Edit tour

Linux Analysis Report
x86_64.elf

Overview

General Information

Sample name:	x86_64.elf
Analysis ID:	1574443
MD5:	9fdea899e3896993564ccac8f7dc4ce8
SHA1:	464cdbf7b6a7b199ec65f2d454a7f7634ba05e64
SHA256:	0b3b6d2310ae7631c4ffbb1ee1881cc5fcd595165f7e6148775a6edf9a94b108
Tags:	elfMiraiuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Sample listens on a socket

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574443
Start date and time:	2024-12-13 11:27:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x86_64.elf
Detection:	MAL
Classification:	mal60.linELF@0/0@0/0

Warnings

VT rate limit hit for: x86_64.elf

Runtime Messages

Command:	/tmp/x86_64.elf
PID:	5428
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	listening tun0
Standard Error:

Process Tree

system is lnxubuntu20

x86_64.elf (PID: 5428, Parent: 5353, MD5: 9fdea899e3896993564ccac8f7dc4ce8) Arguments: /tmp/x86_64.elf

x86_64.elf New Fork (PID: 5429, Parent: 5428)

x86_64.elf New Fork (PID: 5430, Parent: 5429)

x86_64.elf New Fork (PID: 5431, Parent: 5429)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x86_64.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xba38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbab0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbac4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbad8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbaec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbba0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x86_64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x797c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x86_64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6bea:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6c4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6d21:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x86_64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x7d5d:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x86_64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x8053:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x86_64.elf	Linux_Trojan_Mirai_564b8eda	unknown	unknown	0x51c2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xba38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbab0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbac4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbad8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbaec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbba0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x797c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6bea:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6c4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6d21:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x7d5d:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x8053:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5431.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Mirai_564b8eda	unknown	unknown	0x51c2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xba38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xba9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbab0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbac4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbad8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbaec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbb8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbba0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbbc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x797c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x6bea:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6c4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x6d21:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x7d5d:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x8053:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5428.1.0000000000400000.000000000040d000.r-x.sdmp	Linux_Trojan_Mirai_564b8eda	unknown	unknown	0x51c2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
Click to see the 7 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: x86_64.elf

ReversingLabs: Detection: 36%

Machine Learning detection for sample

Source: x86_64.elf

Joe Sandbox ML: detected

Source: global traffic

TCP traffic: 192.168.2.13:33290 -> 45.90.96.167:1337

Source: /tmp/x86_64.elf (PID: 5428)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167

System Summary

Malicious sample detected (through community Yara rule)

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_564b8eda Author: unknown

Source: ELF static info symbol of initial sample

.symtab present: no

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5431.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5428.1.0000000000400000.000000000040d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16

Source: classification engine

Classification label: mal60.linELF@0/0@0/0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
x86_64.elf	37%	ReversingLabs	Linux.Backdoor.Mirai
x86_64.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.90.96.167	unknown	Germany		34549	MEER-ASmeerfarbigGmbHCoKGDE	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.90.96.167	arm.elf	Get hash	malicious	Unknown	Browse
	spc.elf	Get hash	malicious	Mirai	Browse
	sh4.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	ppc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MEER-ASmeerfarbigGmbHCoKGDE	arm.elf	Get hash	malicious	Unknown	Browse	45.90.96.167
	spc.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	sh4.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	mips.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	ppc.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm5.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm7.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm6.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	m68k.elf	Get hash	malicious	Unknown	Browse	45.90.96.167
	mpsl.elf	Get hash	malicious	Mirai	Browse	45.90.96.167

