Edit tour

Linux Analysis Report
mipsel.elf

Overview

General Information

Sample name:	mipsel.elf
Analysis ID:	1583617
MD5:	82a0a8e54c823931b1d3c9f043a760c0
SHA1:	e67075c0cdc2451355c425502660e35b3f97d827
SHA256:	2b2d11f90643979799af9d1e234d21234f75beb37fec69cd09418e3600c15c44
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample contains only a LOAD segment without any section mappings

Suricata IDS alerts with low severity for network traffic

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583617
Start date and time:	2025-01-03 08:04:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mipsel.elf
Detection:	MAL
Classification:	mal80.spre.troj.evad.linELF@0/1@2/0

Warnings

VT rate limit hit for: http://212.64.199.97/Simps/mips

Runtime Messages

Command:	/tmp/mipsel.elf
PID:	5500
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Simps Botnet ;) Infected By Simps Botnet ;)
Standard Error:

Process Tree

system is lnxubuntu20

mipsel.elf (PID: 5500, Parent: 5424, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/mipsel.elf

mipsel.elf New Fork (PID: 5502, Parent: 5500)

mipsel.elf New Fork (PID: 5504, Parent: 5502)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
5500.1.00007f3388400000.00007f3388428000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5500.1.00007f3388400000.00007f3388428000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: mipsel.elf PID: 5500	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mipsel.elf PID: 5502	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T08:05:46.022089+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47738	212.64.199.97	65525	TCP
2025-01-03T08:05:47.867231+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47740	212.64.199.97	65525	TCP
2025-01-03T08:05:49.669716+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47742	212.64.199.97	65525	TCP
2025-01-03T08:05:51.468911+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47744	212.64.199.97	65525	TCP
2025-01-03T08:05:53.608977+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47746	212.64.199.97	65525	TCP
2025-01-03T08:05:55.396097+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47748	212.64.199.97	65525	TCP
2025-01-03T08:05:57.188823+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47750	212.64.199.97	65525	TCP
2025-01-03T08:05:58.988615+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47752	212.64.199.97	65525	TCP
2025-01-03T08:06:00.785522+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47754	212.64.199.97	65525	TCP
2025-01-03T08:06:03.252270+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47756	212.64.199.97	65525	TCP
2025-01-03T08:06:05.048332+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47758	212.64.199.97	65525	TCP
2025-01-03T08:06:06.812121+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47760	212.64.199.97	65525	TCP
2025-01-03T08:06:08.592133+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47762	212.64.199.97	65525	TCP
2025-01-03T08:06:10.375791+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47764	212.64.199.97	65525	TCP
2025-01-03T08:06:12.154796+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47766	212.64.199.97	65525	TCP
2025-01-03T08:06:13.939965+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47768	212.64.199.97	65525	TCP
2025-01-03T08:06:15.740264+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47770	212.64.199.97	65525	TCP
2025-01-03T08:06:17.517033+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47772	212.64.199.97	65525	TCP
2025-01-03T08:06:19.298277+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47774	212.64.199.97	65525	TCP
2025-01-03T08:06:21.100407+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47776	212.64.199.97	65525	TCP
2025-01-03T08:06:22.874784+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47778	212.64.199.97	65525	TCP
2025-01-03T08:06:24.657040+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47780	212.64.199.97	65525	TCP
2025-01-03T08:06:26.441954+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47782	212.64.199.97	65525	TCP
2025-01-03T08:06:28.219548+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47784	212.64.199.97	65525	TCP
2025-01-03T08:06:30.001295+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47786	212.64.199.97	65525	TCP
2025-01-03T08:06:31.802224+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47788	212.64.199.97	65525	TCP
2025-01-03T08:06:33.577697+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47790	212.64.199.97	65525	TCP
2025-01-03T08:06:35.364009+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47792	212.64.199.97	65525	TCP
2025-01-03T08:06:37.135474+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47794	212.64.199.97	65525	TCP
2025-01-03T08:06:38.901132+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47796	212.64.199.97	65525	TCP
2025-01-03T08:06:40.702811+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47798	212.64.199.97	65525	TCP
2025-01-03T08:06:42.498678+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47800	212.64.199.97	65525	TCP
2025-01-03T08:06:44.457919+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47802	212.64.199.97	65525	TCP
2025-01-03T08:06:46.250765+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47804	212.64.199.97	65525	TCP
2025-01-03T08:06:48.028190+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47806	212.64.199.97	65525	TCP
2025-01-03T08:06:49.815139+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47808	212.64.199.97	65525	TCP
2025-01-03T08:06:51.617355+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47810	212.64.199.97	65525	TCP
2025-01-03T08:06:53.409401+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47812	212.64.199.97	65525	TCP
2025-01-03T08:06:55.186747+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47814	212.64.199.97	65525	TCP
2025-01-03T08:06:56.991597+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47816	212.64.199.97	65525	TCP
2025-01-03T08:06:58.788273+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47818	212.64.199.97	65525	TCP
2025-01-03T08:07:01.162534+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47820	212.64.199.97	65525	TCP
2025-01-03T08:07:02.954026+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47822	212.64.199.97	65525	TCP
2025-01-03T08:07:04.726482+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47824	212.64.199.97	65525	TCP
2025-01-03T08:07:06.516024+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47826	212.64.199.97	65525	TCP
2025-01-03T08:07:08.312219+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47828	212.64.199.97	65525	TCP
2025-01-03T08:07:10.098067+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47830	212.64.199.97	65525	TCP
2025-01-03T08:07:11.872685+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47832	212.64.199.97	65525	TCP
2025-01-03T08:07:13.657629+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47834	212.64.199.97	65525	TCP
2025-01-03T08:07:15.451132+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47836	212.64.199.97	65525	TCP
2025-01-03T08:07:17.238743+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47838	212.64.199.97	65525	TCP
2025-01-03T08:07:19.011782+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47840	212.64.199.97	65525	TCP
2025-01-03T08:07:20.781082+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47842	212.64.199.97	65525	TCP
2025-01-03T08:07:22.582910+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47844	212.64.199.97	65525	TCP
2025-01-03T08:07:24.355676+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47846	212.64.199.97	65525	TCP
2025-01-03T08:07:26.163247+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47848	212.64.199.97	65525	TCP
2025-01-03T08:07:27.937009+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47850	212.64.199.97	65525	TCP
2025-01-03T08:07:29.737620+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47852	212.64.199.97	65525	TCP
2025-01-03T08:07:31.496968+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47854	212.64.199.97	65525	TCP
2025-01-03T08:07:33.283846+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47856	212.64.199.97	65525	TCP
2025-01-03T08:07:35.064183+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47858	212.64.199.97	65525	TCP
2025-01-03T08:07:36.841027+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47860	212.64.199.97	65525	TCP
2025-01-03T08:07:38.611579+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47862	212.64.199.97	65525	TCP
2025-01-03T08:07:40.370900+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47864	212.64.199.97	65525	TCP
2025-01-03T08:07:42.160623+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47866	212.64.199.97	65525	TCP
2025-01-03T08:07:43.959357+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47868	212.64.199.97	65525	TCP
2025-01-03T08:07:45.731137+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47870	212.64.199.97	65525	TCP
2025-01-03T08:07:47.516430+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47872	212.64.199.97	65525	TCP
2025-01-03T08:07:49.301134+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47874	212.64.199.97	65525	TCP
2025-01-03T08:07:51.080333+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47876	212.64.199.97	65525	TCP
2025-01-03T08:07:52.861017+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47878	212.64.199.97	65525	TCP
2025-01-03T08:07:54.664343+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47880	212.64.199.97	65525	TCP
2025-01-03T08:07:56.436034+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47882	212.64.199.97	65525	TCP
2025-01-03T08:07:58.220439+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47884	212.64.199.97	65525	TCP
2025-01-03T08:08:00.004339+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47886	212.64.199.97	65525	TCP
2025-01-03T08:08:01.779034+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47888	212.64.199.97	65525	TCP
2025-01-03T08:08:03.580801+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47890	212.64.199.97	65525	TCP
2025-01-03T08:08:05.359234+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47892	212.64.199.97	65525	TCP
2025-01-03T08:08:07.146174+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47894	212.64.199.97	65525	TCP
2025-01-03T08:08:08.955839+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47896	212.64.199.97	65525	TCP
2025-01-03T08:08:10.769998+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47898	212.64.199.97	65525	TCP
2025-01-03T08:08:12.570823+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47900	212.64.199.97	65525	TCP
2025-01-03T08:08:14.347805+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47902	212.64.199.97	65525	TCP
2025-01-03T08:08:16.105979+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47904	212.64.199.97	65525	TCP
2025-01-03T08:08:17.891632+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47906	212.64.199.97	65525	TCP
2025-01-03T08:08:19.676583+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47908	212.64.199.97	65525	TCP
2025-01-03T08:08:21.457927+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47910	212.64.199.97	65525	TCP
2025-01-03T08:08:23.272605+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47912	212.64.199.97	65525	TCP
2025-01-03T08:08:25.075245+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47914	212.64.199.97	65525	TCP
2025-01-03T08:08:26.840924+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47916	212.64.199.97	65525	TCP
2025-01-03T08:08:28.643411+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47918	212.64.199.97	65525	TCP
2025-01-03T08:08:30.429663+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47920	212.64.199.97	65525	TCP
2025-01-03T08:08:32.206006+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47924	212.64.199.97	65525	TCP
2025-01-03T08:08:33.987343+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47926	212.64.199.97	65525	TCP
2025-01-03T08:08:35.766769+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47928	212.64.199.97	65525	TCP
2025-01-03T08:08:37.565083+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47930	212.64.199.97	65525	TCP
2025-01-03T08:08:39.353512+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47932	212.64.199.97	65525	TCP
2025-01-03T08:08:41.122208+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47934	212.64.199.97	65525	TCP
2025-01-03T08:08:42.911200+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47936	212.64.199.97	65525	TCP
2025-01-03T08:08:44.708351+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47938	212.64.199.97	65525	TCP
2025-01-03T08:08:46.487364+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47940	212.64.199.97	65525	TCP
2025-01-03T08:08:48.283792+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47942	212.64.199.97	65525	TCP
2025-01-03T08:08:50.072684+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47944	212.64.199.97	65525	TCP
2025-01-03T08:08:51.867785+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47946	212.64.199.97	65525	TCP
2025-01-03T08:08:53.646715+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47948	212.64.199.97	65525	TCP
2025-01-03T08:08:55.446909+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47950	212.64.199.97	65525	TCP
2025-01-03T08:08:57.240671+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47952	212.64.199.97	65525	TCP
2025-01-03T08:08:59.019575+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47954	212.64.199.97	65525	TCP
2025-01-03T08:09:00.813016+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47956	212.64.199.97	65525	TCP
2025-01-03T08:09:02.598203+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47958	212.64.199.97	65525	TCP
2025-01-03T08:09:04.393411+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47960	212.64.199.97	65525	TCP
2025-01-03T08:09:06.183300+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47962	212.64.199.97	65525	TCP
2025-01-03T08:09:07.957980+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47964	212.64.199.97	65525	TCP
2025-01-03T08:09:09.745233+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47966	212.64.199.97	65525	TCP
2025-01-03T08:09:11.521012+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47968	212.64.199.97	65525	TCP
2025-01-03T08:09:13.320948+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47970	212.64.199.97	65525	TCP
2025-01-03T08:09:15.102037+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47972	212.64.199.97	65525	TCP
2025-01-03T08:09:16.930653+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47974	212.64.199.97	65525	TCP
2025-01-03T08:09:18.710118+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47976	212.64.199.97	65525	TCP
2025-01-03T08:09:20.489207+0100	2848448	1	A Network Trojan was detected	192.168.2.13	47978	212.64.199.97	65525	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mipsel.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mipsel.elf	Virustotal: Detection: 47%			Perma Link
Source: mipsel.elf	ReversingLabs: Detection: 42%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/mipsel.elf (PID: 5500)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:47738 -> 212.64.199.97:65525

Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47754 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47756 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47738 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47788 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47750 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47752 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47828 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47792 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47748 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47806 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47812 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47804 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47774 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47864 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47794 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47858 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47874 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47798 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47908 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47878 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47904 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47868 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47758 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47796 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47928 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47894 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47898 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47914 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47800 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47944 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47936 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47744 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47740 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47810 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47746 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47880 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47784 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47946 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47778 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47766 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47972 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47742 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47870 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47786 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47768 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47842 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47838 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47848 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47840 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47902 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47906 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47844 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47876 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47900 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47888 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47808 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47856 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47916 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47860 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47760 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47958 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47824 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47968 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47814 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47970 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47956 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47830 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47938 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47850 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47836 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47770 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47896 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47764 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47882 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47952 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47920 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47818 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47884 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47930 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47950 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47790 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47780 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47762 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47802 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47832 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47826 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47976 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47966 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47854 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47834 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47962 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47782 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47934 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47772 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47866 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47822 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47816 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47960 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47964 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47948 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47886 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47820 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47974 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47862 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47872 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47846 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47954 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47924 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47978 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47910 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47890 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47776 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47926 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47918 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47932 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47940 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47852 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47942 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47892 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.13:47912 -> 212.64.199.97:65525

Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	String found in binary or memory: http://212.64.199.97/Simps/mips
Source: mipsel.elf, 5500.1.00007f3388400000.00007f3388428000.r-x.sdmp, mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: mipsel.elf	String found in binary or memory: http://upx.sf.net

Source: LOAD without section mappings

Program segment: 0x100000

Source: classification engine

Classification label: mal80.spre.troj.evad.linELF@0/1@2/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/mipsel.elf (PID: 5500)

Log file created: /tmp/Infected.log

Jump to dropped file

Source: mipsel.elf

Submission file: segment LOAD with 7.9432 entropy (max. 8.0)

Source: /tmp/mipsel.elf (PID: 5500)

Queries kernel information via 'uname':

Jump to behavior

Source: mipsel.elf, 5500.1.000055eb9e1c2000.000055eb9e249000.rw-.sdmp, mipsel.elf, 5502.1.000055eb9e1c2000.000055eb9e249000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: mipsel.elf, 5500.1.000055eb9e1c2000.000055eb9e249000.rw-.sdmp, mipsel.elf, 5502.1.000055eb9e1c2000.000055eb9e249000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: mipsel.elf, 5500.1.00007ffced886000.00007ffced8a7000.rw-.sdmp, mipsel.elf, 5502.1.00007ffced886000.00007ffced8a7000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/mipsel.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mipsel.elf
Source: mipsel.elf, 5500.1.00007ffced886000.00007ffced8a7000.rw-.sdmp, mipsel.elf, 5502.1.00007ffced886000.00007ffced8a7000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5500.1.00007f3388400000.00007f3388428000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mipsel.elf PID: 5500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mipsel.elf PID: 5502, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5500.1.00007f3388400000.00007f3388428000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mipsel.elf PID: 5500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mipsel.elf PID: 5502, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mipsel.elf	47%	Virustotal		Browse
mipsel.elf	42%	ReversingLabs	Linux.Trojan.Gafgyt
mipsel.elf	100%	Avira	EXP/ELF.Agent.M.28

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://212.64.199.97/Simps/mips	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	mipsel.elf	false		high
http://212.64.199.97/Simps/mips	mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	false		high
http://purenetworks.com/HNAP1/	mipsel.elf, 5500.1.00007f3388400000.00007f3388428000.r-x.sdmp, mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	false		high
http://schemas.xmlsoap.org/soap/envelope/	mipsel.elf, 5502.1.00007f3388400000.00007f3388428000.r-x.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
212.64.199.97	unknown	Turkey		12599	ATLAS-ASTR	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
212.64.199.97	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	i686.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	i686.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	X86_64.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	4.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	wind.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	file-64bit.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ATLAS-ASTR	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	powerpc.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	i686.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	doc_82555.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	commenti_19265309.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	DETAILS-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	Message-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	Js07W5pNr7	Get hash	malicious	Mirai	Browse	212.64.220.77
	TOqM7SNQz6	Get hash	malicious	Mirai	Browse	212.64.207.82
	Invoice-ID-(882451).vbs	Get hash	malicious	AsyncRAT	Browse	212.64.222.172

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/Infected.log

Download File

Process:	/tmp/mipsel.elf
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	149
Entropy (8bit):	5.041576920829991
Encrypted:	false
SSDEEP:	3:xRbQRAZvbFhSZWFBAK8dAuFUJ4gnicMMIVDt8TovZ2XCRA5Adcovn:xR0qvbFhSZW8K8djmHicNoDt8kBSKBcy
MD5:	68CEF17158AB7C78815F4829CA182DF0
SHA1:	1964BD86E351AE38341975A5A35C2A606093220E
SHA-256:	8CB5D165724D5990B6C6161D24AD22E55328C2CF72E46B58104EFE0CC07E82E3
SHA-512:	C39117FAEEB6103E531FDBDD517BB259A1E21E2C0F67B203D8AA8787F5D11F3CC090BCE9E951146C7CB163E1F36F15C3AEAF82CCE953DF715CD59BE7846206FA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Thank You For Your Services...This Device Has successfully Been Infected..With Malware By Simps Botnet ;)..\| instagram: @ur0a_ \| Discord: UR0A#2199..

