Edit tour

Linux Analysis Report
mpsl.elf

Overview

General Information

Sample name:	mpsl.elf
Analysis ID:	1581771
MD5:	64303c316d3552a99dcc6c775861a3ab
SHA1:	eaaf54e1b9c507b1efa1a17d0fc1f154885821ba
SHA256:	2334f9ff33a1a40363409037d38200e7ab05d17e45b0c34d2fa9fdfba0981184
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581771
Start date and time:	2024-12-28 23:42:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mpsl.elf
Detection:	MAL
Classification:	mal56.linELF@0/0@36/0

Warnings

VT rate limit hit for: mpsl.elf

Runtime Messages

Command:	/tmp/mpsl.elf
PID:	5438
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	have onna deez nutz
Standard Error:

Process Tree

system is lnxubuntu20

mpsl.elf (PID: 5438, Parent: 5359, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/mpsl.elf

mpsl.elf New Fork (PID: 5441, Parent: 5438)

mpsl.elf New Fork (PID: 5443, Parent: 5441)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mpsl.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mpsl.elf

ReversingLabs: Detection: 18%

Source: global traffic

TCP traffic: 192.168.2.13:58828 -> 83.222.191.146:33211

Source: /tmp/mpsl.elf (PID: 5438)

Socket: 127.0.0.1:8345

Jump to behavior

Source: global traffic

DNS traffic detected: DNS query: secure-network-rebirthltd.ru

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.linELF@0/0@36/0

Source: /tmp/mpsl.elf (PID: 5438)

Queries kernel information via 'uname':

Jump to behavior

Source: mpsl.elf, 5438.1.00005614ae533000.00005614ae5e2000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: mpsl.elf, 5438.1.00005614ae533000.00005614ae5e2000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/mipsel
Source: mpsl.elf, 5438.1.00007fff378eb000.00007fff3790c000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mpsl.elf
Source: mpsl.elf, 5438.1.00007fff378eb000.00007fff3790c000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mpsl.elf	19%	ReversingLabs	Linux.Backdoor.Mirai
mpsl.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
secure-network-rebirthltd.ru	83.222.191.146	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
83.222.191.146	secure-network-rebirthltd.ru	Bulgaria		43561	NET1-ASBG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
83.222.191.146	dlr.arm6.elf	Get hash	malicious	Gafgyt	Browse	/binaries/arm6
	dlr.mpsl.elf	Get hash	malicious	Gafgyt	Browse	/binaries/mpsl
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	/binaries/arm7
	dlr.mips.elf	Get hash	malicious	Gafgyt	Browse	/binaries/mips

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
secure-network-rebirthltd.ru	mips.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	x86_64.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	mpsl.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm4.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm5.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm7.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	mips.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	x86_64.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm5.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NET1-ASBG	mips.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	x86_64.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.arm6.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.mpsl.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	dlr.mips.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	mpsl.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm4.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm5.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm7.elf	Get hash	malicious	Unknown	Browse	83.222.191.146

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.4318206082813605
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mpsl.elf
File size:	72'088 bytes
MD5:	64303c316d3552a99dcc6c775861a3ab
SHA1:	eaaf54e1b9c507b1efa1a17d0fc1f154885821ba
SHA256:	2334f9ff33a1a40363409037d38200e7ab05d17e45b0c34d2fa9fdfba0981184
SHA512:	5f7d231ea72c53be810585570bebde7246805c225985b00f8147abcc5b282c0849e84552691376b7a6afc2b3926c3b1165bab471f17af3e5c009ffe3aa89386f
SSDEEP:	768:H5llBYymRQidaMqO9GA54CeyLe1Cevh+ExLwLuSuQ3XiNogkD8veTClIvN:HNBnmRQidWO9GADTLgCEh4fpEkD8vb
TLSH:	F363D605BF550FFBDC6FCD374AA9170635CC650A22A43B3A3974D928F64B24B49E38A4
File Content Preview:	.ELF....................`.@.4...h.......4. ...(...............@...@...........................E...E......(..........Q.td...............................<\|..'!......'.......................<X..'!... .........9'.. ........................<(..'!.............9