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.569373310361935
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x86_64.elf
File size:	62'640 bytes
MD5:	9fdea899e3896993564ccac8f7dc4ce8
SHA1:	464cdbf7b6a7b199ec65f2d454a7f7634ba05e64
SHA256:	0b3b6d2310ae7631c4ffbb1ee1881cc5fcd595165f7e6148775a6edf9a94b108
SHA512:	58c0af3f6113f2d68088ab45e78da04efa4ee6f389671dc52e953e3453f3c2a466195465bad5ffdc9b463639a0f59967aa3f79be6d548c5cd3a44ca1f8032e1f
SSDEEP:	1536:q6KB5VmtO8OkJnoJkVcd5EPf7ETCQv30Jcwx7:qVB5VmttOkJoJkid5EH7EeiO7x7
TLSH:	5553E617E64281FCC64AC1341A5ABA3EDC2374FC2329F6E67BE0EB316956E214D1ED44
File Content Preview:	.ELF..............>.......@.....@.......0...........@.8...@.......................@.......@....................... .............x.......x.`.....x.`.....x........=........ .....Q.td....................................................H...._....:...H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	62000
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0xb462	0x0	0x6	AX	16
.fini	PROGBITS	0x40b562	0xb562	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x40b570	0xb570	0x1518	0x0	0x2	A	16
.ctors	PROGBITS	0x60ed78	0xed78	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x60ed88	0xed88	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x60eda0	0xeda0	0x450	0x0	0x3	WA	32
.bss	NOBITS	0x60f200	0xf1f0	0x3888	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0xf1f0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xca88	0xca88	6.2467	0x5	R E	0x200000	.init .text .fini .rodata
LOAD	0xed78	0x60ed78	0x60ed78	0x478	0x3d10	2.9092	0x6	RW	0x200000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 11:27:55.314667940 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:55.435266018 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:55.435393095 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:55.435489893 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:55.555464029 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:55.555546999 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:55.675430059 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:56.776297092 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:56.776439905 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:56.776439905 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:56.778440952 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:56.898268938 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:56.898410082 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:56.898410082 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:57.018464088 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:57.018553019 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:57.138464928 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:58.168265104 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:58.168334961 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.168399096 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.169303894 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.289350033 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:58.289443016 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.289479971 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.409456968 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:58.409538984 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:58.531256914 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:59.551088095 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:59.551151991 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.551186085 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.551577091 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.671415091 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:59.671529055 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.671529055 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.792196035 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 11:27:59.792289972 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:27:59.912527084 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:00.941867113 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:00.941987038 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:00.941987038 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:00.943882942 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:01.063659906 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:01.063733101 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:01.063781977 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:01.183710098 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:01.183873892 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:01.304786921 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:02.328973055 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:02.329035997 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.329068899 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.329535007 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.449939013 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:02.450007915 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.450040102 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.570285082 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:02.570348978 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:02.690268993 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:03.750726938 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:03.750790119 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:03.750816107 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:03.751216888 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:03.871505022 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:03.871615887 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:03.871644020 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:03.991638899 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:03.991728067 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:04.113187075 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:05.130991936 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:05.131082058 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.131113052 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.131504059 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.251898050 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:05.251981974 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.251981974 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.371926069 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:05.372054100 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:05.492041111 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:06.511782885 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:06.511863947 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.511893034 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.512255907 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.631994963 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:06.632067919 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.632086039 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.752126932 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:06.752202034 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:06.872603893 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:07.898597956 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:07.898704052 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:07.898750067 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:07.899172068 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:08.018956900 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:08.019042015 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:08.019083977 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:08.139194965 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:08.139286041 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:08.259306908 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:09.319744110 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:09.319875956 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.319875956 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.320399046 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.440290928 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:09.440376997 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.440422058 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.560436964 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:09.560508966 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:09.680373907 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:10.701560020 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:10.701643944 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:10.701934099 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:10.702199936 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:10.822211981 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:10.822336912 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:10.822338104 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:10.943454027 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:10.943573952 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:11.064393044 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:12.084026098 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:12.084105015 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.084147930 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.084713936 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.206559896 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:12.206687927 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.206688881 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.326699972 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:12.326783895 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:12.447401047 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:13.467147112 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:13.467238903 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.467330933 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.467716932 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.587527990 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:13.587630987 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.587687969 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.707494974 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:13.707567930 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:13.827428102 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:14.848861933 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:14.848963976 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:14.849014997 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:14.849328995 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:14.969810963 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:14.969909906 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:14.969960928 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:15.089973927 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:15.090056896 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:15.209944963 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:16.233408928 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:16.233493090 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.233534098 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.233891964 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.353820086 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:16.353926897 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.353966951 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.473818064 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:16.473905087 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:16.594186068 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:17.768203020 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:17.768362999 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:17.768486023 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:17.769229889 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:17.888977051 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:17.889096975 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:17.889142990 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:18.009251118 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:18.009505987 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:18.129611969 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:19.155524015 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:19.155733109 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.155733109 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.156555891 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.276454926 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:19.276619911 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.276851892 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.396722078 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:19.396881104 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:19.516900063 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:20.543767929 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:20.544025898 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.544025898 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.547322989 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.667345047 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:20.667424917 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.669025898 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.788938999 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:20.789308071 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:20.909156084 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:22.024705887 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:22.025129080 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:22.145026922 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:23.027744055 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:23.148003101 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:23.148164988 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:23.148164988 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:23.268148899 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:23.268270969 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:23.388361931 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:24.407252073 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:24.407483101 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.407515049 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.408154964 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.527988911 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:24.528134108 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.528301001 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.648582935 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:24.651329041 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:24.771239042 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:25.832377911 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:25.832611084 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:25.832611084 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:25.833297014 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:25.953551054 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:25.953679085 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:25.953720093 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:26.074187994 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:26.074316025 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:26.194509983 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:27.214027882 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:27.214222908 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.214379072 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.215065002 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.335103989 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:27.335335970 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.335386038 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.455492020 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:27.455693960 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:27.575695038 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:28.628829002 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:28.629491091 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.629491091 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.630882978 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.750921965 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:28.751182079 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.751183033 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.871133089 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:28.871474981 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:28.991262913 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:30.101003885 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:30.101619005 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:30.221493959 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:31.105149031 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:31.225630999 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:31.225811005 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:31.225984097 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:31.347368956 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:31.347812891 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:31.467891932 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:32.530395985 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:32.530745029 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.530802965 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.531599998 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.651639938 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:32.651982069 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.651982069 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.771878958 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:32.772097111 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:32.892103910 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:34.013164997 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:34.013444901 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.013444901 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.013803959 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.133886099 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:34.134068012 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.134171963 