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.9733910795750225
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mipsel.elf
File size:	68'756 bytes
MD5:	82a0a8e54c823931b1d3c9f043a760c0
SHA1:	e67075c0cdc2451355c425502660e35b3f97d827
SHA256:	2b2d11f90643979799af9d1e234d21234f75beb37fec69cd09418e3600c15c44
SHA512:	3781540bc763ffbfd8e6065ac6fd057eeb18b77873e3cb80f310ea34acf7443c4c335d366e392c862ffdb5a07552232b208075035a42dd14f395772d00d65b78
SSDEEP:	1536:l4T6pUmdRh+TpdXlCzjDvIsCiNXC+3e5eRUzMLEllUwoP:l4T6pUiRgvsjmipC+3seRUz0wBs
TLSH:	EA63013A61ECFA07D8191CBC06CD167018D38AD677FC4B6A66E6B9DCFD714081A870B8
File Content Preview:	.ELF........................4...........4. ...(...............................................F...F.................w.j.UPX!`.......[...[.......`..........?.E.h;....#....3.FR..eP>%q..+.bkv.....O'....<...^...%.;..0]..]..F.............Li..[.@......_..w.....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x1090c8
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	2
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x100000	0x100000	0xa405	0xa405	7.9432	0x5	R E	0x10000
LOAD	0xead4	0x46ead4	0x46ead4	0x0	0x0	0.0000	0x6	RW	0x10000