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	71528
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0xf600	0x0	0x6	AX	16
.fini	PROGBITS	0x40f720	0xf720	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x40f780	0xf780	0x1260	0x0	0x2	A	16
.ctors	PROGBITS	0x451000	0x11000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x451008	0x11008	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x451014	0x11014	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x451020	0x11020	0x300	0x0	0x3	WA	16
.got	PROGBITS	0x451320	0x11320	0x3e4	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x451704	0x11704	0x10	0x0	0x10000003	WAp	4
.bss	NOBITS	0x451720	0x11704	0x2198	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x924	0x11704	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x11704	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x109e0	0x109e0	5.5538	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x11000	0x451000	0x451000	0x704	0x28b8	3.4095	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 28, 2024 23:42:45.234160900 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:45.353678942 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:45.353780985 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:45.354760885 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:45.474185944 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:45.474365950 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:45.593854904 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:46.656156063 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:46.656423092 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:46.656423092 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:47.793987036 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:47.913562059 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:47.913842916 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:47.915072918 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:48.034567118 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:48.034784079 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:48.154388905 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:49.310009956 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:49.310245991 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:49.310276985 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:50.436697960 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:50.556210995 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:50.556365013 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:50.557496071 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:50.676990986 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:50.677092075 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:50.796612024 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:51.856758118 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:51.856939077 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:51.857019901 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:53.100159883 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:53.219660044 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:53.219727993 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:53.220936060 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:53.340368032 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:53.340603113 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:53.460124016 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:54.565947056 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:54.566111088 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:54.566207886 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:55.702357054 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:55.821866035 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:55.822093010 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:55.823127985 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:55.942696095 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:55.943061113 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:56.062521935 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:57.168186903 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:57.168291092 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:57.168391943 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:58.305555105 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:58.425026894 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:58.425257921 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:58.426378012 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:58.545896053 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:58.546027899 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:58.665767908 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:59.771620035 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 28, 2024 23:42:59.771723986 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:42:59.771816015 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:01.015500069 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:01.135199070 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:01.135426044 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:01.137020111 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:01.256499052 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:01.256645918 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:01.376180887 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:02.527477026 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:02.527805090 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:02.527940989 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:03.665821075 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:03.785377979 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:03.785461903 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:03.786875010 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:03.906397104 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:03.906697035 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:04.026737928 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:05.085747957 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:05.085839987 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:05.085869074 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:06.330492973 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:06.450145006 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:06.450320005 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:06.451443911 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:06.571012974 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:06.571063995 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:06.695365906 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:07.798002958 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:07.798110008 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:07.798331022 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:08.365902901 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:08.365917921 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:08.366103888 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:08.366103888 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:08.935959101 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:09.055574894 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:09.055732965 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:09.056848049 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:09.176249981 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:09.176301003 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:09.295859098 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:10.447499990 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:10.447742939 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:10.447742939 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:11.584877014 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:11.704348087 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:11.704431057 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:11.705451965 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:11.824913025 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:11.825099945 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:11.944715023 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:13.050503969 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:13.050688028 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:13.050688028 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:14.187973976 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:14.307504892 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:14.307590008 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:14.308568954 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:14.428039074 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:14.428189039 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:14.547765017 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:15.699908972 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:15.699985027 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:15.700201988 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:17.066955090 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:17.186667919 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:17.186747074 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:17.188107967 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:17.307606936 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:17.307660103 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:17.427164078 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:18.533082008 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:18.533266068 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:18.533266068 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:19.670278072 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:19.789794922 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:19.789961100 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:19.790913105 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:19.910375118 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:19.910487890 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:20.029997110 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:21.136805058 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:21.137166023 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:21.137166023 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:22.274542093 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:22.394131899 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:22.394337893 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:22.395301104 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:22.514898062 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:22.514965057 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:22.634509087 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:23.729476929 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:23.729665041 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:23.729665041 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:24.867244005 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:24.986917973 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:24.986995935 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:24.988204002 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:25.107824087 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:25.107872963 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:25.227332115 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:26.333370924 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:26.333514929 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:26.333610058 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:27.471369982 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:27.591165066 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:27.591473103 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:27.592344999 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:27.711827040 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:27.711911917 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:27.831490040 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:28.945199966 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:28.945503950 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:28.945573092 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:30.083142042 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:30.202763081 