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.254275084 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:34.254448891 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:34.374428034 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:35.426803112 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:35.426945925 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.427028894 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.427587032 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.547391891 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:35.547518969 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.547554016 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.667500019 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:35.667640924 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:35.788023949 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:36.847451925 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:36.847604990 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:36.847683907 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:36.848534107 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:36.968483925 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:36.968607903 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:36.968609095 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:37.088861942 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:37.088979959 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:37.208959103 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:38.229011059 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:38.229316950 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.229316950 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.230377913 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.350579977 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:38.350708008 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.350774050 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.470936060 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:38.471044064 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:38.592003107 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:39.655261993 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:39.655606031 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:39.655656099 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:39.656553984 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:39.776479959 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:39.776612043 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:39.776690006 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:39.896620035 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:39.898076057 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:40.019443989 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:41.036777973 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:41.037266016 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.037266016 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.039340019 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.159132004 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:41.159336090 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.160222054 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.280280113 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:41.280580044 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:41.403155088 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:42.524069071 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:42.524297953 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:42.644231081 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:43.525876045 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:43.645869970 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:43.646051884 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:43.646085024 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:43.766530037 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:43.766668081 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:43.886564970 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:44.906618118 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:44.906857014 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:44.906857014 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:44.907612085 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:45.029069901 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:45.029197931 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:45.029246092 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:45.149465084 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:45.149736881 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:45.269851923 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:46.291263103 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:46.291512012 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.291538954 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.292191982 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.412023067 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:46.412173986 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.412277937 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.533058882 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:46.533166885 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:46.654872894 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:47.673703909 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:47.673913956 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:47.673969030 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:47.674652100 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:47.794382095 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:47.794517040 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:47.794589996 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:47.914412022 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:47.914551020 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:48.034684896 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:49.145160913 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:49.145522118 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:49.265531063 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:50.148097992 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:50.268884897 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:50.269117117 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:50.269212008 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:50.389395952 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:50.389605999 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:50.509952068 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:51.543731928 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:51.543864965 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.543943882 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.544451952 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.664578915 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:51.664916039 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.664916039 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.785191059 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:51.785422087 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:51.906835079 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:53.012886047 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:53.013113976 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.013169050 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.013859987 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.133860111 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:53.134016991 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.134057045 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.254991055 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:53.255166054 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:53.375164032 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:54.483335018 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:54.483515978 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.483589888 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.484376907 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.604247093 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:54.604454994 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.604547024 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.724509001 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:54.724793911 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:54.845102072 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:55.864231110 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:55.864392996 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:55.864443064 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:55.865097046 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:55.985186100 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:55.985301971 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:55.985373974 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:56.105340004 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:56.105484962 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:56.225689888 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:57.301816940 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:57.302030087 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.302112103 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.303172112 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.423086882 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:57.423366070 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.423435926 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.543298960 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:57.543529034 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:57.663430929 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:58.683387995 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:58.683552027 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:58.683600903 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:58.684108973 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:58.803936005 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:58.804095984 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:58.804183006 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:58.924966097 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 11:28:58.925088882 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:28:59.045476913 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:00.064781904 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:00.065063000 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.065063953 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.065938950 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.185878992 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:00.186103106 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.186103106 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.306732893 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:00.306931019 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:00.426784992 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:01.447278023 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:01.447525024 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.447525024 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.453275919 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.573591948 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:01.573924065 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.573924065 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.693768024 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:01.693866968 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:01.814120054 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:02.833870888 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:02.834062099 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:02.834152937 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:02.835071087 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:02.954881907 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:02.955480099 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:02.955480099 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:03.075696945 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:03.076947927 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:03.197982073 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:04.273727894 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:04.273952961 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.274117947 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.275482893 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.395653963 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:04.395858049 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.395890951 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.515952110 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:04.516053915 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:04.636091948 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:05.655006886 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:05.655354023 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:05.655405045 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:05.656275034 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:05.776293993 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:05.776637077 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:05.776757956 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:05.896636009 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:05.896847963 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:06.017065048 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:07.040064096 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:07.040211916 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.040256023 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.040719986 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.160603046 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:07.160751104 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.160789967 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.280900955 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:07.281023026 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:07.402416945 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:08.423525095 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:08.423741102 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.423742056 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.425026894 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.544966936 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:08.545109987 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.545109987 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.665107012 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:08.665342093 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:08.785455942 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:09.807712078 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:09.807902098 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:09.807948112 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:09.809194088 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:09.929044008 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:09.929225922 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:09.929263115 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:10.049288034 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:10.049484015 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:10.169287920 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:11.219930887 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:11.220129013 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.220182896 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.220774889 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.340672970 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:11.340852022 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.340881109 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.460773945 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:11.460954905 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:11.580804110 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:12.611088037 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:12.611335039 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.611335039 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.612067938 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.732109070 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:12.732491970 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.732491970 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.852655888 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:12.852930069 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:12.973242998 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:14.010521889 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:14.010850906 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.010961056 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.011650085 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.131759882 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:14.131947994 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.132103920 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.252310038 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:14.252608061 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:14.373068094 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:15.488787889 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:15.489176989 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:15.609364033 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:16.493752003 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:16.614927053 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:16.615258932 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:16.615360975 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:16.735481024 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:16.735878944 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:16.855861902 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:17.875469923 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:17.875801086 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:17.875802040 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:17.876615047 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:17.996426105 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:17.996634960 