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-03T08:05:46.022089+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47738	212.64.199.97	65525	TCP
2025-01-03T08:05:47.867231+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47740	212.64.199.97	65525	TCP
2025-01-03T08:05:49.669716+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47742	212.64.199.97	65525	TCP
2025-01-03T08:05:51.468911+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47744	212.64.199.97	65525	TCP
2025-01-03T08:05:53.608977+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47746	212.64.199.97	65525	TCP
2025-01-03T08:05:55.396097+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47748	212.64.199.97	65525	TCP
2025-01-03T08:05:57.188823+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47750	212.64.199.97	65525	TCP
2025-01-03T08:05:58.988615+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47752	212.64.199.97	65525	TCP
2025-01-03T08:06:00.785522+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47754	212.64.199.97	65525	TCP
2025-01-03T08:06:03.252270+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47756	212.64.199.97	65525	TCP
2025-01-03T08:06:05.048332+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47758	212.64.199.97	65525	TCP
2025-01-03T08:06:06.812121+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47760	212.64.199.97	65525	TCP
2025-01-03T08:06:08.592133+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47762	212.64.199.97	65525	TCP
2025-01-03T08:06:10.375791+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47764	212.64.199.97	65525	TCP
2025-01-03T08:06:12.154796+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47766	212.64.199.97	65525	TCP
2025-01-03T08:06:13.939965+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47768	212.64.199.97	65525	TCP
2025-01-03T08:06:15.740264+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47770	212.64.199.97	65525	TCP
2025-01-03T08:06:17.517033+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47772	212.64.199.97	65525	TCP
2025-01-03T08:06:19.298277+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47774	212.64.199.97	65525	TCP
2025-01-03T08:06:21.100407+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47776	212.64.199.97	65525	TCP
2025-01-03T08:06:22.874784+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47778	212.64.199.97	65525	TCP
2025-01-03T08:06:24.657040+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47780	212.64.199.97	65525	TCP
2025-01-03T08:06:26.441954+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47782	212.64.199.97	65525	TCP
2025-01-03T08:06:28.219548+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47784	212.64.199.97	65525	TCP
2025-01-03T08:06:30.001295+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47786	212.64.199.97	65525	TCP
2025-01-03T08:06:31.802224+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47788	212.64.199.97	65525	TCP
2025-01-03T08:06:33.577697+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47790	212.64.199.97	65525	TCP
2025-01-03T08:06:35.364009+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47792	212.64.199.97	65525	TCP
2025-01-03T08:06:37.135474+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47794	212.64.199.97	65525	TCP
2025-01-03T08:06:38.901132+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47796	212.64.199.97	65525	TCP
2025-01-03T08:06:40.702811+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47798	212.64.199.97	65525	TCP
2025-01-03T08:06:42.498678+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47800	212.64.199.97	65525	TCP
2025-01-03T08:06:44.457919+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47802	212.64.199.97	65525	TCP
2025-01-03T08:06:46.250765+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47804	212.64.199.97	65525	TCP
2025-01-03T08:06:48.028190+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47806	212.64.199.97	65525	TCP
2025-01-03T08:06:49.815139+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47808	212.64.199.97	65525	TCP
2025-01-03T08:06:51.617355+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47810	212.64.199.97	65525	TCP
2025-01-03T08:06:53.409401+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47812	212.64.199.97	65525	TCP
2025-01-03T08:06:55.186747+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47814	212.64.199.97	65525	TCP
2025-01-03T08:06:56.991597+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47816	212.64.199.97	65525	TCP
2025-01-03T08:06:58.788273+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47818	212.64.199.97	65525	TCP
2025-01-03T08:07:01.162534+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47820	212.64.199.97	65525	TCP
2025-01-03T08:07:02.954026+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47822	212.64.199.97	65525	TCP
2025-01-03T08:07:04.726482+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47824	212.64.199.97	65525	TCP
2025-01-03T08:07:06.516024+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47826	212.64.199.97	65525	TCP
2025-01-03T08:07:08.312219+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47828	212.64.199.97	65525	TCP
2025-01-03T08:07:10.098067+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47830	212.64.199.97	65525	TCP
2025-01-03T08:07:11.872685+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47832	212.64.199.97	65525	TCP
2025-01-03T08:07:13.657629+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47834	212.64.199.97	65525	TCP
2025-01-03T08:07:15.451132+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47836	212.64.199.97	65525	TCP
2025-01-03T08:07:17.238743+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47838	212.64.199.97	65525	TCP
2025-01-03T08:07:19.011782+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47840	212.64.199.97	65525	TCP
2025-01-03T08:07:20.781082+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47842	212.64.199.97	65525	TCP
2025-01-03T08:07:22.582910+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47844	212.64.199.97	65525	TCP
2025-01-03T08:07:24.355676+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47846	212.64.199.97	65525	TCP
2025-01-03T08:07:26.163247+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47848	212.64.199.97	65525	TCP
2025-01-03T08:07:27.937009+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47850	212.64.199.97	65525	TCP
2025-01-03T08:07:29.737620+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47852	212.64.199.97	65525	TCP
2025-01-03T08:07:31.496968+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47854	212.64.199.97	65525	TCP
2025-01-03T08:07:33.283846+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47856	212.64.199.97	65525	TCP
2025-01-03T08:07:35.064183+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47858	212.64.199.97	65525	TCP
2025-01-03T08:07:36.841027+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47860	212.64.199.97	65525	TCP
2025-01-03T08:07:38.611579+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47862	212.64.199.97	65525	TCP
2025-01-03T08:07:40.370900+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47864	212.64.199.97	65525	TCP
2025-01-03T08:07:42.160623+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47866	212.64.199.97	65525	TCP
2025-01-03T08:07:43.959357+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47868	212.64.199.97	65525	TCP
2025-01-03T08:07:45.731137+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47870	212.64.199.97	65525	TCP
2025-01-03T08:07:47.516430+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47872	212.64.199.97	65525	TCP
2025-01-03T08:07:49.301134+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47874	212.64.199.97	65525	TCP
2025-01-03T08:07:51.080333+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47876	212.64.199.97	65525	TCP
2025-01-03T08:07:52.861017+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47878	212.64.199.97	65525	TCP
2025-01-03T08:07:54.664343+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47880	212.64.199.97	65525	TCP
2025-01-03T08:07:56.436034+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47882	212.64.199.97	65525	TCP
2025-01-03T08:07:58.220439+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47884	212.64.199.97	65525	TCP
2025-01-03T08:08:00.004339+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47886	212.64.199.97	65525	TCP
2025-01-03T08:08:01.779034+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47888	212.64.199.97	65525	TCP
2025-01-03T08:08:03.580801+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47890	212.64.199.97	65525	TCP
2025-01-03T08:08:05.359234+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47892	212.64.199.97	65525	TCP
2025-01-03T08:08:07.146174+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47894	212.64.199.97	65525	TCP
2025-01-03T08:08:08.955839+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47896	212.64.199.97	65525	TCP
2025-01-03T08:08:10.769998+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47898	212.64.199.97	65525	TCP
2025-01-03T08:08:12.570823+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47900	212.64.199.97	65525	TCP
2025-01-03T08:08:14.347805+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47902	212.64.199.97	65525	TCP
2025-01-03T08:08:16.105979+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47904	212.64.199.97	65525	TCP
2025-01-03T08:08:17.891632+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47906	212.64.199.97	65525	TCP
2025-01-03T08:08:19.676583+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47908	212.64.199.97	65525	TCP
2025-01-03T08:08:21.457927+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47910	212.64.199.97	65525	TCP
2025-01-03T08:08:23.272605+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47912	212.64.199.97	65525	TCP
2025-01-03T08:08:25.075245+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47914	212.64.199.97	65525	TCP
2025-01-03T08:08:26.840924+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47916	212.64.199.97	65525	TCP
2025-01-03T08:08:28.643411+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47918	212.64.199.97	65525	TCP
2025-01-03T08:08:30.429663+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47920	212.64.199.97	65525	TCP
2025-01-03T08:08:32.206006+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47924	212.64.199.97	65525	TCP
2025-01-03T08:08:33.987343+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47926	212.64.199.97	65525	TCP
2025-01-03T08:08:35.766769+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47928	212.64.199.97	65525	TCP
2025-01-03T08:08:37.565083+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47930	212.64.199.97	65525	TCP
2025-01-03T08:08:39.353512+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47932	212.64.199.97	65525	TCP
2025-01-03T08:08:41.122208+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47934	212.64.199.97	65525	TCP
2025-01-03T08:08:42.911200+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47936	212.64.199.97	65525	TCP
2025-01-03T08:08:44.708351+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47938	212.64.199.97	65525	TCP
2025-01-03T08:08:46.487364+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47940	212.64.199.97	65525	TCP
2025-01-03T08:08:48.283792+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47942	212.64.199.97	65525	TCP
2025-01-03T08:08:50.072684+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47944	212.64.199.97	65525	TCP
2025-01-03T08:08:51.867785+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47946	212.64.199.97	65525	TCP
2025-01-03T08:08:53.646715+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47948	212.64.199.97	65525	TCP
2025-01-03T08:08:55.446909+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47950	212.64.199.97	65525	TCP
2025-01-03T08:08:57.240671+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47952	212.64.199.97	65525	TCP
2025-01-03T08:08:59.019575+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47954	212.64.199.97	65525	TCP
2025-01-03T08:09:00.813016+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47956	212.64.199.97	65525	TCP
2025-01-03T08:09:02.598203+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47958	212.64.199.97	65525	TCP
2025-01-03T08:09:04.393411+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47960	212.64.199.97	65525	TCP
2025-01-03T08:09:06.183300+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47962	212.64.199.97	65525	TCP
2025-01-03T08:09:07.957980+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47964	212.64.199.97	65525	TCP
2025-01-03T08:09:09.745233+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47966	212.64.199.97	65525	TCP
2025-01-03T08:09:11.521012+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47968	212.64.199.97	65525	TCP
2025-01-03T08:09:13.320948+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47970	212.64.199.97	65525	TCP
2025-01-03T08:09:15.102037+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47972	212.64.199.97	65525	TCP
2025-01-03T08:09:16.930653+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47974	212.64.199.97	65525	TCP
2025-01-03T08:09:18.710118+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47976	212.64.199.97	65525	TCP
2025-01-03T08:09:20.489207+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.13	47978	212.64.199.97	65525	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 08:05:46.016195059 CET	47738	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:46.021199942 CET	65525	47738	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:46.021266937 CET	47738	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:46.022089005 CET	47738	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:46.026864052 CET	65525	47738	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:47.861351013 CET	65525	47738	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:47.861711979 CET	47738	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:47.862266064 CET	47740	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:47.866556883 CET	65525	47738	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:47.867109060 CET	65525	47740	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:47.867202997 CET	47740	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:47.867230892 CET	47740	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:47.872040033 CET	65525	47740	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:49.663889885 CET	65525	47740	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:49.664319038 CET	47740	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:49.664841890 CET	47742	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:49.669118881 CET	65525	47740	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:49.669635057 CET	65525	47742	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:49.669683933 CET	47742	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:49.669715881 CET	47742	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:49.674498081 CET	65525	47742	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:51.463145971 CET	65525	47742	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:51.463553905 CET	47742	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:51.464020014 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:51.468409061 CET	65525	47742	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:51.468813896 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:51.468890905 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:51.468910933 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:51.474630117 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.359258890 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.359524965 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.360070944 CET	47746	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.568948030 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.608252048 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.608370066 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.608795881 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.608808041 CET	65525	47746	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.608817101 CET	65525	47744	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:53.608871937 CET	47744	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.608896971 CET	47746	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.608977079 CET	47746	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:53.613682985 CET	65525	47746	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:55.390341043 CET	65525	47746	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:55.390530109 CET	47746	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:55.391031981 CET	47748	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:55.395311117 CET	65525	47746	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:55.395944118 CET	65525	47748	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:55.396085024 CET	47748	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:55.396096945 CET	47748	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:55.400836945 CET	65525	47748	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:57.182871103 CET	65525	47748	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:57.183166027 CET	47748	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:57.183775902 CET	47750	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:57.188226938 CET	65525	47748	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:57.188676119 CET	65525	47750	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:57.188764095 CET	47750	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:57.188822985 CET	47750	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:57.193614006 CET	65525	47750	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:58.982671976 CET	65525	47750	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:58.982983112 CET	47750	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:58.983760118 CET	47752	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:58.987864017 CET	65525	47750	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:58.988538027 CET	65525	47752	212.64.199.97	192.168.2.13
