946 CET	839	32868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.048546076 CET	32868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:10.175765991 CET	839	32868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.175983906 CET	32868	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:10.177067041 CET	32870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:10.181058884 CET	839	32868	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.182205915 CET	839	32870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.182315111 CET	32870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:10.182374001 CET	32870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:10.187350035 CET	839	32870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.912265062 CET	839	32870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:10.912674904 CET	32870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.039633989 CET	839	32870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.039840937 CET	32870	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.040251970 CET	32872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.044933081 CET	839	32870	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.045501947 CET	839	32872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.045561075 CET	32872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.045592070 CET	32872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.051054955 CET	839	32872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.790520906 CET	839	32872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.790695906 CET	32872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.922116995 CET	839	32872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.922324896 CET	32872	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.922811985 CET	32874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.927196980 CET	839	32872	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.927680969 CET	839	32874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:11.927836895 CET	32874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.927876949 CET	32874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:11.932749033 CET	839	32874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:12.655992031 CET	839	32874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:12.656311035 CET	32874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:12.783466101 CET	839	32874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:12.783852100 CET	32874	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:12.784462929 CET	32876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:12.791023970 CET	839	32874	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:12.791349888 CET	839	32876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:12.791407108 CET	32876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:12.791431904 CET	32876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:12.798710108 CET	839	32876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:13.536670923 CET	839	32876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:13.536974907 CET	32876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:13.665015936 CET	839	32876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:13.665288925 CET	32876	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:13.665745974 CET	32878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:13.670196056 CET	839	32876	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:13.670516014 CET	839	32878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:13.670622110 CET	32878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:13.670640945 CET	32878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:13.675478935 CET	839	32878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:14.436892033 CET	839	32878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:14.437124968 CET	32878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:14.564532042 CET	839	32878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:14.564821959 CET	32878	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:14.565620899 CET	32880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:14.569818020 CET	839	32878	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:14.570631981 CET	839	32880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:14.570703983 CET	32880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:14.570806980 CET	32880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:14.575603962 CET	839	32880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:15.301506042 CET	839	32880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:15.301774025 CET	32880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:15.428402901 CET	839	32880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:15.428674936 CET	32880	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:15.429483891 CET	32882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:15.433660030 CET	839	32880	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:15.434371948 CET	839	32882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:15.434442997 CET	32882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:15.434477091 CET	32882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:15.439373016 CET	839	32882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:16.159436941 CET	839	32882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:16.159674883 CET	32882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:16.285506964 CET	839	32882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:16.285698891 CET	32882	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:16.286111116 CET	32884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:16.293543100 CET	839	32882	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:16.293557882 CET	839	32884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:16.293669939 CET	32884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:16.293684006 CET	32884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:16.298631907 CET	839	32884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.022722006 CET	839	32884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.023109913 CET	32884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:17.149383068 CET	839	32884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.149635077 CET	32884	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:17.150276899 CET	32886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:17.154582977 CET	839	32884	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.155153990 CET	839	32886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.155209064 CET	32886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:17.155237913 CET	32886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:17.160116911 CET	839	32886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.885062933 CET	839	32886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:17.885360956 CET	32886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.012968063 CET	839	32886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.013237000 CET	32886	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.014027119 CET	32888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.018515110 CET	839	32886	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.019252062 CET	839	32888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.019303083 CET	32888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.019344091 CET	32888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.024343967 CET	839	32888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.747458935 CET	839	32888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.747648001 CET	32888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.874449015 CET	839	32888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.874803066 CET	32888	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.875260115 CET	32890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.879954100 CET	839	32888	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.880143881 CET	839	32890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:18.880218029 CET	32890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.880242109 CET	32890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:18.885129929 CET	839	32890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:19.616949081 CET	839	32890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:19.617139101 CET	32890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:19.748866081 CET	839	32890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:19.749238968 CET	32890	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:19.750133991 CET	32892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:19.754327059 CET	839	32890	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:19.755135059 CET	839	32892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:19.755235910 CET	32892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:19.755278111 CET	32892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:19.760443926 CET	839	32892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:20.490195990 CET	839	32892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:20.490525007 CET	32892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:20.616873980 CET	839	32892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:20.617249012 CET	32892	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:20.618096113 CET	32894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:20.622184992 CET	839	32892	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:20.623016119 CET	839	32894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:20.623089075 CET	32894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:20.623150110 CET	32894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:20.627962112 CET	839	32894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:21.349797964 CET	839	32894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:21.350066900 CET	32894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:21.476505995 CET	839	32894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:21.476854086 CET	32894	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:21.477619886 CET	32896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:21.482218981 CET	839	32894	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:21.482521057 CET	839	32896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:21.482609034 CET	32896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:21.482628107 CET	32896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:21.487504005 CET	839	32896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:22.228740931 CET	839	32896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:22.228938103 CET	32896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:22.361221075 CET	839	32896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:22.361457109 CET	32896	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:22.362118959 CET	32898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:22.366276979 CET	