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:30.203130007 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:30.204092026 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:30.323582888 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:30.323818922 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:30.443308115 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:31.549496889 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:31.549666882 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:31.549820900 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:32.687093019 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:32.806901932 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:32.807219982 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:32.808518887 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:32.928090096 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:32.928287029 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:33.047940016 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:34.153558016 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:34.153811932 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:34.153811932 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:35.292356968 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:35.412324905 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:35.412537098 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:35.413811922 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:35.533451080 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:35.533543110 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:35.653143883 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:36.759031057 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:36.759191990 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:36.759264946 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:37.884993076 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:38.004543066 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:38.004622936 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:38.005630016 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:38.125201941 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:38.125283957 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:38.245102882 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:39.305179119 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:39.305295944 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:39.305363894 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:40.442704916 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:40.562297106 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:40.562427044 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:40.563643932 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:40.683067083 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:40.683142900 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:40.802637100 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:41.954873085 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:41.955157995 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:41.955303907 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:43.093020916 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:43.212796926 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:43.212878942 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:43.213824987 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:43.333338022 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:43.333415031 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:43.452949047 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:44.580724001 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:44.581018925 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:44.581053019 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:45.718712091 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:45.838291883 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:45.838557959 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:45.840229034 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:45.959851027 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:45.959969997 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:46.079478025 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:47.138585091 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:47.138818026 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:47.138922930 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:48.277579069 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:48.397361994 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:48.397690058 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:48.399046898 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:48.518445015 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:48.518656015 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:48.638160944 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:49.790460110 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:49.790555000 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:49.790649891 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:50.928867102 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:51.048804998 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:51.049058914 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:51.050549030 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:51.169975996 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:51.170090914 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:51.289573908 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:52.349046946 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:52.349328995 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:52.349365950 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:53.486792088 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:53.606359005 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:53.606432915 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:53.607520103 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:53.726984978 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:53.727049112 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:53.846581936 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:54.908071995 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:54.908199072 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:54.908260107 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:56.045171976 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:56.164882898 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:56.165036917 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:56.166160107 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:56.285662889 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:56.285809040 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:56.405301094 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:57.510895967 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:57.511060953 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:57.511250973 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:58.648310900 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:58.767913103 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:58.767986059 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:58.769268036 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:58.889609098 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 28, 2024 23:43:58.889672995 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:43:59.009231091 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:00.161734104 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:00.161859035 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:00.161859035 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:01.299051046 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:01.418642998 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:01.418850899 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:01.419998884 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:01.539458990 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:01.539602041 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:01.659209967 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:02.810554028 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:02.810710907 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:02.810712099 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:03.947649002 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:04.067253113 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:04.067327976 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:04.068099022 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:04.187705994 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:04.187769890 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:04.307431936 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:05.414376020 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:05.414469004 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:05.414494038 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:06.551724911 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:06.671246052 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:06.671406984 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:06.672136068 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:06.791570902 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:06.791721106 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:06.911288023 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:08.063616037 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:08.063685894 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:08.063848019 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:09.201678038 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:09.321167946 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:09.321439028 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:09.322590113 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:09.442043066 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:09.442392111 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:09.561891079 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:10.621339083 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:10.621537924 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:10.621537924 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:11.747277975 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:11.866883039 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:11.867153883 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:11.868326902 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:11.987867117 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:11.988110065 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:12.107865095 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:13.218147039 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:13.218386889 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:13.218386889 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:14.356122971 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:14.475733995 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:14.475976944 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:14.477034092 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:14.596609116 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:14.596816063 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:14.716375113 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:15.868336916 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:15.868452072 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:15.868452072 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:17.108643055 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:17.228379011 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:17.228452921 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:17.229311943 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:17.348875999 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:17.348959923 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:17.468730927 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:27.234692097 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 28, 2024 23:44:27.354486942 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:27.674457073 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 28, 2024 23:44:27.674858093 CET	58920	33211	192.168.2.13	83.222.191.146