Jan 3, 2025 08:05:58.988594055 CET	47752	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:58.988615036 CET	47752	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:05:58.993380070 CET	65525	47752	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:00.779642105 CET	65525	47752	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:00.779912949 CET	47752	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:00.780527115 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:00.784893990 CET	65525	47752	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:00.785425901 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:00.785495043 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:00.785521984 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:00.790344954 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.041099072 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.041193962 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.041243076 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.041317940 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.041317940 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.041317940 CET	47754	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.041913986 CET	47756	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.251928091 CET	65525	47754	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.251996994 CET	65525	47756	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:03.252151012 CET	47756	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.252269983 CET	47756	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:03.257119894 CET	65525	47756	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:05.042131901 CET	65525	47756	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:05.042407990 CET	47756	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:05.042809010 CET	47758	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:05.048193932 CET	65525	47756	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:05.048207045 CET	65525	47758	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:05.048311949 CET	47758	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:05.048331976 CET	47758	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:05.053141117 CET	65525	47758	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:06.805921078 CET	65525	47758	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:06.806333065 CET	47758	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:06.807101965 CET	47760	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:06.811105013 CET	65525	47758	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:06.811971903 CET	65525	47760	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:06.812041044 CET	47760	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:06.812120914 CET	47760	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:06.816837072 CET	65525	47760	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:08.585968971 CET	65525	47760	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:08.586368084 CET	47760	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:08.587125063 CET	47762	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:08.591177940 CET	65525	47760	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:08.591976881 CET	65525	47762	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:08.592060089 CET	47762	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:08.592133045 CET	47762	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:08.596905947 CET	65525	47762	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:10.369446039 CET	65525	47762	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:10.369822979 CET	47762	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:10.370771885 CET	47764	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:10.374686003 CET	65525	47762	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:10.375638008 CET	65525	47764	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:10.375749111 CET	47764	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:10.375791073 CET	47764	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:10.380625010 CET	65525	47764	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:12.148993015 CET	65525	47764	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:12.149197102 CET	47764	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:12.149936914 CET	47766	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:12.154028893 CET	65525	47764	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:12.154714108 CET	65525	47766	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:12.154764891 CET	47766	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:12.154795885 CET	47766	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:12.159594059 CET	65525	47766	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:13.934098005 CET	65525	47766	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:13.934365034 CET	47766	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:13.935055971 CET	47768	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:13.939213037 CET	65525	47766	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:13.939814091 CET	65525	47768	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:13.939878941 CET	47768	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:13.939965010 CET	47768	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:13.944757938 CET	65525	47768	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:15.734685898 CET	65525	47768	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:15.734868050 CET	47768	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:15.735368967 CET	47770	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:15.739713907 CET	65525	47768	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:15.740173101 CET	65525	47770	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:15.740252972 CET	47770	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:15.740263939 CET	47770	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:15.745068073 CET	65525	47770	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:17.510972023 CET	65525	47770	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:17.511353970 CET	47770	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:17.512084961 CET	47772	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:17.516232967 CET	65525	47770	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:17.516944885 CET	65525	47772	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:17.517009020 CET	47772	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:17.517033100 CET	47772	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:17.522001982 CET	65525	47772	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:19.292027950 CET	65525	47772	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:19.292481899 CET	47772	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:19.293319941 CET	47774	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:19.297333002 CET	65525	47772	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:19.298120975 CET	65525	47774	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:19.298219919 CET	47774	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:19.298276901 CET	47774	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:19.303044081 CET	65525	47774	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:21.094360113 CET	65525	47774	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:21.094747066 CET	47774	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:21.095479012 CET	47776	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:21.099642992 CET	65525	47774	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:21.100258112 CET	65525	47776	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:21.100346088 CET	47776	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:21.100406885 CET	47776	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:21.105123997 CET	65525	47776	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:22.868676901 CET	65525	47776	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:22.868937969 CET	47776	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:22.869112968 CET	47776	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:22.869834900 CET	47778	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:22.873847961 CET	65525	47776	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:22.874633074 CET	65525	47778	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:22.874707937 CET	47778	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:22.874783993 CET	47778	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:22.879635096 CET	65525	47778	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:24.650980949 CET	65525	47778	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:24.651217937 CET	47778	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:24.652048111 CET	47780	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:24.656035900 CET	65525	47778	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:24.656899929 CET	65525	47780	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:24.656987906 CET	47780	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:24.657040119 CET	47780	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:24.661854029 CET	65525	47780	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:26.435945034 CET	65525	47780	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:26.436253071 CET	47780	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:26.437060118 CET	47782	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:26.441047907 CET	65525	47780	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:26.441802025 CET	65525	47782	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:26.441885948 CET	47782	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:26.441953897 CET	47782	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:26.446808100 CET	65525	47782	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:28.214119911 CET	65525	47782	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:28.214265108 CET	47782	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:28.214683056 CET	47784	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:28.219064951 CET	65525	47782	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:28.219474077 CET	65525	47784	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:28.219521999 CET	47784	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:28.219547987 CET	47784	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:28.224344969 CET	65525	47784	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:29.995620966 CET	65525	47784	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:29.995757103 CET	47784	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:29.996216059 CET	47786	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:30.000618935 CET	65525	47784	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:30.001200914 CET	65525	47786	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:30.001286030 CET	47786	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:30.001295090 CET	47786	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:30.006084919 CET	65525	47786	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:31.796646118 CET	65525	47786	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:31.796842098 CET	47786	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:31.797347069 CET	47788	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:31.801623106 CET	65525	47786	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:31.802138090 CET	65525	47788	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:31.802196980 CET	47788	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:31.802223921 CET	47788	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:31.806967974 CET	65525	47788	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:33.572097063 CET	65525	47788	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:33.572284937 CET	47788	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:33.572773933 CET	47790	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:33.577136040 CET	65525	47788	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:33.577565908 CET	65525	47790	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:33.577678919 CET	47790	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:33.577697039 CET	47790	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:33.582535028 CET	65525	47790	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:35.358212948 CET	65525	47790	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:35.358436108 CET	47790	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:35.358912945 CET	47792	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:35.363297939 CET	65525	47790	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:35.363905907 CET	65525	47792	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:35.363996029 CET	47792	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:35.364008904 CET	47792	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:35.369266033 CET	65525	47792	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:37.129924059 CET	65525	47792	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:37.130104065 CET	47792	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:37.130588055 CET	47794	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:37.134984016 CET	65525	47792	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:37.135381937 CET	65525	47794	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:37.135443926 CET	47794	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:37.135473967 CET	47794	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:37.140361071 CET	65525	47794	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:38.895531893 CET	65525	47794	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:38.895790100 CET	47794	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:38.896194935 CET	47796	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:38.900646925 CET	65525	47794	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:38.901031971 CET	65525	47796	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:38.901114941 CET	47796	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:38.901132107 CET	47796	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:38.905930042 CET	65525	47796	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:40.696994066 CET	65525	47796	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:40.697252989 CET	47796	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:40.697912931 CET	47798	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:40.702079058 CET	65525	47796	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:40.702671051 CET	65525	47798	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:40.702754021 CET	47798	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:40.702811003 CET	47798	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:40.707613945 CET	65525	47798	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:42.492532969 CET	65525	47798	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:42.492851973 CET	47798	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:42.493669987 CET	47800	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:42.497714996 CET	65525	47798	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:42.498539925 CET	65525	47800	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:42.498622894 CET	47800	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:42.498677969 CET	47800	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:42.503494024 CET	65525	47800	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:44.452033997 CET	65525	47800	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:44.452306986 CET	47800	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:44.453021049 CET	47802	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:44.457231045 CET	65525	47800	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:44.457773924 CET	65525	47802	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:44.457918882 CET	47802	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:44.457918882 CET	47802	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:44.462733030 CET	65525	47802	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:46.244966030 CET	65525	47802	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:46.245240927 CET	47802	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:46.245758057 CET	47804	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:46.250143051 CET	65525	47802	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:46.250657082 CET	65525	47804	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:46.250736952 CET	47804	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:46.250765085 CET	47804	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:46.255624056 CET	65525	47804	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:48.022608042 CET	65525	47804	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:48.022754908 CET	47804	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:48.023240089 CET	47806	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:48.027556896 CET	65525	47804	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:48.028053999 CET	65525	47806	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:48.028136969 CET	47806	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:48.028189898 CET	47806	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:48.033035994 CET	65525	47806	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:49.809582949 CET	65525	47806	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:49.809751987 CET	47806	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:49.810235977 CET	47808	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:49.814579964 CET	65525	47806	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:49.815066099 CET	65525	47808	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:49.815125942 CET	47808	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:49.815139055 CET	47808	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:49.820005894 CET	65525	47808	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:51.611504078 CET	65525	47808	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:51.611695051 CET	47808	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:51.612235069 CET	47810	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:51.616514921 CET	65525	47808	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:51.617157936 CET	65525	47810	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:51.617255926 CET	47810	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:51.617355108 CET	47810	