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:17.996635914 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:18.116514921 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:18.116657972 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:18.236653090 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:19.343913078 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:19.344053030 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.344089985 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.345067978 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.467402935 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:19.467590094 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.467612982 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.588673115 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:19.588857889 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:19.709264994 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:20.739183903 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:20.739511967 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:20.739608049 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:20.740514994 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:20.860892057 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:20.861161947 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:20.861293077 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:20.981240034 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:20.981558084 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:21.102018118 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:22.180257082 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:22.180387020 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.180416107 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.181200027 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.301052094 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:22.301240921 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.301367044 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.421125889 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:22.421297073 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:22.541239977 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:23.560420036 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:23.560606003 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.560653925 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.561700106 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.681642056 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:23.681885004 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.681920052 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.801822901 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:23.802022934 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:23.921818018 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:25.000097990 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:25.000272989 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.000329018 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.001501083 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.121505976 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:25.121824980 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.121879101 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.241688013 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:25.241832018 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:25.362008095 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:26.643054962 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:26.643271923 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:26.763173103 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:27.645860910 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:27.765908003 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:27.766009092 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:27.766088963 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:27.886234999 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:27.886338949 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:28.006294966 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:29.026196957 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:29.026412964 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.026469946 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.027512074 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.147659063 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:29.147803068 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.147840023 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.267736912 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:29.268023968 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:29.387897015 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:30.407409906 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:30.407624006 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.407624006 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.408411980 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.528399944 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:30.528569937 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.528623104 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.648766994 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:30.648972988 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:30.769309998 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.146642923 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.146704912 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.146857977 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.146941900 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.146981001 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.147783995 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.215768099 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.216044903 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.267688990 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.267910957 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.267911911 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.387995958 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:32.388124943 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:32.508858919 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:33.569340944 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:33.569605112 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.569605112 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.571080923 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.691087008 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:33.691364050 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.691421032 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.811547995 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:33.811866045 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:33.932950974 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:34.952503920 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:34.952665091 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:34.952692986 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:34.953285933 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:35.073484898 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:35.073628902 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:35.073690891 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:35.193672895 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:35.193825006 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:35.313796043 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:36.334362984 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:36.334544897 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.334590912 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.335407972 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.455539942 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:36.455738068 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.455739021 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.575882912 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:36.576045036 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:36.695988894 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:37.763559103 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:37.763747931 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:37.763796091 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:37.764472961 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:37.884346008 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:37.884640932 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:37.884640932 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:38.006197929 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:38.006457090 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:38.127240896 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:39.144968033 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:39.145200968 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.145201921 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.145979881 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.267652988 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:39.267837048 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.267990112 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.388082027 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:39.388290882 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:39.510432959 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:40.621715069 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:40.621892929 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.621892929 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.622493029 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.742284060 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:40.742496967 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.742496967 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.863260984 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:40.863440990 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:40.983324051 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:42.003537893 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:42.003711939 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.003712893 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.004332066 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.124929905 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:42.125087023 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.125144958 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.245377064 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:42.245558977 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:42.365438938 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:43.520065069 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:43.520184994 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:43.640064955 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:44.522177935 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:44.642211914 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:44.642385960 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:44.642442942 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:44.762937069 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:44.763102055 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:44.883083105 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:45.976485968 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:45.976893902 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:45.976893902 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:45.977509022 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:46.097588062 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:46.097881079 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:46.097881079 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:46.217911959 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:46.218166113 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:46.338316917 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:47.363843918 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:47.364039898 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.364125967 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.365261078 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.485163927 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:47.485385895 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.485577106 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.605284929 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:47.605407000 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:47.962804079 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:48.744349957 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:48.744605064 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:48.744605064 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:48.745347023 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:48.865370035 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:48.865567923 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:48.865607023 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:48.985723972 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:48.985905886 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:49.106755972 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:50.126673937 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:50.126862049 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.126862049 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.127865076 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.247932911 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:50.248277903 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.248337984 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.368308067 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:50.368539095 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:50.488555908 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:51.571471930 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:51.571633101 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.571634054 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.572585106 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.692682981 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:51.692867994 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.692868948 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.813380003 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:51.813560963 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:51.933847904 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:53.032691956 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:53.032942057 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.033051968 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.033760071 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.153661966 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:53.153863907 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.153944969 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.273988962 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:53.274182081 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:53.394303083 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:54.414346933 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:54.414571047 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.414628029 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.415589094 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.535556078 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:54.535784960 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.535815954 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.655848980 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:54.655987024 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:54.775935888 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:55.795651913 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:55.795846939 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:55.795939922 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:55.796746969 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:55.916723013 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:55.916914940 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:55.916970015 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:56.036900997 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:56.037051916 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:56.157362938 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:57.180018902 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:57.180176020 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.180176020 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.180752039 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.300568104 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:57.300710917 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.300710917 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.420634031 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:57.420723915 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:57.540491104 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:58.563128948 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:58.563321114 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.563380957 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.564086914 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.683995962 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:58.684174061 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.684202909 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.804502010 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:58.804620028 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:58.925101042 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:59.944094896 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 11:29:59.944278955 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:59.944278955 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:29:59.945291996 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:30:00.065349102 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 11:30:00.065460920 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:30:00.065494061 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:30:00.185234070 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 11:30:00.185359001 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 11:30:00.305329084 CET	1337	33456	45.90.96.167	192.168.2.13