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 28, 2024 23:42:45.099222898 CET	34881	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:45.233026028 CET	53	34881	8.8.8.8	192.168.2.13
Dec 28, 2024 23:42:47.659235001 CET	47371	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:47.793231010 CET	53	47371	8.8.8.8	192.168.2.13
Dec 28, 2024 23:42:50.312645912 CET	54012	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:50.435872078 CET	53	54012	8.8.8.8	192.168.2.13
Dec 28, 2024 23:42:52.859479904 CET	37757	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:53.099275112 CET	53	37757	8.8.8.8	192.168.2.13
Dec 28, 2024 23:42:55.568069935 CET	34799	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:55.701790094 CET	53	34799	8.8.8.8	192.168.2.13
Dec 28, 2024 23:42:58.170977116 CET	54166	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:42:58.304758072 CET	53	54166	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:00.774693012 CET	45337	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:01.014377117 CET	53	45337	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:03.530639887 CET	34679	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:03.665170908 CET	53	34679	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:06.088968039 CET	59582	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:06.329519033 CET	53	59582	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:08.800776005 CET	54986	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:08.935307980 CET	53	54986	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:10.132738113 CET	43126	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:10.255256891 CET	53	43126	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:10.256891012 CET	53611	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:10.379089117 CET	53	53611	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:10.380368948 CET	60801	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:10.502594948 CET	53	60801	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:10.503525972 CET	52102	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:10.625786066 CET	53	52102	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:10.627072096 CET	60262	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:10.749387026 CET	53	60262	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:11.449600935 CET	50713	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:11.584254026 CET	53	50713	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:11.752572060 CET	34083	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:11.875032902 CET	53	34083	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:11.875926971 CET	52623	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:11.998193026 CET	53	52623	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:11.999324083 CET	33281	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:12.121807098 CET	53	33281	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:12.122631073 CET	39446	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:12.244884014 CET	53	39446	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:12.245892048 CET	57725	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:12.368180037 CET	53	57725	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:14.053216934 CET	46310	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:14.187413931 CET	53	46310	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:15.371162891 CET	32977	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:15.493859053 CET	53	32977	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:15.494956970 CET	42069	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:15.617516041 CET	53	42069	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:15.618347883 CET	59651	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:15.740756035 CET	53	59651	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:15.741807938 CET	50205	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:15.864070892 CET	53	50205	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:15.864849091 CET	41351	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:15.987112999 CET	53	41351	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:16.702441931 CET	36965	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:17.066284895 CET	53	36965	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:19.535907984 CET	60816	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:19.669686079 CET	53	60816	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:22.139827013 CET	47510	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:22.273729086 CET	53	47510	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:24.732410908 CET	48347	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:24.866548061 CET	53	48347	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:24.990894079 CET	52440	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:25.113044024 CET	53	52440	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:25.114465952 CET	55478	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:25.236691952 CET	53	55478	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:25.237493038 CET	42693	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:25.359854937 CET	53	42693	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:25.360745907 CET	37220	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:25.482969999 CET	53	37220	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:25.483783960 CET	58355	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:25.817373037 CET	53	58355	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:27.336321115 CET	45516	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:27.470635891 CET	53	45516	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:29.948460102 CET	37977	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:30.082278967 CET	53	37977	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:32.552371025 CET	57423	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:32.686255932 CET	53	57423	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:34.820537090 CET	36603	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:34.942961931 CET	53	36603	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:34.944243908 CET	58283	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:35.066597939 CET	53	58283	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:35.067889929 