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:51.622180939 CET	65525	47810	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:53.403675079 CET	65525	47810	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:53.404002905 CET	47810	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:53.404444933 CET	47812	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:53.408884048 CET	65525	47810	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:53.409284115 CET	65525	47812	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:53.409400940 CET	47812	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:53.409400940 CET	47812	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:53.414225101 CET	65525	47812	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:55.180794954 CET	65525	47812	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:55.181049109 CET	47812	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:55.181809902 CET	47814	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:55.185924053 CET	65525	47812	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:55.186594963 CET	65525	47814	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:55.186671019 CET	47814	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:55.186747074 CET	47814	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:55.191657066 CET	65525	47814	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:56.985625982 CET	65525	47814	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:56.985847950 CET	47814	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:56.986577034 CET	47816	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:56.990684986 CET	65525	47814	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:56.991470098 CET	65525	47816	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:56.991534948 CET	47816	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:56.991596937 CET	47816	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:56.996373892 CET	65525	47816	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:58.782171011 CET	65525	47816	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:58.782567024 CET	47816	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:58.783269882 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:58.787467957 CET	65525	47816	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:58.788105965 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:06:58.788218021 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:58.788273096 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:06:58.793101072 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.156852961 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.157097101 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.157150030 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.157152891 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.157171965 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.157211065 CET	47818	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.157629013 CET	47820	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.161972046 CET	65525	47818	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.162348032 CET	65525	47820	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:01.162498951 CET	47820	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.162533998 CET	47820	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:01.167231083 CET	65525	47820	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:02.948503971 CET	65525	47820	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:02.948642015 CET	47820	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:02.949104071 CET	47822	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:02.953469038 CET	65525	47820	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:02.953902960 CET	65525	47822	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:02.954015017 CET	47822	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:02.954025984 CET	47822	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:02.958756924 CET	65525	47822	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:04.720783949 CET	65525	47822	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:04.720961094 CET	47822	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:04.721465111 CET	47824	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:04.725748062 CET	65525	47822	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:04.726382017 CET	65525	47824	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:04.726443052 CET	47824	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:04.726481915 CET	47824	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:04.731215954 CET	65525	47824	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:06.510065079 CET	65525	47824	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:06.510422945 CET	47824	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:06.511171103 CET	47826	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:06.515518904 CET	65525	47824	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:06.515947104 CET	65525	47826	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:06.516024113 CET	47826	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:06.516024113 CET	47826	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:06.520773888 CET	65525	47826	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:08.306454897 CET	65525	47826	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:08.306607008 CET	47826	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:08.307321072 CET	47828	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:08.311439991 CET	65525	47826	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:08.312073946 CET	65525	47828	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:08.312187910 CET	47828	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:08.312218904 CET	47828	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:08.317114115 CET	65525	47828	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:10.091861010 CET	65525	47828	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:10.092365026 CET	47828	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:10.093123913 CET	47830	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:10.097136974 CET	65525	47828	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:10.097927094 CET	65525	47830	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:10.098004103 CET	47830	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:10.098067045 CET	47830	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:10.102829933 CET	65525	47830	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:11.866672993 CET	65525	47830	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:11.867062092 CET	47830	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:11.867779970 CET	47832	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:11.871993065 CET	65525	47830	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:11.872556925 CET	65525	47832	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:11.872623920 CET	47832	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:11.872684956 CET	47832	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:11.877435923 CET	65525	47832	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:13.650898933 CET	65525	47832	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:13.651170015 CET	47832	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:13.651870012 CET	47834	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:13.656939030 CET	65525	47832	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:13.657470942 CET	65525	47834	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:13.657582998 CET	47834	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:13.657629013 CET	47834	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:13.663091898 CET	65525	47834	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:15.445174932 CET	65525	47834	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:15.445446968 CET	47834	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:15.446187973 CET	47836	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:15.450299025 CET	65525	47834	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:15.450985909 CET	65525	47836	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:15.451057911 CET	47836	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:15.451132059 CET	47836	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:15.455878019 CET	65525	47836	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:17.232605934 CET	65525	47836	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:17.232983112 CET	47836	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:17.233737946 CET	47838	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:17.237835884 CET	65525	47836	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:17.238569021 CET	65525	47838	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:17.238688946 CET	47838	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:17.238743067 CET	47838	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:17.243535042 CET	65525	47838	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:19.005630016 CET	65525	47838	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:19.005948067 CET	47838	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:19.006747961 CET	47840	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:19.010761976 CET	65525	47838	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:19.011631012 CET	65525	47840	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:19.011723042 CET	47840	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:19.011781931 CET	47840	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:19.016573906 CET	65525	47840	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:20.774028063 CET	65525	47840	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:20.774553061 CET	47840	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:20.775202036 CET	47842	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:20.780267954 CET	65525	47840	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:20.781002998 CET	65525	47842	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:20.781066895 CET	47842	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:20.781081915 CET	47842	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:20.787085056 CET	65525	47842	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:22.577315092 CET	65525	47842	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:22.577466965 CET	47842	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:22.577950954 CET	47844	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:22.582256079 CET	65525	47842	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:22.582767963 CET	65525	47844	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:22.582880020 CET	47844	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:22.582910061 CET	47844	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:22.587626934 CET	65525	47844	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:24.349647999 CET	65525	47844	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:24.349904060 CET	47844	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:24.350742102 CET	47846	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:24.354707003 CET	65525	47844	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:24.355596066 CET	65525	47846	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:24.355654001 CET	47846	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:24.355675936 CET	47846	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:24.360472918 CET	65525	47846	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:26.157655954 CET	65525	47846	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:26.157797098 CET	47846	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:26.158323050 CET	47848	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:26.162672043 CET	65525	47846	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:26.163090944 CET	65525	47848	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:26.163167953 CET	47848	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:26.163247108 CET	47848	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:26.168062925 CET	65525	47848	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:27.931453943 CET	65525	47848	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:27.931593895 CET	47848	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:27.932080030 CET	47850	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:27.936369896 CET	65525	47848	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:27.936878920 CET	65525	47850	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:27.936964035 CET	47850	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:27.937009096 CET	47850	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:27.941797972 CET	65525	47850	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:29.731919050 CET	65525	47850	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:29.732208967 CET	47850	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:29.732707977 CET	47852	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:29.736958981 CET	65525	47850	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:29.737544060 CET	65525	47852	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:29.737595081 CET	47852	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:29.737620115 CET	47852	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:29.742341042 CET	65525	47852	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:31.491281033 CET	65525	47852	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:31.491445065 CET	47852	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:31.491924047 CET	47854	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:31.496335983 CET	65525	47852	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:31.496794939 CET	65525	47854	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:31.496889114 CET	47854	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:31.496968031 CET	47854	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:31.501749992 CET	65525	47854	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:33.278228998 CET	65525	47854	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:33.278430939 CET	47854	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:33.278897047 CET	47856	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:33.283257961 CET	65525	47854	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:33.283757925 CET	65525	47856	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:33.283844948 CET	47856	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:33.283845901 CET	47856	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:33.288603067 CET	65525	47856	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:35.058713913 CET	65525	47856	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:35.058839083 CET	47856	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:35.059277058 CET	47858	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:35.063616037 CET	65525	47856	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:35.064106941 CET	65525	47858	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:35.064157009 CET	47858	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:35.064182997 CET	47858	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:35.069000006 CET	65525	47858	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:36.835464001 CET	65525	47858	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:36.835611105 CET	47858	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:36.836116076 CET	47860	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:36.840394974 CET	65525	47858	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:36.840894938 CET	65525	47860	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:36.841015100 CET	47860	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:36.841027021 CET	47860	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:36.845808029 CET	65525	47860	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:38.605297089 CET	65525	47860	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:38.605637074 CET	47860	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:38.606395960 CET	47862	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:38.611191034 CET	65525	47860	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:38.611449003 CET	65525	47862	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:38.611519098 CET	47862	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:38.611578941 CET	47862	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:38.616296053 CET	65525	47862	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:40.364841938 CET	65525	47862	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:40.365226030 CET	47862	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:40.365968943 CET	47864	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:40.370037079 CET	65525	47862	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:40.370769978 CET	65525	47864	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:40.370836020 CET	47864	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:40.370899916 CET	47864	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:40.375627995 CET	65525	47864	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:42.154576063 CET	65525	47864	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:42.154941082 CET	47864	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:42.155642033 CET	47866	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:42.159800053 CET	65525	47864	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:42.160490036 CET	65525	47866	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:42.160559893 CET	47866	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:42.160623074 CET	47866	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:42.165369987 CET	65525	47866	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:43.953465939 CET	65525	47866	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:43.953695059 CET	47866	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:43.954402924 CET	47868	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:43.958452940 CET	65525	47866	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:43.959216118 