839	32896	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:22.366913080 CET	839	32898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:22.366995096 CET	32898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:22.367043972 CET	32898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:22.371773958 CET	839	32898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.098207951 CET	839	32898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.098453045 CET	32898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:23.225532055 CET	839	32898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.225692987 CET	32898	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:23.226233006 CET	32900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:23.231600046 CET	839	32898	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.232042074 CET	839	32900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.232106924 CET	32900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:23.232132912 CET	32900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:23.238045931 CET	839	32900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.961570024 CET	839	32900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:23.961837053 CET	32900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.089029074 CET	839	32900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.089431047 CET	32900	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.090171099 CET	32902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.094337940 CET	839	32900	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.095082045 CET	839	32902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.095215082 CET	32902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.095263958 CET	32902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.100131035 CET	839	32902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.817504883 CET	839	32902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.817843914 CET	32902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.945247889 CET	839	32902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.945472956 CET	32902	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.946299076 CET	32904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.950268030 CET	839	32902	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.951121092 CET	839	32904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:24.951185942 CET	32904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.951240063 CET	32904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:24.956073046 CET	839	32904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:25.672462940 CET	839	32904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:25.672651052 CET	32904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:25.812050104 CET	839	32904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:25.812172890 CET	32904	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:25.813431978 CET	32906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:25.817064047 CET	839	32904	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:25.818265915 CET	839	32906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:25.818324089 CET	32906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:25.818397999 CET	32906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:25.823126078 CET	839	32906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:26.553555965 CET	839	32906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:26.553720951 CET	32906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:26.681236029 CET	839	32906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:26.681585073 CET	32906	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:26.682569027 CET	32908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:26.686613083 CET	839	32906	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:26.687522888 CET	839	32908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:26.687655926 CET	32908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:26.687705994 CET	32908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:26.692651987 CET	839	32908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:27.421813965 CET	839	32908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:27.421987057 CET	32908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:27.552568913 CET	839	32908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:27.552664995 CET	32908	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:27.553040981 CET	32910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:27.557665110 CET	839	32908	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:27.557825089 CET	839	32910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:27.557900906 CET	32910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:27.557940006 CET	32910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:27.562733889 CET	839	32910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:28.311281919 CET	839	32910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:28.311446905 CET	32910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:28.443028927 CET	839	32910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:28.443144083 CET	32910	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:28.443787098 CET	32912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:28.450516939 CET	839	32910	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:28.450552940 CET	839	32912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:28.450639009 CET	32912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:28.450741053 CET	32912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:28.456773996 CET	839	32912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:29.183042049 CET	839	32912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:29.183331013 CET	32912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:29.314666986 CET	839	32912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:29.314877033 CET	32912	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:29.315570116 CET	32914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:29.322680950 CET	839	32912	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:29.322700024 CET	839	32914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:29.322860956 CET	32914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:29.322892904 CET	32914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:29.328764915 CET	839	32914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.064939976 CET	839	32914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.065105915 CET	32914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:30.191855907 CET	839	32914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.192127943 CET	32914	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:30.192964077 CET	32916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:30.197309971 CET	839	32914	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.198204041 CET	839	32916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.198288918 CET	32916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:30.198309898 CET	32916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:30.203543901 CET	839	32916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.936080933 CET	839	32916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:30.936403036 CET	32916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.061906099 CET	839	32916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.062371016 CET	32916	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.063843012 CET	32918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.067364931 CET	839	32916	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.068772078 CET	839	32918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.068861961 CET	32918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.068913937 CET	32918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.073810101 CET	839	32918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.825683117 CET	839	32918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.825977087 CET	32918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.952323914 CET	839	32918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.952486992 CET	32918	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.953090906 CET	32920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.957479000 CET	839	32918	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.958184004 CET	839	32920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:31.958240986 CET	32920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.958317995 CET	32920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:31.963896990 CET	839	32920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:32.696404934 CET	839	32920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:32.696628094 CET	32920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:32.822545052 CET	839	32920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:32.822729111 CET	32920	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:32.823797941 CET	32922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:32.827691078 CET	839	32920	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:32.828754902 CET	839	32922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:32.828872919 CET	32922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:32.828933954 CET	32922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:32.833767891 CET	839	32922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:33.573342085 CET	839	32922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:33.573503971 CET	32922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:33.705054045 CET	839	32922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:33.705301046 CET	32922	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:33.707736015 CET	32924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:33.710355997 CET	839	32922	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:33.712743044 CET	839	32924	185.78.76.132	192.168.2.13
Nov 13, 2024 13:11:33.712816000 CET	32924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:33.712852955 CET	32924	839	192.168.2.13	185.78.76.132
Nov 13, 2024 13:11:33.717789888 CET	839	32924	185.78.76.132	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 13, 2024 13:10:44.305524111 CET	41173	53	192.168.2.13	1.1.1.1
Nov 13, 2024 13:10:44.305640936 CET	56031	53	192.168.2.13	1.1.1.1
Nov 13, 2024 13:10:44.312944889 CET	53	41173	1.1.1.1	192.168.2.13
Nov 13, 2024 13:10:44.312993050 CET	53	56031	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 13, 2024 13:10:44.305524111 CET	192.168.2.13	1.1.1.1	0xf05f	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Nov 13, 2024 13:10:44.305640936 CET	192.168.2.13	1.1.1.1	0x8536	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 13, 2024 13:10:44.312944889 CET	1.1.1.1	192.168.2.13	0xf05f	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Nov 13, 2024 13:10:44.312944889 CET	1.1.1.1	192.168.2.13	0xf05f	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: x-8.6-.ISIS.elf PID: 5421, Parent PID: 5343