CET	38786	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:35.157187939 CET	56223	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:35.190253019 CET	53	38786	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:35.191421986 CET	42419	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:35.291646957 CET	53	56223	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:35.313926935 CET	53	42419	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:35.315022945 CET	41593	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:35.437529087 CET	53	41593	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:36.441248894 CET	34966	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:36.563868999 CET	53	34966	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:36.565035105 CET	60055	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:36.687324047 CET	53	60055	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:36.688625097 CET	50779	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:36.810926914 CET	53	50779	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:36.811729908 CET	52499	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:36.934000969 CET	53	52499	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:36.935214043 CET	43034	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:37.057564020 CET	53	43034	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:37.761724949 CET	38293	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:37.884393930 CET	53	38293	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:40.307632923 CET	47658	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:40.441858053 CET	53	47658	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:42.957793951 CET	58880	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:43.092442989 CET	53	58880	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:45.583801985 CET	40888	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:45.717911959 CET	53	40888	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:47.061285019 CET	55114	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:47.183581114 CET	53	55114	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:47.184907913 CET	37559	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:47.307143927 CET	53	37559	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:47.308626890 CET	48981	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:47.430999041 CET	53	48981	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:47.432466984 CET	57846	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:47.554728985 CET	53	57846	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:47.555571079 CET	46325	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:47.677958965 CET	53	46325	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:48.142055035 CET	49138	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:48.276474953 CET	53	49138	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:50.793601990 CET	39322	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:50.928076982 CET	53	39322	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:52.680996895 CET	47083	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:52.803282976 CET	53	47083	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:52.804538965 CET	47308	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:52.926872969 CET	53	47308	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:52.928375006 CET	51418	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:53.051711082 CET	53	51418	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:53.053247929 CET	33813	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:53.175733089 CET	53	33813	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:53.176609039 CET	45855	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:53.298847914 CET	53	45855	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:53.351982117 CET	57665	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:53.485872984 CET	53	57665	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:55.910727978 CET	40216	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:56.044313908 CET	53	40216	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:58.513711929 CET	33348	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:58.647393942 CET	53	33348	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:59.301424026 CET	53103	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:59.424464941 CET	53	53103	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:59.425427914 CET	52805	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:59.547738075 CET	53	52805	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:59.548410892 CET	60588	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:59.671400070 CET	53	60588	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:59.672046900 CET	56721	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:59.794300079 CET	53	56721	8.8.8.8	192.168.2.13
Dec 28, 2024 23:43:59.795056105 CET	40555	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:43:59.917345047 CET	53	40555	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:01.164623022 CET	41794	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:01.298366070 CET	53	41794	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:02.920520067 CET	39521	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.042874098 CET	53	39521	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:03.043875933 CET	35976	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.166492939 CET	53	35976	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:03.167359114 CET	38101	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.289638996 CET	53	38101	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:03.290309906 CET	44724	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.412542105 CET	53	44724	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:03.413307905 CET	33445	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.535654068 CET	53	33445	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:03.812951088 CET	46138	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:03.947197914 CET	53	46138	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:06.417114973 CET	40345	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:06.551234961 CET	53	40345	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:07.538341999 CET	