CET	65525	47868	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:43.959285021 CET	47868	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:43.959357023 CET	47868	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:43.964117050 CET	65525	47868	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:45.724859953 CET	65525	47868	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:45.725342989 CET	47868	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:45.726114035 CET	47870	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:45.730104923 CET	65525	47868	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:45.730947018 CET	65525	47870	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:45.731082916 CET	47870	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:45.731137037 CET	47870	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:45.735928059 CET	65525	47870	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:47.510410070 CET	65525	47870	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:47.510727882 CET	47870	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:47.511471033 CET	47872	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:47.515583992 CET	65525	47870	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:47.516280890 CET	65525	47872	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:47.516369104 CET	47872	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:47.516429901 CET	47872	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:47.521249056 CET	65525	47872	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:49.295078039 CET	65525	47872	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:49.295488119 CET	47872	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:49.296175957 CET	47874	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:49.300308943 CET	65525	47872	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:49.300978899 CET	65525	47874	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:49.301091909 CET	47874	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:49.301134109 CET	47874	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:49.305864096 CET	65525	47874	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:51.074564934 CET	65525	47874	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:51.074882030 CET	47874	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:51.075375080 CET	47876	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:51.079772949 CET	65525	47874	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:51.080241919 CET	65525	47876	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:51.080302000 CET	47876	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:51.080332994 CET	47876	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:51.085136890 CET	65525	47876	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:52.855051041 CET	65525	47876	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:52.855411053 CET	47876	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:52.856100082 CET	47878	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:52.860173941 CET	65525	47876	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:52.860862970 CET	65525	47878	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:52.860979080 CET	47878	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:52.861016989 CET	47878	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:52.866034031 CET	65525	47878	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:54.658910036 CET	65525	47878	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:54.659054041 CET	47878	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:54.659477949 CET	47880	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:54.663839102 CET	65525	47878	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:54.664246082 CET	65525	47880	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:54.664329052 CET	47880	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:54.664343119 CET	47880	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:54.669083118 CET	65525	47880	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:56.429961920 CET	65525	47880	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:56.430306911 CET	47880	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:56.431054115 CET	47882	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:56.435162067 CET	65525	47880	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:56.435874939 CET	65525	47882	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:56.435969114 CET	47882	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:56.436033964 CET	47882	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:56.440772057 CET	65525	47882	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:58.214281082 CET	65525	47882	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:58.214687109 CET	47882	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:58.215394020 CET	47884	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:58.219528913 CET	65525	47882	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:58.220305920 CET	65525	47884	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:58.220382929 CET	47884	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:58.220438957 CET	47884	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:58.225151062 CET	65525	47884	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:59.997754097 CET	65525	47884	212.64.199.97	192.168.2.13
Jan 3, 2025 08:07:59.998020887 CET	47884	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:07:59.998771906 CET	47886	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:00.003676891 CET	65525	47884	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:00.004192114 CET	65525	47886	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:00.004262924 CET	47886	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:00.004338980 CET	47886	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:00.009785891 CET	65525	47886	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:01.772913933 CET	65525	47886	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:01.773302078 CET	47886	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:01.774009943 CET	47888	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:01.778193951 CET	65525	47886	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:01.778882980 CET	65525	47888	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:01.778973103 CET	47888	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:01.779033899 CET	47888	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:01.783809900 CET	65525	47888	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:03.574685097 CET	65525	47888	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:03.575048923 CET	47888	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:03.575784922 CET	47890	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:03.579895973 CET	65525	47888	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:03.580622911 CET	65525	47890	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:03.580763102 CET	47890	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:03.580801010 CET	47890	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:03.585530043 CET	65525	47890	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:05.353365898 CET	65525	47890	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:05.353602886 CET	47890	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:05.354291916 CET	47892	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:05.358438015 CET	65525	47890	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:05.359087944 CET	65525	47892	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:05.359178066 CET	47892	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:05.359234095 CET	47892	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:05.363939047 CET	65525	47892	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:07.140202045 CET	65525	47892	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:07.140588999 CET	47892	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:07.141289949 CET	47894	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:07.145394087 CET	65525	47892	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:07.146061897 CET	65525	47894	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:07.146152973 CET	47894	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:07.146173954 CET	47894	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:07.150950909 CET	65525	47894	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:08.949718952 CET	65525	47894	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:08.950122118 CET	47894	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:08.950897932 CET	47896	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:08.954938889 CET	65525	47894	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:08.955749989 CET	65525	47896	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:08.955813885 CET	47896	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:08.955838919 CET	47896	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:08.960599899 CET	65525	47896	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:10.763973951 CET	65525	47896	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:10.764226913 CET	47896	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:10.764972925 CET	47898	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:10.769045115 CET	65525	47896	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:10.769836903 CET	65525	47898	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:10.769923925 CET	47898	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:10.769998074 CET	47898	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:10.774755001 CET	65525	47898	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:12.564807892 CET	65525	47898	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:12.565042973 CET	47898	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:12.565800905 CET	47900	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:12.569782019 CET	65525	47898	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:12.570650101 CET	65525	47900	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:12.570749044 CET	47900	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:12.570822954 CET	47900	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:12.575552940 CET	65525	47900	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:14.342241049 CET	65525	47900	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:14.342493057 CET	47900	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:14.342860937 CET	47902	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:14.347373962 CET	65525	47900	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:14.347709894 CET	65525	47902	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:14.347759962 CET	47902	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:14.347805023 CET	47902	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:14.352633953 CET	65525	47902	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:16.100253105 CET	65525	47902	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:16.100508928 CET	47902	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:16.101001978 CET	47904	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:16.105314016 CET	65525	47902	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:16.105838060 CET	65525	47904	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:16.105918884 CET	47904	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:16.105978966 CET	47904	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:16.110709906 CET	65525	47904	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:17.885639906 CET	65525	47904	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:17.885943890 CET	47904	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:17.886658907 CET	47906	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:17.890775919 CET	65525	47904	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:17.891407967 CET	65525	47906	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:17.891576052 CET	47906	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:17.891632080 CET	47906	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:17.896476984 CET	65525	47906	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:19.669387102 CET	65525	47906	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:19.669804096 CET	47906	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:19.670533895 CET	47908	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:19.675337076 CET	65525	47906	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:19.676425934 CET	65525	47908	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:19.676500082 CET	47908	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:19.676583052 CET	47908	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:19.683671951 CET	65525	47908	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:21.451802015 CET	65525	47908	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:21.452126980 CET	47908	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:21.452938080 CET	47910	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:21.457017899 CET	65525	47908	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:21.457729101 CET	65525	47910	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:21.457874060 CET	47910	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:21.457926989 CET	47910	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:21.462678909 CET	65525	47910	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:23.266527891 CET	65525	47910	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:23.266922951 CET	47910	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:23.267703056 CET	47912	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:23.271665096 CET	65525	47910	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:23.272479057 CET	65525	47912	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:23.272548914 CET	47912	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:23.272604942 CET	47912	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:23.277304888 CET	65525	47912	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:25.069327116 CET	65525	47912	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:25.069591045 CET	47912	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:25.070307016 CET	47914	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:25.074379921 CET	65525	47912	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:25.075113058 CET	65525	47914	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:25.075189114 CET	47914	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:25.075244904 CET	47914	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:25.080039024 CET	65525	47914	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:26.834882975 CET	65525	47914	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:26.835160971 CET	47914	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:26.835882902 CET	47916	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:26.840010881 CET	65525	47914	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:26.840743065 CET	65525	47916	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:26.840826035 CET	47916	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:26.840924025 CET	47916	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:26.845691919 CET	65525	47916	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:28.637363911 CET	65525	47916	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:28.637686014 CET	47916	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:28.638437033 CET	47918	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:28.642482996 CET	65525	47916	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:28.643244982 CET	65525	47918	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:28.643332958 CET	47918	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:28.643410921 CET	47918	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:28.648156881 CET	65525	47918	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:30.423650980 CET	65525	47918	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:30.423753977 CET	47918	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:30.424702883 CET	47920	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:30.428623915 CET	65525	47918	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:30.429563999 CET	65525	47920	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:30.429625034 CET	47920	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:30.429662943 CET	47920	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:30.434429884 CET	65525	47920	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:30.719085932 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:30.723884106 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:30.723937035 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:30.723958015 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:30.723992109 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:30.728737116 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:30.728745937 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:31.186789989 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:31.189929962 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:32.200403929 CET	65525	47920	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:32.200602055 CET	47920	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:32.201083899 CET	47924	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:32.205450058 CET	65525	47920	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:32.205938101 CET	65525	47924	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:32.206006050 CET	47924	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:32.206006050 CET	47924	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:32.210817099 CET	65525	47924	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:33.186899900 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:33.187180042 CET	34990	53	192.168.2.13	8.8.8.8
Jan 3, 2025 08:08:33.191962957 CET	53	34990	8.8.8.8	192.168.2.13