General

Start time (UTC):	12:07:57
Start date (UTC):	13/11/2024
Path:	/tmp/x-8.6-.ISIS.elf
Arguments:	/tmp/x-8.6-.ISIS.elf
File size:	99332 bytes
MD5 hash:	e79e76631968be43cf361b72568fc041

Chronological Activities

Analysis Process: x-8.6-.ISIS.elf PID: 5422, Parent PID: 5421

General

Start time (UTC):	12:07:58
Start date (UTC):	13/11/2024
Path:	/tmp/x-8.6-.ISIS.elf
Arguments:	-
File size:	99332 bytes
MD5 hash:	e79e76631968be43cf361b72568fc041

Chronological Activities

Analysis Process: x-8.6-.ISIS.elf PID: 5423, Parent PID: 5422

General

Start time (UTC):	12:07:58
Start date (UTC):	13/11/2024
Path:	/tmp/x-8.6-.ISIS.elf
Arguments:	-
File size:	99332 bytes
MD5 hash:	e79e76631968be43cf361b72568fc041

Chronological Activities

Analysis Process: dash PID: 5459, Parent PID: 3591

General

Start time (UTC):	12:08:27
Start date (UTC):	13/11/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5459, Parent PID: 3591

General

Start time (UTC):	12:08:27
Start date (UTC):	13/11/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5460, Parent PID: 3591

General

Start time (UTC):	12:08:27
Start date (UTC):	13/11/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5460, Parent PID: 3591

General

Start time (UTC):	12:08:27
Start date (UTC):	13/11/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jLQ8snKy5H /tmp/tmp.bk3XXKFB6A /tmp/tmp.vumxItSrJf
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x-8.6-.ISIS.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: x-8.6-.ISIS.elf PID: 5421, Parent PID: 5343

General

Chronological Activities

Analysis Process: x-8.6-.ISIS.elf PID: 5422, Parent PID: 5421

General

Chronological Activities

Analysis Process: x-8.6-.ISIS.elf PID: 5423, Parent PID: 5422

General

Chronological Activities

Analysis Process: dash PID: 5459, Parent PID: 3591

General

Chronological Activities

Analysis Process: rm PID: 5459, Parent PID: 3591

General

Linux Analysis Report
x-8.6-.ISIS.elf