42634	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:07.915335894 CET	53	42634	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:07.916784048 CET	59070	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:08.039105892 CET	53	59070	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:08.040427923 CET	60811	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:08.162952900 CET	53	60811	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:08.164357901 CET	34392	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:08.286669016 CET	53	34392	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:08.288058996 CET	46675	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:08.410470963 CET	53	46675	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:09.066118002 CET	60200	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:09.200858116 CET	53	60200	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:11.624017000 CET	48199	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:11.746625900 CET	53	48199	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:14.220927000 CET	36814	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:14.355585098 CET	53	36814	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:16.870310068 CET	45795	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:17.108086109 CET	53	45795	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:18.413635969 CET	58279	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:18.536336899 CET	53	58279	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:18.537028074 CET	48191	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:18.659310102 CET	53	48191	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:18.659981966 CET	50535	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:18.782279968 CET	53	50535	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:18.782960892 CET	47381	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:18.905185938 CET	53	47381	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:18.905998945 CET	38400	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:19.028270960 CET	53	38400	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:28.031511068 CET	47352	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:28.154009104 CET	53	47352	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:28.155502081 CET	33002	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:28.277754068 CET	53	33002	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:28.279448032 CET	35120	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:28.401771069 CET	53	35120	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:28.403251886 CET	43695	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:28.525469065 CET	53	43695	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:28.526396990 CET	45663	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:28.648747921 CET	53	45663	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:38.651797056 CET	42110	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:38.774104118 CET	53	42110	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:38.774816036 CET	34227	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:38.897120953 CET	53	34227	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:38.897782087 CET	38971	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:39.019962072 CET	53	38971	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:39.020631075 CET	47351	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:39.143119097 CET	53	47351	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:39.144165039 CET	36852	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:39.266627073 CET	53	36852	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:45.269063950 CET	43898	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:45.391943932 CET	53	43898	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:45.393376112 CET	35772	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:45.515682936 CET	53	35772	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:45.517136097 CET	54017	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:45.639525890 CET	53	54017	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:45.640328884 CET	38270	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:45.762703896 CET	53	38270	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:45.764235020 CET	50739	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:45.887797117 CET	53	50739	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:48.892112970 CET	45097	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:49.014507055 CET	53	45097	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:49.015737057 CET	57213	53	192.168.2.13	8.8.8.8
Dec 28, 2024 23:44:49.139002085 CET	53	57213	8.8.8.8	192.168.2.13
Dec 28, 2024 23:44:49.140311003 CET	36379	53	192.168.2.13	8.8.8.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 28, 2024 23:42:45.099222898 CET	192.168.2.13	8.8.8.8	0xd892	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:47.659235001 CET	192.168.2.13	8.8.8.8	0x61fc	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:50.312645912 CET	192.168.2.13	8.8.8.8	0xcacd	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:52.859479904 CET	192.168.2.13	8.8.8.8	0xaf7c	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:55.568069935 CET	192.168.2.13	8.8.8.8	0x86dc	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:58.170977116 CET	192.168.2.13	8.8.8.8	0x1c85	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:00.774693012 CET	192.168.2.13	8.8.8.8	0x66ec	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:03.530639887 CET	192.168.2.13	8.8.8.8	0xcd33	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:06.088968039 CET	192.168.2.13	8.8.8.8	0xbfbd	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:08.800776005 CET	192.168.2.13	8.8.8.8	0xef25	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:11.449600935 CET	192.168.2.13	8.8.8.8	0xff02	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:14.053216934 CET	192.168.2.13	8.8.8.8	0x46b9	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:16.702441931 CET	192.168.2.13	8.8.8.8	0xe4e8	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:19.535907984 CET	192.168.2.13	8.8.8.8	0x93a8	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:22.139827013 CET	192.168.2.13	8.8.8.8	0x15e5	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:24.732410908 