Jan 3, 2025 08:08:33.981684923 CET	65525	47924	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:33.981913090 CET	47924	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:33.982441902 CET	47926	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:33.986772060 CET	65525	47924	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:33.987242937 CET	65525	47926	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:33.987308979 CET	47926	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:33.987343073 CET	47926	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:33.992151976 CET	65525	47926	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:35.761190891 CET	65525	47926	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:35.761336088 CET	47926	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:35.761820078 CET	47928	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:35.766211987 CET	65525	47926	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:35.766684055 CET	65525	47928	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:35.766746044 CET	47928	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:35.766768932 CET	47928	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:35.771524906 CET	65525	47928	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:37.559520960 CET	65525	47928	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:37.559767008 CET	47928	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:37.560204983 CET	47930	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:37.564625025 CET	65525	47928	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:37.564996958 CET	65525	47930	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:37.565052986 CET	47930	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:37.565083027 CET	47930	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:37.569827080 CET	65525	47930	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:39.347872972 CET	65525	47930	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:39.348119020 CET	47930	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:39.348561049 CET	47932	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:39.352899075 CET	65525	47930	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:39.353358984 CET	65525	47932	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:39.353430986 CET	47932	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:39.353512049 CET	47932	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:39.358305931 CET	65525	47932	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:41.116524935 CET	65525	47932	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:41.116939068 CET	47932	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:41.117367983 CET	47934	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:41.121773005 CET	65525	47932	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:41.122132063 CET	65525	47934	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:41.122184038 CET	47934	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:41.122208118 CET	47934	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:41.127010107 CET	65525	47934	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:42.905194998 CET	65525	47934	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:42.905580044 CET	47934	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:42.906255007 CET	47936	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:42.910345078 CET	65525	47934	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:42.911053896 CET	65525	47936	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:42.911122084 CET	47936	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:42.911200047 CET	47936	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:42.915997982 CET	65525	47936	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:44.702172995 CET	65525	47936	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:44.702589035 CET	47936	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:44.703284025 CET	47938	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:44.707345963 CET	65525	47936	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:44.708168030 CET	65525	47938	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:44.708302021 CET	47938	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:44.708350897 CET	47938	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:44.713129044 CET	65525	47938	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:46.481087923 CET	65525	47938	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:46.481653929 CET	47938	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:46.482405901 CET	47940	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:46.486448050 CET	65525	47938	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:46.487221003 CET	65525	47940	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:46.487303972 CET	47940	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:46.487364054 CET	47940	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:46.492130041 CET	65525	47940	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:48.277592897 CET	65525	47940	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:48.278054953 CET	47940	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:48.278805971 CET	47942	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:48.282799006 CET	65525	47940	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:48.283642054 CET	65525	47942	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:48.283731937 CET	47942	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:48.283792019 CET	47942	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:48.288552999 CET	65525	47942	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:50.062838078 CET	65525	47942	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:50.063183069 CET	47942	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:50.064138889 CET	47944	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:50.068607092 CET	65525	47942	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:50.072547913 CET	65525	47944	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:50.072617054 CET	47944	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:50.072684050 CET	47944	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:50.077421904 CET	65525	47944	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:51.861712933 CET	65525	47944	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:51.861994028 CET	47944	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:51.862750053 CET	47946	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:51.866856098 CET	65525	47944	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:51.867592096 CET	65525	47946	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:51.867698908 CET	47946	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:51.867784977 CET	47946	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:51.872530937 CET	65525	47946	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:53.641184092 CET	65525	47946	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:53.641354084 CET	47946	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:53.641839981 CET	47948	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:53.646117926 CET	65525	47946	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:53.646600962 CET	65525	47948	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:53.646688938 CET	47948	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:53.646714926 CET	47948	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:53.655508995 CET	65525	47948	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:55.441109896 CET	65525	47948	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:55.441395044 CET	47948	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:55.441946983 CET	47950	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:55.446176052 CET	65525	47948	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:55.446809053 CET	65525	47950	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:55.446868896 CET	47950	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:55.446908951 CET	47950	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:55.451625109 CET	65525	47950	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:57.234958887 CET	65525	47950	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:57.235196114 CET	47950	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:57.235753059 CET	47952	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:57.240060091 CET	65525	47950	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:57.240581036 CET	65525	47952	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:57.240631104 CET	47952	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:57.240670919 CET	47952	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:57.245503902 CET	65525	47952	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:59.012278080 CET	65525	47952	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:59.012447119 CET	47952	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:59.013003111 CET	47954	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:59.017251015 CET	65525	47952	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:59.019469023 CET	65525	47954	212.64.199.97	192.168.2.13
Jan 3, 2025 08:08:59.019547939 CET	47954	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:59.019575119 CET	47954	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:08:59.024627924 CET	65525	47954	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:00.807174921 CET	65525	47954	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:00.807533979 CET	47954	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:00.808131933 CET	47956	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:00.812376976 CET	65525	47954	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:00.812915087 CET	65525	47956	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:00.812977076 CET	47956	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:00.813015938 CET	47956	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:00.817760944 CET	65525	47956	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:02.592545986 CET	65525	47956	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:02.592832088 CET	47956	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:02.593235970 CET	47958	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:02.597671032 CET	65525	47956	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:02.598073006 CET	65525	47958	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:02.598184109 CET	47958	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:02.598202944 CET	47958	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:02.602957964 CET	65525	47958	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:04.387392998 CET	65525	47958	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:04.387682915 CET	47958	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:04.388504982 CET	47960	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:04.392501116 CET	65525	47958	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:04.393284082 CET	65525	47960	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:04.393345118 CET	47960	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:04.393410921 CET	47960	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:04.398144007 CET	65525	47960	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:06.177489996 CET	65525	47960	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:06.177907944 CET	47960	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:06.178426981 CET	47962	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:06.182677031 CET	65525	47960	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:06.183186054 CET	65525	47962	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:06.183259010 CET	47962	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:06.183300018 CET	47962	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:06.188061953 CET	65525	47962	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:07.952018976 CET	65525	47962	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:07.952311039 CET	47962	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:07.953068972 CET	47964	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:07.957058907 CET	65525	47962	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:07.957819939 CET	65525	47964	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:07.957912922 CET	47964	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:07.957979918 CET	47964	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:07.962677956 CET	65525	47964	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:09.739178896 CET	65525	47964	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:09.739562035 CET	47964	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:09.740299940 CET	47966	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:09.744415998 CET	65525	47964	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:09.745085001 CET	65525	47966	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:09.745163918 CET	47966	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:09.745233059 CET	47966	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:09.749993086 CET	65525	47966	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:11.514700890 CET	65525	47966	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:11.514914036 CET	47966	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:11.515484095 CET	47968	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:11.520442009 CET	65525	47966	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:11.520930052 CET	65525	47968	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:11.520982981 CET	47968	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:11.521012068 CET	47968	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:11.526508093 CET	65525	47968	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:13.315239906 CET	65525	47968	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:13.315486908 CET	47968	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:13.316052914 CET	47970	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:13.320278883 CET	65525	47968	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:13.320822954 CET	65525	47970	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:13.320887089 CET	47970	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:13.320947886 CET	47970	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:13.325757027 CET	65525	47970	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:15.095912933 CET	65525	47970	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:15.096362114 CET	47970	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:15.097029924 CET	47972	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:15.101200104 CET	65525	47970	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:15.101885080 CET	65525	47972	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:15.101962090 CET	47972	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:15.102036953 CET	47972	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:15.106875896 CET	65525	47972	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:16.924804926 CET	65525	47972	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:16.925056934 CET	47972	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:16.925712109 CET	47974	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:16.929873943 CET	65525	47972	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:16.930494070 CET	65525	47974	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:16.930609941 CET	47974	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:16.930653095 CET	47974	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:16.936392069 CET	65525	47974	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:18.704335928 CET	65525	47974	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:18.704571962 CET	47974	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:18.705200911 CET	47976	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:18.709378958 CET	65525	47974	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:18.709971905 CET	65525	47976	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:18.710062027 CET	47976	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:18.710118055 CET	47976	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:18.714880943 CET	65525	47976	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:20.483388901 CET	65525	47976	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:20.483609915 CET	47976	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:20.484226942 CET	47978	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:20.488460064 CET	65525	47976	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:20.489051104 CET	65525	47978	212.64.199.97	192.168.2.13
Jan 3, 2025 08:09:20.489124060 CET	47978	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:20.489207029 CET	47978	65525	192.168.2.13	212.64.199.97
Jan 3, 2025 08:09:20.494076967 CET	65525	47978	212.64.199.97	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 3, 2025 08:08:30.723958015 CET	192.168.2.13	8.8.8.8	0x8f80	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:08:30.723992109 CET	192.168.2.13	8.8.8.8	0x1c1b	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 3, 2025 08:08:31.186789989 CET	8.8.8.8	192.168.2.13	0x8f80	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 3, 2025 08:08:31.186789989 CET	8.8.8.8	192.168.2.13	0x8f80	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: mipsel.elf PID: 5500, Parent PID: 5424

General

Start time (UTC):	07:05:44
Start date (UTC):	03/01/2025
Path:	/tmp/mipsel.elf
Arguments:	/tmp/mipsel.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: mipsel.elf PID: 5502, Parent PID: 5500

General

Start time (UTC):	07:05:44
Start date (UTC):	03/01/2025
Path:	/tmp/mipsel.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: mipsel.elf PID: 5504, Parent PID: 5502

General

Start time (UTC):	07:05:44
Start date (UTC):	03/01/2025
Path:	/tmp/mipsel.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mipsel.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/Infected.log

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: mipsel.elf PID: 5500, Parent PID: 5424

General

Chronological Activities

Analysis Process: mipsel.elf PID: 5502, Parent PID: 5500

General

Chronological Activities

Analysis Process: mipsel.elf PID: 5504, Parent PID: 5502

General

Chronological Activities

Linux Analysis Report
mipsel.elf