System Behavior

Analysis Process: x86_64.elf PID: 5428, Parent PID: 5353

General

Start time (UTC):	10:27:54
Start date (UTC):	13/12/2024
Path:	/tmp/x86_64.elf
Arguments:	/tmp/x86_64.elf
File size:	62640 bytes
MD5 hash:	9fdea899e3896993564ccac8f7dc4ce8

Chronological Activities

Analysis Process: x86_64.elf PID: 5429, Parent PID: 5428

General

Start time (UTC):	10:27:54
Start date (UTC):	13/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	62640 bytes
MD5 hash:	9fdea899e3896993564ccac8f7dc4ce8

Chronological Activities

Analysis Process: x86_64.elf PID: 5430, Parent PID: 5429

General

Start time (UTC):	10:27:54
Start date (UTC):	13/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	62640 bytes
MD5 hash:	9fdea899e3896993564ccac8f7dc4ce8

Chronological Activities

Analysis Process: x86_64.elf PID: 5431, Parent PID: 5429

General

Start time (UTC):	10:27:54
Start date (UTC):	13/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	62640 bytes
MD5 hash:	9fdea899e3896993564ccac8f7dc4ce8

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x86_64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: x86_64.elf PID: 5428, Parent PID: 5353

General

Chronological Activities

Analysis Process: x86_64.elf PID: 5429, Parent PID: 5428

General

Chronological Activities

Analysis Process: x86_64.elf PID: 5430, Parent PID: 5429

General

Chronological Activities

Analysis Process: x86_64.elf PID: 5431, Parent PID: 5429

General

Chronological Activities

Linux Analysis Report
x86_64.elf