CET	192.168.2.13	8.8.8.8	0xd828	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:27.336321115 CET	192.168.2.13	8.8.8.8	0x6614	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:29.948460102 CET	192.168.2.13	8.8.8.8	0xc5f7	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:32.552371025 CET	192.168.2.13	8.8.8.8	0xa793	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:35.157187939 CET	192.168.2.13	8.8.8.8	0xb067	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:37.761724949 CET	192.168.2.13	8.8.8.8	0x382	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:40.307632923 CET	192.168.2.13	8.8.8.8	0x6a54	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:42.957793951 CET	192.168.2.13	8.8.8.8	0xb835	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:45.583801985 CET	192.168.2.13	8.8.8.8	0xe3f6	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:48.142055035 CET	192.168.2.13	8.8.8.8	0x5c38	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:50.793601990 CET	192.168.2.13	8.8.8.8	0x4c82	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:53.351982117 CET	192.168.2.13	8.8.8.8	0x8027	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:55.910727978 CET	192.168.2.13	8.8.8.8	0x18b4	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:58.513711929 CET	192.168.2.13	8.8.8.8	0xe0c1	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:01.164623022 CET	192.168.2.13	8.8.8.8	0xc281	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:03.812951088 CET	192.168.2.13	8.8.8.8	0xd527	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:06.417114973 CET	192.168.2.13	8.8.8.8	0x845b	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:09.066118002 CET	192.168.2.13	8.8.8.8	0x89cc	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:11.624017000 CET	192.168.2.13	8.8.8.8	0x9b0c	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:14.220927000 CET	192.168.2.13	8.8.8.8	0x1acc	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:16.870310068 CET	192.168.2.13	8.8.8.8	0x15bc	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 28, 2024 23:42:45.233026028 CET	8.8.8.8	192.168.2.13	0xd892	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:47.793231010 CET	8.8.8.8	192.168.2.13	0x61fc	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:50.435872078 CET	8.8.8.8	192.168.2.13	0xcacd	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:53.099275112 CET	8.8.8.8	192.168.2.13	0xaf7c	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:55.701790094 CET	8.8.8.8	192.168.2.13	0x86dc	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:42:58.304758072 CET	8.8.8.8	192.168.2.13	0x1c85	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:01.014377117 CET	8.8.8.8	192.168.2.13	0x66ec	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:03.665170908 CET	8.8.8.8	192.168.2.13	0xcd33	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:06.329519033 CET	8.8.8.8	192.168.2.13	0xbfbd	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:08.935307980 CET	8.8.8.8	192.168.2.13	0xef25	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:11.584254026 CET	8.8.8.8	192.168.2.13	0xff02	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:14.187413931 CET	8.8.8.8	192.168.2.13	0x46b9	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:17.066284895 CET	8.8.8.8	192.168.2.13	0xe4e8	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:19.669686079 CET	8.8.8.8	192.168.2.13	0x93a8	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:22.273729086 CET	8.8.8.8	192.168.2.13	0x15e5	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:24.866548061 CET	8.8.8.8	192.168.2.13	0xd828	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:27.470635891 CET	8.8.8.8	192.168.2.13	0x6614	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:30.082278967 CET	8.8.8.8	192.168.2.13	0xc5f7	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:32.686255932 CET	8.8.8.8	192.168.2.13	0xa793	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:35.291646957 CET	8.8.8.8	192.168.2.13	0xb067	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:37.884393930 CET	8.8.8.8	192.168.2.13	0x382	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:40.441858053 CET	8.8.8.8	192.168.2.13	0x6a54	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:43.092442989 CET	8.8.8.8	192.168.2.13	0xb835	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:45.717911959 CET	8.8.8.8	192.168.2.13	0xe3f6	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:48.276474953 CET	8.8.8.8	192.168.2.13	0x5c38	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:50.928076982 CET	8.8.8.8	192.168.2.13	0x4c82	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:53.485872984 CET	8.8.8.8	192.168.2.13	0x8027	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:56.044313908 CET	8.8.8.8	192.168.2.13	0x18b4	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:43:58.647393942 CET	8.8.8.8	192.168.2.13	0xe0c1	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:01.298366070 CET	8.8.8.8	192.168.2.13	0xc281	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:03.947197914 CET	8.8.8.8	192.168.2.13	0xd527	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:06.551234961 CET	8.8.8.8	192.168.2.13	0x845b	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:09.200858116 CET	8.8.8.8	192.168.2.13	0x89cc	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:11.746625900 CET	8.8.8.8	192.168.2.13	0x9b0c	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:14.355585098 CET	8.8.8.8	192.168.2.13	0x1acc	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:44:17.108086109 CET	8.8.8.8	192.168.2.13	0x15bc	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: mpsl.elf PID: 5438, Parent PID: 5359

General

Start time (UTC):	22:42:43
Start date (UTC):	28/12/2024
Path:	/tmp/mpsl.elf
Arguments:	/tmp/mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: mpsl.elf PID: 5441, Parent PID: 5438

General

Start time (UTC):	22:42:43
Start date (UTC):	28/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: mpsl.elf PID: 5443, Parent PID: 5441

General

Start time (UTC):	22:42:43
Start date (UTC):	28/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: mpsl.elf PID: 5438, Parent PID: 5359

General

Chronological Activities

Analysis Process: mpsl.elf PID: 5441, Parent PID: 5438

General

Chronological Activities

Analysis Process: mpsl.elf PID: 5443, Parent PID: 5441

General

Chronological Activities

Linux Analysis Report
mpsl.elf